last executing test programs: 7.142817338s ago: executing program 0 (id=116): getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) setregid(r2, 0xee01) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r4, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000200)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r3, 0x1000, 0x2}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000300)="7db1d18e4638afe1cc084893b8ec32b42d523a211d9870a060398b7f7d460cf6a83cc072780dc8af4b65e6705032c5ce22eec5ddb46c179e856d75bf338a3eebefe2f1c9550dfe7cb1d2ab32290fba0f191136e8ca1b5691238e0372f3436c8ec7e9c114d985b9de841618ae5e1be166ca7f4dc487dfc5d5c330a5dbba9bd2f1b85df869762808f6c9b97fb28ca65a4b0a2d52e4608c4647a31fbdfdc348a2fa9ad5c7e70bf944b7539493d972381f12565355bc6b7b6e397a156efbe7aa5a0bab784698cfaf41a9ae111b501b901d9e34bbc90690050f3af7cdf0e580e48756ad1de286bf53ac46deebcb7f2a1fd064201a77b027473a23448ced51335aaa52d6e6a8972af6df38128c6ab0bb6982f86785f50dd1c9f76843348803d04dd96df79fa24ac4ed3571470722b851963115f9b640b91e9852f1bbf32fb13456c5a8aacbf30313321f2f5719ace8a063e5a173895daae7f58f1ec42cafda2f766f656244700cf5606a02ef5c025062a0009f7fda344d3c7b66d2797563f9d239015b1308d8df274ce0227f43d9f1c888cba56ccf9511ab05b0b9a9faf4a409e97bca6f888256898d48053244f39b5470d74031b4383d05fcc24051016de625578408da9665e26f3a3c17f5156c6407dc89e5455adad3ed3f44a6062a56b44778c260f1a88ec057503987fa1457b6e59ca612a99de7554bc8801f8625803b5f35d8c0a5d3a9c03a2ef7b4d8059edf272c476695c92baf822f4f48c76c0201ade33f0edcaf993b26f84e43f2f709ad8a2e58dbaa343ef7227ec69a141e6d9c2c4d009d683ffff13c84447d280ac4415d6107c70408b35148c377ee0fe75930c68b5062534517a4e297d65b260dc067c6612b9db89c658da46601ca3b7adc80966f97a8db3f4cac5a052bb13860e5b42b97082449d9e68d4b3fea668ff5020c7c0773bb875d98ea1eaa81618c552c1eb4c3f894dba6704c71e01f6b9335b7e6dfc0ff9f2af3c812c3beda47566aafcc0106bd4f87275aecc1350f00479af02700d9cd41433ec351fcf5360d5f86dce25aa1c3cd8e448cee4c9e97dca6b7111bfe879740e77084f34f907fd4b319fef3747f472e13fb90143ba96772c9460186898137f3dedb62fb5ec4d9fe59e2bc1e91ca8174caa5b52a4035334511e2dc8992128406f88cbbfd4bcfc4a585df9d97bcfcb120b7dfef263876a8880a155cf89c07b4deadaca0de4828fc897a799814994884b7e74852e86ddaff1a90af1091b4a0cf223c5ae72a7bd9d749d15e322d16c785905f1bf96a45adf6e6a567111a0bf13fb2ef3ddcf9bf6b6e427f3bdea27062a8e744e50780dfadc9468e3b2f5c9424295ad94cb266addbe20ec896851986df5f7e795e40048e299054bcb96382050362d15860078238a2578f43208bb9afcb7e3a11d84f6f56adaedf08542be5ccd66c3355109a167c95a3ca209953658cd6c8c9f420ad89ef12d0d1d52000244bf88721c578ddff4e77c05c8836ab086212677d4db9af4f3aa36ae029b0960496542b731d58650d7a79bc2d5a6899c22638252da4e0e206c6cbee4bcb061afccc94bc56f4619f2a54302b808da8f58324e46d49a8d85c220d9871c3f67d7a45f8d9566066818378e0bc1df212995d9bbf0d7b7a567a5209a84174ec673efb5f7b1664edcf5e0d36ee892b1ff069a96e7c12b844bba28f24bc37597e29d96ca42ec0c5fb2c5b89ea18b609f0534ea3f6bdc0c1e1f73fda57ccafa61d89a4171b881d883abec50b9b0ab9dbc8b4a26e8f190d27abaa3eed53c22308e684452d08c123860697a9c36d1ad70e3a343472e0a9c46a48d9c65d0cf69b0037ffd78033268b75f2bcbd327048c959273b85ed012b08480e491f659f345e7707f6795eabe12f54aabb110aab4570b0ca670593f1a55a21bab7aa47b2ab125663e56b84984abe780d9d28d3329646a0a264cafa8e7b13c3d0518475dbd3bca3f5c68f2e7e055cd74b250ad3bbe7e697cba5b29b0c10794e21051cabc4ae13022fd5ef23efae4313740711789dd86de7facc04d6b75b2c371cccbf8546ad971235354c61467631f066f15b80d74db8c1d4f7c1ed06ecb278ac447f43f7c518d099a064df57968de2fd3cde695531a3f8777cbcd22ee20daee756b7305148019f8030c5bd798059c016e88637acbf3165882262e79d6a690bcaeb9f2aa21be31e9c7664900705d31f43958c2c0be7d9aac9ce85f10712850aee51fdc1c19ad81e16e09f07f2048dd9a06e51a29d418beeba2882320e765f6965830a816158f450b81e93ea5fc7128d77cb52c0c3474fdc77fd38d1106e13876d2d4bb2c244671775c364ef4587033588482e84c45294182b2c729790906cda2405d45a0e5e51c6c07b3cb632603ced6b7a6b29263e6b415c976fb14927d371b754e9183e69c7b8b300e601a24b18832c7d6cead977d817a0de2ad0862ae37b983e4d7e8d70be7cb7517107e5df4312df2ec7f824b4e30ae333fd009e65120739788ee71197a5905fb6771b4d4547fb7e4564ed1fda742090ead9343a8b399d7bb977abf4e418af8f618e06155e2f643726758a425925d471eb195a4ec7c6b417836fe3f8ba8df7346ee5a17a259ac0c8b35c99cb7a75a1d2b94f2e21002c3984df5ca564c14a727200568bf331fd65010f46789c39672e85ed90739424325a673d285eb75f4886dc4f7d6cf79ce305442a60bbfb8c9e8e53fab0661a4ecf117fa8adceb823ca9c0fa48a1d78c0e51695361080a07e0e1b2dc60f2e5c8c82f6a415c11dd43894ce26c81c07fc07a0e00fe0281baf8409691d7dfb757db60ee8d4b0f347be961acede2f0da8d5e3012fa0a3120866740889216aed7d185f2d6418fcda8ca638b612e0d256edaee279860e4bf02cc07e7f9f5c648d2f767a7c63c73dcbaa9ab6eda955dd4c20aa6b7c9f8ed7394ff8ada5eda6514f94f3c8d7dca9b76a6c4f5a2abf74d6cb71f1dba9c4f1f5ecc5149cb30573f041148488d382177fe3ade2cd1af6d19877c8af7ac143220a1609649527d394d5e8f4f55d3cc751a039e8947f5704a5e97e9879674476f0f36a3446900911556140847e7da6d15742ec2156d3aab46ff202a26ba8287080d14a4b0f441184c491d79894d82a4a99a0b771d894cfc73ac0b16ef66f1afac1f6d6856523140bcb5f9a2d750f8f0e0e5a93eb60169b7e2c826c40fd80ec97310335b89952ae46fa50c69d3941bd263474fe2066b73ac8055e2120de544c99de832500ca127913a94f84a014815331dbf8632e95873632a043662f7a8ffda9e13328a52173cd8d887faed24a8ee615dedc56c7c0b7295c3f1859347436dab70b71af8e2032650df271d76ad604e3e33d80ddfd5db92c13bceb0b8f59cb8351c87b6d038856edaae0abccb154e8173dfc9ab60bed7d44b73523dcfe5325c274eec62a7b42ba53c9efbe44cd5f401c5bf95fd763efd4873d803a03baa9193d6f85b3dbb89ccc757d6ebe2023a398e1ac4fdc76af0d5ab684841b1ccbca913e2b5ae01953aa40c254b5cb34459329ca8138ea558de4adaaf15a49cb91c95915d4386e168e78fea5ee79dce8878fcd926c3fdfd1eddb63eebdeb856d3e5e1e58525d45f49e9f75d3688f148d7eac614bf1aea0a1fa385fe09fdbc65680a8b5616211031312b29ef153af9bb9e3e68977d259d47ae63b3c41abbd952883b54cbd87b9f1e4bc3bc9414bc72c967194a29bf3b4e5fd56c7d74445e0495e854c4f8af12e2dac9d7cdc598978491a8209d62f4b8e932508b9760042882ccb771dd088a61435eaafb8926aeb0884b8cfc62b026b2b58337ad66c79c8a0ba3036a809040d50e525ebffa2d9fa2ec14e87427d9c54ef6961be85b6c24615e586d09d64db04b766e6db45342d4b596d10122906598fcc93c9add30244683e3363adacd79fba75a21e9b1deebfff539bce490e702a6c1625906c6222b314e07b7f542fb73d123d8a2be132ede8b34fc31e01178869f2f315b6cd326f3d0d29408383edc75b0de78525061e4d6bacfe76f3cc9038c36fbda5ee73294d1d1dd51cdcb663d221a9d58e8c1438e9833cfc833361c57373f2fbb7124b74769147aae84c74c6e13b7a76d9e5c86840eaee9464e97307a08066ea925b4225b30ef9ccde799411077f107eb738477b860388c236ff160504e667826bfdaa66e1efa90362b92c06a1e20ddcdbe653ac3b796b3a7725073a8cec418e2ee382a52cb596e63a50a853c6ce64cf5c6cea147260a3f2e296dab8b4a1d79e6d71d3588aeb626e356b6338eb7b4756f70f0b6727cb34268301c2edc932981a4c050d6fa52c3f3a565678634ce0b020f2dd2c38d7a021d2019e23ec11638defb439383be8716dce6c8fe89355b4c4d20c69610df5c3f2d95d8516acb84894f73c120ab4c93ec6f6ca07bd25a50cfcded3346672ce3c96fabea36b84f63e6088a77c687827a76ec16ac291801ec5d037f055b2c148de205b3766f9d612d2ea1a17d41e2849e0c6b4ebe5922969039269fda40ee11607be9485c15f1e89d9d9e5f99d7484bd32c11eeab9b562c28b9f5967283873a72db6d699d34dcea19496f3da32ad2bf0805ab498fc7257c57d1b6f3acc605ffeb52de000bc5a7e82115df8f564256115b5e9d0be5ab4ab415bb60d881c2a66c275f4e62605318e3a57a79f8971e577e0ef6bef57b9a9cbf2d7837e3f3805b049a05a0089dd99f5ffa0cf1982b062e2fb1eb50659d13b87c7151af3d58f7e6c6934cadadf7fb8efece480579cba3c64525d02263c0b32ee4c72be3616d830f973c99162c514162e501123216e3f978925e21d127913d322c1087ceab389af5561daf731df6cd91aea11b8e5eebe8821fe550861dfba54c0311fba6f401ef36c93f6de3ca7b876caecd9c0385871cd5bfe34dcdb703c25313f33af67720ed55d07f92f44514c7f28d6b587576bb29caf05eed79f230e9a2e0a1c0a70d9a29bee15de15be9e0c0312d82b68adca7cf1136df8820c5995ce61fd939014313de0ac659e781fd0d45fb892a9dd220a33820c566c7956a0530bd27148338286dd1d20f14c29e3145ef335b83465b262c2de3266df86955131305fc464702b866cc5d5439f11989d348af0299fb38865a9e70857cba2004542b7a46a343b7767a721642f86848527fef9fb21e58c0b3c2447d526b204e8b83d77620e013115ff9b786f2a47b51eb09cffe4864ff83024ebc498c7cea963c1c8ff2eceaee4c54f4fcc7ee5f12e66e6f6670c09c517f7814bd2bcab5aeda84464de1bd7e8b7946dbfe49c98952e9b7fdcc01b70a0bb56e4da87fc0575ba9906e3cc9eeea7ec78ad1e73e48e264a0e051ce4ac01f4372245f7cae5cedc9300a431356c166a956551d95e081a2c8c07cdb8b3583ad6788ab1a5c19ddf26bc62d9853722443102444a43a72a390d42132aee22ad66083b0db534080da14b01c2df86b5b8b3d3a39f7ec221dde894c08651abb0b370215c6690abcddb8b2c70cff252e0cc4bdfac3ca48f0faa7e4bb2c90677d1f2fb12d4c4e84c1f02549b75db3ed1caecd3a563cc4442d5907580b38dc551337703dd1ab3c6617d748ee04e0ef0ec24c7f9a143cec0a3582ecc91a988e279b7ec134f06807f8bb31edbe8186b7119e4b37ec8fc2ecfb14446853dbcb2bd5b932f2dfa0a26d404490a7eb5a7a8ae52ff8224ec8b6fdf9330e8d7fca79a05e0fdb6afa78cda363540723a96872ac959dd16ccbb63774138645edbad193ab91afc2245d6a3eed71f355c3df708fd44f3eaf38be93eea", &(0x7f0000001300)=""/2) keyctl$read(0xb, r3, &(0x7f0000001340)=""/215, 0xd7) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000001440)=0x4) add_key$fscrypt_provisioning(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, &(0x7f0000001500)={0x2, 0x0, @d}, 0x18, r3) r7 = syz_open_procfs(0x0, &(0x7f0000001540)='net/vlan/vlan1\x00') setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000001580), {[{{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'geneve1\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x67, 0x1, 0xc9}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x6, 0x2, 0x4, 0x2], 0x6}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0x7f, 0xff000000, 'vlan0\x00', 'veth1_vlan\x00', {}, {}, 0x16, 0x1}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001900)={{0x1, 0x1, 0x18, r7, {r4, r2}}, './file0\x00'}) fstat(r7, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='system.posix_acl_access\x00', &(0x7f0000001a80)={{}, {0x1, 0x2}, [{0x2, 0x1, r8}, {0x2, 0x4, r4}, {0x2, 0x4, r9}, {0x2, 0x4, r10}, {0x2, 0x3, r4}, {0x2, 0x2, r4}, {0x2, 0x8, r4}, {0x2, 0x2, r4}, {0x2, 0x8, r4}], {}, [{0x8, 0x3, r0}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r1}, {0x8, 0x5, r0}, {0x8, 0x2, r5}], {0x10, 0x5}, {0x20, 0x7}}, 0x94, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) recvmsg$unix(r7, &(0x7f0000001e40)={&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/195, 0xc3}], 0x1, &(0x7f0000001d80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000002f00)={'batadv_slave_1\x00', 0x0}) r18 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002f40)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x7, &(0x7f0000001e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000001ec0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001f00)=""/4096, 0x41100, 0x0, '\x00', r17, 0x25, r18, 0x8, &(0x7f0000002f80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002fc0)={0x0, 0x9, 0x1, 0xed6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000003000)=[r16, r14], &(0x7f0000003040)=[{0x4, 0x2, 0x0, 0x6}, {0x0, 0x4, 0x8, 0x7}, {0x3, 0x1, 0xc, 0x4}], 0x10, 0xc}, 0x94) r19 = add_key$fscrypt_provisioning(&(0x7f0000003140), &(0x7f0000003180)={'syz', 0x3}, &(0x7f00000031c0)={0x3, 0x0, @c}, 0x29, r3) keyctl$KEYCTL_MOVE(0x1e, r19, r3, r3, 0x1) r20 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000003280), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000003200)=',\x00', &(0x7f0000003240)='./file0\x00', r20) r21 = openat$cgroup_subtree(r11, &(0x7f00000032c0), 0x2, 0x0) dup3(r12, r21, 0x0) read$FUSE(r15, &(0x7f0000003300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r13, &(0x7f0000005340)={0x130, 0xfffffffffffffff5, r22, {0xd26f, 0x21, 0x0, '\x00', {0x2, 0x9dc7, 0x40, 0x0, 0xee00, r2, 0x6000, '\x00', 0x9, 0x2, 0x3ff, 0x9, {0x100000000, 0x400}, {0x17225c1e, 0x3}, {0x10001, 0x8}, {0x2, 0x42e}, 0xfffffff7, 0x1, 0x7ff, 0x2271}}}, 0x130) 7.072388445s ago: executing program 0 (id=118): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beac", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423ed1f26242d23d00e63343269943cd8325184548d97bb1085e03db4273de962dd2f26e098f50dacdbfe88abdf7c99297dbb9ebb71f5113e890734e69f1f1e540a1e7d6a7e78ade4e9e137143c093594d83d4643ffd96379d62815f23f62612a63030395130ff57", 0x8d}, {&(0x7f00000007c0)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b", 0xae}], 0x2}}], 0x2, 0x2090) writev(r0, &(0x7f00000008c0)=[{0x0}], 0x1) 7.071199997s ago: executing program 0 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xff03, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 10) 7.002321803s ago: executing program 0 (id=123): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x0, 0xa, 0x4, 0x800000, 0x2, {0x0, 0x2710}, {0x1, 0x8, 0x0, 0x6, 0x6, 0x0, 'w\ahb'}, 0xf33, 0x1, {}, 0x8}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000640)='./bus\x00') r2 = creat(&(0x7f0000000680)='./sys\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000700)=0x8) open_by_handle_at(r2, &(0x7f0000000740)=ANY=[], 0x10080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="000000060000000000ab06540270884cd4b69cabacd0b482acf386475ed8cdd532310a94be47dfeacd08ca93cae6be99b14085320cc1b82271410dc0f5d519035db08453b13db757d08afd7339071a0cbebd338d8992f0d6860508164a89573aa32556e752d0b283a38254e7103f58ea6c1a24a0fe84297b15c069c017f4d0c86658a1a9f344b43e0d0dcced5d34717fb6f1d1f91677cb8d9749fa96a2"], 0xa5) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)="00d198", 0x3) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='./sys\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.835437014s ago: executing program 0 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) write$tun(r0, &(0x7f0000000200)={@val={0x8, 0x8fe}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "0cc03592ad80de6414cb5f1ea9bc4536a03e846684e91c584a4f8e8988dd895b", "8613f03624287a60976cc07d626f7f24", {"2f1fb84fe747dd7e9fd217e0aff3ecc5", "35d399a8064c0f48b25e6f10e4847f10"}}}}}, 0x86) 6.381960095s ago: executing program 0 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000005fe4a13b724ad6468c105ff09ba16227befa4bba569513fff347b3db9882a488d08628d5867a52dbbc62aec153614ab0ead507f257d5668843d495bb715d2f2f4caa9ee5461ff882e9daaaa92191a9b37cdda8fdd3667a3a704b0d77614f8116879cf5b0239ea46900f620b0bc1c23eec749a564973fe5f6362d160e51623c5ae71a19c80eb568707164c41d6146dc87968b652c5f75938005b918f8a8e235de02de5c3590c16147f2fc150b5050464587accb59142149a6060d2fc877263e8b510504f9e6d294a88239b647ae40b5552c30d89ad5ed96ef543861ba8af48b69cb2bf4d69e9c0000000000000000", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250400000014001f00000000000000000000000000000000000c00100005000000000000000c000f00e600000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="01002abd5400fcdbdf258100000008000300", @ANYRES32=r4, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008002}, 0xdb109728cbcf4188) 6.273531619s ago: executing program 32 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000005fe4a13b724ad6468c105ff09ba16227befa4bba569513fff347b3db9882a488d08628d5867a52dbbc62aec153614ab0ead507f257d5668843d495bb715d2f2f4caa9ee5461ff882e9daaaa92191a9b37cdda8fdd3667a3a704b0d77614f8116879cf5b0239ea46900f620b0bc1c23eec749a564973fe5f6362d160e51623c5ae71a19c80eb568707164c41d6146dc87968b652c5f75938005b918f8a8e235de02de5c3590c16147f2fc150b5050464587accb59142149a6060d2fc877263e8b510504f9e6d294a88239b647ae40b5552c30d89ad5ed96ef543861ba8af48b69cb2bf4d69e9c0000000000000000", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250400000014001f00000000000000000000000000000000000c00100005000000000000000c000f00e600000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="01002abd5400fcdbdf258100000008000300", @ANYRES32=r4, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008002}, 0xdb109728cbcf4188) 3.031165572s ago: executing program 3 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYRES16=r1, @ANYRES32, @ANYBLOB="01000000ef"], 0x60}}, 0x4000004) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) r2 = open(&(0x7f0000000480)='./file0\x00', 0x200040, 0xea42c136c5dffc33) mkdir(&(0x7f00000004c0)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x48) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) r3 = syz_open_dev$cec(&(0x7f0000000a00), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000a40)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000ac0)={0x40000000001, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) (async) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './debug'}}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) (async) keyctl$dh_compute(0x17, &(0x7f0000000840), &(0x7f0000000880)=""/229, 0xe5, &(0x7f0000000980)={&(0x7f00000009c0)={'cryptd(blake2b-160)\x00'}}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000300)=0x0) (async, rerun: 64) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000b00)={0xa, 0x4e24, 0x7, @mcast1, 0x1}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000b40)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000b80)={@multicast2, @multicast1, r11}, 0xc) (async, rerun: 64) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r13) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_SE_IO(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd7000fcdbdf251b00000008000100", @ANYRES32=r15, @ANYBLOB="0800150001000003050019"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002cbd7000fbdbdf251c0000000800040001000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="bb4976967e52b690"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.880435991s ago: executing program 2 (id=216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'macvlan1\x00', {0x9}, 0x8}) unshare(0x2a020400) r1 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) read(r3, &(0x7f0000000280)=""/4096, 0x1000) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe88000000000000f481b03800e705154843ad98f282af0001fe8000000000000000000000000000aa02009078000000006000000000801100fc02000000000000000000000000000000000000000000000000ffffac14140017c11ddfcbdb2cc4186071004faa2b7f4e441478244555af6e3cc57627f08890b3e614c569449f2d46fa360d12d448251d13922cac280c18545ffde66ca008edf1754a992444c14ad569891b1aec5183cd9e81b8b9aeed0a304b1008500c586cddfcb50d6f011e4fc83567f95ba4af97111de21cbc98e9b678a6505f8fa083f763c21e08dae21cb30a45c0e24a2b5d2a9bd1c4c2778cbfe740a609a2fc6740017cbb1d114c493b862acfd72372524331a90bc9bc2ef408da8f73ffed2f15c95e5cff61173dd502f8e5bcab2f3dc7240fb923e8063ea431da65a4e005a95eeab393e4f3351d38257bb2f320ccb9241442"], 0x0) 1.747916839s ago: executing program 2 (id=217): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101002, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x3200, 0x0, 0x210, 0x138, 0x1, 0x0, 0x20010, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '3\x00'}}, [@multipath={0x0, 0x1810, 0x0, 0xd8, 'multipath\x00', {'0', 0x20, '1 emc', 0x20, 0x2, 0x20, 0x2, [{0x20, 'queue-length 0', 0x20, 0x1, 0x20, '2', [{0x20, @ram={'/dev/ram', 0x1}, ' 1000'}]}, {0x20, 'historical-service-time 0', 0x20, 0x1, 0x20, '1', [{0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000 100'}]}]}}]}) 1.691609208s ago: executing program 2 (id=220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beac", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423ed1f26242d23d00e63343269943cd8325184548d97bb1085e03db4273de962dd2f26e098f50dacdbfe88abdf7c99297dbb9ebb71f5113e890734e69f1f1e540a1e7d6a7e78ade4e9e137143c093594d83d4643ffd96379d62815f23f62612a63030395130ff57", 0x8d}, {&(0x7f00000007c0)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b", 0xae}], 0x2}}], 0x2, 0x2090) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfd", 0x1b3}], 0x1) 1.591245144s ago: executing program 2 (id=221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb0}}}, &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (fail_nth: 10) 1.501120821s ago: executing program 2 (id=223): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r1, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x11, 0x66, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$unix(0x1, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80400, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f00000003c0)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) r8 = dup(r3) r9 = syz_io_uring_setup(0xf2d, &(0x7f00000001c0)={0x0, 0xb5d2, 0x8, 0x1, 0x33a, 0x0, r8}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000240)) r10 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000300)=r10, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r9, 0x5, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000004c0), 0x1, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x27}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) socket$inet(0x2, 0x80000, 0x2) 1.418668608s ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000000feffffb7"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xff03, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.368390486s ago: executing program 3 (id=226): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0x2}, {0xfff3, 0xb}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5d0}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x4b}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x25, 0x10, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000026c0), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='address_group grp1 0.0.0.0-255.255.255.255\naddress_group grp1 ::-fff::ffff:ffff:ffff:ffff:ffff:ffff:ffff\nac', 0x6b) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x40865}, 0x4008800) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000000a882, 0x0) r7 = dup(r6) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) file_setattr(r8, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x800, 0xfffffdfe, 0x881}, 0x18, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040efc07140c"], 0xff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r4, 0x800, 0x70bd2f, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.252136477s ago: executing program 2 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000580)={0x20, 0x3e, 0xf1, {0xf1, 0xf, "1844fd886e28add6d40623d417b5f2de18823de2c5f0f0680fea19421af15e2d12d4cfb2e440cab04a39f3aca388fcfb19f8dbb3d0dd4fb66f893bc3459397ae096ce3be7ec1cde5784f82975644c68f5055d42ed0c408e2034d45274889fa7f0faca02684f357f0d4062ca491d754bbc6a01336ad2350d91169c51a0ca3b50ec33f3411f6b3ba4cfd71cad638777fc3b294a4ac69e0a5ce8640742cabf068362f916b1c4a62b9ddad16b427206983d16df96eea1e906b9d30b5ff545715742353233dd38392165b3bb319f5078b0ae73d7e24c591ed7972abeb91318a948163be6979ef51fb79cef2ce9bc9009c75"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c03}}, &(0x7f00000006c0), &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x6, 0x1, {0x22, 0x88e}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000780)={0x20, 0x7, 0x55, "c9d3a38ab60befb9aa796c019c1fcc356de4c6a7f3bcf42a6724731aa9b4b4f0c74ad218d727ae46c388144961f17c479d2baf985421f3eaaf6a143bf04f58bcd417a4226f65f80add68048b11da1aea5ceaf7a8a3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000880)={0x20, 0x1, 0x61, "c9a5a19fabfcd1596e2c0fdfc73b32dee3528789c6303a8089a246323119b6a59676c081bc8aa1d2b7d79e819b61bceae08ed23c707b52380ae1e568465c658d0af2a47f2d6281d98f491829a4ed98a4ba0a9438ab2671012b261a9b80166bfb7a"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0xb}}) 1.129281281s ago: executing program 1 (id=232): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20004894}, 0x8054) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000051900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000070000000000000000feffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000100010300000000440005"], 0xfc}}, 0x0) 1.129122s ago: executing program 1 (id=233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x60000000, 0x0, 0xa25bb844b484a7e1}, 0x3004080) 1.058962002s ago: executing program 1 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14f5ff001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 981.676759ms ago: executing program 1 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000700)='proc\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x7, 0x103482) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000740)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000800)={'vlan0\x00', @local}) lseek(r2, 0x10001, 0x3) unshare(0x2e000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c00070000000000000000000800090080010000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x8c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 731.615834ms ago: executing program 4 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x8100}, 0x0) 731.139802ms ago: executing program 4 (id=240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beac", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423ed1f26242d23d00e63343269943cd8325184548d97bb1085e03db4273de962dd2f26e098f50dacdbfe88abdf7c99297dbb9ebb71f5113e890734e69f1f1e540a1e7d6a7e78ade4e9e137143c093594d83d4643ffd96379d62815f23f62612a63030395130ff57", 0x8d}, {&(0x7f00000007c0)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b", 0xae}], 0x2}}], 0x2, 0x2090) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x1ca}], 0x1) 638.578652ms ago: executing program 4 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_ublk_setup_io_uring(0xcc7, &(0x7f0000000640)={0x0, 0x299ee, 0x1022f, 0x0, 0x6b}, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000380)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000580)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f00000005c0)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000002408000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 638.375067ms ago: executing program 3 (id=242): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a18000000060a030400000000000000000a00000339000480140000001100010000000000000000000100000ada"], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000001c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0xa, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000280)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000400)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000004200010002000000030000000201000042420000500001"], 0xc8}}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000000780)={0xe}) 571.927952ms ago: executing program 3 (id=243): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000003740)=0x81) 570.019602ms ago: executing program 3 (id=244): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0xe22, 0x0, @rand_addr, 0x7}, 0x5a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r3, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}, [{0x8}]}, 0x2c}}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000001c0)=0x9, 0x4) brk(0x8000000000000000) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000000008110000000000000000000000000000000000ff020039cef47000000000000000000100000e2200089078"], 0x0) brk(0x27ce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x6, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x2000000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$unix(0x1, 0x2, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 342.033956ms ago: executing program 4 (id=245): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101002, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0x20010, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '3\x00'}}, [@multipath={0x0, 0x1810, 0x0, 0xd8, 'multipath\x00', {'0', 0x20, '1 emc', 0x20, 0x2, 0x20, 0x2, [{0x20, 'queue-length 0', 0x20, 0x1, 0x20, '2', [{0x20, @ram={'/dev/ram', 0x1}, ' 1000'}]}, {0x20, 'historical-service-time 0', 0x20, 0x1, 0x20, '1', [{0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000 100'}]}]}}]}) 271.43858ms ago: executing program 4 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000001140)={&(0x7f0000001180)=@migrate={0x118, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@loopback, @in6=@private2, 0x33, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0x2}}]}, 0x118}}, 0x0) 268.838242ms ago: executing program 4 (id=247): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x100000) fsopen(&(0x7f0000000040)='erofs\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mremap$dontunmap(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0xa000, 0x2, &(0x7f0000bdb000/0x4000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) nanosleep(&(0x7f00000005c0)={0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x600) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008044) unshare(0x100) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) syz_clone3(&(0x7f00000000c0)={0x70806000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 201.72µs ago: executing program 1 (id=248): r0 = syz_open_dev$video(&(0x7f0000000400), 0x10, 0x40100) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xef) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000440)={0x1, "22a09f95707648c10503385c6c899a1307902dd3e8fd11a2967f98c102c3be5a", 0x2, 0x2000004, 0x5, 0x20000, 0x40004a0, 0x4}) 0s ago: executing program 1 (id=249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beac", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423ed1f26242d23d00e63343269943cd8325184548d97bb1085e03db4273de962dd2f26e098f50dacdbfe88abdf7c99297dbb9ebb71f5113e890734e69f1f1e540a1e7d6a7e78ade4e9e137143c093594d83d4643ffd96379d62815f23f62612a63030395130ff57", 0x8d}, {&(0x7f00000007c0)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b", 0xae}], 0x2}}], 0x2, 0x2090) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x1c0}], 0x1) 0s ago: executing program 1 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = memfd_create(&(0x7f00000001c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = memfd_create(&(0x7f0000000540)='\x00', 0x5) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r3, 0x0, 0xfffffffffffff000, 0x1000000008000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000300)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x1d) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500), 0x96bd1e5f24e17d8, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000005c0)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000600)) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/65, 0x41}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @loopback}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000340)=0x800001, 0x4) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r8, 0xc0045401, &(0x7f0000000080)=0x4d) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) kernel console output (not intermixed with test programs): 796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.474465][ T43] audit: type=1400 audit(1794342199.625:161): avc: denied { mounton } for pid=5783 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.480236][ T43] audit: type=1400 audit(1794342199.635:162): avc: denied { module_request } for pid=5783 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.487640][ T43] audit: type=1400 audit(1794342199.635:163): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.694803][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.695565][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.703169][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.717138][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.769311][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.769759][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.861606][ T5784] infiniband rxe0: set active [ 48.864255][ T5784] infiniband rxe0: added rxe_eth0 [ 48.878461][ T5784] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.878494][ T5784] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.878526][ T5784] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.878853][ T1048] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.915294][ T5784] RDS/IB: rxe0: added [ 48.915405][ T5784] smc: adding ib device rxe0 with port count 1 [ 48.915439][ T5784] smc: ib device rxe0 port 1 has no pnetid [ 48.916532][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.930313][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.946898][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.971693][ T5158] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.037300][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.133891][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.140571][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.141288][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.141523][ T5785] bridge_slave_0: entered allmulticast mode [ 49.142706][ T5785] bridge_slave_0: entered promiscuous mode [ 49.156422][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.156524][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.156611][ T5783] bridge_slave_0: entered allmulticast mode [ 49.157899][ T5783] bridge_slave_0: entered promiscuous mode [ 49.159981][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.160047][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.160149][ T5783] bridge_slave_1: entered allmulticast mode [ 49.161412][ T5783] bridge_slave_1: entered promiscuous mode [ 49.162780][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.162849][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.162925][ T5785] bridge_slave_1: entered allmulticast mode [ 49.164211][ T5785] bridge_slave_1: entered promiscuous mode [ 49.201791][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.201916][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.202010][ T5781] bridge_slave_0: entered allmulticast mode [ 49.203254][ T5781] bridge_slave_0: entered promiscuous mode [ 49.213802][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.215487][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.217019][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.226826][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.226899][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.226985][ T5781] bridge_slave_1: entered allmulticast mode [ 49.229050][ T5781] bridge_slave_1: entered promiscuous mode [ 49.236425][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.254521][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.261329][ T5783] team0: Port device team_slave_0 added [ 49.262203][ T5785] team0: Port device team_slave_0 added [ 49.263076][ T5783] team0: Port device team_slave_1 added [ 49.264029][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.271499][ T5785] team0: Port device team_slave_1 added [ 49.285050][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.285065][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.285084][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.292577][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.292591][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.292610][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.309483][ T5781] team0: Port device team_slave_0 added [ 49.315225][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.315235][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.315246][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.316399][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.316407][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.316418][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.322771][ T5781] team0: Port device team_slave_1 added [ 49.367400][ T5783] hsr_slave_0: entered promiscuous mode [ 49.368114][ T5783] hsr_slave_1: entered promiscuous mode [ 49.368766][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.375993][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.376001][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.376012][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.377140][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.377151][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.377171][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.388348][ T5785] hsr_slave_0: entered promiscuous mode [ 49.388778][ T5785] hsr_slave_1: entered promiscuous mode [ 49.389050][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 49.389058][ T5785] Cannot create hsr debugfs directory [ 49.475703][ T5781] hsr_slave_0: entered promiscuous mode [ 49.476161][ T5781] hsr_slave_1: entered promiscuous mode [ 49.476446][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 49.476454][ T5781] Cannot create hsr debugfs directory [ 49.673754][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.679321][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.698988][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.701793][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.716370][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.718970][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.719630][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.724869][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.776931][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.777047][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.777332][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.777376][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.810550][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.813911][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.834542][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.834586][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.834753][ T5784] bridge_slave_0: entered allmulticast mode [ 49.835857][ T5784] bridge_slave_0: entered promiscuous mode [ 49.837106][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.840154][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.840512][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.843740][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.854571][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.854644][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.854792][ T5784] bridge_slave_1: entered allmulticast mode [ 49.855475][ T5784] bridge_slave_1: entered promiscuous mode [ 49.857325][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.860928][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.889427][ T243] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.890322][ T243] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.905461][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.912415][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.923437][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.925486][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.933759][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.935455][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.935810][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.937732][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.939075][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.941994][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.946876][ T5784] team0: Port device team_slave_0 added [ 49.948502][ T5784] team0: Port device team_slave_1 added [ 49.973091][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.973100][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.973111][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.979300][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.979312][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.979331][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.995280][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.019356][ T5784] hsr_slave_0: entered promiscuous mode [ 50.019851][ T5784] hsr_slave_1: entered promiscuous mode [ 50.020160][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 50.020169][ T5784] Cannot create hsr debugfs directory [ 50.083697][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.137713][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.137768][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.154564][ T243] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.154612][ T243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.187374][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.214004][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.217832][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.221414][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.228008][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.230531][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.234155][ T243] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.234236][ T243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.242710][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.242930][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.248087][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.251108][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.251182][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.253970][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.256943][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.280006][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.291830][ T243] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.291877][ T243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.309099][ T243] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.309179][ T243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.388796][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.403234][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.410093][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.410174][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.420866][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.420945][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.528662][ T5796] Bluetooth: hci1: command tx timeout [ 50.537852][ T5796] Bluetooth: hci2: command tx timeout [ 50.538097][ T5796] Bluetooth: hci0: command tx timeout [ 50.538193][ T5142] Bluetooth: hci3: command tx timeout [ 50.581931][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.615145][ T5783] veth0_vlan: entered promiscuous mode [ 50.623406][ T5783] veth1_vlan: entered promiscuous mode [ 50.644387][ T5783] veth0_macvtap: entered promiscuous mode [ 50.646927][ T5783] veth1_macvtap: entered promiscuous mode [ 50.655499][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.657430][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.660319][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.676600][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.712500][ T5785] veth0_vlan: entered promiscuous mode [ 50.731063][ T5785] veth1_vlan: entered promiscuous mode [ 50.748358][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.768017][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.771594][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.771605][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.801206][ T5785] veth0_macvtap: entered promiscuous mode [ 50.803292][ T5785] veth1_macvtap: entered promiscuous mode [ 50.811441][ T5781] veth0_vlan: entered promiscuous mode [ 50.816360][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.816371][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.835713][ T5781] veth1_vlan: entered promiscuous mode [ 50.840426][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.853137][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.867029][ T5784] veth0_vlan: entered promiscuous mode [ 50.879097][ T5784] veth1_vlan: entered promiscuous mode [ 50.892855][ T5781] veth0_macvtap: entered promiscuous mode [ 50.904457][ T5781] veth1_macvtap: entered promiscuous mode [ 50.930664][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.935770][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.942997][ T5784] veth0_macvtap: entered promiscuous mode [ 50.967090][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.969430][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.969441][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.969455][ T5784] veth1_macvtap: entered promiscuous mode [ 51.010520][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.010539][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.024816][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.031592][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.073120][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.073138][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.081644][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127723][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127763][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127781][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127797][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127814][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127830][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127846][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127863][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127879][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127895][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127912][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127929][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127945][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127961][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.128004][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.128020][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.164482][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.164500][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.198497][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.198514][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.350700][ T5961] ip_tables: iptables: counters copy to user failed while replacing table [ 51.415102][ T5969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.436840][ T5971] vlan2: entered allmulticast mode [ 51.436858][ T5971] bond0: entered allmulticast mode [ 51.436870][ T5971] bond_slave_0: entered allmulticast mode [ 51.436884][ T5971] bond_slave_1: entered allmulticast mode [ 51.438677][ T5971] bridge0: port 3(vlan2) entered blocking state [ 51.439038][ T5971] bridge0: port 3(vlan2) entered disabled state [ 51.440746][ T5971] vlan2: entered promiscuous mode [ 51.440761][ T5971] bond0: entered promiscuous mode [ 51.440772][ T5971] bond_slave_0: entered promiscuous mode [ 51.440925][ T5971] bond_slave_1: entered promiscuous mode [ 51.441849][ T5971] bridge0: port 3(vlan2) entered blocking state [ 51.441969][ T5971] bridge0: port 3(vlan2) entered forwarding state [ 51.461417][ T5971] bridge_slave_0: left allmulticast mode [ 51.461434][ T5971] bridge_slave_0: left promiscuous mode [ 51.461532][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.469854][ T5971] bridge_slave_1: left allmulticast mode [ 51.469877][ T5971] bridge_slave_1: left promiscuous mode [ 51.470122][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.474633][ T5971] vlan2: left promiscuous mode [ 51.474650][ T5971] bond0: left promiscuous mode [ 51.474662][ T5971] bond_slave_0: left promiscuous mode [ 51.474840][ T5971] bond_slave_1: left promiscuous mode [ 51.500660][ T5971] bond0: (slave bond_slave_0): Releasing backup interface [ 51.502055][ T5971] bond_slave_0: left allmulticast mode [ 51.504378][ T5971] bond0: (slave bond_slave_1): Releasing backup interface [ 51.505956][ T5971] bond_slave_1: left allmulticast mode [ 51.511091][ T5971] team0: Port device team_slave_0 removed [ 51.514407][ T5971] team0: Port device team_slave_1 removed [ 51.514746][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.514756][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.519614][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.519631][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.525643][ T5971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.529973][ T176] bridge0: port 3(vlan2) entered disabled state [ 51.537038][ T5974] ip6gretap0: entered promiscuous mode [ 51.586457][ T5977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'. [ 51.625468][ T5969] md: pers->run() failed ... [ 51.663445][ T5984] syz_tun: entered allmulticast mode [ 51.674858][ T5984] syz_tun (unregistering): left allmulticast mode [ 51.719991][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 51.849838][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.933487][ T5995] FAULT_INJECTION: forcing a failure. [ 51.933487][ T5995] name failslab, interval 1, probability 0, space 0, times 1 [ 51.933512][ T5995] CPU: 2 UID: 0 PID: 5995 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 51.933530][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.933539][ T5995] Call Trace: [ 51.933544][ T5995] [ 51.933551][ T5995] dump_stack_lvl+0x100/0x190 [ 51.933583][ T5995] should_fail_ex.cold+0x5/0xa [ 51.933607][ T5995] should_failslab+0xc2/0x120 [ 51.933621][ T5995] __kmalloc_noprof+0xfc/0x840 [ 51.933630][ T5995] ? rcu_is_watching+0x13/0xc0 [ 51.933642][ T5995] ? tomoyo_realpath_from_path+0xb6/0x690 [ 51.933657][ T5995] tomoyo_realpath_from_path+0xb6/0x690 [ 51.933671][ T5995] tomoyo_path_number_perm+0x23c/0x580 [ 51.933687][ T5995] ? tomoyo_path_number_perm+0x22e/0x580 [ 51.933703][ T5995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.933730][ T5995] ? __lock_acquire+0x5c0/0x1f40 [ 51.933759][ T5995] ? __fget_files+0x34/0x3d0 [ 51.933780][ T5995] ? find_held_lock+0x2b/0x80 [ 51.933797][ T5995] ? hook_file_ioctl_common+0x140/0x440 [ 51.933831][ T5995] ? __fget_files+0x21f/0x3d0 [ 51.933856][ T5995] security_file_ioctl+0xd3/0x230 [ 51.933883][ T5995] __x64_sys_ioctl+0xb7/0x210 [ 51.933905][ T5995] do_syscall_64+0x123/0x7b0 [ 51.933946][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.933965][ T5995] RIP: 0033:0x7f241cfa8f19 [ 51.933978][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.933990][ T5995] RSP: 002b:00007f241ddf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.934005][ T5995] RAX: ffffffffffffffda RBX: 00007f241d225fa0 RCX: 00007f241cfa8f19 [ 51.934016][ T5995] RDX: 00002000000000c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 51.934026][ T5995] RBP: 00007f241ddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 51.934036][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.934046][ T5995] R13: 00007f241d226038 R14: 00007f241d225fa0 R15: 00007ffd873d2dc8 [ 51.934069][ T5995] [ 51.934162][ T5995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.030322][ T42] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 52.035346][ T42] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 52.035387][ T42] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.035404][ T42] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 52.035422][ T42] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.038294][ T42] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 52.038333][ T42] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.038349][ T42] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 52.038367][ T42] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.046332][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.046353][ T42] usb 7-1: Product: syz [ 52.046364][ T42] usb 7-1: Manufacturer: syz [ 52.046375][ T42] usb 7-1: SerialNumber: syz [ 52.074766][ T42] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 52.092918][ T42] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 52.130375][ T42] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 52.267848][ T5979] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 52.304224][ T6002] ======================================================= [ 52.304224][ T6002] WARNING: The mand mount option has been deprecated and [ 52.304224][ T6002] and is ignored by this kernel. Remove the mand [ 52.304224][ T6002] option from the mount to silence this warning. [ 52.304224][ T6002] ======================================================= [ 52.305554][ T6002] gfs2: error -5 reading superblock [ 52.324476][ T6004] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 52.324490][ T6004] overlayfs: missing 'lowerdir' [ 52.421009][ T6014] FAULT_INJECTION: forcing a failure. [ 52.421009][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 52.421035][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 52.421054][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.421064][ T6014] Call Trace: [ 52.421071][ T6014] [ 52.421077][ T6014] dump_stack_lvl+0x100/0x190 [ 52.421112][ T6014] should_fail_ex.cold+0x5/0xa [ 52.421140][ T6014] should_failslab+0xc2/0x120 [ 52.421161][ T6014] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.421187][ T6014] ? nl80211_dump_station+0x15ca/0x2db0 [ 52.421214][ T6014] nl80211_dump_station+0x15ca/0x2db0 [ 52.421238][ T6014] ? trace_kmalloc+0xeb/0x110 [ 52.421257][ T6014] ? __kasan_kmalloc+0xaa/0xb0 [ 52.421279][ T6014] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.421298][ T6014] ? __alloc_skb+0x185/0x710 [ 52.421320][ T6014] ? __pfx_nl80211_dump_station+0x10/0x10 [ 52.421349][ T6014] ? __alloc_skb+0x4e9/0x710 [ 52.421368][ T6014] ? __alloc_skb+0x5b7/0x710 [ 52.421387][ T6014] ? __pfx___alloc_skb+0x10/0x10 [ 52.421412][ T6014] genl_dumpit+0x125/0x230 [ 52.421439][ T6014] netlink_dump+0x510/0xd30 [ 52.421465][ T6014] ? __pfx_netlink_dump+0x10/0x10 [ 52.421495][ T6014] ? __asan_memset+0x23/0x50 [ 52.421538][ T6014] ? genl_start+0x67a/0x970 [ 52.421568][ T6014] __netlink_dump_start+0x6d6/0x990 [ 52.421595][ T6014] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 52.421624][ T6014] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 52.421657][ T6014] ? __pfx_genl_get_cmd+0x10/0x10 [ 52.421680][ T6014] ? __pfx_genl_start+0x10/0x10 [ 52.421707][ T6014] ? __pfx_genl_dumpit+0x10/0x10 [ 52.421730][ T6014] ? __pfx_genl_done+0x10/0x10 [ 52.421758][ T6014] ? __radix_tree_lookup+0x217/0x2b0 [ 52.421784][ T6014] genl_rcv_msg+0x471/0x800 [ 52.421813][ T6014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.421838][ T6014] ? __lock_acquire+0x5c0/0x1f40 [ 52.421861][ T6014] ? __pfx_nl80211_dump_station+0x10/0x10 [ 52.421881][ T6014] ? __pfx_nl80211_dump_station_done+0x10/0x10 [ 52.421911][ T6014] netlink_rcv_skb+0x159/0x420 [ 52.421934][ T6014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.421961][ T6014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.421995][ T6014] ? netlink_deliver_tap+0x1ae/0xb50 [ 52.422022][ T6014] genl_rcv+0x28/0x40 [ 52.422044][ T6014] netlink_unicast+0x668/0x950 [ 52.422072][ T6014] ? __pfx_netlink_unicast+0x10/0x10 [ 52.422103][ T6014] netlink_sendmsg+0x9ac/0x10c0 [ 52.422131][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.422161][ T6014] ? selinux_socket_sendmsg+0x198/0x2f0 [ 52.422191][ T6014] ? ____sys_sendmsg+0xa99/0xc30 [ 52.422214][ T6014] ____sys_sendmsg+0xa99/0xc30 [ 52.422238][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.422264][ T6014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.422297][ T6014] ? lock_acquire+0x1d1/0x380 [ 52.422320][ T6014] ? get_pid_task+0x2a/0x250 [ 52.422339][ T6014] ___sys_sendmsg+0x190/0x1e0 [ 52.422358][ T6014] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.422374][ T6014] ? get_pid_task+0x106/0x250 [ 52.422402][ T6014] ? find_held_lock+0x2b/0x80 [ 52.422438][ T6014] __sys_sendmsg+0x160/0x210 [ 52.422461][ T6014] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.422498][ T6014] do_syscall_64+0x123/0x7b0 [ 52.422522][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.422539][ T6014] RIP: 0033:0x7fdf7a7a8f19 [ 52.422554][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.422569][ T6014] RSP: 002b:00007fdf7b5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.422586][ T6014] RAX: ffffffffffffffda RBX: 00007fdf7aa25fa0 RCX: 00007fdf7a7a8f19 [ 52.422598][ T6014] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 52.422608][ T6014] RBP: 00007fdf7b5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 52.422618][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.422628][ T6014] R13: 00007fdf7aa26038 R14: 00007fdf7aa25fa0 R15: 00007ffe8bfa0d88 [ 52.422654][ T6014] [ 52.435110][ T6002] Zero length message leads to an empty skb [ 52.608104][ T5796] Bluetooth: hci2: command tx timeout [ 52.608149][ T5796] Bluetooth: hci0: command tx timeout [ 52.608166][ T5796] Bluetooth: hci1: command tx timeout [ 52.608245][ T5142] Bluetooth: hci3: command tx timeout [ 52.798439][ T6023] capability: warning: `syz.0.24' uses 32-bit capabilities (legacy support in use) [ 52.906607][ T6031] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 52.910343][ T6031] bond1: (slave lo): Enslaving as an active interface with an up link [ 52.911393][ T6031] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 52.983590][ T6036] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 53.063229][ T6042] syzkaller0: entered promiscuous mode [ 53.063250][ T6042] syzkaller0: entered allmulticast mode [ 53.066723][ T6042] tipc: Started in network mode [ 53.066745][ T6042] tipc: Node identity 8ead92150dc7, cluster identity 4711 [ 53.070702][ T6042] tipc: Enabled bearer , priority 0 [ 53.075371][ T6042] tipc: Resetting bearer [ 53.115711][ T6040] tipc: Resetting bearer [ 53.124641][ T6040] tipc: Disabling bearer [ 53.177245][ T43] kauditd_printk_skb: 98 callbacks suppressed [ 53.177265][ T43] audit: type=1400 audit(1794342204.325:262): avc: denied { create } for pid=6047 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.191524][ T43] audit: type=1400 audit(1794342204.345:263): avc: denied { bind } for pid=6047 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.193145][ T43] audit: type=1400 audit(1794342204.345:264): avc: denied { setopt } for pid=6047 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.238324][ T6050] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 53.241670][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.243510][ T6050] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 53.306060][ T43] audit: type=1400 audit(1794342204.455:265): avc: denied { create } for pid=6051 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.307083][ T43] audit: type=1400 audit(1794342204.455:266): avc: denied { bind } for pid=6051 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.309021][ T43] audit: type=1400 audit(1794342204.465:267): avc: denied { listen } for pid=6051 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.309688][ T43] audit: type=1400 audit(1794342204.465:268): avc: denied { write } for pid=6051 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.312351][ T43] audit: type=1400 audit(1794342204.465:269): avc: denied { accept } for pid=6051 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.555938][ T6011] kexec: Could not allocate control_code_buffer [ 53.652035][ T43] audit: type=1400 audit(1794342204.805:270): avc: denied { write } for pid=6055 comm="syz.3.35" name="001" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.717021][ T43] audit: type=1400 audit(1794342204.865:271): avc: denied { mount } for pid=6059 comm="syz.3.36" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.097609][ T42] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 54.161204][ T6065] FAULT_INJECTION: forcing a failure. [ 54.161204][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.161222][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.1.37 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.161237][ T6065] Tainted: [L]=SOFTLOCKUP [ 54.161240][ T6065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.161246][ T6065] Call Trace: [ 54.161250][ T6065] [ 54.161254][ T6065] dump_stack_lvl+0x100/0x190 [ 54.161275][ T6065] should_fail_ex.cold+0x5/0xa [ 54.161291][ T6065] _copy_from_user+0x2e/0xd0 [ 54.161305][ T6065] packet_setsockopt+0x1706/0x2380 [ 54.161318][ T6065] ? sock_has_perm+0x254/0x320 [ 54.161334][ T6065] ? __pfx_packet_setsockopt+0x10/0x10 [ 54.161352][ T6065] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 54.161367][ T6065] ? find_held_lock+0x2b/0x80 [ 54.161377][ T6065] ? __fget_files+0x215/0x3d0 [ 54.161393][ T6065] ? selinux_socket_setsockopt+0x6a/0x80 [ 54.161406][ T6065] ? __pfx_packet_setsockopt+0x10/0x10 [ 54.161426][ T6065] do_sock_setsockopt+0xf3/0x1d0 [ 54.161451][ T6065] __sys_setsockopt+0x195/0x220 [ 54.161474][ T6065] __x64_sys_setsockopt+0xbd/0x160 [ 54.161492][ T6065] ? do_syscall_64+0xae/0x7b0 [ 54.161511][ T6065] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.161530][ T6065] do_syscall_64+0x123/0x7b0 [ 54.161544][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.161555][ T6065] RIP: 0033:0x7fbcbada8f19 [ 54.161564][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.161574][ T6065] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.161590][ T6065] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 54.161600][ T6065] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 54.161610][ T6065] RBP: 00007fbcbbbca090 R08: 0000000000000004 R09: 0000000000000000 [ 54.161620][ T6065] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000001 [ 54.161630][ T6065] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 54.161651][ T6065] [ 54.227624][ T42] usb 8-1: device descriptor read/64, error -71 [ 54.397431][ T6075] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 54.397449][ T6075] netlink: 244 bytes leftover after parsing attributes in process `syz.1.42'. [ 54.487571][ T42] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 54.500202][ T6078] Dropped outbound packet type=d5b3 [ 54.615852][ T5861] usb 7-1: USB disconnect, device number 2 [ 54.628004][ T5861] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 54.629831][ T5861] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 54.630222][ T5861] ti_usb_3410_5052 7-1:2.0: device disconnected [ 54.637896][ T42] usb 8-1: device descriptor read/64, error -71 [ 54.672396][ T6093] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 54.698927][ T68] Bluetooth: hci1: command tx timeout [ 54.698951][ T68] Bluetooth: hci0: command tx timeout [ 54.698967][ T68] Bluetooth: hci2: command tx timeout [ 54.699119][ T5142] Bluetooth: hci3: command tx timeout [ 54.750657][ T42] usb usb8-port1: attempt power cycle [ 54.804373][ T6108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.810427][ T6108] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 54.811686][ T6108] VFS: Can't find a romfs filesystem on dev nullb0. [ 54.811686][ T6108] [ 55.047331][ T5142] Bluetooth: hci1: adv larger than maximum supported [ 55.047350][ T5142] Bluetooth: hci1: adv larger than maximum supported [ 55.047364][ T5142] Bluetooth: hci1: Malformed LE Event: 0x0d [ 55.107608][ T42] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 55.138855][ T42] usb 8-1: device descriptor read/8, error -71 [ 55.207611][ T66] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.358360][ T66] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 55.360086][ T66] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 55.360144][ T66] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 55.360158][ T66] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 55.360172][ T66] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 55.362037][ T66] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 55.362073][ T66] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 55.362089][ T66] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 55.362107][ T66] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 55.364270][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.364289][ T66] usb 5-1: Product: syz [ 55.364300][ T66] usb 5-1: Manufacturer: syz [ 55.364315][ T66] usb 5-1: SerialNumber: syz [ 55.370777][ T66] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 55.375091][ T66] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 55.378311][ T66] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 55.407592][ T42] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 55.419317][ T42] usb 8-1: device descriptor read/8, error -71 [ 55.538835][ T42] usb usb8-port1: unable to enumerate USB device [ 55.571240][ T6127] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 55.690177][ T6155] FAULT_INJECTION: forcing a failure. [ 55.690177][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.690203][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.2.65 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.690224][ T6155] Tainted: [L]=SOFTLOCKUP [ 55.690229][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.690238][ T6155] Call Trace: [ 55.690244][ T6155] [ 55.690255][ T6155] dump_stack_lvl+0x100/0x190 [ 55.690287][ T6155] should_fail_ex.cold+0x5/0xa [ 55.690312][ T6155] _copy_to_user+0x32/0xd0 [ 55.690334][ T6155] simple_read_from_buffer+0xcb/0x170 [ 55.690357][ T6155] proc_fail_nth_read+0x1af/0x230 [ 55.690380][ T6155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.690404][ T6155] ? rw_verify_area+0xce/0x6d0 [ 55.690428][ T6155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.690450][ T6155] vfs_read+0x1e4/0xb30 [ 55.690467][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.690488][ T6155] ? __fget_files+0x34/0x3d0 [ 55.690508][ T6155] ? __pfx_vfs_read+0x10/0x10 [ 55.690522][ T6155] ? find_held_lock+0x2b/0x80 [ 55.690540][ T6155] ? __fget_files+0x215/0x3d0 [ 55.690564][ T6155] ? __fget_files+0x21f/0x3d0 [ 55.690590][ T6155] ksys_read+0x12a/0x250 [ 55.690607][ T6155] ? __pfx_ksys_read+0x10/0x10 [ 55.690630][ T6155] do_syscall_64+0x123/0x7b0 [ 55.690652][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.690667][ T6155] RIP: 0033:0x7fe06c56974e [ 55.690680][ T6155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.690694][ T6155] RSP: 002b:00007fe06d530fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.690709][ T6155] RAX: ffffffffffffffda RBX: 00007fe06d5316c0 RCX: 00007fe06c56974e [ 55.690719][ T6155] RDX: 000000000000000f RSI: 00007fe06d5310a0 RDI: 0000000000000005 [ 55.690729][ T6155] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 55.690738][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.690747][ T6155] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 55.690769][ T6155] [ 55.736131][ T6157] syzkaller0: entered promiscuous mode [ 55.736150][ T6157] syzkaller0: entered allmulticast mode [ 55.900511][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.962898][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.963045][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.963175][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.963317][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.963447][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.963571][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.965934][ T6160] overlayfs: missing 'lowerdir' [ 56.768119][ T5796] Bluetooth: hci2: command tx timeout [ 56.768148][ T5796] Bluetooth: hci0: command tx timeout [ 56.768166][ T5796] Bluetooth: hci1: command tx timeout [ 56.768207][ T5142] Bluetooth: hci3: command tx timeout [ 56.784046][ T6190] hd3ss3220 0-0047: supply vdd5 not found, using dummy regulator [ 56.794164][ T6190] hd3ss3220 0-0047: supply vcc33 not found, using dummy regulator [ 56.805985][ T6190] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 57.971544][ T5861] usb 5-1: USB disconnect, device number 2 [ 57.980366][ T5861] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 57.984696][ T5861] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 57.985841][ T5861] ti_usb_3410_5052 5-1:2.0: device disconnected [ 58.238438][ T6140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.240472][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 58.240484][ T43] audit: type=1400 audit(1794342209.395:327): avc: denied { read } for pid=6180 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.337613][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.341493][ T6206] __nla_validate_parse: 26 callbacks suppressed [ 58.341506][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.79'. [ 58.458926][ T43] audit: type=1400 audit(1794342209.615:328): avc: denied { read } for pid=6209 comm="syz.3.81" name="event2" dev="devtmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.459093][ T43] audit: type=1400 audit(1794342209.615:329): avc: denied { open } for pid=6209 comm="syz.3.81" path="/dev/input/event2" dev="devtmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.508304][ T5861] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.509993][ T5861] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.510016][ T5861] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.510045][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.515278][ T6198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.525685][ T5861] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.542254][ T43] audit: type=1400 audit(1794342209.695:330): avc: denied { prog_run } for pid=6200 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.551783][ T43] audit: type=1400 audit(1794342209.705:331): avc: denied { sqpoll } for pid=6200 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.707586][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 58.798425][ T5861] usb 5-1: USB disconnect, device number 3 [ 58.857604][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 58.858546][ T25] usb 8-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 58.858993][ T25] usb 8-1: config 0 has no interfaces? [ 58.860536][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.860547][ T25] usb 8-1: Product: syz [ 58.860705][ T25] usb 8-1: Manufacturer: syz [ 58.860713][ T25] usb 8-1: SerialNumber: syz [ 58.862985][ T25] usb 8-1: config 0 descriptor?? [ 59.342467][ T6229] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 59.342488][ T6229] netlink: 244 bytes leftover after parsing attributes in process `syz.0.83'. [ 59.395438][ T43] audit: type=1400 audit(1794342210.545:332): avc: denied { mount } for pid=6230 comm="syz.0.84" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.401842][ T43] audit: type=1400 audit(1794342210.555:333): avc: denied { read write } for pid=6230 comm="syz.0.84" name="video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.402130][ T43] audit: type=1400 audit(1794342210.555:334): avc: denied { open } for pid=6230 comm="syz.0.84" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.403657][ T6231] ip_tables: iptables: counters copy to user failed while replacing table [ 59.405099][ T43] audit: type=1400 audit(1794342210.555:335): avc: denied { ioctl } for pid=6230 comm="syz.0.84" path="/dev/video0" dev="devtmpfs" ino=952 ioctlcmd=0xc0145608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.407781][ T43] audit: type=1400 audit(1794342210.555:336): avc: denied { watch watch_reads } for pid=6230 comm="syz.0.84" path="/17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.497628][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.596720][ T6235] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 59.598254][ T6235] ipvtap0: entered allmulticast mode [ 59.598271][ T6235] veth0_vlan: entered allmulticast mode [ 59.603777][ T6235] team0: Device ipvtap0 failed to register rx_handler [ 59.609235][ T6235] lo: entered allmulticast mode [ 59.612772][ T6235] x_tables: duplicate underflow at hook 2 [ 59.616442][ T6235] xt_hashlimit: size too large, truncated to 1048576 [ 59.648430][ T5861] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 59.649347][ T5861] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 59.650211][ T5861] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 59.652213][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.652231][ T5861] usb 6-1: Product: syz [ 59.652243][ T5861] usb 6-1: Manufacturer: syz [ 59.652254][ T5861] usb 6-1: SerialNumber: syz [ 59.662792][ T5861] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 59.668813][ T5861] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 59.675608][ T5861] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 59.742039][ T6234] lo: left allmulticast mode [ 59.800227][ T6241] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 59.868596][ T6249] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 59.868619][ T6249] overlayfs: missing 'lowerdir' [ 59.878675][ T6227] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 59.881186][ T6248] gfs2: error -5 reading superblock [ 60.014615][ T6259] FAULT_INJECTION: forcing a failure. [ 60.014615][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 60.014642][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.0.94 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.014665][ T6259] Tainted: [L]=SOFTLOCKUP [ 60.014672][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.014681][ T6259] Call Trace: [ 60.014694][ T6259] [ 60.014702][ T6259] dump_stack_lvl+0x100/0x190 [ 60.014754][ T6259] should_fail_ex.cold+0x5/0xa [ 60.014791][ T6259] should_failslab+0xc2/0x120 [ 60.014839][ T6259] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.014864][ T6259] ? get_device_parent+0x260/0x4c0 [ 60.014901][ T6259] ? get_device_parent+0x29a/0x4c0 [ 60.014927][ T6259] get_device_parent+0x29a/0x4c0 [ 60.014952][ T6259] device_add+0xc3b/0x1970 [ 60.014977][ T6259] ? __pfx_dev_set_name+0x10/0x10 [ 60.014992][ T6259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.015022][ T6259] ? __pfx_device_add+0x10/0x10 [ 60.015046][ T6259] ? lockdep_init_map_type+0x5c/0x250 [ 60.015072][ T6259] ? __init_waitqueue_head+0xca/0x150 [ 60.015104][ T6259] wakeup_source_device_create+0x243/0x2e0 [ 60.015142][ T6259] wakeup_source_sysfs_add+0x1c/0x90 [ 60.015174][ T6259] wakeup_source_register+0x154/0x3e0 [ 60.015199][ T6259] ep_create_wakeup_source+0x1df/0x2e0 [ 60.015227][ T6259] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 60.015258][ T6259] ? do_epoll_ctl_file+0x10d0/0x39f0 [ 60.015275][ T6259] ? do_epoll_ctl_file+0x10d0/0x39f0 [ 60.015300][ T6259] do_epoll_ctl_file+0x1f44/0x39f0 [ 60.015327][ T6259] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 60.015344][ T6259] ? lock_acquire+0x1d1/0x380 [ 60.015366][ T6259] ? __fget_files+0x34/0x3d0 [ 60.015389][ T6259] ? find_held_lock+0x2b/0x80 [ 60.015409][ T6259] ? __fget_files+0x215/0x3d0 [ 60.015435][ T6259] ? __fget_files+0x21f/0x3d0 [ 60.015464][ T6259] ? do_epoll_ctl+0xfd/0x1a0 [ 60.015479][ T6259] do_epoll_ctl+0xfd/0x1a0 [ 60.015498][ T6259] ? __pfx_do_epoll_ctl+0x10/0x10 [ 60.015523][ T6259] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 60.015542][ T6259] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 60.015569][ T6259] do_syscall_64+0x123/0x7b0 [ 60.015598][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.015615][ T6259] RIP: 0033:0x7fdf7a7a8f19 [ 60.015630][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.015645][ T6259] RSP: 002b:00007fdf7b5d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 60.015663][ T6259] RAX: ffffffffffffffda RBX: 00007fdf7aa25fa0 RCX: 00007fdf7a7a8f19 [ 60.015674][ T6259] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 60.015684][ T6259] RBP: 00007fdf7b5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 60.015695][ T6259] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 60.015705][ T6259] R13: 00007fdf7aa26038 R14: 00007fdf7aa25fa0 R15: 00007ffe8bfa0d88 [ 60.015731][ T6259] [ 60.078943][ T6263] rnbd_client L127: Can't parse path ivP|d-yY_~XG&PXt~450d5>!JS"w e,: -22 [ 60.080608][ T6263] CIFS: VFS: UNC: path must begin with // or \\ [ 60.080619][ T6263] Malformed UNC in devname [ 60.080619][ T6263] [ 60.080670][ T6263] CIFS: VFS: Malformed UNC in devname [ 60.107368][ T5909] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.132807][ T6268] process 'syz.2.98' launched './file0' with NULL argv: empty string added [ 60.673688][ T6271] syz.2.99 (6271): drop_caches: 2 [ 60.785475][ T6287] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 60.785495][ T6287] syzkaller1: ignored: set checksum enabled [ 60.787066][ T6287] tipc: Started in network mode [ 60.787096][ T6287] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 60.787874][ T6287] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 60.788196][ T6287] tipc: Enabled bearer , priority 10 [ 60.916582][ T6292] Bluetooth: MGMT ver 1.23 [ 60.916746][ T6292] FAULT_INJECTION: forcing a failure. [ 60.916746][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.916768][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.2.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.916788][ T6292] Tainted: [L]=SOFTLOCKUP [ 60.916794][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.916803][ T6292] Call Trace: [ 60.916808][ T6292] [ 60.916816][ T6292] dump_stack_lvl+0x100/0x190 [ 60.916845][ T6292] should_fail_ex.cold+0x5/0xa [ 60.916870][ T6292] _copy_to_user+0x32/0xd0 [ 60.916892][ T6292] simple_read_from_buffer+0xcb/0x170 [ 60.916914][ T6292] proc_fail_nth_read+0x1af/0x230 [ 60.916937][ T6292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.916960][ T6292] ? rw_verify_area+0xce/0x6d0 [ 60.916982][ T6292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.917003][ T6292] vfs_read+0x1e4/0xb30 [ 60.917019][ T6292] ? lock_acquire+0x1d1/0x380 [ 60.917040][ T6292] ? __fget_files+0x34/0x3d0 [ 60.917059][ T6292] ? __pfx_vfs_read+0x10/0x10 [ 60.917073][ T6292] ? find_held_lock+0x2b/0x80 [ 60.917090][ T6292] ? __fget_files+0x215/0x3d0 [ 60.917113][ T6292] ? __fget_files+0x21f/0x3d0 [ 60.917139][ T6292] ksys_read+0x12a/0x250 [ 60.917155][ T6292] ? __pfx_ksys_read+0x10/0x10 [ 60.917178][ T6292] do_syscall_64+0x123/0x7b0 [ 60.917199][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.917216][ T6292] RIP: 0033:0x7fe06c56974e [ 60.917229][ T6292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.917243][ T6292] RSP: 002b:00007fe06d530fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.917259][ T6292] RAX: ffffffffffffffda RBX: 00007fe06d5316c0 RCX: 00007fe06c56974e [ 60.917269][ T6292] RDX: 000000000000000f RSI: 00007fe06d5310a0 RDI: 0000000000000003 [ 60.917278][ T6292] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 60.917286][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.917295][ T6292] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 60.917317][ T6292] [ 61.128212][ T6300] FAULT_INJECTION: forcing a failure. [ 61.128212][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 61.128239][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.2.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.128261][ T6300] Tainted: [L]=SOFTLOCKUP [ 61.128267][ T6300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.128274][ T6300] Call Trace: [ 61.128280][ T6300] [ 61.128287][ T6300] dump_stack_lvl+0x100/0x190 [ 61.128318][ T6300] should_fail_ex.cold+0x5/0xa [ 61.128343][ T6300] should_failslab+0xc2/0x120 [ 61.128362][ T6300] __kmalloc_node_noprof+0xff/0x870 [ 61.128380][ T6300] ? crypto_create_tfm_node+0x8d/0x3b0 [ 61.128406][ T6300] crypto_create_tfm_node+0x8d/0x3b0 [ 61.128429][ T6300] crypto_ahash_init_tfm+0x4af/0x6f0 [ 61.128452][ T6300] crypto_create_tfm_node+0x171/0x3b0 [ 61.128475][ T6300] crypto_alloc_tfm_node+0x102/0x260 [ 61.128501][ T6300] ah6_init_state+0xf9/0x7c0 [ 61.128539][ T6300] __xfrm_init_state+0x842/0x1dd0 [ 61.128577][ T6300] xfrm_add_sa+0x24ac/0x5da0 [ 61.128605][ T6300] ? __pfx_xfrm_add_sa+0x10/0x10 [ 61.128627][ T6300] ? __nla_parse+0x40/0x60 [ 61.128645][ T6300] ? __pfx_xfrm_add_sa+0x10/0x10 [ 61.128671][ T6300] xfrm_user_rcv_msg+0x483/0xd70 [ 61.128694][ T6300] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 61.128712][ T6300] ? kfree_skbmem+0x19f/0x210 [ 61.128738][ T6300] ? consume_skb+0xd6/0x110 [ 61.128761][ T6300] ? find_held_lock+0x2b/0x80 [ 61.128802][ T6300] ? rcu_is_watching+0x13/0xc0 [ 61.128821][ T6300] ? trace_contention_end+0x126/0x160 [ 61.128843][ T6300] ? __mutex_lock+0x267/0x1c10 [ 61.128865][ T6300] netlink_rcv_skb+0x159/0x420 [ 61.128897][ T6300] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 61.128916][ T6300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 61.128948][ T6300] ? netlink_deliver_tap+0x1ae/0xb50 [ 61.128971][ T6300] xfrm_netlink_rcv+0x71/0x90 [ 61.128987][ T6300] netlink_unicast+0x668/0x950 [ 61.129012][ T6300] ? __pfx_netlink_unicast+0x10/0x10 [ 61.129039][ T6300] netlink_sendmsg+0x9ac/0x10c0 [ 61.129065][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.129091][ T6300] ? selinux_socket_sendmsg+0x198/0x2f0 [ 61.129117][ T6300] ? ____sys_sendmsg+0xa99/0xc30 [ 61.129159][ T6300] ____sys_sendmsg+0xa99/0xc30 [ 61.129179][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.129203][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.129232][ T6300] ? lock_acquire+0x1d1/0x380 [ 61.129251][ T6300] ? get_pid_task+0x2a/0x250 [ 61.129270][ T6300] ___sys_sendmsg+0x190/0x1e0 [ 61.129287][ T6300] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.129302][ T6300] ? get_pid_task+0x106/0x250 [ 61.129327][ T6300] ? find_held_lock+0x2b/0x80 [ 61.129360][ T6300] __sys_sendmsg+0x160/0x210 [ 61.129380][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.129413][ T6300] do_syscall_64+0x123/0x7b0 [ 61.129434][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.129450][ T6300] RIP: 0033:0x7fe06c5a8f19 [ 61.129464][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.129477][ T6300] RSP: 002b:00007fe06d531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.129494][ T6300] RAX: ffffffffffffffda RBX: 00007fe06c825fa0 RCX: 00007fe06c5a8f19 [ 61.129504][ T6300] RDX: 0000000004000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 61.129514][ T6300] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 61.129524][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.129532][ T6300] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 61.129555][ T6300] [ 61.321646][ T6309] bridge0: port 1(syz_tun) entered blocking state [ 61.321694][ T6309] bridge0: port 1(syz_tun) entered disabled state [ 61.321817][ T6309] syz_tun: entered allmulticast mode [ 61.322591][ T6309] syz_tun: entered promiscuous mode [ 61.322680][ T6309] vlan2: entered promiscuous mode [ 61.322688][ T6309] bond0: entered promiscuous mode [ 61.323302][ T6309] bridge0: port 1(syz_tun) entered blocking state [ 61.323345][ T6309] bridge0: port 1(syz_tun) entered forwarding state [ 61.419796][ T5972] usb 8-1: USB disconnect, device number 6 [ 61.459485][ T6316] FAULT_INJECTION: forcing a failure. [ 61.459485][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 61.459504][ T6316] CPU: 2 UID: 0 PID: 6316 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.459518][ T6316] Tainted: [L]=SOFTLOCKUP [ 61.459522][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.459527][ T6316] Call Trace: [ 61.459531][ T6316] [ 61.459535][ T6316] dump_stack_lvl+0x100/0x190 [ 61.459556][ T6316] should_fail_ex.cold+0x5/0xa [ 61.459625][ T6316] should_failslab+0xc2/0x120 [ 61.459645][ T6316] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.459663][ T6316] ? do_getname+0x35/0x390 [ 61.459681][ T6316] do_getname+0x35/0x390 [ 61.459698][ T6316] do_sys_openat2+0xc3/0x1d0 [ 61.459713][ T6316] ? __pfx_do_sys_openat2+0x10/0x10 [ 61.459727][ T6316] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.459749][ T6316] __x64_sys_openat+0x12d/0x210 [ 61.459764][ T6316] ? __pfx___x64_sys_openat+0x10/0x10 [ 61.459785][ T6316] do_syscall_64+0x123/0x7b0 [ 61.459798][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.467555][ T6316] RIP: 0033:0x7fe06c56974e [ 61.467580][ T6316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.467595][ T6316] RSP: 002b:00007fe06d50fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.467615][ T6316] RAX: ffffffffffffffda RBX: 00007fe06d5106c0 RCX: 00007fe06c56974e [ 61.467625][ T6316] RDX: 0000000000000002 RSI: 00007fe06d50fc00 RDI: ffffffffffffff9c [ 61.467630][ T6316] RBP: 00007fe06d50fc00 R08: 0000000000000000 R09: 0000000000000000 [ 61.467636][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 61.467646][ T6316] R13: 00007fe06c826128 R14: 00007fe06c826090 R15: 00007fffbd504368 [ 61.467671][ T6316] [ 61.506119][ T6318] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 61.506363][ T6318] FAULT_INJECTION: forcing a failure. [ 61.506363][ T6318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.506386][ T6318] CPU: 3 UID: 0 PID: 6318 Comm: syz.3.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.506408][ T6318] Tainted: [L]=SOFTLOCKUP [ 61.506415][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.506423][ T6318] Call Trace: [ 61.506429][ T6318] [ 61.506437][ T6318] dump_stack_lvl+0x100/0x190 [ 61.506469][ T6318] should_fail_ex.cold+0x5/0xa [ 61.506497][ T6318] _copy_to_user+0x32/0xd0 [ 61.506523][ T6318] simple_read_from_buffer+0xcb/0x170 [ 61.506549][ T6318] proc_fail_nth_read+0x1af/0x230 [ 61.506575][ T6318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.506600][ T6318] ? rw_verify_area+0xce/0x6d0 [ 61.506624][ T6318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.506646][ T6318] vfs_read+0x1e4/0xb30 [ 61.506666][ T6318] ? lock_acquire+0x1d1/0x380 [ 61.506690][ T6318] ? __fget_files+0x34/0x3d0 [ 61.506712][ T6318] ? __pfx_vfs_read+0x10/0x10 [ 61.506727][ T6318] ? find_held_lock+0x2b/0x80 [ 61.506747][ T6318] ? __fget_files+0x215/0x3d0 [ 61.506774][ T6318] ? __fget_files+0x21f/0x3d0 [ 61.506804][ T6318] ksys_read+0x12a/0x250 [ 61.506822][ T6318] ? __pfx_ksys_read+0x10/0x10 [ 61.506846][ T6318] do_syscall_64+0x123/0x7b0 [ 61.506871][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.506888][ T6318] RIP: 0033:0x7f241cf6974e [ 61.506903][ T6318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.506919][ T6318] RSP: 002b:00007f241ddf3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.506937][ T6318] RAX: ffffffffffffffda RBX: 00007f241ddf46c0 RCX: 00007f241cf6974e [ 61.506949][ T6318] RDX: 000000000000000f RSI: 00007f241ddf40a0 RDI: 0000000000000004 [ 61.506960][ T6318] RBP: 00007f241ddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 61.506971][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.506982][ T6318] R13: 00007f241d226038 R14: 00007f241d225fa0 R15: 00007ffd873d2dc8 [ 61.507007][ T6318] [ 61.628018][ T6330] FAULT_INJECTION: forcing a failure. [ 61.628018][ T6330] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.628036][ T6330] CPU: 2 UID: 0 PID: 6330 Comm: syz.0.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.628051][ T6330] Tainted: [L]=SOFTLOCKUP [ 61.628054][ T6330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.628059][ T6330] Call Trace: [ 61.628063][ T6330] [ 61.628068][ T6330] dump_stack_lvl+0x100/0x190 [ 61.628113][ T6330] should_fail_ex.cold+0x5/0xa [ 61.628130][ T6330] should_fail_alloc_page+0xeb/0x140 [ 61.628144][ T6330] prepare_alloc_pages+0x1f0/0x5b0 [ 61.628158][ T6330] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 61.628174][ T6330] ? __handle_mm_fault+0x4ec/0x2f40 [ 61.628187][ T6330] ? __lock_acquire+0x5c0/0x1f40 [ 61.628202][ T6330] ? __css_rstat_updated+0x1ce/0x590 [ 61.628213][ T6330] ? __pfx___handle_mm_fault+0x10/0x10 [ 61.628225][ T6330] ? __pfx___css_rstat_updated+0x10/0x10 [ 61.628239][ T6330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.628253][ T6330] ? lock_acquire+0x1d1/0x380 [ 61.628268][ T6330] ? find_held_lock+0x2b/0x80 [ 61.628279][ T6330] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.628299][ T6330] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.628314][ T6330] ? rcu_is_watching+0x13/0xc0 [ 61.628326][ T6330] ? __up_read+0x333/0x980 [ 61.628336][ T6330] ? __pfx___up_read+0x10/0x10 [ 61.628344][ T6330] ? do_user_addr_fault+0x7d7/0x12f0 [ 61.628370][ T6330] ? do_user_addr_fault+0x7d7/0x12f0 [ 61.628391][ T6330] ? irqentry_exit+0x202/0xab0 [ 61.628402][ T6330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.628420][ T6330] ? policy_nodemask+0xed/0x5e0 [ 61.628434][ T6330] alloc_pages_mpol+0x201/0x560 [ 61.628448][ T6330] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 61.628464][ T6330] alloc_pages_noprof+0x1a/0x160 [ 61.628479][ T6330] bpf_prog_test_run_skb+0x2781/0x3560 [ 61.628499][ T6330] ? __fget_files+0x211/0x3d0 [ 61.628516][ T6330] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 61.628531][ T6330] ? fput+0x7c/0x100 [ 61.628546][ T6330] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 61.628560][ T6330] __sys_bpf+0x1d13/0x4b60 [ 61.628573][ T6330] ? __pfx___sys_bpf+0x10/0x10 [ 61.628582][ T6330] ? find_held_lock+0x2b/0x80 [ 61.628593][ T6330] ? get_pid_task+0xfc/0x250 [ 61.628602][ T6330] ? get_pid_task+0xfc/0x250 [ 61.628616][ T6330] ? find_held_lock+0x2b/0x80 [ 61.628630][ T6330] ? rcu_read_lock_any_held+0x6a/0x90 [ 61.628642][ T6330] ? find_held_lock+0x2b/0x80 [ 61.628653][ T6330] ? ksys_write+0x190/0x250 [ 61.628663][ T6330] ? ksys_write+0x190/0x250 [ 61.628673][ T6330] ? lock_acquire+0x1d1/0x380 [ 61.628696][ T6330] ? fput+0x7c/0x100 [ 61.628711][ T6330] ? ksys_write+0x1ac/0x250 [ 61.628723][ T6330] ? __x64_sys_bpf+0xce/0x140 [ 61.628732][ T6330] __x64_sys_bpf+0xce/0x140 [ 61.628743][ T6330] ? do_syscall_64+0xae/0x7b0 [ 61.628756][ T6330] do_syscall_64+0x123/0x7b0 [ 61.628769][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.628779][ T6330] RIP: 0033:0x7fdf7a7a8f19 [ 61.628788][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.628797][ T6330] RSP: 002b:00007fdf7b5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.628807][ T6330] RAX: ffffffffffffffda RBX: 00007fdf7aa25fa0 RCX: 00007fdf7a7a8f19 [ 61.628813][ T6330] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 61.628819][ T6330] RBP: 00007fdf7b5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 61.628824][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.628830][ T6330] R13: 00007fdf7aa26038 R14: 00007fdf7aa25fa0 R15: 00007ffe8bfa0d88 [ 61.628843][ T6330] [ 61.646896][ T6333] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 61.673809][ T6333] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 61.677414][ T6333] bond1 (unregistering): Released all slaves [ 61.702740][ T6335] syzkaller1: entered promiscuous mode [ 61.702762][ T6335] syzkaller1: entered allmulticast mode [ 61.711815][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 61.711828][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 61.882284][ T6354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.919320][ T1048] tipc: Node number set to 1 [ 62.258788][ T1048] usb 6-1: USB disconnect, device number 2 [ 62.271548][ T1048] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 62.283215][ T1048] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 62.286222][ T1048] ti_usb_3410_5052 6-1:2.0: device disconnected [ 62.510540][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.512326][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.513704][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.515895][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.517165][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.748210][ T6355] IPVS: Error connecting to the multicast addr [ 62.757749][ T6363] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.927727][ T5909] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 63.047919][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.047974][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.048029][ T6363] bridge_slave_0: entered allmulticast mode [ 63.048735][ T6363] bridge_slave_0: entered promiscuous mode [ 63.050326][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.050391][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.050534][ T6363] bridge_slave_1: entered allmulticast mode [ 63.051168][ T6363] bridge_slave_1: entered promiscuous mode [ 63.089531][ T6363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.092351][ T6363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.099284][ T5909] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 63.100246][ T5909] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 63.100266][ T5909] usb 8-1: config 1 has no interface number 0 [ 63.102836][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.102848][ T5909] usb 8-1: Product: syz [ 63.102855][ T5909] usb 8-1: Manufacturer: syz [ 63.102861][ T5909] usb 8-1: SerialNumber: syz [ 63.103822][ T6363] team0: Port device team_slave_0 added [ 63.105050][ T6363] team0: Port device team_slave_1 added [ 63.110983][ T5909] usb 8-1: 3:0 : does not exist [ 63.110994][ T5909] usb 8-1: 3:0 : does not exist [ 63.115408][ T6390] netlink: 5224 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.115424][ T6390] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 63.115840][ T6363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.115848][ T6363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.115859][ T6363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.116707][ T6363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.116714][ T6363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.116725][ T6363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.136751][ T6363] hsr_slave_0: entered promiscuous mode [ 63.137169][ T6363] hsr_slave_1: entered promiscuous mode [ 63.137711][ T6363] debugfs: 'hsr0' already exists in 'hsr' [ 63.137720][ T6363] Cannot create hsr debugfs directory [ 63.259933][ T6363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.261690][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.262080][ T6363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.263685][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.264086][ T6363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.265668][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.266028][ T6363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.267642][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.278664][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.278710][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.278818][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.278865][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.306509][ T6363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.318755][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.319727][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.332444][ T6363] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.339808][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.339891][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.346779][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.346858][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.423776][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 63.423942][ T43] audit: type=1400 audit(1794342214.575:389): avc: denied { write } for pid=6373 comm="syz.3.135" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.446051][ T66] usb 8-1: USB disconnect, device number 7 [ 63.588226][ T6363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.618723][ T43] audit: type=1400 audit(1794342214.775:390): avc: denied { bind } for pid=6417 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.619251][ T43] audit: type=1400 audit(1794342214.775:391): avc: denied { setopt } for pid=6417 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.619579][ T43] audit: type=1400 audit(1794342214.775:392): avc: denied { getopt } for pid=6417 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.648551][ T6422] FAULT_INJECTION: forcing a failure. [ 63.648551][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 63.648571][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.1.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.648585][ T6422] Tainted: [L]=SOFTLOCKUP [ 63.648589][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.648594][ T6422] Call Trace: [ 63.648599][ T6422] [ 63.648603][ T6422] dump_stack_lvl+0x100/0x190 [ 63.648629][ T6422] should_fail_ex.cold+0x5/0xa [ 63.648652][ T6422] should_failslab+0xc2/0x120 [ 63.648670][ T6422] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.648685][ T6422] ? genl_start+0x1e8/0x970 [ 63.648710][ T6422] genl_start+0x1e8/0x970 [ 63.648729][ T6422] __netlink_dump_start+0x60e/0x990 [ 63.648745][ T6422] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 63.648762][ T6422] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 63.648781][ T6422] ? __pfx_genl_get_cmd+0x10/0x10 [ 63.648795][ T6422] ? __pfx_genl_start+0x10/0x10 [ 63.648809][ T6422] ? __pfx_genl_dumpit+0x10/0x10 [ 63.648823][ T6422] ? __pfx_genl_done+0x10/0x10 [ 63.648840][ T6422] ? __radix_tree_lookup+0x217/0x2b0 [ 63.648855][ T6422] genl_rcv_msg+0x471/0x800 [ 63.648871][ T6422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.648902][ T6422] ? __lock_acquire+0x5c0/0x1f40 [ 63.648918][ T6422] ? __pfx_tcp_metrics_nl_dump+0x10/0x10 [ 63.648948][ T6422] netlink_rcv_skb+0x159/0x420 [ 63.648962][ T6422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.648978][ T6422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.648998][ T6422] ? netlink_deliver_tap+0x1ae/0xb50 [ 63.649013][ T6422] genl_rcv+0x28/0x40 [ 63.649027][ T6422] netlink_unicast+0x668/0x950 [ 63.649043][ T6422] ? __pfx_netlink_unicast+0x10/0x10 [ 63.649060][ T6422] netlink_sendmsg+0x9ac/0x10c0 [ 63.649077][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.649094][ T6422] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.649111][ T6422] ? ____sys_sendmsg+0xa99/0xc30 [ 63.649126][ T6422] ____sys_sendmsg+0xa99/0xc30 [ 63.649140][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.649155][ T6422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.649174][ T6422] ? lock_acquire+0x1d1/0x380 [ 63.649187][ T6422] ? get_pid_task+0x2a/0x250 [ 63.649199][ T6422] ___sys_sendmsg+0x190/0x1e0 [ 63.649209][ T6422] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.649219][ T6422] ? get_pid_task+0x106/0x250 [ 63.649234][ T6422] ? find_held_lock+0x2b/0x80 [ 63.649254][ T6422] __sys_sendmsg+0x160/0x210 [ 63.649267][ T6422] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.649288][ T6422] do_syscall_64+0x123/0x7b0 [ 63.649301][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.649312][ T6422] RIP: 0033:0x7fbcbada8f19 [ 63.649321][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.649330][ T6422] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.649341][ T6422] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 63.649347][ T6422] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.649353][ T6422] RBP: 00007fbcbbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 63.649358][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.649364][ T6422] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 63.649378][ T6422] [ 63.707454][ T43] audit: type=1400 audit(1794342214.855:393): avc: denied { read append } for pid=6427 comm="syz.1.142" name="sg2" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.708026][ T43] audit: type=1400 audit(1794342214.865:394): avc: denied { open } for pid=6427 comm="syz.1.142" path="/dev/sg2" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.744619][ T6363] veth0_vlan: entered promiscuous mode [ 63.751113][ T6363] veth1_vlan: entered promiscuous mode [ 63.777321][ T6363] veth0_macvtap: entered promiscuous mode [ 63.781205][ T6363] veth1_macvtap: entered promiscuous mode [ 63.790113][ T6363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.803897][ T6363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.866080][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.866100][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.867608][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.898020][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.898039][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.902996][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.907986][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.909229][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.916443][ T6436] FAULT_INJECTION: forcing a failure. [ 63.916443][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 63.916466][ T6436] CPU: 2 UID: 0 PID: 6436 Comm: syz.1.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.916489][ T6436] Tainted: [L]=SOFTLOCKUP [ 63.916494][ T6436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.916502][ T6436] Call Trace: [ 63.916508][ T6436] [ 63.916516][ T6436] dump_stack_lvl+0x100/0x190 [ 63.916546][ T6436] should_fail_ex.cold+0x5/0xa [ 63.916571][ T6436] should_failslab+0xc2/0x120 [ 63.916592][ T6436] __kmalloc_noprof+0xfc/0x840 [ 63.916606][ T6436] ? rcu_is_watching+0x13/0xc0 [ 63.916625][ T6436] ? tomoyo_realpath_from_path+0xb6/0x690 [ 63.916649][ T6436] tomoyo_realpath_from_path+0xb6/0x690 [ 63.916671][ T6436] tomoyo_path_number_perm+0x23c/0x580 [ 63.916694][ T6436] ? tomoyo_path_number_perm+0x22e/0x580 [ 63.916720][ T6436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.916752][ T6436] ? __lock_acquire+0x5c0/0x1f40 [ 63.916786][ T6436] ? __fget_files+0x34/0x3d0 [ 63.916808][ T6436] ? find_held_lock+0x2b/0x80 [ 63.916832][ T6436] ? hook_file_ioctl_common+0x140/0x440 [ 63.916856][ T6436] ? __fget_files+0x21f/0x3d0 [ 63.916881][ T6436] security_file_ioctl+0xd3/0x230 [ 63.916908][ T6436] __x64_sys_ioctl+0xb7/0x210 [ 63.916926][ T6436] do_syscall_64+0x123/0x7b0 [ 63.916949][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.916967][ T6436] RIP: 0033:0x7fbcbada8f19 [ 63.916980][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.916995][ T6436] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.917011][ T6436] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 63.917021][ T6436] RDX: 00002000000001c0 RSI: 00000000c03864bc RDI: 0000000000000003 [ 63.917032][ T6436] RBP: 00007fbcbbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 63.917041][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.917049][ T6436] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 63.917073][ T6436] [ 63.917079][ T6436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.933132][ T43] audit: type=1400 audit(1794342215.095:395): avc: denied { mounton } for pid=6363 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.940622][ T6440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.940921][ T6439] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.994315][ T43] audit: type=1400 audit(1794342215.145:396): avc: denied { mounton } for pid=6363 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 64.090960][ T6456] FAULT_INJECTION: forcing a failure. [ 64.090960][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 64.090986][ T6456] CPU: 3 UID: 0 PID: 6456 Comm: syz.2.152 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.091010][ T6456] Tainted: [L]=SOFTLOCKUP [ 64.091016][ T6456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.091025][ T6456] Call Trace: [ 64.091031][ T6456] [ 64.091038][ T6456] dump_stack_lvl+0x100/0x190 [ 64.091070][ T6456] should_fail_ex.cold+0x5/0xa [ 64.091098][ T6456] should_failslab+0xc2/0x120 [ 64.091119][ T6456] __kmalloc_flags_noprof+0x122/0x8e0 [ 64.091144][ T6456] ? find_held_lock+0x2b/0x80 [ 64.091164][ T6456] ? __pcs_replace_empty_main+0x132/0x650 [ 64.091188][ T6456] ? __pcs_replace_empty_main+0x3fa/0x650 [ 64.091217][ T6456] __pcs_replace_empty_main+0x3fa/0x650 [ 64.091245][ T6456] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 64.091274][ T6456] ? ovs_flow_alloc+0x1e/0x210 [ 64.091296][ T6456] ovs_flow_alloc+0x1e/0x210 [ 64.091315][ T6456] ovs_packet_cmd_execute+0x619/0x16c0 [ 64.091341][ T6456] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 64.091365][ T6456] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 64.091394][ T6456] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 64.091427][ T6456] genl_family_rcv_msg_doit+0x214/0x300 [ 64.091456][ T6456] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 64.091492][ T6456] ? bpf_lsm_capable+0x9/0x10 [ 64.091510][ T6456] ? security_capable+0x80/0x260 [ 64.091535][ T6456] ? ns_capable+0xcd/0xf0 [ 64.091557][ T6456] genl_rcv_msg+0x560/0x800 [ 64.091599][ T6456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.091625][ T6456] ? __lock_acquire+0x5c0/0x1f40 [ 64.091649][ T6456] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 64.091679][ T6456] netlink_rcv_skb+0x159/0x420 [ 64.091704][ T6456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.091734][ T6456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.091768][ T6456] ? netlink_deliver_tap+0x1ae/0xb50 [ 64.091794][ T6456] genl_rcv+0x28/0x40 [ 64.091816][ T6456] netlink_unicast+0x668/0x950 [ 64.091842][ T6456] ? __pfx_netlink_unicast+0x10/0x10 [ 64.091873][ T6456] netlink_sendmsg+0x9ac/0x10c0 [ 64.091902][ T6456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.091932][ T6456] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.091962][ T6456] ? ____sys_sendmsg+0xa99/0xc30 [ 64.091987][ T6456] ____sys_sendmsg+0xa99/0xc30 [ 64.092012][ T6456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.092038][ T6456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.092096][ T6456] ? lock_acquire+0x1d1/0x380 [ 64.092120][ T6456] ? get_pid_task+0x2a/0x250 [ 64.092139][ T6456] ___sys_sendmsg+0x190/0x1e0 [ 64.092161][ T6456] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.092178][ T6456] ? get_pid_task+0x106/0x250 [ 64.092205][ T6456] ? find_held_lock+0x2b/0x80 [ 64.092241][ T6456] __sys_sendmsg+0x160/0x210 [ 64.092265][ T6456] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.092302][ T6456] do_syscall_64+0x123/0x7b0 [ 64.092327][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.092346][ T6456] RIP: 0033:0x7fe06c5a8f19 [ 64.092361][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.092377][ T6456] RSP: 002b:00007fe06d531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.092395][ T6456] RAX: ffffffffffffffda RBX: 00007fe06c825fa0 RCX: 00007fe06c5a8f19 [ 64.092406][ T6456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 64.092417][ T6456] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 64.092426][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.092434][ T6456] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 64.092457][ T6456] [ 64.092574][ T6456] netlink: Unknown conntrack attr (0) [ 64.122284][ T43] audit: type=1400 audit(1794342215.275:397): avc: denied { getopt } for pid=6453 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.132887][ T6459] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 64.135001][ T6459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.180856][ T6465] FAULT_INJECTION: forcing a failure. [ 64.180856][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 64.180883][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.2.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.180908][ T6465] Tainted: [L]=SOFTLOCKUP [ 64.180914][ T6465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.180924][ T6465] Call Trace: [ 64.180930][ T6465] [ 64.180937][ T6465] dump_stack_lvl+0x100/0x190 [ 64.180971][ T6465] should_fail_ex.cold+0x5/0xa [ 64.180998][ T6465] should_failslab+0xc2/0x120 [ 64.181020][ T6465] __kvmalloc_node_noprof+0x113/0x9b0 [ 64.181041][ T6465] ? bucket_table_alloc+0x8d/0x4d0 [ 64.181065][ T6465] bucket_table_alloc+0x8d/0x4d0 [ 64.181086][ T6465] __rhashtable_init_noprof+0x521/0x9b0 [ 64.181109][ T6465] __rhltable_init_noprof+0x28/0x70 [ 64.181130][ T6465] nf_tables_newtable+0xf70/0x1a90 [ 64.181171][ T6465] ? __pfx_nf_tables_newtable+0x10/0x10 [ 64.181189][ T6465] ? net_generic+0x25/0x2a0 [ 64.181212][ T6465] ? __nla_parse+0x40/0x60 [ 64.181237][ T6465] nfnetlink_rcv_batch+0x1410/0x2880 [ 64.181270][ T6465] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 64.181293][ T6465] ? lock_acquire+0x1d1/0x380 [ 64.181317][ T6465] ? avc_has_perm_noaudit+0x56/0x470 [ 64.181349][ T6465] ? avc_has_perm_noaudit+0x145/0x470 [ 64.181397][ T6465] ? __nla_parse+0x40/0x60 [ 64.181421][ T6465] nfnetlink_rcv+0x3bd/0x440 [ 64.181440][ T6465] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.181465][ T6465] netlink_unicast+0x668/0x950 [ 64.181493][ T6465] ? __pfx_netlink_unicast+0x10/0x10 [ 64.181523][ T6465] netlink_sendmsg+0x9ac/0x10c0 [ 64.181551][ T6465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.181581][ T6465] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.181609][ T6465] ? ____sys_sendmsg+0xa99/0xc30 [ 64.181635][ T6465] ____sys_sendmsg+0xa99/0xc30 [ 64.181660][ T6465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.181691][ T6465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.181723][ T6465] ? lock_acquire+0x1d1/0x380 [ 64.181746][ T6465] ? get_pid_task+0x2a/0x250 [ 64.181765][ T6465] ___sys_sendmsg+0x190/0x1e0 [ 64.181784][ T6465] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.181801][ T6465] ? get_pid_task+0x106/0x250 [ 64.181828][ T6465] ? find_held_lock+0x2b/0x80 [ 64.181864][ T6465] __sys_sendmsg+0x160/0x210 [ 64.181888][ T6465] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.181925][ T6465] do_syscall_64+0x123/0x7b0 [ 64.181949][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.181967][ T6465] RIP: 0033:0x7fe06c5a8f19 [ 64.181982][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.181998][ T6465] RSP: 002b:00007fe06d531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.182016][ T6465] RAX: ffffffffffffffda RBX: 00007fe06c825fa0 RCX: 00007fe06c5a8f19 [ 64.182027][ T6465] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 64.182037][ T6465] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 64.182047][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.182057][ T6465] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 64.182082][ T6465] [ 64.224972][ T43] audit: type=1400 audit(1794342215.375:398): avc: denied { write } for pid=6462 comm="syz.3.154" name="ipvtap0" dev="tmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.245287][ T6472] FAULT_INJECTION: forcing a failure. [ 64.245287][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 64.245313][ T6472] CPU: 3 UID: 0 PID: 6472 Comm: syz.1.157 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.245337][ T6472] Tainted: [L]=SOFTLOCKUP [ 64.245344][ T6472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.245354][ T6472] Call Trace: [ 64.245360][ T6472] [ 64.245368][ T6472] dump_stack_lvl+0x100/0x190 [ 64.245403][ T6472] should_fail_ex.cold+0x5/0xa [ 64.245432][ T6472] should_failslab+0xc2/0x120 [ 64.245454][ T6472] __kvmalloc_node_noprof+0x113/0x9b0 [ 64.245474][ T6472] ? __kmalloc_noprof+0x350/0x840 [ 64.245491][ T6472] ? hash_net_create+0x47f/0x1360 [ 64.245532][ T6472] hash_net_create+0x47f/0x1360 [ 64.245556][ T6472] ? __pfx_hash_net_create+0x10/0x10 [ 64.245576][ T6472] ip_set_create+0x6c4/0x1510 [ 64.245617][ T6472] ? __pfx_ip_set_create+0x10/0x10 [ 64.245639][ T6472] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 64.245678][ T6472] ? find_held_lock+0x2b/0x80 [ 64.245705][ T6472] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 64.245732][ T6472] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.245754][ T6472] ? __lock_acquire+0x5c0/0x1f40 [ 64.245806][ T6472] ? avc_has_perm_noaudit+0x145/0x470 [ 64.245836][ T6472] netlink_rcv_skb+0x159/0x420 [ 64.245860][ T6472] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.245880][ T6472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.245915][ T6472] ? ns_capable+0xcd/0xf0 [ 64.245938][ T6472] nfnetlink_rcv+0x1b3/0x440 [ 64.245956][ T6472] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.245974][ T6472] ? netlink_deliver_tap+0x1ae/0xb50 [ 64.246000][ T6472] netlink_unicast+0x668/0x950 [ 64.246028][ T6472] ? __pfx_netlink_unicast+0x10/0x10 [ 64.246057][ T6472] netlink_sendmsg+0x9ac/0x10c0 [ 64.246084][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.246113][ T6472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.246143][ T6472] ? ____sys_sendmsg+0xa99/0xc30 [ 64.246170][ T6472] ____sys_sendmsg+0xa99/0xc30 [ 64.246194][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.246221][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.246254][ T6472] ? lock_acquire+0x1d1/0x380 [ 64.246277][ T6472] ? get_pid_task+0x2a/0x250 [ 64.246297][ T6472] ___sys_sendmsg+0x190/0x1e0 [ 64.246316][ T6472] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.246334][ T6472] ? get_pid_task+0x106/0x250 [ 64.246362][ T6472] ? find_held_lock+0x2b/0x80 [ 64.246399][ T6472] __sys_sendmsg+0x160/0x210 [ 64.246423][ T6472] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.246461][ T6472] do_syscall_64+0x123/0x7b0 [ 64.246503][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.246522][ T6472] RIP: 0033:0x7fbcbada8f19 [ 64.246539][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.246555][ T6472] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.246572][ T6472] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 64.246585][ T6472] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 64.246595][ T6472] RBP: 00007fbcbbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 64.246606][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.246617][ T6472] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 64.246643][ T6472] [ 64.280288][ T6467] device-mapper: ioctl: device has been removed from the dev hash table. [ 64.299870][ T976] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 64.301663][ T6476] ip_tables: iptables: counters copy to user failed while replacing table [ 64.410157][ T6486] FAULT_INJECTION: forcing a failure. [ 64.410157][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.410185][ T6486] CPU: 3 UID: 0 PID: 6486 Comm: syz.3.162 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.410210][ T6486] Tainted: [L]=SOFTLOCKUP [ 64.410216][ T6486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.410226][ T6486] Call Trace: [ 64.410232][ T6486] [ 64.410240][ T6486] dump_stack_lvl+0x100/0x190 [ 64.410280][ T6486] should_fail_ex.cold+0x5/0xa [ 64.410308][ T6486] _copy_to_user+0x32/0xd0 [ 64.410334][ T6486] simple_read_from_buffer+0xcb/0x170 [ 64.410360][ T6486] proc_fail_nth_read+0x1af/0x230 [ 64.410387][ T6486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.410413][ T6486] ? rw_verify_area+0xce/0x6d0 [ 64.410440][ T6486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.410464][ T6486] vfs_read+0x1e4/0xb30 [ 64.410483][ T6486] ? lock_acquire+0x1d1/0x380 [ 64.410508][ T6486] ? __fget_files+0x34/0x3d0 [ 64.410531][ T6486] ? __pfx_vfs_read+0x10/0x10 [ 64.410547][ T6486] ? find_held_lock+0x2b/0x80 [ 64.410567][ T6486] ? __fget_files+0x215/0x3d0 [ 64.410594][ T6486] ? __fget_files+0x21f/0x3d0 [ 64.410624][ T6486] ksys_read+0x12a/0x250 [ 64.410661][ T6486] ? __pfx_ksys_read+0x10/0x10 [ 64.410689][ T6486] do_syscall_64+0x123/0x7b0 [ 64.410713][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.410732][ T6486] RIP: 0033:0x7f241cf6974e [ 64.410746][ T6486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.410762][ T6486] RSP: 002b:00007f241ddf3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.410781][ T6486] RAX: ffffffffffffffda RBX: 00007f241ddf46c0 RCX: 00007f241cf6974e [ 64.410793][ T6486] RDX: 000000000000000f RSI: 00007f241ddf40a0 RDI: 0000000000000004 [ 64.410804][ T6486] RBP: 00007f241ddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 64.410815][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.410825][ T6486] R13: 00007f241d226038 R14: 00007f241d225fa0 R15: 00007ffd873d2dc8 [ 64.410850][ T6486] [ 64.474621][ T976] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 64.476358][ T976] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.477336][ T976] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.479506][ T976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.479524][ T976] usb 9-1: Product: syz [ 64.479536][ T976] usb 9-1: Manufacturer: syz [ 64.479548][ T976] usb 9-1: SerialNumber: syz [ 64.485745][ T976] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 64.490182][ T976] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 64.490712][ T6492] FAULT_INJECTION: forcing a failure. [ 64.490712][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 64.490735][ T6492] CPU: 2 UID: 0 PID: 6492 Comm: syz.3.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.490758][ T6492] Tainted: [L]=SOFTLOCKUP [ 64.490763][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.490772][ T6492] Call Trace: [ 64.490778][ T6492] [ 64.490784][ T6492] dump_stack_lvl+0x100/0x190 [ 64.490829][ T6492] should_fail_ex.cold+0x5/0xa [ 64.490854][ T6492] should_failslab+0xc2/0x120 [ 64.490874][ T6492] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 64.490888][ T6492] ? __alloc_skb+0x5b7/0x710 [ 64.490904][ T6492] ? __alloc_skb+0x140/0x710 [ 64.490926][ T6492] __alloc_skb+0x140/0x710 [ 64.490943][ T6492] ? __alloc_skb+0x5b7/0x710 [ 64.490961][ T6492] ? __pfx___alloc_skb+0x10/0x10 [ 64.490987][ T6492] netlink_alloc_large_skb+0x69/0x150 [ 64.491006][ T6492] netlink_sendmsg+0x755/0x10c0 [ 64.491031][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.491057][ T6492] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.491085][ T6492] ? ____sys_sendmsg+0xa99/0xc30 [ 64.491108][ T6492] ____sys_sendmsg+0xa99/0xc30 [ 64.491125][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.491153][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.491182][ T6492] ? lock_acquire+0x1d1/0x380 [ 64.491204][ T6492] ? get_pid_task+0x2a/0x250 [ 64.491220][ T6492] ___sys_sendmsg+0x190/0x1e0 [ 64.491233][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.491253][ T6492] ? get_pid_task+0x106/0x250 [ 64.491277][ T6492] ? find_held_lock+0x2b/0x80 [ 64.491310][ T6492] __sys_sendmsg+0x160/0x210 [ 64.491327][ T6492] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.491358][ T6492] do_syscall_64+0x123/0x7b0 [ 64.491379][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.491396][ T6492] RIP: 0033:0x7f241cfa8f19 [ 64.491407][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.491421][ T6492] RSP: 002b:00007f241ddf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.491438][ T6492] RAX: ffffffffffffffda RBX: 00007f241d225fa0 RCX: 00007f241cfa8f19 [ 64.491449][ T6492] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003 [ 64.491458][ T6492] RBP: 00007f241ddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 64.491468][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.491477][ T6492] R13: 00007f241d226038 R14: 00007f241d225fa0 R15: 00007ffd873d2dc8 [ 64.491501][ T6492] [ 64.494387][ T976] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 64.617599][ T68] Bluetooth: hci0: command tx timeout [ 64.674063][ T6489] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 64.686539][ T6452] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 64.731678][ T6493] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 64.731678][ T6493] The task syz.1.163 (6493) triggered the difference, watch for misbehavior. [ 64.837379][ T6514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.031401][ T6521] FAULT_INJECTION: forcing a failure. [ 65.031401][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 65.031421][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.3.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.031436][ T6521] Tainted: [L]=SOFTLOCKUP [ 65.031439][ T6521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.031445][ T6521] Call Trace: [ 65.031449][ T6521] [ 65.031454][ T6521] dump_stack_lvl+0x100/0x190 [ 65.031476][ T6521] should_fail_ex.cold+0x5/0xa [ 65.031493][ T6521] should_failslab+0xc2/0x120 [ 65.031506][ T6521] __kmalloc_noprof+0xfc/0x840 [ 65.031517][ T6521] ? tomoyo_encode2+0xfb/0x3c0 [ 65.031531][ T6521] tomoyo_encode2+0xfb/0x3c0 [ 65.031544][ T6521] tomoyo_encode+0x29/0x50 [ 65.031555][ T6521] tomoyo_realpath_from_path+0x18c/0x690 [ 65.031570][ T6521] tomoyo_path_number_perm+0x23c/0x580 [ 65.031628][ T6521] ? tomoyo_path_number_perm+0x22e/0x580 [ 65.031645][ T6521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.031667][ T6521] ? __lock_acquire+0x5c0/0x1f40 [ 65.031688][ T6521] ? __fget_files+0x34/0x3d0 [ 65.031701][ T6521] ? find_held_lock+0x2b/0x80 [ 65.031712][ T6521] ? hook_file_ioctl_common+0x140/0x440 [ 65.031728][ T6521] ? __fget_files+0x21f/0x3d0 [ 65.031743][ T6521] security_file_ioctl+0xd3/0x230 [ 65.031761][ T6521] __x64_sys_ioctl+0xb7/0x210 [ 65.031773][ T6521] do_syscall_64+0x123/0x7b0 [ 65.031787][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.031798][ T6521] RIP: 0033:0x7f241cfa8f19 [ 65.031807][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.031817][ T6521] RSP: 002b:00007f241ddf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.031828][ T6521] RAX: ffffffffffffffda RBX: 00007f241d225fa0 RCX: 00007f241cfa8f19 [ 65.031834][ T6521] RDX: 0000000000000000 RSI: 000000004004550d RDI: 0000000000000003 [ 65.031840][ T6521] RBP: 00007f241ddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 65.031846][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.031851][ T6521] R13: 00007f241d226038 R14: 00007f241d225fa0 R15: 00007ffd873d2dc8 [ 65.031865][ T6521] [ 65.031931][ T6521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.077014][ T6526] netlink: 68 bytes leftover after parsing attributes in process `syz.3.174'. [ 65.159052][ T6529] xt_l2tp: v2 doesn't support IP mode [ 65.199774][ T6532] No control pipe specified [ 65.226941][ T6534] syzkaller1: entered promiscuous mode [ 65.226961][ T6534] syzkaller1: entered allmulticast mode [ 65.291117][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 65.353806][ T6542] Bluetooth: MGMT ver 1.23 [ 65.472410][ T25] asus 0005:0B05:8502.0002: hidraw1: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 65.501201][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.515770][ T6553] netlink: 'syz.3.185': attribute type 3 has an invalid length. [ 65.571630][ T6558] netlink: Unknown conntrack attr (0) [ 65.677447][ T6568] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 65.696807][ T6573] Dropped outbound packet type=d5b3 [ 65.730754][ T6576] FAULT_INJECTION: forcing a failure. [ 65.730754][ T6576] name failslab, interval 1, probability 0, space 0, times 0 [ 65.730782][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.2.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.730805][ T6576] Tainted: [L]=SOFTLOCKUP [ 65.730810][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.730821][ T6576] Call Trace: [ 65.730827][ T6576] [ 65.730833][ T6576] dump_stack_lvl+0x100/0x190 [ 65.730868][ T6576] should_fail_ex.cold+0x5/0xa [ 65.730894][ T6576] should_failslab+0xc2/0x120 [ 65.730916][ T6576] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.730943][ T6576] ? netlink_deliver_tap+0x103/0xb50 [ 65.730964][ T6576] ? skb_clone+0x187/0x3f0 [ 65.730991][ T6576] skb_clone+0x187/0x3f0 [ 65.731014][ T6576] netlink_deliver_tap+0x82f/0xb50 [ 65.731042][ T6576] netlink_unicast+0x784/0x950 [ 65.731069][ T6576] ? __pfx_netlink_unicast+0x10/0x10 [ 65.731091][ T6576] ? genl_rcv_msg+0x4be/0x800 [ 65.731121][ T6576] netlink_ack+0x660/0xba0 [ 65.731151][ T6576] netlink_rcv_skb+0x333/0x420 [ 65.731175][ T6576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.731202][ T6576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.731259][ T6576] ? netlink_deliver_tap+0x1ae/0xb50 [ 65.731287][ T6576] genl_rcv+0x28/0x40 [ 65.731310][ T6576] netlink_unicast+0x668/0x950 [ 65.731338][ T6576] ? __pfx_netlink_unicast+0x10/0x10 [ 65.731369][ T6576] netlink_sendmsg+0x9ac/0x10c0 [ 65.731397][ T6576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.731426][ T6576] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.731456][ T6576] ? ____sys_sendmsg+0xa99/0xc30 [ 65.731481][ T6576] ____sys_sendmsg+0xa99/0xc30 [ 65.731504][ T6576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.731531][ T6576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.731563][ T6576] ? lock_acquire+0x1d1/0x380 [ 65.731601][ T6576] ? get_pid_task+0x2a/0x250 [ 65.731621][ T6576] ___sys_sendmsg+0x190/0x1e0 [ 65.731640][ T6576] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.731657][ T6576] ? get_pid_task+0x106/0x250 [ 65.731684][ T6576] ? find_held_lock+0x2b/0x80 [ 65.731721][ T6576] __sys_sendmsg+0x160/0x210 [ 65.731749][ T6576] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.731785][ T6576] do_syscall_64+0x123/0x7b0 [ 65.731810][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.731829][ T6576] RIP: 0033:0x7fe06c5a8f19 [ 65.731845][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.731862][ T6576] RSP: 002b:00007fe06d531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.731880][ T6576] RAX: ffffffffffffffda RBX: 00007fe06c825fa0 RCX: 00007fe06c5a8f19 [ 65.731891][ T6576] RDX: 000000000000c000 RSI: 0000200000000240 RDI: 0000000000000003 [ 65.731902][ T6576] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 65.731913][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.731923][ T6576] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 65.731949][ T6576] [ 65.792030][ T6569] could not allocate digest TFM handle cryptd(blake2b-160) [ 66.212535][ T6765] FAULT_INJECTION: forcing a failure. [ 66.212535][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 66.212569][ T6765] CPU: 2 UID: 0 PID: 6765 Comm: syz.2.203 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.212594][ T6765] Tainted: [L]=SOFTLOCKUP [ 66.212600][ T6765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.212611][ T6765] Call Trace: [ 66.212618][ T6765] [ 66.212626][ T6765] dump_stack_lvl+0x100/0x190 [ 66.212665][ T6765] should_fail_ex.cold+0x5/0xa [ 66.212694][ T6765] should_failslab+0xc2/0x120 [ 66.212716][ T6765] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.212744][ T6765] ? netlink_deliver_tap+0x103/0xb50 [ 66.212766][ T6765] ? skb_clone+0x187/0x3f0 [ 66.212793][ T6765] skb_clone+0x187/0x3f0 [ 66.212817][ T6765] netlink_deliver_tap+0x82f/0xb50 [ 66.212845][ T6765] netlink_unicast+0x784/0x950 [ 66.212876][ T6765] ? __pfx_netlink_unicast+0x10/0x10 [ 66.212908][ T6765] ctrl_getfamily+0x417/0x550 [ 66.212925][ T6765] ? __pfx_ctrl_getfamily+0x10/0x10 [ 66.212953][ T6765] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 66.212981][ T6765] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 66.213015][ T6765] genl_family_rcv_msg_doit+0x214/0x300 [ 66.213048][ T6765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 66.213084][ T6765] ? genl_get_cmd+0x3e7/0x760 [ 66.213122][ T6765] ? __radix_tree_lookup+0x217/0x2b0 [ 66.213152][ T6765] genl_rcv_msg+0x560/0x800 [ 66.213185][ T6765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.213213][ T6765] ? __lock_acquire+0x5c0/0x1f40 [ 66.213239][ T6765] ? __pfx_ctrl_getfamily+0x10/0x10 [ 66.213278][ T6765] netlink_rcv_skb+0x159/0x420 [ 66.213302][ T6765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.213329][ T6765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.213364][ T6765] ? netlink_deliver_tap+0x1ae/0xb50 [ 66.213391][ T6765] genl_rcv+0x28/0x40 [ 66.213413][ T6765] netlink_unicast+0x668/0x950 [ 66.213440][ T6765] ? __pfx_netlink_unicast+0x10/0x10 [ 66.213471][ T6765] netlink_sendmsg+0x9ac/0x10c0 [ 66.213499][ T6765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.213527][ T6765] ? selinux_socket_sendmsg+0x198/0x2f0 [ 66.213557][ T6765] ? __sys_sendto+0x492/0x4e0 [ 66.213576][ T6765] __sys_sendto+0x492/0x4e0 [ 66.213592][ T6765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.213615][ T6765] ? __pfx___sys_sendto+0x10/0x10 [ 66.213642][ T6765] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 66.213688][ T6765] __x64_sys_sendto+0xe0/0x1c0 [ 66.213709][ T6765] ? do_syscall_64+0xae/0x7b0 [ 66.213730][ T6765] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.213753][ T6765] do_syscall_64+0x123/0x7b0 [ 66.213779][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.213798][ T6765] RIP: 0033:0x7fe06c56974e [ 66.213813][ T6765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.213833][ T6765] RSP: 002b:00007fe06d52fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.213852][ T6765] RAX: ffffffffffffffda RBX: 00007fe06d5316c0 RCX: 00007fe06c56974e [ 66.213864][ T6765] RDX: 0000000000000020 RSI: 00007fe06d530000 RDI: 0000000000000005 [ 66.213875][ T6765] RBP: 0000000000000000 R08: 00007fe06d52ff04 R09: 000000000000000c [ 66.213887][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 66.213897][ T6765] R13: 00007fe06d52ff58 R14: 00007fe06d530000 R15: 0000000000000000 [ 66.213922][ T6765] [ 66.339124][ T6807] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 66.339142][ T6807] netlink: 244 bytes leftover after parsing attributes in process `syz.1.207'. [ 66.705100][ T68] Bluetooth: hci0: command tx timeout [ 66.926701][ T6837] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 67.039464][ T6842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39923 sclass=netlink_route_socket pid=6842 comm=syz.1.219 [ 67.092274][ T6847] FAULT_INJECTION: forcing a failure. [ 67.092274][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.092303][ T6847] CPU: 2 UID: 0 PID: 6847 Comm: syz.2.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.092328][ T6847] Tainted: [L]=SOFTLOCKUP [ 67.092334][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.092345][ T6847] Call Trace: [ 67.092351][ T6847] [ 67.092357][ T6847] dump_stack_lvl+0x100/0x190 [ 67.092388][ T6847] should_fail_ex.cold+0x5/0xa [ 67.092412][ T6847] _copy_from_user+0x2e/0xd0 [ 67.092433][ T6847] bpf_prog_load+0x157f/0x2b20 [ 67.092457][ T6847] ? avc_has_perm_noaudit+0x11e/0x470 [ 67.092486][ T6847] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.092532][ T6847] __sys_bpf+0x146f/0x4b60 [ 67.092568][ T6847] ? __pfx___sys_bpf+0x10/0x10 [ 67.092582][ T6847] ? find_held_lock+0x2b/0x80 [ 67.092600][ T6847] ? get_pid_task+0xfc/0x250 [ 67.092618][ T6847] ? get_pid_task+0xfc/0x250 [ 67.092642][ T6847] ? find_held_lock+0x2b/0x80 [ 67.092666][ T6847] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.092685][ T6847] ? find_held_lock+0x2b/0x80 [ 67.092701][ T6847] ? ksys_write+0x190/0x250 [ 67.092717][ T6847] ? ksys_write+0x190/0x250 [ 67.092733][ T6847] ? lock_acquire+0x1d1/0x380 [ 67.092770][ T6847] ? fput+0x7c/0x100 [ 67.092794][ T6847] ? ksys_write+0x1ac/0x250 [ 67.092816][ T6847] ? __x64_sys_bpf+0xce/0x140 [ 67.092830][ T6847] __x64_sys_bpf+0xce/0x140 [ 67.092846][ T6847] ? do_syscall_64+0xae/0x7b0 [ 67.092866][ T6847] do_syscall_64+0x123/0x7b0 [ 67.092886][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.092902][ T6847] RIP: 0033:0x7fe06c5a8f19 [ 67.092918][ T6847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.092934][ T6847] RSP: 002b:00007fe06d531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.092954][ T6847] RAX: ffffffffffffffda RBX: 00007fe06c825fa0 RCX: 00007fe06c5a8f19 [ 67.092965][ T6847] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 67.092974][ T6847] RBP: 00007fe06d531090 R08: 0000000000000000 R09: 0000000000000000 [ 67.092984][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.092993][ T6847] R13: 00007fe06c826038 R14: 00007fe06c825fa0 R15: 00007fffbd504368 [ 67.093015][ T6847] [ 67.107239][ T976] usb 9-1: USB disconnect, device number 2 [ 67.145229][ T976] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 67.151099][ T976] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 67.151790][ T976] ti_usb_3410_5052 9-1:2.0: device disconnected [ 67.251721][ T6853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.263336][ T6853] gre0: entered promiscuous mode [ 67.263355][ T6853] gre0: entered allmulticast mode [ 67.336819][ T6864] FAULT_INJECTION: forcing a failure. [ 67.336819][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 67.336838][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.4.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.336852][ T6864] Tainted: [L]=SOFTLOCKUP [ 67.336855][ T6864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.336861][ T6864] Call Trace: [ 67.336865][ T6864] [ 67.336870][ T6864] dump_stack_lvl+0x100/0x190 [ 67.336892][ T6864] should_fail_ex.cold+0x5/0xa [ 67.336909][ T6864] should_failslab+0xc2/0x120 [ 67.336922][ T6864] __kvmalloc_node_noprof+0x113/0x9b0 [ 67.336934][ T6864] ? ctl_ioctl+0x944/0xcc0 [ 67.336971][ T6864] ctl_ioctl+0x944/0xcc0 [ 67.336986][ T6864] ? __pfx_table_load+0x10/0x10 [ 67.336997][ T6864] ? __pfx_ctl_ioctl+0x10/0x10 [ 67.337026][ T6864] ? selinux_file_ioctl+0x1e0/0x290 [ 67.337038][ T6864] dm_ctl_ioctl+0x22/0x30 [ 67.337053][ T6864] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 67.337068][ T6864] __x64_sys_ioctl+0x18e/0x210 [ 67.337080][ T6864] do_syscall_64+0x123/0x7b0 [ 67.337094][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.337105][ T6864] RIP: 0033:0x7fa26b7a8f19 [ 67.337114][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.337124][ T6864] RSP: 002b:00007fa26c648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.337136][ T6864] RAX: ffffffffffffffda RBX: 00007fa26ba25fa0 RCX: 00007fa26b7a8f19 [ 67.337143][ T6864] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 67.337149][ T6864] RBP: 00007fa26c648090 R08: 0000000000000000 R09: 0000000000000000 [ 67.337155][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.337160][ T6864] R13: 00007fa26ba26038 R14: 00007fa26ba25fa0 R15: 00007ffd2b62e858 [ 67.337174][ T6864] [ 67.363988][ T6866] syzkaller0: entered promiscuous mode [ 67.364007][ T6866] syzkaller0: entered allmulticast mode [ 67.437392][ T6859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6859 comm=syz.3.226 [ 67.507864][ T6874] support for cryptoloop has been removed. Use dm-crypt instead. [ 67.589803][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 67.589828][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 67.609579][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 67.609604][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 67.638525][ T6882] FAULT_INJECTION: forcing a failure. [ 67.638525][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 67.638544][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.4.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.638558][ T6882] Tainted: [L]=SOFTLOCKUP [ 67.638562][ T6882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.638568][ T6882] Call Trace: [ 67.638571][ T6882] [ 67.638575][ T6882] dump_stack_lvl+0x100/0x190 [ 67.638596][ T6882] should_fail_ex.cold+0x5/0xa [ 67.638614][ T6882] should_failslab+0xc2/0x120 [ 67.638635][ T6882] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 67.638646][ T6882] ? __alloc_skb+0x140/0x710 [ 67.638662][ T6882] __alloc_skb+0x140/0x710 [ 67.638673][ T6882] ? __alloc_skb+0x5b7/0x710 [ 67.638685][ T6882] ? __pfx___alloc_skb+0x10/0x10 [ 67.638697][ T6882] ? __lock_acquire+0xe8b/0x1f40 [ 67.638715][ T6882] pfkey_send_migrate+0x2fd/0x1540 [ 67.638753][ T6882] ? __pfx_pfkey_send_migrate+0x10/0x10 [ 67.638767][ T6882] km_migrate+0x102/0x2b0 [ 67.638782][ T6882] xfrm_migrate+0xe0a/0x1ba0 [ 67.638804][ T6882] ? __pfx_xfrm_migrate+0x10/0x10 [ 67.638820][ T6882] ? kernel_text_address+0x8d/0x100 [ 67.638855][ T6882] ? lock_acquire+0x1d1/0x380 [ 67.638874][ T6882] xfrm_do_migrate+0xb9c/0xf00 [ 67.638894][ T6882] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 67.638907][ T6882] ? lock_acquire+0x1d1/0x380 [ 67.638921][ T6882] ? is_bpf_text_address+0x25/0x1a0 [ 67.638971][ T6882] ? rcu_is_watching+0x13/0xc0 [ 67.638983][ T6882] ? cap_capable+0x107/0x430 [ 67.639001][ T6882] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 67.639015][ T6882] ? xfrm_user_rcv_msg+0x483/0xd70 [ 67.639025][ T6882] ? xfrm_user_rcv_msg+0x3ec/0xd70 [ 67.639035][ T6882] xfrm_user_rcv_msg+0x483/0xd70 [ 67.639050][ T6882] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 67.639062][ T6882] ? kfree_skbmem+0x19f/0x210 [ 67.639071][ T6882] ? consume_skb+0xd6/0x110 [ 67.639089][ T6882] ? find_held_lock+0x2b/0x80 [ 67.639125][ T6882] ? rcu_is_watching+0x13/0xc0 [ 67.639141][ T6882] ? trace_contention_end+0x126/0x160 [ 67.639160][ T6882] ? __mutex_lock+0x267/0x1c10 [ 67.639175][ T6882] netlink_rcv_skb+0x159/0x420 [ 67.639189][ T6882] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 67.639202][ T6882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.639223][ T6882] ? netlink_deliver_tap+0x1ae/0xb50 [ 67.639238][ T6882] xfrm_netlink_rcv+0x71/0x90 [ 67.639249][ T6882] netlink_unicast+0x668/0x950 [ 67.639265][ T6882] ? __pfx_netlink_unicast+0x10/0x10 [ 67.639283][ T6882] netlink_sendmsg+0x9ac/0x10c0 [ 67.639300][ T6882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.639318][ T6882] ? selinux_socket_sendmsg+0x198/0x2f0 [ 67.639335][ T6882] ? ____sys_sendmsg+0xa99/0xc30 [ 67.639349][ T6882] ____sys_sendmsg+0xa99/0xc30 [ 67.639364][ T6882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.639380][ T6882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.639402][ T6882] ? lock_acquire+0x1d1/0x380 [ 67.639416][ T6882] ? get_pid_task+0x2a/0x250 [ 67.639427][ T6882] ___sys_sendmsg+0x190/0x1e0 [ 67.639438][ T6882] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.639447][ T6882] ? get_pid_task+0x106/0x250 [ 67.639463][ T6882] ? find_held_lock+0x2b/0x80 [ 67.639483][ T6882] __sys_sendmsg+0x160/0x210 [ 67.639497][ T6882] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.639518][ T6882] do_syscall_64+0x123/0x7b0 [ 67.639532][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.639543][ T6882] RIP: 0033:0x7fa26b7a8f19 [ 67.639552][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.639562][ T6882] RSP: 002b:00007fa26c648028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.639572][ T6882] RAX: ffffffffffffffda RBX: 00007fa26ba25fa0 RCX: 00007fa26b7a8f19 [ 67.639579][ T6882] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 67.639585][ T6882] RBP: 00007fa26c648090 R08: 0000000000000000 R09: 0000000000000000 [ 67.639590][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.639596][ T6882] R13: 00007fa26ba26038 R14: 00007fa26ba25fa0 R15: 00007ffd2b62e858 [ 67.639610][ T6882] [ 67.677577][ T976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.754963][ T6888] : renamed from vlan0 (while UP) [ 67.782596][ T6886] xt_IDLETIMER: label is empty or not nul-terminated [ 67.851147][ T976] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 67.852612][ T976] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.855398][ T976] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.858618][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.858641][ T976] usb 7-1: Product: syz [ 67.858653][ T976] usb 7-1: Manufacturer: syz [ 67.858665][ T976] usb 7-1: SerialNumber: syz [ 67.863999][ T976] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 67.872659][ T976] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 67.877307][ T976] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 68.032117][ T6901] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 68.032131][ T6901] netlink: 96 bytes leftover after parsing attributes in process `syz.3.242'. [ 68.032907][ T1174] IPVS: starting estimator thread 0... [ 68.065902][ T6872] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 68.116110][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.116130][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.117076][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.117090][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.127686][ T6902] IPVS: using max 45 ests per chain, 108000 per kthread [ 68.374626][ T6909] netlink: 'syz.3.244': attribute type 14 has an invalid length. [ 68.527416][ T6919] team0: Port device team_slave_0 removed [ 68.739605][ T6928] ------------[ cut here ]------------ [ 68.739615][ T6928] !(flags & __GFP_NOWARN) [ 68.739619][ T6928] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#0: syz.1.250/6928 [ 68.745894][ T6928] Modules linked in: [ 68.747238][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.1.250 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 68.750648][ T6928] Tainted: [L]=SOFTLOCKUP [ 68.752561][ T6928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.755791][ T6928] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 68.757838][ T6928] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 68.763901][ T6928] RSP: 0018:ffffc9000363fb78 EFLAGS: 00010246 [ 68.765865][ T6928] RAX: 0000000000000001 RBX: 0000008000000040 RCX: 0000010000000000 [ 68.768825][ T6928] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8f8920 [ 68.772526][ T6928] RBP: 0000000008000000 R08: 00000000000028c0 R09: 00000000ffffffff [ 68.776187][ T6928] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 68.777664][ T68] Bluetooth: hci0: command tx timeout [ 68.782409][ T6928] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 68.785854][ T6928] FS: 00007fbcbbbca6c0(0000) GS:ffff8880d4473000(0000) knlGS:0000000000000000 [ 68.789700][ T6928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.792474][ T6928] CR2: 00007fbcbbb5da08 CR3: 0000000023867000 CR4: 0000000000352ef0 [ 68.795759][ T6928] Call Trace: [ 68.797221][ T6928] [ 68.798637][ T6928] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 68.801094][ T6928] ? udmabuf_create+0x2e5/0x10c0 [ 68.803246][ T6928] udmabuf_create+0x2e5/0x10c0 [ 68.804933][ T6928] ? lock_acquire+0x1d1/0x380 [ 68.806463][ T6928] ? __pfx_udmabuf_create+0x10/0x10 [ 68.808173][ T6928] ? find_held_lock+0x2b/0x80 [ 68.809659][ T6928] ? __might_fault+0xc5/0x140 [ 68.811144][ T6928] ? __might_fault+0xc5/0x140 [ 68.812667][ T6928] udmabuf_ioctl+0x18f/0x300 [ 68.814164][ T6928] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.815808][ T6928] ? selinux_file_ioctl+0x1e0/0x290 [ 68.817698][ T6928] ? selinux_file_ioctl+0x1e7/0x290 [ 68.819374][ T6928] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.821003][ T6928] __x64_sys_ioctl+0x18e/0x210 [ 68.822523][ T6928] do_syscall_64+0x123/0x7b0 [ 68.824190][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.826724][ T6928] RIP: 0033:0x7fbcbada8f19 [ 68.828327][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.834976][ T6928] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.838912][ T6928] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 68.842098][ T6928] RDX: 0000200000000280 RSI: 0000000040187542 RDI: 0000000000000004 [ 68.845422][ T6928] RBP: 00007fbcbae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 68.849749][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.853102][ T6928] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 68.856429][ T6928] [ 68.858461][ T6928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.861479][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.1.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.865896][ T6928] Tainted: [L]=SOFTLOCKUP [ 68.867422][ T6928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.870593][ T6928] Call Trace: [ 68.871679][ T6928] [ 68.872690][ T6928] dump_stack_lvl+0x100/0x190 [ 68.874570][ T6928] vpanic+0x2dc/0x6f8 [ 68.876133][ T6928] panic+0xd1/0xe0 [ 68.877536][ T6928] ? __pfx_panic+0x10/0x10 [ 68.879298][ T6928] check_panic_on_warn.cold+0x19/0x34 [ 68.881407][ T6928] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 68.883551][ T6928] __warn.cold+0x191/0x321 [ 68.885364][ T6928] __report_bug+0x30f/0x440 [ 68.887171][ T6928] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 68.889313][ T6928] ? __pfx___report_bug+0x10/0x10 [ 68.891307][ T6928] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 68.893478][ T6928] report_bug+0xb3/0x220 [ 68.895190][ T6928] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 68.897385][ T6928] handle_bug+0x16a/0x2a0 [ 68.899106][ T6928] exc_invalid_op+0x17/0x50 [ 68.900896][ T6928] asm_exc_invalid_op+0x1a/0x20 [ 68.902804][ T6928] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 68.905172][ T6928] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 68.912656][ T6928] RSP: 0018:ffffc9000363fb78 EFLAGS: 00010246 [ 68.914972][ T6928] RAX: 0000000000000001 RBX: 0000008000000040 RCX: 0000010000000000 [ 68.918089][ T6928] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8f8920 [ 68.921126][ T6928] RBP: 0000000008000000 R08: 00000000000028c0 R09: 00000000ffffffff [ 68.924135][ T6928] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 68.927239][ T6928] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 68.929815][ T6928] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 68.931538][ T6928] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 68.933286][ T6928] ? udmabuf_create+0x2e5/0x10c0 [ 68.934865][ T6928] udmabuf_create+0x2e5/0x10c0 [ 68.936314][ T6928] ? lock_acquire+0x1d1/0x380 [ 68.937775][ T6928] ? __pfx_udmabuf_create+0x10/0x10 [ 68.939407][ T6928] ? find_held_lock+0x2b/0x80 [ 68.940890][ T6928] ? __might_fault+0xc5/0x140 [ 68.942357][ T6928] ? __might_fault+0xc5/0x140 [ 68.943844][ T6928] udmabuf_ioctl+0x18f/0x300 [ 68.945300][ T6928] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.946902][ T6928] ? selinux_file_ioctl+0x1e0/0x290 [ 68.948531][ T6928] ? selinux_file_ioctl+0x1e7/0x290 [ 68.950142][ T6928] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.951756][ T6928] __x64_sys_ioctl+0x18e/0x210 [ 68.953252][ T6928] do_syscall_64+0x123/0x7b0 [ 68.954692][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.956522][ T6928] RIP: 0033:0x7fbcbada8f19 [ 68.957926][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.963781][ T6928] RSP: 002b:00007fbcbbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.966353][ T6928] RAX: ffffffffffffffda RBX: 00007fbcbb025fa0 RCX: 00007fbcbada8f19 [ 68.968827][ T6928] RDX: 0000200000000280 RSI: 0000000040187542 RDI: 0000000000000004 [ 68.971269][ T6928] RBP: 00007fbcbae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 68.973728][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.976174][ T6928] R13: 00007fbcbb026038 R14: 00007fbcbb025fa0 R15: 00007fffdf5ff9b8 [ 68.978649][ T6928] [ 68.980351][ T6928] Kernel Offset: disabled [ 68.981713][ T6928] Rebooting in 86400 seconds..