last executing test programs: 12m33.71251249s ago: executing program 32 (id=1745): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000140)=0xc6, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) 12m3.033715906s ago: executing program 33 (id=2286): setrlimit(0x9, &(0x7f0000000000)={0x6, 0x6}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x189100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xc, 0x1, 0x0, {0x2, 0x2, 0x2}}, {0x7, 0x2, 0x0, {0x4, 0x2}}, {0x7, 0x2, 0x0, {0xfff, 0x7}}, {0x81, 0x2, 0x0, {0x1, 0x5}}], 0x4, 0x20, 0x5, 0xbd8}) r3 = dup2(r0, r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000300)=r6) tee(r3, r0, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000340)={0xa, [0x5, 0x0, 0xb, 0x401, 0x3, 0x3, 0x8, 0x3, 0x8, 0x8]}, &(0x7f0000000380)=0x18) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r7, 0x8004af81, &(0x7f0000000400)) openat$cgroup_devices(r5, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000480)={0xc, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x2a0c01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000500)=""/41, &(0x7f0000000540)=""/249, &(0x7f0000000640)=""/160, 0x4}) finit_module(r4, &(0x7f0000000740)='/dev/iommu\x00', 0x2) fcntl$setsig(r2, 0xa, 0xe) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000780)) r9 = syz_open_dev$radio(&(0x7f00000007c0), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000800)={0xfffffffe, 0xd}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000840)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, r10, 0xed74a8d4c223a3fa, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x810, 0x4e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000b00)={0x1, 0x0, 0x98, &(0x7f0000000a40)={0x80000000, 0x1, 0x11}}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000b40)) 10m31.449559705s ago: executing program 34 (id=3311): ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000000)=0xdaf) (async) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x8080000) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x2, 0x1, 0x3, 0x3, 0x3, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x86}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x644, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x9, 0x9, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x35, 0x0, 0x6, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r2, r0, 0xc, 0x2c, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r1}, 0x20) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x224cc0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x68}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xffc0843c33549c9d}, 0x4010) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000006c0)=@arm64={0x10, 0xff, 0xff, '\x00', 0x3}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r6, &(0x7f0000000800), &(0x7f0000000840)=0x20) (async) r7 = accept$inet6(r3, &(0x7f0000000880)={0xa, 0x0, 0x0, @private1}, &(0x7f00000008c0)=0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000900)={0x4, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0x10, [0xfffffffffffffc2f]}}]}, 0x28) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) close_range(r6, r2, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000a40)={"dd9e5dc0a1220dff21584879f64b610cec68eff2343bf8c1428c3febb9da", 0xf8, 0x9, 0x5, [0x80000000, 0xe2c2, 0x9, 0x7, 0x7a6, 0x2, 0x5, 0x100, 0x0, 0xf919, 0x5, 0x9, 0x8, 0x75d6f948, 0x2, 0x800, 0xfffffffc, 0x2]}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r10, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000c40), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r12, 0x10, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8800) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000d40)={'macvlan1\x00', 0x1, 0x5}) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r11) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r13, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000f80)=r0, 0x4) 10m10.622147732s ago: executing program 35 (id=3332): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x78) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x188, 0x29, 0x8, 0x70bd2a, 0x25dfdbff, {0xd}, [@generic="83aa84263a07f88b54d20c3a092b8b255fe55ca914162d2ba16de9cd0588c16de04fc1e087b4b90a1ad137efacfeaac5d4a5a3345cc9a527503f0e9812f91fddb65fa2433bd3169599", @generic="67a26cb969e809b381cbb6c2294be752dd4960efe9658356394cfc75fa3feb58b2e9d694840de6c90b81fda151e35ec71c76e3efaf96e2f8dc50b0d37f51ec6fa3447a2c9e2ecfaa27dec3a29c219b9b16eb687f0693e0b2b0378ea766c50585462086bbf0773ed7334d9d0373bcdba310eba7016f163293f8201501088db7dae99c7e1e3107f4b1dd6d5fcd74", @nested={0x10, 0xf4, 0x0, 0x1, [@typed={0xc, 0xac, 0x0, 0x0, @u64=0x6}]}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@private0}, @generic="713efe54a9d77af0d339f3c358d95f48240ec954e8eb5f06edaec0d2aba306a2d192536f8f893762c85c888c4924e9875eea3eb9082740be2da0ff17dafdc120bc6e9231ee880ed9a189a4d2b46564e3ce5a1e85f07cd756a3cb0c9c92ffe5b8b9bb104490c49cfe47cfb141", @typed={0xa, 0xb5, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x46011) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000200)={0x34, 0x0, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}}, 0x810) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24090001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) 9m15.291515911s ago: executing program 5 (id=4010): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x7, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8006, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m15.231709807s ago: executing program 5 (id=4011): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x40800) r1 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x80300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002600010b00bd7000fcffffff150000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, 0xffffffffffffffff, 0x1c661000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 9m14.182571164s ago: executing program 5 (id=4016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04040225ff1e0193288225a6eaaa36f076736dffffffff03001d01"], 0xd) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) 9m13.331409486s ago: executing program 5 (id=4031): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000018140100000000bd0900000000000000000000000800030001000000abfc0c6b1f31538baafa16255ec77dd1209c0eec3e6d4d1c5a4a09b6d73128b10ecb876003d9e554796a8e3733b20296024800000000"], 0x20}}, 0x400c044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000140000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c2e3d3842530f342bc4c814826bb1048b8a11ef8a3ae4565da0fcee4c79fb4bc06b0e8f9b8f0d6fef7541ef241b0b75613807082c4b8456d692c1c43b32cbcd1339dd193002a30b9e4af37128c81b6399faf9b9d949c98b32acc8930b00efa344031796659a0e06e87712126d2f5e7e88baa62d9c8ddac7ef66b778fe739e1718593e4fd231f0e68adfecde7ada0df"], 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000180)=0xc) ptrace(0x10, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracefs_dir\x00', &(0x7f0000000380)='tracefs\x00', 0x200802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) ptrace$peekuser(0x3, r3, 0x350) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0x0) landlock_restrict_self(r5, 0xa) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x748d7d1f, 0xfffe, 0x2, 0x87, 0x6}) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) waitid(0x0, r8, 0x0, 0xb, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x801070cf, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9m12.814630929s ago: executing program 5 (id=4037): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9m12.231643252s ago: executing program 5 (id=4048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x2200, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 9m12.131312164s ago: executing program 36 (id=4048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x2200, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 9m3.518915001s ago: executing program 8 (id=4136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x254}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m3.242357031s ago: executing program 8 (id=4140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff2000320e0003000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m2.202300649s ago: executing program 8 (id=4143): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000c0104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}}, 0x0) 9m1.944799542s ago: executing program 8 (id=4148): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 9m1.769038153s ago: executing program 8 (id=4149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x254}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m1.362125549s ago: executing program 8 (id=4157): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 9m1.14849989s ago: executing program 37 (id=4157): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 8m47.743729252s ago: executing program 9 (id=4285): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB="f3a860609f078d65cd0a7fbcdd8a2571d661e5acd99b31f073c0f12a8ba5a7e7d52bc55c5e40dedcce59ef75b492d9e60caf5e477719d1384b7caef27a49d0ea0754e4c0d1ff3c2ac8cf20dce46ef20640189c052630635f0694294dd272da600dd22885f474abbc515034435053d3fb9f63dd37e160cf96898c946697de6d193161563d0151cdb912bb1e5425", @ANYRES8=r2, @ANYRES8=r2], 0x0, 0x37, 0x0, 0x1, 0x207, 0x10000, @value=r2}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48) r5 = fsmount(r1, 0x1, 0xe) fchdir(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r5}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r8 = fanotify_init(0xf00, 0x2) fanotify_mark(r8, 0x105, 0x8971, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a00000009000000050000008800000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000010500"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) 8m47.522617868s ago: executing program 9 (id=4288): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x4000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 8m47.425027244s ago: executing program 9 (id=4291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x1300}, 0x0) 8m47.213592978s ago: executing program 9 (id=4296): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000160001ebb46d443cc7ab40250a800000ff000105000000000800049ff5bd38f64c00", @ANYRES32=r1, @ANYBLOB="0600150003000000100016800c0001000000000000000000"], 0x3c}}, 0x40000) 8m47.143293286s ago: executing program 9 (id=4299): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fcff8918c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 8m46.74437881s ago: executing program 9 (id=4304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 8m46.628713251s ago: executing program 38 (id=4304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 8m2.099906998s ago: executing program 7 (id=4830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd7000040000000300000004004880812c01"], 0x2c9c}, 0x1, 0x0, 0x2000, 0x200048d0}, 0x4008094) 8m2.097228618s ago: executing program 7 (id=4832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 8m1.989826533s ago: executing program 7 (id=4833): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0x34000}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x8015) close(0x3) 8m1.670139974s ago: executing program 7 (id=4837): r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001300)={r1, 0x94, "0f4c1cb70a881ffb53afca6b988d2866e54591411d62a4e1cb9ceb07bc0148441d2d7894ba232ce929980e0df271840dd76995a0e3fe3a7bcabf93753e1740ad8951816be8f53fb9b69e0e1d90bfdad149580e96594403f81315fe2f735e877e8f2357e5849b29d45ee76a721861c4dc060cb796736524b7fe374b4b459a3a494cd3a569ee7bbc3adcd9e1e25d09dc93486b001f"}, &(0x7f00000013c0)=0x9c) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') (async) chroot(&(0x7f0000001140)='./file0\x00') mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000001400)='./file0/../file0\x00', &(0x7f0000001440)='anon_inodefs\x00', 0x2, &(0x7f0000001480)='\x06\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1c, 0x2b, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}}, 0x10) statx(r0, &(0x7f0000001580)='./file0/../file0\x00', 0x0, 0x10, &(0x7f00000015c0)) (async) statx(r0, &(0x7f0000001580)='./file0/../file0\x00', 0x0, 0x10, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@can_delroute={0x34, 0x19, 0x300, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "81ee000500"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getdents64(r0, &(0x7f00000014c0)=""/130, 0x82) (async) getdents64(r0, &(0x7f00000014c0)=""/130, 0x82) 8m1.581555205s ago: executing program 7 (id=4838): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x3, 0x80, 0x3, 0x9, [0x800, 0x9]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) (async, rerun: 64) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x19, 0x0, &(0x7f0000000100)) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xffff}, {0x3, 0xffff}, {0x1, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x40001) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 8m0.942298856s ago: executing program 7 (id=4844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0xf5, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) 8m0.745484185s ago: executing program 39 (id=4844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0xf5, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) 6m49.537323155s ago: executing program 1 (id=5619): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1ffc}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='\xa1]\x00') 6m49.386704588s ago: executing program 1 (id=5621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x9, 0xc, 0x5c44673f, 0x10000, 0x80}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0xff0f}, 0x0) 6m48.966466481s ago: executing program 1 (id=5625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8121}]}}]}, 0x44}, 0x1, 0x1f, 0x0, 0x24000810}, 0x20084084) 6m48.637710098s ago: executing program 1 (id=5629): setns(0xc9, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0xfb}]}}}]}, 0x3c}}, 0x804) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffd}, 0x1c) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r2, &(0x7f0000000040)="10", 0x1) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f000000e5c0), 0x4) ioctl(r0, 0x1, &(0x7f0000000100)="f98f2cd2442a5aa88cc55e1e89349cbcd3099f8240b863b11f74a046c27431ed35469515d195bc7d5450e8cac165fed9e75678a95971e75dd2cf0c8270e4a8ad1ed864e3a6a6e60b4ea3350469b6c2f822ff4d9edefe23875d9d8c7def1b8db8af808392b3266a3900849cf50ffebabf5c7bfcb65adfc437320b58c88b268cd432761afecd07d565f17facc24b51250f2aeef49e5b2433d19926afc83bf4c5799f3853c718b25727a4eeb5cf6ab44a031049f941105e59bdcba184266bb97b8b4d12938140f47fdb9b8c835c732c") syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x440, 0x0, 0x1a8, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) setns(0xc9, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0xfb}]}}}]}, 0x3c}}, 0x804) (async) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffd}, 0x1c) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) write(r2, &(0x7f0000000040)="10", 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f000000e5c0), 0x4) (async) ioctl(r0, 0x1, &(0x7f0000000100)="f98f2cd2442a5aa88cc55e1e89349cbcd3099f8240b863b11f74a046c27431ed35469515d195bc7d5450e8cac165fed9e75678a95971e75dd2cf0c8270e4a8ad1ed864e3a6a6e60b4ea3350469b6c2f822ff4d9edefe23875d9d8c7def1b8db8af808392b3266a3900849cf50ffebabf5c7bfcb65adfc437320b58c88b268cd432761afecd07d565f17facc24b51250f2aeef49e5b2433d19926afc83bf4c5799f3853c718b25727a4eeb5cf6ab44a031049f941105e59bdcba184266bb97b8b4d12938140f47fdb9b8c835c732c") (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x440, 0x0, 0x1a8, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) (async) 6m48.438014441s ago: executing program 1 (id=5633): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) r2 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x40891, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x40}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) close(0x3) fallocate(r2, 0x0, 0x9, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) timer_create(0x3, &(0x7f0000000200)={0x0, 0x33, 0x2, @thr={&(0x7f00000008c0)="e6074779f263259385274202a27e538a469a7353eec7f2a8abbd398e8c73139da811a4b576d6fc666cb99ec4259712c09bbd93e8fa04dfb027fdbd57d1a1af85c9b78b34112a4eded2018aeef201cec2501998d56dfc451149f2f2312c16de1c5886d35963b099c696b419b0672fcd311aabc0efa10170ab408bd703e3eb2ca668076f9b94c5e7fc6e295a2f114eb1d1633a4e8802303ff740d35b0b2aa1a38b72362bdf90eac05a34b33acc70c7ee9cb68b6514fc4d20427c15452f0bd56a40b2c422079f293ca187eeb266f0d7b5e35c944fde64d6a837e0d0b3b6d50b6440bdb6313a7f017c679a266335c005c5b7f5d121c0098b3d", &(0x7f00000009c0)="0c15a11a15412a451cdc9a0d392a4fb1dde8596aa77e89e928170f4c1b1f054d3afdad19cc9ed8036a0c20768fdbca2d7b43131b7598f5648775e574"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c00000041000100000008000400000001000000040048801c0001801800108014000d800f00e300766972745f7769666930000008000200", @ANYRES32=r5, @ANYBLOB="6c30ac72aa43f957218820f0cfa47e090a121b7b3c45d85287fed135b6f5373b8a430135113373f223d1022ac7a3f7ca5ad6a585b7e8c43a9cf0064ab522003e005637bdec07f8bfb5dc291f4d539d9f61ed1e2d85a7e8dd40442c9b2e33162b7482f5b2e55b13e393a51e063b3451edfaa4908514d9"], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x80000001, 0x7f, 0x8, 0x0, 0x0, 0x2, "77afcd484bbeb37fc22331a9d74d92c1", 0x4, 0x3, 0x5, 0x3, 0x10, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x5, 0x20ffd, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r8, 0x5) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000000906010800000000000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 6m47.606557835s ago: executing program 1 (id=5641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}}, 0x4008000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='rdma', 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 6m47.548290228s ago: executing program 40 (id=5641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}}, 0x4008000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='rdma', 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 1m19.030331298s ago: executing program 2 (id=9306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) fsopen(&(0x7f0000000200)='udf\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 1m18.90753331s ago: executing program 2 (id=9308): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000007000000000aa78ce54006598080a8030037004023493b87aafaffffff3a797dffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf29186b9283b5d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f377c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b0f4185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000001f0b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf4000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0105d5170000dcc6674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a3"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(hmac(sha256),cts(cbc(aes)))\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="28000000fdcc19a55c991b350043123b85bf3dd6041ef5945c63fe9ff3f831fd31b05b89e5924dc532efac51cadee2411b5035b5e7271a2ae80bba7447433b0bd53dacb41284", @ANYRES16=r9, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="040025bd7000fbdbdf250200000014000380080001000000000008000100000000001c000280080007000000000005000d000100000006000e004e240000340001800800090052000000060004004e20000008000b00736970000600010000000000060002008700000008000900000000000800050009000000080006000c00000008000500b7000000240003800800030000000000080001000000000008000100000000000600040002000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000000)={0xa8}, 0x4) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) 1m17.961591713s ago: executing program 2 (id=9317): r0 = socket(0x10, 0x3, 0x3) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x3}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x2a, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) 1m17.887012478s ago: executing program 2 (id=9319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000180)={0x0, 0xfffffffe, 0x40, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x100, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2a7, 0x0, r7}}], 0x1, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r13, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) process_madvise(r14, 0x0, 0x0, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 1m17.580996566s ago: executing program 2 (id=9322): mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) open_tree(r0, &(0x7f00000012c0)='./file0\x00', 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="24062dbd7000ffdbdf25030020004400028014000380080002000200000008000200400000002c000380080001000800000008000200050000000800020000009000080002000000000008000100c20b0000"], 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) pread64(r0, &(0x7f0000002240)=""/231, 0xe7, 0x4ea) 1m17.306773285s ago: executing program 2 (id=9325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa0500009c1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e230e22009c90"], 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 1m17.132359788s ago: executing program 41 (id=9325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa0500009c1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e230e22009c90"], 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 2.237790626s ago: executing program 0 (id=10101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000080100001c11223344000800000005000500000005c0040008"], 0x4a) 2.110027184s ago: executing program 0 (id=10104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x1, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 23) 2.011347282s ago: executing program 3 (id=10107): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x100000, 0xef8c, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x6, 0x1, "57db83ab"}, 0xa, 0x4, {}, 0xe59}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x100000, 0xef8c, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x6, 0x1, "57db83ab"}, 0xa, 0x4, {}, 0xe59}) (async) 1.898540285s ago: executing program 3 (id=10108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='1', 0x1) ioctl$FE_READ_STATUS(r4, 0x80046f45, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c4c3fd01855390000000b93e080000b8d8130000ba000000000f30450f070fc76fff66baf80cb872dd4c8bef66bafc0c66ed42a382000000000000000f0fc4a7b9fc0100000f32430f1be4c744240003000000c744240200800000c7442406000000000f011c24", 0x67}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x1, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x80800, 0x0) read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000c77, 0x0, 0x8}]}) 1.758985874s ago: executing program 6 (id=10111): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x6000000, '\x00', &(0x7f0000000040)=0xb}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0xf5, 0x6, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000100)={{0x0, 0x6, 0x9, 0x4, 0xb7, 0x8000, 0x0, 0x4, 0x80000001, 0x9f, 0x0, 0x82bb, 0x6, 0x7, 0x3d8214f0}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001100)={{r4, 0x8, 0x6, 0x1, 0x100000000, 0x80000000, 0x3, 0x226, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffb, 0x9}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002100)='/dev/comedi1\x00', 0x400000, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f00000021c0)={0x8, 0x0, 0x4, 0x200000, 0xffffffff, 0xed0, 0x0, 0x8, 0x40, 0x9, 0x80, 0x4, &(0x7f0000002140)=[0xc1, 0x10, 0x6d, 0x2, 0x8, 0xffffffff, 0x3, 0xa80], 0x8, &(0x7f0000002180)="1a32ad9fc6528d750c81d26f62ff9aa7c5b76cda7c7291b92d883c4099", 0x1d}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002240)={{0x1, 0x1, 0x18, r0, {0x8000000000000000}}, './file0\x00'}) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006, 0x10, r6, 0x8000) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000002380)=@multiplanar_userptr={0x0, 0x6, 0x4, 0x70000, 0x1, {0x0, 0x2710}, {0x1, 0xb, 0xc, 0xe2, 0x7, 0xb5, "d3d3d9bd"}, 0x7, 0x2, {&(0x7f0000002300)=[{0x7, 0xffffffff, {&(0x7f0000002280)}, 0xffffffff}, {0x0, 0x8000, {&(0x7f00000022c0)}, 0xa}]}, 0x1}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002440), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x40, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x54}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x40) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000002540)={0xd1, r1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000002580)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) bind$alg(r9, &(0x7f00000025c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x60, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5}, {0x6}, {0x8, 0xb, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040001}, 0x240cc004) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000027c0)={0x0, 0x5, 0x9}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000029c0)={&(0x7f0000002800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x6, [@fwd={0x4}, @union={0x9, 0x4, 0x0, 0x5, 0x1, 0xfffffff8, [{0x4, 0x1, 0x5559c794}, {0xe, 0x3, 0x5}, {0xf, 0x0, 0x5}, {0x7, 0x3}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x3, 0x8}], "11"}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @float={0xb, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x0, 0x0, 0xb6f95690725df6f]}}, &(0x7f00000028c0)=""/255, 0x9a, 0xff, 0x0, 0xfff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x4, 0x4, 0x12, 0x3, 0x20000, r9, 0x4, '\x00', 0x0, r11, 0x1, 0x4, 0x5}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r6) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x34, r12, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000002bc0)={0x1, 0x0, 0x5}) io_setup(0x695, &(0x7f0000002c00)=0x0) io_submit(r13, 0x3, &(0x7f0000002f00)=[&(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x5, r8, &(0x7f0000002c40)="dd1f06b5951c72f51e7b7c301e632664caa0c9fc61da6558e8387bdae68d88645c411b52534d579a80f5251694ee919584795785da3832", 0x37, 0x8000000000000000, 0x0, 0x0, r8}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x2, 0x7ff, r1, &(0x7f0000002cc0)="cd556c49c8d9c2a76bea6e331037ec1496e3c6bada237106bc2a410faca43cf44e60fbb11b9e67a490ad17b72dbc723fa1a7b8f7ec6276b996f4d70b5a72932b7a03c3fc9bc7109f66c4b83e3e1c3c53224a71d09c911e990ee7bcb36808ad85c9d38f08d265d490119b275414bef7c6821befe9e6c2b4ee51cac390ce717c924d777531009e26fa0a275d2eb107d9113f0cc847518ef915c0d7ce01a61e67a492c5b2e8c968ec4edc7e105bd41aa4a5a7a711368e7809", 0xb7, 0x0, 0x0, 0x0, r8}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0xfffd, r9, &(0x7f0000002dc0)="e004fbf9538430653196c0b696b2e434b699ae35efe9c5dfc57ee1b2bcd4e80fd92f1338e55b1152bde2d522344bffda90051db24ac7a2836c92a23cbe5952ee3a8764fa9c23026ee9d91809092a3f838b4c90e981858ee158bcde4623f220b60eae452b5bc0b748cf170b33c9ff65d7d9fd4f21daf5696122a064fd320f58f17e65b8dcca566cdd162919a88b8295b6c4e4d9338f2ae4e4d3f2d125590e4835507190f076c31abd446ddc6ca2e2c2b840b75bf94bdb6f8493885904ef02357bdcbe8aba3d14490d8eee73e1e5f93648c54cfbb53427da3f753644c7f875f950c6f1eb025a3408735f3858429c8e314bad631f", 0xf3, 0x5, 0x0, 0x3}]) 1.758750947s ago: executing program 0 (id=10112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000f0100001c11223344000800000005000500000005c0040008"], 0x4a) 1.589238468s ago: executing program 3 (id=10113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x 1000000 -', 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.53852916s ago: executing program 6 (id=10114): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1, 0x0, ';\"'}]}}}}}}, 0x0) (async) r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x9, 0x2a0001) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000280)}) 1.538246545s ago: executing program 0 (id=10115): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x4, 0x6, 0x42, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x8000, 0x80, 0x7f, 0x7fff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) 1.538120763s ago: executing program 6 (id=10116): syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x284100, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/103, 0x67}], 0x4}, 0x40004020) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x284100, 0x0) (async) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/103, 0x67}], 0x4}, 0x40004020) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000080)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) (async) 1.442446795s ago: executing program 3 (id=10117): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r1, 0x5, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x21, 0x0, 0x0, 0x6a, @dev={0xfe, 0x80, '\x00', 0x2d}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x5, 0x1}}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x0) 1.442040517s ago: executing program 0 (id=10118): r0 = getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58050000080505002bbd70710e72c080d762570108001600", @ANYRES32=r1, @ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0x804}, 0x8c1) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x2, &(0x7f0000000240)=[{0x6, 0x0, 0x47, 0x7fc00100}, {0x6, 0xb0, 0x88, 0x200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) read$sequencer(r5, &(0x7f0000000480)=""/98, 0x62) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x80000) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000080)={{0x0, 0xd000, 0xb, 0x3, 0x0, 0xf, 0x2, 0x1, 0x0, 0x8, 0x8, 0x6}, {0x41000, 0xdddd0000, 0x0, 0x3, 0x7, 0x1, 0xff, 0x0, 0x7, 0x48, 0x1, 0x80}, {0xdddd1000, 0x7000, 0xa, 0x9, 0x81, 0xbb, 0x7, 0x1, 0x9, 0x8, 0x1, 0x8c}, {0x4000, 0x0, 0x0, 0x9, 0x0, 0x3, 0x8, 0xfc, 0x7, 0xfd, 0x3, 0x3}, {0xa000, 0xb001, 0xb, 0x6, 0x2, 0x89, 0x2, 0x4, 0x6, 0x7, 0x9, 0x2f}, {0x200000, 0x1000, 0x8, 0x3, 0x3, 0x3, 0x3, 0x5, 0x7, 0x7, 0x87, 0xfd}, {0x6000, 0x54000, 0xb, 0xfe, 0xff, 0x4, 0x3, 0x79, 0xc6, 0x68, 0x1, 0x88}, {0xdddd1000, 0x7000, 0xd, 0xfe, 0xc, 0x4, 0x5, 0x8, 0x7f, 0x5, 0x7, 0x6}, {0x54000, 0x8}, {0x54000, 0x2}, 0x40010000, 0x0, 0xfec00000, 0x1, 0x0, 0x2901, 0xdddd1000, [0x100000000, 0x800, 0x0, 0x3]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000380)=@arm64={0xd7, 0x2, 0xc1, '\x00', 0x7ff}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) read$FUSE(r8, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@dfltgid}]}}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$BLKGETZONESZ(r9, 0x80041284, &(0x7f0000000340)=0x3) read$FUSE(r9, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000100)={0x1, 0x7, 0xff, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) 1.26950463s ago: executing program 3 (id=10119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x7, 0x4, 0x9, 0x0, 0x3, 0xe, 0x28, 0x5, 0x0, 0x3, 0x5, 0x6, 0x3, 0x0, 0x4e, 0xb4}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x1, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 949.877014ms ago: executing program 3 (id=10120): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/21, &(0x7f0000000280)=0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xb24, 0x0, 0x100000002}]}) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xb24, 0x0, 0x100000002}]}) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xf7) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='smb3\x00', 0x1000400, 0x0) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r5 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000071408002abd7000ffdbdf25050054000100000008004400", @ANYRES32=r6, @ANYBLOB="0900020073797a3200000000050054000000000008000100020000000800010001000000b5b5bc647a080001000200000008004400", @ANYRES32=r5, @ANYRESHEX=r2], 0x60}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000071408002abd7000ffdbdf25050054000100000008004400", @ANYRES32=r6, @ANYBLOB="0900020073797a3200000000050054000000000008000100020000000800010001000000b5b5bc647a080001000200000008004400", @ANYRES32=r5, @ANYRESHEX=r2], 0x60}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000008000400", @ANYRES32=r8, @ANYBLOB="10000200000000002000000000000000"], 0x2c, 0x0) r9 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x480c80, 0x0) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x480c80, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f0000000000)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f00000002c0)=r10) (async) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f00000002c0)=r10) r12 = openat(r9, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x40182, 0xc8) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}, {&(0x7f00000005c0)="b161bffdc4bf7eee462247905a849169bac28566a5490108939a8d762a46c675043f767974fc3ca05a06af59f54fd799af0e070d001e14c6c240fc5262dad5c24fc90a9355f1a297a2428f664306bacfcbb3da21d7d53ba86303d63447781d2daf66b719dd7631c154a611bdb2b4a338b2926661fff308fd7520f8296ed0795e4dcf4c40a5b26b8ebf13d8c224bbe3074492c9c83a63693e6030f8b7b32eeba9830be8c135e05edf041daab67f3bf32bfea1c1d5eb76063f756fb0341efb72b622852f249ef6bdcfc561f9685d477e4b781144ceffe836f203f8a46d40042c43615aae811d2a41d3", 0xe8}, {&(0x7f0000000880)="4832f508489b32935da652d6fd45d97a12971468cc2f3ccb0ece0bdb6c34fa50fcb0a9303bfb4033ffb1e5f35e1bd0eeee9629c7acca2d9089986d729860dc16f3dbb2695c84680e4ae66e191ddb37b426800fb385c2b09dbf31fdbd78ca66a02d58baeb8163da460d5ac74179db61fd26b5dccbf6e2108c51e98b201a28453a33d285b6b7481c6abf6c40e9df93a520ce16bf7b9a44e70e5491f908538041b70ce94cff7315233e56332367f0e360145fa585551b72e43133b5023b9f2dd096320f2f29c4ec72517fa443a179aa1d4281a4c4f6077f5ce7a682c5cddec5ea68a59e140300000000000000b2c674e3047a5f2656512f35af43671b79d7b8e938a337fd0181b33cc2a5efd4b86cc9536cf0f2c2aac12e3d1c66b407a2659dc8fd965339e1675ea281cc0162f98dc40fbdc972314b99b157ef60f9b5fe48ba5d5bb339432f53e7c450ef6c430886f4bf2e42a4", 0x152}], 0x3, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}, {&(0x7f00000005c0)="b161bffdc4bf7eee462247905a849169bac28566a5490108939a8d762a46c675043f767974fc3ca05a06af59f54fd799af0e070d001e14c6c240fc5262dad5c24fc90a9355f1a297a2428f664306bacfcbb3da21d7d53ba86303d63447781d2daf66b719dd7631c154a611bdb2b4a338b2926661fff308fd7520f8296ed0795e4dcf4c40a5b26b8ebf13d8c224bbe3074492c9c83a63693e6030f8b7b32eeba9830be8c135e05edf041daab67f3bf32bfea1c1d5eb76063f756fb0341efb72b622852f249ef6bdcfc561f9685d477e4b781144ceffe836f203f8a46d40042c43615aae811d2a41d3", 0xe8}, {&(0x7f0000000880)="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", 0x152}], 0x3, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x800000002) 708.875506ms ago: executing program 6 (id=10123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xffff0000}, 0xc004) 639.641957ms ago: executing program 4 (id=10125): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) io_uring_enter(0xffffffffffffffff, 0x601e, 0x294, 0x8b, &(0x7f0000000040)={[0x2]}, 0x8) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 639.377569ms ago: executing program 6 (id=10126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffe94a}}}, &(0x7f0000000040)=0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb681}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x8004) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c48379058028c600004d0f01cf66420f388243052eab450f01c2480fc7599b66ba400066ed260f01c52e2e2e450fc73fc4612d71d29b", 0x36}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 576.087197ms ago: executing program 4 (id=10127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, r0, 0x2) 456.757933ms ago: executing program 4 (id=10128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x1, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 25) 456.34004ms ago: executing program 0 (id=10129): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040000000200000000000000010200002d522e36a956e495efa793ea029c1d50c10ad85a63751e6ebb61f88d67ec2212afaaa8d2904aa882666342b4b15ac59dc90c32b60b514c7a923fae08811edb059024cf334a708fe18a98a8755b8de6d61be684fcc7058eaf93c8be", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="01000000ffffffff00"/27], 0x48) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) r2 = userfaultfd(0x80800) socket$kcm(0x23, 0x2, 0x0) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket(0x8, 0x2, 0x0) setsockopt(r7, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 250.915965ms ago: executing program 6 (id=10130): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000005ac300000010000018110000", @ANYRES32=r2, @ANYRES8=r0], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 139.737551ms ago: executing program 4 (id=10131): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x2, 0x6}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)="187bd0c378030190d3855f2b8cf607141ffacead888c495e9e320e74ce94bf7f00da01fcfbab99e033bddf2fb707a77301237335283c74e50b355298e569da0f6590284b0fe86747629e05a6c90d9225a4507d83a8296a43cb305b8958fff3e93d20b78ffe8f8e59124a463d9fd8bb327492fac87881a891d0d073c2274b95eb5a9e30292b48dc45b21e485a49eb7e259deeb33f2f364951807b291e7c29b076bd145e5b80882bf4eaba39d8b65ba08cce35a49fccbe47818b491ddaccd06e563c995c5f0fdd63b68817a4b840edc16c3a10ec969ef511ed16d6effb5f", 0xdd}, {&(0x7f0000000440)="35792f674944ec9913214472e969f95ad6258c9c9f15c55cb7a94ae94da5ad28276623b30266e0c50eed9fcc47bbd5cc935f23c22768e4d1ee2a3b28dbec3bdd9a365c47f6e66b941dd9e72a8f64f6185c301bc575e66daff4a524fdd4288244382c80ad1bb4db7f9724b8d66eee13a50b5ad574668aa89df2c35b257aaa5db24bcdad4910ace88df3cbcad86f0b8ad8ef062b41fef069b36ae4163ccd27d9561460f2fc3720720d650073044c10f2f1d9b6f755351f2c13a7596a2a73e139cf22ac7a3999155510586def70fa294bbe8b5b8fddac5618029cc06d4a9bd641181a764270d9c6760c37f4153dcec37d08", 0xf0}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="3ebaf2815746dcabb73c8864afd8a6aa0e2745816b", 0x15}, {&(0x7f0000000680)="9f8e2bddee9fc230d05af36c054f16d5b87b77a54670e2bc8493861ecd89cc9192aec3920099425633ef940cd71dd2464633ee726edc5ff3e8a1c01ca85c7bc207d3f1b71e6bef", 0x47}, {&(0x7f0000000700)="9f2ea2917621992fff53dff2fc1ce502968e71b508de450f01387ba329a851d11cd16358dd7385726a11fc1485ce5a9741e57bf57dae453a94ac195f8c449e46b65c3909a65e7acad4585f59b40962711c42ee2860a72cd0fd6447e7bbceb6780d5947c6429547e8f6c6", 0x6a}], 0x6}, 0x4000000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x1308a12, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000003240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 215.348µs ago: executing program 4 (id=10132): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc38}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x84}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x6ea, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96ce, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe0000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0xffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x118}}, 0x4000) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, 0x15, 0x600, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "8ea377a18f02d20ed17aece108fe06415e3967e8eec022d1d07ab1506dbeb1"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "4458bbb99b96bd69d0b067599bd438ee0b5329ce857670a78cac4124db4b6dde4393252ba0ba9ed4446673594e948ac93db3be1335f510dace3ae51dd9715c35bcd2b3b77c396979e8198ed914a6"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 0s ago: executing program 4 (id=10133): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) writev(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './my_sys/bus/pci/devices/0000:00:01.0/config\x00'}) write$P9_RREADDIR(r0, &(0x7f0000000240)={0x93, 0x29, 0x2, {0x23, [{{0x40, 0x2, 0x5}, 0x1, 0x9, 0x2c, './my_sys/bus/pci/devices/0000:00:01.0/remove'}, {{0x40, 0x2, 0x1}, 0x0, 0x10, 0x2c, './my_sys/bus/pci/devices/0000:00:01.0/remove'}]}}, 0x93) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) kernel console output (not intermixed with test programs): collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 939.145150][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9699'. [ 939.167778][ T42] audit: type=1800 audit(2000000278.499:50708): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 939.194768][ T42] audit: type=1400 audit(2000000278.519:50709): avc: denied { read } for pid=4401 comm="syz.6.9701" name="ubi_ctrl" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 939.205284][ T42] audit: type=1400 audit(2000000278.519:50710): avc: denied { open } for pid=4401 comm="syz.6.9701" path="/dev/ubi_ctrl" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 939.230889][ T42] audit: type=1400 audit(2000000278.549:50711): avc: denied { write } for pid=4398 comm="syz.3.9699" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 939.257757][ T42] audit: type=1400 audit(2000000278.549:50712): avc: denied { ioctl } for pid=4398 comm="syz.3.9699" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 939.564986][ T4421] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9706'. [ 939.665580][ T4423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=4423 comm=syz.0.9707 [ 939.742863][ T4430] xt_nfacct: accounting object `' does not exist [ 939.912736][ T4443] sctp: [Deprecated]: syz.0.9714 (pid 4443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.912736][ T4443] Use struct sctp_sack_info instead [ 940.086562][ T4449] xt_nfacct: accounting object `' does not exist [ 940.249361][ T4452] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 940.307034][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.310485][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.313828][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.317050][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.320195][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.323239][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.326324][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.329533][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.333225][ T4460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 940.873262][ T4485] vcan0: tx drop: invalid da for name 0x0000200000000000 [ 941.647777][T24902] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 941.799385][T24902] usb 5-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 941.803637][T24902] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 941.809528][T24902] usb 5-1: config 1 interface 0 has no altsetting 0 [ 941.814392][T24902] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 941.818569][T24902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.821884][T24902] usb 5-1: Product: ᐊ [ 941.823616][T24902] usb 5-1: Manufacturer:  [ 941.825531][T24902] usb 5-1: SerialNumber: 䨶渍嶨⛝荻ݖ北夹⚁ꁠ聯 [ 942.066811][ T4512] __nla_validate_parse: 1 callbacks suppressed [ 942.066828][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9738'. [ 942.254541][ T4515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9739'. [ 942.443047][ T4526] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9743'. [ 942.498518][ T4531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9745'. [ 942.504725][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9745'. [ 942.564733][T24902] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 942.571955][T24902] usb 5-1: USB disconnect, device number 115 [ 942.653743][ T4538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9749'. [ 942.669788][ T4538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9749'. [ 942.684438][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9748'. [ 942.690440][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9747'. [ 942.959791][ T4556] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9753'. [ 943.040352][ T4558] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 943.065453][ T5875] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 943.265502][ T5875] usb 5-1: config 0 has no interfaces? [ 943.267340][ T5875] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 943.270539][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.278638][ T5875] usb 5-1: config 0 descriptor?? [ 943.299907][ T4567] ufs: You didn't specify the type of your ufs filesystem [ 943.299907][ T4567] [ 943.299907][ T4567] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 943.299907][ T4567] [ 943.299907][ T4567] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 943.310140][ T4567] ufs: ufstype=old is supported read-only [ 943.312138][ T4567] ufs: ufs_fill_super(): bad magic number [ 943.432585][ T4574] netlink: 'syz.6.9758': attribute type 5 has an invalid length. [ 943.518735][T18602] usb 5-1: USB disconnect, device number 116 [ 943.631715][ T4579] loop6: detected capacity change from 0 to 2640 [ 943.634365][ T4579] buffer_io_error: 10 callbacks suppressed [ 943.634376][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.639391][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.642838][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.645472][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.648895][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.652427][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.655751][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.659688][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.662768][ T4579] ldm_validate_partition_table(): Disk read failed. [ 943.664982][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.670345][ T4579] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.672976][ T4579] Dev loop6: unable to read RDB block 0 [ 943.674849][ T4579] loop6: unable to read partition table [ 943.679051][ T4579] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 944.089796][ T42] kauditd_printk_skb: 310 callbacks suppressed [ 944.089810][ T42] audit: type=1800 audit(2000000283.421:51023): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 944.107209][ T42] audit: type=1400 audit(2000000283.431:51024): avc: denied { read write } for pid=4597 comm="syz.3.9765" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 944.109500][ T4598] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 944.114950][ T42] audit: type=1400 audit(2000000283.431:51025): avc: denied { open } for pid=4597 comm="syz.3.9765" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 944.138315][ T42] audit: type=1400 audit(2000000283.441:51026): avc: denied { ioctl } for pid=4597 comm="syz.3.9765" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 944.141718][ T4598] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 944.148973][ T42] audit: type=1400 audit(2000000283.461:51027): avc: denied { create } for pid=4597 comm="syz.3.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 944.154600][ T4598] netlink: 'syz.3.9765': attribute type 83 has an invalid length. [ 944.157598][ T42] audit: type=1400 audit(2000000283.461:51028): avc: denied { connect } for pid=4597 comm="syz.3.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 944.165620][ T42] audit: type=1400 audit(2000000283.461:51029): avc: denied { write } for pid=4597 comm="syz.3.9765" name="demux0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 944.173151][ T42] audit: type=1400 audit(2000000283.461:51030): avc: denied { open } for pid=4597 comm="syz.3.9765" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 944.181940][ T42] audit: type=1400 audit(2000000283.471:51031): avc: denied { ioctl } for pid=4597 comm="syz.3.9765" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=951 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 944.215126][ T42] audit: type=1800 audit(2000000283.541:51032): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 944.304876][ T4607] tmpfs: Unknown parameter 'Eqge [ 947.703129][ T4770] dump_stack_lvl+0x100/0x190 [ 947.703182][ T4770] should_fail_ex.cold+0x5/0xa [ 947.703207][ T4770] should_failslab+0xc2/0x120 [ 947.703232][ T4770] __kmalloc_noprof+0xfc/0x820 [ 947.703255][ T4770] ? rcu_is_watching+0x12/0xc0 [ 947.703283][ T4770] ? tomoyo_realpath_from_path+0xb6/0x690 [ 947.703314][ T4770] tomoyo_realpath_from_path+0xb6/0x690 [ 947.703341][ T4770] tomoyo_path_number_perm+0x23c/0x580 [ 947.703364][ T4770] ? tomoyo_path_number_perm+0x22e/0x580 [ 947.703388][ T4770] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 947.703433][ T4770] ? find_held_lock+0x2b/0x80 [ 947.703449][ T4770] ? __fget_files+0x215/0x3d0 [ 947.703468][ T4770] ? hook_file_ioctl_common+0x140/0x440 [ 947.703488][ T4770] ? __fget_files+0x215/0x3d0 [ 947.703510][ T4770] ? __fget_files+0x21f/0x3d0 [ 947.703533][ T4770] security_file_ioctl+0xd3/0x230 [ 947.703560][ T4770] __x64_sys_ioctl+0xb7/0x210 [ 947.703589][ T4770] do_syscall_64+0x115/0x870 [ 947.703679][ T4770] ? clear_bhb_loop+0x70/0xc0 [ 947.703701][ T4770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.703720][ T4770] RIP: 0033:0x7f2fb8b9e0d9 [ 947.703738][ T4770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.703754][ T4770] RSP: 002b:00007f2fb6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.703783][ T4770] RAX: ffffffffffffffda RBX: 00007f2fb8e25fa0 RCX: 00007f2fb8b9e0d9 [ 947.703795][ T4770] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 947.703805][ T4770] RBP: 00007f2fb6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 947.703817][ T4770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.703828][ T4770] R13: 00007f2fb8e26038 R14: 00007f2fb8e25fa0 R15: 00007ffc523a40b8 [ 947.703853][ T4770] [ 947.703862][ T4770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 947.708416][ T4772] vhci_hcd vhci_hcd.0: Device attached [ 947.770068][ T4778] nvme_fabrics: unknown parameter or missing value 'T` U{ Ӊp!$ZfDcx(GFPԠOT' in ctrl creation request [ 947.964541][T19350] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 948.060818][ T4796] __nla_validate_parse: 6 callbacks suppressed [ 948.060831][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9818'. [ 948.304707][T14296] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 948.467422][T14296] usb 9-1: config 0 has no interfaces? [ 948.470185][T14296] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 948.476344][T14296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.481486][T14296] usb 9-1: config 0 descriptor?? [ 948.522591][ T4773] vhci_hcd: connection reset by peer [ 948.529354][ T5805] vhci_hcd vhci_hcd.3: stop threads [ 948.531693][ T5805] vhci_hcd vhci_hcd.3: release socket [ 948.535773][ T5805] vhci_hcd vhci_hcd.3: disconnect device [ 948.601304][ T64] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 948.601360][ T64] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 948.660359][ T4820] ip6gretap0: entered promiscuous mode [ 948.689688][T14296] usb 9-1: USB disconnect, device number 73 [ 948.729862][ T4822] No source specified [ 948.733543][ T4824] No source specified [ 948.802324][ T4828] xt_hashlimit: size too large, truncated to 1048576 [ 949.102587][ T42] kauditd_printk_skb: 425 callbacks suppressed [ 949.102606][ T42] audit: type=1400 audit(2000000288.434:51458): avc: denied { map_create } for pid=4847 comm="syz.0.9833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.109188][ T4848] macvtap0: entered allmulticast mode [ 949.114208][ T42] audit: type=1400 audit(2000000288.434:51459): avc: denied { map_read map_write } for pid=4847 comm="syz.0.9833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.117786][ T4848] veth0_macvtap: entered allmulticast mode [ 949.141877][ T42] audit: type=1400 audit(2000000288.474:51460): avc: denied { prog_load } for pid=4847 comm="syz.0.9833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.152442][ T42] audit: type=1400 audit(2000000288.474:51461): avc: denied { prog_run } for pid=4847 comm="syz.0.9833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.161303][ T42] audit: type=1400 audit(2000000288.494:51462): avc: denied { write } for pid=4845 comm="syz.3.9834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 949.176756][ T42] audit: type=1400 audit(2000000288.514:51463): avc: denied { read write } for pid=3399 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.187182][ T42] audit: type=1400 audit(2000000288.514:51464): avc: denied { open } for pid=3399 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.198121][ T42] audit: type=1400 audit(2000000288.514:51465): avc: denied { ioctl } for pid=3399 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.208810][ T42] audit: type=1800 audit(2000000288.524:51466): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 949.230548][ T9] usb 11-1: new high-speed USB device number 83 using dummy_hcd [ 949.237316][ T42] audit: type=1400 audit(2000000288.574:51467): avc: denied { name_bind } for pid=4850 comm="syz.0.9835" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 949.361491][ T4857] netlink: 'syz.0.9838': attribute type 1 has an invalid length. [ 949.385044][ T9] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 949.386752][ T4857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.387740][ T9] usb 11-1: config 0 has no interface number 0 [ 949.392448][ T9] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.399481][ T9] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 949.402610][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.406168][ T9] usb 11-1: Product: syz [ 949.408081][ T9] usb 11-1: Manufacturer: syz [ 949.410433][ T9] usb 11-1: SerialNumber: syz [ 949.428945][ T9] usb 11-1: config 0 descriptor?? [ 949.435164][ T4858] FAULT_INJECTION: forcing a failure. [ 949.435164][ T4858] name failslab, interval 1, probability 0, space 0, times 0 [ 949.440418][ T4858] CPU: 2 UID: 0 PID: 4858 Comm: syz.4.9837 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.440448][ T4858] Tainted: [L]=SOFTLOCKUP [ 949.440455][ T4858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 949.440466][ T4858] Call Trace: [ 949.440474][ T4858] [ 949.440483][ T4858] dump_stack_lvl+0x100/0x190 [ 949.440518][ T4858] should_fail_ex.cold+0x5/0xa [ 949.440542][ T4858] should_failslab+0xc2/0x120 [ 949.440569][ T4858] __kmalloc_cache_noprof+0x91/0x6c0 [ 949.440588][ T4858] ? rcu_is_watching+0x12/0xc0 [ 949.440618][ T4858] ? vhost_task_create+0xee/0x370 [ 949.440642][ T4858] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 949.440663][ T4858] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 949.440687][ T4858] vhost_task_create+0xee/0x370 [ 949.440710][ T4858] ? __pfx_vhost_task_create+0x10/0x10 [ 949.440739][ T4858] ? __pfx_vhost_task_fn+0x10/0x10 [ 949.440764][ T4858] ? __pfx___mutex_lock+0x10/0x10 [ 949.440790][ T4858] ? kasan_quarantine_put+0x104/0x240 [ 949.440819][ T4858] kvm_mmu_post_init_vm+0x1b3/0x360 [ 949.440848][ T4858] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 949.440875][ T4858] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 949.440902][ T4858] kvm_vcpu_ioctl+0x730/0x1700 [ 949.440927][ T4858] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 949.440949][ T4858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 949.440974][ T4858] ? do_vfs_ioctl+0x226/0x13e0 [ 949.441002][ T4858] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 949.441029][ T4858] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 949.441067][ T4858] ? __fget_files+0x215/0x3d0 [ 949.441085][ T4858] ? hook_file_ioctl_common+0x140/0x440 [ 949.441114][ T4858] ? selinux_file_ioctl+0x13b/0x290 [ 949.441142][ T4858] ? selinux_file_ioctl+0xb6/0x290 [ 949.441171][ T4858] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 949.441194][ T4858] __x64_sys_ioctl+0x18e/0x210 [ 949.441224][ T4858] do_syscall_64+0x115/0x870 [ 949.441249][ T4858] ? clear_bhb_loop+0x70/0xc0 [ 949.441271][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.441290][ T4858] RIP: 0033:0x7fedf939e0d9 [ 949.441308][ T4858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.441325][ T4858] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 949.441343][ T4858] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 949.441355][ T4858] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 949.441366][ T4858] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 949.441377][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.441387][ T4858] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 949.441412][ T4858] [ 949.567458][ T9] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 949.985429][T14296] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 949.987782][ T4881] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 950.016242][ T4881] batadv0: entered promiscuous mode [ 950.019150][ T4881] debugfs: 'hsr1' already exists in 'hsr' [ 950.021611][ T4881] Cannot create hsr debugfs directory [ 950.064399][ T4885] FAULT_INJECTION: forcing a failure. [ 950.064399][ T4885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.068700][ T4885] CPU: 3 UID: 0 PID: 4885 Comm: syz.3.9847 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.068718][ T4885] Tainted: [L]=SOFTLOCKUP [ 950.068722][ T4885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 950.068729][ T4885] Call Trace: [ 950.068733][ T4885] [ 950.068739][ T4885] dump_stack_lvl+0x100/0x190 [ 950.068758][ T4885] should_fail_ex.cold+0x5/0xa [ 950.068774][ T4885] _copy_from_user+0x2e/0xd0 [ 950.068790][ T4885] copy_msghdr_from_user+0x9f/0x4c0 [ 950.068832][ T4885] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 950.068849][ T4885] ___sys_sendmsg+0x106/0x1e0 [ 950.068861][ T4885] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.068871][ T4885] ? __lock_acquire+0x49f/0x1a40 [ 950.068885][ T4885] ? get_pid_task+0x106/0x250 [ 950.068910][ T4885] __sys_sendmsg+0x160/0x210 [ 950.068925][ T4885] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.068946][ T4885] do_syscall_64+0x115/0x870 [ 950.068961][ T4885] ? clear_bhb_loop+0x70/0xc0 [ 950.068975][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.068987][ T4885] RIP: 0033:0x7f550799e0d9 [ 950.068997][ T4885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.069007][ T4885] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.069019][ T4885] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 950.069026][ T4885] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 950.069032][ T4885] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 950.069039][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.069045][ T4885] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 950.069059][ T4885] [ 950.155179][T14296] usb 5-1: Using ep0 maxpacket: 32 [ 950.161466][T14296] usb 5-1: unable to get BOS descriptor or descriptor too short [ 950.173333][T22920] Bluetooth: hci1: Frame reassembly failed (-84) [ 950.176237][T22920] Bluetooth: hci1: Frame reassembly failed (-84) [ 950.179150][ T9992] Bluetooth: hci1: Frame reassembly failed (-84) [ 950.209064][T14296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.217758][T14296] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 950.227995][T14296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.233909][T14296] usb 5-1: Product: syz [ 950.235645][T14296] usb 5-1: Manufacturer: syz [ 950.239612][T14296] usb 5-1: SerialNumber: syz [ 950.280130][ T4896] netlink: 'syz.3.9849': attribute type 1 has an invalid length. [ 950.304288][ T4896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 950.486770][T14296] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 950.489621][T14296] usb 5-1: MIDIStreaming interface descriptor not found [ 950.564816][T14296] usb 5-1: USB disconnect, device number 117 [ 950.652926][ T4913] IPv6: Can't replace route, no match found [ 950.680232][T27482] udevd[27482]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.936747][ T4925] sctp: [Deprecated]: syz.3.9855 (pid 4925) Use of int in max_burst socket option. [ 950.936747][ T4925] Use struct sctp_assoc_value instead [ 950.945477][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9855'. [ 951.103492][ T4931] netlink: 'syz.3.9858': attribute type 1 has an invalid length. [ 951.121581][ T4931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 951.193153][ T4934] xt_hashlimit: size too large, truncated to 1048576 [ 951.488525][ T4949] FAULT_INJECTION: forcing a failure. [ 951.488525][ T4949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.494088][ T4949] CPU: 3 UID: 0 PID: 4949 Comm: syz.3.9862 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.494120][ T4949] Tainted: [L]=SOFTLOCKUP [ 951.494127][ T4949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 951.494138][ T4949] Call Trace: [ 951.494146][ T4949] [ 951.494154][ T4949] dump_stack_lvl+0x100/0x190 [ 951.494184][ T4949] should_fail_ex.cold+0x5/0xa [ 951.494228][ T4949] _copy_from_iter+0x1f4/0x1690 [ 951.494257][ T4949] ? __asan_memset+0x23/0x50 [ 951.494278][ T4949] ? __pfx__copy_from_iter+0x10/0x10 [ 951.494303][ T4949] ? __pfx___alloc_skb+0x10/0x10 [ 951.494336][ T4949] netlink_sendmsg+0x808/0xda0 [ 951.494376][ T4949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.494400][ T4949] ? selinux_socket_sendmsg+0x198/0x2f0 [ 951.494432][ T4949] ____sys_sendmsg+0xa4d/0xbe0 [ 951.494461][ T4949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.494483][ T4949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.494524][ T4949] ___sys_sendmsg+0x190/0x1e0 [ 951.494550][ T4949] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.494568][ T4949] ? __lock_acquire+0x49f/0x1a40 [ 951.494592][ T4949] ? get_pid_task+0x106/0x250 [ 951.494639][ T4949] __sys_sendmsg+0x160/0x210 [ 951.494665][ T4949] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.494703][ T4949] do_syscall_64+0x115/0x870 [ 951.494729][ T4949] ? clear_bhb_loop+0x70/0xc0 [ 951.494752][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.494772][ T4949] RIP: 0033:0x7f550799e0d9 [ 951.494789][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.494807][ T4949] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.494827][ T4949] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 951.494839][ T4949] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 951.494851][ T4949] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 951.494862][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.494873][ T4949] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 951.494899][ T4949] [ 951.732606][ C0] usb 11-1: yurex_control_callback - control failed: -2 [ 951.737753][T18602] usb 11-1: USB disconnect, device number 83 [ 951.753244][T18602] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 951.829737][ T4961] netlink: 'syz.3.9866': attribute type 2 has an invalid length. [ 952.163239][ T4967] netlink: 'syz.0.9868': attribute type 1 has an invalid length. [ 952.184934][ T4967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.212255][ T5733] Bluetooth: hci1: command 0x1003 tx timeout [ 952.220268][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 952.255675][ T4970] xt_nfacct: accounting object `' does not exist [ 952.340906][ T4974] FAULT_INJECTION: forcing a failure. [ 952.340906][ T4974] name failslab, interval 1, probability 0, space 0, times 0 [ 952.347003][ T4974] CPU: 2 UID: 0 PID: 4974 Comm: syz.6.9871 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.347035][ T4974] Tainted: [L]=SOFTLOCKUP [ 952.347042][ T4974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 952.347054][ T4974] Call Trace: [ 952.347063][ T4974] [ 952.347072][ T4974] dump_stack_lvl+0x100/0x190 [ 952.347104][ T4974] should_fail_ex.cold+0x5/0xa [ 952.347130][ T4974] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 952.347163][ T4974] should_failslab+0xc2/0x120 [ 952.347189][ T4974] kmem_cache_alloc_noprof+0x91/0x6a0 [ 952.347215][ T4974] ? skb_clone+0x190/0x400 [ 952.347245][ T4974] skb_clone+0x190/0x400 [ 952.347272][ T4974] netlink_deliver_tap+0xaed/0xcc0 [ 952.347310][ T4974] netlink_unicast+0x62b/0x850 [ 952.347337][ T4974] ? __pfx_netlink_unicast+0x10/0x10 [ 952.347367][ T4974] netlink_sendmsg+0x8b0/0xda0 [ 952.347393][ T4974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.347417][ T4974] ? selinux_socket_sendmsg+0x198/0x2f0 [ 952.347449][ T4974] ____sys_sendmsg+0xa4d/0xbe0 [ 952.347477][ T4974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.347501][ T4974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.347543][ T4974] ___sys_sendmsg+0x190/0x1e0 [ 952.347565][ T4974] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.347584][ T4974] ? __lock_acquire+0x49f/0x1a40 [ 952.347608][ T4974] ? get_pid_task+0x106/0x250 [ 952.347660][ T4974] __sys_sendmsg+0x160/0x210 [ 952.347685][ T4974] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.347740][ T4974] do_syscall_64+0x115/0x870 [ 952.347767][ T4974] ? clear_bhb_loop+0x70/0xc0 [ 952.347791][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.347810][ T4974] RIP: 0033:0x7f21bc79e0d9 [ 952.347829][ T4974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.347848][ T4974] RSP: 002b:00007f21bd5e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.347868][ T4974] RAX: ffffffffffffffda RBX: 00007f21bca25fa0 RCX: 00007f21bc79e0d9 [ 952.347881][ T4974] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 952.347893][ T4974] RBP: 00007f21bd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 952.347905][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.347917][ T4974] R13: 00007f21bca26038 R14: 00007f21bca25fa0 R15: 00007fff125f19f8 [ 952.347944][ T4974] [ 952.383951][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9872'. [ 952.477989][ T4976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9872'. [ 952.725273][ T4964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 952.730423][ T4964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 952.743266][ T4964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 952.851355][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9878'. [ 953.092101][T19350] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 953.121117][ T5004] nbd: must specify a size in bytes for the device [ 953.127083][ T4999] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 953.191365][ T5012] FAULT_INJECTION: forcing a failure. [ 953.191365][ T5012] name failslab, interval 1, probability 0, space 0, times 0 [ 953.202867][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9881'. [ 953.214616][ T5012] CPU: 0 UID: 0 PID: 5012 Comm: syz.6.9882 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.214637][ T5012] Tainted: [L]=SOFTLOCKUP [ 953.214642][ T5012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 953.214649][ T5012] Call Trace: [ 953.214653][ T5012] [ 953.214658][ T5012] dump_stack_lvl+0x100/0x190 [ 953.214679][ T5012] should_fail_ex.cold+0x5/0xa [ 953.214693][ T5012] should_failslab+0xc2/0x120 [ 953.214709][ T5012] __kmalloc_cache_noprof+0x91/0x6c0 [ 953.214722][ T5012] ? rtnl_newlink+0x126/0x2380 [ 953.214739][ T5012] ? __pfx_rtnl_newlink+0x10/0x10 [ 953.214754][ T5012] rtnl_newlink+0x126/0x2380 [ 953.214774][ T5012] ? __pfx_rtnl_newlink+0x10/0x10 [ 953.214788][ T5012] ? find_held_lock+0x2b/0x80 [ 953.214799][ T5012] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 953.214812][ T5012] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 953.214827][ T5012] ? avc_has_perm_noaudit+0x145/0x3b0 [ 953.214843][ T5012] ? __lock_acquire+0x49f/0x1a40 [ 953.214863][ T5012] ? find_held_lock+0x2b/0x80 [ 953.214873][ T5012] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 953.214887][ T5012] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 953.214903][ T5012] ? __pfx_rtnl_newlink+0x10/0x10 [ 953.214918][ T5012] rtnetlink_rcv_msg+0x95e/0xe90 [ 953.214934][ T5012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 953.214954][ T5012] ? ref_tracker_free+0x37e/0x6c0 [ 953.214971][ T5012] netlink_rcv_skb+0x159/0x420 [ 953.214985][ T5012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 953.215001][ T5012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 953.215017][ T5012] ? netlink_deliver_tap+0x1ae/0xcc0 [ 953.215037][ T5012] netlink_unicast+0x585/0x850 [ 953.215051][ T5012] ? __pfx_netlink_unicast+0x10/0x10 [ 953.215070][ T5012] netlink_sendmsg+0x8b0/0xda0 [ 953.215084][ T5012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.215097][ T5012] ? selinux_socket_sendmsg+0x198/0x2f0 [ 953.215115][ T5012] ____sys_sendmsg+0xa4d/0xbe0 [ 953.215132][ T5012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.215145][ T5012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.215168][ T5012] ___sys_sendmsg+0x190/0x1e0 [ 953.215180][ T5012] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.215190][ T5012] ? __lock_acquire+0x49f/0x1a40 [ 953.215203][ T5012] ? get_pid_task+0x106/0x250 [ 953.215229][ T5012] __sys_sendmsg+0x160/0x210 [ 953.215243][ T5012] ? __pfx___sys_sendmsg+0x10/0x10 [ 953.215265][ T5012] do_syscall_64+0x115/0x870 [ 953.215280][ T5012] ? clear_bhb_loop+0x70/0xc0 [ 953.215293][ T5012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.215305][ T5012] RIP: 0033:0x7f21bc79e0d9 [ 953.215316][ T5012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.215327][ T5012] RSP: 002b:00007f21bd5e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.215338][ T5012] RAX: ffffffffffffffda RBX: 00007f21bca25fa0 RCX: 00007f21bc79e0d9 [ 953.215345][ T5012] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 953.215351][ T5012] RBP: 00007f21bd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 953.215358][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.215364][ T5012] R13: 00007f21bca26038 R14: 00007f21bca25fa0 R15: 00007fff125f19f8 [ 953.215377][ T5012] [ 953.304491][ T5016] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 953.426052][ T5027] netlink: 'syz.4.9886': attribute type 5 has an invalid length. [ 953.559542][ T5038] FAULT_INJECTION: forcing a failure. [ 953.559542][ T5038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.585821][ T5038] CPU: 0 UID: 0 PID: 5038 Comm: syz.4.9889 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.585858][ T5038] Tainted: [L]=SOFTLOCKUP [ 953.585867][ T5038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 953.585879][ T5038] Call Trace: [ 953.585886][ T5038] [ 953.585893][ T5038] dump_stack_lvl+0x100/0x190 [ 953.585916][ T5038] should_fail_ex.cold+0x5/0xa [ 953.585931][ T5038] _copy_from_user+0x2e/0xd0 [ 953.585947][ T5038] copy_msghdr_from_user+0x9f/0x4c0 [ 953.585961][ T5038] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 953.585978][ T5038] ___sys_sendmsg+0x106/0x1e0 [ 953.585990][ T5038] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.585999][ T5038] ? __lock_acquire+0x49f/0x1a40 [ 953.586013][ T5038] ? get_pid_task+0x106/0x250 [ 953.586039][ T5038] __sys_sendmsg+0x160/0x210 [ 953.586058][ T5038] ? __pfx___sys_sendmsg+0x10/0x10 [ 953.586079][ T5038] do_syscall_64+0x115/0x870 [ 953.586095][ T5038] ? clear_bhb_loop+0x70/0xc0 [ 953.586121][ T5038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.586133][ T5038] RIP: 0033:0x7fedf939e0d9 [ 953.586143][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.586154][ T5038] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.586168][ T5038] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 953.586178][ T5038] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 953.586188][ T5038] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 953.586198][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.586209][ T5038] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 953.586235][ T5038] [ 953.719073][ T5045] xt_hashlimit: size too large, truncated to 1048576 [ 953.762022][ T5043] FAULT_INJECTION: forcing a failure. [ 953.762022][ T5043] name failslab, interval 1, probability 0, space 0, times 0 [ 953.779046][ T5043] CPU: 3 UID: 0 PID: 5043 Comm: syz.6.9890 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.779079][ T5043] Tainted: [L]=SOFTLOCKUP [ 953.779086][ T5043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 953.779097][ T5043] Call Trace: [ 953.779104][ T5043] [ 953.779112][ T5043] dump_stack_lvl+0x100/0x190 [ 953.779142][ T5043] should_fail_ex.cold+0x5/0xa [ 953.779167][ T5043] should_failslab+0xc2/0x120 [ 953.779192][ T5043] __kmalloc_noprof+0xfc/0x820 [ 953.779215][ T5043] ? __pfx_dynamic_dname+0x10/0x10 [ 953.779242][ T5043] ? tomoyo_encode2+0xfb/0x3c0 [ 953.779266][ T5043] tomoyo_encode2+0xfb/0x3c0 [ 953.779287][ T5043] tomoyo_encode+0x29/0x50 [ 953.779302][ T5043] tomoyo_realpath_from_path+0x18c/0x690 [ 953.779326][ T5043] tomoyo_path_number_perm+0x23c/0x580 [ 953.779351][ T5043] ? tomoyo_path_number_perm+0x22e/0x580 [ 953.779379][ T5043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 953.779430][ T5043] ? find_held_lock+0x2b/0x80 [ 953.779447][ T5043] ? __fget_files+0x215/0x3d0 [ 953.779467][ T5043] ? hook_file_ioctl_common+0x140/0x440 [ 953.779485][ T5043] ? __fget_files+0x215/0x3d0 [ 953.779509][ T5043] ? __fget_files+0x21f/0x3d0 [ 953.779533][ T5043] security_file_ioctl+0xd3/0x230 [ 953.779568][ T5043] __x64_sys_ioctl+0xb7/0x210 [ 953.779597][ T5043] do_syscall_64+0x115/0x870 [ 953.779623][ T5043] ? clear_bhb_loop+0x70/0xc0 [ 953.779645][ T5043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.779664][ T5043] RIP: 0033:0x7f21bc79e0d9 [ 953.779680][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.779698][ T5043] RSP: 002b:00007f21bd5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 953.779717][ T5043] RAX: ffffffffffffffda RBX: 00007f21bca25fa0 RCX: 00007f21bc79e0d9 [ 953.779730][ T5043] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 953.779740][ T5043] RBP: 00007f21bd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 953.779751][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.779763][ T5043] R13: 00007f21bca26038 R14: 00007f21bca25fa0 R15: 00007fff125f19f8 [ 953.779788][ T5043] [ 953.779804][ T5043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 953.971628][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 953.979079][ T5057] netlink: 'syz.4.9895': attribute type 1 has an invalid length. [ 954.023885][ T5057] bond23: option mode: invalid value (10) [ 954.037315][ T5057] bond23 (unregistering): Released all slaves [ 954.194916][ T42] kauditd_printk_skb: 395 callbacks suppressed [ 954.194936][ T42] audit: type=1800 audit(2000000293.536:51863): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 954.205836][ T42] audit: type=1400 audit(2000000293.536:51864): avc: denied { read write } for pid=5067 comm="syz.6.9898" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 954.216524][ T42] audit: type=1400 audit(2000000293.536:51865): avc: denied { open } for pid=5067 comm="syz.6.9898" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 954.227435][ T42] audit: type=1800 audit(2000000293.536:51866): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 954.227698][ T5068] net_ratelimit: 45 callbacks suppressed [ 954.227713][ T5068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 954.248241][ T42] audit: type=1400 audit(2000000293.546:51867): avc: denied { map_create } for pid=5066 comm="syz.4.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 954.261491][ T42] audit: type=1400 audit(2000000293.546:51868): avc: denied { map_read map_write } for pid=5066 comm="syz.4.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 954.276942][ T42] audit: type=1400 audit(2000000293.566:51869): avc: denied { create } for pid=5067 comm="syz.6.9898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 954.286044][ T42] audit: type=1400 audit(2000000293.566:51870): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=55804 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 954.296400][ T5072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9900'. [ 954.297876][ T42] audit: type=1400 audit(2000000293.566:51871): avc: denied { create } for pid=5067 comm="syz.6.9898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 954.322078][ T42] audit: type=1400 audit(2000000293.566:51872): avc: denied { setopt } for pid=5067 comm="syz.6.9898" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 954.360503][ T5076] netlink: 'syz.6.9902': attribute type 1 has an invalid length. [ 954.398255][ T5076] 8021q: adding VLAN 0 to HW filter on device bond6 [ 954.409625][ T5076] bond5: (slave erspan0): Releasing active interface [ 954.422527][ T5076] bond6: (slave erspan0): making interface the new active one [ 954.429838][ T5076] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 954.798594][ T5087] FAULT_INJECTION: forcing a failure. [ 954.798594][ T5087] name failslab, interval 1, probability 0, space 0, times 0 [ 954.805435][ T5087] CPU: 3 UID: 0 PID: 5087 Comm: syz.6.9904 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.805464][ T5087] Tainted: [L]=SOFTLOCKUP [ 954.805470][ T5087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 954.805481][ T5087] Call Trace: [ 954.805488][ T5087] [ 954.805496][ T5087] dump_stack_lvl+0x100/0x190 [ 954.805526][ T5087] should_fail_ex.cold+0x5/0xa [ 954.805555][ T5087] should_failslab+0xc2/0x120 [ 954.805579][ T5087] __kmalloc_cache_noprof+0x91/0x6c0 [ 954.805598][ T5087] ? rcu_is_watching+0x12/0xc0 [ 954.805625][ T5087] ? vhost_task_create+0xee/0x370 [ 954.805648][ T5087] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 954.805669][ T5087] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 954.805692][ T5087] vhost_task_create+0xee/0x370 [ 954.805715][ T5087] ? __pfx_vhost_task_create+0x10/0x10 [ 954.805743][ T5087] ? __pfx_vhost_task_fn+0x10/0x10 [ 954.805768][ T5087] ? __pfx___mutex_lock+0x10/0x10 [ 954.805831][ T5087] ? kasan_quarantine_put+0x104/0x240 [ 954.805860][ T5087] kvm_mmu_post_init_vm+0x1b3/0x360 [ 954.805889][ T5087] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 954.805917][ T5087] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 954.805944][ T5087] kvm_vcpu_ioctl+0x730/0x1700 [ 954.805969][ T5087] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 954.805991][ T5087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 954.806016][ T5087] ? do_vfs_ioctl+0x226/0x13e0 [ 954.806045][ T5087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 954.806071][ T5087] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 954.806110][ T5087] ? __fget_files+0x215/0x3d0 [ 954.806128][ T5087] ? hook_file_ioctl_common+0x140/0x440 [ 954.806157][ T5087] ? selinux_file_ioctl+0x13b/0x290 [ 954.806182][ T5087] ? selinux_file_ioctl+0xb6/0x290 [ 954.806209][ T5087] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 954.806230][ T5087] __x64_sys_ioctl+0x18e/0x210 [ 954.806259][ T5087] do_syscall_64+0x115/0x870 [ 954.806283][ T5087] ? clear_bhb_loop+0x70/0xc0 [ 954.806306][ T5087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.806325][ T5087] RIP: 0033:0x7f21bc79e0d9 [ 954.806343][ T5087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.806361][ T5087] RSP: 002b:00007f21bd5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.806380][ T5087] RAX: ffffffffffffffda RBX: 00007f21bca25fa0 RCX: 00007f21bc79e0d9 [ 954.806392][ T5087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 954.806403][ T5087] RBP: 00007f21bd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 954.806413][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.806423][ T5087] R13: 00007f21bca26038 R14: 00007f21bca25fa0 R15: 00007fff125f19f8 [ 954.806448][ T5087] [ 954.997472][ T5089] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 955.003877][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9906'. [ 955.016445][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9906'. [ 955.256845][ T5093] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9908'. [ 955.281091][ T5095] bridge_slave_1: left allmulticast mode [ 955.285457][ T5095] bridge_slave_1: left promiscuous mode [ 955.287954][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.306696][ T5095] bridge_slave_0: left allmulticast mode [ 955.308608][ T5095] bridge_slave_0: left promiscuous mode [ 955.311041][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.337723][ T5100] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 955.341145][ T5103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59535 sclass=netlink_route_socket pid=5103 comm=syz.0.9905 [ 955.437378][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9911'. [ 955.469275][ T5117] loop5: detected capacity change from 0 to 2640 [ 955.483552][ T5116] buffer_io_error: 11 callbacks suppressed [ 955.483565][ T5116] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 955.492780][ T5116] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 955.495931][ T5116] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 955.498919][ T5116] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 955.503327][ T5116] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 955.506236][ T5116] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 955.509030][ T5116] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 955.512187][ T5116] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 955.515192][ T5116] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 955.518295][ T5116] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 955.524817][ T5120] ubi0: attaching mtd1 [ 955.541049][ T5120] ubi0: scanning is finished [ 955.543172][ T5120] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 955.612099][ T5120] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 955.658798][ T5124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9914'. [ 955.691219][T11493] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 955.841946][T11493] usb 11-1: config 0 has no interfaces? [ 955.843930][T11493] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 955.846916][T11493] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.856200][T11493] usb 11-1: config 0 descriptor?? [ 955.982635][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9917'. [ 956.024983][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9917'. [ 956.059734][T14296] usb 11-1: USB disconnect, device number 84 [ 956.060268][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 956.076014][ T5141] netlink: 'syz.0.9917': attribute type 3 has an invalid length. [ 956.161286][ T5143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9918'. [ 956.539789][ T5160] xt_nfacct: accounting object `' does not exist [ 956.609731][ T5162] FAULT_INJECTION: forcing a failure. [ 956.609731][ T5162] name failslab, interval 1, probability 0, space 0, times 0 [ 956.616774][ T5162] CPU: 3 UID: 0 PID: 5162 Comm: syz.4.9923 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.616803][ T5162] Tainted: [L]=SOFTLOCKUP [ 956.616810][ T5162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 956.616821][ T5162] Call Trace: [ 956.616828][ T5162] [ 956.616836][ T5162] dump_stack_lvl+0x100/0x190 [ 956.616865][ T5162] should_fail_ex.cold+0x5/0xa [ 956.616889][ T5162] should_failslab+0xc2/0x120 [ 956.616912][ T5162] __kmalloc_noprof+0xfc/0x820 [ 956.616935][ T5162] ? lsm_blob_alloc+0x68/0x90 [ 956.616959][ T5162] lsm_blob_alloc+0x68/0x90 [ 956.616978][ T5162] security_task_alloc+0x2a/0x260 [ 956.616998][ T5162] copy_process+0x2b94/0x8030 [ 956.617054][ T5162] ? __pfx_copy_process+0x10/0x10 [ 956.617079][ T5162] ? __kasan_kmalloc+0xaa/0xb0 [ 956.617102][ T5162] ? lockdep_init_map_type+0x5c/0x250 [ 956.617126][ T5162] ? lockdep_init_map_type+0x5c/0x250 [ 956.617148][ T5162] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 956.617171][ T5162] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 956.617191][ T5162] vhost_task_create+0x1db/0x370 [ 956.617212][ T5162] ? __pfx_vhost_task_create+0x10/0x10 [ 956.617240][ T5162] ? __pfx_vhost_task_fn+0x10/0x10 [ 956.617264][ T5162] ? __pfx___mutex_lock+0x10/0x10 [ 956.617288][ T5162] ? kasan_quarantine_put+0x104/0x240 [ 956.617314][ T5162] kvm_mmu_post_init_vm+0x1b3/0x360 [ 956.617339][ T5162] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 956.617365][ T5162] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 956.617391][ T5162] kvm_vcpu_ioctl+0x730/0x1700 [ 956.617413][ T5162] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 956.617433][ T5162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 956.617456][ T5162] ? do_vfs_ioctl+0x226/0x13e0 [ 956.617482][ T5162] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 956.617507][ T5162] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 956.617540][ T5162] ? __fget_files+0x215/0x3d0 [ 956.617559][ T5162] ? hook_file_ioctl_common+0x140/0x440 [ 956.617585][ T5162] ? selinux_file_ioctl+0x13b/0x290 [ 956.617657][ T5162] ? selinux_file_ioctl+0xb6/0x290 [ 956.617684][ T5162] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 956.617703][ T5162] __x64_sys_ioctl+0x18e/0x210 [ 956.617735][ T5162] do_syscall_64+0x115/0x870 [ 956.617757][ T5162] ? clear_bhb_loop+0x70/0xc0 [ 956.617809][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.617829][ T5162] RIP: 0033:0x7fedf939e0d9 [ 956.617847][ T5162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.617865][ T5162] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.617884][ T5162] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 956.617897][ T5162] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 956.617906][ T5162] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 956.617917][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.617926][ T5162] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 956.617951][ T5162] [ 957.224678][ T5183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 957.511147][ T5204] FAULT_INJECTION: forcing a failure. [ 957.511147][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 957.515242][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.6.9936 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.515267][ T5204] Tainted: [L]=SOFTLOCKUP [ 957.515272][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 957.515279][ T5204] Call Trace: [ 957.515290][ T5204] [ 957.515296][ T5204] dump_stack_lvl+0x100/0x190 [ 957.515332][ T5204] should_fail_ex.cold+0x5/0xa [ 957.515347][ T5204] should_failslab+0xc2/0x120 [ 957.515363][ T5204] __kmalloc_cache_noprof+0x91/0x6c0 [ 957.515375][ T5204] ? rtnl_newlink+0x126/0x2380 [ 957.515431][ T5204] ? __pfx_rtnl_newlink+0x10/0x10 [ 957.515447][ T5204] rtnl_newlink+0x126/0x2380 [ 957.515467][ T5204] ? __pfx_rtnl_newlink+0x10/0x10 [ 957.515480][ T5204] ? find_held_lock+0x2b/0x80 [ 957.515491][ T5204] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 957.515509][ T5204] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 957.515524][ T5204] ? avc_has_perm_noaudit+0x145/0x3b0 [ 957.515540][ T5204] ? __lock_acquire+0x49f/0x1a40 [ 957.515560][ T5204] ? find_held_lock+0x2b/0x80 [ 957.515570][ T5204] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 957.515585][ T5204] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 957.515600][ T5204] ? __pfx_rtnl_newlink+0x10/0x10 [ 957.515615][ T5204] rtnetlink_rcv_msg+0x95e/0xe90 [ 957.515632][ T5204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 957.515650][ T5204] ? ref_tracker_free+0x37e/0x6c0 [ 957.515669][ T5204] netlink_rcv_skb+0x159/0x420 [ 957.515688][ T5204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 957.515705][ T5204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.515721][ T5204] ? netlink_deliver_tap+0x1ae/0xcc0 [ 957.515742][ T5204] netlink_unicast+0x585/0x850 [ 957.515756][ T5204] ? __pfx_netlink_unicast+0x10/0x10 [ 957.515771][ T5204] netlink_sendmsg+0x8b0/0xda0 [ 957.515785][ T5204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.515799][ T5204] ? selinux_socket_sendmsg+0x198/0x2f0 [ 957.515817][ T5204] ____sys_sendmsg+0xa4d/0xbe0 [ 957.515835][ T5204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.515848][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.515871][ T5204] ___sys_sendmsg+0x190/0x1e0 [ 957.515882][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.515892][ T5204] ? __lock_acquire+0x49f/0x1a40 [ 957.515906][ T5204] ? get_pid_task+0x106/0x250 [ 957.515931][ T5204] __sys_sendmsg+0x160/0x210 [ 957.515950][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 957.515972][ T5204] do_syscall_64+0x115/0x870 [ 957.516025][ T5204] ? clear_bhb_loop+0x70/0xc0 [ 957.516039][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.516050][ T5204] RIP: 0033:0x7f21bc79e0d9 [ 957.516060][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.516072][ T5204] RSP: 002b:00007f21bd5e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.516089][ T5204] RAX: ffffffffffffffda RBX: 00007f21bca25fa0 RCX: 00007f21bc79e0d9 [ 957.516096][ T5204] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 957.516103][ T5204] RBP: 00007f21bd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 957.516109][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.516116][ T5204] R13: 00007f21bca26038 R14: 00007f21bca25fa0 R15: 00007fff125f19f8 [ 957.516130][ T5204] [ 957.642770][T19350] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 957.738663][ T5208] bond0: entered promiscuous mode [ 957.747410][ T5208] bond_slave_0: entered promiscuous mode [ 957.754787][ T5208] bond_slave_1: entered promiscuous mode [ 957.770554][ T5208] bond0: left promiscuous mode [ 957.772672][ T5208] bond_slave_0: left promiscuous mode [ 957.775720][ T5208] bond_slave_1: left promiscuous mode [ 957.790937][T19350] usb 5-1: config 0 has no interfaces? [ 957.793525][T19350] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 957.796699][T19350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.803689][T19350] usb 5-1: config 0 descriptor?? [ 958.010859][T11493] usb 5-1: USB disconnect, device number 118 [ 958.131475][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 958.172455][ T5220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5220 comm=syz.6.9943 [ 958.178224][ T5220] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 958.255437][ T5225] FAULT_INJECTION: forcing a failure. [ 958.255437][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 958.260419][ T5225] CPU: 2 UID: 0 PID: 5225 Comm: syz.3.9945 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.260448][ T5225] Tainted: [L]=SOFTLOCKUP [ 958.260455][ T5225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.260466][ T5225] Call Trace: [ 958.260474][ T5225] [ 958.260482][ T5225] dump_stack_lvl+0x100/0x190 [ 958.260512][ T5225] should_fail_ex.cold+0x5/0xa [ 958.260537][ T5225] should_failslab+0xc2/0x120 [ 958.260562][ T5225] __kmalloc_cache_noprof+0x91/0x6c0 [ 958.260582][ T5225] ? rtnl_newlink+0x126/0x2380 [ 958.260607][ T5225] ? __pfx_rtnl_newlink+0x10/0x10 [ 958.260631][ T5225] rtnl_newlink+0x126/0x2380 [ 958.260661][ T5225] ? __pfx_rtnl_newlink+0x10/0x10 [ 958.260678][ T5225] ? find_held_lock+0x2b/0x80 [ 958.260696][ T5225] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 958.260717][ T5225] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 958.260743][ T5225] ? avc_has_perm_noaudit+0x145/0x3b0 [ 958.260770][ T5225] ? __lock_acquire+0x49f/0x1a40 [ 958.260800][ T5225] ? find_held_lock+0x2b/0x80 [ 958.260812][ T5225] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 958.260833][ T5225] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 958.260858][ T5225] ? __pfx_rtnl_newlink+0x10/0x10 [ 958.260883][ T5225] rtnetlink_rcv_msg+0x95e/0xe90 [ 958.260908][ T5225] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 958.260940][ T5225] ? ref_tracker_free+0x37e/0x6c0 [ 958.260968][ T5225] netlink_rcv_skb+0x159/0x420 [ 958.260990][ T5225] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 958.261015][ T5225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.261050][ T5225] ? netlink_deliver_tap+0x1ae/0xcc0 [ 958.261084][ T5225] netlink_unicast+0x585/0x850 [ 958.261104][ T5225] ? __pfx_netlink_unicast+0x10/0x10 [ 958.261131][ T5225] netlink_sendmsg+0x8b0/0xda0 [ 958.261154][ T5225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.261175][ T5225] ? selinux_socket_sendmsg+0x198/0x2f0 [ 958.261204][ T5225] ____sys_sendmsg+0xa4d/0xbe0 [ 958.261231][ T5225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.261251][ T5225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.261290][ T5225] ___sys_sendmsg+0x190/0x1e0 [ 958.261309][ T5225] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.261326][ T5225] ? __lock_acquire+0x49f/0x1a40 [ 958.261349][ T5225] ? get_pid_task+0x106/0x250 [ 958.261394][ T5225] __sys_sendmsg+0x160/0x210 [ 958.261417][ T5225] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.261452][ T5225] do_syscall_64+0x115/0x870 [ 958.261477][ T5225] ? clear_bhb_loop+0x70/0xc0 [ 958.261500][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.261518][ T5225] RIP: 0033:0x7f550799e0d9 [ 958.261530][ T5225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.261545][ T5225] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.261565][ T5225] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 958.261577][ T5225] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 958.261589][ T5225] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 958.261612][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.261622][ T5225] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 958.261648][ T5225] [ 958.550267][ T5231] netlink: 'syz.6.9949': attribute type 1 has an invalid length. [ 958.600453][ T5231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 958.622810][ T5234] bond0: entered promiscuous mode [ 958.622866][ T5231] __nla_validate_parse: 6 callbacks suppressed [ 958.622886][ T5231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9949'. [ 958.624795][ T5234] bond_slave_0: entered promiscuous mode [ 958.624994][ T5234] bond_slave_1: entered promiscuous mode [ 958.641455][ T5234] bond0: left promiscuous mode [ 958.643638][ T5234] bond_slave_0: left promiscuous mode [ 958.646185][ T5234] bond_slave_1: left promiscuous mode [ 958.691816][ T6996] bond6: (slave erspan0): link status definitely down, disabling slave [ 958.701430][ T6996] bond6: now running without any active interface! [ 958.807603][ T5243] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 958.810745][ T5243] overlayfs: missing 'lowerdir' [ 958.905513][ T5250] bond0: entered promiscuous mode [ 958.907952][ T5250] bond_slave_0: entered promiscuous mode [ 958.911360][ T5250] bond_slave_1: entered promiscuous mode [ 958.920890][ T5250] batadv0: entered promiscuous mode [ 958.925914][ T5250] debugfs: 'hsr1' already exists in 'hsr' [ 958.931649][ T5250] Cannot create hsr debugfs directory [ 958.966371][ T5251] FAULT_INJECTION: forcing a failure. [ 958.966371][ T5251] name failslab, interval 1, probability 0, space 0, times 0 [ 958.971826][ T5251] CPU: 2 UID: 0 PID: 5251 Comm: syz.3.9955 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.971854][ T5251] Tainted: [L]=SOFTLOCKUP [ 958.971860][ T5251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.971867][ T5251] Call Trace: [ 958.971872][ T5251] [ 958.971879][ T5251] dump_stack_lvl+0x100/0x190 [ 958.971906][ T5251] should_fail_ex.cold+0x5/0xa [ 958.971928][ T5251] should_failslab+0xc2/0x120 [ 958.971955][ T5251] __kvmalloc_node_noprof+0x116/0x970 [ 958.971978][ T5251] ? __lock_acquire+0x49f/0x1a40 [ 958.972002][ T5251] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 958.972030][ T5251] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 958.972068][ T5251] mmu_topup_memory_caches+0x25/0x170 [ 958.972097][ T5251] kvm_mmu_load+0xe2/0x2570 [ 958.972122][ T5251] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 958.972143][ T5251] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 958.972164][ T5251] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 958.972184][ T5251] ? __pfx_kvm_mmu_load+0x10/0x10 [ 958.972207][ T5251] ? vmx_load_vmcs01+0x9b/0xe0 [ 958.972228][ T5251] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 958.972261][ T5251] vcpu_run+0x3aaa/0x5de0 [ 958.972299][ T5251] ? __pfx_vcpu_run+0x10/0x10 [ 958.972336][ T5251] ? rcu_is_watching+0x12/0xc0 [ 958.972369][ T5251] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 958.972396][ T5251] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 958.972430][ T5251] kvm_vcpu_ioctl+0x730/0x1700 [ 958.972456][ T5251] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 958.972479][ T5251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 958.972503][ T5251] ? do_vfs_ioctl+0x226/0x13e0 [ 958.972532][ T5251] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 958.972558][ T5251] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 958.972597][ T5251] ? __fget_files+0x215/0x3d0 [ 958.972617][ T5251] ? hook_file_ioctl_common+0x140/0x440 [ 958.972646][ T5251] ? selinux_file_ioctl+0x13b/0x290 [ 958.972674][ T5251] ? selinux_file_ioctl+0xb6/0x290 [ 958.972703][ T5251] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 958.972726][ T5251] __x64_sys_ioctl+0x18e/0x210 [ 958.972755][ T5251] do_syscall_64+0x115/0x870 [ 958.972782][ T5251] ? clear_bhb_loop+0x70/0xc0 [ 958.972805][ T5251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.972825][ T5251] RIP: 0033:0x7f550799e0d9 [ 958.972841][ T5251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.972859][ T5251] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.972895][ T5251] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 958.972907][ T5251] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 958.972918][ T5251] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 958.972929][ T5251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.972941][ T5251] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 958.972966][ T5251] [ 959.131213][ T5254] overlayfs: conflicting options: userxattr,metacopy=on [ 959.223232][ T42] kauditd_printk_skb: 279 callbacks suppressed [ 959.223250][ T42] audit: type=1400 audit(2000000298.559:52152): avc: denied { read write } for pid=5259 comm="syz.0.9958" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 959.236931][ T42] audit: type=1400 audit(2000000298.569:52153): avc: denied { open } for pid=5259 comm="syz.0.9958" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 959.259877][ T42] audit: type=1400 audit(2000000298.589:52154): avc: denied { ioctl } for pid=5259 comm="syz.0.9958" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 959.279032][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9958'. [ 959.283000][ T5262] FAULT_INJECTION: forcing a failure. [ 959.283000][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 959.292742][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.3.9959 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.292773][ T5262] Tainted: [L]=SOFTLOCKUP [ 959.292779][ T5262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 959.292791][ T5262] Call Trace: [ 959.292798][ T5262] [ 959.292806][ T5262] dump_stack_lvl+0x100/0x190 [ 959.292835][ T5262] should_fail_ex.cold+0x5/0xa [ 959.292856][ T5262] should_failslab+0xc2/0x120 [ 959.292902][ T5262] kmem_cache_alloc_noprof+0x91/0x6a0 [ 959.292926][ T5262] ? __pfx_map_id_range_down+0x10/0x10 [ 959.292947][ T5262] ? security_inode_alloc+0x3b/0x2c0 [ 959.292962][ T42] audit: type=1800 audit(2000000298.589:52155): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 959.292976][ T5262] security_inode_alloc+0x3b/0x2c0 [ 959.293003][ T5262] inode_init_always_gfp+0xc77/0xfb0 [ 959.293029][ T5262] alloc_inode+0x8e/0x250 [ 959.293055][ T5262] new_inode+0x22/0x1c0 [ 959.293084][ T5262] __debugfs_create_file+0x105/0x4f0 [ 959.293116][ T5262] debugfs_create_file_full+0x41/0x60 [ 959.293145][ T5262] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 959.293173][ T5262] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 959.293221][ T5262] ? lockdep_init_map_type+0x5c/0x250 [ 959.293249][ T5262] ? __pfx_hsr_dev_setup+0x10/0x10 [ 959.293270][ T5262] alloc_netdev_mqs+0x314/0x15c0 [ 959.293302][ T5262] rtnl_create_link+0xc13/0xf80 [ 959.293331][ T5262] rtnl_newlink+0x13bd/0x2380 [ 959.293366][ T5262] ? __pfx_rtnl_newlink+0x10/0x10 [ 959.293390][ T5262] ? find_held_lock+0x2b/0x80 [ 959.293407][ T5262] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 959.293430][ T5262] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 959.293455][ T5262] ? avc_has_perm_noaudit+0x145/0x3b0 [ 959.293504][ T5262] ? find_held_lock+0x2b/0x80 [ 959.293521][ T5262] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 959.293545][ T5262] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 959.293569][ T5262] ? __pfx_rtnl_newlink+0x10/0x10 [ 959.293594][ T5262] rtnetlink_rcv_msg+0x95e/0xe90 [ 959.293619][ T5262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 959.293651][ T5262] ? ref_tracker_free+0x37e/0x6c0 [ 959.293681][ T5262] netlink_rcv_skb+0x159/0x420 [ 959.293702][ T5262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 959.293729][ T5262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 959.293756][ T5262] ? netlink_deliver_tap+0x1ae/0xcc0 [ 959.293813][ T5262] netlink_unicast+0x585/0x850 [ 959.293837][ T5262] ? __pfx_netlink_unicast+0x10/0x10 [ 959.293864][ T5262] netlink_sendmsg+0x8b0/0xda0 [ 959.293889][ T5262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.293911][ T5262] ? selinux_socket_sendmsg+0x198/0x2f0 [ 959.293942][ T5262] ____sys_sendmsg+0xa4d/0xbe0 [ 959.293968][ T5262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.293990][ T5262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.294032][ T5262] ___sys_sendmsg+0x190/0x1e0 [ 959.294052][ T5262] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.294066][ T5262] ? __lock_acquire+0x49f/0x1a40 [ 959.294089][ T5262] ? get_pid_task+0x106/0x250 [ 959.294135][ T5262] __sys_sendmsg+0x160/0x210 [ 959.294158][ T5262] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.294192][ T5262] do_syscall_64+0x115/0x870 [ 959.294213][ T5262] ? clear_bhb_loop+0x70/0xc0 [ 959.294236][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.294254][ T5262] RIP: 0033:0x7f550799e0d9 [ 959.294271][ T5262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.294288][ T5262] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.294307][ T5262] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 959.294319][ T5262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 959.294330][ T5262] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 959.294339][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.294351][ T5262] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 959.294376][ T5262] [ 959.294515][ T5262] debugfs: out of free dentries, can not create file 'netdev@ffff888034c58700' [ 959.301017][ T42] audit: type=1400 audit(2000000298.639:52156): avc: denied { read write } for pid=5259 comm="syz.0.9958" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 959.345484][ T5262] bond0: entered promiscuous mode [ 959.347763][ T42] audit: type=1400 audit(2000000298.639:52157): avc: denied { open } for pid=5259 comm="syz.0.9958" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 959.350194][ T5262] bond_slave_0: entered promiscuous mode [ 959.352126][ T42] audit: type=1400 audit(2000000298.639:52158): avc: denied { ioctl } for pid=5259 comm="syz.0.9958" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 959.354224][ T5262] bond_slave_1: entered promiscuous mode [ 959.505022][ T5262] bond0: left promiscuous mode [ 959.507140][ T5262] bond_slave_0: left promiscuous mode [ 959.509789][ T5262] bond_slave_1: left promiscuous mode [ 959.552054][ T42] audit: type=1800 audit(2000000298.889:52159): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 959.575119][ T42] audit: type=1400 audit(2000000298.909:52160): avc: denied { create } for pid=5264 comm="syz.6.9960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 959.586197][T18602] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 959.588570][ T42] audit: type=1400 audit(2000000298.919:52161): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=55804 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 959.644305][ T5267] bond0: entered promiscuous mode [ 959.646540][ T5267] bond_slave_0: entered promiscuous mode [ 959.657033][ T5267] bond_slave_1: entered promiscuous mode [ 959.661710][ T5267] bond0: left promiscuous mode [ 959.663825][ T5267] bond_slave_0: left promiscuous mode [ 959.666375][ T5267] bond_slave_1: left promiscuous mode [ 959.768730][T18602] usb 5-1: config 0 has no interfaces? [ 959.770888][T18602] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 959.774447][T18602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.784691][T18602] usb 5-1: config 0 descriptor?? [ 959.995564][T18602] usb 5-1: USB disconnect, device number 119 [ 960.133154][ T5286] 9pnet_virtio: no channels available for device syz [ 960.223184][ T5289] openvswitch: netlink: Missing key (keys=40, expected=100) [ 960.271263][ T5292] bond0: entered promiscuous mode [ 960.273607][ T5292] bond_slave_0: entered promiscuous mode [ 960.276198][ T5292] bond_slave_1: entered promiscuous mode [ 960.281287][ T5292] bond0: left promiscuous mode [ 960.283350][ T5292] bond_slave_0: left promiscuous mode [ 960.285756][ T5292] bond_slave_1: left promiscuous mode [ 960.317808][ T5294] FAULT_INJECTION: forcing a failure. [ 960.317808][ T5294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 960.324983][ T5294] CPU: 2 UID: 0 PID: 5294 Comm: syz.4.9969 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.325003][ T5294] Tainted: [L]=SOFTLOCKUP [ 960.325007][ T5294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 960.325014][ T5294] Call Trace: [ 960.325019][ T5294] [ 960.325024][ T5294] dump_stack_lvl+0x100/0x190 [ 960.325044][ T5294] should_fail_ex.cold+0x5/0xa [ 960.325057][ T5294] ? prepare_alloc_pages+0x16d/0x5f0 [ 960.325074][ T5294] should_fail_alloc_page+0xeb/0x140 [ 960.325090][ T5294] prepare_alloc_pages+0x1f0/0x5f0 [ 960.325108][ T5294] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 960.325131][ T5294] ? stack_trace_save+0x8e/0xc0 [ 960.325143][ T5294] ? __pfx_stack_trace_save+0x10/0x10 [ 960.325155][ T5294] ? stack_depot_save_flags+0x27/0x9d0 [ 960.325172][ T5294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 960.325186][ T5294] ? kasan_save_stack+0x3f/0x50 [ 960.325198][ T5294] ? kasan_save_stack+0x30/0x50 [ 960.325211][ T5294] ? kasan_save_track+0x14/0x30 [ 960.325223][ T5294] ? __kasan_slab_alloc+0x89/0x90 [ 960.325236][ T5294] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 960.325248][ T5294] ? security_inode_alloc+0x3b/0x2c0 [ 960.325263][ T5294] ? inode_init_always_gfp+0xc77/0xfb0 [ 960.325275][ T5294] ? alloc_inode+0x8e/0x250 [ 960.325289][ T5294] ? new_inode+0x22/0x1c0 [ 960.325303][ T5294] ? __debugfs_create_file+0x105/0x4f0 [ 960.325319][ T5294] ? debugfs_create_file_full+0x41/0x60 [ 960.325334][ T5294] ? ref_tracker_dir_debugfs+0x19e/0x2e0 [ 960.325349][ T5294] ? alloc_netdev_mqs+0x314/0x15c0 [ 960.325365][ T5294] ? rtnl_create_link+0xc13/0xf80 [ 960.325378][ T5294] ? rtnl_newlink+0x13bd/0x2380 [ 960.325392][ T5294] ? look_up_lock_class+0x64/0x120 [ 960.325408][ T5294] ? netlink_rcv_skb+0x159/0x420 [ 960.325421][ T5294] ? do_syscall_64+0x115/0x870 [ 960.325434][ T5294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.325448][ T5294] ? __lock_acquire+0x49f/0x1a40 [ 960.325462][ T5294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 960.325476][ T5294] ? policy_nodemask+0xed/0x4f0 [ 960.325493][ T5294] alloc_pages_mpol+0x1fb/0x540 [ 960.325508][ T5294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 960.325523][ T5294] ? do_raw_spin_lock+0x128/0x260 [ 960.325539][ T5294] ? find_held_lock+0x2b/0x80 [ 960.325549][ T5294] ? inode_doinit_with_dentry+0x70b/0x1320 [ 960.325567][ T5294] alloc_pages_noprof+0x1a/0x160 [ 960.325585][ T5294] get_free_pages_noprof+0x10/0xb0 [ 960.325599][ T5294] inode_doinit_with_dentry+0x788/0x1320 [ 960.325618][ T5294] ? inode_set_ctime_current+0x283/0x850 [ 960.325631][ T5294] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 960.325648][ T5294] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 960.325662][ T5294] ? new_inode+0x15a/0x1c0 [ 960.325679][ T5294] selinux_d_instantiate+0x26/0x40 [ 960.325696][ T5294] security_d_instantiate+0x14c/0x1b0 [ 960.325709][ T5294] d_make_persistent+0x64/0x180 [ 960.325725][ T5294] __debugfs_create_file+0x25e/0x4f0 [ 960.325743][ T5294] debugfs_create_file_full+0x41/0x60 [ 960.325783][ T5294] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 960.325801][ T5294] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 960.325830][ T5294] ? lockdep_init_map_type+0x5c/0x250 [ 960.325846][ T5294] ? __pfx_hsr_dev_setup+0x10/0x10 [ 960.325857][ T5294] alloc_netdev_mqs+0x314/0x15c0 [ 960.325874][ T5294] rtnl_create_link+0xc13/0xf80 [ 960.325891][ T5294] rtnl_newlink+0x13bd/0x2380 [ 960.325910][ T5294] ? __pfx_rtnl_newlink+0x10/0x10 [ 960.325924][ T5294] ? find_held_lock+0x2b/0x80 [ 960.325934][ T5294] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 960.325947][ T5294] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 960.325974][ T5294] ? avc_has_perm_noaudit+0x145/0x3b0 [ 960.326001][ T5294] ? find_held_lock+0x2b/0x80 [ 960.326010][ T5294] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 960.326025][ T5294] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 960.326041][ T5294] ? __pfx_rtnl_newlink+0x10/0x10 [ 960.326056][ T5294] rtnetlink_rcv_msg+0x95e/0xe90 [ 960.326072][ T5294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 960.326091][ T5294] ? ref_tracker_free+0x37e/0x6c0 [ 960.326109][ T5294] netlink_rcv_skb+0x159/0x420 [ 960.326125][ T5294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 960.326141][ T5294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 960.326158][ T5294] ? netlink_deliver_tap+0x1ae/0xcc0 [ 960.326179][ T5294] netlink_unicast+0x585/0x850 [ 960.326193][ T5294] ? __pfx_netlink_unicast+0x10/0x10 [ 960.326208][ T5294] netlink_sendmsg+0x8b0/0xda0 [ 960.326222][ T5294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.326235][ T5294] ? selinux_socket_sendmsg+0x198/0x2f0 [ 960.326253][ T5294] ____sys_sendmsg+0xa4d/0xbe0 [ 960.326270][ T5294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.326283][ T5294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.326307][ T5294] ___sys_sendmsg+0x190/0x1e0 [ 960.326318][ T5294] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.326328][ T5294] ? __lock_acquire+0x49f/0x1a40 [ 960.326341][ T5294] ? get_pid_task+0x106/0x250 [ 960.326368][ T5294] __sys_sendmsg+0x160/0x210 [ 960.326382][ T5294] ? __pfx___sys_sendmsg+0x10/0x10 [ 960.326404][ T5294] do_syscall_64+0x115/0x870 [ 960.326418][ T5294] ? clear_bhb_loop+0x70/0xc0 [ 960.326431][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.326442][ T5294] RIP: 0033:0x7fedf939e0d9 [ 960.326453][ T5294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.326463][ T5294] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.326475][ T5294] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 960.326482][ T5294] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 960.326489][ T5294] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 960.326495][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.326502][ T5294] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 960.326516][ T5294] [ 960.479672][ T5270] 9pnet_fd: p9_fd_create_tcp (5270): problem connecting socket to 127.0.0.1 [ 960.580765][ T5296] SELinux: policydb string does not match my string SE Linux [ 960.587493][ T5296] SELinux: failed to load policy [ 960.752035][ T5303] FAULT_INJECTION: forcing a failure. [ 960.752035][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 960.764030][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz.4.9975 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.764061][ T5303] Tainted: [L]=SOFTLOCKUP [ 960.764067][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 960.764079][ T5303] Call Trace: [ 960.764087][ T5303] [ 960.764096][ T5303] dump_stack_lvl+0x100/0x190 [ 960.764129][ T5303] should_fail_ex.cold+0x5/0xa [ 960.764152][ T5303] should_failslab+0xc2/0x120 [ 960.764177][ T5303] kmem_cache_alloc_noprof+0x91/0x6a0 [ 960.764202][ T5303] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 960.764230][ T5303] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 960.764259][ T5303] mmu_topup_memory_caches+0x25/0x170 [ 960.764286][ T5303] kvm_mmu_load+0xe2/0x2570 [ 960.764311][ T5303] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 960.764346][ T5303] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 960.764366][ T5303] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 960.764386][ T5303] ? __pfx_kvm_mmu_load+0x10/0x10 [ 960.764406][ T5303] ? vmx_load_vmcs01+0x9b/0xe0 [ 960.764418][ T5303] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 960.764448][ T5303] vcpu_run+0x3aaa/0x5de0 [ 960.764483][ T5303] ? __pfx_vcpu_run+0x10/0x10 [ 960.764519][ T5303] ? rcu_is_watching+0x12/0xc0 [ 960.764550][ T5303] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 960.764577][ T5303] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 960.764611][ T5303] kvm_vcpu_ioctl+0x730/0x1700 [ 960.764636][ T5303] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 960.764657][ T5303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 960.764682][ T5303] ? do_vfs_ioctl+0x226/0x13e0 [ 960.764710][ T5303] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 960.764742][ T5303] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 960.764765][ T5303] ? __fget_files+0x215/0x3d0 [ 960.764784][ T5303] ? hook_file_ioctl_common+0x140/0x440 [ 960.764801][ T5303] ? selinux_file_ioctl+0x13b/0x290 [ 960.764817][ T5303] ? selinux_file_ioctl+0xb6/0x290 [ 960.764835][ T5303] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 960.764848][ T5303] __x64_sys_ioctl+0x18e/0x210 [ 960.764866][ T5303] do_syscall_64+0x115/0x870 [ 960.764881][ T5303] ? clear_bhb_loop+0x70/0xc0 [ 960.764895][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.764907][ T5303] RIP: 0033:0x7fedf939e0d9 [ 960.764918][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.764929][ T5303] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.764943][ T5303] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 960.764950][ T5303] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 960.764956][ T5303] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 960.764963][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.764969][ T5303] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 960.764983][ T5303] [ 960.995032][ T5301] overlayfs: missing 'lowerdir' [ 961.340707][ T5298] openvswitch: netlink: Actions may not be safe on all matching packets [ 961.364647][ T5321] nbd: must specify a size in bytes for the device [ 961.851812][ T5333] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 961.866746][ T5336] xt_hashlimit: size too large, truncated to 1048576 [ 962.024379][ T5347] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9988'. [ 962.284957][T11493] bridge0: entered promiscuous mode [ 962.365658][ T5370] xt_hashlimit: size too large, truncated to 1048576 [ 962.532987][ T5377] 0x20000000,0x20000000 overlaps existing 0x20000000,0x20000 [ 962.534369][ T5378] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10000'. [ 962.586610][ T5382] o2cb: This node has not been configured. [ 962.590549][ T5382] o2cb: Cluster check failed. Fix errors before retrying. [ 962.593400][ T5382] (syz.3.10003,5382,2):user_dlm_register:674 ERROR: status = -22 [ 962.596069][ T5382] (syz.3.10003,5382,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mnt" [ 962.606319][ T5383] o2cb: This node has not been configured. [ 962.610046][ T5383] o2cb: Cluster check failed. Fix errors before retrying. [ 962.613003][ T5383] (syz.3.10003,5383,0):user_dlm_register:674 ERROR: status = -22 [ 962.616624][ T5383] (syz.3.10003,5383,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mnt" [ 962.653537][ T5383] o2cb: This node has not been configured. [ 962.663521][ T5383] o2cb: Cluster check failed. Fix errors before retrying. [ 962.666390][ T5383] (syz.3.10003,5383,3):user_dlm_register:674 ERROR: status = -22 [ 962.677595][ T5383] (syz.3.10003,5383,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "sys" [ 962.694565][ T5386] o2cb: This node has not been configured. [ 962.704172][ T5386] o2cb: Cluster check failed. Fix errors before retrying. [ 962.713402][ T5386] (syz.3.10003,5386,0):user_dlm_register:674 ERROR: status = -22 [ 962.716566][ T5386] (syz.3.10003,5386,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "config" [ 962.725992][ T5388] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 962.742866][ T5383] o2cb: This node has not been configured. [ 962.746987][ T5383] o2cb: Cluster check failed. Fix errors before retrying. [ 962.755993][ T5383] (syz.3.10003,5383,3):user_dlm_register:674 ERROR: status = -22 [ 962.784114][ T5390] 9p: Bad value for 'version' [ 962.796823][ T5383] (syz.3.10003,5383,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "config" [ 962.979730][ T5401] xt_hashlimit: size too large, truncated to 1048576 [ 963.028835][ T5357] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 963.117988][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 963.134245][ T5409] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10011'. [ 963.291166][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 963.294440][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 963.297614][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.304954][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 963.309548][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.312128][ T9] usb 5-1: Product: syz [ 963.313414][ T9] usb 5-1: Manufacturer: syz [ 963.315082][ T9] usb 5-1: SerialNumber: syz [ 963.323047][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 963.325849][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 963.543970][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 120 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 963.587499][ T9] usb 5-1: USB disconnect, device number 120 [ 963.595139][ T9] usblp0: removed [ 963.809598][ T5433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=5433 comm=syz.0.10016 [ 963.935284][ T5437] netlink: 'syz.3.10018': attribute type 1 has an invalid length. [ 963.964822][ T5437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 963.972966][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10018'. [ 964.151387][ T5454] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10020'. [ 964.210447][ T5459] openvswitch: netlink: IP tunnel dst address not specified [ 964.229435][ T42] kauditd_printk_skb: 379 callbacks suppressed [ 964.229448][ T42] audit: type=1400 audit(2000000303.571:52541): avc: denied { create } for pid=5450 comm="syz.3.10023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 964.254736][ T42] audit: type=1400 audit(2000000303.581:52542): avc: denied { map } for pid=5460 comm="syz.0.10026" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=182822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 964.269525][ T42] audit: type=1400 audit(2000000303.601:52543): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=55804 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 964.269873][ T5459] syz.4.10025: attempt to access beyond end of device [ 964.269873][ T5459] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 964.277935][ T5464] xt_hashlimit: size too large, truncated to 1048576 [ 964.279254][ T42] audit: type=1800 audit(2000000303.611:52544): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 964.279283][ T42] audit: type=1400 audit(2000000303.611:52545): avc: denied { create } for pid=5463 comm="syz.6.10027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 964.279348][ T42] audit: type=1400 audit(2000000303.621:52546): avc: denied { setopt } for pid=5463 comm="syz.6.10027" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 964.286150][ T5459] gfs2: error -5 reading superblock [ 964.309907][ T42] audit: type=1400 audit(2000000303.651:52547): avc: denied { write } for pid=5450 comm="syz.3.10023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 964.318098][ T42] audit: type=1400 audit(2000000303.651:52548): avc: denied { create } for pid=5450 comm="syz.3.10023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 964.327348][ T42] audit: type=1400 audit(2000000303.651:52549): avc: denied { setopt } for pid=5450 comm="syz.3.10023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 964.334637][ T42] audit: type=1400 audit(2000000303.671:52550): avc: denied { module_request } for pid=5463 comm="syz.6.10027" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 964.360203][ T5459] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 964.585784][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10035'. [ 964.587774][ T5485] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10033'. [ 964.589472][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10035'. [ 964.962246][ T5506] netlink: 'syz.4.10043': attribute type 10 has an invalid length. [ 964.972007][ T5506] netlink: 'syz.4.10043': attribute type 10 has an invalid length. [ 965.023047][ T5509] 9p: Bad value for 'wfdno' [ 965.138608][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10046'. [ 965.170677][ T5518] bond0: entered promiscuous mode [ 965.172450][ T5518] bond_slave_0: entered promiscuous mode [ 965.174499][ T5518] bond_slave_1: entered promiscuous mode [ 965.178037][ T5518] bond0: left promiscuous mode [ 965.179644][ T5518] bond_slave_0: left promiscuous mode [ 965.181501][ T5518] bond_slave_1: left promiscuous mode [ 965.274326][ T5523] tipc: Started in network mode [ 965.276153][ T9] usb 9-1: new low-speed USB device number 74 using dummy_hcd [ 965.278598][ T5523] tipc: Node identity 1000001, cluster identity 4369 [ 965.280962][ T5523] tipc: Node number set to 16777217 [ 965.283323][ T5523] tipc: Cannot configure node identity twice [ 965.286050][ T5523] tipc: New replicast peer: 127.0.0.1 [ 965.288918][ T5523] tipc: Enabled bearer , priority 10 [ 965.354674][ T5526] FAULT_INJECTION: forcing a failure. [ 965.354674][ T5526] name failslab, interval 1, probability 0, space 0, times 0 [ 965.359108][ T5526] CPU: 3 UID: 0 PID: 5526 Comm: syz.3.10049 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.359126][ T5526] Tainted: [L]=SOFTLOCKUP [ 965.359130][ T5526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 965.359138][ T5526] Call Trace: [ 965.359142][ T5526] [ 965.359147][ T5526] dump_stack_lvl+0x100/0x190 [ 965.359167][ T5526] should_fail_ex.cold+0x5/0xa [ 965.359181][ T5526] should_failslab+0xc2/0x120 [ 965.359196][ T5526] kmem_cache_alloc_noprof+0x91/0x6a0 [ 965.359211][ T5526] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 965.359227][ T5526] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 965.359245][ T5526] mmu_topup_memory_caches+0x25/0x170 [ 965.359262][ T5526] kvm_mmu_load+0xe2/0x2570 [ 965.359277][ T5526] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 965.359289][ T5526] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 965.359301][ T5526] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 965.359312][ T5526] ? __pfx_kvm_mmu_load+0x10/0x10 [ 965.359326][ T5526] ? vmx_load_vmcs01+0x9b/0xe0 [ 965.359338][ T5526] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 965.359358][ T5526] vcpu_run+0x3aaa/0x5de0 [ 965.359379][ T5526] ? __pfx_vcpu_run+0x10/0x10 [ 965.359399][ T5526] ? rcu_is_watching+0x12/0xc0 [ 965.359418][ T5526] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 965.359435][ T5526] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 965.359455][ T5526] kvm_vcpu_ioctl+0x730/0x1700 [ 965.359468][ T5526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 965.359481][ T5526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.359496][ T5526] ? do_vfs_ioctl+0x226/0x13e0 [ 965.359513][ T5526] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 965.359529][ T5526] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 965.359551][ T5526] ? __fget_files+0x215/0x3d0 [ 965.359567][ T5526] ? hook_file_ioctl_common+0x140/0x440 [ 965.359584][ T5526] ? selinux_file_ioctl+0x13b/0x290 [ 965.359600][ T5526] ? selinux_file_ioctl+0xb6/0x290 [ 965.359617][ T5526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 965.359630][ T5526] __x64_sys_ioctl+0x18e/0x210 [ 965.359648][ T5526] do_syscall_64+0x115/0x870 [ 965.359664][ T5526] ? clear_bhb_loop+0x70/0xc0 [ 965.359683][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.359699][ T5526] RIP: 0033:0x7f550799e0d9 [ 965.359714][ T5526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.359731][ T5526] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.359750][ T5526] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 965.359762][ T5526] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 965.359774][ T5526] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 965.359786][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.359795][ T5526] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 965.359811][ T5526] [ 965.509012][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 965.513468][ T9] usb 9-1: config 0 has no interface number 0 [ 965.516905][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 965.521344][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 965.526299][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 965.530724][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 965.534170][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 965.537913][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 965.543219][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 965.549516][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.568733][ T9] usb 9-1: config 0 descriptor?? [ 965.571169][ T5511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 965.573902][ T5511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 965.581821][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 965.694467][ T5539] bridge_slave_0: invalid flags given to default FDB implementation [ 965.710277][ T5535] bridge_slave_0: invalid flags given to default FDB implementation [ 965.714857][ T5540] ip_tables: iptables: counters copy to user failed while replacing table [ 965.803064][ T5511] ldusb 9-1:0.55: Write buffer overflow, 2 bytes dropped [ 965.803797][ T5542] FAULT_INJECTION: forcing a failure. [ 965.803797][ T5542] name failslab, interval 1, probability 0, space 0, times 0 [ 965.811511][ T5542] CPU: 3 UID: 0 PID: 5542 Comm: syz.3.10053 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.811539][ T5542] Tainted: [L]=SOFTLOCKUP [ 965.811547][ T5542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 965.811563][ T5542] Call Trace: [ 965.811571][ T5542] [ 965.811580][ T5542] dump_stack_lvl+0x100/0x190 [ 965.811610][ T5542] should_fail_ex.cold+0x5/0xa [ 965.811635][ T5542] should_failslab+0xc2/0x120 [ 965.811662][ T5542] kmem_cache_alloc_noprof+0x91/0x6a0 [ 965.811687][ T5542] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 965.811718][ T5542] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 965.811749][ T5542] mmu_topup_memory_caches+0x25/0x170 [ 965.811779][ T5542] kvm_mmu_load+0xe2/0x2570 [ 965.811806][ T5542] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 965.811828][ T5542] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 965.811849][ T5542] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 965.811869][ T5542] ? __pfx_kvm_mmu_load+0x10/0x10 [ 965.811893][ T5542] ? vmx_load_vmcs01+0x9b/0xe0 [ 965.811914][ T5542] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 965.811949][ T5542] vcpu_run+0x3aaa/0x5de0 [ 965.811988][ T5542] ? __pfx_vcpu_run+0x10/0x10 [ 965.812025][ T5542] ? rcu_is_watching+0x12/0xc0 [ 965.812058][ T5542] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 965.812085][ T5542] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 965.812120][ T5542] kvm_vcpu_ioctl+0x730/0x1700 [ 965.812145][ T5542] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 965.812168][ T5542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.812193][ T5542] ? do_vfs_ioctl+0x226/0x13e0 [ 965.812222][ T5542] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 965.812250][ T5542] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 965.812287][ T5542] ? __fget_files+0x215/0x3d0 [ 965.812307][ T5542] ? hook_file_ioctl_common+0x140/0x440 [ 965.812336][ T5542] ? selinux_file_ioctl+0x13b/0x290 [ 965.812363][ T5542] ? selinux_file_ioctl+0xb6/0x290 [ 965.812393][ T5542] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 965.812416][ T5542] __x64_sys_ioctl+0x18e/0x210 [ 965.812446][ T5542] do_syscall_64+0x115/0x870 [ 965.812471][ T5542] ? clear_bhb_loop+0x70/0xc0 [ 965.812495][ T5542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.812514][ T5542] RIP: 0033:0x7f550799e0d9 [ 965.812532][ T5542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.812550][ T5542] RSP: 002b:00007f5508833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.812574][ T5542] RAX: ffffffffffffffda RBX: 00007f5507c25fa0 RCX: 00007f550799e0d9 [ 965.812587][ T5542] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 965.812598][ T5542] RBP: 00007f5508833090 R08: 0000000000000000 R09: 0000000000000000 [ 965.812609][ T5542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.812620][ T5542] R13: 00007f5507c26038 R14: 00007f5507c25fa0 R15: 00007ffeb06db0b8 [ 965.812647][ T5542] [ 965.938805][ T9] usb 9-1: USB disconnect, device number 74 [ 965.974146][ T9] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 966.017900][ T5553] (syz.4.10055,5553,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 966.021226][ T5553] (syz.4.10055,5553,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 966.024356][ T5553] (syz.4.10055,5553,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 966.028556][ T5553] (syz.4.10055,5553,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 966.094146][ T5557] program syz.6.10058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 966.306606][ T5573] xt_hashlimit: size too large, truncated to 1048576 [ 966.716843][ T5598] openvswitch: netlink: Tunnel attr 99 out of range max 16 [ 966.822859][ T5614] FAULT_INJECTION: forcing a failure. [ 966.822859][ T5614] name failslab, interval 1, probability 0, space 0, times 0 [ 966.836317][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz.0.10075 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.836338][ T5614] Tainted: [L]=SOFTLOCKUP [ 966.836342][ T5614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 966.836349][ T5614] Call Trace: [ 966.836354][ T5614] [ 966.836359][ T5614] dump_stack_lvl+0x100/0x190 [ 966.836378][ T5614] should_fail_ex.cold+0x5/0xa [ 966.836392][ T5614] should_failslab+0xc2/0x120 [ 966.836408][ T5614] kmem_cache_alloc_noprof+0x91/0x6a0 [ 966.836422][ T5614] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 966.836439][ T5614] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 966.836456][ T5614] mmu_topup_memory_caches+0x25/0x170 [ 966.836473][ T5614] kvm_mmu_load+0xe2/0x2570 [ 966.836489][ T5614] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 966.836501][ T5614] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 966.836513][ T5614] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 966.836525][ T5614] ? __pfx_kvm_mmu_load+0x10/0x10 [ 966.836539][ T5614] ? vmx_load_vmcs01+0x9b/0xe0 [ 966.836551][ T5614] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 966.836571][ T5614] vcpu_run+0x3aaa/0x5de0 [ 966.836592][ T5614] ? __pfx_vcpu_run+0x10/0x10 [ 966.836613][ T5614] ? rcu_is_watching+0x12/0xc0 [ 966.836632][ T5614] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 966.836648][ T5614] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 966.836673][ T5614] kvm_vcpu_ioctl+0x730/0x1700 [ 966.836687][ T5614] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 966.836700][ T5614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 966.836718][ T5614] ? do_vfs_ioctl+0x226/0x13e0 [ 966.836735][ T5614] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 966.836752][ T5614] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 966.836773][ T5614] ? __fget_files+0x215/0x3d0 [ 966.836784][ T5614] ? hook_file_ioctl_common+0x140/0x440 [ 966.836801][ T5614] ? selinux_file_ioctl+0x13b/0x290 [ 966.836817][ T5614] ? selinux_file_ioctl+0xb6/0x290 [ 966.836835][ T5614] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 966.836848][ T5614] __x64_sys_ioctl+0x18e/0x210 [ 966.836865][ T5614] do_syscall_64+0x115/0x870 [ 966.836888][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 966.836902][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.836915][ T5614] RIP: 0033:0x7f2fb8b9e0d9 [ 966.836926][ T5614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.836937][ T5614] RSP: 002b:00007f2fb6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.836949][ T5614] RAX: ffffffffffffffda RBX: 00007f2fb8e25fa0 RCX: 00007f2fb8b9e0d9 [ 966.836956][ T5614] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 966.836962][ T5614] RBP: 00007f2fb6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 966.836969][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 966.836975][ T5614] R13: 00007f2fb8e26038 R14: 00007f2fb8e25fa0 R15: 00007ffc523a40b8 [ 966.836989][ T5614] [ 967.323419][ T5634] CIFS: Attempting to mount //127.0.0.1/test [ 967.943554][ T5649] FAULT_INJECTION: forcing a failure. [ 967.943554][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 967.950730][ T5649] CPU: 2 UID: 0 PID: 5649 Comm: syz.0.10085 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.950760][ T5649] Tainted: [L]=SOFTLOCKUP [ 967.950766][ T5649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 967.950777][ T5649] Call Trace: [ 967.950783][ T5649] [ 967.950791][ T5649] dump_stack_lvl+0x100/0x190 [ 967.950820][ T5649] should_fail_ex.cold+0x5/0xa [ 967.950843][ T5649] should_failslab+0xc2/0x120 [ 967.950867][ T5649] kmem_cache_alloc_noprof+0x91/0x6a0 [ 967.950890][ T5649] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 967.950919][ T5649] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 967.950948][ T5649] mmu_topup_memory_caches+0x25/0x170 [ 967.950977][ T5649] kvm_mmu_load+0xe2/0x2570 [ 967.951003][ T5649] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 967.951024][ T5649] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 967.951045][ T5649] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 967.951063][ T5649] ? __pfx_kvm_mmu_load+0x10/0x10 [ 967.951086][ T5649] ? vmx_load_vmcs01+0x9b/0xe0 [ 967.951104][ T5649] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 967.951135][ T5649] vcpu_run+0x3aaa/0x5de0 [ 967.951170][ T5649] ? __pfx_vcpu_run+0x10/0x10 [ 967.951202][ T5649] ? rcu_is_watching+0x12/0xc0 [ 967.951231][ T5649] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 967.951255][ T5649] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 967.951287][ T5649] kvm_vcpu_ioctl+0x730/0x1700 [ 967.951308][ T5649] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 967.951329][ T5649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 967.951353][ T5649] ? do_vfs_ioctl+0x226/0x13e0 [ 967.951380][ T5649] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 967.951407][ T5649] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 967.951443][ T5649] ? __fget_files+0x215/0x3d0 [ 967.951461][ T5649] ? hook_file_ioctl_common+0x140/0x440 [ 967.951489][ T5649] ? selinux_file_ioctl+0x13b/0x290 [ 967.951514][ T5649] ? selinux_file_ioctl+0xb6/0x290 [ 967.951563][ T5649] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 967.951586][ T5649] __x64_sys_ioctl+0x18e/0x210 [ 967.951616][ T5649] do_syscall_64+0x115/0x870 [ 967.951640][ T5649] ? clear_bhb_loop+0x70/0xc0 [ 967.951662][ T5649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.951680][ T5649] RIP: 0033:0x7f2fb8b9e0d9 [ 967.951695][ T5649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.951712][ T5649] RSP: 002b:00007f2fb6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.951729][ T5649] RAX: ffffffffffffffda RBX: 00007f2fb8e25fa0 RCX: 00007f2fb8b9e0d9 [ 967.951741][ T5649] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 967.951752][ T5649] RBP: 00007f2fb6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 967.951762][ T5649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.951772][ T5649] R13: 00007f2fb8e26038 R14: 00007f2fb8e25fa0 R15: 00007ffc523a40b8 [ 967.951797][ T5649] [ 968.071341][ T5634] CIFS: VFS: cifs_mount failed w/return code = -512 [ 968.177903][ T5655] xt_time: unknown flags 0x78 [ 968.323671][ T5658] minix: Unknown parameter 'addr' [ 968.369575][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10090'. [ 968.373674][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10090'. [ 968.377841][ T5663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10090'. [ 968.381770][ T5662] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10090'. [ 968.603296][ T5675] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 968.605364][ T5675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 968.611080][ T5675] vhci_hcd vhci_hcd.0: Device attached [ 968.622786][ T5675] vhci_hcd vhci_hcd.0: port 0 already used [ 968.707852][ T5681] FAULT_INJECTION: forcing a failure. [ 968.707852][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 968.713221][ T5681] CPU: 2 UID: 0 PID: 5681 Comm: syz.4.10095 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.713253][ T5681] Tainted: [L]=SOFTLOCKUP [ 968.713260][ T5681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.713272][ T5681] Call Trace: [ 968.713279][ T5681] [ 968.713288][ T5681] dump_stack_lvl+0x100/0x190 [ 968.713318][ T5681] should_fail_ex.cold+0x5/0xa [ 968.713341][ T5681] should_failslab+0xc2/0x120 [ 968.713367][ T5681] kmem_cache_alloc_noprof+0x91/0x6a0 [ 968.713390][ T5681] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 968.713418][ T5681] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 968.713447][ T5681] mmu_topup_memory_caches+0x25/0x170 [ 968.713476][ T5681] kvm_mmu_load+0xe2/0x2570 [ 968.713499][ T5681] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 968.713520][ T5681] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 968.713541][ T5681] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 968.713566][ T5681] ? __pfx_kvm_mmu_load+0x10/0x10 [ 968.713589][ T5681] ? vmx_load_vmcs01+0x9b/0xe0 [ 968.713608][ T5681] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 968.713642][ T5681] vcpu_run+0x3aaa/0x5de0 [ 968.713680][ T5681] ? __pfx_vcpu_run+0x10/0x10 [ 968.713717][ T5681] ? rcu_is_watching+0x12/0xc0 [ 968.713788][ T5681] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 968.713817][ T5681] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 968.713852][ T5681] kvm_vcpu_ioctl+0x730/0x1700 [ 968.713876][ T5681] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 968.713897][ T5681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 968.713921][ T5681] ? do_vfs_ioctl+0x226/0x13e0 [ 968.713948][ T5681] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 968.713974][ T5681] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 968.714011][ T5681] ? __fget_files+0x215/0x3d0 [ 968.714028][ T5681] ? hook_file_ioctl_common+0x140/0x440 [ 968.714055][ T5681] ? selinux_file_ioctl+0x13b/0x290 [ 968.714080][ T5681] ? selinux_file_ioctl+0xb6/0x290 [ 968.714108][ T5681] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 968.714129][ T5681] __x64_sys_ioctl+0x18e/0x210 [ 968.714159][ T5681] do_syscall_64+0x115/0x870 [ 968.714184][ T5681] ? clear_bhb_loop+0x70/0xc0 [ 968.714208][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.714227][ T5681] RIP: 0033:0x7fedf939e0d9 [ 968.714243][ T5681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.714260][ T5681] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.714281][ T5681] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 968.714292][ T5681] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 968.714303][ T5681] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 968.714315][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.714325][ T5681] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 968.714351][ T5681] [ 968.855650][ T5676] vhci_hcd: connection closed [ 968.863462][ T8938] vhci_hcd vhci_hcd.6: stop threads [ 968.867937][ T8938] vhci_hcd vhci_hcd.6: release socket [ 968.869950][ T8938] vhci_hcd vhci_hcd.6: disconnect device [ 968.934166][ T3600] usb 50-1: enqueue for inactive port 0 [ 969.330887][ T42] kauditd_printk_skb: 365 callbacks suppressed [ 969.330906][ T42] audit: type=1800 audit(2000000308.674:52916): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 969.373764][ T42] audit: type=1400 audit(2000000308.714:52917): avc: denied { mount } for pid=5687 comm="syz.0.10097" name="/" dev="autofs" ino=183809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 969.410271][ T42] audit: type=1800 audit(2000000308.754:52918): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 969.417167][ T42] audit: type=1400 audit(2000000308.754:52919): avc: denied { create } for pid=5689 comm="syz.0.10098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 969.440314][ T42] audit: type=1400 audit(2000000308.784:52920): avc: denied { execmem } for pid=5691 comm="syz.0.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 969.443064][ T3600] usb usb50-port1: attempt power cycle [ 969.464858][ T5692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=5692 comm=syz.0.10099 [ 969.472213][ T42] audit: type=1400 audit(2000000308.814:52921): avc: denied { create } for pid=5691 comm="syz.0.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.489605][ T42] audit: type=1400 audit(2000000308.824:52922): avc: denied { ioctl } for pid=5691 comm="syz.0.10099" path="socket:[185359]" dev="sockfs" ino=185359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.506086][ T42] audit: type=1400 audit(2000000308.854:52923): avc: denied { sys_module } for pid=5691 comm="syz.0.10099" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 969.513031][ T42] audit: type=1400 audit(2000000308.854:52924): avc: denied { module_request } for pid=5691 comm="syz.0.10099" kmod="vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 969.521534][ T42] audit: type=1800 audit(2000000308.854:52925): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 969.541383][ T5697] ip6t_REJECT: ECHOREPLY is not supported [ 969.681231][ T5703] netlink: 'syz.3.10103': attribute type 1 has an invalid length. [ 969.681324][ T5701] netlink: 'syz.6.10102': attribute type 11 has an invalid length. [ 969.719585][ T5703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 969.749064][ T5703] bond5: (slave erspan0): making interface the new active one [ 969.754787][ T5703] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 969.852060][ T5712] FAULT_INJECTION: forcing a failure. [ 969.852060][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 969.871337][ T5712] CPU: 3 UID: 0 PID: 5712 Comm: syz.0.10104 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.871358][ T5712] Tainted: [L]=SOFTLOCKUP [ 969.871362][ T5712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 969.871383][ T5712] Call Trace: [ 969.871388][ T5712] [ 969.871393][ T5712] dump_stack_lvl+0x100/0x190 [ 969.871433][ T5712] should_fail_ex.cold+0x5/0xa [ 969.871448][ T5712] should_failslab+0xc2/0x120 [ 969.871464][ T5712] kmem_cache_alloc_noprof+0x91/0x6a0 [ 969.871479][ T5712] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 969.871496][ T5712] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 969.871514][ T5712] mmu_topup_memory_caches+0x25/0x170 [ 969.871532][ T5712] kvm_mmu_load+0xe2/0x2570 [ 969.871551][ T5712] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 969.871564][ T5712] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 969.871576][ T5712] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 969.871587][ T5712] ? __pfx_kvm_mmu_load+0x10/0x10 [ 969.871602][ T5712] ? vmx_load_vmcs01+0x9b/0xe0 [ 969.871613][ T5712] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 969.871633][ T5712] vcpu_run+0x3aaa/0x5de0 [ 969.871655][ T5712] ? __pfx_vcpu_run+0x10/0x10 [ 969.871676][ T5712] ? rcu_is_watching+0x12/0xc0 [ 969.871695][ T5712] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 969.871711][ T5712] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 969.871732][ T5712] kvm_vcpu_ioctl+0x730/0x1700 [ 969.871746][ T5712] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 969.871759][ T5712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 969.871774][ T5712] ? do_vfs_ioctl+0x226/0x13e0 [ 969.871790][ T5712] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 969.871806][ T5712] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 969.871828][ T5712] ? __fget_files+0x215/0x3d0 [ 969.871840][ T5712] ? hook_file_ioctl_common+0x140/0x440 [ 969.871856][ T5712] ? selinux_file_ioctl+0x13b/0x290 [ 969.871872][ T5712] ? selinux_file_ioctl+0xb6/0x290 [ 969.871889][ T5712] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 969.871903][ T5712] __x64_sys_ioctl+0x18e/0x210 [ 969.871920][ T5712] do_syscall_64+0x115/0x870 [ 969.871935][ T5712] ? clear_bhb_loop+0x70/0xc0 [ 969.871948][ T5712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.871959][ T5712] RIP: 0033:0x7f2fb8b9e0d9 [ 969.871970][ T5712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.871980][ T5712] RSP: 002b:00007f2fb6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.871992][ T5712] RAX: ffffffffffffffda RBX: 00007f2fb8e25fa0 RCX: 00007f2fb8b9e0d9 [ 969.871999][ T5712] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 969.872005][ T5712] RBP: 00007f2fb6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.872012][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.872018][ T5712] R13: 00007f2fb8e26038 R14: 00007f2fb8e25fa0 R15: 00007ffc523a40b8 [ 969.872033][ T5712] [ 970.036297][ T3600] usb usb50-port1: unable to enumerate USB device [ 970.072591][ T5721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2037604981 (4075209962 ns) > initial count (1536 ns). Using initial count to start timer. [ 970.258002][ T5736] veth1_macvtap: left promiscuous mode [ 970.604709][T24902] usb 11-1: new low-speed USB device number 85 using dummy_hcd [ 970.633730][ T5440] veth1_macvtap: entered promiscuous mode [ 970.757182][T24902] usb 11-1: unable to get BOS descriptor or descriptor too short [ 970.760963][T24902] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 970.766721][T24902] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 970.775756][T24902] usb 11-1: string descriptor 0 read error: -22 [ 970.778396][T24902] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 970.781458][T24902] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.790799][ T5747] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 970.794270][ T5747] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 970.799554][T24902] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 970.898647][ T5773] IPVS: length: 21 != 8 [ 970.966659][ T5779] 9pnet_virtio: no channels available for device syz [ 971.036600][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.048442][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.106734][ T9] usb 11-1: USB disconnect, device number 85 [ 971.430364][ T5807] FAULT_INJECTION: forcing a failure. [ 971.430364][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 971.439390][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz.4.10128 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.439420][ T5807] Tainted: [L]=SOFTLOCKUP [ 971.439438][ T5807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 971.439448][ T5807] Call Trace: [ 971.439455][ T5807] [ 971.439463][ T5807] dump_stack_lvl+0x100/0x190 [ 971.439501][ T5807] should_fail_ex.cold+0x5/0xa [ 971.439523][ T5807] should_failslab+0xc2/0x120 [ 971.439546][ T5807] kmem_cache_alloc_noprof+0x91/0x6a0 [ 971.439570][ T5807] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 971.439597][ T5807] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 971.439624][ T5807] mmu_topup_memory_caches+0x25/0x170 [ 971.439650][ T5807] kvm_mmu_load+0xe2/0x2570 [ 971.439673][ T5807] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 971.439693][ T5807] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 971.439712][ T5807] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 971.439730][ T5807] ? __pfx_kvm_mmu_load+0x10/0x10 [ 971.439751][ T5807] ? vmx_load_vmcs01+0x9b/0xe0 [ 971.439769][ T5807] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 971.439800][ T5807] vcpu_run+0x3aaa/0x5de0 [ 971.439834][ T5807] ? __pfx_vcpu_run+0x10/0x10 [ 971.439865][ T5807] ? rcu_is_watching+0x12/0xc0 [ 971.439895][ T5807] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 971.439919][ T5807] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 971.439950][ T5807] kvm_vcpu_ioctl+0x730/0x1700 [ 971.439977][ T5807] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 971.439998][ T5807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 971.440021][ T5807] ? do_vfs_ioctl+0x226/0x13e0 [ 971.440048][ T5807] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 971.440075][ T5807] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 971.440110][ T5807] ? __fget_files+0x215/0x3d0 [ 971.440130][ T5807] ? hook_file_ioctl_common+0x140/0x440 [ 971.440159][ T5807] ? selinux_file_ioctl+0x13b/0x290 [ 971.440185][ T5807] ? selinux_file_ioctl+0xb6/0x290 [ 971.440213][ T5807] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 971.440236][ T5807] __x64_sys_ioctl+0x18e/0x210 [ 971.440263][ T5807] do_syscall_64+0x115/0x870 [ 971.440326][ T5807] ? clear_bhb_loop+0x70/0xc0 [ 971.440347][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.440363][ T5807] RIP: 0033:0x7fedf939e0d9 [ 971.440380][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.440397][ T5807] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.440425][ T5807] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 971.440436][ T5807] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 971.440444][ T5807] RBP: 00007fedfa1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 971.440453][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 971.440462][ T5807] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 971.440485][ T5807] [ 971.607728][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10130'. [ 971.804437][ T5822] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10131'. [ 971.852377][ T5929] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 971.923831][ T5830] Console: switching to colour dummy device 80x25 [ 972.037725][ T5929] usb 11-1: config 0 has no interfaces? [ 972.040440][ T5929] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 972.047381][ T5929] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.062601][ T5929] usb 11-1: config 0 descriptor?? [ 972.243270][ T5830] ============================================================================= [ 972.249599][ T5830] [ 972.249611][ T5830] ====================================================== [ 972.249631][ T5830] WARNING: possible circular locking dependency detected [ 972.249660][ T5830] syzkaller #0 Tainted: G L [ 972.249672][ T5830] ------------------------------------------------------ [ 972.249680][ T5830] syz.4.10133/5830 is trying to acquire lock: [ 972.249693][ T5830] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 972.249867][ T5830] [ 972.249867][ T5830] but task is already holding lock: [ 972.249876][ T5830] ffff8880228e8498 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 972.249936][ T5830] [ 972.249936][ T5830] which lock already depends on the new lock. [ 972.249936][ T5830] [ 972.249944][ T5830] [ 972.249944][ T5830] the existing dependency chain (in reverse order) is: [ 972.249958][ T5830] [ 972.249958][ T5830] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 972.250008][ T5830] lock_acquire+0x1b9/0x370 [ 972.250034][ T5830] _raw_spin_lock_irqsave+0x3a/0x60 [ 972.250122][ T5830] __refill_objects_node+0x120/0xaa0 [ 972.250144][ T5830] refill_objects+0x58/0x410 [ 972.250171][ T5830] __pcs_replace_empty_main+0x376/0x680 [ 972.250190][ T5830] __kmalloc_noprof+0x66d/0x820 [ 972.250219][ T5830] tty_buffer_alloc+0x29f/0x320 [ 972.250273][ T5830] __tty_buffer_request_room+0x129/0x2c0 [ 972.250297][ T5830] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 972.250328][ T5830] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 972.250360][ T5830] pty_write+0xd2/0x100 [ 972.250387][ T5830] hci_uart_write_work+0x1e8/0x900 [ 972.250446][ T5830] process_one_work+0xa23/0x1940 [ 972.250465][ T5830] worker_thread+0x5ef/0xe50 [ 972.250493][ T5830] kthread+0x370/0x450 [ 972.250511][ T5830] ret_from_fork+0x72b/0xd50 [ 972.250535][ T5830] ret_from_fork_asm+0x1a/0x30 [ 972.250573][ T5830] [ 972.250573][ T5830] -> #2 (&port->lock#2){-...}-{3:3}: [ 972.250635][ T5830] lock_acquire+0x1b9/0x370 [ 972.250661][ T5830] _raw_spin_lock_irqsave+0x3a/0x60 [ 972.250689][ T5830] tty_port_tty_get+0x21/0x100 [ 972.250712][ T5830] tty_port_default_wakeup+0x15/0x60 [ 972.250744][ T5830] serial8250_tx_chars+0x68f/0x860 [ 972.250769][ T5830] serial8250_handle_irq_locked+0x770/0x9a0 [ 972.250801][ T5830] serial8250_handle_irq.part.0+0xb4/0x530 [ 972.250827][ T5830] serial8250_default_handle_irq+0xc2/0x280 [ 972.250859][ T5830] serial8250_interrupt+0xf8/0x1b0 [ 972.250897][ T5830] __handle_irq_event_percpu+0x232/0x880 [ 972.250930][ T5830] handle_irq_event+0xab/0x1e0 [ 972.250966][ T5830] handle_edge_irq+0x34c/0x950 [ 972.251008][ T5830] __common_interrupt+0xd8/0x2f0 [ 972.251034][ T5830] common_interrupt+0xb9/0xe0 [ 972.251059][ T5830] asm_common_interrupt+0x26/0x40 [ 972.251078][ T5830] _raw_spin_unlock_irqrestore+0x31/0x80 [ 972.251108][ T5830] uart_write+0x29d/0xb20 [ 972.251129][ T5830] n_tty_write+0x431/0x1160 [ 972.251162][ T5830] file_tty_write.isra.0+0x4d2/0x890 [ 972.251184][ T5830] redirected_tty_write+0xd4/0x120 [ 972.251214][ T5830] vfs_write+0x6ac/0x1050 [ 972.251230][ T5830] ksys_write+0x12a/0x250 [ 972.251246][ T5830] do_syscall_64+0x115/0x870 [ 972.251277][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.251292][ T5830] [ 972.251292][ T5830] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 972.251345][ T5830] lock_acquire+0x1b9/0x370 [ 972.251370][ T5830] _raw_spin_lock_irqsave+0x3a/0x60 [ 972.251398][ T5830] serial8250_console_write+0x177/0x1a50 [ 972.251424][ T5830] console_flush_one_record+0x790/0xe50 [ 972.251461][ T5830] console_unlock+0x103/0x260 [ 972.251494][ T5830] vprintk_emit+0x407/0x6b0 [ 972.251510][ T5830] _printk+0xcf/0x110 [ 972.251536][ T5830] register_console.cold+0xc0/0x248 [ 972.251592][ T5830] univ8250_console_init+0x6f/0x80 [ 972.251659][ T5830] console_init+0x3d5/0x5b0 [ 972.251696][ T5830] start_kernel+0x314/0x490 [ 972.251727][ T5830] x86_64_start_reservations+0x24/0x30 [ 972.251767][ T5830] x86_64_start_kernel+0x12b/0x130 [ 972.251805][ T5830] common_startup_64+0x13e/0x158 [ 972.251825][ T5830] [ 972.251825][ T5830] -> #0 (console_owner){-.-.}-{0:0}: [ 972.251858][ T5830] check_prev_add+0xeb/0xe60 [ 972.251879][ T5830] __lock_acquire+0x136c/0x1a40 [ 972.251910][ T5830] lock_acquire+0x1b9/0x370 [ 972.251933][ T5830] console_lock_spinning_enable+0x72/0x80 [ 972.251973][ T5830] console_flush_one_record+0x739/0xe50 [ 972.252016][ T5830] console_unlock+0x103/0x260 [ 972.252042][ T5830] vprintk_emit+0x407/0x6b0 [ 972.252068][ T5830] _printk+0xcf/0x110 [ 972.252086][ T5830] __slab_bug+0x4f/0xb0 [ 972.252105][ T5830] slab_bug+0x5d/0x80 [ 972.252132][ T5830] __kmem_cache_shutdown.cold+0x39/0x177 [ 972.252156][ T5830] kmem_cache_destroy+0x73/0x190 [ 972.252180][ T5830] virtio_gpu_free_vbufs+0x38/0x80 [ 972.252212][ T5830] virtio_gpu_release+0x5c/0x1c0 [ 972.252244][ T5830] drm_dev_put.part.0+0xbd/0x140 [ 972.252268][ T5830] drm_dev_put+0x1f/0x30 [ 972.252295][ T5830] virtio_dev_remove+0xb8/0x170 [ 972.252318][ T5830] device_remove+0xcb/0x180 [ 972.252346][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.252372][ T5830] bus_remove_device+0x2bc/0x560 [ 972.252400][ T5830] device_del+0x376/0x9b0 [ 972.252420][ T5830] device_unregister+0x1d/0xe0 [ 972.252451][ T5830] unregister_virtio_device+0x39/0x60 [ 972.252475][ T5830] virtio_pci_remove+0x7c/0x110 [ 972.252504][ T5830] pci_device_remove+0xb2/0x1d0 [ 972.252521][ T5830] device_remove+0xcb/0x180 [ 972.252542][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.252574][ T5830] pci_stop_bus_device+0x120/0x160 [ 972.252598][ T5830] pci_stop_and_remove_bus_device+0x58/0xa0 [ 972.252627][ T5830] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 972.252660][ T5830] remove_store+0x123/0x140 [ 972.252687][ T5830] dev_attr_store+0x58/0x80 [ 972.252718][ T5830] sysfs_kf_write+0xf2/0x150 [ 972.252736][ T5830] kernfs_fop_write_iter+0x3e0/0x5f0 [ 972.252769][ T5830] vfs_write+0x6ac/0x1050 [ 972.252787][ T5830] ksys_write+0x12a/0x250 [ 972.252802][ T5830] do_syscall_64+0x115/0x870 [ 972.252836][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.252855][ T5830] [ 972.252855][ T5830] other info that might help us debug this: [ 972.252855][ T5830] [ 972.252861][ T5830] Chain exists of: [ 972.252861][ T5830] console_owner --> &port->lock#2 --> &n->list_lock [ 972.252861][ T5830] [ 972.252903][ T5830] Possible unsafe locking scenario: [ 972.252903][ T5830] [ 972.252909][ T5830] CPU0 CPU1 [ 972.252916][ T5830] ---- ---- [ 972.252923][ T5830] lock(&n->list_lock); [ 972.252935][ T5830] lock(&port->lock#2); [ 972.252964][ T5830] lock(&n->list_lock); [ 972.252983][ T5830] lock(console_owner); [ 972.252998][ T5830] [ 972.252998][ T5830] *** DEADLOCK *** [ 972.252998][ T5830] [ 972.253004][ T5830] 11 locks held by syz.4.10133/5830: [ 972.253023][ T5830] #0: ffff88802b199970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 972.253081][ T5830] #1: ffff88802630a450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 972.253128][ T5830] #2: ffff8880352af080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 972.253201][ T5830] #3: ffffffff8f86bf20 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 972.253259][ T5830] #4: ffff8880134741f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 972.253323][ T5830] #5: ffff888045add1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 972.253387][ T5830] #6: ffffffff8ea7a230 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 972.253436][ T5830] #7: ffffffff8ed88380 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 972.253478][ T5830] #8: ffff8880228e8498 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 972.253545][ T5830] #9: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 972.253598][ T5830] #10: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 972.253665][ T5830] [ 972.253665][ T5830] stack backtrace: [ 972.253702][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.4.10133 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.253758][ T5830] Tainted: [L]=SOFTLOCKUP [ 972.253766][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 972.253787][ T5830] Call Trace: [ 972.253794][ T5830] [ 972.253804][ T5830] dump_stack_lvl+0x100/0x190 [ 972.253831][ T5830] print_circular_bug.cold+0x178/0x1c7 [ 972.253873][ T5830] check_noncircular+0x146/0x160 [ 972.253909][ T5830] check_prev_add+0xeb/0xe60 [ 972.253935][ T5830] __lock_acquire+0x136c/0x1a40 [ 972.253979][ T5830] lock_acquire+0x1b9/0x370 [ 972.254004][ T5830] ? console_lock_spinning_enable+0x61/0x80 [ 972.254047][ T5830] ? console_lock_spinning_enable+0x4a/0x80 [ 972.254087][ T5830] console_lock_spinning_enable+0x72/0x80 [ 972.254118][ T5830] ? console_lock_spinning_enable+0x61/0x80 [ 972.254154][ T5830] console_flush_one_record+0x739/0xe50 [ 972.254194][ T5830] ? __pfx_console_flush_one_record+0x10/0x10 [ 972.254236][ T5830] ? is_printk_cpu_sync_owner+0x32/0x40 [ 972.254260][ T5830] console_unlock+0x103/0x260 [ 972.254304][ T5830] ? __pfx_console_unlock+0x10/0x10 [ 972.254345][ T5830] ? do_raw_spin_unlock+0x145/0x1e0 [ 972.254375][ T5830] ? _printk+0xcf/0x110 [ 972.254402][ T5830] vprintk_emit+0x407/0x6b0 [ 972.254423][ T5830] ? __pfx_vprintk_emit+0x10/0x10 [ 972.254447][ T5830] _printk+0xcf/0x110 [ 972.254473][ T5830] ? __pfx__printk+0x10/0x10 [ 972.254498][ T5830] __slab_bug+0x4f/0xb0 [ 972.254526][ T5830] slab_bug+0x5d/0x80 [ 972.254546][ T5830] __kmem_cache_shutdown.cold+0x39/0x177 [ 972.254581][ T5830] kmem_cache_destroy+0x73/0x190 [ 972.254603][ T5830] virtio_gpu_free_vbufs+0x38/0x80 [ 972.254640][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.254667][ T5830] virtio_gpu_release+0x5c/0x1c0 [ 972.254705][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.254734][ T5830] drm_dev_put.part.0+0xbd/0x140 [ 972.254767][ T5830] drm_dev_put+0x1f/0x30 [ 972.254789][ T5830] virtio_dev_remove+0xb8/0x170 [ 972.254820][ T5830] ? __pfx_virtio_dev_remove+0x10/0x10 [ 972.254845][ T5830] device_remove+0xcb/0x180 [ 972.254875][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.254908][ T5830] bus_remove_device+0x2bc/0x560 [ 972.254934][ T5830] ? __pfx_bus_remove_device+0x10/0x10 [ 972.254962][ T5830] ? __pfx_device_remove_attrs+0x10/0x10 [ 972.254994][ T5830] device_del+0x376/0x9b0 [ 972.255028][ T5830] ? __pfx_device_del+0x10/0x10 [ 972.255056][ T5830] ? __pfx___might_resched+0x10/0x10 [ 972.255090][ T5830] ? __pfx_pci_device_is_present+0x10/0x10 [ 972.255118][ T5830] device_unregister+0x1d/0xe0 [ 972.255149][ T5830] unregister_virtio_device+0x39/0x60 [ 972.255176][ T5830] virtio_pci_remove+0x7c/0x110 [ 972.255206][ T5830] pci_device_remove+0xb2/0x1d0 [ 972.255225][ T5830] ? __pfx_pci_device_remove+0x10/0x10 [ 972.255242][ T5830] device_remove+0xcb/0x180 [ 972.255274][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.255313][ T5830] pci_stop_bus_device+0x120/0x160 [ 972.255334][ T5830] pci_stop_and_remove_bus_device+0x58/0xa0 [ 972.255358][ T5830] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 972.255380][ T5830] remove_store+0x123/0x140 [ 972.255403][ T5830] ? __pfx_remove_store+0x10/0x10 [ 972.255426][ T5830] ? find_held_lock+0x2b/0x80 [ 972.255443][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 972.255472][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 972.255500][ T5830] ? __pfx_remove_store+0x10/0x10 [ 972.255522][ T5830] dev_attr_store+0x58/0x80 [ 972.255548][ T5830] ? __pfx_dev_attr_store+0x10/0x10 [ 972.255573][ T5830] sysfs_kf_write+0xf2/0x150 [ 972.255590][ T5830] kernfs_fop_write_iter+0x3e0/0x5f0 [ 972.255616][ T5830] ? __pfx_sysfs_kf_write+0x10/0x10 [ 972.255635][ T5830] vfs_write+0x6ac/0x1050 [ 972.255652][ T5830] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 972.255678][ T5830] ? __pfx_vfs_write+0x10/0x10 [ 972.255701][ T5830] ksys_write+0x12a/0x250 [ 972.255718][ T5830] ? __pfx_ksys_write+0x10/0x10 [ 972.255738][ T5830] do_syscall_64+0x115/0x870 [ 972.255763][ T5830] ? clear_bhb_loop+0x70/0xc0 [ 972.255785][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.255804][ T5830] RIP: 0033:0x7fedf939e0d9 [ 972.255821][ T5830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.255840][ T5830] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 972.255868][ T5830] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 972.255881][ T5830] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 972.255893][ T5830] RBP: 00007fedf9435024 R08: 0000000000000000 R09: 0000000000000000 [ 972.255904][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.255914][ T5830] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 972.255930][ T5830] [ 972.385382][T24902] usb 11-1: USB disconnect, device number 86 [ 972.386015][ T5830] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 972.717111][ T5830] ----------------------------------------------------------------------------- [ 972.717111][ T5830] [ 972.720684][ T5830] Object 0xffff888060c7b3b0 @offset=5040 [ 972.722530][ T5830] Object 0xffff888060c7b4c8 @offset=5320 [ 972.724358][ T5830] Object 0xffff888060c7b5e0 @offset=5600 [ 972.726159][ T5830] Object 0xffff888060c7b6f8 @offset=5880 [ 972.727978][ T5830] Object 0xffff888060c7b810 @offset=6160 [ 972.729875][ T5830] Object 0xffff888060c7b928 @offset=6440 [ 972.731675][ T5830] Slab 0xffffea0001831e80 objects=29 used=6 fp=0xffff888060c7a000 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 972.735994][ T5830] ------------[ cut here ]------------ [ 972.737531][ T5830] 1 [ 972.737538][ T5830] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.4.10133/5830 [ 972.741223][ T5830] Modules linked in: [ 972.742483][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.4.10133 Tainted: G B L syzkaller #0 PREEMPT(full) [ 972.745880][ T5830] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 972.747614][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 972.750889][ T5830] RIP: 0010:__slab_err+0x15/0x20 [ 972.752472][ T5830] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 972.758521][ T5830] RSP: 0018:ffffc90003e77738 EFLAGS: 00010046 [ 972.760501][ T5830] RAX: 0000000000080000 RBX: ffffc90003e77788 RCX: ffffc90009a01000 [ 972.762988][ T5830] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802c51a540 [ 972.765441][ T5830] RBP: ffff8880228e8498 R08: 0000000000000007 R09: 0000000000000000 [ 972.767928][ T5830] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 972.770434][ T5830] R13: ffff888060c7bfb8 R14: ffff8880228e8480 R15: ffffea0001831e80 [ 972.772932][ T5830] FS: 00007fedfa1ab6c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 972.775797][ T5830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.777962][ T5830] CR2: 00007fedfa1aaff8 CR3: 000000004cbe6000 CR4: 0000000000352ef0 [ 972.780580][ T5830] Call Trace: [ 972.781697][ T5830] [ 972.782718][ T5830] __kmem_cache_shutdown.cold+0x16e/0x177 [ 972.784597][ T5830] kmem_cache_destroy+0x73/0x190 [ 972.786209][ T5830] virtio_gpu_free_vbufs+0x38/0x80 [ 972.787924][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.789819][ T5830] virtio_gpu_release+0x5c/0x1c0 [ 972.791481][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.793221][ T5830] drm_dev_put.part.0+0xbd/0x140 [ 972.794867][ T5830] drm_dev_put+0x1f/0x30 [ 972.796248][ T5830] virtio_dev_remove+0xb8/0x170 [ 972.797881][ T5830] ? __pfx_virtio_dev_remove+0x10/0x10 [ 972.799727][ T5830] device_remove+0xcb/0x180 [ 972.801325][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.803249][ T5830] bus_remove_device+0x2bc/0x560 [ 972.804828][ T5830] ? __pfx_bus_remove_device+0x10/0x10 [ 972.806522][ T5830] ? __pfx_device_remove_attrs+0x10/0x10 [ 972.808330][ T5830] device_del+0x376/0x9b0 [ 972.809741][ T5830] ? __pfx_device_del+0x10/0x10 [ 972.811409][ T5830] ? __pfx___might_resched+0x10/0x10 [ 972.813141][ T5830] ? __pfx_pci_device_is_present+0x10/0x10 [ 972.814987][ T5830] device_unregister+0x1d/0xe0 [ 972.816517][ T5830] unregister_virtio_device+0x39/0x60 [ 972.818224][ T5830] virtio_pci_remove+0x7c/0x110 [ 972.819837][ T5830] pci_device_remove+0xb2/0x1d0 [ 972.821382][ T5830] ? __pfx_pci_device_remove+0x10/0x10 [ 972.823094][ T5830] device_remove+0xcb/0x180 [ 972.824553][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.826463][ T5830] pci_stop_bus_device+0x120/0x160 [ 972.828073][ T5830] pci_stop_and_remove_bus_device+0x58/0xa0 [ 972.830011][ T5830] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 972.832057][ T5830] remove_store+0x123/0x140 [ 972.833502][ T5830] ? __pfx_remove_store+0x10/0x10 [ 972.835086][ T5830] ? find_held_lock+0x2b/0x80 [ 972.836599][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 972.838154][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 972.839726][ T5830] ? __pfx_remove_store+0x10/0x10 [ 972.841308][ T5830] dev_attr_store+0x58/0x80 [ 972.842759][ T5830] ? __pfx_dev_attr_store+0x10/0x10 [ 972.844408][ T5830] sysfs_kf_write+0xf2/0x150 [ 972.845874][ T5830] kernfs_fop_write_iter+0x3e0/0x5f0 [ 972.847564][ T5830] ? __pfx_sysfs_kf_write+0x10/0x10 [ 972.849223][ T5830] vfs_write+0x6ac/0x1050 [ 972.850781][ T5830] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 972.852695][ T5830] ? __pfx_vfs_write+0x10/0x10 [ 972.854238][ T5830] ksys_write+0x12a/0x250 [ 972.855617][ T5830] ? __pfx_ksys_write+0x10/0x10 [ 972.857139][ T5830] do_syscall_64+0x115/0x870 [ 972.858613][ T5830] ? clear_bhb_loop+0x70/0xc0 [ 972.860190][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.862439][ T5830] RIP: 0033:0x7fedf939e0d9 [ 972.864251][ T5830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.872070][ T5830] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 972.875539][ T5830] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 972.878819][ T5830] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 972.882105][ T5830] RBP: 00007fedf9435024 R08: 0000000000000000 R09: 0000000000000000 [ 972.885364][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.888528][ T5830] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 972.891725][ T5830] [ 972.892834][ T5830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 972.895040][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.4.10133 Tainted: G B L syzkaller #0 PREEMPT(full) [ 972.898214][ T5830] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 972.900054][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 972.903056][ T5830] Call Trace: [ 972.904115][ T5830] [ 972.905036][ T5830] dump_stack_lvl+0x100/0x190 [ 972.906518][ T5830] vpanic+0x552/0x970 [ 972.907776][ T5830] ? __pfx_vpanic+0x10/0x10 [ 972.909154][ T5830] ? lock_release+0x24d/0x310 [ 972.910669][ T5830] panic+0xd1/0xe0 [ 972.911844][ T5830] ? __pfx_panic+0x10/0x10 [ 972.913309][ T5830] check_panic_on_warn.cold+0x19/0x34 [ 972.914984][ T5830] ? __slab_err+0x15/0x20 [ 972.916396][ T5830] __warn.cold+0x191/0x318 [ 972.917865][ T5830] __report_bug+0x30f/0x440 [ 972.919290][ T5830] ? __slab_err+0x15/0x20 [ 972.920695][ T5830] ? __pfx___report_bug+0x10/0x10 [ 972.922220][ T5830] ? irq_work_queue+0xce/0x100 [ 972.923548][ T5830] ? __wake_up_klogd+0xe2/0x140 [ 972.925146][ T5830] ? vprintk_emit+0x1c9/0x6b0 [ 972.926906][ T5830] ? __pfx_vprintk_emit+0x10/0x10 [ 972.928504][ T5830] ? __slab_err+0x15/0x20 [ 972.929954][ T5830] report_bug+0xb2/0x220 [ 972.931475][ T5830] ? __slab_err+0x15/0x20 [ 972.932770][ T5830] handle_bug+0x16a/0x2a0 [ 972.934062][ T5830] exc_invalid_op+0x17/0x50 [ 972.935445][ T5830] asm_exc_invalid_op+0x1a/0x20 [ 972.936910][ T5830] RIP: 0010:__slab_err+0x15/0x20 [ 972.938424][ T5830] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 972.944268][ T5830] RSP: 0018:ffffc90003e77738 EFLAGS: 00010046 [ 972.946131][ T5830] RAX: 0000000000080000 RBX: ffffc90003e77788 RCX: ffffc90009a01000 [ 972.948552][ T5830] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802c51a540 [ 972.950999][ T5830] RBP: ffff8880228e8498 R08: 0000000000000007 R09: 0000000000000000 [ 972.953350][ T5830] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 972.955727][ T5830] R13: ffff888060c7bfb8 R14: ffff8880228e8480 R15: ffffea0001831e80 [ 972.958150][ T5830] ? add_taint+0x6d/0xb0 [ 972.959508][ T5830] ? __slab_err+0x14/0x20 [ 972.961111][ T5830] __kmem_cache_shutdown.cold+0x16e/0x177 [ 972.962894][ T5830] kmem_cache_destroy+0x73/0x190 [ 972.964487][ T5830] virtio_gpu_free_vbufs+0x38/0x80 [ 972.966404][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.968410][ T5830] virtio_gpu_release+0x5c/0x1c0 [ 972.970239][ T5830] ? __pfx_virtio_gpu_release+0x10/0x10 [ 972.971979][ T5830] drm_dev_put.part.0+0xbd/0x140 [ 972.973474][ T5830] drm_dev_put+0x1f/0x30 [ 972.974774][ T5830] virtio_dev_remove+0xb8/0x170 [ 972.976276][ T5830] ? __pfx_virtio_dev_remove+0x10/0x10 [ 972.977921][ T5830] device_remove+0xcb/0x180 [ 972.979348][ T5830] device_release_driver_internal+0x44e/0x620 [ 972.981208][ T5830] bus_remove_device+0x2bc/0x560 [ 972.982754][ T5830] ? __pfx_bus_remove_device+0x10/0x10 [ 972.984409][ T5830] ? __pfx_device_remove_attrs+0x10/0x10 [ 972.986140][ T5830] device_del+0x376/0x9b0 [ 972.987513][ T5830] ? __pfx_device_del+0x10/0x10 [ 972.989056][ T5830] ? __pfx___might_resched+0x10/0x10 [ 972.990758][ T5830] ? __pfx_pci_device_is_present+0x10/0x10 [ 972.992611][ T5830] device_unregister+0x1d/0xe0 [ 972.994059][ T5830] unregister_virtio_device+0x39/0x60 [ 972.995738][ T5830] virtio_pci_remove+0x7c/0x110 [ 972.997273][ T5830] pci_device_remove+0xb2/0x1d0 [ 972.998803][ T5830] ? __pfx_pci_device_remove+0x10/0x10 [ 973.000509][ T5830] device_remove+0xcb/0x180 [ 973.001928][ T5830] device_release_driver_internal+0x44e/0x620 [ 973.003849][ T5830] pci_stop_bus_device+0x120/0x160 [ 973.005495][ T5830] pci_stop_and_remove_bus_device+0x58/0xa0 [ 973.007368][ T5830] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 973.009426][ T5830] remove_store+0x123/0x140 [ 973.010872][ T5830] ? __pfx_remove_store+0x10/0x10 [ 973.012456][ T5830] ? find_held_lock+0x2b/0x80 [ 973.013956][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 973.015522][ T5830] ? sysfs_file_kobj+0xe4/0x290 [ 973.017066][ T5830] ? __pfx_remove_store+0x10/0x10 [ 973.018712][ T5830] dev_attr_store+0x58/0x80 [ 973.020162][ T5830] ? __pfx_dev_attr_store+0x10/0x10 [ 973.021850][ T5830] sysfs_kf_write+0xf2/0x150 [ 973.023324][ T5830] kernfs_fop_write_iter+0x3e0/0x5f0 [ 973.025009][ T5830] ? __pfx_sysfs_kf_write+0x10/0x10 [ 973.026698][ T5830] vfs_write+0x6ac/0x1050 [ 973.028090][ T5830] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 973.029949][ T5830] ? __pfx_vfs_write+0x10/0x10 [ 973.031500][ T5830] ksys_write+0x12a/0x250 [ 973.032955][ T5830] ? __pfx_ksys_write+0x10/0x10 [ 973.034512][ T5830] do_syscall_64+0x115/0x870 [ 973.035974][ T5830] ? clear_bhb_loop+0x70/0xc0 [ 973.037438][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.039248][ T5830] RIP: 0033:0x7fedf939e0d9 [ 973.040657][ T5830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.046440][ T5830] RSP: 002b:00007fedfa1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 973.049059][ T5830] RAX: ffffffffffffffda RBX: 00007fedf9625fa0 RCX: 00007fedf939e0d9 [ 973.051525][ T5830] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 973.053974][ T5830] RBP: 00007fedf9435024 R08: 0000000000000000 R09: 0000000000000000 [ 973.056379][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.058868][ T5830] R13: 00007fedf9626038 R14: 00007fedf9625fa0 R15: 00007fff6b9c51e8 [ 973.061358][ T5830] [ 973.062976][ T5830] Kernel Offset: disabled [ 973.064369][ T5830] Rebooting in 86400 seconds..