last executing test programs: 1m25.228874898s ago: executing program 1 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x2, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0xac7, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x9, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) 1m25.169936076s ago: executing program 1 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d105012000100102030109"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m22.716407485s ago: executing program 2 (id=251): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xc4b2) 1m22.611834461s ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x2, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0xac7, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x9, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) 1m22.610812461s ago: executing program 2 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090325bd7000ffdbdf2508"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) 1m22.530295567s ago: executing program 2 (id=254): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x2, 0xb, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x0, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x0, 0x0, 0x6, 0x9, 0x10000, 0x4, 0x7, 0x0, 0x5, 0x0, 0xf, 0xc94, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0x8, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x6, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) setxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={'U+', 0xfffffffffffffff7}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x882, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x400) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 1m22.485682798s ago: executing program 2 (id=255): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000000)=[@nested_vmlaunch={0x12f, 0x18}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x7c, {0x3, "c744240048000000c7442402c9ba0000c7442406000000000f011c24c4a139e00cf464450f070f01b000000000440f20c03509000000440f22c0c4a21d2d692048b800000000008000000f23d80f21f835400000800f23f8c4c2b93f2ef30fbd5640f2af"}}, @nested_load_syzos={0x136, 0x118, {0x1, 0x2, [@nested_amd_vmload={0x182, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x90, 0x2, 0x8, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0xff}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x6, 0x2}}]}}, @wrmsr={0x65, 0x20, {0x974, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c12, 0x4, 0x6, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x68, 0xc, 0x8, 0x8}}, @code={0xa, 0x6f, {"460f07b9fc090000b80f300000ba000000000f303e470f01c366baf80cb850adb78bef66bafc0c66b81dac66ef66450f3881a90028000066ba400066b8682d66efb9800000c00f3235004000000f30470f07410f01b48bbbeb49d50f212c"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x0, 0xdc}}, @nested_amd_invlpga={0x17d, 0x20, {0x10000, 0xf59b}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x99, 0x5, 0xfffffffffffffffb}}, @wrmsr={0x65, 0x20, {0x773, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x36, 0x1, 0x1}}, @in_dx={0x69, 0x20, {0xaf4e, 0x6}}, @wrmsr={0x65, 0x20, {0x9cb, 0x101}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x5, 0x3c28597, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xc, 0x7f, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0xa371, 0x10001}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x3, 0xad000000000000}}, @wr_crn={0x67, 0x20, {0x4, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0xaba7}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_code={0x12e, 0x79, {0x3, "470f017e2266baa000b800000000efc461fb2ce2660f381d06b9370b0000b8ac9080caba000000000f300f30c744240093ba0000c74424020000c0fec7442406000000000f01142466baf80cb812585588ef66bafc0c66edf3f4c443014b4a00ba"}}, @wr_crn={0x67, 0x20, {0x8, 0x116b75ca}}], 0x61c}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000680)="c48135e133c4c1a9fe0644dae9b9800000c00f3235000100000f300f2252450f017b510f1862003e65f30fc7b30c000000b8010000000f01d90f01cf", 0x3c}], 0x1, 0x0, &(0x7f0000000700), 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000001d00)={&(0x7f0000000740)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000780)="933f00c3a379", 0x6}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="ebb29976b555749079710a6a684f40aafa0cfc09209bb3976ed97c5137de6b69357d508acfb14c61b994d8921e672668894bbf187f2944c54b854e075f6db2149954987fe266a7330be5472c3c91f3bd21f9f95e16c5d8a0673e1d4b440147964b81185e25f2c4bcf2696533cc5416b5ec3232001a0ade4f91", 0x79}, {&(0x7f0000001840)="550cbe5af02a80128b2593a945467ee2e444007cb673ab35cb7149fd6371854218015b4198e5407dd4b74af1b5c3f63ab299ddd73589042721663fd50b914d96dafb1542248ec147a3e80216239a11e05ca555d28dc7f8adea47e7529c1e342a6c541a1d11a48a10f3d9a1b029d1da6f9a6c63f7c43d80da8c3ebf23936a5e725bc30e7a60a2e31b96640d21869f4f07dc2c45ee69f8981fa37c53a2972842fbd628344fdc87812967a58dff32168f7d3ac8eaa5104b898cddaa375a1974bcdecf05c4e744604126a1028c8ef28483d78d55e3cb", 0xd4}, {&(0x7f0000001940)="64fb924b81cd07a6c50c66015f9eafd80b3b2fc6877167b6158ff4c5bba13965e0200ced", 0x24}, {&(0x7f0000001980)="e9059a06022b9336fb8f07c7f251e008ba4e3be611b209afcb9cbd98698c1a056bf69ca2283a3867e5b297e4f958ec8ff95997748d091985534a7098a2c7f5dbcdc25251ce3546a90f18cb0a4063147dc53e08eb1d38fd677c3941322afa4fbcd0bc5fbea7ef4990969f4f0d5683c2780d6011d7fbc0c3b1025bd71eaa928277b8430a5beab3eccea95b393841499ae2b3c9a771e24f415bba496be02a36db", 0x9f}, {&(0x7f0000001a40)="b344401f29812612d5b61183c6aade82fd231219dbda8b600917651f1b895b7edc290aa65553d077ec", 0x29}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="d5bba1f86acb16b4123baf79b498144f016e8bcfce7df65bd9b96f22c4f2d8720f154c11fb6c9bb9f8a6eec73460eeb9eef4fb5dfa39f1c435926c6da7569831086dc16f8b77534f7ab84b8d3ed62f101abcedfbaa07a22eae0364cc75716232a887905f493432c5fc776f8460960adb3e5adf0bd88b32e4783d345495305a0f99166907ba6779a92923aa59d19f4e511a4ac6460d637d79085ed4dc6f40ce9fb4015f3b5d63f5c66111980bbaf547ba26616d1994a5042ed6122210605579b16bdce8331f3df1f5cbc1780d4cdbe7788ec4bcb407de03a25e316df6", 0xdc}], 0x9, &(0x7f0000001c80)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0xa}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x60, 0x4000800}, 0x2000) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000002d80)={0x6, 0x40c, &(0x7f0000001d40)="2b2db47938c61615fe550d12baed35d349374a9ced82edc4209d34", &(0x7f0000001d80)="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", 0x1b, 0x1000}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000002ec0)={r1, &(0x7f0000002dc0)='&}^\x00', 0x200400, &(0x7f0000002e00)={@align=0x7, {0x5, 0x0, 0x0, 0x9}}, 0x8, &(0x7f0000002e40), &(0x7f0000002e80)=0x3}) sendmsg$nl_route(r3, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)=@getnexthop={0x30, 0x6a, 0x602, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}, @NHA_OIF={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40000) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) mprotect(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000003040), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48000) write$dsp(r3, &(0x7f0000003140)="d4f1aabbe9c85e90408dcd58b489aeebb7fc3bd58dd754d044893a327c4aea823e83087a8f8823f94a809371704d595c57d7c8f490b85d99666eb318cf8cfcae1b9ba0422f59dde823f49cf4684ba720f00f6550e1dacc12ae3d6780e14a97a95e9fa4b513812f7be1e8bbf2d4b7daf8d1548d9b11209264aeb17349ebb57a29094a68067865ce63f1c56cda17dbf6346275cda947c04f5fc8d9c129f2c2cff53399908bdbb52bcb7382d80259f0728060a27817952ada5d5f691fb4f48b9d7e33f7affbb21060f61f42c7", 0xcb) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003280), r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000003400)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)={0xcc, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf1c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5e}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003440)={0x0, @in6={{0xa, 0x4e22, 0x1cd5349, @remote, 0x330}}, 0x2, 0xfffffffa, 0x800, 0x296003b2, 0x7fffffff}, &(0x7f0000003500)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000003540)=@assoc_value={r7, 0x2}, 0x8) write$selinux_load(r3, &(0x7f0000003580)={0xf97cff8c, 0x8, 'SE Linux', "fa6e8ca5137a50ee0c44c9127c30cfcaa802ab0d64d4cfbd6ef6804b65102aeec35321fcec932bc7b0b240f9b7d464a990ab8c5b2720618f15cba21e5d5e948ec3e05e40e4761277fd"}, 0x59) write$cgroup_subtree(r3, &(0x7f0000003600)={[{0x2b, 'net'}, {0x2b, 'rlimit'}, {0x2d, 'memory'}]}, 0x15) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0xa0, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1d3}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000805}, 0x40004) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000003800)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc}, @ethernet={0x6, @remote}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x6, 0x0, 0x0, 0x0, 0x4, &(0x7f00000037c0)='bridge0\x00', 0x7, 0x8000, 0x9}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000003880)={0x7, 0x0, [{0x6, 0x9, 0x5, 0x5, 0x7, 0x6, 0xfffffffb}, {0x6, 0x6, 0x45e989add855cd29, 0x4, 0x2, 0x5}, {0x80000007, 0x8, 0x1, 0xb, 0x800, 0x7fff, 0x82}, {0x40000001, 0x4, 0x7, 0x1, 0x0, 0x2, 0x400}, {0x8000000a, 0x101, 0x4, 0x0, 0x80000000, 0x0, 0x10}, {0x80000000, 0xfffffffb, 0x1, 0x6, 0x1, 0x9d91, 0x2}, {0x40000001, 0xb, 0x7, 0x7, 0x2, 0x8, 0x5}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f00000039c0)={0xc7, 0x0, 0x1}) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000003a40)=0x2) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000003a80)=0x4, 0x4) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000003ac0)={0x1ff, 0x2, 0xf53, 0x0, 0xf}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000003b00)={'veth1_to_bridge\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) fsetxattr$security_selinux(r4, &(0x7f0000003b40), &(0x7f0000003b80)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003bc0), 0xc, &(0x7f0000004000)={&(0x7f0000003cc0)=@polexpire={0x310, 0x1b, 0x20, 0x70bd28, 0x25dfdbfe, {{{@in=@broadcast, @in=@broadcast, 0x4e22, 0x495, 0x4e23, 0xfff7, 0xa, 0x80, 0x20, 0x11}, {0x4, 0x80000000, 0xf, 0x8, 0x81, 0xc7f6, 0x4, 0xffffffffffffffff}, {0xa, 0x4, 0x2, 0x400}, 0x7, 0x6e6bbf, 0x0, 0x1, 0x0, 0x3}, 0xd4}, [@algo_aead={0x131, 0x12, {{'aegis128l-aesni\x00'}, 0x728, 0x0, "2a77c6927533c148730314c3c8e6be39cc4e338e170824c472dc4851d5c8bde1bfa524bac8c08a1638a9fd09d6e94cc7dfa8768b3b953e7e9f7f53bbfac6604941bbcf7504819d552956d506145a431269e8d57931853c498ec96a7f8774241e3a801a67a77b1ab86a93e3d7f1f7be26bfe9f74b2737d0908805ec812f35e99495c37d9d21103c867de7a45cec2c8d126cf5e8c4fee360a49f70caf8e71f793fd16a999c1a379284d785cdd6bb6856ba8656a75a11630beeb984b8f77efc0f848bb5da38a8fae891182fca7509882fbc6cec75d3e25993e122837684dca1915c2751439076"}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xa}}, @algo_comp={0xed, 0x3, {{'lzjh\x00'}, 0x528, "21939cff3871f6cddbd993355af3bdc1844abf3f7317ed9227e31ee13fe9e9b3f6f8207ce79f76a048290dabace955b3e7c058eda70ee67bb14205791ee64f1f9e0e4685cc5238275fd1d3a9782c1475826fac25dc379f062d8fd257bbe386b13a02324710aad5d25de6d9b24d04dbf0e1b754735a63ed5c6a0117f4afcb9f0d14e3f75d2cf4a4be52836065af7e2bca97f9d530d4a6698510d792c95d7b1a48af01bf17c2"}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) 1m22.355340867s ago: executing program 0 (id=258): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chmod(&(0x7f0000000040)='./file0\x00', 0x34a) 1m22.341968432s ago: executing program 0 (id=259): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) write(r0, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=1', 0x1f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4a23, 0x200000, @loopback, 0x4}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x83}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4, @loopback}, @in6={0xa, 0x4e21, 0x5, @empty, 0x8e1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xfeff}}, 0x8, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c) recvmmsg(r2, &(0x7f000000a940)=[{{0x0, 0x0, 0x0}, 0xb48b}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r8, r9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000180)={r10, 0x10}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r10, 0x7}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) 1m22.251339297s ago: executing program 0 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000001000900020073797a32000000001400078008000840000000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034718bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m22.180807947s ago: executing program 2 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x2, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0xac7, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x9, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) 1m22.1457831s ago: executing program 32 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x2, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0xac7, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x9, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) 1m22.089673052s ago: executing program 0 (id=263): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x2, 0xb, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x0, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x0, 0x0, 0x6, 0x9, 0x10000, 0x4, 0x7, 0x0, 0x5, 0x0, 0xf, 0xc94, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0x8, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x6, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) setxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={'U+', 0xfffffffffffffff7}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x882, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x400) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 1m22.089536762s ago: executing program 1 (id=264): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m22.016586609s ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="24000000200081dc0157700003001000020000000100000397a20000050016000800"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x4c, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m21.781187494s ago: executing program 0 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000001c0012800b00010069"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m21.728563329s ago: executing program 33 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000001c0012800b00010069"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m21.220230987s ago: executing program 1 (id=273): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x2, 0xb, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x0, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x0, 0x0, 0x6, 0x9, 0x10000, 0x4, 0x7, 0x0, 0x5, 0x0, 0xf, 0xc94, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0x8, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x6, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) setxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={'U+', 0xfffffffffffffff7}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x882, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x400) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 1m21.167251897s ago: executing program 1 (id=275): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0xc0ed0000, &(0x7f0000000300)={[{@name={'name', 0x3d, ':-'}}]}) 1m20.68853822s ago: executing program 1 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000001000900020073797a32000000001400078008000840000000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034718bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m20.564847356s ago: executing program 34 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000001000900020073797a32000000001400078008000840000000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034718bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m20.236860876s ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400f0ff2100090002000000ff1d85dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1m20.137717553s ago: executing program 3 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x10ba00, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f00000000c0)={0x101, 0x1}) (async) r5 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_ethernet(0x12b, &(0x7f0000000300)=ANY=[@ANYBLOB="7d785106b46e0180c200000191dd6062d30800f506fffc01000000008000000000000000000000000000aa00004001859539f7b6a075cf0d1b402b70e50d3093ba6512d481c72ec117a2989f07ba4b3238c2579b36474868efb2232e1d220bf360e65c9d2f0e11105f5dea13ef5fa8b49a9990b67b681f9e087017cbd2cb76d1ecf3e908372699fe710c0200887da66a9aa212367c5ba1e99e4972f8a7340f34017211163130e20056ebd284ddf3b6eb244898db568ff3bd0b0f3f997e4d6adf48000000000000000000000070a815eb43c86e4ee7339bf5ce0ce5937f696d095eadc452f42b3a23b96ea631e1e9b0462af09fed393a6c6f9ff58fe6c57ba904966c1fffd9f4234e00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000076061d2f9dd5584101ca2257271da6b70b1e87cc803710aa3c8f0dfb033d150fa3db61518adecaed8242353172677dab5ad79f673084e6f0139d477d6adb6e896b40dec8343b3657a59f975ffc66c2f69b81966b936f711efca72051e3bbfc7aad6ebbe0c8fdb0ab674c18b830baeed837052c111305ba8c5888cf611954210e580d9f096a0be606dbe7829b8e2d909ecf0d2fbc06f0aa3850cb93d5497b4ee6bdba6b7a012c237d43f3f2094fe804dbddcd983698ae3f7f97675dd604f10938019d5051fa035b7a3b5ce539ae92aaf590a9902763cef5988ed0734b9424ae9227"], 0x0) (async, rerun: 32) r9 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000001c0), 0x4) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x121200) ioctl$RTC_UIE_ON(r10, 0x7003) 1m19.789609283s ago: executing program 3 (id=282): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4008c0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) r2 = syz_open_dev$sg(&(0x7f0000000180), 0xfffffffffffff845, 0x10140) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) io_setup(0x2, &(0x7f0000000200)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0xfffffff8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf2000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbba5bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe15}, 0x48) 1m19.651652577s ago: executing program 3 (id=283): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x2, 0xb, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x0, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x0, 0x0, 0x6, 0x9, 0x10000, 0x4, 0x7, 0x0, 0x5, 0x0, 0xf, 0xc94, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0x8, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x6, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) setxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={'U+', 0xfffffffffffffff7}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x882, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x400) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 1m19.617115348s ago: executing program 3 (id=284): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x0, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x0, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getpid() (async) getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x200000000000002, 0x7], [0x8, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x7, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xdfffffffffffd, 0xe4, 0x11, 0x6, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0xfffffffffffffffb, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) sendfile(r8, r7, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x6000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x6000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) 1m19.370433284s ago: executing program 3 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m19.30783187s ago: executing program 35 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m3.627680101s ago: executing program 7 (id=552): r0 = socket(0xa, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@sco, {0x0}, 0x0, 0x19}, 0xa0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x600) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x6, 0x6}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a3", 0x21}], 0x1}}], 0x1, 0x2090) sendto$inet(r4, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x44055, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0xc5f}, 0xc) 1m3.549058928s ago: executing program 7 (id=553): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0xfffffffffffffeea) 1m3.547802159s ago: executing program 7 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 1m3.331404385s ago: executing program 7 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000001c0012800b00010069"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m3.328125923s ago: executing program 7 (id=556): r0 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000fc0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000000)=""/224, 0xe0, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r6, r6, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@allocspi={0x100, 0x16, 0x20, 0x70bd2d, 0x25dfdbfb, {{{@in=@remote, @in=@multicast2, 0x4e22, 0x7, 0x4e22, 0x3, 0x2, 0x20, 0x80, 0x4, r5, r6}, {@in=@loopback, 0x4d5, 0x33}, @in6=@local, {0x2, 0x5, 0x3, 0x7, 0x17, 0x6, 0x4, 0x6}, {0x100000000, 0x8, 0x3, 0x1}, {0x5, 0x6, 0x30a6}, 0x70bd29, 0x3503, 0xa, 0x0, 0x1, 0xa6}, 0x8, 0x7ff}, [@iptfs_init_delay={0x8, 0x27, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x4070f4d5302310b8}, 0x1) ptrace(0x10, r4) ptrace(0x420e, r4) ioctl$MEMERASE64(r1, 0x40104d14, &(0x7f0000000100)={0x1, 0x5}) write$P9_RLERRORu(r1, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1f) sendto$l2tp(r0, 0x0, 0x0, 0xc001, &(0x7f0000000000)={0x2, 0x0, @remote, 0x5}, 0x10) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/74, 0x4a}], 0x1) 1m3.17922629s ago: executing program 7 (id=557): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0xfffffff8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 48.173648769s ago: executing program 36 (id=557): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0xfffffff8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 43.656610872s ago: executing program 5 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x9360, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0xfb, 0x4, 0x5, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 43.580940374s ago: executing program 5 (id=818): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x2, 0xbef4, 0x84800, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, r0, 0x8c1ab000) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0x7}, @wrmsr={0x65, 0x20, {0xa2a, 0x16000}}, @in_dx={0x69, 0x20, {0xec83, 0x4}}, @uexit={0x0, 0x18, 0xf8}, @set_irq_handler={0xc8, 0x20, {0xf4, 0x2}}], 0x90}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0x5, 0x5, 0x0, 0x3, 0x5, 0x1, 0x5, 0x0, 0x40, 0xf4, 0x3, 0x0, 0xe876, 0x1ff, 0x3, 0x85, 0x2, 0x46, '\x00', 0x3, 0x7ff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f00000001c0)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x3}}}, 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x3, 0x10, 0x64, 0x7}, {0x749, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000280)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r6, &(0x7f0000002340)='./file0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r8, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r9 = syz_open_dev$loop(&(0x7f00000024c0), 0x7fff, 0x4080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000002500)={{0x4, 0x5, 0x4228, 0x81, 'syz0\x00', 0x9}, 0x1, [0xc68, 0xe, 0x34, 0x4, 0x8000, 0x3, 0x1, 0x9, 0x4, 0xfffffffffffffff7, 0x80, 0x5, 0x1ff, 0x6, 0x101, 0x101, 0x6, 0x5, 0xfef, 0x3, 0x9, 0x92, 0x2, 0x215eed02, 0x2, 0x9, 0x7fff, 0x2, 0x0, 0x4, 0xa92, 0xfffffffffffffffc, 0x7, 0x8000, 0x8, 0xffffffff, 0x82a, 0x2, 0x7ff, 0x7, 0x1, 0x84, 0x4, 0x100000001, 0xff, 0x101, 0x1000, 0xffffffff, 0xbcd0, 0x9, 0x1, 0x1, 0x0, 0xe, 0x9, 0xfffffffffffffff7, 0x820e, 0x10, 0x4, 0x1, 0x0, 0x7, 0x4, 0xc00, 0x200, 0x3, 0x5, 0x0, 0x0, 0x5, 0x204, 0x56, 0xf02e, 0xa5, 0x7, 0x7ff, 0x3, 0x1, 0x8, 0x1, 0x143c, 0x10000000000, 0x5, 0xffff, 0x100, 0x800, 0x3, 0x7, 0x2, 0x1, 0x20, 0xbe09, 0xfffffffffffffff7, 0x2, 0xd3, 0x7fff, 0x4da798bd, 0x9, 0x5, 0x5, 0x600000, 0x7fff, 0x5, 0x1, 0x2, 0x8000000000000001, 0x9f9, 0x6, 0x7fff, 0x10000, 0x9, 0x9, 0x3ff, 0x1, 0x5, 0x1, 0x4, 0x7ff, 0x8, 0x3, 0x9, 0x0, 0x9, 0x1, 0x2, 0x6, 0xabc4, 0x3]}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)=@ipv6_newaddr={0x40, 0x14, 0x20, 0x70bd2a, 0x25dfdbfe, {0xa, 0x40, 0xa70ac94e72f51457}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x1000, 0x6, 0x85}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) ioctl$IOMMU_VFIO_GET_API_VERSION(r10, 0x3b64) read$midi(r10, &(0x7f0000002b40)=""/166, 0xa6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r4, &(0x7f0000002c00)=@ieee802154={0x24, @short}, &(0x7f0000002c80)=0x80) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000002cc0)) r12 = dup(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000041c0)={'batadv0\x00', 0x0}) sendmsg$inet6(r12, &(0x7f0000004480)={&(0x7f0000002d40)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5d5}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000002d80)="77e255a61233e8ac13376cd1ff6fc08d8bfeb207320d5a685034904472f13884ada7dfddedf68885466487f57f9a2ec3b6937189b7ef4fb7b391591c3e71371c6e3f6d363e8c8d426deb7d767c71faa9db0bc3565dd3b225696c4c6129e65fbff9ff47e144e718d03e80e52f07e2eeaa8cbbcd3540994cc5c42d2bab747777732cd0179c66fd26ce16ce4beeb407dec6512256d2a79526bb35b2ec667551fc13a342535cc975f3cb369d00e6b75aa5bf833cb0942f394f14126f211bfb960538e5a1d25d420166aa238ad1e31042bff4d847b0fca7e01fcdad62a89a7fb403d4ca", 0xe1}, {&(0x7f0000002e80)="04faa11f1552c958a4f7f056e2ce8831a570a0ab302de1fb4aec69c7ee5b8256c7c4a4bddfdb55c5edde91e06a57157c7c92daf293eb7660ee784374b780ef4c541708495de96c9ee171", 0x4a}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)="6aacd9f5974791f663b6e8a7f499ad", 0xf}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="2bc9d1c551f1759a1e51e634dced93b1b120a6ba48ea6e58432d05063f1f3809e36a874c475a2995e5015bcabb47af6413c91e0d4c35023a7921a48c823b62fa73b777523f4f23b3984c643c3ddcccf469dbbb1f2789017bd2383714e7558b3d99a9a6debc010ada92d554c5548713d871467561c48e0ba14adb4ab0f9c9b73ed7e0f50ed7fb83f2af69660e2221311a33d62c1ce659f584e9c8ac", 0x9b}, {&(0x7f0000004040)="59d9c3bc7e7fd3de7a557c7bb4738cc5bb070c3ff63c389c550c60b94ea70f3f667543eda4f11ddeb49dfe4fcd1b86f1a80295225c35e3d16176ccc68b922e3c77cf0a7e09bd0e33f6f6255e63f0a01cf89f566b85baa72cf1c9f10bef2192746066167bb6c7089e493fd48cf7e8626b56e6d77cfd1c173d44e1c06e420ccd614fd6ac92f6efc09412185f65b6bec3857a078361aceffb8a55c7a46bae773804393255c34a0e1643bd405ef55811ada562b0d0c887d843a6c8bf01bd350f9ee91f78d5d100605fe37d67710098d0f4cec865e0c81710859f6c96c4341da2ab2dc3f06f", 0xe3}], 0x7, &(0x7f0000004200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1b, 0xa, 0x0, 0xa5, 0x0, [@private1, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x33, 0xe, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x7, [0x4, 0x7, 0x0, 0x3, 0xd, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7f, 0x5, [0x0, 0x6]}}, @pad1, @hao={0xc9, 0x10, @empty}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts={{0x20, 0x29, 0x37, {0x2e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x87, 0x11, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x5b}, @jumbo={0xc2, 0x4, 0xffff}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @calipso={0x7, 0x50, {0x1, 0x12, 0x4, 0x1, [0x0, 0x2d08, 0x10000, 0x3f0, 0x8ba, 0x6, 0xfffffffffffffe01, 0x8, 0x7]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r13}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x258}, 0x4000800) 43.580400324s ago: executing program 5 (id=819): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0x7, &(0x7f0000000180)) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003dc000/0x3000)=nil, 0x3000, 0x2, 0x8031, r3, 0x3a8ba000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) sendto$l2tp(r0, 0x0, 0x18, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback, 0x2}, 0x10) 43.547728263s ago: executing program 5 (id=820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0xffffffff, 0x87c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x23c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000ff, 0x0, 0x81}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 43.130267868s ago: executing program 5 (id=827): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x2122, 0x2, 0x3, 0x10, 0x0, 0x1}, 0x30, 0x2) landlock_restrict_self(r1, 0x12) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r3 = open_tree(r2, &(0x7f00000002c0)='./sys_mount\x00', 0x10000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x89101) move_mount(r3, 0x0, r4, 0x0, 0x46) (async) unlink(&(0x7f0000000200)='./cgroup\x00') (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x84}}, 0x4) listen(r0, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) (async) r7 = openat(r3, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x39) write(r7, &(0x7f0000000440)='1\n', 0x2) (async) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000640)=ANY=[], 0x2f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8084}, 0x20004450) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340059551bc5eee547f1cb7c2db7de855401800c0008007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000ff0014000280080002400000001508000141000000080900020073797a250000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) r10 = dup3(r9, r8, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r11, &(0x7f0000000300)='b', 0x1) r12 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="43ee25") getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x401}, &(0x7f0000000280)=0x8) (async) process_vm_readv(r12, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/107, 0x6b}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="49bd6268d08604f0872b984780bdec16c9aba3b046", @ANYRES8=r10, @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESHEX, @ANYRES32=r11, @ANYRESHEX], 0x0) 43.020314783s ago: executing program 5 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xa, {0x0, 0x2, 0x3, 0x5}}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') 28.000158065s ago: executing program 37 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xa, {0x0, 0x2, 0x3, 0x5}}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') 7.20926875s ago: executing program 4 (id=1419): syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.980650354s ago: executing program 4 (id=1421): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 6.911061799s ago: executing program 4 (id=1422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_connect(0x0, 0x4cf, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x9b, 0xae, 0xf3, 0xff, 0x403, 0xf3c1, 0xa711, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bd, 0x3, 0x5b, 0x6, 0x60, 0xf8, "", [{{0x9, 0x4, 0xdd, 0x7, 0x0, 0xfe, 0x45, 0x70, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xf800, 0x2f}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x4, 0x6, [0x1, 0x9, 0x2, 0x8, 0x3, 0x3], 0x8}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x3, 0x81, "e40c"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x2, 0xd4, "a6e0"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "1b6af3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x73c, 0xc, 0x9, 0xb}}]}}, {{0x9, 0x4, 0x87, 0x75, 0xa, 0x5d, 0x3a, 0xd9, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x975, 0x4e}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x1}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x1, 0x7, 0x6, 0x0, 0x2], 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x1], 0x7}, @processing_unit={0xd, 0x24, 0x7, 0xa, 0x3, 0x9, "54e0065d47e2"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x403, 0x5, 0x81, 0xd, 0x7, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x1, 0x3, 0xfb, 0x4}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x7f, 0x7f, 0x5, [@generic={0x2b, 0x27, "8d73479635b1344711584c30cc858d02231275f3b012b1c8cc8c11343a88fdb6805f163081b4ee8012"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xd}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0xad, 0x6, [@generic={0x79, 0xb, "80970feac2bce96a2ff5abea8bad4e2661a2f8fc21e82644ad667cac8c822727b7c2edf0586825e21b29f1b224708f4174abf5c0e8fd189e7894dfa8d16d11eceb27f2821e4d95951dc840cd4ebd5a8b7946137ec580ec9d3f81f505e2f4605ca877aa69daf1a2dd9a576c100204d5283cc5c58832bba3"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x8, 0x9, 0xd, [@generic={0x9c, 0x4, "37b2033802776cb8c323f4341c37b6c49df18bfcd919bd5b89f32c5944ef43b71240f89c85ab48bbecbbe1ca1ae06914f03145329a75c3453f754993213e985eaf446337fd88df1b2e29a638fb99f948e2ccf64c5d2fabc7f22ebfc02d6b8d0443022ab19b645d6f7204da049ae68445ff55a3fbd61f1e213be7ef6d0e1a51ea7b03f0f89f94aa47323de198a349ca6af4a27d561878a9afd291"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xa4, 0x0, [@generic={0x95, 0x23, "4ae5e952a73ec36707b453ff46d4a1fc6c07dfcc89573f75b331c18b155a601cbc9a472c06defc3160173f3e2fca6dd8ce011bd7507ac74b8862c96f4d3c414cd177a31e5d3e3a3ced0f584b396c01bed8a2e4905d2d59158527ec68c2be643da769a9c20e8c067e91d8c0e8c700a7480f41a797bc2100d5b5c81a5596cfbc5c6af1e17a70be7262b098b2999b0c87bb29632b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x3, 0x10}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x80, 0x1e, 0x70, [@generic={0x7c, 0x10, "4ff6e0d802257901ebdca66f5818692e661ef213bf1356b7eee9148c21192aadab49f556ef5227f39809f676f43900d0b30719fd6b4d7a81c944cc0c100a6a2bb4bf70d9361a6fc65321dd962140354d005db14a6004a93909ed29ac34172dd07f50adacd45bf70a3b278c5ba751968e4611094e66afce32462e"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x5, 0x8f, [@generic={0x19, 0x6, "851d4490f2e29d9234e1bda4f450dcc5aed792ff066f5f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x1, 0x64}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x1d, 0x2d, 0x1}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x5, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xffff}]}}]}}, {{0x9, 0x4, 0x60, 0x0, 0x3, 0xff, 0x5, 0x12, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'q@'}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x4, 0x40}, [@ncm={0x6, 0x24, 0x1a, 0xfff8, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x80, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x10, 0x7f, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @ncm={0x6, 0x24, 0x1a, 0xa, 0x21}]}], [{{0x9, 0x5, 0xb, 0x1, 0x10, 0x7, 0x43, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x68, 0xfb, 0xf7, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x7}, @generic={0xba, 0xd, "586eb9d09079c0b30137ac86d75d9bfdc9b2413f76fbf0528f01e0835f6b56b0269748fe6c93b794ae4b712a82e6948d96eaf4eafb48ec346f64bfcd2acf5dd889cb8056d835d8de832b8909339d662d800b13ab179933d3e18c0da5b5b130ff7e240b8a68a561bedc6a7f83fdff44c324060fa27f49dae89eb850bc83d81ba4f6deed97cb49382723e9693efc6132a1f766d1daae23b0c1ea36b20ef6575d69d08a027ad119cc447f62947ba0c58940ceacf2ee904c3e60"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x18, 0x8, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x81, 0x81, 0x9, 0xff, 0x8}, 0x55, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f5500060a1003020100060409000a100300000000fa5ce60a10030000000404020010100aafa10000000fff00000c00000018100a09230000000000ff0100000a100302040007010180"], 0x5, [{0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "be6112fbe2b61e52f8a32d14a8634b9930d022702e78618f193e6a55e683aff82fe3144e9ac0614d88e46bd89a4c436c507683f4bf360c71685374ec5a8e07e3038a721fc785fde4da4143c7c2f67b948f0e7c97be87b63463d429d4a6d6ed955981cbbd24ee6525e52cc36dc20fab42a6d0796e9ce5b3e8745cffe93f13b2f76b096becc7ab3d8964c38bd6e6"}}, {0x45, &(0x7f0000000700)=ANY=[@ANYBLOB="4503704252f9b14099a0f84ca44e18b74d4946ed162daffb1e2e5a050647b643b2e96be65ac433543bcfc563b85ed1fdce60add083215b353f50c8f77138b02db97696da14"]}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x80000000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x0, 0x9, 0x1, 0x6126, 0x8d], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.809653233s ago: executing program 4 (id=1468): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000040c0)={0x0, 0x0, 0x2, 0xc2c}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8010}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20081, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x8019b}]}) write(r2, &(0x7f0000000000)='3', 0x4e) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.635039448s ago: executing program 4 (id=1474): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000a041}, 0x800) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rxrpc/idle_conn_expiry\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r2, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) 3.495766568s ago: executing program 4 (id=1476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newnexthop={0x17, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xc8c7) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x203, 0x2006, 0xffffffff}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) ioctl$XFS_IOC_INUMBERS(r7, 0x80405880, &(0x7f0000000300)={{0x447, 0xcee1aa2e6a974c65, 0x3d85ced2, 0x2f8, 0x9}, [{0x2, 0x5, 0x4, 0x40}, {0xf, 0x3, 0x8, 0x3}, {0x0, 0x200, 0x4, 0x6}, {0xab0a, 0x6, 0x1, 0x3}, {0xffff, 0x3, 0xe, 0xa8}, {0x7ff, 0x1000000000000000, 0xb, 0x9b}]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x3}, 0x8) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x14810) ioctl$sock_proto_private(r4, 0x891d, &(0x7f0000000f80)="b43a") sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.101103031s ago: executing program 6 (id=1500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x0, 0x3, 0x0, 0x30, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.100666009s ago: executing program 6 (id=1502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0xffffffff, 0x87c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x23c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 1.819696748s ago: executing program 6 (id=1506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r3 = dup(r2) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r4 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x1, 0x4, 0x2, &(0x7f0000000040)={0x5, "51748c5aa07217d8d50200000000190040000001000011008000"}}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xfffffff8, 0x4) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20fb2"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.339021154s ago: executing program 8 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write(r0, &(0x7f0000000300)='offline', 0x7) read(0xffffffffffffffff, &(0x7f0000000140)=""/143, 0x8f) 1.270148415s ago: executing program 8 (id=1513): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/49, 0x31) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001e00010026bd70000000000002000000010000000000000008000100000000b5"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x7, 0x800000000004, @thr={&(0x7f0000000180)="dcfae233f8fb26c4ee6f0e554aa9d6bbcb35d9e8c115cbabee467f886afe560055e1b7c09903ccc87a4b6b9e78ecb1d0e96b588499f064d6a1c70a5524a2b2aaad7ede32edf9f922bbb74d504da2b2f0ea53935889bbfe09f2f5402ae1197e0cdd94b0de3a35f6af2cd11c83af28a1aa5385c523783a66c7714745f148b2899eed4874ee55a21739f9aef5", &(0x7f0000000240)="0f8ee4b0fdc09b75ed1922ecb79d95d52865f705b289469daadf0d36878b31a381f6f63927486ef6b542ac204c00"/59}}, &(0x7f0000000140)) migrate_pages(r1, 0xfff, &(0x7f0000000300)=0xff, &(0x7f0000000080)=0xffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x9c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x4009, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r5 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1.078704148s ago: executing program 8 (id=1514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0xffffffff, 0x87c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x23c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 859.490504ms ago: executing program 9 (id=1516): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_ublk_setup_io_uring(0x1c34, &(0x7f0000000040)={0x0, 0xbfc1, 0x4, 0x0, 0x2db, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) 750.074481ms ago: executing program 8 (id=1517): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1dadcdbe224471c, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x20004000) 599.211227ms ago: executing program 8 (id=1518): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000040c0)={0x0, 0x0, 0x2, 0xc2c}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8010}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20081, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x8019b}]}) write(r2, &(0x7f0000000000)='3', 0x4e) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 599.102355ms ago: executing program 9 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc02000000000000000000001a000000140003006970766c616e300000000000000000001c0012800b00010069"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (fail_nth: 6) 595.561346ms ago: executing program 9 (id=1520): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000040c0)={0x0, 0x0, 0x2, 0xc2c}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8010}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x8019b}]}) pwrite64(r0, 0x0, 0x0, 0xf7c) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 332.547411ms ago: executing program 6 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write(r0, &(0x7f0000000300)='offline', 0x7) read(0xffffffffffffffff, &(0x7f0000000140)=""/143, 0x8f) 322.450221ms ago: executing program 8 (id=1522): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x6}}}}, 0xf) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl(r1, 0x7fff, &(0x7f0000000080)="8d14c1cf9362de757f16a314e3af4057ddad0f7bf40c53e5eaf11161b79a1304c09a87719a77d839f34211280e2339c4845889fe8a91bafc10fa34cc33ad9e82e6f361046a7dc1740ef154cccd9b17c326e28fc1cfc16e08f797d7cdb31c7cba270c173bc0f3a9a6c56c6a757cf4abff0f247d56598da14403f260") ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 229.966103ms ago: executing program 9 (id=1523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x23c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000ff, 0x0, 0x81}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 229.727711ms ago: executing program 6 (id=1524): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xa301, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, &(0x7f0000000180)="2da83691df853e6259136ce5d25306e8007c0f292acfff09e5ad48d63c814f32a9acb0cbdd41b8bbb83744f5aea62fbac7cc6982718160651caa5f35e43e1e", 0x0, 0xc30, 0x30, 0x0, 0x4}) 146.653198ms ago: executing program 6 (id=1525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0xffffffff, 0x87c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x23c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 69.57187ms ago: executing program 9 (id=1526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100fffffff5000000000300000a2c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 0s ago: executing program 9 (id=1527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYRES16=r0], 0x28}}, 0x80) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r8, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8800) kernel console output (not intermixed with test programs): [ 112.809862][ T9563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.809881][ T9563] RIP: 0033:0x7fd43959e159 [ 112.809896][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.809914][ T9563] RSP: 002b:00007fd43a3fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.809937][ T9563] RAX: ffffffffffffffda RBX: 00007fd439825fa0 RCX: 00007fd43959e159 [ 112.809948][ T9563] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 112.809959][ T9563] RBP: 00007fd43a3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 112.809968][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.809978][ T9563] R13: 00007fd439826038 R14: 00007fd439825fa0 R15: 00007fff813aaeb8 [ 112.810001][ T9563] [ 112.969182][ T9574] bond3: (slave bond_slave_0): Device is not bonding slave [ 112.969197][ T9574] bond3: option active_slave: invalid value (bond_slave_0) [ 112.970052][ T9574] bond3 (unregistering): Released all slaves [ 113.060929][ T43] audit: type=1400 audit(1789042448.238:802): avc: denied { read } for pid=9584 comm="syz.6.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.116388][ T43] audit: type=1400 audit(1789042448.298:803): avc: denied { create } for pid=9584 comm="syz.6.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.360945][ T9616] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 113.940116][ T9632] futex_wake_op: syz.6.1106 tries to shift op by 144; fix this program [ 113.940287][ T9632] futex_wake_op: syz.6.1106 tries to shift op by 144; fix this program [ 113.954165][ T9632] syzkaller1: entered promiscuous mode [ 113.954832][ T9632] syzkaller1: entered allmulticast mode [ 113.969319][ T9632] hpfs: Bad magic ... probably not HPFS [ 114.186484][ T9649] bond3: entered allmulticast mode [ 114.186692][ T9649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.209074][ T9649] __nla_validate_parse: 61 callbacks suppressed [ 114.209088][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 114.245973][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1114'. [ 114.268518][ T9666] netlink: 'syz.6.1116': attribute type 4 has an invalid length. [ 114.286958][ T9646] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 114.286974][ T9646] overlayfs: missing 'lowerdir' [ 114.317086][ T9671] FAULT_INJECTION: forcing a failure. [ 114.317086][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 114.317120][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.4.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.317143][ T9671] Tainted: [L]=SOFTLOCKUP [ 114.317148][ T9671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.317158][ T9671] Call Trace: [ 114.317163][ T9671] [ 114.317170][ T9671] dump_stack_lvl+0x100/0x190 [ 114.317200][ T9671] should_fail_ex.cold+0x5/0xa [ 114.317220][ T9671] ? __netlink_lookup+0x652/0x900 [ 114.317264][ T9671] should_failslab+0xc2/0x120 [ 114.317286][ T9671] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.317306][ T9671] ? skb_clone+0x190/0x400 [ 114.317329][ T9671] skb_clone+0x190/0x400 [ 114.317349][ T9671] netlink_deliver_tap+0xaed/0xcc0 [ 114.317383][ T9671] netlink_unicast+0x62b/0x850 [ 114.317407][ T9671] ? __pfx_netlink_unicast+0x10/0x10 [ 114.317435][ T9671] netlink_sendmsg+0x8b0/0xda0 [ 114.317458][ T9671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.317479][ T9671] ? selinux_socket_sendmsg+0x198/0x2f0 [ 114.317503][ T9671] sock_write_iter+0x53a/0x5b0 [ 114.317518][ T9671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.317529][ T9671] ? __pfx_sock_write_iter+0x10/0x10 [ 114.317549][ T9671] ? __pfx___file_has_perm+0x10/0x10 [ 114.317582][ T9671] ? __lock_acquire+0x5c0/0x1f40 [ 114.317599][ T9671] do_iter_readv_writev+0x6f7/0x930 [ 114.317624][ T9671] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 114.317655][ T9671] ? selinux_file_permission+0x8f/0x6d0 [ 114.317679][ T9671] ? bpf_lsm_file_permission+0x9/0x10 [ 114.317704][ T9671] ? security_file_permission+0x76/0x210 [ 114.317726][ T9671] ? rw_verify_area+0xce/0x6d0 [ 114.317753][ T9671] vfs_writev+0x360/0xdd0 [ 114.317782][ T9671] ? __lock_acquire+0x5c0/0x1f40 [ 114.317806][ T9671] ? __pfx_vfs_writev+0x10/0x10 [ 114.317837][ T9671] ? lock_acquire+0x1d1/0x380 [ 114.317855][ T9671] ? __fget_files+0x34/0x3d0 [ 114.317885][ T9671] ? __fget_files+0x21f/0x3d0 [ 114.317913][ T9671] ? do_writev+0x28a/0x340 [ 114.317929][ T9671] do_writev+0x28a/0x340 [ 114.317948][ T9671] ? __pfx_do_writev+0x10/0x10 [ 114.317971][ T9671] do_syscall_64+0x123/0x790 [ 114.317996][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.318015][ T9671] RIP: 0033:0x7fd43959e159 [ 114.318031][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.318047][ T9671] RSP: 002b:00007fd43a3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 114.318061][ T9671] RAX: ffffffffffffffda RBX: 00007fd439825fa0 RCX: 00007fd43959e159 [ 114.318069][ T9671] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 114.318075][ T9671] RBP: 00007fd43a3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 114.318082][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.318088][ T9671] R13: 00007fd439826038 R14: 00007fd439825fa0 R15: 00007fff813aaeb8 [ 114.318102][ T9671] [ 114.321085][ T9671] netlink: 'syz.4.1117': attribute type 4 has an invalid length. [ 114.389982][ T9675] syzkaller0: entered promiscuous mode [ 114.390002][ T9675] syzkaller0: entered allmulticast mode [ 114.470480][ T9679] netlink: 'syz.9.1120': attribute type 4 has an invalid length. [ 114.551929][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'. [ 114.585694][ T9707] FAULT_INJECTION: forcing a failure. [ 114.585694][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 114.585720][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz.8.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.585735][ T9707] Tainted: [L]=SOFTLOCKUP [ 114.585739][ T9707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.585746][ T9707] Call Trace: [ 114.585750][ T9707] [ 114.585755][ T9707] dump_stack_lvl+0x100/0x190 [ 114.585774][ T9707] should_fail_ex.cold+0x5/0xa [ 114.585791][ T9707] should_failslab+0xc2/0x120 [ 114.585810][ T9707] __kmalloc_noprof+0xfc/0x840 [ 114.585829][ T9707] ? tracing_log_err+0x4b4/0x6a0 [ 114.585853][ T9707] tracing_log_err+0x4b4/0x6a0 [ 114.585871][ T9707] __trace_probe_log_err+0x309/0x3f0 [ 114.585884][ T9707] ? putname+0xb6/0x110 [ 114.585900][ T9707] __trace_uprobe_create+0xbce/0x2310 [ 114.585920][ T9707] ? __pfx___trace_uprobe_create+0x10/0x10 [ 114.585933][ T9707] ? trace_kmalloc+0xeb/0x110 [ 114.585946][ T9707] ? __kasan_kmalloc+0xaa/0xb0 [ 114.585959][ T9707] ? __kmalloc_noprof+0x350/0x840 [ 114.585970][ T9707] ? argv_split+0x173/0x420 [ 114.585992][ T9707] ? argv_split+0x359/0x420 [ 114.586015][ T9707] ? __pfx___trace_uprobe_create+0x10/0x10 [ 114.586038][ T9707] trace_probe_create+0xef/0x100 [ 114.586056][ T9707] ? __pfx_trace_probe_create+0x10/0x10 [ 114.586072][ T9707] dyn_event_create+0x50/0x90 [ 114.586089][ T9707] create_or_delete_trace_uprobe+0x5a/0xb0 [ 114.586103][ T9707] trace_parse_run_command+0x1ab/0x3b0 [ 114.586115][ T9707] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 114.586131][ T9707] vfs_write+0x2aa/0x1050 [ 114.586143][ T9707] ? __pfx_probes_write+0x10/0x10 [ 114.586155][ T9707] ? lock_acquire+0x1d1/0x380 [ 114.586166][ T9707] ? __fget_files+0x34/0x3d0 [ 114.586180][ T9707] ? __pfx_vfs_write+0x10/0x10 [ 114.586189][ T9707] ? find_held_lock+0x2b/0x80 [ 114.586207][ T9707] ? __fget_files+0x215/0x3d0 [ 114.586222][ T9707] ? __fget_files+0x21f/0x3d0 [ 114.586240][ T9707] ksys_write+0x12a/0x250 [ 114.586250][ T9707] ? __pfx_ksys_write+0x10/0x10 [ 114.586265][ T9707] do_syscall_64+0x123/0x790 [ 114.586281][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.586293][ T9707] RIP: 0033:0x7fae6f99e159 [ 114.586302][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.586313][ T9707] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.586325][ T9707] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 114.586332][ T9707] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000003 [ 114.586339][ T9707] RBP: 00007fae6dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.586345][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.586351][ T9707] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 114.586366][ T9707] [ 114.588672][ T9704] tcf_pedit_act: 7 callbacks suppressed [ 114.588686][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588692][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588697][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588703][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588708][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588714][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588719][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588724][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588729][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588734][ T9704] tc action pedit 'at' offset 5 out of bounds [ 114.588745][ T9704] 0: reclassify loop, rule prio 0, protocol 800 [ 114.594574][ T5734] Bluetooth: hci1: command tx timeout [ 114.626888][ T9711] program syz.8.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.753712][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1134'. [ 114.774609][ T6760] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.774649][ T6760] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.774678][ T6760] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.774706][ T6760] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.799091][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 114.799138][ T9725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.933899][ T9735] netlink: 'syz.9.1139': attribute type 4 has an invalid length. [ 114.938898][ T9735] netlink: 'syz.9.1139': attribute type 4 has an invalid length. [ 115.050696][ T9748] syz.6.1143 (9748): attempted to duplicate a private mapping with mremap. This is not supported. [ 115.230686][ T9766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.523967][ T9776] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=9776 comm=syz.6.1151 [ 115.667074][ T9778] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 115.667104][ T9778] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 115.667130][ T9778] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 115.667148][ T9778] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 115.667159][ T9778] page dumped because: unmovable page [ 115.667168][ T9778] page_owner tracks the page as allocated [ 115.667175][ T9778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 115.667200][ T9778] post_alloc_hook+0xfd/0x120 [ 115.667244][ T9778] get_page_from_freelist+0x110d/0x35d0 [ 115.667272][ T9778] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 115.667302][ T9778] alloc_pages_mpol+0x201/0x550 [ 115.667324][ T9778] alloc_pages_noprof+0x1a/0x160 [ 115.667350][ T9778] get_zeroed_page_noprof+0x18/0xb0 [ 115.667370][ T9778] comedi_buf_alloc+0x648/0xa00 [ 115.667401][ T9778] comedi_device_postconfig+0x3dc/0xbc0 [ 115.667426][ T9778] comedi_auto_config+0x19b/0x250 [ 115.667449][ T9778] comedi_test_init+0xf7/0x150 [ 115.667468][ T9778] do_one_initcall+0x11c/0x6f0 [ 115.667486][ T9778] kernel_init_freeable+0x6ea/0x7b0 [ 115.667508][ T9778] kernel_init+0x21/0x1e0 [ 115.667540][ T9778] ret_from_fork+0x730/0xd60 [ 115.667560][ T9778] ret_from_fork_asm+0x1a/0x30 [ 115.667580][ T9778] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 115.667592][ T9778] free_pages_prepare+0x586/0xe00 [ 115.667615][ T9778] __free_contig_range_common+0x14f/0x250 [ 115.667641][ T9778] free_pages_bulk+0x12a/0x200 [ 115.667657][ T9778] vm_area_free_pages+0xb2/0x2a0 [ 115.667673][ T9778] vfree+0xf7/0x6d0 [ 115.667694][ T9778] tpg_free+0x72/0x490 [ 115.667717][ T9778] vivid_dev_release+0xd0/0x160 [ 115.667734][ T9778] v4l2_device_put+0xa3/0xd0 [ 115.667758][ T9778] vivid_probe.cold+0xf88/0x921e [ 115.667783][ T9778] platform_probe+0x106/0x1d0 [ 115.667809][ T9778] really_probe+0x241/0xa60 [ 115.667826][ T9778] __driver_probe_device+0x210/0x460 [ 115.667845][ T9778] driver_probe_device+0x4a/0x140 [ 115.667864][ T9778] __driver_attach+0x21f/0x5b0 [ 115.667883][ T9778] bus_for_each_dev+0x13e/0x1d0 [ 115.667914][ T9778] bus_add_driver+0x305/0x5b0 [ 115.822515][ T5827] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.822609][ T5827] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.822635][ T5827] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.822653][ T5827] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.928275][ T9792] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 116.376164][ T9813] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 116.376191][ T9813] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 116.376217][ T9813] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 116.376235][ T9813] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 116.376244][ T9813] page dumped because: unmovable page [ 116.376253][ T9813] page_owner tracks the page as allocated [ 116.376259][ T9813] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 116.376284][ T9813] post_alloc_hook+0xfd/0x120 [ 116.376329][ T9813] get_page_from_freelist+0x110d/0x35d0 [ 116.376358][ T9813] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 116.376387][ T9813] alloc_pages_mpol+0x201/0x550 [ 116.376411][ T9813] alloc_pages_noprof+0x1a/0x160 [ 116.376437][ T9813] get_zeroed_page_noprof+0x18/0xb0 [ 116.376458][ T9813] comedi_buf_alloc+0x648/0xa00 [ 116.376488][ T9813] comedi_device_postconfig+0x3dc/0xbc0 [ 116.376512][ T9813] comedi_auto_config+0x19b/0x250 [ 116.376535][ T9813] comedi_test_init+0xf7/0x150 [ 116.376553][ T9813] do_one_initcall+0x11c/0x6f0 [ 116.376571][ T9813] kernel_init_freeable+0x6ea/0x7b0 [ 116.376593][ T9813] kernel_init+0x21/0x1e0 [ 116.376624][ T9813] ret_from_fork+0x730/0xd60 [ 116.376643][ T9813] ret_from_fork_asm+0x1a/0x30 [ 116.376661][ T9813] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 116.376672][ T9813] free_pages_prepare+0x586/0xe00 [ 116.376696][ T9813] __free_contig_range_common+0x14f/0x250 [ 116.376721][ T9813] free_pages_bulk+0x12a/0x200 [ 116.376742][ T9813] vm_area_free_pages+0xb2/0x2a0 [ 116.376758][ T9813] vfree+0xf7/0x6d0 [ 116.376778][ T9813] tpg_free+0x72/0x490 [ 116.376801][ T9813] vivid_dev_release+0xd0/0x160 [ 116.376818][ T9813] v4l2_device_put+0xa3/0xd0 [ 116.376843][ T9813] vivid_probe.cold+0xf88/0x921e [ 116.376867][ T9813] platform_probe+0x106/0x1d0 [ 116.376893][ T9813] really_probe+0x241/0xa60 [ 116.376910][ T9813] __driver_probe_device+0x210/0x460 [ 116.376928][ T9813] driver_probe_device+0x4a/0x140 [ 116.376947][ T9813] __driver_attach+0x21f/0x5b0 [ 116.376964][ T9813] bus_for_each_dev+0x13e/0x1d0 [ 116.376989][ T9813] bus_add_driver+0x305/0x5b0 [ 116.675111][ T5734] Bluetooth: hci1: command tx timeout [ 116.685391][ T9832] program syz.4.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.711689][ T9837] 9pnet_virtio: no channels available for device syz [ 116.786977][ T9826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.934315][ T1349] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 117.104924][ T1349] usb 9-1: Using ep0 maxpacket: 8 [ 117.105784][ T1349] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.113372][ T1349] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 117.113397][ T1349] usb 9-1: config 179 has no interface number 0 [ 117.113431][ T1349] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 117.113456][ T1349] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 117.113480][ T1349] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.113503][ T1349] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 117.113527][ T1349] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.113583][ T1349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.122191][ T9832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.181005][ T9852] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 117.181032][ T9852] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 117.181058][ T9852] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 117.181077][ T9852] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 117.181098][ T9852] page dumped because: unmovable page [ 117.181108][ T9852] page_owner tracks the page as allocated [ 117.181115][ T9852] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 117.181142][ T9852] post_alloc_hook+0xfd/0x120 [ 117.181173][ T9852] get_page_from_freelist+0x110d/0x35d0 [ 117.181202][ T9852] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 117.181232][ T9852] alloc_pages_mpol+0x201/0x550 [ 117.181257][ T9852] alloc_pages_noprof+0x1a/0x160 [ 117.181285][ T9852] get_zeroed_page_noprof+0x18/0xb0 [ 117.181310][ T9852] comedi_buf_alloc+0x648/0xa00 [ 117.181337][ T9852] comedi_device_postconfig+0x3dc/0xbc0 [ 117.181362][ T9852] comedi_auto_config+0x19b/0x250 [ 117.181388][ T9852] comedi_test_init+0xf7/0x150 [ 117.181407][ T9852] do_one_initcall+0x11c/0x6f0 [ 117.181426][ T9852] kernel_init_freeable+0x6ea/0x7b0 [ 117.181451][ T9852] kernel_init+0x21/0x1e0 [ 117.181481][ T9852] ret_from_fork+0x730/0xd60 [ 117.181501][ T9852] ret_from_fork_asm+0x1a/0x30 [ 117.181521][ T9852] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 117.181534][ T9852] free_pages_prepare+0x586/0xe00 [ 117.181582][ T9852] __free_contig_range_common+0x14f/0x250 [ 117.181610][ T9852] free_pages_bulk+0x12a/0x200 [ 117.181628][ T9852] vm_area_free_pages+0xb2/0x2a0 [ 117.181648][ T9852] vfree+0xf7/0x6d0 [ 117.181670][ T9852] tpg_free+0x72/0x490 [ 117.181696][ T9852] vivid_dev_release+0xd0/0x160 [ 117.181715][ T9852] v4l2_device_put+0xa3/0xd0 [ 117.181740][ T9852] vivid_probe.cold+0xf88/0x921e [ 117.181766][ T9852] platform_probe+0x106/0x1d0 [ 117.181793][ T9852] really_probe+0x241/0xa60 [ 117.181812][ T9852] __driver_probe_device+0x210/0x460 [ 117.181833][ T9852] driver_probe_device+0x4a/0x140 [ 117.181854][ T9852] __driver_attach+0x21f/0x5b0 [ 117.181873][ T9852] bus_for_each_dev+0x13e/0x1d0 [ 117.181900][ T9852] bus_add_driver+0x305/0x5b0 [ 117.348155][ T9862] 9pnet_virtio: no channels available for device syz [ 117.378832][ T1349] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input10 [ 117.510670][ T9876] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1183'. [ 117.510802][ T9876] unsupported nlmsg_type 40 [ 117.511880][ T9876] Invalid source name [ 117.511888][ T9876] UBIFS error (pid: 9876): cannot open "ubifs", error -22 [ 117.566980][ T5878] usb 9-1: USB disconnect, device number 11 [ 117.566995][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.567043][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.651081][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1186'. [ 117.651113][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.689570][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 117.689591][ T43] audit: type=1400 audit(1789042452.868:824): avc: denied { name_bind } for pid=9884 comm="syz.6.1188" src=8422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 117.724278][ T43] audit: type=1400 audit(1789042452.898:825): avc: denied { watch watch_reads } for pid=9884 comm="syz.6.1188" path="/308" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.906782][ T9905] FAULT_INJECTION: forcing a failure. [ 117.906782][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 117.906814][ T9905] CPU: 2 UID: 0 PID: 9905 Comm: syz.9.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.906841][ T9905] Tainted: [L]=SOFTLOCKUP [ 117.906847][ T9905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.906859][ T9905] Call Trace: [ 117.906866][ T9905] [ 117.906874][ T9905] dump_stack_lvl+0x100/0x190 [ 117.906907][ T9905] should_fail_ex.cold+0x5/0xa [ 117.906932][ T9905] should_failslab+0xc2/0x120 [ 117.906953][ T9905] __kmalloc_noprof+0xfc/0x840 [ 117.906967][ T9905] ? rcu_is_watching+0x13/0xc0 [ 117.906983][ T9905] ? tomoyo_realpath_from_path+0xb6/0x690 [ 117.907000][ T9905] tomoyo_realpath_from_path+0xb6/0x690 [ 117.907017][ T9905] tomoyo_path_number_perm+0x23c/0x580 [ 117.907036][ T9905] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.907055][ T9905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.907079][ T9905] ? __lock_acquire+0x5c0/0x1f40 [ 117.907099][ T9905] ? __fget_files+0x34/0x3d0 [ 117.907113][ T9905] ? find_held_lock+0x2b/0x80 [ 117.907129][ T9905] ? hook_file_ioctl_common+0x140/0x440 [ 117.907148][ T9905] ? __fget_files+0x21f/0x3d0 [ 117.907164][ T9905] security_file_ioctl+0xd3/0x230 [ 117.907177][ T9905] __x64_sys_ioctl+0xb7/0x210 [ 117.907190][ T9905] do_syscall_64+0x123/0x790 [ 117.907207][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.907220][ T9905] RIP: 0033:0x7f8ea399e159 [ 117.907230][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.907241][ T9905] RSP: 002b:00007f8ea492e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.907253][ T9905] RAX: ffffffffffffffda RBX: 00007f8ea3c25fa0 RCX: 00007f8ea399e159 [ 117.907261][ T9905] RDX: 00002000000000c0 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 117.907268][ T9905] RBP: 00007f8ea492e090 R08: 0000000000000000 R09: 0000000000000000 [ 117.907275][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.907281][ T9905] R13: 00007f8ea3c26038 R14: 00007f8ea3c25fa0 R15: 00007fff4fcf4168 [ 117.907302][ T9905] [ 117.907307][ T9905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.000828][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1200'. [ 118.009878][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1198'. [ 118.009897][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.422094][ T9925] serio: Serial port ptm0 [ 118.536710][ T9929] Invalid logical block size (-1) [ 118.630817][ T9927] CUSE: unknown device info "" [ 118.630833][ T9927] CUSE: unknown device info "" [ 118.630839][ T9927] CUSE: unknown device info "" [ 118.630846][ T9927] CUSE: unknown device info "" [ 118.630852][ T9927] CUSE: zero length info key specified [ 118.631858][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1204'. [ 118.634436][ T43] audit: type=1400 audit(1789042453.808:826): avc: denied { bind } for pid=9923 comm="syz.9.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.634475][ T43] audit: type=1400 audit(1789042453.808:827): avc: denied { node_bind } for pid=9923 comm="syz.9.1204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 118.754323][ T5734] Bluetooth: hci1: command tx timeout [ 119.000249][ T9938] netlink: 'syz.6.1208': attribute type 2 has an invalid length. [ 119.068921][ T9940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.398456][ T9949] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 119.398474][ T9949] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 119.398490][ T9949] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 119.398501][ T9949] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 119.398507][ T9949] page dumped because: unmovable page [ 119.398513][ T9949] page_owner tracks the page as allocated [ 119.398517][ T9949] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 119.398533][ T9949] post_alloc_hook+0xfd/0x120 [ 119.398552][ T9949] get_page_from_freelist+0x110d/0x35d0 [ 119.398568][ T9949] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 119.398585][ T9949] alloc_pages_mpol+0x201/0x550 [ 119.398599][ T9949] alloc_pages_noprof+0x1a/0x160 [ 119.398614][ T9949] get_zeroed_page_noprof+0x18/0xb0 [ 119.398628][ T9949] comedi_buf_alloc+0x648/0xa00 [ 119.398643][ T9949] comedi_device_postconfig+0x3dc/0xbc0 [ 119.398657][ T9949] comedi_auto_config+0x19b/0x250 [ 119.398671][ T9949] comedi_test_init+0xf7/0x150 [ 119.398682][ T9949] do_one_initcall+0x11c/0x6f0 [ 119.398693][ T9949] kernel_init_freeable+0x6ea/0x7b0 [ 119.398708][ T9949] kernel_init+0x21/0x1e0 [ 119.398724][ T9949] ret_from_fork+0x730/0xd60 [ 119.398736][ T9949] ret_from_fork_asm+0x1a/0x30 [ 119.398747][ T9949] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 119.398755][ T9949] free_pages_prepare+0x586/0xe00 [ 119.398769][ T9949] __free_contig_range_common+0x14f/0x250 [ 119.398785][ T9949] free_pages_bulk+0x12a/0x200 [ 119.398796][ T9949] vm_area_free_pages+0xb2/0x2a0 [ 119.398806][ T9949] vfree+0xf7/0x6d0 [ 119.398817][ T9949] tpg_free+0x72/0x490 [ 119.398831][ T9949] vivid_dev_release+0xd0/0x160 [ 119.398846][ T9949] v4l2_device_put+0xa3/0xd0 [ 119.398866][ T9949] vivid_probe.cold+0xf88/0x921e [ 119.398888][ T9949] platform_probe+0x106/0x1d0 [ 119.398913][ T9949] really_probe+0x241/0xa60 [ 119.398930][ T9949] __driver_probe_device+0x210/0x460 [ 119.398948][ T9949] driver_probe_device+0x4a/0x140 [ 119.398965][ T9949] __driver_attach+0x21f/0x5b0 [ 119.398976][ T9949] bus_for_each_dev+0x13e/0x1d0 [ 119.398990][ T9949] bus_add_driver+0x305/0x5b0 [ 119.477951][ T9951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 119.477977][ T9951] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 119.478004][ T9951] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 119.478023][ T9951] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 119.478035][ T9951] page dumped because: unmovable page [ 119.478046][ T9951] page_owner tracks the page as allocated [ 119.478054][ T9951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 119.478080][ T9951] post_alloc_hook+0xfd/0x120 [ 119.478116][ T9951] get_page_from_freelist+0x110d/0x35d0 [ 119.478146][ T9951] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 119.478176][ T9951] alloc_pages_mpol+0x201/0x550 [ 119.478201][ T9951] alloc_pages_noprof+0x1a/0x160 [ 119.478228][ T9951] get_zeroed_page_noprof+0x18/0xb0 [ 119.478251][ T9951] comedi_buf_alloc+0x648/0xa00 [ 119.478278][ T9951] comedi_device_postconfig+0x3dc/0xbc0 [ 119.478304][ T9951] comedi_auto_config+0x19b/0x250 [ 119.478328][ T9951] comedi_test_init+0xf7/0x150 [ 119.478347][ T9951] do_one_initcall+0x11c/0x6f0 [ 119.478367][ T9951] kernel_init_freeable+0x6ea/0x7b0 [ 119.478392][ T9951] kernel_init+0x21/0x1e0 [ 119.478420][ T9951] ret_from_fork+0x730/0xd60 [ 119.478442][ T9951] ret_from_fork_asm+0x1a/0x30 [ 119.478462][ T9951] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 119.478475][ T9951] free_pages_prepare+0x586/0xe00 [ 119.478502][ T9951] __free_contig_range_common+0x14f/0x250 [ 119.478528][ T9951] free_pages_bulk+0x12a/0x200 [ 119.478545][ T9951] vm_area_free_pages+0xb2/0x2a0 [ 119.478563][ T9951] vfree+0xf7/0x6d0 [ 119.478584][ T9951] tpg_free+0x72/0x490 [ 119.478608][ T9951] vivid_dev_release+0xd0/0x160 [ 119.478627][ T9951] v4l2_device_put+0xa3/0xd0 [ 119.478652][ T9951] vivid_probe.cold+0xf88/0x921e [ 119.478677][ T9951] platform_probe+0x106/0x1d0 [ 119.478704][ T9951] really_probe+0x241/0xa60 [ 119.478724][ T9951] __driver_probe_device+0x210/0x460 [ 119.479811][ T9951] driver_probe_device+0x4a/0x140 [ 119.479838][ T9951] __driver_attach+0x21f/0x5b0 [ 119.479859][ T9951] bus_for_each_dev+0x13e/0x1d0 [ 119.479888][ T9951] bus_add_driver+0x305/0x5b0 [ 119.518433][ T9953] input: syz0 as /devices/virtual/input/input11 [ 119.612867][ T43] audit: type=1400 audit(1789042454.788:828): avc: denied { setopt } for pid=9957 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.613868][ T43] audit: type=1400 audit(1789042454.788:829): avc: denied { write } for pid=9957 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.824316][ T990] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 119.905668][ T50] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 119.975793][ T990] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.976769][ T990] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.976784][ T990] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.976795][ T990] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.976816][ T990] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.978516][ T990] usb 11-1: config 0 descriptor?? [ 120.054318][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 120.055811][ T50] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.058989][ T50] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.059013][ T50] usb 9-1: config 179 has no interface number 0 [ 120.059095][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.059121][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.059146][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.059169][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.059193][ T50] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.059289][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.075446][ T9962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 120.262961][ T9966] __nla_validate_parse: 1 callbacks suppressed [ 120.262981][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'. [ 120.263007][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.305591][ T50] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input12 [ 120.483987][ T5874] usb 9-1: USB disconnect, device number 12 [ 120.483997][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.484022][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.559081][ T9978] netlink: 'syz.8.1221': attribute type 2 has an invalid length. [ 120.641771][ T9982] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 120.641788][ T9982] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 120.641804][ T9982] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 120.641815][ T9982] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 120.641821][ T9982] page dumped because: unmovable page [ 120.641827][ T9982] page_owner tracks the page as allocated [ 120.641831][ T9982] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 120.641848][ T9982] post_alloc_hook+0xfd/0x120 [ 120.641866][ T9982] get_page_from_freelist+0x110d/0x35d0 [ 120.641883][ T9982] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 120.641899][ T9982] alloc_pages_mpol+0x201/0x550 [ 120.641917][ T9982] alloc_pages_noprof+0x1a/0x160 [ 120.641938][ T9982] get_zeroed_page_noprof+0x18/0xb0 [ 120.641956][ T9982] comedi_buf_alloc+0x648/0xa00 [ 120.641982][ T9982] comedi_device_postconfig+0x3dc/0xbc0 [ 120.642000][ T9982] comedi_auto_config+0x19b/0x250 [ 120.642014][ T9982] comedi_test_init+0xf7/0x150 [ 120.642024][ T9982] do_one_initcall+0x11c/0x6f0 [ 120.642035][ T9982] kernel_init_freeable+0x6ea/0x7b0 [ 120.642048][ T9982] kernel_init+0x21/0x1e0 [ 120.642065][ T9982] ret_from_fork+0x730/0xd60 [ 120.642082][ T9982] ret_from_fork_asm+0x1a/0x30 [ 120.642094][ T9982] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 120.642102][ T9982] free_pages_prepare+0x586/0xe00 [ 120.642117][ T9982] __free_contig_range_common+0x14f/0x250 [ 120.642133][ T9982] free_pages_bulk+0x12a/0x200 [ 120.642143][ T9982] vm_area_free_pages+0xb2/0x2a0 [ 120.642153][ T9982] vfree+0xf7/0x6d0 [ 120.642165][ T9982] tpg_free+0x72/0x490 [ 120.642180][ T9982] vivid_dev_release+0xd0/0x160 [ 120.642191][ T9982] v4l2_device_put+0xa3/0xd0 [ 120.642205][ T9982] vivid_probe.cold+0xf88/0x921e [ 120.642219][ T9982] platform_probe+0x106/0x1d0 [ 120.642234][ T9982] really_probe+0x241/0xa60 [ 120.642244][ T9982] __driver_probe_device+0x210/0x460 [ 120.642255][ T9982] driver_probe_device+0x4a/0x140 [ 120.642266][ T9982] __driver_attach+0x21f/0x5b0 [ 120.642277][ T9982] bus_for_each_dev+0x13e/0x1d0 [ 120.642292][ T9982] bus_add_driver+0x305/0x5b0 [ 120.665668][ T9984] syz_tun: entered allmulticast mode [ 120.666381][ T9984] syz_tun: left allmulticast mode [ 120.671491][ T990] usbhid 11-1:0.0: can't add hid device: -71 [ 120.671797][ T990] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 120.680932][ T990] usb 11-1: USB disconnect, device number 3 [ 121.116191][ T9992] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 121.116217][ T9992] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 121.116243][ T9992] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 121.116258][ T9992] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 121.116268][ T9992] page dumped because: unmovable page [ 121.116276][ T9992] page_owner tracks the page as allocated [ 121.116281][ T9992] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 121.116304][ T9992] post_alloc_hook+0xfd/0x120 [ 121.116332][ T9992] get_page_from_freelist+0x110d/0x35d0 [ 121.116356][ T9992] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 121.116381][ T9992] alloc_pages_mpol+0x201/0x550 [ 121.116402][ T9992] alloc_pages_noprof+0x1a/0x160 [ 121.116424][ T9992] get_zeroed_page_noprof+0x18/0xb0 [ 121.116443][ T9992] comedi_buf_alloc+0x648/0xa00 [ 121.116466][ T9992] comedi_device_postconfig+0x3dc/0xbc0 [ 121.116488][ T9992] comedi_auto_config+0x19b/0x250 [ 121.116509][ T9992] comedi_test_init+0xf7/0x150 [ 121.116526][ T9992] do_one_initcall+0x11c/0x6f0 [ 121.116544][ T9992] kernel_init_freeable+0x6ea/0x7b0 [ 121.116566][ T9992] kernel_init+0x21/0x1e0 [ 121.116589][ T9992] ret_from_fork+0x730/0xd60 [ 121.116606][ T9992] ret_from_fork_asm+0x1a/0x30 [ 121.116630][ T9992] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 121.116642][ T9992] free_pages_prepare+0x586/0xe00 [ 121.116665][ T9992] __free_contig_range_common+0x14f/0x250 [ 121.116689][ T9992] free_pages_bulk+0x12a/0x200 [ 121.116704][ T9992] vm_area_free_pages+0xb2/0x2a0 [ 121.116718][ T9992] vfree+0xf7/0x6d0 [ 121.116736][ T9992] tpg_free+0x72/0x490 [ 121.116757][ T9992] vivid_dev_release+0xd0/0x160 [ 121.116774][ T9992] v4l2_device_put+0xa3/0xd0 [ 121.116794][ T9992] vivid_probe.cold+0xf88/0x921e [ 121.116815][ T9992] platform_probe+0x106/0x1d0 [ 121.116838][ T9992] really_probe+0x241/0xa60 [ 121.116852][ T9992] __driver_probe_device+0x210/0x460 [ 121.116870][ T9992] driver_probe_device+0x4a/0x140 [ 121.116887][ T9992] __driver_attach+0x21f/0x5b0 [ 121.116904][ T9992] bus_for_each_dev+0x13e/0x1d0 [ 121.116926][ T9992] bus_add_driver+0x305/0x5b0 [ 121.184707][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 121.184726][ T9994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.281413][T10001] Cannot find map_set index 135 as target [ 121.448817][T10011] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 121.448833][T10011] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 121.448849][T10011] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 121.448859][T10011] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 121.448865][T10011] page dumped because: unmovable page [ 121.448870][T10011] page_owner tracks the page as allocated [ 121.448874][T10011] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 121.448890][T10011] post_alloc_hook+0xfd/0x120 [ 121.448908][T10011] get_page_from_freelist+0x110d/0x35d0 [ 121.448924][T10011] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 121.448941][T10011] alloc_pages_mpol+0x201/0x550 [ 121.448955][T10011] alloc_pages_noprof+0x1a/0x160 [ 121.448971][T10011] get_zeroed_page_noprof+0x18/0xb0 [ 121.448985][T10011] comedi_buf_alloc+0x648/0xa00 [ 121.449000][T10011] comedi_device_postconfig+0x3dc/0xbc0 [ 121.449014][T10011] comedi_auto_config+0x19b/0x250 [ 121.449028][T10011] comedi_test_init+0xf7/0x150 [ 121.449038][T10011] do_one_initcall+0x11c/0x6f0 [ 121.449049][T10011] kernel_init_freeable+0x6ea/0x7b0 [ 121.449077][T10011] kernel_init+0x21/0x1e0 [ 121.449094][T10011] ret_from_fork+0x730/0xd60 [ 121.449107][T10011] ret_from_fork_asm+0x1a/0x30 [ 121.449119][T10011] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 121.449126][T10011] free_pages_prepare+0x586/0xe00 [ 121.449139][T10011] __free_contig_range_common+0x14f/0x250 [ 121.449154][T10011] free_pages_bulk+0x12a/0x200 [ 121.449164][T10011] vm_area_free_pages+0xb2/0x2a0 [ 121.449174][T10011] vfree+0xf7/0x6d0 [ 121.449185][T10011] tpg_free+0x72/0x490 [ 121.449198][T10011] vivid_dev_release+0xd0/0x160 [ 121.449208][T10011] v4l2_device_put+0xa3/0xd0 [ 121.449221][T10011] vivid_probe.cold+0xf88/0x921e [ 121.449235][T10011] platform_probe+0x106/0x1d0 [ 121.449250][T10011] really_probe+0x241/0xa60 [ 121.449260][T10011] __driver_probe_device+0x210/0x460 [ 121.449271][T10011] driver_probe_device+0x4a/0x140 [ 121.449282][T10011] __driver_attach+0x21f/0x5b0 [ 121.449292][T10011] bus_for_each_dev+0x13e/0x1d0 [ 121.449313][T10011] bus_add_driver+0x305/0x5b0 [ 121.605202][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 121.605222][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.658624][ T5734] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 121.831796][T10039] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 121.831821][T10039] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 121.831847][T10039] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 121.831867][T10039] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 121.831877][T10039] page dumped because: unmovable page [ 121.831887][T10039] page_owner tracks the page as allocated [ 121.831894][T10039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8708447941 [ 121.831924][T10039] post_alloc_hook+0xfd/0x120 [ 121.831952][T10039] get_page_from_freelist+0x110d/0x35d0 [ 121.831981][T10039] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 121.832013][T10039] alloc_pages_mpol+0x201/0x550 [ 121.832036][T10039] alloc_pages_noprof+0x1a/0x160 [ 121.832062][T10039] get_zeroed_page_noprof+0x18/0xb0 [ 121.832085][T10039] comedi_buf_alloc+0x648/0xa00 [ 121.836944][T10039] comedi_device_postconfig+0x3dc/0xbc0 [ 121.836979][T10039] comedi_auto_config+0x19b/0x250 [ 121.837006][T10039] comedi_test_init+0xf7/0x150 [ 121.837025][T10039] do_one_initcall+0x11c/0x6f0 [ 121.837044][T10039] kernel_init_freeable+0x6ea/0x7b0 [ 121.837068][T10039] kernel_init+0x21/0x1e0 [ 121.837097][T10039] ret_from_fork+0x730/0xd60 [ 121.837118][T10039] ret_from_fork_asm+0x1a/0x30 [ 121.837138][T10039] page last free pid 1 tgid 1 ts 8583247551 stack trace: [ 121.837195][T10039] free_pages_prepare+0x586/0xe00 [ 121.837221][T10039] __free_contig_range_common+0x14f/0x250 [ 121.837249][T10039] free_pages_bulk+0x12a/0x200 [ 121.837267][T10039] vm_area_free_pages+0xb2/0x2a0 [ 121.837286][T10039] vfree+0xf7/0x6d0 [ 121.837308][T10039] tpg_free+0x72/0x490 [ 121.837334][T10039] vivid_dev_release+0xd0/0x160 [ 121.837353][T10039] v4l2_device_put+0xa3/0xd0 [ 121.837378][T10039] vivid_probe.cold+0xf88/0x921e [ 121.837403][T10039] platform_probe+0x106/0x1d0 [ 121.837428][T10039] really_probe+0x241/0xa60 [ 121.837448][T10039] __driver_probe_device+0x210/0x460 [ 121.837468][T10039] driver_probe_device+0x4a/0x140 [ 121.837488][T10039] __driver_attach+0x21f/0x5b0 [ 121.837508][T10039] bus_for_each_dev+0x13e/0x1d0 [ 121.837555][T10039] bus_add_driver+0x305/0x5b0 [ 121.978066][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1251'. [ 121.978086][T10050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.068850][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1254'. [ 122.172393][T10067] SELinux: policydb string does not match my string SE Linux [ 122.172424][T10067] SELinux: failed to load policy [ 122.254937][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1261'. [ 122.254957][T10075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.410323][T10086] FAULT_INJECTION: forcing a failure. [ 122.410323][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 122.410353][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.6.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.410373][T10086] Tainted: [L]=SOFTLOCKUP [ 122.410378][T10086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.410387][T10086] Call Trace: [ 122.410392][T10086] [ 122.410399][T10086] dump_stack_lvl+0x100/0x190 [ 122.410424][T10086] should_fail_ex.cold+0x5/0xa [ 122.410445][T10086] should_failslab+0xc2/0x120 [ 122.410464][T10086] __kmalloc_noprof+0xfc/0x840 [ 122.410480][T10086] ? bit_cursor+0x938/0x14e0 [ 122.410504][T10086] bit_cursor+0x938/0x14e0 [ 122.410532][T10086] ? __pfx_bit_cursor+0x10/0x10 [ 122.410552][T10086] ? enable_work+0x295/0x320 [ 122.410572][T10086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.410601][T10086] ? get_color+0x1da/0x450 [ 122.410620][T10086] ? __pfx_bit_cursor+0x10/0x10 [ 122.410639][T10086] fbcon_cursor+0x43c/0x5e0 [ 122.410657][T10086] ? add_softcursor+0x160/0x290 [ 122.410682][T10086] set_cursor+0x1db/0x250 [ 122.410704][T10086] con_write+0x8c/0xb0 [ 122.410720][T10086] n_tty_write+0x431/0x1160 [ 122.410749][T10086] ? __pfx_n_tty_write+0x10/0x10 [ 122.410766][T10086] ? __kasan_kmalloc+0xaa/0xb0 [ 122.410783][T10086] ? __pfx_woken_wake_function+0x10/0x10 [ 122.410802][T10086] ? rcu_is_watching+0x13/0xc0 [ 122.410820][T10086] ? file_tty_write.isra.0+0x694/0x890 [ 122.410835][T10086] ? kfree+0x1e5/0x6d0 [ 122.410855][T10086] ? __pfx_n_tty_write+0x10/0x10 [ 122.410875][T10086] file_tty_write.isra.0+0x4d2/0x890 [ 122.410897][T10086] vfs_write+0x6af/0x1050 [ 122.410912][T10086] ? __pfx_tty_write+0x10/0x10 [ 122.410928][T10086] ? __pfx_vfs_write+0x10/0x10 [ 122.410941][T10086] ? find_held_lock+0x2b/0x80 [ 122.410974][T10086] ksys_write+0x12a/0x250 [ 122.410988][T10086] ? __pfx_ksys_write+0x10/0x10 [ 122.411009][T10086] do_syscall_64+0x123/0x790 [ 122.411031][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.411046][T10086] RIP: 0033:0x7f9621b9e159 [ 122.411059][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.411072][T10086] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.411088][T10086] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 122.411098][T10086] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 122.411106][T10086] RBP: 00007f9622b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.411115][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.411123][T10086] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 122.411145][T10086] [ 122.667633][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 122.713325][T10101] FAULT_INJECTION: forcing a failure. [ 122.713325][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 122.713356][T10101] CPU: 3 UID: 0 PID: 10101 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.713383][T10101] Tainted: [L]=SOFTLOCKUP [ 122.713390][T10101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.713402][T10101] Call Trace: [ 122.713408][T10101] [ 122.713417][T10101] dump_stack_lvl+0x100/0x190 [ 122.713449][T10101] should_fail_ex.cold+0x5/0xa [ 122.713478][T10101] should_failslab+0xc2/0x120 [ 122.713503][T10101] __kmalloc_noprof+0xfc/0x840 [ 122.713524][T10101] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 122.713572][T10101] kernfs_fop_write_iter+0x26a/0x5f0 [ 122.713595][T10101] vfs_write+0x6af/0x1050 [ 122.713616][T10101] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 122.713640][T10101] ? __pfx_vfs_write+0x10/0x10 [ 122.713657][T10101] ? find_held_lock+0x2b/0x80 [ 122.713702][T10101] ksys_write+0x12a/0x250 [ 122.713722][T10101] ? __pfx_ksys_write+0x10/0x10 [ 122.713751][T10101] do_syscall_64+0x123/0x790 [ 122.713780][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.713800][T10101] RIP: 0033:0x7fd43959e159 [ 122.713817][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.713834][T10101] RSP: 002b:00007fd43a3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.713854][T10101] RAX: ffffffffffffffda RBX: 00007fd439825fa0 RCX: 00007fd43959e159 [ 122.713868][T10101] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 122.713880][T10101] RBP: 00007fd43a3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 122.713891][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.713902][T10101] R13: 00007fd439826038 R14: 00007fd439825fa0 R15: 00007fff813aaeb8 [ 122.713930][T10101] [ 122.783659][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1269'. [ 122.822029][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1271'. [ 122.822049][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.913413][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1276'. [ 122.962194][T10119] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 123.139308][ T43] audit: type=1400 audit(1789042458.318:830): avc: denied { bind } for pid=10128 comm="syz.9.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.177177][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.231502][T10137] program syz.4.1285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.238416][T10140] veth0_to_bond: entered allmulticast mode [ 123.364841][T10147] x_tables: duplicate underflow at hook 3 [ 123.613251][T10159] FAULT_INJECTION: forcing a failure. [ 123.613251][T10159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.613271][T10159] CPU: 2 UID: 0 PID: 10159 Comm: syz.4.1292 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.613287][T10159] Tainted: [L]=SOFTLOCKUP [ 123.613290][T10159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.613297][T10159] Call Trace: [ 123.613307][T10159] [ 123.613323][T10159] dump_stack_lvl+0x100/0x190 [ 123.613351][T10159] should_fail_ex.cold+0x5/0xa [ 123.613367][T10159] _copy_to_user+0x32/0xd0 [ 123.613383][T10159] simple_read_from_buffer+0xcb/0x170 [ 123.613398][T10159] proc_fail_nth_read+0x1af/0x230 [ 123.613412][T10159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.613427][T10159] ? rw_verify_area+0xce/0x6d0 [ 123.613443][T10159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.613457][T10159] vfs_read+0x1e4/0xb40 [ 123.613468][T10159] ? lock_acquire+0x1d1/0x380 [ 123.613479][T10159] ? __fget_files+0x34/0x3d0 [ 123.613492][T10159] ? __pfx_vfs_read+0x10/0x10 [ 123.613502][T10159] ? find_held_lock+0x2b/0x80 [ 123.613517][T10159] ? __fget_files+0x215/0x3d0 [ 123.613562][T10159] ? __fget_files+0x21f/0x3d0 [ 123.613590][T10159] ksys_read+0x12a/0x250 [ 123.613609][T10159] ? __pfx_ksys_read+0x10/0x10 [ 123.613632][T10159] do_syscall_64+0x123/0x790 [ 123.613657][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.613674][T10159] RIP: 0033:0x7fd43955e98e [ 123.613689][T10159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.613705][T10159] RSP: 002b:00007fd43a3fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.613728][T10159] RAX: ffffffffffffffda RBX: 00007fd43a3fc6c0 RCX: 00007fd43955e98e [ 123.613739][T10159] RDX: 000000000000000f RSI: 00007fd43a3fc0a0 RDI: 0000000000000003 [ 123.613750][T10159] RBP: 00007fd43a3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 123.613762][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.613772][T10159] R13: 00007fd439826038 R14: 00007fd439825fa0 R15: 00007fff813aaeb8 [ 123.613799][T10159] [ 123.728408][T10163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.775007][T10166] FAULT_INJECTION: forcing a failure. [ 123.775007][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.775038][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.8.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.775062][T10166] Tainted: [L]=SOFTLOCKUP [ 123.775069][T10166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.775079][T10166] Call Trace: [ 123.775085][T10166] [ 123.775093][T10166] dump_stack_lvl+0x100/0x190 [ 123.775127][T10166] should_fail_ex.cold+0x5/0xa [ 123.775154][T10166] _copy_from_user+0x2e/0xd0 [ 123.775174][T10166] move_addr_to_kernel+0x65/0x170 [ 123.775210][T10166] copy_msghdr_from_user+0x3f0/0x4c0 [ 123.775237][T10166] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.775270][T10166] ? lock_acquire+0x1d1/0x380 [ 123.775288][T10166] ? get_pid_task+0x2a/0x250 [ 123.775315][T10166] ___sys_sendmsg+0x106/0x1e0 [ 123.775343][T10166] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.775368][T10166] ? get_pid_task+0x106/0x250 [ 123.775402][T10166] ? find_held_lock+0x2b/0x80 [ 123.775442][T10166] __sys_sendmsg+0x160/0x210 [ 123.775464][T10166] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.775499][T10166] do_syscall_64+0x123/0x790 [ 123.775526][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.775545][T10166] RIP: 0033:0x7fae6f99e159 [ 123.775560][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.775597][T10166] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.775616][T10166] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 123.775628][T10166] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 123.775639][T10166] RBP: 00007fae6dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.775650][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.775661][T10166] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 123.775686][T10166] [ 124.164560][T10186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.441719][T10201] bond1: (slave bond_slave_0): Device is not our slave [ 124.441732][T10201] bond1: option active_slave: invalid value (bond_slave_0) [ 124.442694][T10201] bond1 (unregistering): Released all slaves [ 124.718628][T10215] FAULT_INJECTION: forcing a failure. [ 124.718628][T10215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.718659][T10215] CPU: 1 UID: 0 PID: 10215 Comm: syz.6.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.718685][T10215] Tainted: [L]=SOFTLOCKUP [ 124.718691][T10215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.718702][T10215] Call Trace: [ 124.718708][T10215] [ 124.718716][T10215] dump_stack_lvl+0x100/0x190 [ 124.718751][T10215] should_fail_ex.cold+0x5/0xa [ 124.718777][T10215] _copy_from_user+0x2e/0xd0 [ 124.718798][T10215] memdup_user_nul+0x6c/0x120 [ 124.718828][T10215] nvmf_dev_write+0x6d/0xb60 [ 124.718852][T10215] ? rw_verify_area+0xce/0x6d0 [ 124.718885][T10215] vfs_write+0x2aa/0x1050 [ 124.718905][T10215] ? __pfx_nvmf_dev_write+0x10/0x10 [ 124.718927][T10215] ? lock_acquire+0x1d1/0x380 [ 124.718946][T10215] ? __fget_files+0x34/0x3d0 [ 124.718967][T10215] ? __pfx_vfs_write+0x10/0x10 [ 124.718984][T10215] ? find_held_lock+0x2b/0x80 [ 124.719008][T10215] ? __fget_files+0x215/0x3d0 [ 124.719029][T10215] ? __fget_files+0x215/0x3d0 [ 124.719055][T10215] ? __fget_files+0x21f/0x3d0 [ 124.719103][T10215] ksys_write+0x12a/0x250 [ 124.719123][T10215] ? __pfx_ksys_write+0x10/0x10 [ 124.719149][T10215] do_syscall_64+0x123/0x790 [ 124.719175][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.719195][T10215] RIP: 0033:0x7f9621b9e159 [ 124.719211][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.719229][T10215] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.719253][T10215] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 124.719264][T10215] RDX: 000000000000002c RSI: 0000200000000400 RDI: 0000000000000003 [ 124.719275][T10215] RBP: 00007f9622b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.719286][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.719295][T10215] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 124.719319][T10215] [ 124.835670][T10221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.996108][T10225] FAULT_INJECTION: forcing a failure. [ 124.996108][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 124.996140][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.8.1314 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.996165][T10225] Tainted: [L]=SOFTLOCKUP [ 124.996171][T10225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.996189][T10225] Call Trace: [ 124.996195][T10225] [ 124.996202][T10225] dump_stack_lvl+0x100/0x190 [ 124.996233][T10225] should_fail_ex.cold+0x5/0xa [ 124.996258][T10225] should_failslab+0xc2/0x120 [ 124.996281][T10225] __kmalloc_cache_noprof+0x91/0x6d0 [ 124.996307][T10225] ? apply_wqattrs_prepare+0x136/0xbb0 [ 124.996331][T10225] apply_wqattrs_prepare+0x136/0xbb0 [ 124.996349][T10225] ? __alloc_workqueue+0x8ca/0x1950 [ 124.996378][T10225] apply_workqueue_attrs_locked+0x64/0xe0 [ 124.996398][T10225] __alloc_workqueue+0x9a7/0x1950 [ 124.996427][T10225] alloc_workqueue_noprof+0xc7/0x130 [ 124.996448][T10225] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 124.996474][T10225] ? lockdep_init_map_type+0x5c/0x250 [ 124.996494][T10225] ? lockdep_init_map_type+0x5c/0x250 [ 124.996518][T10225] __rds_conn_create+0x1234/0x25a0 [ 124.996552][T10225] ? __pfx___rds_conn_create+0x10/0x10 [ 124.996577][T10225] ? trace_kmalloc+0xeb/0x110 [ 124.996596][T10225] ? __kasan_kmalloc+0xaa/0xb0 [ 124.996614][T10225] ? lockdep_init_map_type+0x5c/0x250 [ 124.996637][T10225] rds_conn_create_outgoing+0x44/0x60 [ 124.996664][T10225] rds_sendmsg+0x10da/0x34d0 [ 124.996681][T10225] ? trace_sched_exit_tp+0x120/0x160 [ 124.996714][T10225] ? __pfx_rds_sendmsg+0x10/0x10 [ 124.996745][T10225] ? selinux_socket_sendmsg+0x198/0x2f0 [ 124.996775][T10225] ? ____sys_sendmsg+0xa4d/0xbe0 [ 124.996799][T10225] ____sys_sendmsg+0xa4d/0xbe0 [ 124.996821][T10225] ? __pfx_rds_sendmsg+0x10/0x10 [ 124.996841][T10225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.996875][T10225] ___sys_sendmsg+0x190/0x1e0 [ 124.996902][T10225] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.996928][T10225] ? futex_wait+0x11e/0x370 [ 124.996961][T10225] ? find_held_lock+0x2b/0x80 [ 124.996999][T10225] __sys_sendmsg+0x160/0x210 [ 124.997020][T10225] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.997052][T10225] do_syscall_64+0x123/0x790 [ 124.997078][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.997096][T10225] RIP: 0033:0x7fae6f99e159 [ 124.997112][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.997127][T10225] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.997144][T10225] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 124.997157][T10225] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 124.997193][T10225] RBP: 00007fae6fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 124.997205][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.997217][T10225] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 124.997243][T10225] [ 125.331351][T10237] fuse: Bad value for 'group_id' [ 125.331371][T10237] fuse: Bad value for 'group_id' [ 125.533686][T10243] __nla_validate_parse: 9 callbacks suppressed [ 125.533704][T10243] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.1320'. [ 125.538081][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1320'. [ 125.600068][T10246] program syz.8.1321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.669027][T10251] binder: 10249:10251 unknown command 0 [ 125.669058][T10251] binder: 10249:10251 ioctl c0306201 2000000004c0 returned -22 [ 125.720676][T10258] FAULT_INJECTION: forcing a failure. [ 125.720676][T10258] name failslab, interval 1, probability 0, space 0, times 0 [ 125.720697][T10258] CPU: 3 UID: 0 PID: 10258 Comm: syz.9.1324 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.720712][T10258] Tainted: [L]=SOFTLOCKUP [ 125.720716][T10258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.720723][T10258] Call Trace: [ 125.720727][T10258] [ 125.720731][T10258] dump_stack_lvl+0x100/0x190 [ 125.720751][T10258] should_fail_ex.cold+0x5/0xa [ 125.720766][T10258] should_failslab+0xc2/0x120 [ 125.720781][T10258] __kmalloc_cache_noprof+0x91/0x6d0 [ 125.720798][T10258] ? apply_wqattrs_prepare+0x136/0xbb0 [ 125.720813][T10258] apply_wqattrs_prepare+0x136/0xbb0 [ 125.720824][T10258] ? __alloc_workqueue+0x8ca/0x1950 [ 125.720842][T10258] apply_workqueue_attrs_locked+0x64/0xe0 [ 125.720855][T10258] __alloc_workqueue+0x9a7/0x1950 [ 125.720872][T10258] alloc_workqueue_noprof+0xc7/0x130 [ 125.720886][T10258] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 125.720902][T10258] ? lockdep_init_map_type+0x5c/0x250 [ 125.720915][T10258] ? lockdep_init_map_type+0x5c/0x250 [ 125.720929][T10258] __rds_conn_create+0x1234/0x25a0 [ 125.720950][T10258] ? __pfx___rds_conn_create+0x10/0x10 [ 125.720964][T10258] ? trace_kmalloc+0xeb/0x110 [ 125.720976][T10258] ? __kasan_kmalloc+0xaa/0xb0 [ 125.720988][T10258] ? lockdep_init_map_type+0x5c/0x250 [ 125.721002][T10258] rds_conn_create_outgoing+0x44/0x60 [ 125.721019][T10258] rds_sendmsg+0x10da/0x34d0 [ 125.721030][T10258] ? trace_sched_exit_tp+0x120/0x160 [ 125.721050][T10258] ? __pfx_rds_sendmsg+0x10/0x10 [ 125.721068][T10258] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.721087][T10258] ? ____sys_sendmsg+0xa4d/0xbe0 [ 125.721103][T10258] ____sys_sendmsg+0xa4d/0xbe0 [ 125.721119][T10258] ? __pfx_rds_sendmsg+0x10/0x10 [ 125.721130][T10258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.721152][T10258] ___sys_sendmsg+0x190/0x1e0 [ 125.721168][T10258] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.721185][T10258] ? futex_wait+0x11e/0x370 [ 125.721207][T10258] ? find_held_lock+0x2b/0x80 [ 125.721231][T10258] __sys_sendmsg+0x160/0x210 [ 125.721244][T10258] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.721263][T10258] do_syscall_64+0x123/0x790 [ 125.721279][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.721290][T10258] RIP: 0033:0x7f8ea399e159 [ 125.721300][T10258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.721311][T10258] RSP: 002b:00007f8ea492e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.721322][T10258] RAX: ffffffffffffffda RBX: 00007f8ea3c25fa0 RCX: 00007f8ea399e159 [ 125.721329][T10258] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 125.721336][T10258] RBP: 00007f8ea3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 125.721342][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.721348][T10258] R13: 00007f8ea3c26038 R14: 00007f8ea3c25fa0 R15: 00007fff4fcf4168 [ 125.721362][T10258] [ 125.934479][ T64] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 126.074432][ T64] usb 9-1: device descriptor read/64, error -71 [ 126.224225][T10282] netlink: 19452 bytes leftover after parsing attributes in process `syz.8.1333'. [ 126.224241][T10282] openvswitch: netlink: Flow key attr not present in new flow. [ 126.260505][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1334'. [ 126.260526][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.348084][ T64] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 126.474689][ T64] usb 9-1: device descriptor read/64, error -71 [ 126.518389][T10302] netlink: 'syz.6.1341': attribute type 4 has an invalid length. [ 126.595134][ T64] usb usb9-port1: attempt power cycle [ 126.611044][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1343'. [ 126.611064][T10306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.674802][T10310] syzkaller0: entered promiscuous mode [ 126.674817][T10310] syzkaller0: entered allmulticast mode [ 126.790109][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1349'. [ 126.833794][T10323] bpf: Bad value for 'gid' [ 126.937184][ T64] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 126.955102][ T64] usb 9-1: device descriptor read/8, error -71 [ 126.955763][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1353'. [ 126.955793][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.960840][T10333] program syz.6.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.195222][ T64] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 127.225179][ T64] usb 9-1: device descriptor read/8, error -71 [ 127.344834][ T64] usb usb9-port1: unable to enumerate USB device [ 127.627468][ T43] audit: type=1400 audit(1789042462.808:831): avc: denied { setopt } for pid=10356 comm="syz.8.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.697689][ T43] audit: type=1400 audit(1789042462.878:832): avc: denied { create } for pid=10366 comm="syz.8.1368" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.698930][ T43] audit: type=1400 audit(1789042462.878:833): avc: denied { ioctl } for pid=10366 comm="syz.8.1368" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49504 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.971057][ T43] audit: type=1400 audit(1789042463.148:834): avc: denied { sqpoll } for pid=10394 comm="syz.8.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.085145][ T43] audit: type=1400 audit(1789042463.268:835): avc: denied { read write } for pid=10394 comm="syz.8.1379" name="uprobe_events" dev="tracefs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 128.085190][ T43] audit: type=1400 audit(1789042463.268:836): avc: denied { open } for pid=10394 comm="syz.8.1379" path="/188/bus/trace/uprobe_events" dev="tracefs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 128.093381][T10395] 9pnet_virtio: no channels available for device syz [ 128.238895][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1384'. [ 128.281404][T10415] e1000e 0000:00:02.0 eth1: removed PHC [ 128.331702][ T43] audit: type=1400 audit(1789042463.508:837): avc: denied { write } for pid=10417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.382831][ T43] audit: type=1400 audit(1789042463.558:838): avc: denied { write } for pid=10421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.404863][T10415] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 128.502495][ T43] audit: type=1400 audit(1789042463.678:839): avc: denied { write } for pid=10423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.549857][ T43] audit: type=1400 audit(1789042463.728:840): avc: denied { write } for pid=10426 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.617381][ T43] audit: type=1400 audit(1789042463.798:841): avc: denied { write } for pid=10428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.656043][T10419] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 128.662310][T10419] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 128.662370][T10419] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 128.662424][T10419] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 128.662478][T10419] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 128.662612][T10419] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 128.662866][T10419] pci 0000:00:02.0: enabling Extended Tags [ 128.673064][ T43] audit: type=1400 audit(1789042463.848:842): avc: denied { write } for pid=10431 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.719200][T10419] pci 0000:00:02.0: Adding to iommu group 2 [ 128.748035][T10419] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 128.748056][T10419] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 128.749359][T10419] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 128.750958][T10419] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 128.752158][T10419] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 128.787737][ T43] audit: type=1400 audit(1789042463.968:843): avc: denied { write } for pid=10435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.811106][T10419] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 128.876454][ T43] audit: type=1400 audit(1789042464.058:844): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.883874][T10419] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 128.938261][T10444] program syz.4.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.970329][ T43] audit: type=1400 audit(1789042464.148:845): avc: denied { write } for pid=10445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.031383][T10457] binder: 10456:10457 ioctl c008644e 200000000100 returned -22 [ 129.033984][ T43] audit: type=1400 audit(1789042464.208:846): avc: denied { write } for pid=10455 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.039708][T10419] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 129.039733][T10419] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 129.039958][T10419] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 129.095786][T10462] fuse: fd is not a fuse device [ 129.579188][T10505] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1402'. [ 129.583624][T10507] xt_hashlimit: size too large, truncated to 1048576 [ 129.666610][T10511] jffs2: notice: (10511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.824891][ T5445] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.044368][ T5805] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 130.195521][ T5805] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.196315][ T5805] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.196331][ T5805] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.196342][ T5805] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.196361][ T5805] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.200024][ T5805] usb 11-1: config 0 descriptor?? [ 130.299078][ T5874] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 130.606060][T10517] binder: 10516:10517 ioctl c0306201 2000000001c0 returned -14 [ 130.609764][T10517] comedi comedi1: fl512: I/O base address not correctly aligned [ 130.617393][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617427][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617445][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617463][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617481][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617522][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617618][ T5805] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.617632][ T5805] plantronics 0003:047F:FFFF.0004: collection stack underflow [ 130.617643][ T5805] plantronics 0003:047F:FFFF.0004: item 0 0 0 12 parsing failed [ 130.617916][ T5805] plantronics 0003:047F:FFFF.0004: parse failed [ 130.617956][ T5805] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 130.836256][T10552] program syz.8.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.836288][T10552] FAULT_INJECTION: forcing a failure. [ 130.836288][T10552] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.836305][T10552] CPU: 3 UID: 0 PID: 10552 Comm: syz.8.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.836320][T10552] Tainted: [L]=SOFTLOCKUP [ 130.836324][T10552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.836331][T10552] Call Trace: [ 130.836335][T10552] [ 130.836340][T10552] dump_stack_lvl+0x100/0x190 [ 130.836359][T10552] should_fail_ex.cold+0x5/0xa [ 130.836373][T10552] ? fs_reclaim_acquire+0x70/0x100 [ 130.836388][T10552] should_fail_alloc_page+0xeb/0x140 [ 130.836402][T10552] prepare_alloc_pages+0x1f0/0x5b0 [ 130.836418][T10552] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 130.836437][T10552] ? do_syscall_64+0x123/0x790 [ 130.836451][T10552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.836469][T10552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.836496][T10552] ? trace_kmem_cache_alloc+0xdd/0x100 [ 130.836509][T10552] ? __kasan_slab_alloc+0x89/0x90 [ 130.836523][T10552] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 130.836534][T10552] ? bio_associate_blkg+0xcf/0x730 [ 130.836547][T10552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.836561][T10552] ? policy_nodemask+0xed/0x4f0 [ 130.836576][T10552] alloc_pages_mpol+0x201/0x550 [ 130.836595][T10552] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 130.836614][T10552] ? rcu_is_watching+0x13/0xc0 [ 130.836630][T10552] alloc_pages_noprof+0x1a/0x160 [ 130.836647][T10552] blk_rq_map_kern+0x4d3/0x820 [ 130.836659][T10552] ? capable+0xd3/0xf0 [ 130.836671][T10552] scsi_ioctl+0xb4b/0x1870 [ 130.836685][T10552] ? __pfx_scsi_ioctl+0x10/0x10 [ 130.836696][T10552] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 130.836713][T10552] ? avc_has_perm_noaudit+0x145/0x3b0 [ 130.836729][T10552] ? avc_has_perm+0x135/0x1e0 [ 130.836743][T10552] ? __pfx_avc_has_perm+0x10/0x10 [ 130.836758][T10552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.836776][T10552] sg_ioctl+0x81e/0x26d0 [ 130.836790][T10552] ? inode_has_perm+0x16d/0x1d0 [ 130.836806][T10552] ? __pfx_sg_ioctl+0x10/0x10 [ 130.836819][T10552] ? find_held_lock+0x2b/0x80 [ 130.836839][T10552] ? selinux_file_ioctl+0xb6/0x290 [ 130.836851][T10552] ? __pfx_sg_ioctl+0x10/0x10 [ 130.836864][T10552] __x64_sys_ioctl+0x18e/0x210 [ 130.836876][T10552] do_syscall_64+0x123/0x790 [ 130.836892][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.836903][T10552] RIP: 0033:0x7fae6f99e159 [ 130.836913][T10552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.836923][T10552] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.836935][T10552] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 130.836942][T10552] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000003 [ 130.836948][T10552] RBP: 00007fae6dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.836955][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.836961][T10552] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 130.836979][T10552] [ 131.074446][T10581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.074747][T10581] overlayfs: failed to set xattr on upper [ 131.074753][T10581] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.074757][T10581] overlayfs: ...falling back to metacopy=off. [ 131.074761][T10581] overlayfs: ...falling back to index=off. [ 131.074765][T10581] overlayfs: ...falling back to uuid=null. [ 131.362863][ T1349] usb 11-1: USB disconnect, device number 4 [ 131.725249][ T50] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 131.786091][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1426'. [ 131.786113][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1426'. [ 131.787255][T10652] syzkaller0: entered promiscuous mode [ 131.787268][T10652] syzkaller0: entered allmulticast mode [ 131.789915][T10652] program syz.6.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.885217][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 131.887777][ T50] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.888960][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.888986][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.889034][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.892677][ T50] usb 9-1: config 0 descriptor?? [ 131.982824][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1428'. [ 132.036955][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1430'. [ 132.079029][T10663] netlink: 'syz.6.1430': attribute type 49 has an invalid length. [ 132.129575][T10663] ip6gretap0: entered promiscuous mode [ 132.129596][T10663] ip6gretap0: entered allmulticast mode [ 132.310195][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.310481][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.598867][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.598897][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.655280][T10692] FAULT_INJECTION: forcing a failure. [ 132.655280][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 132.655314][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.6.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.655342][T10692] Tainted: [L]=SOFTLOCKUP [ 132.655350][T10692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.655362][T10692] Call Trace: [ 132.655369][T10692] [ 132.655377][T10692] dump_stack_lvl+0x100/0x190 [ 132.655411][T10692] should_fail_ex.cold+0x5/0xa [ 132.655439][T10692] should_failslab+0xc2/0x120 [ 132.655465][T10692] __kmalloc_cache_node_noprof+0x94/0x720 [ 132.655491][T10692] ? __get_vm_area_node+0x124/0x350 [ 132.655519][T10692] __get_vm_area_node+0x124/0x350 [ 132.655543][T10692] ? stack_depot_save_flags+0x27/0x9f0 [ 132.655570][T10692] __vmalloc_node_range_noprof+0x268/0x1420 [ 132.655596][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.655621][T10692] ? kasan_save_stack+0x3f/0x50 [ 132.655642][T10692] ? kasan_save_stack+0x30/0x50 [ 132.655663][T10692] ? kasan_save_track+0x14/0x30 [ 132.655683][T10692] ? __kasan_kmalloc+0xaa/0xb0 [ 132.655704][T10692] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 132.655724][T10692] ? bpf_check+0x1b8e/0xa980 [ 132.655749][T10692] ? bpf_prog_load+0x1ac3/0x2a80 [ 132.655772][T10692] ? __sys_bpf+0x1f46/0x4a30 [ 132.655790][T10692] ? __x64_sys_bpf+0xce/0x140 [ 132.655813][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.655842][T10692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.655868][T10692] ? bpf_check_btf_info+0x2dc/0x1de0 [ 132.655897][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.655921][T10692] __vmalloc_node_noprof+0xad/0xf0 [ 132.655946][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.655973][T10692] __vmalloc_noprof+0xa3/0x120 [ 132.655999][T10692] ? __pfx___vmalloc_noprof+0x10/0x10 [ 132.656024][T10692] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 132.656043][T10692] ? __pfx_cmp_subprogs+0x10/0x10 [ 132.656063][T10692] ? sort+0x97/0xd0 [ 132.656087][T10692] ? __pfx_sort+0x10/0x10 [ 132.656105][T10692] ? __pfx_cmp_subprogs+0x10/0x10 [ 132.656130][T10692] bpf_prog_calc_tag+0x65/0x380 [ 132.656158][T10692] ? add_subprog+0x21e/0x2c0 [ 132.656184][T10692] bpf_check+0x5f2a/0xa980 [ 132.656212][T10692] ? __css_rstat_updated+0x1ce/0x590 [ 132.656236][T10692] ? __lock_acquire+0x5c0/0x1f40 [ 132.656260][T10692] ? __pfx___css_rstat_updated+0x10/0x10 [ 132.656301][T10692] ? __pfx_bpf_check+0x10/0x10 [ 132.656326][T10692] ? lock_acquire+0x1d1/0x380 [ 132.656346][T10692] ? bpf_prog_load+0x1a09/0x2a80 [ 132.656371][T10692] ? find_held_lock+0x2b/0x80 [ 132.656397][T10692] ? bpf_prog_load+0x1a09/0x2a80 [ 132.656427][T10692] ? __asan_memset+0x23/0x50 [ 132.656452][T10692] ? bpf_prog_load+0x1ac3/0x2a80 [ 132.656477][T10692] bpf_prog_load+0x1ac3/0x2a80 [ 132.656509][T10692] ? __pfx_bpf_prog_load+0x10/0x10 [ 132.656556][T10692] __sys_bpf+0x1f46/0x4a30 [ 132.656582][T10692] ? __pfx___sys_bpf+0x10/0x10 [ 132.656600][T10692] ? find_held_lock+0x2b/0x80 [ 132.656626][T10692] ? futex_wake+0x4ea/0x5e0 [ 132.656675][T10692] ? find_held_lock+0x2b/0x80 [ 132.656719][T10692] ? __x64_sys_futex+0x34f/0x4d0 [ 132.656744][T10692] ? __x64_sys_futex+0x358/0x4d0 [ 132.656773][T10692] ? xfd_validate_state+0x129/0x190 [ 132.656799][T10692] ? __x64_sys_bpf+0xce/0x140 [ 132.656817][T10692] __x64_sys_bpf+0xce/0x140 [ 132.656838][T10692] ? do_syscall_64+0xae/0x790 [ 132.656866][T10692] do_syscall_64+0x123/0x790 [ 132.656893][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.656916][T10692] RIP: 0033:0x7f9621b9e159 [ 132.656934][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.656953][T10692] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.656973][T10692] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 132.656985][T10692] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 132.656998][T10692] RBP: 00007f9621c3503b R08: 0000000000000000 R09: 0000000000000000 [ 132.657010][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.657021][T10692] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 132.657047][T10692] [ 132.657255][T10692] syz.6.1435: vmalloc error: size 176, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.657322][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.6.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.657349][T10692] Tainted: [L]=SOFTLOCKUP [ 132.657356][T10692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.657368][T10692] Call Trace: [ 132.657374][T10692] [ 132.657381][T10692] dump_stack_lvl+0x100/0x190 [ 132.657414][T10692] warn_alloc.cold+0x9e/0xb2 [ 132.657440][T10692] ? __pfx_warn_alloc+0x10/0x10 [ 132.657470][T10692] ? __kasan_kmalloc+0x8a/0xb0 [ 132.657532][T10692] ? __get_vm_area_node+0x22b/0x350 [ 132.657563][T10692] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 132.657590][T10692] ? kasan_save_stack+0x3f/0x50 [ 132.657610][T10692] ? kasan_save_stack+0x30/0x50 [ 132.657631][T10692] ? kasan_save_track+0x14/0x30 [ 132.657651][T10692] ? __kasan_kmalloc+0xaa/0xb0 [ 132.657671][T10692] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 132.657692][T10692] ? bpf_check+0x1b8e/0xa980 [ 132.657716][T10692] ? bpf_prog_load+0x1ac3/0x2a80 [ 132.657741][T10692] ? __sys_bpf+0x1f46/0x4a30 [ 132.657758][T10692] ? __x64_sys_bpf+0xce/0x140 [ 132.657782][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.657811][T10692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.657837][T10692] ? bpf_check_btf_info+0x2dc/0x1de0 [ 132.657865][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.657890][T10692] __vmalloc_node_noprof+0xad/0xf0 [ 132.657915][T10692] ? bpf_prog_calc_tag+0x65/0x380 [ 132.657943][T10692] __vmalloc_noprof+0xa3/0x120 [ 132.657968][T10692] ? __pfx___vmalloc_noprof+0x10/0x10 [ 132.657992][T10692] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 132.658011][T10692] ? __pfx_cmp_subprogs+0x10/0x10 [ 132.658031][T10692] ? sort+0x97/0xd0 [ 132.658049][T10692] ? __pfx_sort+0x10/0x10 [ 132.658066][T10692] ? __pfx_cmp_subprogs+0x10/0x10 [ 132.658096][T10692] bpf_prog_calc_tag+0x65/0x380 [ 132.658123][T10692] ? add_subprog+0x21e/0x2c0 [ 132.658147][T10692] bpf_check+0x5f2a/0xa980 [ 132.658172][T10692] ? __css_rstat_updated+0x1ce/0x590 [ 132.658197][T10692] ? __lock_acquire+0x5c0/0x1f40 [ 132.658219][T10692] ? __pfx___css_rstat_updated+0x10/0x10 [ 132.658258][T10692] ? __pfx_bpf_check+0x10/0x10 [ 132.658285][T10692] ? lock_acquire+0x1d1/0x380 [ 132.658305][T10692] ? bpf_prog_load+0x1a09/0x2a80 [ 132.658329][T10692] ? find_held_lock+0x2b/0x80 [ 132.658354][T10692] ? bpf_prog_load+0x1a09/0x2a80 [ 132.658382][T10692] ? __asan_memset+0x23/0x50 [ 132.658405][T10692] ? bpf_prog_load+0x1ac3/0x2a80 [ 132.658428][T10692] bpf_prog_load+0x1ac3/0x2a80 [ 132.658460][T10692] ? __pfx_bpf_prog_load+0x10/0x10 [ 132.658508][T10692] __sys_bpf+0x1f46/0x4a30 [ 132.658534][T10692] ? __pfx___sys_bpf+0x10/0x10 [ 132.658552][T10692] ? find_held_lock+0x2b/0x80 [ 132.658578][T10692] ? futex_wake+0x4ea/0x5e0 [ 132.658626][T10692] ? find_held_lock+0x2b/0x80 [ 132.658671][T10692] ? __x64_sys_futex+0x34f/0x4d0 [ 132.658695][T10692] ? __x64_sys_futex+0x358/0x4d0 [ 132.658723][T10692] ? xfd_validate_state+0x129/0x190 [ 132.658748][T10692] ? __x64_sys_bpf+0xce/0x140 [ 132.658766][T10692] __x64_sys_bpf+0xce/0x140 [ 132.658788][T10692] ? do_syscall_64+0xae/0x790 [ 132.658814][T10692] do_syscall_64+0x123/0x790 [ 132.658842][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.658863][T10692] RIP: 0033:0x7f9621b9e159 [ 132.658879][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.658897][T10692] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.658916][T10692] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 132.658929][T10692] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 132.658942][T10692] RBP: 00007f9621c3503b R08: 0000000000000000 R09: 0000000000000000 [ 132.658953][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.658964][T10692] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 132.658991][T10692] [ 132.659000][T10692] Mem-Info: [ 132.659008][T10692] active_anon:32948 inactive_anon:2613 isolated_anon:0 [ 132.659008][T10692] active_file:8327 inactive_file:12866 isolated_file:0 [ 132.659008][T10692] unevictable:1000 dirty:316 writeback:0 [ 132.659008][T10692] slab_reclaimable:8598 slab_unreclaimable:75588 [ 132.659008][T10692] mapped:23057 shmem:19310 pagetables:4051 [ 132.659008][T10692] sec_pagetables:307 bounce:0 [ 132.659008][T10692] kernel_misc_reclaimable:0 [ 132.659008][T10692] free:438644 free_pcp:30891 free_cma:0 [ 132.659054][T10692] Node 0 active_anon:131544kB inactive_anon:5184kB active_file:33308kB inactive_file:23296kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:78628kB dirty:920kB writeback:0kB shmem:69804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:20480kB kernel_stack:15584kB pagetables:6764kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.659112][T10692] Node 1 active_anon:248kB inactive_anon:5268kB active_file:0kB inactive_file:28168kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:13600kB dirty:344kB writeback:0kB shmem:7436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:768kB pagetables:9440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.659164][T10692] Node 0 DMA free:11436kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3728kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.659220][T10692] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 132.659257][T10692] Node 0 DMA32 free:209560kB boost:0kB min:27760kB low:34700kB high:41640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:127816kB inactive_anon:5184kB active_file:33308kB inactive_file:23296kB unevictable:2000kB writepending:920kB zspages:944kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:86300kB local_pcp:34132kB free_cma:0kB [ 132.659315][T10692] lowmem_reserve[]: 0 0 0 0 0 [ 132.659349][T10692] Node 1 Normal free:1533580kB boost:0kB min:39480kB low:49348kB high:59216kB reserved_highatomic:0kB free_highatomic:0kB active_anon:248kB inactive_anon:5268kB active_file:0kB inactive_file:28168kB unevictable:2000kB writepending:344kB zspages:112kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:37264kB local_pcp:19140kB free_cma:0kB [ 132.659402][T10692] lowmem_reserve[]: 0 0 0 0 0 [ 132.659437][T10692] Node 0 DMA: 13*4kB (UM) 11*8kB (UM) 8*16kB (UM) 7*32kB (UM) 9*64kB (UM) 3*128kB (UM) 3*256kB (U) 4*512kB (U) 1*1024kB (U) 3*2048kB (UM) 0*4096kB = 11436kB [ 132.659584][T10692] Node 0 DMA32: 612*4kB (UME) 1302*8kB (UME) 281*16kB (UME) 476*32kB (UME) 244*64kB (UME) 169*128kB (UME) 131*256kB (UME) 101*512kB (UME) 45*1024kB (UM) 4*2048kB (UM) 0*4096kB = 209360kB [ 132.659736][T10692] Node 1 Normal: 301*4kB (UE) 313*8kB (UME) 327*16kB (UE) 273*32kB (UM) 326*64kB (UE) 296*128kB (UME) 268*256kB (UE) 192*512kB (UME) 232*1024kB (UME) 24*2048kB (UM) 245*4096kB (UM) = 1533580kB [ 132.659895][T10692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.659910][T10692] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.659925][T10692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.659940][T10692] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.659955][T10692] 40540 total pagecache pages [ 132.659962][T10692] 11 pages in swap cache [ 132.659969][T10692] Free swap = 252kB [ 132.659975][T10692] Total swap = 124996kB [ 132.659983][T10692] 1048443 pages RAM [ 132.659989][T10692] 0 pages HighMem/MovableOnly [ 132.659996][T10692] 285903 pages reserved [ 132.660002][T10692] 0 pages cma reserved [ 132.821025][T10699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.821040][T10699] overlayfs: failed to set xattr on upper [ 132.821044][T10699] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.821048][T10699] overlayfs: ...falling back to metacopy=off. [ 132.821052][T10699] overlayfs: ...falling back to index=off. [ 132.821060][T10699] overlayfs: ...falling back to uuid=null. [ 132.879910][T10702] EXT4-fs (nbd8): unable to read superblock [ 133.154023][T10718] FAULT_INJECTION: forcing a failure. [ 133.154023][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 133.154054][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.8.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.154081][T10718] Tainted: [L]=SOFTLOCKUP [ 133.154088][T10718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.154100][T10718] Call Trace: [ 133.154107][T10718] [ 133.154115][T10718] dump_stack_lvl+0x100/0x190 [ 133.154160][T10718] should_fail_ex.cold+0x5/0xa [ 133.154201][T10718] ? __netlink_lookup+0x652/0x900 [ 133.154240][T10718] should_failslab+0xc2/0x120 [ 133.154270][T10718] kmem_cache_alloc_noprof+0x92/0x6a0 [ 133.154293][T10718] ? skb_clone+0x190/0x400 [ 133.154321][T10718] skb_clone+0x190/0x400 [ 133.154345][T10718] netlink_deliver_tap+0xaed/0xcc0 [ 133.154380][T10718] netlink_unicast+0x62b/0x850 [ 133.154405][T10718] ? __pfx_netlink_unicast+0x10/0x10 [ 133.154433][T10718] netlink_sendmsg+0x8b0/0xda0 [ 133.154458][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.154483][T10718] ? selinux_socket_sendmsg+0x198/0x2f0 [ 133.154519][T10718] ____sys_sendmsg+0xa4d/0xbe0 [ 133.154545][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.154567][T10718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.154601][T10718] ? lock_acquire+0x1d1/0x380 [ 133.154621][T10718] ? get_pid_task+0x2a/0x250 [ 133.154660][T10718] ___sys_sendmsg+0x190/0x1e0 [ 133.154690][T10718] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.154718][T10718] ? get_pid_task+0x106/0x250 [ 133.154753][T10718] ? find_held_lock+0x2b/0x80 [ 133.154797][T10718] __sys_sendmsg+0x160/0x210 [ 133.154821][T10718] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.154858][T10718] do_syscall_64+0x123/0x790 [ 133.154892][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.154912][T10718] RIP: 0033:0x7fae6f99e159 [ 133.154929][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.154947][T10718] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.154967][T10718] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 133.154980][T10718] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 133.154992][T10718] RBP: 00007fae6dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.155005][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.155017][T10718] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 133.155044][T10718] [ 133.159843][T10718] netlink: 'syz.8.1443': attribute type 2 has an invalid length. [ 133.338989][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 133.339002][ T43] audit: type=1400 audit(1789042468.518:866): avc: denied { lock } for pid=10731 comm="syz.6.1450" path="socket:[53277]" dev="sockfs" ino=53277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 133.339332][T10733] netlink: 'syz.6.1450': attribute type 7 has an invalid length. [ 133.339349][T10733] netlink: 'syz.6.1450': attribute type 8 has an invalid length. [ 133.836568][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1459'. [ 134.330671][T10768] overlayfs: workdir and upperdir must reside under the same mount [ 134.387241][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1465'. [ 134.387256][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1465'. [ 134.476374][ T43] audit: type=1800 audit(1789042469.648:867): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1467" name="bus" dev="tmpfs" ino=2088 res=0 errno=0 [ 134.549747][ T50] usbhid 9-1:0.0: can't add hid device: -71 [ 134.549801][ T50] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 134.552316][ T50] usb 9-1: USB disconnect, device number 17 [ 134.592992][T10783] FAULT_INJECTION: forcing a failure. [ 134.592992][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 134.593014][T10783] CPU: 3 UID: 0 PID: 10783 Comm: syz.4.1468 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.593029][T10783] Tainted: [L]=SOFTLOCKUP [ 134.593033][T10783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.593040][T10783] Call Trace: [ 134.593044][T10783] [ 134.593049][T10783] dump_stack_lvl+0x100/0x190 [ 134.593069][T10783] should_fail_ex.cold+0x5/0xa [ 134.593085][T10783] should_failslab+0xc2/0x120 [ 134.593100][T10783] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 134.593117][T10783] ? alloc_vmap_area+0x640/0x2bb0 [ 134.593139][T10783] alloc_vmap_area+0x640/0x2bb0 [ 134.593163][T10783] ? kasan_save_track+0x14/0x30 [ 134.593184][T10783] ? __kasan_kmalloc+0xaa/0xb0 [ 134.593203][T10783] ? __pfx_alloc_vmap_area+0x10/0x10 [ 134.593225][T10783] ? __get_vm_area_node+0x124/0x350 [ 134.593242][T10783] __get_vm_area_node+0x1ed/0x350 [ 134.593257][T10783] __vmalloc_node_range_noprof+0x268/0x1420 [ 134.593272][T10783] ? bpf_check+0x17fb/0xa980 [ 134.593290][T10783] ? bpf_check+0x17fb/0xa980 [ 134.593307][T10783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.593324][T10783] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.593340][T10783] ? bpf_check+0x17fb/0xa980 [ 134.593353][T10783] __vmalloc_node_noprof+0xad/0xf0 [ 134.593366][T10783] ? bpf_check+0x17fb/0xa980 [ 134.593385][T10783] __vmalloc_noprof+0xa3/0x120 [ 134.593403][T10783] ? __pfx___vmalloc_noprof+0x10/0x10 [ 134.593419][T10783] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 134.593434][T10783] ? security_bpf_prog_load+0x10f/0x2f0 [ 134.593444][T10783] ? bpf_vlog_init+0x118/0x150 [ 134.593461][T10783] bpf_check+0x17fb/0xa980 [ 134.593497][T10783] ? __css_rstat_updated+0x1ce/0x590 [ 134.593513][T10783] ? __lock_acquire+0x5c0/0x1f40 [ 134.593526][T10783] ? __pfx___css_rstat_updated+0x10/0x10 [ 134.593544][T10783] ? __lock_acquire+0x5c0/0x1f40 [ 134.593560][T10783] ? __pfx_bpf_check+0x10/0x10 [ 134.593575][T10783] ? lock_acquire+0x1d1/0x380 [ 134.593586][T10783] ? bpf_prog_load+0x1a09/0x2a80 [ 134.593600][T10783] ? find_held_lock+0x2b/0x80 [ 134.593621][T10783] ? bpf_prog_load+0x1a09/0x2a80 [ 134.593638][T10783] ? __asan_memset+0x23/0x50 [ 134.593650][T10783] ? bpf_prog_load+0x1ac3/0x2a80 [ 134.593664][T10783] bpf_prog_load+0x1ac3/0x2a80 [ 134.593681][T10783] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.593709][T10783] __sys_bpf+0x1f46/0x4a30 [ 134.593723][T10783] ? __pfx___sys_bpf+0x10/0x10 [ 134.593734][T10783] ? find_held_lock+0x2b/0x80 [ 134.593750][T10783] ? futex_wake+0x4ea/0x5e0 [ 134.593779][T10783] ? find_held_lock+0x2b/0x80 [ 134.593805][T10783] ? __x64_sys_futex+0x34f/0x4d0 [ 134.593819][T10783] ? __x64_sys_futex+0x358/0x4d0 [ 134.593835][T10783] ? xfd_validate_state+0x129/0x190 [ 134.593855][T10783] ? __x64_sys_bpf+0xce/0x140 [ 134.593870][T10783] __x64_sys_bpf+0xce/0x140 [ 134.593886][T10783] ? do_syscall_64+0xae/0x790 [ 134.593910][T10783] do_syscall_64+0x123/0x790 [ 134.593935][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.593956][T10783] RIP: 0033:0x7fd43959e159 [ 134.593971][T10783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.593987][T10783] RSP: 002b:00007fd43a3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.594004][T10783] RAX: ffffffffffffffda RBX: 00007fd439825fa0 RCX: 00007fd43959e159 [ 134.594015][T10783] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 134.594024][T10783] RBP: 00007fd43963503b R08: 0000000000000000 R09: 0000000000000000 [ 134.594033][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.594041][T10783] R13: 00007fd439826038 R14: 00007fd439825fa0 R15: 00007fff813aaeb8 [ 134.594060][T10783] [ 134.694605][T10789] FAULT_INJECTION: forcing a failure. [ 134.694605][T10789] name failslab, interval 1, probability 0, space 0, times 0 [ 134.694633][T10789] CPU: 2 UID: 0 PID: 10789 Comm: syz.8.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.694662][T10789] Tainted: [L]=SOFTLOCKUP [ 134.694668][T10789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.694677][T10789] Call Trace: [ 134.694683][T10789] [ 134.694689][T10789] dump_stack_lvl+0x100/0x190 [ 134.694717][T10789] should_fail_ex.cold+0x5/0xa [ 134.694741][T10789] should_failslab+0xc2/0x120 [ 134.694762][T10789] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 134.694780][T10789] ? __alloc_skb+0x5b7/0x710 [ 134.694797][T10789] ? __alloc_skb+0x140/0x710 [ 134.694817][T10789] __alloc_skb+0x140/0x710 [ 134.694832][T10789] ? __alloc_skb+0x5b7/0x710 [ 134.694848][T10789] ? __pfx___alloc_skb+0x10/0x10 [ 134.694870][T10789] netlink_alloc_large_skb+0x69/0x150 [ 134.694888][T10789] netlink_sendmsg+0x680/0xda0 [ 134.694907][T10789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.694924][T10789] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.694954][T10789] ____sys_sendmsg+0xa4d/0xbe0 [ 134.694974][T10789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.694992][T10789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.695018][T10789] ? lock_acquire+0x1d1/0x380 [ 134.695033][T10789] ? get_pid_task+0x2a/0x250 [ 134.695056][T10789] ___sys_sendmsg+0x190/0x1e0 [ 134.695080][T10789] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.695102][T10789] ? get_pid_task+0x106/0x250 [ 134.695131][T10789] ? find_held_lock+0x2b/0x80 [ 134.695166][T10789] __sys_sendmsg+0x160/0x210 [ 134.695185][T10789] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.695215][T10789] do_syscall_64+0x123/0x790 [ 134.695237][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.695274][T10789] RIP: 0033:0x7fae6f99e159 [ 134.695287][T10789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.695302][T10789] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.695319][T10789] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 134.695330][T10789] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.695339][T10789] RBP: 00007fae6dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.695348][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.695357][T10789] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 134.695380][T10789] [ 134.808543][T10806] FAULT_INJECTION: forcing a failure. [ 134.808543][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.808575][T10806] CPU: 2 UID: 0 PID: 10806 Comm: syz.9.1473 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.808600][T10806] Tainted: [L]=SOFTLOCKUP [ 134.808606][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.808615][T10806] Call Trace: [ 134.808622][T10806] [ 134.808628][T10806] dump_stack_lvl+0x100/0x190 [ 134.808665][T10806] should_fail_ex.cold+0x5/0xa [ 134.808691][T10806] _copy_from_iter+0x1f4/0x1690 [ 134.808717][T10806] ? __pfx__copy_from_iter+0x10/0x10 [ 134.808734][T10806] ? trace_kmalloc+0xeb/0x110 [ 134.808757][T10806] ? __kasan_kmalloc+0xaa/0xb0 [ 134.808777][T10806] ? __kmalloc_noprof+0x350/0x840 [ 134.808797][T10806] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 134.808827][T10806] kernfs_fop_write_iter+0x186/0x5f0 [ 134.808851][T10806] vfs_write+0x6af/0x1050 [ 134.808872][T10806] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 134.808895][T10806] ? __pfx_vfs_write+0x10/0x10 [ 134.808913][T10806] ? find_held_lock+0x2b/0x80 [ 134.808957][T10806] ksys_write+0x12a/0x250 [ 134.808977][T10806] ? __pfx_ksys_write+0x10/0x10 [ 134.809022][T10806] do_syscall_64+0x123/0x790 [ 134.809050][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.809071][T10806] RIP: 0033:0x7f8ea399e159 [ 134.809088][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.809106][T10806] RSP: 002b:00007f8ea492e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.809125][T10806] RAX: ffffffffffffffda RBX: 00007f8ea3c25fa0 RCX: 00007f8ea399e159 [ 134.809138][T10806] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 134.809149][T10806] RBP: 00007f8ea492e090 R08: 0000000000000000 R09: 0000000000000000 [ 134.809161][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.809172][T10806] R13: 00007f8ea3c26038 R14: 00007f8ea3c25fa0 R15: 00007fff4fcf4168 [ 134.809199][T10806] [ 134.831009][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1474'. [ 134.831029][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1474'. [ 134.834027][T10802] geneve3: entered promiscuous mode [ 135.182998][T10827] fuse: Bad value for 'fd' [ 135.191877][T10828] MINIX-fs: blocksize too small for device [ 135.199902][T10828] MINIX-fs: blocksize too small for device [ 135.202861][T10828] MINIX-fs: blocksize too small for device [ 135.208576][T10828] MINIX-fs: blocksize too small for device [ 135.212773][T10828] MINIX-fs: blocksize too small for device [ 135.219796][T10828] MINIX-fs: blocksize too small for device [ 135.221709][ T43] audit: type=1400 audit(1789042470.398:868): avc: denied { setopt } for pid=10826 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.223246][ T43] audit: type=1400 audit(1789042470.398:869): avc: denied { connect } for pid=10826 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.247760][ T43] audit: type=1400 audit(1789042470.428:870): avc: denied { execstack } for pid=10825 comm="syz.8.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 135.598866][ C1] sd 0:0:0:0: [sda] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.598911][ C1] sd 0:0:0:0: [sda] tag#4 CDB: Test Unit Ready [ 135.626907][T10844] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 135.663029][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1485'. [ 135.856663][T10857] capability: warning: `syz.6.1489' uses 32-bit capabilities (legacy support in use) [ 135.901273][T10860] FAULT_INJECTION: forcing a failure. [ 135.901273][T10860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.901294][T10860] CPU: 3 UID: 0 PID: 10860 Comm: syz.6.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.901310][T10860] Tainted: [L]=SOFTLOCKUP [ 135.901314][T10860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.901320][T10860] Call Trace: [ 135.901324][T10860] [ 135.901329][T10860] dump_stack_lvl+0x100/0x190 [ 135.901348][T10860] should_fail_ex.cold+0x5/0xa [ 135.901381][T10860] _copy_from_user+0x2e/0xd0 [ 135.901396][T10860] ____sys_sendmsg+0x1d1/0xbe0 [ 135.901413][T10860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.901432][T10860] ? lock_acquire+0x1d1/0x380 [ 135.901443][T10860] ? get_pid_task+0x2a/0x250 [ 135.901460][T10860] ___sys_sendmsg+0x190/0x1e0 [ 135.901498][T10860] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.901514][T10860] ? get_pid_task+0x106/0x250 [ 135.901534][T10860] ? find_held_lock+0x2b/0x80 [ 135.901558][T10860] __sys_sendmsg+0x160/0x210 [ 135.901574][T10860] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.901593][T10860] do_syscall_64+0x123/0x790 [ 135.901613][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.901630][T10860] RIP: 0033:0x7f9621b9e159 [ 135.901645][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.901661][T10860] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.901680][T10860] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 135.901691][T10860] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 135.901700][T10860] RBP: 00007f9622b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.901711][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.901720][T10860] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 135.901744][T10860] [ 136.020487][ C3] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 136.020512][ C3] sd 0:0:0:0: [sda] tag#14 CDB: Test Unit Ready [ 136.071214][T10870] FAULT_INJECTION: forcing a failure. [ 136.071214][T10870] name failslab, interval 1, probability 0, space 0, times 0 [ 136.071244][T10870] CPU: 2 UID: 0 PID: 10870 Comm: syz.6.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.071265][T10870] Tainted: [L]=SOFTLOCKUP [ 136.071275][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.071286][T10870] Call Trace: [ 136.071292][T10870] [ 136.071299][T10870] dump_stack_lvl+0x100/0x190 [ 136.071328][T10870] should_fail_ex.cold+0x5/0xa [ 136.071348][T10870] should_failslab+0xc2/0x120 [ 136.071371][T10870] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 136.071391][T10870] ? alloc_vmap_area+0x640/0x2bb0 [ 136.071413][T10870] alloc_vmap_area+0x640/0x2bb0 [ 136.071428][T10870] ? kasan_save_track+0x14/0x30 [ 136.071440][T10870] ? __kasan_kmalloc+0xaa/0xb0 [ 136.071457][T10870] ? __pfx_alloc_vmap_area+0x10/0x10 [ 136.071479][T10870] ? __get_vm_area_node+0x124/0x350 [ 136.071502][T10870] __get_vm_area_node+0x1ed/0x350 [ 136.071526][T10870] __vmalloc_node_range_noprof+0x268/0x1420 [ 136.071543][T10870] ? bpf_check+0x17fb/0xa980 [ 136.071561][T10870] ? bpf_check+0x17fb/0xa980 [ 136.071580][T10870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.071603][T10870] ? avc_has_perm_noaudit+0x145/0x3b0 [ 136.071630][T10870] ? bpf_check+0x17fb/0xa980 [ 136.071651][T10870] __vmalloc_node_noprof+0xad/0xf0 [ 136.071672][T10870] ? bpf_check+0x17fb/0xa980 [ 136.071687][T10870] __vmalloc_noprof+0xa3/0x120 [ 136.071719][T10870] ? __pfx___vmalloc_noprof+0x10/0x10 [ 136.071738][T10870] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 136.071753][T10870] ? security_bpf_prog_load+0x10f/0x2f0 [ 136.071765][T10870] ? bpf_vlog_init+0x118/0x150 [ 136.071781][T10870] bpf_check+0x17fb/0xa980 [ 136.071800][T10870] ? __css_rstat_updated+0x1ce/0x590 [ 136.071814][T10870] ? __lock_acquire+0x5c0/0x1f40 [ 136.071833][T10870] ? __pfx___css_rstat_updated+0x10/0x10 [ 136.071863][T10870] ? __lock_acquire+0x5c0/0x1f40 [ 136.071892][T10870] ? __pfx_bpf_check+0x10/0x10 [ 136.071907][T10870] ? lock_acquire+0x1d1/0x380 [ 136.071918][T10870] ? bpf_prog_load+0x1a09/0x2a80 [ 136.071932][T10870] ? find_held_lock+0x2b/0x80 [ 136.071946][T10870] ? bpf_prog_load+0x1a09/0x2a80 [ 136.071962][T10870] ? __asan_memset+0x23/0x50 [ 136.071975][T10870] ? bpf_prog_load+0x1ac3/0x2a80 [ 136.071988][T10870] bpf_prog_load+0x1ac3/0x2a80 [ 136.072005][T10870] ? __pfx_bpf_prog_load+0x10/0x10 [ 136.072031][T10870] __sys_bpf+0x1f46/0x4a30 [ 136.072045][T10870] ? __pfx___sys_bpf+0x10/0x10 [ 136.072057][T10870] ? find_held_lock+0x2b/0x80 [ 136.072072][T10870] ? futex_wake+0x4ea/0x5e0 [ 136.072098][T10870] ? find_held_lock+0x2b/0x80 [ 136.072122][T10870] ? __x64_sys_futex+0x34f/0x4d0 [ 136.072136][T10870] ? __x64_sys_futex+0x358/0x4d0 [ 136.072152][T10870] ? xfd_validate_state+0x129/0x190 [ 136.072169][T10870] ? __x64_sys_bpf+0xce/0x140 [ 136.072180][T10870] __x64_sys_bpf+0xce/0x140 [ 136.072190][T10870] ? do_syscall_64+0xae/0x790 [ 136.072209][T10870] do_syscall_64+0x123/0x790 [ 136.072234][T10870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.072254][T10870] RIP: 0033:0x7f9621b9e159 [ 136.072269][T10870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.072279][T10870] RSP: 002b:00007f9622b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.072291][T10870] RAX: ffffffffffffffda RBX: 00007f9621e25fa0 RCX: 00007f9621b9e159 [ 136.072299][T10870] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 136.072308][T10870] RBP: 00007f9621c3503b R08: 0000000000000000 R09: 0000000000000000 [ 136.072316][T10870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.072322][T10870] R13: 00007f9621e26038 R14: 00007f9621e25fa0 R15: 00007ffd89abc3e8 [ 136.072336][T10870] [ 136.168025][T10877] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 136.178560][T10877] typec_fusb302 0-0022: failed to request gpio_int_n [ 136.205877][T10877] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 136.207347][T10877] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 136.531171][T10905] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 136.606181][T10908] clocksource: Switched to clocksource acpi_pm [ 136.607794][T10908] netlink: 'syz.9.1504': attribute type 2 has an invalid length. [ 136.700347][T10920] bond1: (slave bond_slave_0): Device is not our slave [ 136.700369][T10920] bond1: option active_slave: invalid value (bond_slave_0) [ 136.702206][T10920] bond1 (unregistering): Released all slaves [ 136.783149][T10925] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(13310720.4.419430400), cmd(4) [ 136.792937][T10924] bridge0: port 3(ipvlan2) entered blocking state [ 136.793062][T10924] bridge0: port 3(ipvlan2) entered disabled state [ 136.793122][T10924] ipvlan2: entered allmulticast mode [ 136.793131][T10924] bridge0: entered allmulticast mode [ 136.794864][T10924] ipvlan2: left allmulticast mode [ 136.794873][T10924] bridge0: left allmulticast mode [ 137.087311][ T5805] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 137.254627][ T5805] usb 11-1: Using ep0 maxpacket: 32 [ 137.259469][ T5805] usb 11-1: unable to get BOS descriptor or descriptor too short [ 137.259501][ T5805] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 137.266245][ T5805] usb 11-1: string descriptor 0 read error: -22 [ 137.266305][ T5805] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.273984][ T5805] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 137.274016][ T5805] dw2102: su3000_power_ctrl: 1, initialized 0 [ 137.275927][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 137.290398][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.291023][ T5805] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 137.291047][ T5805] usb 11-1: media controller created [ 137.291262][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291272][ T5805] dw2102: i2c transfer failed. [ 137.291290][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291296][ T5805] dw2102: i2c transfer failed. [ 137.291301][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291307][ T5805] dw2102: i2c transfer failed. [ 137.291313][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291319][ T5805] dw2102: i2c transfer failed. [ 137.291324][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291330][ T5805] dw2102: i2c transfer failed. [ 137.291336][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 137.291342][ T5805] dw2102: i2c transfer failed. [ 137.291346][ T5805] dvb-usb: MAC address: 02:02:02:02:02:02 [ 137.303960][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.328302][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 137.328313][ T5805] dw2102: command 0x0e transfer failed. [ 137.328318][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 137.328324][ T5805] dw2102: command 0x0e transfer failed. [ 137.479434][T10943] FAULT_INJECTION: forcing a failure. [ 137.479434][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 137.479480][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.9.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.479507][T10943] Tainted: [L]=SOFTLOCKUP [ 137.479514][T10943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.479535][T10943] Call Trace: [ 137.479542][T10943] [ 137.479550][T10943] dump_stack_lvl+0x100/0x190 [ 137.479583][T10943] should_fail_ex.cold+0x5/0xa [ 137.479610][T10943] should_failslab+0xc2/0x120 [ 137.479636][T10943] __kmalloc_cache_noprof+0x91/0x6d0 [ 137.479666][T10943] ? nvmf_dev_write+0x14c/0xb60 [ 137.479696][T10943] nvmf_dev_write+0x14c/0xb60 [ 137.479725][T10943] vfs_write+0x2aa/0x1050 [ 137.479747][T10943] ? __pfx_nvmf_dev_write+0x10/0x10 [ 137.479770][T10943] ? lock_acquire+0x1d1/0x380 [ 137.479791][T10943] ? __fget_files+0x34/0x3d0 [ 137.479814][T10943] ? __pfx_vfs_write+0x10/0x10 [ 137.479832][T10943] ? find_held_lock+0x2b/0x80 [ 137.479857][T10943] ? __fget_files+0x215/0x3d0 [ 137.479879][T10943] ? __fget_files+0x215/0x3d0 [ 137.479906][T10943] ? __fget_files+0x21f/0x3d0 [ 137.479937][T10943] ksys_write+0x12a/0x250 [ 137.479956][T10943] ? __pfx_ksys_write+0x10/0x10 [ 137.479974][T10943] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 137.480013][T10943] do_syscall_64+0x123/0x790 [ 137.480041][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.480061][T10943] RIP: 0033:0x7f8ea399e159 [ 137.480078][T10943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.480096][T10943] RSP: 002b:00007f8ea492e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.480116][T10943] RAX: ffffffffffffffda RBX: 00007f8ea3c25fa0 RCX: 00007f8ea399e159 [ 137.480129][T10943] RDX: 000000000000002c RSI: 0000200000000400 RDI: 0000000000000003 [ 137.480141][T10943] RBP: 00007f8ea492e090 R08: 0000000000000000 R09: 0000000000000000 [ 137.480152][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.480163][T10943] R13: 00007f8ea3c26038 R14: 00007f8ea3c25fa0 R15: 00007fff4fcf4168 [ 137.480190][T10943] [ 137.595347][ T8274] nvmet: connect request for invalid subsystem testsubsys! [ 137.598169][T10945] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 137.637058][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 137.637071][ T5805] dw2102: command 0x0e transfer failed. [ 137.637075][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 137.637081][ T5805] dw2102: command 0x0e transfer failed. [ 137.637085][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 137.637091][ T5805] dw2102: command 0x51 transfer failed. [ 137.672617][ T5805] DVB: Unable to find symbol ds3000_attach() [ 137.672626][ T5805] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 137.708709][T10950] __nla_validate_parse: 1 callbacks suppressed [ 137.708727][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1517'. [ 137.708739][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1517'. [ 137.708750][T10950] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 137.755078][ T5805] rc_core: IR keymap rc-su3000 not found [ 137.755092][ T5805] Registered IR keymap rc-empty [ 137.756293][ T5805] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 137.757266][ T5805] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input14 [ 137.773294][ T5805] dvb-usb: schedule remote query interval to 150 msecs. [ 137.773312][ T5805] dw2102: su3000_power_ctrl: 0, initialized 1 [ 137.773324][ T5805] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 137.779175][ T5805] usb 11-1: USB disconnect, device number 5 [ 137.781612][T10954] FAULT_INJECTION: forcing a failure. [ 137.781612][T10954] name failslab, interval 1, probability 0, space 0, times 0 [ 137.781640][T10954] CPU: 3 UID: 0 PID: 10954 Comm: syz.9.1519 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.781664][T10954] Tainted: [L]=SOFTLOCKUP [ 137.781670][T10954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.781681][T10954] Call Trace: [ 137.781687][T10954] [ 137.781694][T10954] dump_stack_lvl+0x100/0x190 [ 137.781725][T10954] should_fail_ex.cold+0x5/0xa [ 137.781752][T10954] should_failslab+0xc2/0x120 [ 137.781774][T10954] __kmalloc_cache_noprof+0x91/0x6d0 [ 137.781802][T10954] ? rtnl_newlink+0x139/0x2620 [ 137.781827][T10954] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.781850][T10954] rtnl_newlink+0x139/0x2620 [ 137.781881][T10954] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.781901][T10954] ? avc_has_perm_noaudit+0x56/0x3b0 [ 137.781926][T10954] ? find_held_lock+0x2b/0x80 [ 137.781950][T10954] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 137.781973][T10954] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 137.782010][T10954] ? __lock_acquire+0x5c0/0x1f40 [ 137.782039][T10954] ? lock_acquire+0x1d1/0x380 [ 137.782057][T10954] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 137.782079][T10954] ? find_held_lock+0x2b/0x80 [ 137.782102][T10954] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.782123][T10954] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.782146][T10954] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.782169][T10954] rtnetlink_rcv_msg+0x95e/0xe90 [ 137.782198][T10954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.782228][T10954] ? ref_tracker_free+0x37e/0x6c0 [ 137.782254][T10954] netlink_rcv_skb+0x159/0x420 [ 137.782274][T10954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.782298][T10954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.782326][T10954] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.782359][T10954] netlink_unicast+0x585/0x850 [ 137.782381][T10954] ? __pfx_netlink_unicast+0x10/0x10 [ 137.782407][T10954] netlink_sendmsg+0x8b0/0xda0 [ 137.782430][T10954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.782452][T10954] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.782485][T10954] ____sys_sendmsg+0xa4d/0xbe0 [ 137.782508][T10954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.782529][T10954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.782559][T10954] ? lock_acquire+0x1d1/0x380 [ 137.782577][T10954] ? get_pid_task+0x2a/0x250 [ 137.782603][T10954] ___sys_sendmsg+0x190/0x1e0 [ 137.782632][T10954] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.782657][T10954] ? get_pid_task+0x106/0x250 [ 137.782690][T10954] ? find_held_lock+0x2b/0x80 [ 137.782729][T10954] __sys_sendmsg+0x160/0x210 [ 137.782751][T10954] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.782785][T10954] do_syscall_64+0x123/0x790 [ 137.782811][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.782829][T10954] RIP: 0033:0x7f8ea399e159 [ 137.782843][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.782859][T10954] RSP: 002b:00007f8ea492e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.782878][T10954] RAX: ffffffffffffffda RBX: 00007f8ea3c25fa0 RCX: 00007f8ea399e159 [ 137.782890][T10954] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 137.782901][T10954] RBP: 00007f8ea492e090 R08: 0000000000000000 R09: 0000000000000000 [ 137.782911][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.782922][T10954] R13: 00007f8ea3c26038 R14: 00007f8ea3c25fa0 R15: 00007fff4fcf4168 [ 137.782947][T10954] [ 137.857610][ T5805] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 137.897488][T10952] FAULT_INJECTION: forcing a failure. [ 137.897488][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.897520][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.8.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.897547][T10952] Tainted: [L]=SOFTLOCKUP [ 137.897555][T10952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.897566][T10952] Call Trace: [ 137.897572][T10952] [ 137.897579][T10952] dump_stack_lvl+0x100/0x190 [ 137.897612][T10952] should_fail_ex.cold+0x5/0xa [ 137.897638][T10952] strncpy_from_user+0x3b/0x2d0 [ 137.897662][T10952] bpf_prog_load+0x14dc/0x2a80 [ 137.897692][T10952] ? __pfx_bpf_prog_load+0x10/0x10 [ 137.897737][T10952] __sys_bpf+0x1f46/0x4a30 [ 137.897762][T10952] ? __pfx___sys_bpf+0x10/0x10 [ 137.897795][T10952] ? find_held_lock+0x2b/0x80 [ 137.897823][T10952] ? futex_wake+0x4ea/0x5e0 [ 137.897857][T10952] ? __lock_acquire+0x5c0/0x1f40 [ 137.897888][T10952] ? lock_acquire+0x1d1/0x380 [ 137.897906][T10952] ? __might_fault+0xc5/0x140 [ 137.897933][T10952] ? find_held_lock+0x2b/0x80 [ 137.897958][T10952] ? __might_fault+0xc5/0x140 [ 137.897983][T10952] ? __might_fault+0xc5/0x140 [ 137.898031][T10952] ? __x64_sys_futex+0x358/0x4d0 [ 137.898067][T10952] ? __x64_sys_bpf+0xce/0x140 [ 137.898086][T10952] __x64_sys_bpf+0xce/0x140 [ 137.898108][T10952] ? do_syscall_64+0xae/0x790 [ 137.898133][T10952] do_syscall_64+0x123/0x790 [ 137.898159][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.898177][T10952] RIP: 0033:0x7fae6f99e159 [ 137.898191][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.898203][T10952] RSP: 002b:00007fae6dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.898215][T10952] RAX: ffffffffffffffda RBX: 00007fae6fc25fa0 RCX: 00007fae6f99e159 [ 137.898223][T10952] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 137.898230][T10952] RBP: 00007fae6fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 137.898237][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.898244][T10952] R13: 00007fae6fc26038 R14: 00007fae6fc25fa0 R15: 00007fffdbadb0b8 [ 137.898260][T10952] [ 138.410147][T10967] BUG: using smp_processor_id() in preemptible [00000000] code: syz.6.1525/10967 [ 138.410176][T10967] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.410208][T10967] CPU: 2 UID: 0 PID: 10967 Comm: syz.6.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.410231][T10967] Tainted: [L]=SOFTLOCKUP [ 138.410236][T10967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.410247][T10967] Call Trace: [ 138.410253][T10967] [ 138.410260][T10967] dump_stack_lvl+0x100/0x190 [ 138.410285][T10967] check_preemption_disabled+0xd2/0xe0 [ 138.410311][T10967] ? sk_stream_kill_queues+0x115/0x390 [ 138.410326][T10967] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.410347][T10967] ? kfree+0x1e5/0x6d0 [ 138.410369][T10967] ? sk_stream_kill_queues+0x115/0x390 [ 138.410387][T10967] trace_kfree_skb+0x18b/0x230 [ 138.410411][T10967] sk_skb_reason_drop+0xb7/0x1b0 [ 138.410433][T10967] sk_stream_kill_queues+0x115/0x390 [ 138.410452][T10967] inet_csk_destroy_sock+0x1aa/0x3d0 [ 138.410491][T10967] tcp_done+0x257/0x360 [ 138.410509][T10967] tcp_rcv_state_process+0x259e/0x7190 [ 138.410534][T10967] ? sk_reset_timer+0x35/0xd0 [ 138.410555][T10967] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 138.410578][T10967] ? tcp_write_xmit+0x18cb/0x8470 [ 138.410602][T10967] ? lock_acquire+0x1d1/0x380 [ 138.410623][T10967] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 138.410646][T10967] ? tcp_v4_do_rcv+0x691/0x1260 [ 138.410668][T10967] tcp_v4_do_rcv+0x691/0x1260 [ 138.410692][T10967] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 138.410715][T10967] __release_sock+0x35a/0x440 [ 138.410740][T10967] __tcp_close+0x572/0x10d0 [ 138.410766][T10967] ? __local_bh_enable_ip+0xa5/0x120 [ 138.410787][T10967] tcp_close+0x28/0x110 [ 138.410812][T10967] inet_release+0xed/0x200 [ 138.410836][T10967] __sock_release+0xb3/0x260 [ 138.410855][T10967] ? __pfx_sock_close+0x10/0x10 [ 138.410874][T10967] sock_close+0x1c/0x30 [ 138.410891][T10967] __fput+0x3ff/0xb50 [ 138.410919][T10967] task_work_run+0x150/0x240 [ 138.410944][T10967] ? __pfx_task_work_run+0x10/0x10 [ 138.410976][T10967] exit_to_user_mode_loop+0x1d8/0x700 [ 138.410995][T10967] ? rcu_is_watching+0x13/0xc0 [ 138.411018][T10967] do_syscall_64+0x661/0x790 [ 138.411044][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.411062][T10967] RIP: 0033:0x7f9621b9e159 [ 138.411077][T10967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.411092][T10967] RSP: 002b:00007ffd89abc548 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.411110][T10967] RAX: 0000000000000000 RBX: 00007ffd89abc630 RCX: 00007f9621b9e159 [ 138.411121][T10967] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.411132][T10967] RBP: 0000000000021b85 R08: 0000000000000001 R09: 0000000000000000 [ 138.411142][T10967] R10: 0000001b2c920000 R11: 0000000000000246 R12: 00007ffd89abc670 [ 138.411152][T10967] R13: 00007f9621e25fac R14: 0000000000021c2c R15: 00007f9621e25fa0 [ 138.411181][T10967] [ 138.500739][T10974] BUG: using smp_processor_id() in preemptible [00000000] code: syz.9.1527/10974 [ 138.500758][T10974] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.500794][T10974] CPU: 2 UID: 0 PID: 10974 Comm: syz.9.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.500818][T10974] Tainted: [L]=SOFTLOCKUP [ 138.500825][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.500835][T10974] Call Trace: [ 138.500842][T10974] [ 138.500849][T10974] dump_stack_lvl+0x100/0x190 [ 138.500876][T10974] check_preemption_disabled+0xd2/0xe0 [ 138.500894][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.500908][T10974] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.500924][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.500938][T10974] trace_kfree_skb+0x18b/0x230 [ 138.500953][T10974] sk_skb_reason_drop+0xb7/0x1b0 [ 138.500967][T10974] skb_queue_purge_reason+0x2aa/0x420 [ 138.500980][T10974] ? synchronize_rcu_expedited+0x3c3/0x450 [ 138.500994][T10974] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 138.501016][T10974] packet_release+0x839/0xd70 [ 138.501032][T10974] ? __pfx_packet_release+0x10/0x10 [ 138.501045][T10974] ? __pfx_down_write+0x10/0x10 [ 138.501063][T10974] __sock_release+0xb3/0x260 [ 138.501076][T10974] ? __pfx_sock_close+0x10/0x10 [ 138.501088][T10974] sock_close+0x1c/0x30 [ 138.501100][T10974] __fput+0x3ff/0xb50 [ 138.501115][T10974] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.501128][T10974] task_work_run+0x150/0x240 [ 138.501145][T10974] ? __pfx_task_work_run+0x10/0x10 [ 138.501165][T10974] exit_to_user_mode_loop+0x1d8/0x700 [ 138.501178][T10974] ? rcu_is_watching+0x13/0xc0 [ 138.501193][T10974] do_syscall_64+0x661/0x790 [ 138.501209][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.501220][T10974] RIP: 0033:0x7f8ea399e159 [ 138.501230][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.501240][T10974] RSP: 002b:00007fff4fcf42c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.501251][T10974] RAX: 0000000000000000 RBX: 00007f8ea3c27da0 RCX: 00007f8ea399e159 [ 138.501258][T10974] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.501265][T10974] RBP: 00007f8ea3c27da0 R08: 00007f8ea3c26038 R09: 0000000000000000 [ 138.501271][T10974] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 0000000000021f59 [ 138.501278][T10974] R13: 00007f8ea3c2609c R14: 0000000000021c9f R15: 00007f8ea3c26090 [ 138.501291][T10974] [ 138.501363][T10974] BUG: using smp_processor_id() in preemptible [00000000] code: syz.9.1527/10974 [ 138.501373][T10974] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.501391][T10974] CPU: 2 UID: 0 PID: 10974 Comm: syz.9.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.501405][T10974] Tainted: [L]=SOFTLOCKUP [ 138.501409][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.501415][T10974] Call Trace: [ 138.501418][T10974] [ 138.501422][T10974] dump_stack_lvl+0x100/0x190 [ 138.501438][T10974] check_preemption_disabled+0xd2/0xe0 [ 138.501471][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.501486][T10974] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.501502][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.501519][T10974] trace_kfree_skb+0x18b/0x230 [ 138.501535][T10974] sk_skb_reason_drop+0xb7/0x1b0 [ 138.501549][T10974] skb_queue_purge_reason+0x2aa/0x420 [ 138.501562][T10974] ? synchronize_rcu_expedited+0x3c3/0x450 [ 138.501575][T10974] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 138.501607][T10974] packet_release+0x839/0xd70 [ 138.501623][T10974] ? __pfx_packet_release+0x10/0x10 [ 138.501636][T10974] ? __pfx_down_write+0x10/0x10 [ 138.501654][T10974] __sock_release+0xb3/0x260 [ 138.501667][T10974] ? __pfx_sock_close+0x10/0x10 [ 138.501679][T10974] sock_close+0x1c/0x30 [ 138.501691][T10974] __fput+0x3ff/0xb50 [ 138.501705][T10974] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.501719][T10974] task_work_run+0x150/0x240 [ 138.501735][T10974] ? __pfx_task_work_run+0x10/0x10 [ 138.501755][T10974] exit_to_user_mode_loop+0x1d8/0x700 [ 138.501768][T10974] ? rcu_is_watching+0x13/0xc0 [ 138.501783][T10974] do_syscall_64+0x661/0x790 [ 138.501799][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.501810][T10974] RIP: 0033:0x7f8ea399e159 [ 138.501818][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.501828][T10974] RSP: 002b:00007fff4fcf42c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.501838][T10974] RAX: 0000000000000000 RBX: 00007f8ea3c27da0 RCX: 00007f8ea399e159 [ 138.501844][T10974] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.501851][T10974] RBP: 00007f8ea3c27da0 R08: 00007f8ea3c26038 R09: 0000000000000000 [ 138.501857][T10974] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 0000000000021f59 [ 138.501867][T10974] R13: 00007f8ea3c2609c R14: 0000000000021c9f R15: 00007f8ea3c26090 [ 138.501889][T10974] [ 138.502064][T10974] BUG: using smp_processor_id() in preemptible [00000000] code: syz.9.1527/10974 [ 138.502074][T10974] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.502092][T10974] CPU: 2 UID: 0 PID: 10974 Comm: syz.9.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.502106][T10974] Tainted: [L]=SOFTLOCKUP [ 138.502110][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.502116][T10974] Call Trace: [ 138.502119][T10974] [ 138.502123][T10974] dump_stack_lvl+0x100/0x190 [ 138.502139][T10974] check_preemption_disabled+0xd2/0xe0 [ 138.502155][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.502169][T10974] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.502185][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.502198][T10974] trace_kfree_skb+0x18b/0x230 [ 138.502214][T10974] sk_skb_reason_drop+0xb7/0x1b0 [ 138.502228][T10974] skb_queue_purge_reason+0x2aa/0x420 [ 138.502241][T10974] ? synchronize_rcu_expedited+0x3c3/0x450 [ 138.502254][T10974] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 138.502275][T10974] packet_release+0x839/0xd70 [ 138.502289][T10974] ? __pfx_packet_release+0x10/0x10 [ 138.502302][T10974] ? __pfx_down_write+0x10/0x10 [ 138.502320][T10974] __sock_release+0xb3/0x260 [ 138.502333][T10974] ? __pfx_sock_close+0x10/0x10 [ 138.502345][T10974] sock_close+0x1c/0x30 [ 138.502357][T10974] __fput+0x3ff/0xb50 [ 138.502372][T10974] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.502385][T10974] task_work_run+0x150/0x240 [ 138.502402][T10974] ? __pfx_task_work_run+0x10/0x10 [ 138.502421][T10974] exit_to_user_mode_loop+0x1d8/0x700 [ 138.502434][T10974] ? rcu_is_watching+0x13/0xc0 [ 138.502449][T10974] do_syscall_64+0x661/0x790 [ 138.502464][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.502475][T10974] RIP: 0033:0x7f8ea399e159 [ 138.502484][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.502494][T10974] RSP: 002b:00007fff4fcf42c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.502504][T10974] RAX: 0000000000000000 RBX: 00007f8ea3c27da0 RCX: 00007f8ea399e159 [ 138.502510][T10974] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.502520][T10974] RBP: 00007f8ea3c27da0 R08: 00007f8ea3c26038 R09: 0000000000000000 [ 138.502527][T10974] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 0000000000021f59 [ 138.502533][T10974] R13: 00007f8ea3c2609c R14: 0000000000021c9f R15: 00007f8ea3c26090 [ 138.502547][T10974] [ 138.502586][T10974] BUG: using smp_processor_id() in preemptible [00000000] code: syz.9.1527/10974 [ 138.502596][T10974] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.502613][T10974] CPU: 2 UID: 0 PID: 10974 Comm: syz.9.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.502627][T10974] Tainted: [L]=SOFTLOCKUP [ 138.502631][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.502637][T10974] Call Trace: [ 138.502640][T10974] [ 138.502644][T10974] dump_stack_lvl+0x100/0x190 [ 138.502660][T10974] check_preemption_disabled+0xd2/0xe0 [ 138.502676][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.502689][T10974] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 138.502705][T10974] ? skb_queue_purge_reason+0x2aa/0x420 [ 138.502719][T10974] trace_kfree_skb+0x18b/0x230 [ 138.502734][T10974] sk_skb_reason_drop+0xb7/0x1b0 [ 138.502747][T10974] skb_queue_purge_reason+0x2aa/0x420 [ 138.502760][T10974] ? synchronize_rcu_expedited+0x3c3/0x450 [ 138.502773][T10974] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 138.502795][T10974] packet_release+0x839/0xd70 [ 138.502809][T10974] ? __pfx_packet_release+0x10/0x10 [ 138.502823][T10974] ? __pfx_down_write+0x10/0x10 [ 138.502850][T10974] __sock_release+0xb3/0x260 [ 138.502868][T10974] ? __pfx_sock_close+0x10/0x10 [ 138.502889][T10974] sock_close+0x1c/0x30 [ 138.502908][T10974] __fput+0x3ff/0xb50 [ 138.502930][T10974] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.502953][T10974] task_work_run+0x150/0x240 [ 138.502979][T10974] ? __pfx_task_work_run+0x10/0x10 [ 138.503011][T10974] exit_to_user_mode_loop+0x1d8/0x700 [ 138.503031][T10974] ? rcu_is_watching+0x13/0xc0 [ 138.503057][T10974] do_syscall_64+0x661/0x790 [ 138.503082][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.503115][T10974] RIP: 0033:0x7f8ea399e159 [ 138.503130][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.503144][T10974] RSP: 002b:00007fff4fcf42c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.503160][T10974] RAX: 0000000000000000 RBX: 00007f8ea3c27da0 RCX: 00007f8ea399e159 [ 138.503170][T10974] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.503181][T10974] RBP: 00007f8ea3c27da0 R08: 00007f8ea3c26038 R09: 0000000000000000 [ 138.503191][T10974] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 0000000000021f59 [ 138.503202][T10974] R13: 00007f8ea3c2609c R14: 0000000000021c9f R15: 00007f8ea3c26090 [ 138.503226][T10974] [ 138.611268][T10978] binder: 10977:10978 unknown command 0 [ 138.611288][T10978] binder: 10977:10978 ioctl c0306201 2000000004c0 returned -22 [ 140.782111][ T43] audit: type=1400 audit(1789042475.956:871): avc: denied { write } for pid=10982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.824045][ T43] audit: type=1400 audit(1789042475.996:872): avc: denied { write } for pid=10985 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.736173][ T43] audit: type=1400 audit(1789042476.916:873): avc: denied { write } for pid=10988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.808619][ T43] audit: type=1400 audit(1789042476.986:874): avc: denied { write } for pid=10991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.947647][ T43] audit: type=1400 audit(1789042479.126:875): avc: denied { write } for pid=10995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.026640][ T43] audit: type=1400 audit(1789042479.206:876): avc: denied { write } for pid=10998 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.101783][ T43] audit: type=1400 audit(1789042480.276:877): avc: denied { write } for pid=11001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.179734][ T43] audit: type=1400 audit(1789042480.356:878): avc: denied { write } for pid=11004 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1