last executing test programs: 5.201423112s ago: executing program 1 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) futex(0x0, 0x2be3af8e5767ffc5, 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg$inet(r3, &(0x7f0000008980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x2f, 0x3, 0x1}]}}}], 0x18}}], 0x1, 0x20004880) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000800) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 3.59220858s ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (fail_nth: 7) 3.590971336s ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110001"], 0x70}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.473429906s ago: executing program 1 (id=492): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x76abd359fcda165c, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xf5ff, 0xff03, 0xfffffffffffffe68, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x83) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000f529f8d7e702652897f97ee8e014eb8c000000360684b9800afd3fc99417560eaa8c26c5c21b3e71eeac5b1142c1027994def9d6d7321d2b1c7ea5c5ad6e6b305c8d522bbef6e623f13d60cfc6", @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf256f00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r8, 0x0, {0x0, 0xee}, 0xff}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) write(r1, &(0x7f00000001c0)="b611d18741b9dc4052e76f63c377d67801e1d9cd43c00814b2", 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r10 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r10, &(0x7f0000000640)=[{&(0x7f0000000780)="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", 0xff0}, {&(0x7f0000001780)="40f68b310a15dc6d31a73735425255a352", 0x11}], 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r11, &(0x7f0000000100)='maxtcpc 0', 0x9) ioctl$sock_bt_hci(r9, 0x800448f0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r12, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000017c0)=ANY=[@ANYBLOB="5c2e0000110010002abd7000fbdbdf252b000000216b0f44d1cee52334a925bb02b71533fcb421d5992ba8009cbfbe305775b387cb8e73a18dcdac884c5cd632df5ce8e8db2aec3c09f18fdd097859b225928192619931bd6a3dae430cc57298b38f24ea45f54093af28fc62229470a1f602a35aee56e9b4dc8a1d86446823ad5c6c17bfcfc30969abf675a60e3e81f72a9be236fd7f0e45d9b6bf78a7630f4a07a6e2e0b02dc680f90010003920b24219f84bbc942a09fc92abbb0f7c3ab21962f9a914c31136514c92d11a2403caf9d0a4982c4d667de38bc42ef8b307a9b26bcec09d6da7fd7217ed252ee300161fc8e9cdda864e7f8fd714ecbb5b17115ef9c2402262ba5ac1e952ee20b120111ebd622079ad64404d9e3b0614ca68166c3c4ebad040435738c01f8f3a56ab748f4d86d9993cec379778465a8f242da05ecaa60498fa6013a5fd2eb9115bc562af402f01873cc27b55ef74e1c8e8569a9b8820c203a3b1d8eeaf2506eb40d77dff2b46b4e41c5a3e4445bb0cfeb63974065adc29cf7ff7f8fada9e8ce2ad1fc0fc7e93d302dc0d75774c75cb78c0fe04b482000000ae2c7980e9053786ee29f6ea49f5af565870da4dbb53030f6afaa6fce22877e1dc8af36a567584a2c5e9f39c5d77c402b928311a7f8898bec2a0a9836df610774eaf5afd0814b2a2c1d9bcc9b067833922f794b1ebefa3f7abf7ca6ec8a3ea2c2fc37bdcab961eb846caf85c49bd145ab850de442f3639b0446e1b59e6820de511dff10dba257fbebdcae8bea669ed21acd928c0d9032500c7056f153180080035800400478028120469d408212d917f20f44b3612a123bbe9fcbfc3441c9f82993a2b606189bd98194eb4b7ebc872e887d49a9fabd8a55be499646bb109d3e9f0d776f7797bdec10c5b8e3f54681242a40400658004004080fd8dc2f38af0ed39b4744c221db5160825748dd1a951549f5f7d18a58fcc4da9fafffe6cfc5b278fd105dfbb229deb062d1c70d77e4bdaad04d2aec356d3d44c35e479593c56eeed0f005182d5a5466361a7bb8080635f4663c7237f715e51da95c70ab88dc4857d19ed577aff19ea1e92ee0a90e0f9692cb2b70aa66749d902ff554df49cd0be1c7f9a332148ec25aa5a232661ce788d0b2c16de290cb0e630d4346850acd961425f4d0b493826a06ead3fa2d0c7933e33601504510f9cc7243f82675180dc0f48f030578f6beb76f753cfc5c4d3ba92bbca660fddb6860c3522b49faddfef0f7cbcc801ddd45bb2f0dabd7faa2e92a3bf904bf22958612905ef08178704fb4a970265707a19ed024145462fe65bd72009272128590662c24c969d9a381c34d571dd06c6835b9fbecf94b372598ed966aa56a35b9d48812cb9e7c0ea29cfc71340b29d378b885869f6c2e366c05c924f3e5c19c42edd4d66de426eaa594a9059767ad7e1399e96e8ca1a22876b816042643956890c54750772ac55caed0589297b0d60907af38288ee0bb63c79428976aaaa6ff84623b26fd6c923a83557bb949a184c0445971cc3d860fba3a4cf0a02373778fba17c1a445e5b17918b9b7c1d2a5e0a607b0b53750800920006000000a351623354308990aecc0f25da9f75e56225f08cbacdee1edb51b260018080f580ab8de684a245146c4910727ae07714453c079b41a1af736daf4428b539d35e47747c05b18948167390a5e45c87c1fdfcc2d9cdeebf91bee7ee451fa0256f620d04538f13109c4e9d0651f2a1fd6ce8d7feee7e03e4b4f62688151a5c80b2d1a074d0df725c1230cc5451da388793c349b9c7a8ff0546258b349e9455c6764a173c863ffd87d642903a71e6def0f73077f2d838edd2e034dcb0d8fbe12a62a52a8942dbf88050b65ba7ca6eef572c82ef991fdf130b769edfda5f277c65248121bdbd627d3750631a336b24d43e5480bd3e5287c491a7e3627a61a06958e8550a770462938529c6f537a6d8da1dfd10a8cf67405d61e16fc0820177758779d627c172fcd6f2f38f8d89915531c813bf28e0c19138933e0d38abcb78c4fabc875d356c5e2aad8c266bc07f09ec88f3651a11db8ce2680f544b954444923b76d17ab98adbaac21a442d41ce36f95da519909fa7121f5e02c6a7fe3057e1aa15f4edd248868068542e0f138a565fa2b0992c7895da0694846b362f169e70d522ccdf7e8e388606ccca812af26d290839cfd8f0a33195a0e2748b11662acd9fda20ff3f0518ea8a096cbd3519cebec4912301bdd9813712447f93a80ea8b05e0186cc7ff39559ebecb03d76c329429eed900281ff219cd4c05db8903bddd02a0942864768ce94242122d7e5034fac2094629794eeae0c037d6fe9a8a77da1fdc5336764630158a9662607dc46dad8702a1da532c4aa334eee940ba7cdefb049599f5ba5feebef42f3ba188b2087905ae8b4f08ca7aa9ccbf969a91c39ce8e6e2696b67c4530bd6bf8be215abb1fe40721d8f76b4644a898e1f695dfa2d0b67a5325c51e862bb465726f0fb771aa3759be5a30f46d8a2730dcc1de533c3f903301f70ea97d47634faaf7fbdc13722532d31f8eb94b7df818c4b3b8c6499293986b46d42c80b64232ee7f7adc0408283a88b21fedbd08fc9f8030f4d250754e71963197d19c4bdd4a4211d4e582463044214b409427f29ba01178e4db0b18f0b8e905cc89c1fda97316509729761acdc85a80345e7f55a07559fed2afe1e47a0ec5beebda70e72e5db9d917b41696d4ce80b4cd8643770ccf4845016603c240fdf14cdb629542e184b208c877cba12d05c916deae2dc27d972656357a2b8adf79b0f32bf4ee3b2fc591eea150f513ec8c7ece661dbca2919edbb94022d230a65ddd499a69671c379b276e7f2635d498ca3a7c0686afbfbff372ab1adb3035a4f3e01c8f9c539838b35647815d5d28c883981b09ea355faf72a3f68d4021a6ae9b034ed81994f63f135cf1f587fc43f038b1fce67b3e9f1545f8967eab33e6b23d2e768568743e7150cd90447f29b018fe0ac2a92daca2e061b57940eb84f31c531001c9cecdaef9686a92a2d64934212a88c1f670bb579e8be7a162fe5444baa8e959c039766ae0aae11634eb7d9fa90b32c67cc55ba7fa73dd4d82255cc7f4d5554d33c01c9d63f97f85bbc59045612e8df4cedb843217a2e16a9804549ccb3647505d467cc2e79fb9fd3c38c9d8aa74db478819a3fb3fad357b9748cd9711b2bfe633ca1f154cf7c5e39687fdaaa1d07b837c5e139b6b253033154c15e51df169952104719f02b3ad8b363b63c1908da7d1a83746ef64321dff64ba2cec97ee1a4f984f1bf3cba831c451485f05aed074fbb91e5d3d8e2009f1d19857b2bd435e761a6da7f30588b4084df0566a3f71975e6bf3f39b6e4e12ace480beb9e31af6196c267410f18b59b155545ea925ef729fba154bc6c6be1b2358ec69dccc8c715cee7626fd898d0b627e66067d7e435a08477d42720960dbd6e98461cc103f3cc998181038f23c84b132046b8c0c162095e15bb3b83e74716360c6de81fe4a335a7e8fd82da52ef279940f1e216425b77baedd9c1d37409e8cac1d1c43e66f33c722f801d259f8874c2faedfa26591678c6d76422be4943dc74a9a493da7931c57e612a1f5201d2ef9aae1ee43ebe70847434ec7ef37280ae20562c5423a4081d3c5967376b5f521bf5059ce187816bd816d55f1ac91a76171e7237905638b190e64213b95d9b68f8818066cef7cf7bf64fdca2c67e77733cee47e25fa5e1f8e27fbbe8c2b4ec496940941a9873d7c360004a28623839581e6f176fa0c45293e4ab84f0b8bd923b011ab552f5a157e8957d72d163c428223890eb24cb9baacb9e070bbbcb4c3d7f1205513347acb1b02e5f744baf199a7b6c49cb6f887df1c17ea63af0aac20a907143aa9fbffab860c2aca39e676b98cd05577e953d9ca4d7f77b524477cc81957d2772abdc64e1836af8c7da0fb45364509728c76d377bbde9b4d8a14a5256419f88cdae0ab6b3588ea326a44b8970288c6fdff7dba7a3337668ec010ae8ef126461acf3a70b7168809ec6992b224ea71b8081df0dfcb37fcf04b8c6a3ea4578af7f9e4ce1bd6df0f966d77bca6ba0aeaa4d52eec89e1e68de1686f6a2e1a94026a0a473fb68805f1365e42aef05d6cc4fa4f362d417558ccce4f1f9552ccb459d22f517ba8ddba24f769168d9aace21581a90308ed9d73f5a3c57f201bc5f78b717a641d8c2b520b25d363562a03d683d5a014cd1794c1346e0c6b54ac7cf3590b18fa601d7752bbd200af75d16a3ccd6001a486c88c1ce3faa0f0377004c4ef4ebb7e66d11c2555c6f5f89750dda4ef4156d9f6cd068be2cec79db59238cae8780ede1982ea9850c0f60042521a97c87abf6a5bdef69f8f067a0b98e9e68a7b1dd61b20e1df32afe5432ade48ef2d7dd264371321e0eadeaa02ee3cebabab37a067e7bf567132c46a678db84fd3e21ed491432176aff336f5a80e6ddcc3e8039586c372d871e92ed030305ea157247708cdd08a7af609d8b6cdd2b863e57f2c14541d4fa55732d9392341cc27f92d2541f6a956df34f7c88818a4ab67513b6b2d8816f385e45dd7f36df1e60793f8c66fef9f5e7bacb97906e35f8fa5ef996a8d174a9b0b94cac23810938fd741fdda4b821307a646b59d74220b3a4ef41a4d78b531fe9b461574bb28b72d7af3274efd000837217ed605c681b1ac5b28cec444558b53c2e80871d913828e4f3aee8e842e0666f89f0183b47001ad62fc21ac0224ba6a066502c9594061825176b6dff20629f5eb2f5faa640a8aa7a76147fff4fd21fe613a169a6a28a2e98121f0b5aa2cddbb37114fcd12f47b33deb4eddaabaf71ee8dab37de6860ecc604df4caf0094037ded0ba850bd9141e6ed927d6b92d7084042907f12c5205f84dd4e5637343245fd1add532225c68e80707e84251f25c5c52dbe438d3500d54a66713bdf405c74a0d46c713f4062d720009c9563d0b72f55e7809df0d849924fed12b394b9c3458b106360991258a5e55b8c9bd0099cfdbbe5606bad068aafa6e731099cf77cbe1e9b0e3cb8393a48d2f2717e98c8611d94637389fbd82ad8dcaf31aba4655822a2e8841d767e45682f0a4293f9a77f8e23dd4b5bd38364e5d2189fc982ada6aa82f62348fd6a4a77d1861666059b716dfb11108425a05da2db844b508956cef4ee04ed1de46108dd35214c0a69c388455fa5d06210c41336ce4d757c679a150b50e42c3b3e5874f9d6ad8f5a69851cb5e55d1fba8e93e7708ace1a0f50d0c9ea29202c6e2a15b35c4b2f8986f79e1cf29c6e4ca2be89b37fde53529d59b762463b7420f43936446db10e4e74d06503ce4c11be9a427070c0797725149e30a041a94cf05953bdaa02f6356c3ec8e9d612ebe2433d99bd5424ccdf89b2dcc6b3f2ddf0dc29f3c5ab3516f7229c37240d6f4303f9e62f262a205066eb37ee8868c099401ced90df38b97ecb499b39bbaff32d37b346568711d44071081cde7bba87356a93e8cff58e9f34c633ed4138dfa545c90b9703252177f1c5ad646305a3a98f79e7154ba75209fd04530f94dee121b6d70c5ef7f8e4972d6f0fda8e97caee3efea7531681c5c099ca6f227e8c557f11b5e7f5947ebad381a4beedd3d59d11a014bcc91f981e8e17eb1519044df1c84c6437c7d952b79cde6d203e30237cd82aaebd1ab4b205e65d92412d48092950d3e7acfe5d99230b72915afe74646981bb58ba0e57d4b14fad0bf491a67538e18339cc031f741d2fdf448ca472fa2ed42dc9366662604bd4944b64aed1028c78209b336a5ff49af69c873202dc9399ad44af75392691fe4b21edfc4e08a5b7bda71add0cc6da7188a7907fdd55fc013b0491974c58ae2df72fcc0cd8267b79766c95d540ef59a5348666d0cfe4bef6fe415306c4d03d6ef46a6343452cc523380c0303e3ee757f2eb92fb0f775ed00830a3af583dc3c6013a2700309820e26eecc895a7bd67a6697d93894f2d02536d87634fee460def68b7c61b3680abedeaa23b099e2697c3bfa13623c9f6fd242e0cc39821c29e130edbd2a778902b869db7efa10cedfc8e9d434d30ea9c85e147a350022ea57d192f9b801ebc484901a4edfdb1248a23f443b1ec71b456170606202b0a7f618d2d0685e68ca83438fedcb427a6bf4f016df2a28e7e8be663349c8ed40906da0a3614c05eafb0368e062e6bf024ab8a9975278c247019a7fa9e7600a987331ca71dc67bd14ce47c62c0fec1e48ce3109acd2f9d6b87ee99fd96d576648bec9069b8fbb2ca80207f4f22d3a023a3a36ebfa5ebf5a559b31ce9485bc7828f094c2262ffdfa03cbe9b324e12ebbbd814b0bee10a084ab8ce2843c955b585f72297065199b5e0c26d62aafca7ba281cc010a8156e75129c5166eae676d230ac6e48abb8638fe6672d07d50f4f8b8d99879140d795d5ccd050520cca6a8da254d274fa488829ea4f58d351dde262f1cf5b76911c8de461b70393433a2ba639ca431e1c0ce5b2734e120935338acc739788148d06faed57ea7faa7bf671779009420a7f6fd3cbc691531c790841caf993fee06c3aed4dd5fe97068d1621d3e7910a28c5ae7ff84b7d8a810b88a6b9ad69b92a5e8a0bbac49b84142f5003db554af3191558167453b674fec2b528ef29ab21ebda1912b435eaadf9b8ea071e9787361c8ea457fac57a4a3d685522dd75635b76e33aed78e79e020e6b460e6bf520ad9fa38e5406c9183b35dfeb201f12ea06183169aa0012edc0a9421ae0ccfa8469c3f7876c04b946ff2db92e6747027eeb45a0aea4068af5ee7be7ed4ff33ad5c74b674201bcd60d6871447ba723134a024a2b63c61bb3397c5b26bf6545b2e0156955f9d443ff9837af712dec56afc7e0eae1cbbe1be63d350f3d53404e64956a16279bd2dd94d07a9b3119be5118ace74e890ca3210cb13dd8fdb0ab91cd28496c099bc66d5c9246e00822041f951c2b3e2d19605c79ffc3a19701a8c1c42cdb4657651fe2476cdfcd02fc042b721499f477180a94f2df9ce8235f33fce830752c11fee96163f6213bffe755f7434301cf91a6208c7aef1244cbee55dc54a8800284a9b6ceb5cc1a74cf6a07e2e8e841386cc32bcf8eb7b238dcb551849b0f7a6fc13d1c6480336d1fdc15bb04609df31979e37d115e6c63d87614f5f9c61bbb0db8907e5433398110c9fad8fbcb4f86862c715a5c65a435bc4a9a313d2a45e1189bc529a6ee209c1757de798d627300bd8ec47ee6e0510f2285f8001d031e108ca3455b948303450a1e8ceecde7ec36aaedcd61afade53287559b9750a5fb11e18711368d6055848fb6e023ad61289eea788770382450259a1a33c83dd9d83a373b008003300ac1414aa00000800d000ac14141a5e0751a3d90d710d1670f3cbf600afcae4211bb3d885d6bd77e01ae6bfa05701dcd729803461dd2de8c80647b6a49e039d4d3356d2ddbf1669083477f7603a674fdf5948b2fcceb5488e3e1525f3e2d25f9d334528ba6aa71cdd1ee428ba899cc3da8f26b6d21829e48a61965e23537fc66c856ce2c68ef3a0480782364a0ea05976aa94417205e127235c53c84aed9de32389b7401cc370844eac9282def8eb840fd3f029bee53b12b574bd68a617f2ce75e701993af279dfcff7a47ad066676faaab8354d554d3cf9b6dcb0bb4f1c25d68d8681f4d44cdb7fd06bffa6b7f68a77f5cac31c02e92eb200df8b364c256032b1c35268f4202fe7484742486561d58c411c02a815f76be072642ee9c68c16e765ea331a7d3d7c9951b6eb04c056314049a38b88e0ee6e186bcda7072f76446c2011542a439c62bbd83a06e325e8feb771c7d0787e9b183a5f12ebd9c431f28cbba4f90d4362555548706a2d0d4fca77959d763c17ee5e5931aded65ba93754703ed240747ff64cf21fcba07567eab4fb67da15bfd204006db16e9b6caf8ff444391902f4f9eaa557ff1bea5e3ed3d0c1204e5a0ebc20c278481c6e7052e46ec1c51a9ab7f101b824917b05a3b692a35540f474befebd2b2a1012429e8f08bc0d1027ef42b1a52f40889c89988498e4400b95333bbc0df8e85aec8139d86064776616e8db1b545d999c32ae3482ee87e402655cfcddc7adea7e3fcc28b7762fd99c95c84dc4606f3d5c9fa29781004c4bba1fd6590e97741053898840b2883eab69bbcb2089464c69c28fd92ada85189917c96043f72ff85ca77898d237b90d124c3626c5e804b28cc4eee7f9353dc86500c8021c560351ebc4eb88d52c4f164f44db64a585ea1bbaad85296bb6b400ee8000af122b800c102b800800d700", @ANYRES32=0x0, @ANYBLOB="10f4cfa7843092ff55c77d9435d90ec2052ecf77efed8f65b5019bedc3fc40a3c398b78862969fdda1508539fd55629088e91d1234635bd8418892316a6316ab83d24172a319a7e5f5e67acbe44f45594516a249e45c77a8ca3530b0ebbd2b98dedd1b12d2b7a889a15137e314ea04a21725af7ba0fe37344650669e2f8f667f6192c792c4523a57d8a81527eadb13cba85b28b90995f96d3f2f5ce9ba7f9049db2c1db21609eacff4bfb9b881a4542a2b2fc3c393e057b6eccc11f4096901d71f15c2d6c3408c1c96e4da4d16f2cef4ad0d3816a49b7556d2bf7eed89d313d180243b11b98e5a684fee981ede5da324298f0f309f2fabd406277968b315af107161284c4631aeca1d1d8b3ca5708565a7d955139eb328eea7ce604fcbeee7210f3c54945ff3a01c2aa3e8942300c4a5a38b9ad4df66e88aa18dd85a654d6cb2d4644dc2981f7e1686c6b2fde7b8cfd1b4fe98ee64343c10d39ea4375d9fcd897739619eaa8c753524902c72a0ffab8c2a11ec2bab0d88241133d5336e40b26fda44c7f8f8a3e4168f234a8be1999db9cb8743c16e09d3b9e8f091fd912f615668f1d2d2c216f37f0efad7e0fb5069757b49a7d63fb54bfd330712846dc9adbdbae45778dd48dad4ad1aa9bcecc8057904fae91458f687b92b191823bd8b5a34a8a8170fe4e8ca926f1deaf5c1c49e1800f1899fcc49fa7e976feaa38ec87d3db4b066e2906dc18c64c258810513ceaeea6d08147ac82b5ff535b18f83b51c2d41c1a029db0a07a8a16b9fbd33c4d37694d23182808ae6ef12b00146ebfc6f34de7b1c310ba319867bc98e66cbc955110f00213825f97a0cc897919d6bb248dfc684a61c1ef73491d85032d9116b62d2b746b1508c3af12a37bf7ef06fe0a26f25e19a4fc14bea2a74966cd288d1d03b59f757fc5b537b259f2154b4eef745218b0dfae7da16efc89f62bb754cd789a66d0b3ab62f3abebeb43fabc39d26e84752965c798de73eed4e6aea276e726bc4e36a5ff777157d202513b8d84b5247660bcc8dae66924e6061414103fed0560290d06120a4dd5609c2cb07a574520e7a441da3a0a8b719ee3d51276c47e3f3a96c7773f9c3e824ad5876b762ea06eaeec3ad44cc5507e5c243d083c78251aaca3a79d745c55160da67205928904696549bcfe4ea11daf236deaacedfa38e2199c3edacbc60b77820aef431427b7adac773384c676ad3c3972a54d4360ef118f0b91b9744d047e5db6038a0fec8f88d710e0cda11442c561bce1f53a1f1338646fabfb579b5a9d58cb74df1d220f483a59fa7baef1bda6a01eb521f3c6dbdc9f92023fb5e1b1626c267449a1815196100e0ceaae542a46fe34ee1b24bc249b313593fc20887160c4f20239e586720e24509ab62579a5b2b0c446f9e9a72e90c13ed4f8dfbb7394c3750f33ed3325f27bff363a32337985d640499ac02f5dec789c3ecf4e255f4b44cf550d59535f4a1ad8dc3f051429dbcd2c80232a42aef80efe9acc19dc3ddc010dc5bf34152dc8653725288bc2d90e4d0f751161aed2e5f9645256eb0340b598aa6c94d5ca821ccd64929d03c2a2243dce3077636554a28c4357c4dc7309632b8cddce457ec2a1e59b25a45734ed8ef874700f5d3c29b6e2144408f5a9b2b1c68cccf663f9d616765c117f1c11dcf30515545b3bc9c750693a5c1dfdfe896e732997cef8aefb69d8f7dc640195550a8fe139a1dab8477ec1847911f361f34cea7a2ccd1212c64b8d8f4f48e8353714181e68df6262a385c3b3d60a7beaa1680cb2e98248d92b80b9720e7366711a702eb990b698aaabc0694ca2e19d35ef65711a4af5d4a29de261a201f6682ca94e103b7e0774308a1b98517ecba6866bfbee2e581db7ef772558cbb765a2830123d21521d5ff111a9de1624d3732d998499a79cfff78b6dfca8a4b4e9c517684dfa96dbcd3594409cca384ebd2394244ed09c529b69613d4039eb727948a2ce1558768950a466a997f459d28a9f0bc4afb256a7a029851a59ef09f1282ba0358e62fa139aaf0acebffa2a526dd3527995efdf4686872f36763d7acbf2294ab2ac2d12876db3fe7c07a756ab140a11603b2c0937b498e5a312e9fb2521a3636376509dc7f66ec354b3aab398aa6d432d29fdf8ced75f161baeddfbe2f750c29914186c1d4dd5914b5bb12bbb1b45517e386a6a2f34247ea40bbde66374135c77ced9a5f256fb1f93dcf27f59e227ed98d7e402275539df64eae7c2307a4355c392cc0251841b4e68038543db497212627c498d1590f092513968d27ac8f7aac6f6e99e414802ed6934856c90a8cb1b0c1d99f0e7b0636a88e14957fb3f0e6532e121989e853f9350bd30229734170b808e2634d27c92f7422fea66ab5b46cd9ba97faaa8bebb16b47aef342e60d95fac8e1808c360f7582b9a95435423aafe74bd71d3e6bcbcdd7a5f3b72f619ba59e0e565faef6bc59f289a6059b0f08859e950c374092c885b8112342e3bb47c3e8e80df1c6d2d360c24bb186cca896b8b125e7a533e8293fb8c224183bdc2d739588147b2e90dd8c447e8eb2ff1fc359ba227377d044ddfa8f69024047882ab329146757b72c47728834cb4e673e7667b5fda58ca8f1e7c6317c0262422d739ee6c445efa9b7612ae06739ba52a11b184b96568e3997e1b9b4e58cd3300939b55a01d088d4e9e922bcc8f4ea68cf62a96afee2050d05ef46b0b42666143b6a77525f1c3071979033706a64aec98f25c471dbdb07852316ea3a021460e3a1f88e05135501ba9a04928135d1ea31df47841aca725f4d6f8f437f4f5d3e40177b7ce4d4559c46e4f1dfa1db34badec3fbc886f385bee4b93d16e371df332e350fc4d099ca66b1532b2a3b4701c25576655b1cdf17bf2b71c3704cb1ee66bd99edce520023dc0d9c6b2ca71c99d0d76e60c89e58693ce209c0b54cbee3f9644fc0d96d7cf306e329d3383bae08c49251ce50fa9e1e33c72e087cbdc2eff4d90e12b94a45dd226a1ee349811f5bc081c739ad20284b17b4871075d09b79f57c170632fbc23cf9817bdfcc0a60b3e31a714f0122379c3fae349bd2607be0ea789b4e4c36e93f048a6093e5955f20496dc870c6b08f2f4158c35c76c3a8bea25350a04bec3664ac60942c3bfdc09f3c0d632c94ed73ad49164ab8db25d99caae4be90f845f46970ca539637d193e4dce2310ddeab06eddf849aee36eb84ed5e3e1034a3c17966d2d6add8a149d21849f8d2a1e98f688464f29d049661da4a54b8531c50240e6f93f52af75629f61623b8e839c51a292d6237d96a32c2aac3c94263040ed6f4a81823ae53c34ef2b48f087cc56f7e69a433a9abaf9b495ee0fc7fea15b749088fe5069a8edac87f49acad6fc6c3ef21fb010a935e9c1bb537979cbf3acf3534a369a8920354f46f5e69153f60c0657f4a1d4e5f765f350cb0fb7b35347825898f535bf5b724173bca5828fef2f439dc65e8066226d561a7b17276d157578b066ed908b9ee3cee0d6311437e68ebe242b49e44424dd1217aa3cf45471876a6cdfc8222ff6d75941ab3f56a57680be737f96686b99a46ebf7fa09085ca8503db7475f7714de6e915023a6ed53d4a68f9c80ebf5ed8812b35e430bfbf160a70cd46a4f0ef72f95cc43b47c23ffd7372a966dad03747e66a58724563b24652ea96fb5645739a90c1e0755928d3e2b8af25ca39cc160b537352e35d2c4183195f938d05586c4d5dae25b113662e545328660b7ab56da0adb8ca6e607368b3e18d4130df89d65b005b8b5860ef60d87c9179e71956369575003e868b2a8e618de3d58862d371197a20d3dd1535d39963f0633cd5681647264e6f72093564ba83d3a06fedff6e9bba7e4cd784339a07e877fd61e2350193fbed857f2df3849a164be1f3c361a141e4841e56dbe3094584abe42fdaab6cec1dde185053c90a8939ee5264c83d71aaf3fa61c4157c1791358df5cf89012d39b92175ff276f79d9fc0dcf448e180222985e3429a506f18965e1aba2d7089c7d2456f58eea93ac4e82d2b841737f0a9bc500a8a54168739030025874f3a0f45709480fb6583b2b1e1ed04693f8a4aaa01ff194d682eb565f1c0fe8d9dd2f29b6b37b52cafc9997f456940e604acd65e3034c192da9eef70504831f17545d207a882a08c7ec871fa0c5ecdcfa69533c72c9642b867613f7e458737e18c2fd8e6bce0f0fe2a413d72e0ef379628d3e1103f3ae43093ce032d1f976f250809635585d76d2c5514f2646fb3bc234fb6b5536e242e26c1080ea90a06d3f82c7a9580734354f2d0e8f3750c7dd44da659906df2d909bbdd3e3b83accd6b4b0e42f5fde000d7678eb83928c0ae5f4e25f159f110799f7a7135f56079721391928d23ce034b008701df97878f3d1c073c406ff73d7660235e58f092c0df5524fa9de19ae0a857f4936c632f9930c76ce6c65edda401e4a49242d79768718985452577c2bcb55d6c496410161d0ea558cc9cda1221278b69a8d3b960b6600fae93082154b4d5cbf5f905c3549ef9a7f755dc7f8b03b689f61f0bf6ad850ebb615c77f5f90e61b4789b2b7961044eb0184702e4aec1af3c12349d3682b5774fff417fbdfbebcbe1ca37da593145e3aa6d2da57f235b4e8ce32b5b128a3d87422dc8b3200cb3620c86e979fe1777476f6a25639c2d22807126563e2289b402b1919427be02d2d9c03a5f3379e3c0d6d46a1b053cb1a5d4ce4faab868b7a040747d61761a99bfe8d19249a98f96c537914fc7ac91321645207e454263efc24d7009b1f31f31c52efb756feef19431b5f591a8c1b890ca96b4995c54e58688789dc00d0999ea7fbb61e72b89d077684565c266d54791589ff7e7bcb87ca66427b8c2d94664ac6790807a12e398a18dd1e426d683a1dda4cf60100c704ed664c480e7215511e01f94a1ff79d1cde88a9967eaeb971207f817af2ca740917b31f2cc4deb39ae4fe676dbebebce1c7bfbf65d449c17cdee30bd6ebc69274aa97987d52fb30fad27a5fbcb0bbbad551ed8fb46f8c2fc7a4ca2f61a73f818f833aeaf28eb8a0e5a590e237eab7783b11368eb98da757537fd4dc71a64085250897b300bec738e5ac28902f11354ad2cd86b6c73b42426d978bdee1fa2aa584299ada93fcdca5d2d14757b48015748b7706d968b26534261021adedad8a39b729e51ad0103d4aecfa891a1fe4351858db634e7b6c3b1570aaa641f25d32d10fa59f97bd6f84f9aa35aec5926f9c744400be3703ee513493d9222d7b3eec313866980e2f6eeb4c82e9285fcb3f37c7fafd8072c2167ad8032c5f2043944425169265a141ebd006369cecd4573f880c766ae79d75b98eab54bcf7771e074bfa53ec2dbfba4f04ccd6c82c3fca357c22c7be9a3217f3afc328ab0de3ff1ea07a24ada2d846ca360c8f578be676eb59f6179fc825ec76ffe6ebd1bf84a35a338ae06668aa8dada5a237123c92f91523e5193a67d25ad3981f2a1b60115f62c7e77275a5fbd9a3c7744338cdaca64f92c987fb9e10d036531668a5f94f6a19e4f79c26b731f381f4e115533ebeb092a0c2d7f437536172c091150758d6fe1a90bca4d2df6b9552849cbf0ba9345a17f8cbcb7cf918abb9ea4e0ccb9a01cc77c3c3b3402496389e0d8227b02c11e4d13ddb4a7b82f8674afa07d58e9293a96005852063840a4ec3e71477aa27163fb64ce12c8c16bbfd6858257f4c26eb52d20b10d7dcad6329a24ef4f61b36007ebf3685846cc94c0227b73feab1142240cbfd80101400d600fe80000000000000000000000000000ef584a72d0ed905d9405f620ecbbff5e9ca2a99cbea382c4262171451a026ce7fd76f21811a1d127dbfa79890b1d2e424550393f1a57a1cc11a1d9c3860055a6a66d38e190d682f53e5d0214dc1e6909f89d738bbf8875b0149800f006a002f6465762f6d6964692300008afeec8062892a89a7a7d895f1344ae98a2f85bd7df566578c15885fbc2054234e82e2eb4f3ab91a8d489dd33393485d1abf6f0bf40530965208a594e7015fa8b277de795d6183b100768ad957bf1deb1a7471885c87cc23d32b8261025a2e11b95bee474f109514b0e2ce1848b23e6af06eec1c7af9baee743a281210e0627892f77e91a0cdf9bb620c2d414ae8ec471cd14fbf4e982327fbba4419e23145614cd5cdf66835af78767e56c36157348d5c6b007f60e01d83a446eaae5ae848f9e26f562ae3ead8d4182b3fff887a3a62954149db384b25a07262e6a4f3de1aaddce8c115e7d2079e70c2097a7c2b8b6cac7386727e431f633d115b9d7b28c588d632003241020caa48d4c19d4ff7ebaf1bd8d82f25624b6e4cd82a01f790d9c14e4579937628c3689ec76219a48d6866da8876f1eb0e0e3d7fe987d1070dad0400038004003c800008001d000a0101000800c18004003480b94067feb35a029bee91e0d0d9b75558899f3928485d657b4c007c4d7a066b043504517224b27a5991d7fd6d6c9a8dc3e0166a13e1d7cacb6208d5c38ef7ffd09bb3457af29d610d2574e2d5fa55e3578b71f61feeefa0138e40a9489f71bfaacd1f7a10ebb3800bd09d31383bad42a7bf8da381fd13ac40fd1b8e85bf2c79b0f9e86d2066e3d3176657103e3a793cba1112084b5438dd8990c81efc66e692314b75aae39b15b19aa059bfe94addaffb86e35b2b63a9a9e886e0d3b7816bfec525fc52907595206e6f004102d5802e003c802100bf0098bac55f370c0312796a378ff7a36fccfa2795b0158139a6ce627fa8a900000083b9c72bab0baedf3c84e23f024a07d8fffd52c386507c0feba008df3314463cf8833d2f06e0d6ef033c9fcc43d28dc76eae3e3937b63c648db854f0f02f6c50dde11bb6ba4913b08fff0f99db4cea0e827d738d5e81bfd4706d8661f8f2cbdc7790c7bdef3a703c7d3902b6f574a74a952f7029ae313a81e30bda714cf95292a4b1ee332bb4215daad43c15d64a5b6e0c55d96e820de7f9e17e4fe047f3d4f808008b000a010100daddcd421a3563c53057d163f5b3340b677fac189ba4e4dd9fb9d1b2690d1b614efec248cd725988ef7785e6be838b50df19392532d7f5a02653560da0029af749e9a239377b6d31fa50c6bca0d14e9dd9f7557fd54630b8e5147a0b08af0fc37e9043c26e1234073c45c6d8a646c1209a12fa97fa1f2cc0e7b1b0a65894286b7cfbd625d3298a39b403b66bf9bd89f441a190038eb7b67f4b1cc3efb04560cbe54c49d59533444dcb6f3e21153e6cbd7ad99dec31d2106a9160908e27eb9396393543ff6a5779daf2a2b5a791c7093d4625bdbfd05ded5d0bec7bfba379cb5982b896d78a1092a6255b2e48c8b4133bdbf946faea927da3bd6dcc4a91d5184c4220dcfee35201d2a6aa8f26537726b63dc4e946086b034f731e55452fa89f7fff10404962b9394ae1d2e3b9fc876ecac5eafe8497f455326c1233fdf56b90561f000000b001ba809d3ff4a7b28f919440e18bb871eec0fbdb7b5afe9e9e98f4624c98ab53eedcae422f2fbce0d83c704a13645ada5f7231a3fe31a52a4ac861239311aceba60dcf599c33ab60831d1dac40e1244aca83e6b93c97f3042d5cc53ab71e5fc93810cf2612432feed34f71355c7a6541b808a4cd08c114a7312dd460b5b30144776e7ab6a6bc07934693a5d6fd17e71e61db7708e40e7c5c1a8557488d874dd6f646f45849e40214abbc273b93918bcba3b636355bcefadcbf23c1be3920ad7bb34a8b2f1ed3e4dd801bdb1fa509cb672bf715fa2ac9ae23af342c8f8a17abce000d802aadd17f94f9597d80c401388644a59000caec76d2a98dcabcc1defe1159c0c5b70dcfc7882e66f410579c65c49dfbc08ea45416d39e9b944c0d68acbafa42600ee179c648649ebab5167b63638d4f634d898cb2551358f6543e462db938f1336a9b5a0e7fdde5f6d38cf96d8148397b739d828612dd30defdf1c1e9092ab43d1f43cafbe1cddb6c170b6bd91bd63595700c4856125f60e5c98b7eb8686c3b5998505c8bd8d56d02a82fb95d270050cf87e70400b68008005c000300000004005e8004005b8004005d800000000008001100", @ANYRES32=r0, @ANYBLOB], 0x2e5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) 3.333135317s ago: executing program 1 (id=496): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) chdir(0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000180)="c6fb7e8d08061746c4c539a645ad33b3839ced35138062a52d2ec0449b262735dc477cb8e995fa4b2990db91b193fcce3ff0a32172f5aa4f782af35a773ea2d5da281aced59bd285909995cc3902f803d5c23ac782f89fcefbbcab1dcfb3a91b1a2fba26b1a8d8e5f679a168e881cde74779bd5505fd42f21bbe541ad27a1223312ce277719d2d9d9699177550bb85fa189cc551cf94e9055c30e9ea148a9632c2a96e14af143296061f473fa156b5a94414dc785b53d6f0f34fd7aa7add2ab800f3f668b2a30f6d641b86ac868f689e5f9041a37a99f59dcc897f3d58") rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x100, 0x1000, 0x8}}, 0x20, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000380)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) write(r2, 0x0, 0x52) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x3, 0x4}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='ufs\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) add_key$keyring(0x0, &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) open(0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x6) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2f) 901.826091ms ago: executing program 2 (id=518): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x8102, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/54, 0x36}, {0x0}, {&(0x7f00000012c0)=""/4108, 0x100c}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f0000001940)}], 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1d) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xb) accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) socket$kcm(0x29, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x10}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd87, 0xc0}) 853.627451ms ago: executing program 2 (id=519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bc599f4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb9c6f68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fc1229d}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x6c8c4}, 0x20040010) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 693.331212ms ago: executing program 2 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000004", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000002004ade8b03bd9804000000000000000000a7820000000002", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESOCT=0x0], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae729", 0xbf) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 600.557246ms ago: executing program 2 (id=525): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0xfffffffe, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x3000, 0x1000000, 0x0, 0x10}]) 542.770086ms ago: executing program 2 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 542.117419ms ago: executing program 2 (id=529): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettaction={0x44, 0x32, 0x31, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x44}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x3, 0xffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000000, 0xfffffffffffff813, 0x0, 0x7, 0x6d9e, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48011}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r4 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r6 = syz_ublk_setup_io_uring(0x3495, &(0x7f0000000080)={0x0, 0x5836, 0x80, 0x1, 0x23d}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) splice(r6, &(0x7f0000000380)=0x7, r6, &(0x7f00000004c0)=0x4, 0x5, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) kexec_load(0x0, 0x2, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x3e0000000000}, {0x0, 0x0, 0x0, 0x10000}], 0x0) io_uring_register$IORING_REGISTER_CLOCK(r6, 0x1d, &(0x7f00000001c0)={0x4}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 361.849913ms ago: executing program 0 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003"], 0x70}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 360.588679ms ago: executing program 0 (id=536): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x38, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 293.384171ms ago: executing program 1 (id=537): r0 = syz_io_uring_setup(0x2, &(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket(0xf, 0x1, 0xf) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002a000000198f4da55a01c2230e000100ae1906c25da7e01b6d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002a000000198f4da55a01c2230e000100ae1906c25da7e01b6d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) bind(r7, &(0x7f0000000500)=@in={0x2, 0x1a85, @loopback=0x0}, 0x10) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10001, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000f80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf250100000000002da8a5c5ec4ccd"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="04002777700008000000010000000000000008410000004c00180000000391647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x240008c1}, 0x40000) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd_index, 0x0, &(0x7f0000002100), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) 242.385985ms ago: executing program 3 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 242.152635ms ago: executing program 0 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (fail_nth: 7) 241.584538ms ago: executing program 3 (id=540): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x1e010000, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) 193.189581ms ago: executing program 0 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r4, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1, 0xfffe}) (async) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) (async) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060500000000a66f571b62462ef96e3d38c30000000000000000040900020073797a3100000000050005000a0000000c0007800005000100060000001100030068617368"], 0x58}}, 0x20004890) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f0000000500)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f00000000c0)) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000008003c0000003c000000030000000d0000000000000805000000060000000000000b020000000500000000000002010000000000000000000003000000000100000002000000e3f30000003000"], &(0x7f0000000340)=""/239, 0x57, 0xef, 0x1, 0x3}, 0x28) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffffd2, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001500010300000000000100000000000000000100cc3e6d9dcdbe9c412614e4f6a07aa99118ab0ee4d87a86741668b9eac31f39c47e4592f0b857bed304689c816e9727073faebb3fd3d6beef30f16bb9b58aad1b96315f944fffa0dd64812d255d0f381fad7303e3077c132d87ab929efad4dd8efb5c1f592b6c62da5edbc09741194aedb0ef3e2e243053eed4dd2cc1e41ba294e2157b3e8345ae8d96bc212c9e17da93bea1bde1a04f3d1845fbee4e8ec26c9a5f25a78692f9dc289b5188", @ANYRESHEX=r10, @ANYRESHEX=r8, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000010) 192.903928ms ago: executing program 3 (id=542): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async, rerun: 32) ptrace$poke(0x1, r1, &(0x7f0000000100), 0x7ffffffffffffefd) (rerun: 32) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, &(0x7f0000000300)='\x00', 0x80000, &(0x7f0000000340)={@_ha_fsid={[0x101, 0x9a]}, {0x9, 0xf670, 0xed4, 0x40bc}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)=0x0) (async, rerun: 32) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (rerun: 32) write$binfmt_elf32(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f000000380000004600000008000000010020000100050009000000000000000300000004000000050000000900000080"], 0xb0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000002c0)=0x14) (async) r5 = syz_socket_connect_nvme_tcp() sched_setscheduler(r3, 0x6, &(0x7f00000004c0)=0x7) (async, rerun: 64) fcntl$setstatus(r5, 0x4, 0x2000) (rerun: 64) close(r4) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44b48351", @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf25810000000c009900000800004e0000000600660008880000040067000a00060008021100000100000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x4040005}, 0x400c810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r8, &(0x7f0000000240), 0x0}, 0x20) (async) r9 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async, rerun: 32) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) 63.29439ms ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x13}, 0x94) (fail_nth: 3) 62.463903ms ago: executing program 3 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003"], 0x70}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.698716ms ago: executing program 0 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="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", 0x1a3) socket$inet6(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 2.17038ms ago: executing program 3 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = semget(0x2, 0x2, 0x200) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40101, 0x90) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r4, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) io_uring_enter(r7, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) write$selinux_load(r3, 0x0, 0x2fde0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="cd537a19f779420911e7671e7721f5fe411793f3381c99e7680200226cb94e2091d4a025df3213c1418f0d542ad67df97c26ce91b2b4c4fbac9f0ad97cb8f7e5203bd06a89ff3d606b07e2191cb7715423869721152a779eb78ab9c516503cc0676d041a2c4a8ed304c1cf93f15b6afbf2df0a3072b6b603", 0x78) 0s ago: executing program 0 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4a8f, &(0x7f0000000000)={0x0, 0x553a, 0x1000, 0x0, 0x1f7}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000001180)={&(0x7f0000001140)={0x0, 0x0, 0x1, 0x8, 0x3}}, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180)=r1, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='9', 0x1) kernel console output (not intermixed with test programs): .2.160 Not tainted syzkaller #0 PREEMPT(full) [ 59.387797][ T6360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.387804][ T6360] Call Trace: [ 59.387808][ T6360] [ 59.387812][ T6360] dump_stack_lvl+0x100/0x190 [ 59.387832][ T6360] should_fail_ex.cold+0x5/0xa [ 59.387846][ T6360] ? __netlink_lookup+0x652/0x900 [ 59.387862][ T6360] should_failslab+0xc2/0x120 [ 59.387877][ T6360] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.387891][ T6360] ? skb_clone+0x190/0x400 [ 59.387909][ T6360] skb_clone+0x190/0x400 [ 59.387925][ T6360] netlink_deliver_tap+0xaed/0xcc0 [ 59.387941][ T6360] netlink_unicast+0x62b/0x850 [ 59.387957][ T6360] ? __pfx_netlink_unicast+0x10/0x10 [ 59.387976][ T6360] netlink_sendmsg+0x8b0/0xda0 [ 59.387992][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.388008][ T6360] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.388025][ T6360] __sys_sendto+0x48b/0x4e0 [ 59.388038][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.388053][ T6360] ? __pfx___sys_sendto+0x10/0x10 [ 59.388071][ T6360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 59.388089][ T6360] ? ksys_write+0x1ac/0x250 [ 59.388102][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 59.388116][ T6360] __x64_sys_sendto+0xe0/0x1c0 [ 59.388130][ T6360] ? do_syscall_64+0xae/0x790 [ 59.388140][ T6360] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.388157][ T6360] do_syscall_64+0x123/0x790 [ 59.388169][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.388180][ T6360] RIP: 0033:0x7f964cd9e159 [ 59.388189][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.388200][ T6360] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 59.388211][ T6360] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 59.388218][ T6360] RDX: 0000000000000573 RSI: 0000200000000000 RDI: 0000000000000004 [ 59.388225][ T6360] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 59.388231][ T6360] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 59.388237][ T6360] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 59.388251][ T6360] [ 59.388263][ T6360] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.160'. [ 59.502427][ T6368] netlink: 'syz.2.164': attribute type 21 has an invalid length. [ 59.502444][ T6368] netlink: 128 bytes leftover after parsing attributes in process `syz.2.164'. [ 59.502522][ T6368] netlink: 'syz.2.164': attribute type 4 has an invalid length. [ 59.502529][ T6368] netlink: 'syz.2.164': attribute type 5 has an invalid length. [ 59.502744][ T6368] netlink: 3 bytes leftover after parsing attributes in process `syz.2.164'. [ 59.884178][ T6386] FAULT_INJECTION: forcing a failure. [ 59.884178][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 59.884200][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 59.884212][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.884218][ T6386] Call Trace: [ 59.884222][ T6386] [ 59.884227][ T6386] dump_stack_lvl+0x100/0x190 [ 59.884247][ T6386] should_fail_ex.cold+0x5/0xa [ 59.884261][ T6386] ? __netlink_lookup+0x652/0x900 [ 59.884277][ T6386] should_failslab+0xc2/0x120 [ 59.884293][ T6386] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.884307][ T6386] ? skb_clone+0x190/0x400 [ 59.884325][ T6386] skb_clone+0x190/0x400 [ 59.884341][ T6386] netlink_deliver_tap+0xaed/0xcc0 [ 59.884358][ T6386] netlink_unicast+0x62b/0x850 [ 59.884374][ T6386] ? __pfx_netlink_unicast+0x10/0x10 [ 59.884393][ T6386] netlink_sendmsg+0x8b0/0xda0 [ 59.884409][ T6386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.884425][ T6386] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.884441][ T6386] ____sys_sendmsg+0xa4d/0xbe0 [ 59.884452][ T6386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.884471][ T6386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.884485][ T6386] ? lock_acquire+0x1d1/0x380 [ 59.884498][ T6386] ? get_pid_task+0x2a/0x250 [ 59.884515][ T6386] ___sys_sendmsg+0x190/0x1e0 [ 59.884528][ T6386] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.884540][ T6386] ? get_pid_task+0x106/0x250 [ 59.884561][ T6386] ? find_held_lock+0x2b/0x80 [ 59.884587][ T6386] __sys_sendmsg+0x160/0x210 [ 59.884603][ T6386] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.884626][ T6386] do_syscall_64+0x123/0x790 [ 59.884640][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.884651][ T6386] RIP: 0033:0x7faad099e159 [ 59.884660][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.884670][ T6386] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.884682][ T6386] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 59.884689][ T6386] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 59.884696][ T6386] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 59.884702][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.884708][ T6386] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 59.884722][ T6386] [ 60.003809][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 60.039758][ T6394] syzkaller0: entered promiscuous mode [ 60.039773][ T6394] syzkaller0: entered allmulticast mode [ 60.200989][ T6400] syzkaller0: entered promiscuous mode [ 60.201004][ T6400] syzkaller0: entered allmulticast mode [ 60.298962][ T6408] syzkaller1: entered promiscuous mode [ 60.298975][ T6408] syzkaller1: entered allmulticast mode [ 60.565263][ T6418] syzkaller0: entered promiscuous mode [ 60.565277][ T6418] syzkaller0: entered allmulticast mode [ 60.603953][ T6422] ip_tables: iptables: counters copy to user failed while replacing table [ 60.640732][ T6423] usb 6-1: USB disconnect, device number 3 [ 60.648890][ T6423] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 60.796274][ T6437] FAULT_INJECTION: forcing a failure. [ 60.796274][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.796303][ T6437] CPU: 2 UID: 0 PID: 6437 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 60.796322][ T6437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.796331][ T6437] Call Trace: [ 60.796338][ T6437] [ 60.796345][ T6437] dump_stack_lvl+0x100/0x190 [ 60.796373][ T6437] should_fail_ex.cold+0x5/0xa [ 60.796398][ T6437] _copy_from_user+0x2e/0xd0 [ 60.796419][ T6437] copy_msghdr_from_user+0x9f/0x4c0 [ 60.796440][ T6437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 60.796465][ T6437] ? lock_acquire+0x1d1/0x380 [ 60.796486][ T6437] ? get_pid_task+0x2a/0x250 [ 60.796512][ T6437] ___sys_sendmsg+0x106/0x1e0 [ 60.796534][ T6437] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.796553][ T6437] ? get_pid_task+0x106/0x250 [ 60.796586][ T6437] ? find_held_lock+0x2b/0x80 [ 60.796626][ T6437] __sys_sendmsg+0x160/0x210 [ 60.796651][ T6437] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.796694][ T6437] do_syscall_64+0x123/0x790 [ 60.796714][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.796732][ T6437] RIP: 0033:0x7f964cd9e159 [ 60.796747][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.796763][ T6437] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.796781][ T6437] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 60.796792][ T6437] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 60.796802][ T6437] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 60.796812][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.796822][ T6437] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 60.796846][ T6437] [ 60.851484][ T6439] xt_hl: Unknown TTL match mode: 255 [ 60.852251][ T6439] netlink: 80 bytes leftover after parsing attributes in process `syz.1.195'. [ 60.961123][ T6453] syzkaller0: entered promiscuous mode [ 60.961136][ T6453] syzkaller0: entered allmulticast mode [ 60.992669][ T6456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.014445][ T6462] FAULT_INJECTION: forcing a failure. [ 61.014445][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.014466][ T6462] CPU: 3 UID: 0 PID: 6462 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 61.014478][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.014485][ T6462] Call Trace: [ 61.014488][ T6462] [ 61.014493][ T6462] dump_stack_lvl+0x100/0x190 [ 61.014513][ T6462] should_fail_ex.cold+0x5/0xa [ 61.014528][ T6462] _copy_from_user+0x2e/0xd0 [ 61.014543][ T6462] __sys_bpf+0x2f5/0x4a30 [ 61.014559][ T6462] ? __pfx___sys_bpf+0x10/0x10 [ 61.014570][ T6462] ? find_held_lock+0x2b/0x80 [ 61.014587][ T6462] ? get_pid_task+0xfc/0x250 [ 61.014601][ T6462] ? get_pid_task+0xfc/0x250 [ 61.014620][ T6462] ? find_held_lock+0x2b/0x80 [ 61.014639][ T6462] ? rcu_read_lock_any_held+0x6a/0x90 [ 61.014656][ T6462] ? find_held_lock+0x2b/0x80 [ 61.014672][ T6462] ? ksys_write+0x190/0x250 [ 61.014685][ T6462] ? ksys_write+0x190/0x250 [ 61.014697][ T6462] ? lock_acquire+0x1d1/0x380 [ 61.014718][ T6462] ? fput+0x7c/0x100 [ 61.014733][ T6462] ? ksys_write+0x1ac/0x250 [ 61.014747][ T6462] ? __x64_sys_bpf+0xce/0x140 [ 61.014758][ T6462] __x64_sys_bpf+0xce/0x140 [ 61.014770][ T6462] ? do_syscall_64+0xae/0x790 [ 61.014782][ T6462] do_syscall_64+0x123/0x790 [ 61.014795][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.014806][ T6462] RIP: 0033:0x7faad099e159 [ 61.014815][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.014825][ T6462] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.014837][ T6462] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 61.014844][ T6462] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 61.014850][ T6462] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 61.014857][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.014863][ T6462] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 61.014876][ T6462] [ 61.036845][ T6465] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 61.115198][ T6468] syzkaller0: entered promiscuous mode [ 61.115217][ T6468] syzkaller0: entered allmulticast mode [ 61.201403][ T6478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 61.233042][ T6488] ======================================================= [ 61.233042][ T6488] WARNING: The mand mount option has been deprecated and [ 61.233042][ T6488] and is ignored by this kernel. Remove the mand [ 61.233042][ T6488] option from the mount to silence this warning. [ 61.233042][ T6488] ======================================================= [ 61.234918][ T6488] netlink: 'syz.1.214': attribute type 2 has an invalid length. [ 61.234931][ T6488] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 61.240110][ T6491] ip_tables: iptables: counters copy to user failed while replacing table [ 61.270956][ T6493] FAULT_INJECTION: forcing a failure. [ 61.270956][ T6493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.270976][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) [ 61.270988][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.270995][ T6493] Call Trace: [ 61.270999][ T6493] [ 61.271003][ T6493] dump_stack_lvl+0x100/0x190 [ 61.271022][ T6493] should_fail_ex.cold+0x5/0xa [ 61.271038][ T6493] _copy_from_user+0x2e/0xd0 [ 61.271052][ T6493] copy_msghdr_from_user+0x9f/0x4c0 [ 61.271072][ T6493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 61.271087][ T6493] ? __lock_acquire+0x5c0/0x1f40 [ 61.271103][ T6493] ___sys_recvmsg+0xdd/0x1a0 [ 61.271115][ T6493] ? __pfx____sys_recvmsg+0x10/0x10 [ 61.271127][ T6493] ? lock_acquire+0x1d1/0x380 [ 61.271149][ T6493] do_recvmmsg+0x2f3/0x740 [ 61.271163][ T6493] ? __pfx_do_recvmmsg+0x10/0x10 [ 61.271175][ T6493] ? lock_acquire+0x1d1/0x380 [ 61.271189][ T6493] ? __mutex_unlock_slowpath+0x35d/0x930 [ 61.271204][ T6493] ? __fget_files+0x21f/0x3d0 [ 61.271222][ T6493] __x64_sys_recvmmsg+0x22a/0x280 [ 61.271239][ T6493] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 61.271260][ T6493] do_syscall_64+0x123/0x790 [ 61.271272][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.271283][ T6493] RIP: 0033:0x7ff97cd9e159 [ 61.271292][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.271302][ T6493] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 61.271314][ T6493] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 61.271320][ T6493] RDX: 0000000000000001 RSI: 0000200000007e00 RDI: 0000000000000003 [ 61.271327][ T6493] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 61.271333][ T6493] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 61.271339][ T6493] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 61.271353][ T6493] [ 61.394878][ T6499] syzkaller0: entered promiscuous mode [ 61.394892][ T6499] syzkaller0: entered allmulticast mode [ 61.492942][ T6506] syzkaller0: entered promiscuous mode [ 61.492955][ T6506] syzkaller0: entered allmulticast mode [ 61.525751][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 61.716321][ T6524] syzkaller0: entered promiscuous mode [ 61.716335][ T6524] syzkaller0: entered allmulticast mode [ 62.014335][ T6545] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 62.014350][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.019907][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 62.057595][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.208023][ T57] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.210738][ T57] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.210754][ T57] usb 7-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 62.210763][ T57] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.210782][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 62.210795][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50744, setting to 1024 [ 62.211985][ T57] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.211997][ T57] usb 7-1: Product: syz [ 62.212004][ T57] usb 7-1: Manufacturer: syz [ 62.218670][ T6528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.220744][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 62.220753][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 62.227986][ T57] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 62.227996][ T57] cdc_wdm 7-1:1.0: Unknown control protocol [ 62.257597][ T852] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 62.424507][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.424554][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.424738][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.424749][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.424932][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.424941][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.425137][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.425147][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.425329][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.425338][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.425523][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.425536][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.425720][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.425729][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.425908][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.425917][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.426088][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.426098][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.426291][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 62.426299][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 62.440044][ T57] usb 7-1: USB disconnect, device number 2 [ 62.514083][ T6557] syzkaller0: entered promiscuous mode [ 62.514096][ T6557] syzkaller0: entered allmulticast mode [ 62.543297][ T6559] FAULT_INJECTION: forcing a failure. [ 62.543297][ T6559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.543318][ T6559] CPU: 3 UID: 0 PID: 6559 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT(full) [ 62.543330][ T6559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.543336][ T6559] Call Trace: [ 62.543340][ T6559] [ 62.543344][ T6559] dump_stack_lvl+0x100/0x190 [ 62.543364][ T6559] should_fail_ex.cold+0x5/0xa [ 62.543379][ T6559] _copy_from_iter+0x1f4/0x1690 [ 62.543395][ T6559] ? __asan_memset+0x23/0x50 [ 62.543408][ T6559] ? __pfx__copy_from_iter+0x10/0x10 [ 62.543421][ T6559] ? __pfx___alloc_skb+0x10/0x10 [ 62.543441][ T6559] netlink_sendmsg+0x808/0xda0 [ 62.543458][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.543474][ T6559] ? selinux_socket_sendmsg+0x198/0x2f0 [ 62.543490][ T6559] ____sys_sendmsg+0xa4d/0xbe0 [ 62.543500][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.543515][ T6559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.543529][ T6559] ? lock_acquire+0x1d1/0x380 [ 62.543542][ T6559] ? get_pid_task+0x2a/0x250 [ 62.543558][ T6559] ___sys_sendmsg+0x190/0x1e0 [ 62.543571][ T6559] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.543583][ T6559] ? get_pid_task+0x106/0x250 [ 62.543609][ T6559] ? find_held_lock+0x2b/0x80 [ 62.543633][ T6559] __sys_sendmsg+0x160/0x210 [ 62.543649][ T6559] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.543672][ T6559] do_syscall_64+0x123/0x790 [ 62.543684][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.543696][ T6559] RIP: 0033:0x7ff97cd9e159 [ 62.543705][ T6559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.543715][ T6559] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.543726][ T6559] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 62.543733][ T6559] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 62.543740][ T6559] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 62.543746][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.543752][ T6559] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 62.543766][ T6559] [ 62.689363][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 62.761696][ T6571] syzkaller0: entered promiscuous mode [ 62.761717][ T6571] syzkaller0: entered allmulticast mode [ 62.834411][ T6549] vhci_hcd: connection reset by peer [ 62.836177][ T5811] vhci_hcd vhci_hcd.0: stop threads [ 62.836447][ T5811] vhci_hcd vhci_hcd.0: release socket [ 62.836984][ T5811] vhci_hcd vhci_hcd.0: disconnect device [ 63.034790][ T6580] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 63.086941][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.091808][ T6583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.250'. [ 63.122288][ T6587] FAULT_INJECTION: forcing a failure. [ 63.122288][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 63.122315][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 63.122334][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.122345][ T6587] Call Trace: [ 63.122352][ T6587] [ 63.122359][ T6587] dump_stack_lvl+0x100/0x190 [ 63.122390][ T6587] should_fail_ex.cold+0x5/0xa [ 63.122417][ T6587] should_failslab+0xc2/0x120 [ 63.122443][ T6587] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 63.122467][ T6587] ? sidtab_sid2str_get+0x84/0x670 [ 63.122492][ T6587] ? sidtab_sid2str_get+0x17a/0x670 [ 63.122522][ T6587] kmemdup_noprof+0x29/0x60 [ 63.122542][ T6587] sidtab_sid2str_get+0x17a/0x670 [ 63.122570][ T6587] security_sid_to_context_core+0x373/0x700 [ 63.122599][ T6587] avc_audit_post_callback+0x1aa/0x910 [ 63.122627][ T6587] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 63.122659][ T6587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 63.122684][ T6587] ? skb_put+0x138/0x180 [ 63.122705][ T6587] ? audit_log_n_string+0x2a3/0x5a0 [ 63.122732][ T6587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 63.122757][ T6587] common_lsm_audit+0x23f/0x2b0 [ 63.122782][ T6587] ? __pfx_common_lsm_audit+0x10/0x10 [ 63.122806][ T6587] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.122827][ T6587] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.122858][ T6587] slow_avc_audit+0x186/0x210 [ 63.122885][ T6587] ? __pfx_slow_avc_audit+0x10/0x10 [ 63.122930][ T6587] ? avc_denied+0x14a/0x190 [ 63.122961][ T6587] ? avc_has_perm_noaudit+0x3a2/0x470 [ 63.122992][ T6587] avc_has_perm+0x1a6/0x1e0 [ 63.123022][ T6587] ? __pfx_avc_has_perm+0x10/0x10 [ 63.123058][ T6587] sock_has_perm+0x253/0x2f0 [ 63.123079][ T6587] ? __pfx_sock_has_perm+0x10/0x10 [ 63.123107][ T6587] ? find_held_lock+0x2b/0x80 [ 63.123134][ T6587] ? get_pid_task+0xfc/0x250 [ 63.123159][ T6587] ? get_pid_task+0xfc/0x250 [ 63.123186][ T6587] security_socket_getsockopt+0x9b/0x230 [ 63.123209][ T6587] do_sock_getsockopt+0x1e3/0x6e0 [ 63.123233][ T6587] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 63.123255][ T6587] ? __fget_files+0x34/0x3d0 [ 63.123280][ T6587] ? find_held_lock+0x2b/0x80 [ 63.123314][ T6587] ? __fget_files+0x21f/0x3d0 [ 63.123343][ T6587] __sys_getsockopt+0x148/0x260 [ 63.123373][ T6587] ? __x64_sys_getsockopt+0xbd/0x160 [ 63.123397][ T6587] __x64_sys_getsockopt+0xbd/0x160 [ 63.123421][ T6587] ? do_syscall_64+0xae/0x790 [ 63.123439][ T6587] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.123458][ T6587] do_syscall_64+0x123/0x790 [ 63.123480][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.123500][ T6587] RIP: 0033:0x7f964cd9e159 [ 63.123515][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.123532][ T6587] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 63.123550][ T6587] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 63.123563][ T6587] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 63.123574][ T6587] RBP: 00007f964dd50090 R08: 0000200000000000 R09: 0000000000000000 [ 63.123585][ T6587] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 63.123597][ T6587] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 63.123623][ T6587] [ 63.123712][ T43] kauditd_printk_skb: 85 callbacks suppressed [ 63.123724][ T43] audit: type=1400 audit(1790765528.411:397): avc: denied { getopt } for pid=6584 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tsid=149 tclass=smc_socket permissive=1 [ 63.170784][ T6594] FAULT_INJECTION: forcing a failure. [ 63.170784][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 63.170805][ T6594] CPU: 3 UID: 0 PID: 6594 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT(full) [ 63.170817][ T6594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.170823][ T6594] Call Trace: [ 63.170827][ T6594] [ 63.170831][ T6594] dump_stack_lvl+0x100/0x190 [ 63.170851][ T6594] should_fail_ex.cold+0x5/0xa [ 63.170866][ T6594] ? __netlink_lookup+0x652/0x900 [ 63.170881][ T6594] should_failslab+0xc2/0x120 [ 63.170915][ T6594] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.170930][ T6594] ? skb_clone+0x190/0x400 [ 63.170947][ T6594] skb_clone+0x190/0x400 [ 63.170963][ T6594] netlink_deliver_tap+0xaed/0xcc0 [ 63.170980][ T6594] netlink_unicast+0x62b/0x850 [ 63.171002][ T6594] ? __pfx_netlink_unicast+0x10/0x10 [ 63.171015][ T6594] ? __build_skb_around+0x278/0x390 [ 63.171032][ T6594] netlink_sendmsg+0x8b0/0xda0 [ 63.171049][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.171064][ T6594] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.171080][ T6594] ____sys_sendmsg+0xa4d/0xbe0 [ 63.171091][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.171106][ T6594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.171120][ T6594] ? lock_acquire+0x1d1/0x380 [ 63.171133][ T6594] ? get_pid_task+0x2a/0x250 [ 63.171149][ T6594] ___sys_sendmsg+0x190/0x1e0 [ 63.171162][ T6594] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.171174][ T6594] ? get_pid_task+0x106/0x250 [ 63.171194][ T6594] ? find_held_lock+0x2b/0x80 [ 63.171220][ T6594] __sys_sendmsg+0x160/0x210 [ 63.171235][ T6594] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.171259][ T6594] do_syscall_64+0x123/0x790 [ 63.171273][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.171285][ T6594] RIP: 0033:0x7f964cd9e159 [ 63.171294][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.171305][ T6594] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.171316][ T6594] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 63.171323][ T6594] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 63.171330][ T6594] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 63.171336][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.171342][ T6594] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 63.171357][ T6594] [ 63.171442][ T6594] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 63.183927][ T43] audit: type=1400 audit(1790765528.471:398): avc: denied { write } for pid=6589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.191032][ T43] audit: type=1400 audit(1790765528.481:399): avc: denied { prog_load } for pid=6574 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.241130][ T43] audit: type=1400 audit(1790765528.531:400): avc: denied { write } for pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.245728][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 63.283547][ T6603] FAULT_INJECTION: forcing a failure. [ 63.283547][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 63.283575][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT(full) [ 63.283589][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.283596][ T6603] Call Trace: [ 63.283600][ T6603] [ 63.283604][ T6603] dump_stack_lvl+0x100/0x190 [ 63.283625][ T6603] should_fail_ex.cold+0x5/0xa [ 63.283645][ T6603] should_failslab+0xc2/0x120 [ 63.283668][ T6603] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.283689][ T6603] ? skb_clone+0x190/0x400 [ 63.283716][ T6603] skb_clone+0x190/0x400 [ 63.283739][ T6603] nfnetlink_rcv_batch+0x1c8/0x2880 [ 63.283767][ T6603] ? kmem_cache_free+0x127/0x6c0 [ 63.283788][ T6603] ? __lock_acquire+0x5c0/0x1f40 [ 63.283811][ T6603] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 63.283836][ T6603] ? lock_acquire+0x1d1/0x380 [ 63.283849][ T6603] ? avc_has_perm_noaudit+0x56/0x470 [ 63.283872][ T6603] ? avc_has_perm_noaudit+0x145/0x470 [ 63.283890][ T6603] ? __asan_memset+0x23/0x50 [ 63.283902][ T6603] ? __nla_validate_parse+0x1e7/0x28b0 [ 63.283917][ T6603] ? __pfx___nla_validate_parse+0x10/0x10 [ 63.283929][ T6603] ? rcu_is_watching+0x13/0xc0 [ 63.283944][ T6603] ? cap_capable+0x107/0x430 [ 63.283958][ T6603] ? __nla_parse+0x40/0x60 [ 63.283971][ T6603] nfnetlink_rcv+0x3bd/0x440 [ 63.283988][ T6603] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 63.284009][ T6603] netlink_unicast+0x585/0x850 [ 63.284025][ T6603] ? __pfx_netlink_unicast+0x10/0x10 [ 63.284039][ T6603] ? __pfx_sock_has_perm+0x10/0x10 [ 63.284054][ T6603] netlink_sendmsg+0x8b0/0xda0 [ 63.284070][ T6603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.284086][ T6603] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.284101][ T6603] ____sys_sendmsg+0xa4d/0xbe0 [ 63.284112][ T6603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.284127][ T6603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.284141][ T6603] ? lock_acquire+0x1d1/0x380 [ 63.284158][ T6603] ? get_pid_task+0x2a/0x250 [ 63.284175][ T6603] ___sys_sendmsg+0x190/0x1e0 [ 63.284187][ T6603] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.284199][ T6603] ? get_pid_task+0x106/0x250 [ 63.284220][ T6603] ? find_held_lock+0x2b/0x80 [ 63.284244][ T6603] __sys_sendmsg+0x160/0x210 [ 63.284260][ T6603] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.284282][ T6603] do_syscall_64+0x123/0x790 [ 63.284296][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.284308][ T6603] RIP: 0033:0x7f964cd9e159 [ 63.284317][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.284327][ T6603] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.284339][ T6603] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 63.284346][ T6603] RDX: 000000002000c0c2 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.284352][ T6603] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 63.284359][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.284365][ T6603] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 63.284379][ T6603] [ 63.389078][ T43] audit: type=1400 audit(1790765528.681:401): avc: denied { write } for pid=6608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.450919][ T43] audit: type=1400 audit(1790765528.741:402): avc: denied { write } for pid=6613 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.519574][ T6621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.262'. [ 63.562188][ T6624] syzkaller0: entered promiscuous mode [ 63.562202][ T6624] syzkaller0: entered allmulticast mode [ 63.567602][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.581217][ T6622] kvm: MONITOR instruction emulated as NOP! [ 63.596292][ T43] audit: type=1400 audit(1790765528.881:403): avc: denied { read write } for pid=6620 comm="syz.0.263" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.596508][ T43] audit: type=1400 audit(1790765528.881:404): avc: denied { open } for pid=6620 comm="syz.0.263" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.596832][ T43] audit: type=1400 audit(1790765528.881:405): avc: denied { ioctl } for pid=6620 comm="syz.0.263" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.606886][ T43] audit: type=1400 audit(1790765528.891:406): avc: denied { write } for pid=6620 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.704574][ T6628] syzkaller0: entered promiscuous mode [ 63.704589][ T6628] syzkaller0: entered allmulticast mode [ 63.706449][ T6628] 0: reclassify loop, rule prio 0, protocol 800 [ 63.718204][ T5819] usb 7-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 63.719105][ T5819] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.719117][ T5819] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 63.722611][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.722632][ T5819] usb 7-1: Product: syz [ 63.722644][ T5819] usb 7-1: Manufacturer: syz [ 63.722657][ T5819] usb 7-1: SerialNumber: syz [ 63.744017][ T6630] syzkaller0: entered promiscuous mode [ 63.744031][ T6630] syzkaller0: entered allmulticast mode [ 63.849254][ T6634] syzkaller0: entered promiscuous mode [ 63.849274][ T6634] syzkaller0: entered allmulticast mode [ 63.866459][ T6636] syzkaller0: entered promiscuous mode [ 63.866472][ T6636] syzkaller0: entered allmulticast mode [ 63.869470][ T6636] 0: reclassify loop, rule prio 0, protocol 800 [ 63.942237][ T6607] jffs2: notice: (6607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.974610][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6646 comm=syz.3.273 [ 63.974856][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 63.979307][ T6646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6646 comm=syz.3.273 [ 64.076457][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.076680][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.393341][ T6677] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.084171][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 65.187188][ T6697] binder: 6695:6697 ioctl c0207511 200000000180 returned -22 [ 65.199730][ T6697] xt_IDLETIMER: label is empty or not nul-terminated [ 65.246599][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.324881][ T6711] FAULT_INJECTION: forcing a failure. [ 65.324881][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.324911][ T6711] CPU: 2 UID: 0 PID: 6711 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 65.324963][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.324975][ T6711] Call Trace: [ 65.324981][ T6711] [ 65.324989][ T6711] dump_stack_lvl+0x100/0x190 [ 65.325021][ T6711] should_fail_ex.cold+0x5/0xa [ 65.325047][ T6711] _copy_from_iter+0x1f4/0x1690 [ 65.325076][ T6711] ? __pfx__copy_from_iter+0x10/0x10 [ 65.325099][ T6711] ? _copy_from_iter+0x270/0x1690 [ 65.325126][ T6711] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 65.325153][ T6711] skb_copy_datagram_from_iter+0x11f/0x720 [ 65.325178][ T6711] ? _kstrtoull+0x144/0x200 [ 65.325203][ T6711] ? iov_iter_advance+0xac/0x6d0 [ 65.325223][ T6711] ? __pfx__kstrtoull+0x10/0x10 [ 65.325252][ T6711] tun_get_user+0x1866/0x3cc0 [ 65.325286][ T6711] ? __lock_acquire+0x5c0/0x1f40 [ 65.325308][ T6711] ? __pfx_tun_get_user+0x10/0x10 [ 65.325333][ T6711] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 65.325369][ T6711] ? find_held_lock+0x2b/0x80 [ 65.325395][ T6711] ? tun_get+0x191/0x370 [ 65.325436][ T6711] ? tun_get+0x191/0x370 [ 65.325465][ T6711] tun_chr_write_iter+0xdc/0x200 [ 65.325492][ T6711] vfs_write+0x6af/0x1050 [ 65.325513][ T6711] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 65.325540][ T6711] ? __pfx_vfs_write+0x10/0x10 [ 65.325558][ T6711] ? find_held_lock+0x2b/0x80 [ 65.325600][ T6711] ksys_write+0x12a/0x250 [ 65.325621][ T6711] ? __pfx_ksys_write+0x10/0x10 [ 65.325648][ T6711] do_syscall_64+0x123/0x790 [ 65.325671][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.325690][ T6711] RIP: 0033:0x7fe4a2b9e159 [ 65.325706][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.325723][ T6711] RSP: 002b:00007fe4a3b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.325742][ T6711] RAX: ffffffffffffffda RBX: 00007fe4a2e25fa0 RCX: 00007fe4a2b9e159 [ 65.325754][ T6711] RDX: 0000000000000fb5 RSI: 0000200000002780 RDI: 0000000000000004 [ 65.325765][ T6711] RBP: 00007fe4a3b44090 R08: 0000000000000000 R09: 0000000000000000 [ 65.325776][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.325787][ T6711] R13: 00007fe4a2e26038 R14: 00007fe4a2e25fa0 R15: 00007fffd2c13248 [ 65.325812][ T6711] [ 65.498268][ T6714] syzkaller0: entered promiscuous mode [ 65.498288][ T6714] syzkaller0: entered allmulticast mode [ 65.623793][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 65.623821][ T6722] FAULT_INJECTION: forcing a failure. [ 65.623821][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 65.623836][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 65.623849][ T6722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.623855][ T6722] Call Trace: [ 65.623859][ T6722] [ 65.623864][ T6722] dump_stack_lvl+0x100/0x190 [ 65.623884][ T6722] should_fail_ex.cold+0x5/0xa [ 65.623899][ T6722] should_failslab+0xc2/0x120 [ 65.623915][ T6722] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 65.623930][ T6722] ? __alloc_skb+0x140/0x710 [ 65.623947][ T6722] __alloc_skb+0x140/0x710 [ 65.623960][ T6722] ? __alloc_skb+0x5b7/0x710 [ 65.623974][ T6722] ? __pfx___alloc_skb+0x10/0x10 [ 65.623993][ T6722] netlink_ack+0x117/0xb80 [ 65.624006][ T6722] ? rcu_is_watching+0x13/0xc0 [ 65.624022][ T6722] ? trace_contention_end+0x126/0x160 [ 65.624045][ T6722] netlink_rcv_skb+0x333/0x420 [ 65.624060][ T6722] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 65.624075][ T6722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.624095][ T6722] ? netlink_deliver_tap+0x1ae/0xcc0 [ 65.624111][ T6722] crypto_netlink_rcv+0x2a/0x40 [ 65.624137][ T6722] netlink_unicast+0x585/0x850 [ 65.624153][ T6722] ? __pfx_netlink_unicast+0x10/0x10 [ 65.624172][ T6722] netlink_sendmsg+0x8b0/0xda0 [ 65.624188][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.624204][ T6722] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.624220][ T6722] ____sys_sendmsg+0xa4d/0xbe0 [ 65.624231][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.624246][ T6722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.624261][ T6722] ? lock_acquire+0x1d1/0x380 [ 65.624273][ T6722] ? get_pid_task+0x2a/0x250 [ 65.624290][ T6722] ___sys_sendmsg+0x190/0x1e0 [ 65.624303][ T6722] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.624315][ T6722] ? get_pid_task+0x106/0x250 [ 65.624335][ T6722] ? find_held_lock+0x2b/0x80 [ 65.624361][ T6722] __sys_sendmsg+0x160/0x210 [ 65.624376][ T6722] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.624399][ T6722] do_syscall_64+0x123/0x790 [ 65.624412][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.624424][ T6722] RIP: 0033:0x7faad099e159 [ 65.624433][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.624444][ T6722] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.624455][ T6722] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 65.624462][ T6722] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 65.624469][ T6722] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 65.624475][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.624482][ T6722] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 65.624496][ T6722] [ 65.666871][ T6724] tipc: Enabled bearer , priority 0 [ 65.667233][ T6724] syzkaller0: entered promiscuous mode [ 65.667245][ T6724] syzkaller0: entered allmulticast mode [ 65.688832][ T6724] syzkaller0: MTU too low for tipc bearer [ 65.688845][ T6724] tipc: Disabling bearer [ 65.788697][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 65.817750][ T6731] FAULT_INJECTION: forcing a failure. [ 65.817750][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.817780][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 65.817800][ T6731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.817811][ T6731] Call Trace: [ 65.817817][ T6731] [ 65.817824][ T6731] dump_stack_lvl+0x100/0x190 [ 65.817855][ T6731] should_fail_ex.cold+0x5/0xa [ 65.817881][ T6731] _copy_to_user+0x32/0xd0 [ 65.817907][ T6731] simple_read_from_buffer+0xcb/0x170 [ 65.817934][ T6731] proc_fail_nth_read+0x1af/0x230 [ 65.817960][ T6731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.817986][ T6731] ? rw_verify_area+0xce/0x6d0 [ 65.818004][ T6731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.818027][ T6731] vfs_read+0x1e4/0xb40 [ 65.818048][ T6731] ? lock_acquire+0x1d1/0x380 [ 65.818066][ T6731] ? __fget_files+0x34/0x3d0 [ 65.818090][ T6731] ? __pfx_vfs_read+0x10/0x10 [ 65.818107][ T6731] ? find_held_lock+0x2b/0x80 [ 65.818133][ T6731] ? __fget_files+0x215/0x3d0 [ 65.818161][ T6731] ? __fget_files+0x21f/0x3d0 [ 65.818210][ T6731] ksys_read+0x12a/0x250 [ 65.818229][ T6731] ? __pfx_ksys_read+0x10/0x10 [ 65.818256][ T6731] do_syscall_64+0x123/0x790 [ 65.818278][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.818297][ T6731] RIP: 0033:0x7fe4a2b5e98e [ 65.818313][ T6731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.818330][ T6731] RSP: 002b:00007fe4a3b43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.818348][ T6731] RAX: ffffffffffffffda RBX: 00007fe4a3b446c0 RCX: 00007fe4a2b5e98e [ 65.818360][ T6731] RDX: 000000000000000f RSI: 00007fe4a3b440a0 RDI: 0000000000000004 [ 65.818371][ T6731] RBP: 00007fe4a3b44090 R08: 0000000000000000 R09: 0000000000000000 [ 65.818382][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.818393][ T6731] R13: 00007fe4a2e26038 R14: 00007fe4a2e25fa0 R15: 00007fffd2c13248 [ 65.818419][ T6731] [ 65.834924][ T6732] tun0: tun_chr_ioctl cmd 1074025675 [ 65.834938][ T6732] tun0: persist enabled [ 65.835083][ T6732] tun0: tun_chr_ioctl cmd 1074025678 [ 65.835091][ T6732] tun0: group set to 0 [ 65.835174][ T6732] tun0: tun_chr_ioctl cmd 1074025675 [ 65.835181][ T6732] tun0: persist disabled [ 65.933784][ T6736] xt_hashlimit: size too large, truncated to 1048576 [ 66.349485][ T5819] usb 7-1: USB disconnect, device number 3 [ 66.362334][ T6741] FAULT_INJECTION: forcing a failure. [ 66.362334][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 66.362364][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT(full) [ 66.362384][ T6741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.362394][ T6741] Call Trace: [ 66.362400][ T6741] [ 66.362407][ T6741] dump_stack_lvl+0x100/0x190 [ 66.362438][ T6741] should_fail_ex.cold+0x5/0xa [ 66.362462][ T6741] should_failslab+0xc2/0x120 [ 66.362486][ T6741] __kmalloc_noprof+0xfc/0x840 [ 66.362515][ T6741] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 66.362547][ T6741] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 66.362580][ T6741] genl_family_rcv_msg_doit+0xc7/0x300 [ 66.362605][ T6741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 66.362636][ T6741] ? bpf_lsm_capable+0x9/0x10 [ 66.362653][ T6741] ? security_capable+0x80/0x260 [ 66.362676][ T6741] genl_rcv_msg+0x560/0x800 [ 66.362704][ T6741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.362729][ T6741] ? __lock_acquire+0x5c0/0x1f40 [ 66.362748][ T6741] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 66.362770][ T6741] ? __pfx_nl802154_set_channel+0x10/0x10 [ 66.362786][ T6741] ? __pfx_nl802154_post_doit+0x10/0x10 [ 66.362801][ T6741] ? __lock_acquire+0x5c0/0x1f40 [ 66.362817][ T6741] netlink_rcv_skb+0x159/0x420 [ 66.362831][ T6741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.362848][ T6741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.362886][ T6741] ? netlink_deliver_tap+0x1ae/0xcc0 [ 66.362902][ T6741] genl_rcv+0x28/0x40 [ 66.362916][ T6741] netlink_unicast+0x585/0x850 [ 66.362932][ T6741] ? __pfx_netlink_unicast+0x10/0x10 [ 66.362951][ T6741] netlink_sendmsg+0x8b0/0xda0 [ 66.362968][ T6741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.362984][ T6741] ? selinux_socket_sendmsg+0x198/0x2f0 [ 66.363000][ T6741] ____sys_sendmsg+0xa4d/0xbe0 [ 66.363013][ T6741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.363029][ T6741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.363044][ T6741] ? lock_acquire+0x1d1/0x380 [ 66.363056][ T6741] ? get_pid_task+0x2a/0x250 [ 66.363073][ T6741] ___sys_sendmsg+0x190/0x1e0 [ 66.363087][ T6741] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.363099][ T6741] ? get_pid_task+0x106/0x250 [ 66.363119][ T6741] ? find_held_lock+0x2b/0x80 [ 66.363145][ T6741] __sys_sendmsg+0x160/0x210 [ 66.363161][ T6741] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.363184][ T6741] do_syscall_64+0x123/0x790 [ 66.363197][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.363209][ T6741] RIP: 0033:0x7ff97cd9e159 [ 66.363219][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.363229][ T6741] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.363241][ T6741] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 66.363248][ T6741] RDX: 0000000000006010 RSI: 0000200000000100 RDI: 0000000000000005 [ 66.363255][ T6741] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 66.363262][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.363268][ T6741] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 66.363283][ T6741] [ 66.394373][ T6744] syzkaller0: entered promiscuous mode [ 66.394386][ T6744] syzkaller0: entered allmulticast mode [ 66.851322][ T6778] FAULT_INJECTION: forcing a failure. [ 66.851322][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.851343][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.2.319 Not tainted syzkaller #0 PREEMPT(full) [ 66.851355][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.851362][ T6778] Call Trace: [ 66.851366][ T6778] [ 66.851370][ T6778] dump_stack_lvl+0x100/0x190 [ 66.851391][ T6778] should_fail_ex.cold+0x5/0xa [ 66.851407][ T6778] _copy_to_user+0x32/0xd0 [ 66.851422][ T6778] simple_read_from_buffer+0xcb/0x170 [ 66.851439][ T6778] proc_fail_nth_read+0x1af/0x230 [ 66.851456][ T6778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.851479][ T6778] ? rw_verify_area+0xce/0x6d0 [ 66.851491][ T6778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.851507][ T6778] vfs_read+0x1e4/0xb40 [ 66.851520][ T6778] ? lock_acquire+0x1d1/0x380 [ 66.851533][ T6778] ? __fget_files+0x34/0x3d0 [ 66.851564][ T6778] ? __pfx_vfs_read+0x10/0x10 [ 66.851576][ T6778] ? find_held_lock+0x2b/0x80 [ 66.851592][ T6778] ? __fget_files+0x215/0x3d0 [ 66.851609][ T6778] ? __fget_files+0x21f/0x3d0 [ 66.851627][ T6778] ksys_read+0x12a/0x250 [ 66.851639][ T6778] ? __pfx_ksys_read+0x10/0x10 [ 66.851656][ T6778] do_syscall_64+0x123/0x790 [ 66.851669][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.851681][ T6778] RIP: 0033:0x7f964cd5e98e [ 66.851690][ T6778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.851701][ T6778] RSP: 002b:00007f964dd4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.851713][ T6778] RAX: ffffffffffffffda RBX: 00007f964dd506c0 RCX: 00007f964cd5e98e [ 66.851720][ T6778] RDX: 000000000000000f RSI: 00007f964dd500a0 RDI: 0000000000000004 [ 66.851727][ T6778] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 66.851733][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.851739][ T6778] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 66.851754][ T6778] [ 67.047766][ T6785] syzkaller1: entered promiscuous mode [ 67.047786][ T6785] syzkaller1: entered allmulticast mode [ 67.132175][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 67.318595][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 67.347677][ T852] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 67.496692][ T6797] syzkaller0: entered promiscuous mode [ 67.496711][ T6797] syzkaller0: entered allmulticast mode [ 67.640200][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 67.764724][ T6801] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 67.971882][ T6811] netlink: 'syz.0.332': attribute type 12 has an invalid length. [ 67.972252][ T6811] netlink: 'syz.0.332': attribute type 12 has an invalid length. [ 67.972466][ T6811] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 67.972942][ T6811] syz_tun: entered promiscuous mode [ 67.977005][ T6811] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.014938][ T6818] FAULT_INJECTION: forcing a failure. [ 68.014938][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 68.014966][ T6818] CPU: 3 UID: 0 PID: 6818 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 68.014985][ T6818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.014995][ T6818] Call Trace: [ 68.015001][ T6818] [ 68.015007][ T6818] dump_stack_lvl+0x100/0x190 [ 68.015037][ T6818] should_fail_ex.cold+0x5/0xa [ 68.015056][ T6818] ? __netlink_lookup+0x652/0x900 [ 68.015079][ T6818] should_failslab+0xc2/0x120 [ 68.015101][ T6818] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.015122][ T6818] ? skb_clone+0x190/0x400 [ 68.015148][ T6818] skb_clone+0x190/0x400 [ 68.015171][ T6818] netlink_deliver_tap+0xaed/0xcc0 [ 68.015196][ T6818] netlink_unicast+0x62b/0x850 [ 68.015221][ T6818] ? __pfx_netlink_unicast+0x10/0x10 [ 68.015248][ T6818] netlink_sendmsg+0x8b0/0xda0 [ 68.015277][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.015301][ T6818] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.015326][ T6818] ____sys_sendmsg+0xa4d/0xbe0 [ 68.015340][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.015364][ T6818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.015386][ T6818] ? lock_acquire+0x1d1/0x380 [ 68.015404][ T6818] ? get_pid_task+0x2a/0x250 [ 68.015429][ T6818] ___sys_sendmsg+0x190/0x1e0 [ 68.015449][ T6818] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.015467][ T6818] ? get_pid_task+0x106/0x250 [ 68.015498][ T6818] ? find_held_lock+0x2b/0x80 [ 68.015541][ T6818] __sys_sendmsg+0x160/0x210 [ 68.015564][ T6818] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.015599][ T6818] do_syscall_64+0x123/0x790 [ 68.015620][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.015637][ T6818] RIP: 0033:0x7f964cd9e159 [ 68.015651][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.015666][ T6818] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.015683][ T6818] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 68.015694][ T6818] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 68.015705][ T6818] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 68.015715][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.015725][ T6818] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 68.015748][ T6818] [ 68.053711][ T6821] FAULT_INJECTION: forcing a failure. [ 68.053711][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.053733][ T6821] CPU: 3 UID: 0 PID: 6821 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 68.053746][ T6821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.053753][ T6821] Call Trace: [ 68.053758][ T6821] [ 68.053762][ T6821] dump_stack_lvl+0x100/0x190 [ 68.053783][ T6821] should_fail_ex.cold+0x5/0xa [ 68.053801][ T6821] _copy_from_user+0x2e/0xd0 [ 68.053817][ T6821] bpf_prog_test_run_xdp+0x128d/0x1670 [ 68.053838][ T6821] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.053858][ T6821] ? fput+0x7c/0x100 [ 68.053874][ T6821] ? __bpf_prog_get+0x97/0x290 [ 68.053892][ T6821] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.053907][ T6821] __sys_bpf+0x2265/0x4a30 [ 68.053924][ T6821] ? __pfx___sys_bpf+0x10/0x10 [ 68.053937][ T6821] ? find_held_lock+0x2b/0x80 [ 68.053954][ T6821] ? get_pid_task+0xfc/0x250 [ 68.053971][ T6821] ? get_pid_task+0xfc/0x250 [ 68.053994][ T6821] ? find_held_lock+0x2b/0x80 [ 68.054016][ T6821] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.054035][ T6821] ? find_held_lock+0x2b/0x80 [ 68.054052][ T6821] ? ksys_write+0x190/0x250 [ 68.054066][ T6821] ? ksys_write+0x190/0x250 [ 68.054079][ T6821] ? lock_acquire+0x1d1/0x380 [ 68.054102][ T6821] ? fput+0x7c/0x100 [ 68.054119][ T6821] ? ksys_write+0x1ac/0x250 [ 68.054134][ T6821] ? __x64_sys_bpf+0xce/0x140 [ 68.054146][ T6821] __x64_sys_bpf+0xce/0x140 [ 68.054160][ T6821] ? do_syscall_64+0xae/0x790 [ 68.054173][ T6821] do_syscall_64+0x123/0x790 [ 68.054186][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.054198][ T6821] RIP: 0033:0x7f964cd9e159 [ 68.054209][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.054220][ T6821] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.054232][ T6821] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 68.054240][ T6821] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 68.054247][ T6821] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 68.054254][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.054261][ T6821] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 68.054276][ T6821] [ 68.099762][ T6831] FAULT_INJECTION: forcing a failure. [ 68.099762][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 68.099782][ T6831] CPU: 2 UID: 0 PID: 6831 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 68.099795][ T6831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.099801][ T6831] Call Trace: [ 68.099805][ T6831] [ 68.099809][ T6831] dump_stack_lvl+0x100/0x190 [ 68.099829][ T6831] should_fail_ex.cold+0x5/0xa [ 68.099845][ T6831] should_failslab+0xc2/0x120 [ 68.099861][ T6831] __kmalloc_noprof+0xfc/0x840 [ 68.099875][ T6831] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 68.099896][ T6831] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 68.099928][ T6831] genl_family_rcv_msg_doit+0xc7/0x300 [ 68.099947][ T6831] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 68.099964][ T6831] ? genl_get_cmd+0x3e7/0x760 [ 68.099983][ T6831] ? netlink_sendmsg+0x680/0xda0 [ 68.099996][ T6831] ? ____sys_sendmsg+0xa4d/0xbe0 [ 68.100007][ T6831] ? __radix_tree_lookup+0x217/0x2b0 [ 68.100028][ T6831] genl_rcv_msg+0x560/0x800 [ 68.100046][ T6831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.100062][ T6831] ? __lock_acquire+0x5c0/0x1f40 [ 68.100074][ T6831] ? __pfx_netlbl_mgmt_listdef+0x10/0x10 [ 68.100088][ T6831] ? __lock_acquire+0x5c0/0x1f40 [ 68.100107][ T6831] netlink_rcv_skb+0x159/0x420 [ 68.100121][ T6831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.100138][ T6831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.100159][ T6831] ? netlink_deliver_tap+0x1ae/0xcc0 [ 68.100174][ T6831] genl_rcv+0x28/0x40 [ 68.100189][ T6831] netlink_unicast+0x585/0x850 [ 68.100206][ T6831] ? __pfx_netlink_unicast+0x10/0x10 [ 68.100220][ T6831] ? __pfx_sock_has_perm+0x10/0x10 [ 68.100235][ T6831] netlink_sendmsg+0x8b0/0xda0 [ 68.100252][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.100268][ T6831] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.100284][ T6831] ____sys_sendmsg+0xa4d/0xbe0 [ 68.100294][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.100309][ T6831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.100324][ T6831] ? lock_acquire+0x1d1/0x380 [ 68.100336][ T6831] ? get_pid_task+0x2a/0x250 [ 68.100353][ T6831] ___sys_sendmsg+0x190/0x1e0 [ 68.100366][ T6831] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.100378][ T6831] ? get_pid_task+0x106/0x250 [ 68.100398][ T6831] ? find_held_lock+0x2b/0x80 [ 68.100424][ T6831] __sys_sendmsg+0x160/0x210 [ 68.100440][ T6831] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.100464][ T6831] do_syscall_64+0x123/0x790 [ 68.100477][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.100488][ T6831] RIP: 0033:0x7f964cd9e159 [ 68.100498][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.100508][ T6831] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.100520][ T6831] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 68.100527][ T6831] RDX: 0000000000004004 RSI: 0000200000000280 RDI: 0000000000000004 [ 68.100534][ T6831] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 68.100540][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.100546][ T6831] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 68.100561][ T6831] [ 68.170939][ T6839] FAULT_INJECTION: forcing a failure. [ 68.170939][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.170964][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT(full) [ 68.170983][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.170993][ T6839] Call Trace: [ 68.170999][ T6839] [ 68.171007][ T6839] dump_stack_lvl+0x100/0x190 [ 68.171049][ T6839] should_fail_ex.cold+0x5/0xa [ 68.171075][ T6839] _copy_to_user+0x32/0xd0 [ 68.171097][ T6839] simple_read_from_buffer+0xcb/0x170 [ 68.171133][ T6839] proc_fail_nth_read+0x1af/0x230 [ 68.171157][ T6839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.171181][ T6839] ? rw_verify_area+0xce/0x6d0 [ 68.171198][ T6839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.171219][ T6839] vfs_read+0x1e4/0xb40 [ 68.171239][ T6839] ? lock_acquire+0x1d1/0x380 [ 68.171257][ T6839] ? __fget_files+0x34/0x3d0 [ 68.171279][ T6839] ? __pfx_vfs_read+0x10/0x10 [ 68.171295][ T6839] ? find_held_lock+0x2b/0x80 [ 68.171320][ T6839] ? __fget_files+0x215/0x3d0 [ 68.171342][ T6839] ? __fget_files+0x21f/0x3d0 [ 68.171361][ T6839] ksys_read+0x12a/0x250 [ 68.171373][ T6839] ? __pfx_ksys_read+0x10/0x10 [ 68.171390][ T6839] do_syscall_64+0x123/0x790 [ 68.171404][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.171415][ T6839] RIP: 0033:0x7fe4a2b5e98e [ 68.171425][ T6839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.171435][ T6839] RSP: 002b:00007fe4a3b43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.171447][ T6839] RAX: ffffffffffffffda RBX: 00007fe4a3b446c0 RCX: 00007fe4a2b5e98e [ 68.171454][ T6839] RDX: 000000000000000f RSI: 00007fe4a3b440a0 RDI: 0000000000000004 [ 68.171461][ T6839] RBP: 00007fe4a3b44090 R08: 0000000000000000 R09: 0000000000000000 [ 68.171467][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.171473][ T6839] R13: 00007fe4a2e26038 R14: 00007fe4a2e25fa0 R15: 00007fffd2c13248 [ 68.171488][ T6839] [ 68.349047][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 68.349063][ T43] audit: type=1400 audit(1790765533.641:436): avc: denied { accept } for pid=6850 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.381368][ T6853] syzkaller0: entered promiscuous mode [ 68.381390][ T6853] syzkaller0: entered allmulticast mode [ 69.333119][ T6866] netlink: 'syz.2.352': attribute type 16 has an invalid length. [ 69.333142][ T6866] netlink: 'syz.2.352': attribute type 17 has an invalid length. [ 69.445278][ T43] audit: type=1400 audit(1790765534.731:437): avc: denied { read write } for pid=6872 comm="syz.0.355" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.445523][ T43] audit: type=1400 audit(1790765534.731:438): avc: denied { open } for pid=6872 comm="syz.0.355" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.445836][ T43] audit: type=1400 audit(1790765534.731:439): avc: denied { ioctl } for pid=6872 comm="syz.0.355" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.484026][ T6880] input: syz0 as /devices/virtual/input/input5 [ 69.499573][ T43] audit: type=1400 audit(1790765534.791:440): avc: denied { read } for pid=5127 comm="acpid" name="event4" dev="devtmpfs" ino=2856 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.499605][ T43] audit: type=1400 audit(1790765534.791:441): avc: denied { open } for pid=5127 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2856 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.499625][ T43] audit: type=1400 audit(1790765534.791:442): avc: denied { ioctl } for pid=5127 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2856 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.572075][ T43] audit: type=1400 audit(1790765534.861:443): avc: denied { read } for pid=6892 comm="syz.2.357" name="error_log" dev="tracefs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.572228][ T43] audit: type=1400 audit(1790765534.861:444): avc: denied { ioctl } for pid=6892 comm="syz.2.357" path="/124/trace/error_log" dev="tracefs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.572800][ T43] audit: type=1400 audit(1790765534.861:445): avc: denied { write } for pid=6892 comm="syz.2.357" path="/124/trace/error_log" dev="tracefs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.706074][ T6874] cgroup: fork rejected by pids controller in /syz0 [ 69.804350][ T6919] __nla_validate_parse: 6 callbacks suppressed [ 69.804368][ T6919] netlink: 144 bytes leftover after parsing attributes in process `syz.1.359'. [ 69.809557][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 69.858262][ T6922] FAULT_INJECTION: forcing a failure. [ 69.858262][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.858283][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT(full) [ 69.858295][ T6922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.858302][ T6922] Call Trace: [ 69.858306][ T6922] [ 69.858311][ T6922] dump_stack_lvl+0x100/0x190 [ 69.858331][ T6922] should_fail_ex.cold+0x5/0xa [ 69.858347][ T6922] _copy_to_user+0x32/0xd0 [ 69.858363][ T6922] simple_read_from_buffer+0xcb/0x170 [ 69.858380][ T6922] proc_fail_nth_read+0x1af/0x230 [ 69.858396][ T6922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.858412][ T6922] ? rw_verify_area+0xce/0x6d0 [ 69.858423][ T6922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.858438][ T6922] vfs_read+0x1e4/0xb40 [ 69.858451][ T6922] ? lock_acquire+0x1d1/0x380 [ 69.858464][ T6922] ? __fget_files+0x34/0x3d0 [ 69.858478][ T6922] ? __pfx_vfs_read+0x10/0x10 [ 69.858489][ T6922] ? find_held_lock+0x2b/0x80 [ 69.858506][ T6922] ? __fget_files+0x215/0x3d0 [ 69.858523][ T6922] ? __fget_files+0x21f/0x3d0 [ 69.858542][ T6922] ksys_read+0x12a/0x250 [ 69.858554][ T6922] ? __pfx_ksys_read+0x10/0x10 [ 69.858571][ T6922] do_syscall_64+0x123/0x790 [ 69.858584][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.858595][ T6922] RIP: 0033:0x7faad095e98e [ 69.858605][ T6922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.858615][ T6922] RSP: 002b:00007faad18fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.858626][ T6922] RAX: ffffffffffffffda RBX: 00007faad19006c0 RCX: 00007faad095e98e [ 69.858634][ T6922] RDX: 000000000000000f RSI: 00007faad19000a0 RDI: 0000000000000004 [ 69.858640][ T6922] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 69.858647][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.858653][ T6922] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 69.858668][ T6922] [ 69.938644][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 70.878997][ T6973] FAULT_INJECTION: forcing a failure. [ 70.878997][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 70.879025][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 70.879045][ T6973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.879056][ T6973] Call Trace: [ 70.879063][ T6973] [ 70.879069][ T6973] dump_stack_lvl+0x100/0x190 [ 70.879102][ T6973] should_fail_ex.cold+0x5/0xa [ 70.879126][ T6973] should_failslab+0xc2/0x120 [ 70.879153][ T6973] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.879176][ T6973] ? mas_preallocate+0xc22/0xee0 [ 70.879199][ T6973] mas_preallocate+0xc22/0xee0 [ 70.879218][ T6973] ? __pfx_mas_preallocate+0x10/0x10 [ 70.879247][ T6973] ? anon_vma_name+0x5a/0x250 [ 70.879278][ T6973] __split_vma+0x2f8/0x1de0 [ 70.879300][ T6973] ? __lock_acquire+0x5c0/0x1f40 [ 70.879322][ T6973] ? __pfx___split_vma+0x10/0x10 [ 70.879346][ T6973] ? lock_acquire+0x1d1/0x380 [ 70.879366][ T6973] ? is_bpf_text_address+0x25/0x1a0 [ 70.879395][ T6973] vms_gather_munmap_vmas+0x1d2/0x1720 [ 70.879420][ T6973] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 70.879438][ T6973] ? mtree_range_walk+0x72b/0xb70 [ 70.879476][ T6973] ? mas_walk+0x260/0x310 [ 70.879519][ T6973] __mmap_region+0x4cc/0x32e0 [ 70.879539][ T6973] ? find_held_lock+0x2b/0x80 [ 70.879565][ T6973] ? ima_match_policy+0x8b8/0x23e0 [ 70.879591][ T6973] ? __pfx___mmap_region+0x10/0x10 [ 70.879608][ T6973] ? __lock_acquire+0x5c0/0x1f40 [ 70.879641][ T6973] ? process_measurement+0x1567/0x2350 [ 70.879662][ T6973] ? __pfx___might_resched+0x10/0x10 [ 70.879682][ T6973] ? find_held_lock+0x2b/0x80 [ 70.879707][ T6973] ? process_measurement+0x4c8/0x2350 [ 70.879729][ T6973] ? process_measurement+0x4c8/0x2350 [ 70.879749][ T6973] ? down_write+0x146/0x1f0 [ 70.879779][ T6973] ? __lock_acquire+0x5c0/0x1f40 [ 70.879806][ T6973] ? __lock_acquire+0x5c0/0x1f40 [ 70.879872][ T6973] mmap_region+0x5a8/0x6d0 [ 70.879896][ T6973] ? __pfx_mmap_region+0x10/0x10 [ 70.879914][ T6973] ? shmem_mapping+0xd/0x50 [ 70.879935][ T6973] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 70.879964][ T6973] ? bpf_lsm_mmap_addr+0x9/0x30 [ 70.879988][ T6973] ? security_mmap_addr+0x71/0x1e0 [ 70.880012][ T6973] ? __get_unmapped_area+0x255/0x3e0 [ 70.880039][ T6973] do_mmap+0x12c7/0x1c30 [ 70.880067][ T6973] ? lock_acquire+0x1d1/0x380 [ 70.880087][ T6973] ? __pfx_do_mmap+0x10/0x10 [ 70.880111][ T6973] ? __pfx___might_resched+0x10/0x10 [ 70.880128][ T6973] ? ima_file_mmap+0x1bb/0x1e0 [ 70.880157][ T6973] ? __pfx_down_write_killable+0x10/0x10 [ 70.880176][ T6973] ? find_held_lock+0x2b/0x80 [ 70.880206][ T6973] vm_mmap_pgoff+0x28d/0x470 [ 70.880234][ T6973] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 70.880254][ T6973] ? __fget_files+0x215/0x3d0 [ 70.880277][ T6973] ? __fget_files+0x21f/0x3d0 [ 70.880304][ T6973] ksys_mmap_pgoff+0x3cb/0x610 [ 70.880331][ T6973] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 70.880353][ T6973] ? fput+0x7c/0x100 [ 70.880378][ T6973] ? ksys_write+0x1ac/0x250 [ 70.880393][ T6973] ? __pfx_ksys_write+0x10/0x10 [ 70.880416][ T6973] __x64_sys_mmap+0x125/0x190 [ 70.880441][ T6973] do_syscall_64+0x123/0x790 [ 70.880461][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.880481][ T6973] RIP: 0033:0x7f964cd9e159 [ 70.880497][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.880511][ T6973] RSP: 002b:00007f964dd50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 70.880534][ T6973] RAX: ffffffffffffffda RBX: 00007f964d025fa0 RCX: 00007f964cd9e159 [ 70.880547][ T6973] RDX: 000000000200000d RSI: 0000000000004000 RDI: 0000200000ffc000 [ 70.880558][ T6973] RBP: 00007f964dd50090 R08: 0000000000000003 R09: 0000000000000000 [ 70.880568][ T6973] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 70.880580][ T6973] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 70.880606][ T6973] [ 71.055376][ T6981] FAULT_INJECTION: forcing a failure. [ 71.055376][ T6981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.055397][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.1.372 Not tainted syzkaller #0 PREEMPT(full) [ 71.055410][ T6981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.055417][ T6981] Call Trace: [ 71.055423][ T6981] [ 71.055428][ T6981] dump_stack_lvl+0x100/0x190 [ 71.055449][ T6981] should_fail_ex.cold+0x5/0xa [ 71.055465][ T6981] _copy_to_user+0x32/0xd0 [ 71.055480][ T6981] simple_read_from_buffer+0xcb/0x170 [ 71.055497][ T6981] proc_fail_nth_read+0x1af/0x230 [ 71.055514][ T6981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.055530][ T6981] ? rw_verify_area+0xce/0x6d0 [ 71.055541][ T6981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.055556][ T6981] vfs_read+0x1e4/0xb40 [ 71.055568][ T6981] ? lock_acquire+0x1d1/0x380 [ 71.055581][ T6981] ? __fget_files+0x34/0x3d0 [ 71.055596][ T6981] ? __pfx_vfs_read+0x10/0x10 [ 71.055607][ T6981] ? find_held_lock+0x2b/0x80 [ 71.055623][ T6981] ? __fget_files+0x215/0x3d0 [ 71.055641][ T6981] ? __fget_files+0x21f/0x3d0 [ 71.055659][ T6981] ksys_read+0x12a/0x250 [ 71.055671][ T6981] ? __pfx_ksys_read+0x10/0x10 [ 71.055688][ T6981] do_syscall_64+0x123/0x790 [ 71.055701][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.055713][ T6981] RIP: 0033:0x7ff97cd5e98e [ 71.055722][ T6981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.055733][ T6981] RSP: 002b:00007ff97dc71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.055744][ T6981] RAX: ffffffffffffffda RBX: 00007ff97dc726c0 RCX: 00007ff97cd5e98e [ 71.055751][ T6981] RDX: 000000000000000f RSI: 00007ff97dc720a0 RDI: 0000000000000006 [ 71.055758][ T6981] RBP: 00007ff97dc72090 R08: 0000000000000000 R09: 0000000000000000 [ 71.055765][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.055771][ T6981] R13: 00007ff97d026218 R14: 00007ff97d026180 R15: 00007ffe6c363b58 [ 71.055785][ T6981] [ 71.105928][ T6983] FAULT_INJECTION: forcing a failure. [ 71.105928][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.105947][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(full) [ 71.105960][ T6983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.105966][ T6983] Call Trace: [ 71.105970][ T6983] [ 71.105974][ T6983] dump_stack_lvl+0x100/0x190 [ 71.105994][ T6983] should_fail_ex.cold+0x5/0xa [ 71.106011][ T6983] _copy_from_user+0x2e/0xd0 [ 71.106025][ T6983] __sys_bpf+0x2f5/0x4a30 [ 71.106041][ T6983] ? __pfx___sys_bpf+0x10/0x10 [ 71.106052][ T6983] ? find_held_lock+0x2b/0x80 [ 71.106069][ T6983] ? get_pid_task+0xfc/0x250 [ 71.106083][ T6983] ? get_pid_task+0xfc/0x250 [ 71.106102][ T6983] ? find_held_lock+0x2b/0x80 [ 71.106128][ T6983] ? rcu_read_lock_any_held+0x6a/0x90 [ 71.106145][ T6983] ? find_held_lock+0x2b/0x80 [ 71.106161][ T6983] ? ksys_write+0x190/0x250 [ 71.106174][ T6983] ? ksys_write+0x190/0x250 [ 71.106186][ T6983] ? lock_acquire+0x1d1/0x380 [ 71.106207][ T6983] ? fput+0x7c/0x100 [ 71.106222][ T6983] ? ksys_write+0x1ac/0x250 [ 71.106236][ T6983] ? __x64_sys_bpf+0xce/0x140 [ 71.106247][ T6983] __x64_sys_bpf+0xce/0x140 [ 71.106260][ T6983] ? do_syscall_64+0xae/0x790 [ 71.106272][ T6983] do_syscall_64+0x123/0x790 [ 71.106284][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.106295][ T6983] RIP: 0033:0x7ff97cd9e159 [ 71.106304][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.106315][ T6983] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.106327][ T6983] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 71.106335][ T6983] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 71.106341][ T6983] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.106348][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.106354][ T6983] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 71.106368][ T6983] [ 71.234942][ T6985] kernel profiling enabled (shift: 0) [ 71.288165][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 71.293143][ T35] cfg80211: failed to load regulatory.db [ 71.297237][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297298][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.401884][ T6987] ./mnt: Can't lookup blockdev [ 71.513517][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 71.547192][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 72.585210][ T7023] program syz.1.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.751758][ T7028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 72.754942][ T7028] tmpfs: Unknown parameter 'sLze' [ 73.038103][ T46] rpcbind: server 127.0.0.1 not responding, timed out [ 73.640075][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 73.640085][ T43] audit: type=1400 audit(1790765538.931:460): avc: denied { create } for pid=7032 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.640705][ T43] audit: type=1400 audit(1790765538.931:461): avc: denied { bind } for pid=7032 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.641061][ T43] audit: type=1400 audit(1790765538.931:462): avc: denied { setopt } for pid=7032 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.060471][ T7037] dvmrp0: entered allmulticast mode [ 74.118692][ T7037] syzkaller0: entered promiscuous mode [ 74.118707][ T7037] syzkaller0: entered allmulticast mode [ 74.377739][ T7044] input: syz1 as /devices/virtual/input/input6 [ 74.404196][ T6998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.530154][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 74.656222][ T7065] syzkaller0: entered promiscuous mode [ 74.656243][ T7065] syzkaller0: entered allmulticast mode [ 74.689093][ T7069] syzkaller0: entered promiscuous mode [ 74.689111][ T7069] syzkaller0: entered allmulticast mode [ 74.814160][ T7074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7074 comm=syz.1.402 [ 74.874221][ T43] audit: type=1400 audit(1790765540.161:463): avc: denied { write } for pid=7087 comm="syz.2.407" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.874410][ T43] audit: type=1400 audit(1790765540.161:464): avc: denied { open } for pid=7087 comm="syz.2.407" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.910895][ T7090] FAULT_INJECTION: forcing a failure. [ 74.910895][ T7090] name failslab, interval 1, probability 0, space 0, times 0 [ 74.910925][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.1.408 Not tainted syzkaller #0 PREEMPT(full) [ 74.910943][ T7090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.910953][ T7090] Call Trace: [ 74.910959][ T7090] [ 74.910966][ T7090] dump_stack_lvl+0x100/0x190 [ 74.910995][ T7090] should_fail_ex.cold+0x5/0xa [ 74.911020][ T7090] should_failslab+0xc2/0x120 [ 74.911043][ T7090] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.911066][ T7090] ? ovs_nla_get_match+0x70a/0x18d0 [ 74.911093][ T7090] kmemdup_noprof+0x29/0x60 [ 74.911111][ T7090] ovs_nla_get_match+0x70a/0x18d0 [ 74.911136][ T7090] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 74.911184][ T7090] ? __asan_memset+0x23/0x50 [ 74.911206][ T7090] ovs_nla_init_match_and_action.constprop.0+0x13b/0x380 [ 74.911236][ T7090] ? __pfx_ovs_nla_init_match_and_action.constprop.0+0x10/0x10 [ 74.911302][ T7090] ? ovs_nla_get_ufid+0xf7/0x1a0 [ 74.911324][ T7090] ovs_flow_cmd_set+0x27b/0xa00 [ 74.911354][ T7090] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 74.911377][ T7090] ? kasan_save_track+0x14/0x30 [ 74.911397][ T7090] ? __kmalloc_noprof+0x32f/0x840 [ 74.911415][ T7090] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 74.911445][ T7090] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 74.911470][ T7090] ? netlink_unicast+0x585/0x850 [ 74.911488][ T7090] ? netlink_sendmsg+0x8b0/0xda0 [ 74.911508][ T7090] ? ____sys_sendmsg+0xa4d/0xbe0 [ 74.911524][ T7090] ? ___sys_sendmsg+0x190/0x1e0 [ 74.911540][ T7090] ? __sys_sendmsg+0x160/0x210 [ 74.911602][ T7090] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 74.911627][ T7090] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 74.911656][ T7090] genl_family_rcv_msg_doit+0x214/0x300 [ 74.911682][ T7090] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 74.911714][ T7090] ? bpf_lsm_capable+0x9/0x10 [ 74.911730][ T7090] ? security_capable+0x80/0x260 [ 74.911748][ T7090] ? ns_capable+0xd2/0xf0 [ 74.911768][ T7090] genl_rcv_msg+0x560/0x800 [ 74.911794][ T7090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.911818][ T7090] ? __lock_acquire+0x5c0/0x1f40 [ 74.911837][ T7090] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 74.911863][ T7090] ? __lock_acquire+0x5c0/0x1f40 [ 74.911887][ T7090] netlink_rcv_skb+0x159/0x420 [ 74.911907][ T7090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.911932][ T7090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.911962][ T7090] ? netlink_deliver_tap+0x1ae/0xcc0 [ 74.911987][ T7090] genl_rcv+0x28/0x40 [ 74.912007][ T7090] netlink_unicast+0x585/0x850 [ 74.912032][ T7090] ? __pfx_netlink_unicast+0x10/0x10 [ 74.912060][ T7090] netlink_sendmsg+0x8b0/0xda0 [ 74.912086][ T7090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.912227][ T7090] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.912253][ T7090] ____sys_sendmsg+0xa4d/0xbe0 [ 74.912268][ T7090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.912291][ T7090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.912314][ T7090] ? lock_acquire+0x1d1/0x380 [ 74.912332][ T7090] ? get_pid_task+0x2a/0x250 [ 74.912358][ T7090] ___sys_sendmsg+0x190/0x1e0 [ 74.912378][ T7090] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.912395][ T7090] ? get_pid_task+0x106/0x250 [ 74.912426][ T7090] ? find_held_lock+0x2b/0x80 [ 74.912471][ T7090] __sys_sendmsg+0x160/0x210 [ 74.912493][ T7090] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.912525][ T7090] do_syscall_64+0x123/0x790 [ 74.912546][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.912563][ T7090] RIP: 0033:0x7ff97cd9e159 [ 74.912578][ T7090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.912594][ T7090] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.912611][ T7090] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 74.912622][ T7090] RDX: 000000000000c0d4 RSI: 0000200000000380 RDI: 0000000000000003 [ 74.912632][ T7090] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 74.912642][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.912652][ T7090] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 74.912676][ T7090] [ 75.092026][ T7099] syzkaller0: entered promiscuous mode [ 75.092044][ T7099] syzkaller0: entered allmulticast mode [ 75.136632][ T43] audit: type=1400 audit(1790765540.421:465): avc: denied { bind } for pid=7101 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.137878][ T43] audit: type=1400 audit(1790765540.421:466): avc: denied { node_bind } for pid=7101 comm="syz.3.413" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.171342][ T7105] FAULT_INJECTION: forcing a failure. [ 75.171342][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 75.171363][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT(full) [ 75.171376][ T7105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.171382][ T7105] Call Trace: [ 75.171386][ T7105] [ 75.171390][ T7105] dump_stack_lvl+0x100/0x190 [ 75.171410][ T7105] should_fail_ex.cold+0x5/0xa [ 75.171427][ T7105] should_failslab+0xc2/0x120 [ 75.171443][ T7105] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.171454][ T7105] ? lock_acquire+0x1d1/0x380 [ 75.171467][ T7105] ? hwsim_update_pib.isra.0+0x53/0x410 [ 75.171486][ T7105] hwsim_update_pib.isra.0+0x53/0x410 [ 75.171501][ T7105] hwsim_hw_channel+0x126/0x360 [ 75.171515][ T7105] ? nl802154_pre_doit+0x398/0xd10 [ 75.171541][ T7105] ieee802154_set_channel+0x278/0x560 [ 75.171556][ T7105] nl802154_set_channel+0x285/0x4c0 [ 75.171572][ T7105] genl_family_rcv_msg_doit+0x214/0x300 [ 75.171591][ T7105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.171613][ T7105] ? bpf_lsm_capable+0x9/0x10 [ 75.171624][ T7105] ? security_capable+0x80/0x260 [ 75.171639][ T7105] genl_rcv_msg+0x560/0x800 [ 75.171657][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.171673][ T7105] ? __lock_acquire+0x5c0/0x1f40 [ 75.171685][ T7105] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 75.171700][ T7105] ? __pfx_nl802154_set_channel+0x10/0x10 [ 75.171714][ T7105] ? __pfx_nl802154_post_doit+0x10/0x10 [ 75.171729][ T7105] ? __lock_acquire+0x5c0/0x1f40 [ 75.171745][ T7105] netlink_rcv_skb+0x159/0x420 [ 75.171759][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.171776][ T7105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.171797][ T7105] ? netlink_deliver_tap+0x1ae/0xcc0 [ 75.171812][ T7105] genl_rcv+0x28/0x40 [ 75.171827][ T7105] netlink_unicast+0x585/0x850 [ 75.171843][ T7105] ? __pfx_netlink_unicast+0x10/0x10 [ 75.171862][ T7105] netlink_sendmsg+0x8b0/0xda0 [ 75.171879][ T7105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.171895][ T7105] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.171911][ T7105] ____sys_sendmsg+0xa4d/0xbe0 [ 75.171922][ T7105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.171938][ T7105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.171952][ T7105] ? lock_acquire+0x1d1/0x380 [ 75.171964][ T7105] ? get_pid_task+0x2a/0x250 [ 75.171982][ T7105] ___sys_sendmsg+0x190/0x1e0 [ 75.171995][ T7105] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.172007][ T7105] ? get_pid_task+0x106/0x250 [ 75.172028][ T7105] ? find_held_lock+0x2b/0x80 [ 75.172053][ T7105] __sys_sendmsg+0x160/0x210 [ 75.172069][ T7105] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.172093][ T7105] do_syscall_64+0x123/0x790 [ 75.172105][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.172117][ T7105] RIP: 0033:0x7faad099e159 [ 75.172127][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.172137][ T7105] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.172149][ T7105] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 75.172156][ T7105] RDX: 0000000000006010 RSI: 0000200000000100 RDI: 0000000000000005 [ 75.172162][ T7105] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 75.172169][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.172175][ T7105] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 75.172190][ T7105] [ 75.198618][ T43] audit: type=1400 audit(1790765540.491:467): avc: denied { write } for pid=7106 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.206564][ T7107] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 75.314057][ T7111] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 75.314234][ T43] audit: type=1400 audit(1790765540.601:468): avc: denied { write } for pid=7109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.328716][ T7115] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 75.328840][ T7115] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 75.334293][ T7111] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 75.334401][ T7111] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 75.355387][ T43] audit: type=1400 audit(1790765540.641:469): avc: denied { write } for pid=7121 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.413822][ T7129] program syz.3.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.414715][ T7129] tmpfs: Bad value for 'mpol' [ 75.485897][ T7133] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 75.496130][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.516962][ T7133] bond1: (slave erspan1): making interface the new active one [ 75.521659][ T7133] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 75.661646][ T7136] ip_tables: iptables: counters copy to user failed while replacing table [ 75.662185][ T7136] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 75.662197][ T7136] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 75.787626][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.790216][ T7141] syzkaller0: entered promiscuous mode [ 75.790234][ T7141] syzkaller0: entered allmulticast mode [ 75.938440][ T5881] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 75.940430][ T5881] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.940455][ T5881] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 75.941416][ T5881] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.941439][ T5881] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 75.944793][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.944814][ T5881] usb 7-1: Product: syz [ 75.944827][ T5881] usb 7-1: Manufacturer: syz [ 75.944839][ T5881] usb 7-1: SerialNumber: syz [ 75.989268][ T5881] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 75.995937][ T7145] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 76.011172][ T5881] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 76.015985][ T5881] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 76.068409][ T7148] team0: Device ipip0 is of different type [ 76.136820][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 76.136839][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 76.163782][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.426'. [ 76.163798][ T7148] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 76.264871][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.432'. [ 76.264900][ T7162] FAULT_INJECTION: forcing a failure. [ 76.264900][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 76.264915][ T7162] CPU: 3 UID: 0 PID: 7162 Comm: syz.3.432 Not tainted syzkaller #0 PREEMPT(full) [ 76.264927][ T7162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.264934][ T7162] Call Trace: [ 76.264938][ T7162] [ 76.264942][ T7162] dump_stack_lvl+0x100/0x190 [ 76.264962][ T7162] should_fail_ex.cold+0x5/0xa [ 76.264978][ T7162] should_failslab+0xc2/0x120 [ 76.264994][ T7162] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 76.265008][ T7162] ? __alloc_skb+0x140/0x710 [ 76.265026][ T7162] __alloc_skb+0x140/0x710 [ 76.265039][ T7162] ? __alloc_skb+0x5b7/0x710 [ 76.265053][ T7162] ? __pfx___alloc_skb+0x10/0x10 [ 76.265072][ T7162] netlbl_mgmt_listdef+0xb8/0x5d0 [ 76.265086][ T7162] genl_family_rcv_msg_doit+0x214/0x300 [ 76.265104][ T7162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 76.265120][ T7162] ? genl_get_cmd+0x3e7/0x760 [ 76.265139][ T7162] ? netlink_sendmsg+0x680/0xda0 [ 76.265153][ T7162] ? ____sys_sendmsg+0xa4d/0xbe0 [ 76.265163][ T7162] ? __radix_tree_lookup+0x217/0x2b0 [ 76.265183][ T7162] genl_rcv_msg+0x560/0x800 [ 76.265201][ T7162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.265217][ T7162] ? __lock_acquire+0x5c0/0x1f40 [ 76.265230][ T7162] ? __pfx_netlbl_mgmt_listdef+0x10/0x10 [ 76.265243][ T7162] ? __lock_acquire+0x5c0/0x1f40 [ 76.265258][ T7162] netlink_rcv_skb+0x159/0x420 [ 76.265272][ T7162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.265289][ T7162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.265309][ T7162] ? netlink_deliver_tap+0x1ae/0xcc0 [ 76.265325][ T7162] genl_rcv+0x28/0x40 [ 76.265339][ T7162] netlink_unicast+0x585/0x850 [ 76.265355][ T7162] ? __pfx_netlink_unicast+0x10/0x10 [ 76.265395][ T7162] ? __pfx_sock_has_perm+0x10/0x10 [ 76.265416][ T7162] netlink_sendmsg+0x8b0/0xda0 [ 76.265432][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.265448][ T7162] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.265464][ T7162] ____sys_sendmsg+0xa4d/0xbe0 [ 76.265474][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.265490][ T7162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.265504][ T7162] ? lock_acquire+0x1d1/0x380 [ 76.265516][ T7162] ? get_pid_task+0x2a/0x250 [ 76.265533][ T7162] ___sys_sendmsg+0x190/0x1e0 [ 76.265546][ T7162] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.265559][ T7162] ? get_pid_task+0x106/0x250 [ 76.265579][ T7162] ? find_held_lock+0x2b/0x80 [ 76.265605][ T7162] __sys_sendmsg+0x160/0x210 [ 76.265621][ T7162] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.265644][ T7162] do_syscall_64+0x123/0x790 [ 76.265657][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.265668][ T7162] RIP: 0033:0x7faad099e159 [ 76.265678][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.265689][ T7162] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.265700][ T7162] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 76.265707][ T7162] RDX: 0000000000004004 RSI: 0000200000000280 RDI: 0000000000000004 [ 76.265714][ T7162] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 76.265720][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.265727][ T7162] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 76.265741][ T7162] [ 76.331466][ T7165] syzkaller0: entered promiscuous mode [ 76.331487][ T7165] syzkaller0: entered allmulticast mode [ 76.394146][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 76.432864][ T7167] jffs2: notice: (7167) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 76.501076][ T7170] syzkaller0: entered promiscuous mode [ 76.501097][ T7170] syzkaller0: entered allmulticast mode [ 76.704020][ T7175] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 76.889708][ T5744] Bluetooth: hci3: command tx timeout [ 76.909634][ T7185] ip_tables: iptables: counters copy to user failed while replacing table [ 77.218719][ T7194] FAULT_INJECTION: forcing a failure. [ 77.218719][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 77.218751][ T7194] CPU: 2 UID: 0 PID: 7194 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(full) [ 77.218772][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.218785][ T7194] Call Trace: [ 77.218791][ T7194] [ 77.218799][ T7194] dump_stack_lvl+0x100/0x190 [ 77.218831][ T7194] should_fail_ex.cold+0x5/0xa [ 77.218861][ T7194] should_failslab+0xc2/0x120 [ 77.218887][ T7194] __kmalloc_cache_noprof+0x91/0x6d0 [ 77.218909][ T7194] ? snd_seq_pool_new+0x44/0x230 [ 77.218931][ T7194] ? __pfx_snd_seq_open+0x10/0x10 [ 77.218956][ T7194] snd_seq_pool_new+0x44/0x230 [ 77.218975][ T7194] seq_create_client1+0x66/0x5c0 [ 77.219004][ T7194] ? __pfx_snd_seq_open+0x10/0x10 [ 77.219030][ T7194] snd_seq_open+0x41/0x530 [ 77.219056][ T7194] ? __pfx_snd_seq_open+0x10/0x10 [ 77.219089][ T7194] snd_open+0x201/0x450 [ 77.219120][ T7194] ? __pfx_snd_open+0x10/0x10 [ 77.219148][ T7194] chrdev_open+0x234/0x6a0 [ 77.219175][ T7194] ? __pfx_chrdev_open+0x10/0x10 [ 77.219201][ T7194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 77.219226][ T7194] do_dentry_open+0x6ab/0x14d0 [ 77.219247][ T7194] ? __pfx_chrdev_open+0x10/0x10 [ 77.219276][ T7194] vfs_open+0x82/0x3f0 [ 77.219301][ T7194] path_openat+0x19fa/0x2440 [ 77.219331][ T7194] ? __pfx_path_openat+0x10/0x10 [ 77.219361][ T7194] do_file_open+0x20e/0x430 [ 77.219390][ T7194] ? __pfx_do_file_open+0x10/0x10 [ 77.219453][ T7194] ? _raw_spin_unlock+0x28/0x50 [ 77.219485][ T7194] ? alloc_fd+0x471/0x7a0 [ 77.219522][ T7194] do_sys_openat2+0x10f/0x1e0 [ 77.219552][ T7194] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.219579][ T7194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.219608][ T7194] __x64_sys_openat+0x12d/0x210 [ 77.219637][ T7194] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.219677][ T7194] do_syscall_64+0x123/0x790 [ 77.219699][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.219720][ T7194] RIP: 0033:0x7ff97cd9e159 [ 77.219736][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.219755][ T7194] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.219775][ T7194] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 77.219787][ T7194] RDX: 0000000000000202 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 77.219800][ T7194] RBP: 00007ff97ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 77.219811][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.219822][ T7194] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 77.219848][ T7194] [ 77.256614][ T7194] syzkaller0: entered promiscuous mode [ 77.256638][ T7194] syzkaller0: entered allmulticast mode [ 77.261831][ T7196] syzkaller0: entered promiscuous mode [ 77.261851][ T7196] syzkaller0: entered allmulticast mode [ 77.266102][ T7194] sctp: [Deprecated]: syz.1.443 (pid 7194) Use of int in max_burst socket option. [ 77.266102][ T7194] Use struct sctp_assoc_value instead [ 78.321832][ T7133] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 78.322190][ T7133] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 78.322223][ T7133] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 78.322529][ T7133] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 78.338407][ T5819] usb 7-1: USB disconnect, device number 4 [ 78.403869][ T5819] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 78.411413][ T5819] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 78.411843][ T5819] ti_usb_3410_5052 7-1:2.0: device disconnected [ 78.483459][ T7200] netlink: 'syz.3.446': attribute type 12 has an invalid length. [ 78.639001][ T7220] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.852730][ T7234] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.860162][ T7234] bond1: (slave lo): Enslaving as an active interface with an up link [ 78.864278][ T7234] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 79.155119][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 79.155131][ T43] audit: type=1400 audit(1790765544.441:479): avc: denied { connect } for pid=7246 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.251939][ T7251] syzkaller0: entered promiscuous mode [ 79.251953][ T7251] syzkaller0: entered allmulticast mode [ 79.384004][ T7257] syzkaller0: entered promiscuous mode [ 79.384026][ T7257] syzkaller0: entered allmulticast mode [ 79.415765][ T43] audit: type=1400 audit(1790765544.701:480): avc: denied { read write } for pid=7258 comm="syz.0.469" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.416215][ T43] audit: type=1400 audit(1790765544.701:481): avc: denied { open } for pid=7258 comm="syz.0.469" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.428781][ T43] audit: type=1400 audit(1790765544.711:482): avc: denied { map } for pid=7258 comm="syz.0.469" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.544680][ T43] audit: type=1400 audit(1790765544.831:483): avc: denied { create } for pid=7261 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.612052][ T43] audit: type=1400 audit(1790765544.901:484): avc: denied { read } for pid=7263 comm="syz.2.472" path="socket:[16759]" dev="sockfs" ino=16759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.618454][ T43] audit: type=1400 audit(1790765544.911:485): avc: denied { write } for pid=7258 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.674439][ T43] audit: type=1400 audit(1790765544.961:486): avc: denied { read } for pid=7268 comm="syz.2.473" dev="sockfs" ino=17650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.714119][ T43] audit: type=1400 audit(1790765545.001:487): avc: denied { execute } for pid=7268 comm="syz.2.473" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.734313][ T43] audit: type=1400 audit(1790765545.021:488): avc: denied { write } for pid=7270 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.738754][ T7271] tipc: Enabling of bearer rejected, failed to enable media [ 79.740389][ T7271] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 79.888939][ T7276] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.893767][ T7276] fuse: Bad value for 'fd' [ 80.044588][ T7285] FAULT_INJECTION: forcing a failure. [ 80.044588][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 80.044608][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.0.481 Not tainted syzkaller #0 PREEMPT(full) [ 80.044621][ T7285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.044627][ T7285] Call Trace: [ 80.044631][ T7285] [ 80.044636][ T7285] dump_stack_lvl+0x100/0x190 [ 80.044656][ T7285] should_fail_ex.cold+0x5/0xa [ 80.044675][ T7285] should_failslab+0xc2/0x120 [ 80.044691][ T7285] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.044706][ T7285] ? d_instantiate+0x8a/0xb0 [ 80.044716][ T7285] ? alloc_empty_file+0x5b/0x1c0 [ 80.044735][ T7285] alloc_empty_file+0x5b/0x1c0 [ 80.044752][ T7285] alloc_file_pseudo+0x183/0x290 [ 80.044769][ T7285] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.044786][ T7285] ? alloc_fd+0x471/0x7a0 [ 80.044805][ T7285] sock_alloc_file+0x50/0x210 [ 80.044822][ T7285] __sys_socket+0x1c0/0x260 [ 80.044834][ T7285] ? __pfx___sys_socket+0x10/0x10 [ 80.044850][ T7285] __x64_sys_socket+0x72/0xb0 [ 80.044861][ T7285] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.044895][ T7285] do_syscall_64+0x123/0x790 [ 80.044909][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.044922][ T7285] RIP: 0033:0x7fe4a2b9f9c7 [ 80.044932][ T7285] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.044943][ T7285] RSP: 002b:00007fe4a3b42f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 80.044956][ T7285] RAX: ffffffffffffffda RBX: 00007fe4a2e25fa0 RCX: 00007fe4a2b9f9c7 [ 80.044964][ T7285] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 80.044971][ T7285] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 80.044978][ T7285] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 80.044985][ T7285] R13: 00007fe4a2e26038 R14: 00007fe4a2e25fa0 R15: 00007fffd2c13248 [ 80.045002][ T7285] [ 80.087475][ T7288] syzkaller0: entered promiscuous mode [ 80.087496][ T7288] syzkaller0: entered allmulticast mode [ 80.215057][ T7302] FAULT_INJECTION: forcing a failure. [ 80.215057][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 80.215078][ T7302] CPU: 0 UID: 0 PID: 7302 Comm: syz.1.489 Not tainted syzkaller #0 PREEMPT(full) [ 80.215091][ T7302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.215097][ T7302] Call Trace: [ 80.215101][ T7302] [ 80.215105][ T7302] dump_stack_lvl+0x100/0x190 [ 80.215126][ T7302] should_fail_ex.cold+0x5/0xa [ 80.215142][ T7302] should_failslab+0xc2/0x120 [ 80.215158][ T7302] __kmalloc_noprof+0xfc/0x840 [ 80.215171][ T7302] ? nla_alloc_flow_actions+0x21/0x80 [ 80.215187][ T7302] nla_alloc_flow_actions+0x21/0x80 [ 80.215200][ T7302] ovs_nla_copy_actions+0x60/0x330 [ 80.215216][ T7302] get_flow_actions+0xde/0x190 [ 80.215233][ T7302] ? __pfx_get_flow_actions+0x10/0x10 [ 80.215268][ T7302] ? find_held_lock+0x2b/0x80 [ 80.215285][ T7302] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 80.215299][ T7302] ? __asan_memset+0x23/0x50 [ 80.215314][ T7302] ovs_nla_init_match_and_action.constprop.0+0x1cd/0x380 [ 80.215333][ T7302] ? __pfx_ovs_nla_init_match_and_action.constprop.0+0x10/0x10 [ 80.215377][ T7302] ? ovs_nla_get_ufid+0xf7/0x1a0 [ 80.215391][ T7302] ovs_flow_cmd_set+0x27b/0xa00 [ 80.215411][ T7302] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 80.215427][ T7302] ? kasan_save_track+0x14/0x30 [ 80.215440][ T7302] ? __kmalloc_noprof+0x32f/0x840 [ 80.215452][ T7302] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 80.215470][ T7302] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 80.215486][ T7302] ? netlink_unicast+0x585/0x850 [ 80.215500][ T7302] ? netlink_sendmsg+0x8b0/0xda0 [ 80.215513][ T7302] ? ____sys_sendmsg+0xa4d/0xbe0 [ 80.215524][ T7302] ? ___sys_sendmsg+0x190/0x1e0 [ 80.215534][ T7302] ? __sys_sendmsg+0x160/0x210 [ 80.215572][ T7302] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 80.215589][ T7302] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 80.215608][ T7302] genl_family_rcv_msg_doit+0x214/0x300 [ 80.215626][ T7302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 80.215647][ T7302] ? bpf_lsm_capable+0x9/0x10 [ 80.215657][ T7302] ? security_capable+0x80/0x260 [ 80.215670][ T7302] ? ns_capable+0xd2/0xf0 [ 80.215682][ T7302] genl_rcv_msg+0x560/0x800 [ 80.215700][ T7302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.215716][ T7302] ? __lock_acquire+0x5c0/0x1f40 [ 80.215728][ T7302] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 80.215746][ T7302] ? __lock_acquire+0x5c0/0x1f40 [ 80.215761][ T7302] netlink_rcv_skb+0x159/0x420 [ 80.215776][ T7302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.215792][ T7302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.215812][ T7302] ? netlink_deliver_tap+0x1ae/0xcc0 [ 80.215828][ T7302] genl_rcv+0x28/0x40 [ 80.215843][ T7302] netlink_unicast+0x585/0x850 [ 80.215860][ T7302] ? __pfx_netlink_unicast+0x10/0x10 [ 80.215884][ T7302] netlink_sendmsg+0x8b0/0xda0 [ 80.215901][ T7302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.215916][ T7302] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.215932][ T7302] ____sys_sendmsg+0xa4d/0xbe0 [ 80.215943][ T7302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.215958][ T7302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.215973][ T7302] ? lock_acquire+0x1d1/0x380 [ 80.215985][ T7302] ? get_pid_task+0x2a/0x250 [ 80.216002][ T7302] ___sys_sendmsg+0x190/0x1e0 [ 80.216015][ T7302] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.216027][ T7302] ? get_pid_task+0x106/0x250 [ 80.216047][ T7302] ? find_held_lock+0x2b/0x80 [ 80.216072][ T7302] __sys_sendmsg+0x160/0x210 [ 80.216088][ T7302] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.216111][ T7302] do_syscall_64+0x123/0x790 [ 80.216124][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.216136][ T7302] RIP: 0033:0x7ff97cd9e159 [ 80.216145][ T7302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.216156][ T7302] RSP: 002b:00007ff97dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.216168][ T7302] RAX: ffffffffffffffda RBX: 00007ff97d025fa0 RCX: 00007ff97cd9e159 [ 80.216175][ T7302] RDX: 000000000000c0d4 RSI: 0000200000000380 RDI: 0000000000000003 [ 80.216182][ T7302] RBP: 00007ff97dcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 80.216188][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.216195][ T7302] R13: 00007ff97d026038 R14: 00007ff97d025fa0 R15: 00007ffe6c363b58 [ 80.216209][ T7302] [ 80.216215][ T7302] openvswitch: netlink: Actions may not be safe on all matching packets [ 80.290703][ T7308] syzkaller0: entered promiscuous mode [ 80.290723][ T7308] syzkaller0: entered allmulticast mode [ 80.357449][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 80.373862][ T7313] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 80.431547][ T7312] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 80.738466][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.783019][ T7327] FAULT_INJECTION: forcing a failure. [ 80.783019][ T7327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.783041][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT(full) [ 80.783053][ T7327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.783060][ T7327] Call Trace: [ 80.783064][ T7327] [ 80.783068][ T7327] dump_stack_lvl+0x100/0x190 [ 80.783088][ T7327] should_fail_ex.cold+0x5/0xa [ 80.783104][ T7327] _copy_from_user+0x2e/0xd0 [ 80.783118][ T7327] kstrtouint_from_user+0xd6/0x1d0 [ 80.783136][ T7327] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 80.783156][ T7327] ? lock_acquire+0x1d1/0x380 [ 80.783171][ T7327] proc_fail_nth_write+0x83/0x220 [ 80.783188][ T7327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.783207][ T7327] vfs_write+0x2aa/0x1050 [ 80.783221][ T7327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.783236][ T7327] ? lock_acquire+0x1d1/0x380 [ 80.783248][ T7327] ? __fget_files+0x34/0x3d0 [ 80.783263][ T7327] ? __pfx_vfs_write+0x10/0x10 [ 80.783274][ T7327] ? find_held_lock+0x2b/0x80 [ 80.783291][ T7327] ? __fget_files+0x215/0x3d0 [ 80.783309][ T7327] ? __fget_files+0x21f/0x3d0 [ 80.783327][ T7327] ksys_write+0x12a/0x250 [ 80.783339][ T7327] ? __pfx_ksys_write+0x10/0x10 [ 80.783356][ T7327] do_syscall_64+0x123/0x790 [ 80.783370][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.783381][ T7327] RIP: 0033:0x7f964cd5e98e [ 80.783391][ T7327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.783401][ T7327] RSP: 002b:00007f964dd4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.783429][ T7327] RAX: ffffffffffffffda RBX: 00007f964dd506c0 RCX: 00007f964cd5e98e [ 80.783438][ T7327] RDX: 0000000000000001 RSI: 00007f964dd500a0 RDI: 0000000000000006 [ 80.783445][ T7327] RBP: 00007f964dd50090 R08: 0000000000000000 R09: 0000000000000000 [ 80.783451][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.783458][ T7327] R13: 00007f964d026038 R14: 00007f964d025fa0 R15: 00007fff7fd18518 [ 80.783473][ T7327] [ 80.899151][ T9] usb 6-1: device descriptor read/64, error -71 [ 80.926394][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 81.157628][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.187642][ T7343] ISOFS: Unable to identify CD-ROM format. [ 81.297637][ T9] usb 6-1: device descriptor read/64, error -71 [ 81.420461][ T9] usb usb6-port1: attempt power cycle [ 81.685872][ T7345] syzkaller0: entered promiscuous mode [ 81.685893][ T7345] syzkaller0: entered allmulticast mode [ 81.767687][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.798283][ T9] usb 6-1: device descriptor read/8, error -71 [ 81.829838][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 81.829862][ T7347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.508'. [ 81.941761][ T7354] syzkaller0: entered promiscuous mode [ 81.941783][ T7354] syzkaller0: entered allmulticast mode [ 82.037629][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 82.058032][ T9] usb 6-1: device descriptor read/8, error -71 [ 82.073902][ T7363] netlink: 120 bytes leftover after parsing attributes in process `syz.0.514'. [ 82.073917][ T7363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.167818][ T9] usb usb6-port1: unable to enumerate USB device [ 83.044278][ T7382] ip_tables: iptables: counters copy to user failed while replacing table [ 83.116943][ T7384] syzkaller0: entered promiscuous mode [ 83.116958][ T7384] syzkaller0: entered allmulticast mode [ 83.296633][ T7398] ima: policy update failed [ 83.415281][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.532'. [ 83.462698][ T7413] syzkaller0: entered promiscuous mode [ 83.462720][ T7413] syzkaller0: entered allmulticast mode [ 83.519237][ T7419] binder: 7418:7419 ioctl c0306201 200000000040 returned -22 [ 83.573896][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.537'. [ 83.573957][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.537'. [ 83.633486][ T7436] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 83.758165][ T7447] FAULT_INJECTION: forcing a failure. [ 83.758165][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 83.758193][ T7447] CPU: 2 UID: 0 PID: 7447 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(full) [ 83.758211][ T7447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.758221][ T7447] Call Trace: [ 83.758226][ T7447] [ 83.758233][ T7447] dump_stack_lvl+0x100/0x190 [ 83.758261][ T7447] should_fail_ex.cold+0x5/0xa [ 83.758285][ T7447] should_failslab+0xc2/0x120 [ 83.758309][ T7447] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 83.758330][ T7447] ? alloc_vmap_area+0x640/0x2bb0 [ 83.758355][ T7447] alloc_vmap_area+0x640/0x2bb0 [ 83.758382][ T7447] ? kasan_save_track+0x14/0x30 [ 83.758402][ T7447] ? __kasan_kmalloc+0xaa/0xb0 [ 83.758422][ T7447] ? __pfx_alloc_vmap_area+0x10/0x10 [ 83.758444][ T7447] ? __get_vm_area_node+0x124/0x350 [ 83.758469][ T7447] __get_vm_area_node+0x1ed/0x350 [ 83.758496][ T7447] __vmalloc_node_range_noprof+0x268/0x1420 [ 83.758519][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.758545][ T7447] ? up_write+0x2dc/0x5b0 [ 83.758568][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.758590][ T7447] ? lock_acquire+0x1d1/0x380 [ 83.758610][ T7447] ? find_held_lock+0x2b/0x80 [ 83.758633][ T7447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.758656][ T7447] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.758685][ T7447] ? avc_has_perm_noaudit+0x145/0x470 [ 83.758710][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.758731][ T7447] __vmalloc_node_noprof+0xad/0xf0 [ 83.758754][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.758778][ T7447] __vmalloc_noprof+0xa3/0x120 [ 83.758801][ T7447] ? __pfx___vmalloc_noprof+0x10/0x10 [ 83.758825][ T7447] ? rcu_is_watching+0x13/0xc0 [ 83.758848][ T7447] ? cap_capable+0x107/0x430 [ 83.758867][ T7447] bpf_prog_alloc_no_stats+0x59/0x690 [ 83.758887][ T7447] ? security_capable+0x80/0x260 [ 83.758906][ T7447] bpf_prog_alloc+0x3b/0x200 [ 83.758927][ T7447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.758948][ T7447] bpf_prog_load+0x49e/0x2a80 [ 83.758974][ T7447] ? __pfx_bpf_prog_load+0x10/0x10 [ 83.759021][ T7447] __sys_bpf+0x1f46/0x4a30 [ 83.759044][ T7447] ? __pfx___sys_bpf+0x10/0x10 [ 83.759061][ T7447] ? find_held_lock+0x2b/0x80 [ 83.759084][ T7447] ? get_pid_task+0xfc/0x250 [ 83.759105][ T7447] ? get_pid_task+0xfc/0x250 [ 83.759134][ T7447] ? find_held_lock+0x2b/0x80 [ 83.759162][ T7447] ? rcu_read_lock_any_held+0x6a/0x90 [ 83.759187][ T7447] ? find_held_lock+0x2b/0x80 [ 83.759209][ T7447] ? ksys_write+0x190/0x250 [ 83.759227][ T7447] ? ksys_write+0x190/0x250 [ 83.759244][ T7447] ? lock_acquire+0x1d1/0x380 [ 83.759277][ T7447] ? fput+0x7c/0x100 [ 83.759299][ T7447] ? ksys_write+0x1ac/0x250 [ 83.759319][ T7447] ? __x64_sys_bpf+0xce/0x140 [ 83.759335][ T7447] __x64_sys_bpf+0xce/0x140 [ 83.759353][ T7447] ? do_syscall_64+0xae/0x790 [ 83.759372][ T7447] do_syscall_64+0x123/0x790 [ 83.759392][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.759409][ T7447] RIP: 0033:0x7faad099e159 [ 83.759423][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.759438][ T7447] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.759455][ T7447] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 83.759466][ T7447] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 83.759477][ T7447] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 83.759487][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.759496][ T7447] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 83.759519][ T7447] [ 83.759702][ T7447] syz.3.543: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.759809][ T7447] CPU: 2 UID: 0 PID: 7447 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(full) [ 83.759827][ T7447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.759836][ T7447] Call Trace: [ 83.759841][ T7447] [ 83.759848][ T7447] dump_stack_lvl+0x100/0x190 [ 83.759874][ T7447] warn_alloc.cold+0x9e/0xb2 [ 83.759892][ T7447] ? __pfx_warn_alloc+0x10/0x10 [ 83.759909][ T7447] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.759928][ T7447] ? __get_vm_area_node+0x2f0/0x350 [ 83.759955][ T7447] ? __get_vm_area_node+0x22b/0x350 [ 83.759996][ T7447] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 83.760028][ T7447] ? up_write+0x2dc/0x5b0 [ 83.760053][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.760076][ T7447] ? lock_acquire+0x1d1/0x380 [ 83.760095][ T7447] ? find_held_lock+0x2b/0x80 [ 83.760118][ T7447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.760141][ T7447] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.760170][ T7447] ? avc_has_perm_noaudit+0x145/0x470 [ 83.760196][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.760217][ T7447] __vmalloc_node_noprof+0xad/0xf0 [ 83.760241][ T7447] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 83.760264][ T7447] __vmalloc_noprof+0xa3/0x120 [ 83.760287][ T7447] ? __pfx___vmalloc_noprof+0x10/0x10 [ 83.760312][ T7447] ? rcu_is_watching+0x13/0xc0 [ 83.760334][ T7447] ? cap_capable+0x107/0x430 [ 83.760352][ T7447] bpf_prog_alloc_no_stats+0x59/0x690 [ 83.760373][ T7447] ? security_capable+0x80/0x260 [ 83.760392][ T7447] bpf_prog_alloc+0x3b/0x200 [ 83.760412][ T7447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.760433][ T7447] bpf_prog_load+0x49e/0x2a80 [ 83.760461][ T7447] ? __pfx_bpf_prog_load+0x10/0x10 [ 83.760503][ T7447] __sys_bpf+0x1f46/0x4a30 [ 83.760526][ T7447] ? __pfx___sys_bpf+0x10/0x10 [ 83.760543][ T7447] ? find_held_lock+0x2b/0x80 [ 83.760566][ T7447] ? get_pid_task+0xfc/0x250 [ 83.760586][ T7447] ? get_pid_task+0xfc/0x250 [ 83.760615][ T7447] ? find_held_lock+0x2b/0x80 [ 83.760643][ T7447] ? rcu_read_lock_any_held+0x6a/0x90 [ 83.760668][ T7447] ? find_held_lock+0x2b/0x80 [ 83.760689][ T7447] ? ksys_write+0x190/0x250 [ 83.760707][ T7447] ? ksys_write+0x190/0x250 [ 83.760724][ T7447] ? lock_acquire+0x1d1/0x380 [ 83.760757][ T7447] ? fput+0x7c/0x100 [ 83.760779][ T7447] ? ksys_write+0x1ac/0x250 [ 83.760800][ T7447] ? __x64_sys_bpf+0xce/0x140 [ 83.760817][ T7447] __x64_sys_bpf+0xce/0x140 [ 83.760835][ T7447] ? do_syscall_64+0xae/0x790 [ 83.760853][ T7447] do_syscall_64+0x123/0x790 [ 83.760872][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.760888][ T7447] RIP: 0033:0x7faad099e159 [ 83.760901][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.760916][ T7447] RSP: 002b:00007faad1900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.760931][ T7447] RAX: ffffffffffffffda RBX: 00007faad0c25fa0 RCX: 00007faad099e159 [ 83.760943][ T7447] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 83.760953][ T7447] RBP: 00007faad1900090 R08: 0000000000000000 R09: 0000000000000000 [ 83.760963][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.760973][ T7447] R13: 00007faad0c26038 R14: 00007faad0c25fa0 R15: 00007ffdbaab16d8 [ 83.760995][ T7447] [ 83.761045][ T7447] Mem-Info: [ 83.761054][ T7447] active_anon:8670 inactive_anon:1580 isolated_anon:0 [ 83.761054][ T7447] active_file:4070 inactive_file:21806 isolated_file:0 [ 83.761054][ T7447] unevictable:1000 dirty:106 writeback:0 [ 83.761054][ T7447] slab_reclaimable:9314 slab_unreclaimable:64740 [ 83.761054][ T7447] mapped:25253 shmem:3163 pagetables:8175 [ 83.761054][ T7447] sec_pagetables:293 bounce:0 [ 83.761054][ T7447] kernel_misc_reclaimable:0 [ 83.761054][ T7447] free:224543 free_pcp:30524 free_cma:0 [ 83.761094][ T7447] Node 0 active_anon:33200kB inactive_anon:6320kB active_file:16280kB inactive_file:72984kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100436kB dirty:392kB writeback:0kB shmem:10652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:5868kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 83.761136][ T7447] Node 1 active_anon:1480kB inactive_anon:0kB active_file:0kB inactive_file:14240kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:576kB dirty:32kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:224kB pagetables:26832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 83.761177][ T7447] Node 0 DMA free:14916kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:36kB free_cma:0kB [ 83.761220][ T7447] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 83.761249][ T7447] Node 0 DMA32 free:177408kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33076kB inactive_anon:6320kB active_file:16280kB inactive_file:72984kB unevictable:2000kB writepending:392kB zspages:0kB present:2080628kB managed:1253136kB mlocked:0kB bounce:0kB free_pcp:27004kB local_pcp:6896kB free_cma:0kB [ 83.761293][ T7447] lowmem_reserve[]: 0 0 0 0 0 [ 83.761321][ T7447] Node 1 Normal free:702252kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1480kB inactive_anon:0kB active_file:0kB inactive_file:14240kB unevictable:2000kB writepending:32kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:94848kB local_pcp:14812kB free_cma:0kB [ 83.761497][ T7447] lowmem_reserve[]: 0 0 0 0 0 [ 83.761524][ T7447] Node 0 DMA: 15*4kB (U) 17*8kB (U) 18*16kB (U) 21*32kB (UE) 19*64kB (UE) 22*128kB (UE) 10*256kB (UE) 6*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 14916kB [ 83.761646][ T7447] Node 0 DMA32: 2*4kB (UE) 88*8kB (UE) 51*16kB (ME) 54*32kB (E) 39*64kB (ME) 51*128kB (ME) 40*256kB (UME) 59*512kB (UME) 43*1024kB (UM) 12*2048kB (UM) 13*4096kB (U) = 174584kB [ 83.761772][ T7447] Node 1 Normal: 823*4kB (UME) 722*8kB (UME) 702*16kB (UME) 519*32kB (UME) 604*64kB (UME) 284*128kB (UME) 442*256kB (UM) 136*512kB (UM) 80*1024kB (UME) 13*2048kB (UM) 73*4096kB (UM) = 702252kB [ 83.761899][ T7447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.761912][ T7447] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.761924][ T7447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.761936][ T7447] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.761948][ T7447] 28942 total pagecache pages [ 83.761954][ T7447] 0 pages in swap cache [ 83.761959][ T7447] Free swap = 124996kB [ 83.761965][ T7447] Total swap = 124996kB [ 83.761971][ T7447] 1048443 pages RAM [ 83.761976][ T7447] 0 pages HighMem/MovableOnly [ 83.761982][ T7447] 285849 pages reserved [ 83.761987][ T7447] 0 pages cma reserved [ 83.806756][ T7451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7451 comm=syz.0.545 [ 83.806852][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 83.808194][ T7451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7451 comm=syz.0.545 [ 84.022408][ T7455] Console: switching to colour dummy device 80x25 [ 84.087642][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.232766][ T7399] ------------[ cut here ]------------ [ 84.232781][ T7399] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 84.232788][ T7399] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.2.529/7399 [ 84.240876][ T7399] Modules linked in: [ 84.242643][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(full) [ 84.246071][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.249918][ T7399] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 84.251970][ T7399] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 e8 45 71 05 45 85 c0 75 13 48 8d 3d ac 51 74 05 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 84.259526][ T7399] RSP: 0018:ffffc9000351fb30 EFLAGS: 00010246 [ 84.261291][ T7399] RAX: 0000000000000003 RBX: ffff8880288f51c0 RCX: 1ffffffff228b180 [ 84.263604][ T7399] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff914897d0 [ 84.265876][ T7399] RBP: ffffc9000351fca0 R08: 0000000000000000 R09: 0000000000000000 [ 84.268389][ T7399] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 84.270952][ T7399] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880285b0360 [ 84.273756][ T7399] FS: 000055558f0a3500(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 [ 84.276998][ T7399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.279595][ T7399] CR2: 000000110c3f43a8 CR3: 0000000065017000 CR4: 0000000000352ef0 [ 84.282453][ T7399] Call Trace: [ 84.283666][ T7399] [ 84.284743][ T7399] ? drm_mode_object_put.part.0+0xf2/0x160 [ 84.286863][ T7399] ? virtio_gpu_free_object+0xec/0x280 [ 84.289131][ T7399] ? drm_gem_fb_destroy+0x1a1/0x210 [ 84.291011][ T7399] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 84.293063][ T7399] ? __pfx___mutex_lock+0x10/0x10 [ 84.294391][ T7399] ? drm_mode_object_put+0x41/0x50 [ 84.295674][ T7399] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 84.297499][ T7399] ? __mutex_unlock_slowpath+0x35d/0x930 [ 84.299594][ T7399] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 84.301874][ T7399] ? virtio_gpu_free_object+0xec/0x280 [ 84.303638][ T7399] virtio_gpu_free_object+0xec/0x280 [ 84.305571][ T7399] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 84.307760][ T7399] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 84.310027][ T7399] drm_gem_object_free+0x60/0xa0 [ 84.311842][ T7399] drm_client_buffer_delete+0x1d8/0x270 [ 84.313848][ T7399] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 84.315903][ T7399] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 84.318403][ T7399] put_fb_info+0xb8/0xf0 [ 84.319951][ T7399] fb_release+0x13e/0x190 [ 84.321548][ T7399] ? __pfx_fb_release+0x10/0x10 [ 84.323325][ T7399] __fput+0x3ff/0xb50 [ 84.324799][ T7399] task_work_run+0x150/0x240 [ 84.326523][ T7399] ? __pfx_task_work_run+0x10/0x10 [ 84.328458][ T7399] exit_to_user_mode_loop+0x1d8/0x700 [ 84.330416][ T7399] ? rcu_is_watching+0x13/0xc0 [ 84.332169][ T7399] do_syscall_64+0x661/0x790 [ 84.333871][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.335961][ T7399] RIP: 0033:0x7f964cd9e159 [ 84.337667][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.344531][ T7399] RSP: 002b:00007fff7fd18678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 84.347812][ T7399] RAX: 0000000000000000 RBX: 00007f964d027da0 RCX: 00007f964cd9e159 [ 84.349493][ T7420] ceph: No mds server is up or the cluster is laggy [ 84.353006][ T7399] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 84.355812][ T7399] RBP: 00007f964d027da0 R08: 0000000000000006 R09: 0000000000000000 [ 84.358650][ T7399] R10: 00007f964d027cb0 R11: 0000000000000246 R12: 000000000001483e [ 84.361477][ T7399] R13: 00007f964d02609c R14: 00000000000145ac R15: 00007f964d026090 [ 84.364121][ T7399] [ 84.365021][ T7399] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.367126][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(full) [ 84.369763][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.372542][ T7399] Call Trace: [ 84.373525][ T7399] [ 84.374518][ T7399] dump_stack_lvl+0x100/0x190 [ 84.376076][ T7399] vpanic+0x553/0x970 [ 84.377253][ T7399] ? __pfx_vpanic+0x10/0x10 [ 84.378600][ T7399] ? lock_release+0x24d/0x310 [ 84.379946][ T7399] panic+0xd1/0xe0 [ 84.381072][ T7399] ? __pfx_panic+0x10/0x10 [ 84.382449][ T7399] check_panic_on_warn.cold+0x19/0x34 [ 84.383994][ T7399] ? __mutex_lock+0x944/0x1bd0 [ 84.385389][ T7399] __warn.cold+0x191/0x318 [ 84.386682][ T7399] __report_bug+0x30f/0x440 [ 84.387989][ T7399] ? __mutex_lock+0x944/0x1bd0 [ 84.389388][ T7399] ? __pfx___report_bug+0x10/0x10 [ 84.390958][ T7399] ? put_fb_info+0xb8/0xf0 [ 84.392568][ T7399] ? fb_release+0x13e/0x190 [ 84.394210][ T7399] ? __fput+0x3ff/0xb50 [ 84.395712][ T7399] report_bug_entry+0xe2/0x290 [ 84.397442][ T7399] ? __mutex_lock+0x94b/0x1bd0 [ 84.399169][ T7399] handle_bug+0x1cd/0x2a0 [ 84.400734][ T7399] exc_invalid_op+0x17/0x50 [ 84.402124][ T7399] asm_exc_invalid_op+0x1a/0x20 [ 84.403694][ T7399] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 84.405276][ T7399] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 e8 45 71 05 45 85 c0 75 13 48 8d 3d ac 51 74 05 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 84.411252][ T7399] RSP: 0018:ffffc9000351fb30 EFLAGS: 00010246 [ 84.413187][ T7399] RAX: 0000000000000003 RBX: ffff8880288f51c0 RCX: 1ffffffff228b180 [ 84.415465][ T7399] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff914897d0 [ 84.417844][ T7399] RBP: ffffc9000351fca0 R08: 0000000000000000 R09: 0000000000000000 [ 84.420130][ T7399] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 84.422673][ T7399] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880285b0360 [ 84.425033][ T7399] ? drm_mode_object_put.part.0+0xf2/0x160 [ 84.426875][ T7399] ? virtio_gpu_free_object+0xec/0x280 [ 84.428405][ T7399] ? drm_gem_fb_destroy+0x1a1/0x210 [ 84.429829][ T7399] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 84.431375][ T7399] ? __pfx___mutex_lock+0x10/0x10 [ 84.432755][ T7399] ? drm_mode_object_put+0x41/0x50 [ 84.434200][ T7399] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 84.435664][ T7399] ? __mutex_unlock_slowpath+0x35d/0x930 [ 84.437215][ T7399] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 84.438954][ T7399] ? virtio_gpu_free_object+0xec/0x280 [ 84.440711][ T7399] virtio_gpu_free_object+0xec/0x280 [ 84.442270][ T7399] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 84.444055][ T7399] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 84.445819][ T7399] drm_gem_object_free+0x60/0xa0 [ 84.447494][ T7399] drm_client_buffer_delete+0x1d8/0x270 [ 84.449151][ T7399] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 84.450673][ T7399] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 84.452347][ T7399] put_fb_info+0xb8/0xf0 [ 84.453551][ T7399] fb_release+0x13e/0x190 [ 84.454756][ T7399] ? __pfx_fb_release+0x10/0x10 [ 84.456094][ T7399] __fput+0x3ff/0xb50 [ 84.457224][ T7399] task_work_run+0x150/0x240 [ 84.458556][ T7399] ? __pfx_task_work_run+0x10/0x10 [ 84.459937][ T7399] exit_to_user_mode_loop+0x1d8/0x700 [ 84.461388][ T7399] ? rcu_is_watching+0x13/0xc0 [ 84.462721][ T7399] do_syscall_64+0x661/0x790 [ 84.464005][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.465830][ T7399] RIP: 0033:0x7f964cd9e159 [ 84.467197][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.473344][ T7399] RSP: 002b:00007fff7fd18678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 84.476080][ T7399] RAX: 0000000000000000 RBX: 00007f964d027da0 RCX: 00007f964cd9e159 [ 84.478743][ T7399] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 84.481206][ T7399] RBP: 00007f964d027da0 R08: 0000000000000006 R09: 0000000000000000 [ 84.483589][ T7399] R10: 00007f964d027cb0 R11: 0000000000000246 R12: 000000000001483e [ 84.485943][ T7399] R13: 00007f964d02609c R14: 00000000000145ac R15: 00007f964d026090 [ 84.488357][ T7399] [ 84.489994][ T7399] Kernel Offset: disabled [ 84.491178][ T7399] Rebooting in 86400 seconds..