last executing test programs: 1m13.029853569s ago: executing program 0 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202030000000000000000000a0000063c0002800c00028005000100dc0000002c0001801400030000000000000000000000000800000001140004", @ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000091}, 0x4040) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r2, 0x5, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202030000000000000000000a0000063c0002800c00028005000100dc0000002c0001801400030000000000000000000000000800000001140004", @ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000091}, 0x4040) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) (async) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') (async) lseek(r2, 0x5, 0x1) (async) 1m12.972366109s ago: executing program 0 (id=45): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x15113, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x9) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) landlock_restrict_self(r0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000200)={r5, 0xd8, "8adc790a48dc019f101ed684c09176f168f15b722f3411e7849a7ef77708e9a2584a5fe48e7ea5e60f8ceec2c643c679636d674f6b2554dc36492af2c823cd435d1cbf167ad8d5611da9c64da026293623f96fd2eac3821dfe2c8949e2cc23068d6978c3b7d710e2d7b1cddbc038e73a2f6cd01fdbbc22d2408620137488d54b1fd33063cad251a25832ee61b34782e75734920be771f2bd71899ec40f4983ce7e669abd8b26cc0564087683112a83d4bb19f32d8fa2874d764f76f19cd04f6ccf48674ccd75eaa544af22305703530652b5b82f038f7685"}, &(0x7f0000000300)=0xe0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) landlock_create_ruleset(&(0x7f0000000040)={0x15113, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) (async) landlock_restrict_self(r0, 0x9) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) (async) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) (async) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) (async) landlock_restrict_self(r0, 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) write$binfmt_script(r4, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000200)={r5, 0xd8, "8adc790a48dc019f101ed684c09176f168f15b722f3411e7849a7ef77708e9a2584a5fe48e7ea5e60f8ceec2c643c679636d674f6b2554dc36492af2c823cd435d1cbf167ad8d5611da9c64da026293623f96fd2eac3821dfe2c8949e2cc23068d6978c3b7d710e2d7b1cddbc038e73a2f6cd01fdbbc22d2408620137488d54b1fd33063cad251a25832ee61b34782e75734920be771f2bd71899ec40f4983ce7e669abd8b26cc0564087683112a83d4bb19f32d8fa2874d764f76f19cd04f6ccf48674ccd75eaa544af22305703530652b5b82f038f7685"}, &(0x7f0000000300)=0xe0) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) 1m12.966192654s ago: executing program 0 (id=46): socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) (async) unshare(0x62040200) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$eventfd(r0, &(0x7f0000000040), 0xfffffffffffffe18) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}}, 0x64000004) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3c}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x16}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x89}]}, 0x60}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) (rerun: 32) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0/p_volume_max\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)="67b187", 0x3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r5, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.762352346s ago: executing program 0 (id=47): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r4, @ANYBLOB="14000300fe8000000000000000000000000000bb14000200fe"], 0x64}}, 0x4008000) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000100)=0x2) 1m12.692401288s ago: executing program 0 (id=48): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006380)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000270001000000000000000000040201"], 0x14}], 0x1, 0x0, 0x0, 0x404c080}, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000600), 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x4) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.602532735s ago: executing program 0 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="0102"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 57.028527167s ago: executing program 32 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="0102"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 33.071435892s ago: executing program 1 (id=512): r0 = semget$private(0x0, 0x3, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x39, 0x107, 0x70bd25, 0x25dfdbff, {0x19, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c094) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x39, 0x107, 0x70bd25, 0x25dfdbff, {0x19, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c094) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000300)=[{0x1, 0xff00, 0x3000}, {0x0, 0x7, 0x800}], 0x2) (async) semop(r0, &(0x7f0000000300)=[{0x1, 0xff00, 0x3000}, {0x0, 0x7, 0x800}], 0x2) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) 32.202287931s ago: executing program 1 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="dc230000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf257500000008000300", @ANYRES32=r3, @ANYBLOB], 0x23dc}}, 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000014000300"/24], 0x30}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='pstore\x00', 0x2835888, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) (rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8243, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffbf, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x7, 0x80, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0xff, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x46}]}}) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) read(r6, &(0x7f0000000280)=""/4096, 0x1000) (async, rerun: 32) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000240), 0x1) (async) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mount(&(0x7f00000012c0)=@rnullb, &(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001340)='jfs\x00', 0xc908abcd0df39326, &(0x7f0000001380)='\x00') 31.202073736s ago: executing program 1 (id=530): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x50, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x21801, 0x1303}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) recvfrom$llc(r2, &(0x7f0000000180)=""/82, 0x52, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 30.900637279s ago: executing program 1 (id=532): socket$rxrpc(0x21, 0x2, 0x2) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) socket$rxrpc(0x21, 0x2, 0x2) (async) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) (async) 30.801838196s ago: executing program 1 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = eventfd2(0x0, 0x800) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x300, 0x800002, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r2, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r2}]) write(r0, &(0x7f0000000480)="05", 0x1) 30.60211978s ago: executing program 1 (id=534): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xa8, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000340)="ab") pread64(r6, 0x0, 0x1, 0x6) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) listen(r2, 0x802) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r7, 0x3, {0x0, 0x1}}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x800, 0xce, 0x1005, 0x3, 0x5, 0x4, 0x1, 0x5}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 15.131908385s ago: executing program 33 (id=534): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xa8, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000340)="ab") pread64(r6, 0x0, 0x1, 0x6) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) listen(r2, 0x802) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r7, 0x3, {0x0, 0x1}}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x800, 0xce, 0x1005, 0x3, 0x5, 0x4, 0x1, 0x5}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 9.349294313s ago: executing program 5 (id=692): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001fdf000002000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r3}, 0x10) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x7, 0x9cc}, &(0x7f0000000440)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r4, 0x200000) (async) pwrite64(r4, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r4, &(0x7f0000000100)="55aa", 0x2, 0x1fe) (async) pwrite64(r4, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000000914dc778fcbcb11ed20020025bd7000fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x2000c000) (async) pwrite64(r4, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000480)="ffff02e50000e7cec1e77c07", 0xc, 0xd23) (async) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) (async) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009cff", "0000000000000000000000000500000000000000000000000000000000000900000000000e000000000000e0ff00000000431a892100", "0001000000000000000000000000003c64575effffffffffffff00", [0x0, 0x7fffffff]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 9.280586885s ago: executing program 5 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x27, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@generic="e911530e831b94897bb9d970be592d0929c5318084701bf3418d066a06c832b001210ef4e16563f03231fa53d00adb7e7d1415e24992f250f1d4bd1e0a98eb5e78"]}, 0x58}, 0x1, 0x0, 0x0, 0x488c4}, 0x20000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) close(r2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 9.212429303s ago: executing program 5 (id=695): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x44040) setsockopt(r1, 0x7ee, 0x7, &(0x7f0000000380)="e206fb1767f889acaf336fbe2a07f24bf2e56909e8d73261408f8144c9b54e3a5287717b04f2f4d3c0122349574e729e5d1e5328d41ec3495dce720103ce599beb3dda14587cae821c0c34f4657993a1fa2bfbdfbed643b4ceaad2f5961ee059653d92088e21330022d12089f1c7dfb3f045661e1eec41f8d3bce9e87771f695562dde07b8a5322dd467d187713415", 0x8f) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f0000001580)=""/4108, 0x100c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 9.211830783s ago: executing program 5 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) (async) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) capset(&(0x7f0000000040)={0x20071026}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="56f62d0f", @ANYRES16=0x0, @ANYRES32=r3, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4000800) 8.671161521s ago: executing program 5 (id=702): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) prctl$PR_GET_KEEPCAPS(0x7) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08060001080006040001aaaaaaaaaa24ac1414b0aaaaaaaa08aaac1414bb"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x15) ioctl(r5, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000245)=0xfd) 8.062749297s ago: executing program 5 (id=709): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './dev/sda\x00'}) mkdirat(r1, &(0x7f0000000200)='./dev/file0\x00', 0x1ff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x5, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x113680, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x802) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x8000000000003ff) ioctl$NBD_DO_IT(r6, 0xab03) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setns(0xc9, 0x0) r8 = socket(0x8, 0x2, 0x0) ioctl$sock_SIOCINQ(r8, 0x400461f1, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) 5.402186584s ago: executing program 4 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r5, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8a, 0x4}, {0x4ad8, 0x81}}}}, 0x11) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0xff0a, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x260, 0x0, 0x602, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x54}}}}, [@NL80211_ATTR_IE={0xff, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x10, 0x9d, 0x6}}, @perr={0x84, 0xea, {0x4, 0x10, [{{0x0, 0x1}, @broadcast, 0x4, @value, 0x18}, {{}, @device_b, 0x9, @void, 0x1f}, {{}, @device_b, 0xfffffff9, @void, 0x9}, {{}, @broadcast, 0x1, @void, 0x1d}, {{}, @broadcast, 0x4, @void, 0x34}, {{}, @device_b, 0x340, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x800, @value, 0x10}, {{}, @device_b, 0x4, @void, 0x1b}, {{}, @broadcast, 0x8000, @void, 0x25}, {{}, @device_b, 0x7cf6, @void, 0x39}, {{}, @broadcast, 0xff, @void, 0x2d}, {{0x0, 0x1}, @device_b, 0xf4c, @value=@broadcast, 0x1c}, {{}, @device_b, 0x2, @void, 0x20}, {{}, @device_a, 0x9, @void, 0x22}, {{}, @device_b, 0x8, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0xc80a, @value, 0x6}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x40}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_IE={0x10d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x87, 0x8, 0x14, 0x100}}, @fast_bss_trans={0x37, 0xcf, {0x5, 0x5, "9c914f01ba080a30a41ae666a12fd93f", "f97bfe4b06d2c1c8c0ffda25f32bb82d9515da5a8f684dae6a8a96d86372ec58", "051804028c144e877a811ebbe21b75fe04f419c0616eca516dc04ec8ef220861", [{0x4, 0x1c, "4a8b05f2c4bdf5194bae8ccdd19f12ac438f499aa556a1ec7920c9a2"}, {0x4, 0xb, "f1d2ed807ff4215d04a3f1"}, {0x3, 0x1c, "46475778423322a92686fd181836027f1b1761b2074d776a3c1d3f89"}, {0x4, 0x1f, "44b933057193d922719ad7b39b1887a631e10e15cf801ddbcfbff2dfed0181"}, {0x3, 0x11, "3ce2be46277b1eb1d3d6096847bb55993c"}]}}, @rann={0x7e, 0x15, {{0x0, 0x25}, 0x8, 0x3f, @device_b, 0x5, 0xddf, 0x2}}, @ibss={0x6, 0x2, 0x7}, @dsss={0x3, 0x1, 0x95}, @mic={0x8c, 0x10, {0xf68, "24933f793a83", @short="99aa11c37aae05b5"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}]}, 0x260}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 5.332132346s ago: executing program 4 (id=738): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdb0f1d39897a2e24c20500010000000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x4, 0xca, 0xffff7fff}}], 0x20, 0x20008021}], 0x1, 0x20008001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) 5.331767635s ago: executing program 4 (id=739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6tnl0\x00', @local}) r1 = memfd_create(&(0x7f0000000080)=',!:\x00', 0x2) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0x0, 0x8000, 0x8, 0x4, 0x4}) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0x0, 0x8000, 0x8, 0x4, 0x4}) syz_ublk_setup_io_uring(0x6f37, &(0x7f0000000140)={0x0, 0xfbb4, 0x400, 0x2, 0x93}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000000, 0x810, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r3, r4) syz_ublk_setup_io_uring(0x1bb6, &(0x7f0000000280)={0x0, 0x7013, 0x100, 0x2, 0x247}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000003c0)={0x0, @capture={0x1000, 0x1, {0xfffffffd, 0x1000}, 0x7f, 0x97c0}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f00000004c0)={0x5}) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000500)) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000500)) pwrite64(r2, &(0x7f0000000540), 0x0, 0x7) (async) pwrite64(r2, &(0x7f0000000540), 0x0, 0x7) pread64(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x2) (async) pread64(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001580)={{0x0, 0x2, 0xa, 0x1, 0x3}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) getpeername$netlink(r5, &(0x7f0000001700), &(0x7f0000001740)=0xc) (async) getpeername$netlink(r5, &(0x7f0000001700), &(0x7f0000001740)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001780)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4095) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4095) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x24) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f00000018c0)={0x4, 0xffffffcc, 0x81}) ioctl$VHOST_VDPA_GET_VRING_NUM(r7, 0x8002af76, &(0x7f0000001900)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r7, 0x8002af76, &(0x7f0000001900)) bind$bt_hci(r5, &(0x7f0000001940)={0x1f, 0x1, 0x2}, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001a40)={'gre0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x200, 0x4, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xd975}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @end, @lsrr={0x83, 0xb, 0xac, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001a40)={'gre0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x200, 0x4, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xd975}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @end, @lsrr={0x83, 0xb, 0xac, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) read$FUSE(0xffffffffffffffff, &(0x7f0000001a80)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003b40)={'syztnl1\x00', &(0x7f0000003ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x2, 0x7, 0x7823644311a58268, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x80, 0x7800, 0x23, 0x4}}) sendmsg$nl_xfrm(r5, &(0x7f0000004080)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000003bc0)=@allocspi={0x460, 0x16, 0x800, 0x70bd2a, 0x25dfdbfc, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private1, 0x4e23, 0xb, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0x3a, r9, r10}, {@in=@multicast2, 0x4d4, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x3, 0x8, 0x17a6, 0x1, 0x1, 0x9, 0x8}, {0xffffffffffffff01, 0xc06, 0xfffffffffffffaac, 0xe}, {0x3, 0x4, 0xfffffff8}, 0x70bd29, 0x3505, 0xa, 0x4, 0x1}, 0x1, 0x10}, [@tfcpad={0x8, 0x16, 0x51}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd27, 0x9}}, @algo_crypt={0x106, 0x2, {{'ofb(fcrypt)\x00'}, 0x5f0, "b2b6ef7481645ed8abe48f9ab44c1c94fc9bad0fb0848ccb0943b848ae4906263a1a26dec18e508ee3269ce4ff419006b69fc372353f02ba39d99443b3bb357d65c7057bb72d0909c0064c7b74f4ddc9138c99387429880b5dcca33b6788684f0d9abf6808370c22aa6d3a94da713080b9ec8077ff3e1349a415d22c066ebdce9f7ab5c9844b4fd4504767183ab9fc0110f9d8279df69124ca66e2efbd4c53ee4a5e55930c1ee9ba2066b2d374669abb0d01d06b6cdbb839586882b931df"}}, @sa_dir={0x5}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x1, 0x4e21, 0x9, 0x2, 0x80, 0x40, 0x15, r11}, {@in6=@remote, 0x4d4, 0x2b}, @in6=@empty, {0x2, 0x502, 0x3, 0x0, 0x3, 0x1, 0x11cd6660, 0xc}, {0x0, 0x2, 0x800, 0x5}, {0x1, 0x8, 0x8}, 0x70bd2a, 0x3506, 0x2, 0x0, 0xcb, 0x42}}, @algo_auth_trunc={0xcd, 0x14, {{'sha512\x00'}, 0x408, 0x180, "dd402489bd6c11167564fe3be09b6d2ed37d764a9e6123d95e9ea8d64204f29c0f6a55271ffaa6310478e2f27b6b0bd15b749b2f2beb589fa866aeef20dc2c9d1e097ccf29743f5a817909cf84e93abf80301dcc9f3fd439aa2e1efc9ae09ccb878b905ccbbf39b9af06ff6e065d4039f3174495791abf0e08b7045f8778409941"}}, @algo_auth_trunc={0x88, 0x14, {{'sm3-generic\x00'}, 0x1e0, 0x80, "02ba2b4aa4cd13d1a6aabc8cd902bad9a786aa299fd488ae99fd90aa29c1d8e6505d334c0ecefc75458d125495e65164d1a84f011c54781865094261"}}, @iptfs_dont_frag={0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x40006}, 0x4004) (async) sendmsg$nl_xfrm(r5, &(0x7f0000004080)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000003bc0)=@allocspi={0x460, 0x16, 0x800, 0x70bd2a, 0x25dfdbfc, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private1, 0x4e23, 0xb, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0x3a, r9, r10}, {@in=@multicast2, 0x4d4, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x3, 0x8, 0x17a6, 0x1, 0x1, 0x9, 0x8}, {0xffffffffffffff01, 0xc06, 0xfffffffffffffaac, 0xe}, {0x3, 0x4, 0xfffffff8}, 0x70bd29, 0x3505, 0xa, 0x4, 0x1}, 0x1, 0x10}, [@tfcpad={0x8, 0x16, 0x51}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd27, 0x9}}, @algo_crypt={0x106, 0x2, {{'ofb(fcrypt)\x00'}, 0x5f0, "b2b6ef7481645ed8abe48f9ab44c1c94fc9bad0fb0848ccb0943b848ae4906263a1a26dec18e508ee3269ce4ff419006b69fc372353f02ba39d99443b3bb357d65c7057bb72d0909c0064c7b74f4ddc9138c99387429880b5dcca33b6788684f0d9abf6808370c22aa6d3a94da713080b9ec8077ff3e1349a415d22c066ebdce9f7ab5c9844b4fd4504767183ab9fc0110f9d8279df69124ca66e2efbd4c53ee4a5e55930c1ee9ba2066b2d374669abb0d01d06b6cdbb839586882b931df"}}, @sa_dir={0x5}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x1, 0x4e21, 0x9, 0x2, 0x80, 0x40, 0x15, r11}, {@in6=@remote, 0x4d4, 0x2b}, @in6=@empty, {0x2, 0x502, 0x3, 0x0, 0x3, 0x1, 0x11cd6660, 0xc}, {0x0, 0x2, 0x800, 0x5}, {0x1, 0x8, 0x8}, 0x70bd2a, 0x3506, 0x2, 0x0, 0xcb, 0x42}}, @algo_auth_trunc={0xcd, 0x14, {{'sha512\x00'}, 0x408, 0x180, "dd402489bd6c11167564fe3be09b6d2ed37d764a9e6123d95e9ea8d64204f29c0f6a55271ffaa6310478e2f27b6b0bd15b749b2f2beb589fa866aeef20dc2c9d1e097ccf29743f5a817909cf84e93abf80301dcc9f3fd439aa2e1efc9ae09ccb878b905ccbbf39b9af06ff6e065d4039f3174495791abf0e08b7045f8778409941"}}, @algo_auth_trunc={0x88, 0x14, {{'sm3-generic\x00'}, 0x1e0, 0x80, "02ba2b4aa4cd13d1a6aabc8cd902bad9a786aa299fd488ae99fd90aa29c1d8e6505d334c0ecefc75458d125495e65164d1a84f011c54781865094261"}}, @iptfs_dont_frag={0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x40006}, 0x4004) 5.242270646s ago: executing program 4 (id=740): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x80184132, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4040404) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x33424752, 0x9, 0x5, 0x98, 0x3, 0x6, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x4206c2, 0x0) ioctl$SNDCTL_TMR_TEMPO(r8, 0xc0045405, &(0x7f0000000000)=0x7e) 5.182446829s ago: executing program 4 (id=741): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x1d8, 0xfffffffffffffffc) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) rename(&(0x7f0000000000)='./dev/sda1\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './dev\x00'}) ioctl$int_out(r3, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 5.072371146s ago: executing program 4 (id=742): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff02000000017c00000c00018006b4d24b9a0a00000800028004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194", 0x48}], 0x1}}], 0x1, 0x60cd894) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 928.575834ms ago: executing program 3 (id=768): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003b00), 0x40000, 0x0) ioctl$RTC_IRQP_READ(r4, 0x40187014, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), &(0x7f00000003c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x5, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={r2, r3, r5, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0]}) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_usbip_server_init(0x4) write$usbip_server(r6, &(0x7f0000003b40)=ANY=[@ANYBLOB="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"], 0x330d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043b0aaaaa1301aa10040000003d6f82633304b773c588c7be4bcad15364fb37ea41b770dafe8b6354f8b33f35e757d7e78bf558268507224bf3110e4718476f4c54d4dba6f474d5c3713a66a98fe762d744fb0fdd9a757f19ae245f5dee054f33fefe48f244c60d083bf61f8103cd358e4fc795ea4ca846ce1e10a1508d6276"], 0xd) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006f73660014000280080001400000000408000340000000010900010073797a30000000000900020073797a3600000000140000001100010000000000000000000100000a659c0e37d663fa840342fc8defd28a9ed98d9629f91e4b13aa31b1ce8e7cdbc2932ea8bcb6ce5ec6ec3fe3090964a118cecabf1de000c542240cedc7cbf2d47e0f"], 0x78}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)='\x13wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) 372.035874ms ago: executing program 2 (id=774): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000010000000427935ec5a5ed9f7a595bc4ba0000e4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 371.632561ms ago: executing program 3 (id=775): mlock2(&(0x7f00006b5000/0x2000)=nil, 0x2000, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x99ee, 0x1, 0x0, 0x1cb}, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 302.125427ms ago: executing program 2 (id=776): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) (async, rerun: 32) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 230.70279ms ago: executing program 2 (id=777): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000005c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind$inet(r3, 0x0, 0x0) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) (async) 230.138433ms ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x4050) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x200, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x180, 0x0, 0xfffffffffffffff9, [{{0x0, 0x400000000000002, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r9, r10, 0x8641, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x4, 0x6, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x2, 0x3, 0x12e, 0x7, 0x7, 0xf7fffffa, 0xc000, 0x6, r11, r10, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xd, 0x8100008, '&+%*!\xeb&M\xb0\xf9-@\x00'}}]}, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800015, &(0x7f0000000600)={'trans=virtio,', {[{@cache_loose}, {@noxattr}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@directio}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, '/%'}}], [{@fowner_lt={'fowner<', r5}}, {@pcr={'pcr', 0x3d, 0xe}}, {@euid_lt={'euid<', r9}}, {@subj_type}, {@measure}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) writev(r0, &(0x7f0000000040), 0x2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) 151.436027ms ago: executing program 2 (id=779): open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {0x0}, {&(0x7f0000003840)=""/157, 0x9d}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x88c1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x48040) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x6, 0x8, 0x3, 0x2, 0x3, 0xc5, 0x9, 0x5, 0x7f, 0x9, 0x9d, 0xb, 0x8, 0x82, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 149.998118ms ago: executing program 3 (id=780): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) (async) bind$can_raw(r0, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(0x3) 71.612147ms ago: executing program 3 (id=781): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) 71.267702ms ago: executing program 3 (id=782): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.230635ms ago: executing program 2 (id=783): r0 = io_uring_setup(0x6fde, &(0x7f0000000280)={0x0, 0xf95c, 0x2, 0x0, 0xd7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000300), 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x3, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x7, 0x0, 0x7, 0x9, 0x0, 0xb3}, {0xd, 0xf, 0x1, 0x2, 0x2, 0x5, 0x7}, {0x1, 0x63f2, 0x2, 0x1, 0x2, 0x800, 0x2}, {0x4000000f, 0xc, 0x7, 0x7, 0xffff, 0xfffffffb, 0x2}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) (async) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) clock_gettime(0xfffffff2, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x8, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x0, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0xdf}, {0x2, 0x4c, 0x4, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100010001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1346, 0x7fff, 0x0, '\x00', {0x7ff}}}}, {{@uncond, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x7}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x3}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x3}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0xc8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8, 0x2}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0xffffffff, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) kernel console output (not intermixed with test programs): _alloc_inode+0x26/0xe0 [ 91.793695][ T7697] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 91.793707][ T7697] alloc_inode+0x68/0x250 [ 91.793719][ T7697] alloc_anon_inode+0x2a/0x3e0 [ 91.793736][ T7697] anon_inode_make_secure_inode+0x2f/0x140 [ 91.793751][ T7697] kvm_gmem_create+0x1cd/0x7a0 [ 91.793766][ T7697] kvm_vm_ioctl+0x1212/0x42d0 [ 91.793784][ T7697] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 91.793805][ T7697] ? kasan_quarantine_put+0x104/0x240 [ 91.793816][ T7697] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.793830][ T7697] ? find_held_lock+0x2b/0x80 [ 91.793845][ T7697] ? tomoyo_path_number_perm+0x28f/0x580 [ 91.793861][ T7697] ? tomoyo_path_number_perm+0x28f/0x580 [ 91.793885][ T7697] ? __pfx_futex_wait+0x10/0x10 [ 91.793905][ T7697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.793918][ T7697] ? do_vfs_ioctl+0x226/0x13e0 [ 91.793929][ T7697] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.793938][ T7697] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 91.793951][ T7697] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.793965][ T7697] ? __fget_files+0x34/0x3d0 [ 91.793985][ T7697] ? selinux_file_ioctl+0x13b/0x290 [ 91.793995][ T7697] ? selinux_file_ioctl+0xb6/0x290 [ 91.794007][ T7697] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 91.794019][ T7697] __x64_sys_ioctl+0x18e/0x210 [ 91.794031][ T7697] do_syscall_64+0x123/0x790 [ 91.794045][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.794057][ T7697] RIP: 0033:0x7ffa78d9e159 [ 91.794067][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.794077][ T7697] RSP: 002b:00007ffa79c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.794088][ T7697] RAX: ffffffffffffffda RBX: 00007ffa79025fa0 RCX: 00007ffa78d9e159 [ 91.794095][ T7697] RDX: 00002000000001c0 RSI: 00000000c040aed4 RDI: 0000000000000004 [ 91.794102][ T7697] RBP: 00007ffa78e35024 R08: 0000000000000000 R09: 0000000000000000 [ 91.794109][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.794115][ T7697] R13: 00007ffa79026038 R14: 00007ffa79025fa0 R15: 00007ffd6b0adcb8 [ 91.794129][ T7697] [ 91.811124][ T7699] vlan2: entered allmulticast mode [ 91.843684][ T7700] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 91.843969][ T7700] cramfs: wrong magic [ 91.850206][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.850450][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.858293][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 91.859852][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.860484][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 91.860500][ T9] usb 8-1: can't read configurations, error -71 [ 92.100382][ T7717] jffs2: notice: (7717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 92.164229][ T7725] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.182503][ T7725] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 92.256060][ T7727] i8042 kbd 00:00: in use; can't configure [ 92.548256][ T7755] tmpfs: Unknown parameter 'usrquota' [ 92.668464][ T7762] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.668464][ T7762] The task syz.1.512 (7762) triggered the difference, watch for misbehavior. [ 93.971285][ T7839] program syz.4.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.175529][ T7880] Bluetooth: MGMT ver 1.23 [ 94.381446][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 94.381511][ T43] audit: type=1400 audit(1788815037.892:670): avc: denied { getopt } for pid=7898 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.447952][ T43] audit: type=1400 audit(1788815037.952:671): avc: denied { append } for pid=7902 comm="syz.2.526" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.450067][ T7903] loop6: detected capacity change from 0 to 524288000 [ 94.527507][ T7909] jffs2: notice: (7909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 94.532438][ T43] audit: type=1400 audit(1788815038.042:672): avc: denied { accept } for pid=7904 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.535032][ T43] audit: type=1400 audit(1788815038.042:673): avc: denied { read } for pid=7904 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.569371][ T7912] __nla_validate_parse: 8 callbacks suppressed [ 94.569448][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 94.569470][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 94.569498][ T7912] netlink: 'syz.1.530': attribute type 19 has an invalid length. [ 94.582762][ T7903] Invalid logical block size (255) [ 94.589599][ T43] audit: type=1400 audit(1788815038.102:674): avc: denied { write } for pid=7908 comm="syz.4.529" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.734037][ T43] audit: type=1400 audit(1788815038.242:675): avc: denied { read } for pid=7918 comm="syz.3.531" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.734090][ T43] audit: type=1400 audit(1788815038.242:676): avc: denied { open } for pid=7918 comm="syz.3.531" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.742127][ T7919] autofs4:pid:7919:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 94.742137][ T43] audit: type=1400 audit(1788815038.252:677): avc: denied { ioctl } for pid=7918 comm="syz.3.531" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.018441][ T5474] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 95.108258][ T7928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7928 comm=syz.1.534 [ 95.158498][ T5474] usb 8-1: device descriptor read/64, error -71 [ 95.358850][ T3382] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 95.409475][ T5474] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 95.519036][ T3382] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 95.523395][ T3382] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.523447][ T3382] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.532811][ T3382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.532854][ T3382] usb 6-1: Product: syz [ 95.532890][ T3382] usb 6-1: Manufacturer: syz [ 95.532915][ T3382] usb 6-1: SerialNumber: syz [ 95.562006][ T5474] usb 8-1: device descriptor read/64, error -71 [ 95.670712][ T5474] usb usb8-port1: attempt power cycle [ 95.752209][ T3382] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 95.790845][ T7781] syz.2.516 (7781) used greatest stack depth: 19480 bytes left [ 95.950744][ T43] audit: type=1400 audit(1788815039.462:678): avc: denied { read write } for pid=7927 comm="syz.1.534" name="lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 95.959880][ T43] audit: type=1400 audit(1788815039.462:679): avc: denied { open } for pid=7927 comm="syz.1.534" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.010119][ T5474] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 96.040790][ T5474] usb 8-1: device descriptor read/8, error -71 [ 96.041253][ T7937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.536'. [ 96.262324][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 96.298492][ T5474] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 96.322079][ T5474] usb 8-1: device descriptor read/8, error -71 [ 96.428555][ T5474] usb usb8-port1: unable to enumerate USB device [ 96.439751][ T7808] syz.2.516 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 96.443551][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.443580][ T7808] Tainted: [L]=SOFTLOCKUP [ 96.443585][ T7808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.443592][ T7808] Call Trace: [ 96.443596][ T7808] [ 96.443601][ T7808] dump_stack_lvl+0x100/0x190 [ 96.443635][ T7808] dump_header+0xfb/0x606 [ 96.443648][ T7808] oom_kill_process.cold+0xd/0x380 [ 96.443663][ T7808] out_of_memory+0x340/0x14f0 [ 96.443683][ T7808] ? __pfx_out_of_memory+0x10/0x10 [ 96.443702][ T7808] mem_cgroup_out_of_memory+0xc6/0x130 [ 96.443714][ T7808] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 96.443725][ T7808] ? find_held_lock+0x2b/0x80 [ 96.443744][ T7808] ? do_raw_spin_unlock+0x145/0x1e0 [ 96.443758][ T7808] ? _raw_spin_unlock+0x28/0x50 [ 96.443776][ T7808] try_charge_memcg+0x783/0xf60 [ 96.443795][ T7808] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.443810][ T7808] ? find_held_lock+0x2b/0x80 [ 96.443825][ T7808] ? rcu_read_unlock+0x17/0x60 [ 96.443840][ T7808] ? rcu_read_unlock+0x17/0x60 [ 96.443856][ T7808] ? find_held_lock+0x2b/0x80 [ 96.443871][ T7808] ? rcu_read_unlock+0x17/0x60 [ 96.443890][ T7808] charge_memcg+0x1ae/0x210 [ 96.443906][ T7808] __mem_cgroup_charge+0x2b/0x1c0 [ 96.443942][ T7808] filemap_add_folio+0xe7/0x6a0 [ 96.443959][ T7808] ? __pfx_filemap_add_folio+0x10/0x10 [ 96.443978][ T7808] __filemap_get_folio_mpol+0x584/0x1320 [ 96.443998][ T7808] filemap_fault+0x879/0x3130 [ 96.444016][ T7808] ? __pfx_filemap_fault+0x10/0x10 [ 96.444036][ T7808] ? find_held_lock+0x2b/0x80 [ 96.444052][ T7808] ? __pfx_filemap_map_pages+0x10/0x10 [ 96.444066][ T7808] __do_fault+0x10b/0x440 [ 96.444078][ T7808] do_fault+0xb3f/0x1830 [ 96.444093][ T7808] ? __pfx_do_fault+0x10/0x10 [ 96.444105][ T7808] ? rcu_read_unlock+0x2d/0xb0 [ 96.444120][ T7808] ? rcu_read_unlock+0x2d/0xb0 [ 96.444135][ T7808] ? __pte_offset_map+0x179/0x310 [ 96.444149][ T7808] __handle_mm_fault+0x150b/0x2f60 [ 96.444168][ T7808] ? __pfx___handle_mm_fault+0x10/0x10 [ 96.444184][ T7808] ? pte_offset_map_lock+0x174/0x320 [ 96.444196][ T7808] ? find_held_lock+0x2b/0x80 [ 96.444211][ T7808] ? find_held_lock+0x2b/0x80 [ 96.444225][ T7808] ? follow_page_pte+0x536/0x1050 [ 96.444246][ T7808] handle_mm_fault+0x363/0xa20 [ 96.444265][ T7808] __get_user_pages+0x8ae/0x2c30 [ 96.444282][ T7808] ? lock_acquire+0x1d1/0x380 [ 96.444293][ T7808] ? __pfx___get_user_pages+0x10/0x10 [ 96.444307][ T7808] ? __pfx___might_resched+0x10/0x10 [ 96.444321][ T7808] get_dump_page+0x27e/0x3d0 [ 96.444334][ T7808] ? __pfx_get_dump_page+0x10/0x10 [ 96.444347][ T7808] ? dump_user_range+0x65e/0xad0 [ 96.444362][ T7808] dump_user_range+0x18d/0xad0 [ 96.444376][ T7808] ? __pfx_dump_user_range+0x10/0x10 [ 96.444393][ T7808] ? __pfx_writenote+0x10/0x10 [ 96.444405][ T7808] ? elf_core_dump+0x1f25/0x3d20 [ 96.444419][ T7808] elf_core_dump+0x2d68/0x3d20 [ 96.444439][ T7808] ? __pfx_elf_core_dump+0x10/0x10 [ 96.444450][ T7808] ? kasan_save_stack+0x3f/0x50 [ 96.444461][ T7808] ? kasan_save_stack+0x30/0x50 [ 96.444472][ T7808] ? kasan_save_track+0x14/0x30 [ 96.444484][ T7808] ? __kasan_kmalloc+0xaa/0xb0 [ 96.444499][ T7808] ? vfs_coredump+0x21f6/0x54a0 [ 96.444511][ T7808] ? get_signal+0x1f2a/0x21e0 [ 96.444526][ T7808] ? arch_do_signal_or_restart+0x91/0x7e0 [ 96.444551][ T7808] ? 0xffffffffff600000 [ 96.444590][ T7808] ? lock_acquire+0x1d1/0x380 [ 96.444601][ T7808] ? get_signal+0x1f2a/0x21e0 [ 96.444621][ T7808] ? vfs_coredump+0x281a/0x54a0 [ 96.444631][ T7808] vfs_coredump+0x281a/0x54a0 [ 96.444647][ T7808] ? __pfx_vfs_coredump+0x10/0x10 [ 96.444658][ T7808] ? __lock_acquire+0x5c0/0x1f40 [ 96.444673][ T7808] ? __lock_acquire+0x5c0/0x1f40 [ 96.444686][ T7808] ? lock_acquire+0x1d1/0x380 [ 96.444697][ T7808] ? unwind_next_frame+0xbd/0x2090 [ 96.444715][ T7808] ? lock_acquire+0x1d1/0x380 [ 96.444729][ T7808] ? bpf_ksym_find+0x128/0x1c0 [ 96.444746][ T7808] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.444769][ T7808] ? arch_stack_walk+0xa6/0xf0 [ 96.444788][ T7808] ? __sigqueue_free+0xbe/0x2a0 [ 96.444802][ T7808] ? stack_trace_save+0x8e/0xc0 [ 96.444819][ T7808] ? __pfx_stack_trace_save+0x10/0x10 [ 96.444836][ T7808] ? stack_depot_save_flags+0x27/0x9f0 [ 96.444849][ T7808] ? __lock_acquire+0x5c0/0x1f40 [ 96.444886][ T7808] ? proc_coredump_connector+0x2d3/0x4f0 [ 96.444903][ T7808] ? __pfx_proc_coredump_connector+0x10/0x10 [ 96.444922][ T7808] ? rcu_is_watching+0x13/0xc0 [ 96.444939][ T7808] get_signal+0x1f2a/0x21e0 [ 96.444957][ T7808] ? __pfx_get_signal+0x10/0x10 [ 96.444968][ T7808] ? __pfx_force_sig_fault+0x10/0x10 [ 96.444983][ T7808] arch_do_signal_or_restart+0x91/0x7e0 [ 96.445003][ T7808] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.445028][ T7808] irqentry_exit+0x402/0xa10 [ 96.445044][ T7808] asm_exc_page_fault+0x26/0x30 [ 96.445055][ T7808] RIP: 0033:0x0 [ 96.445063][ T7808] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 96.445068][ T7808] RSP: 002b:0000200000000208 EFLAGS: 00010217 [ 96.445078][ T7808] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 96.445085][ T7808] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 96.445092][ T7808] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 96.445099][ T7808] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 96.445105][ T7808] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 96.445120][ T7808] [ 96.449964][ T7808] memory: usage 307200kB, limit 307200kB, failcnt 25691 [ 96.449976][ T7808] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 96.449984][ T7808] kmem: usage 9268kB, limit 9007199254740988kB, failcnt 0 [ 96.449991][ T7808] Memory cgroup stats for /syz2: [ 96.450111][ T7808] cache 305025024 [ 96.450116][ T7808] rss 12288 [ 96.450120][ T7808] rss_huge 0 [ 96.450123][ T7808] shmem 305025024 [ 96.450127][ T7808] mapped_file 2375680 [ 96.450131][ T7808] dirty 0 [ 96.450134][ T7808] writeback 0 [ 96.450138][ T7808] workingset_refault_anon 53 [ 96.450142][ T7808] workingset_refault_file 3071 [ 96.450146][ T7808] swap 127946752 [ 96.450150][ T7808] swapcached 145588224 [ 96.450154][ T7808] pgpgin 182698 [ 96.450157][ T7808] pgpgout 108292 [ 96.450161][ T7808] pgfault 52650 [ 96.450165][ T7808] pgmajfault 61 [ 96.450168][ T7808] inactive_anon 158752768 [ 96.450172][ T7808] active_anon 145281024 [ 96.450176][ T7808] inactive_file 0 [ 96.450180][ T7808] active_file 0 [ 96.450184][ T7808] unevictable 1048576 [ 96.450188][ T7808] hierarchical_memory_limit 314572800 [ 96.450192][ T7808] hierarchical_memsw_limit 9223372036854771712 [ 96.450197][ T7808] total_cache 305025024 [ 96.450200][ T7808] total_rss 12288 [ 96.450205][ T7808] total_rss_huge 0 [ 96.450211][ T7808] total_shmem 305025024 [ 96.450217][ T7808] total_mapped_file 2375680 [ 96.450221][ T7808] total_dirty 0 [ 96.450225][ T7808] total_writeback 0 [ 96.450229][ T7808] total_workingset_refault_anon 53 [ 96.450233][ T7808] total_workingset_refault_file 3071 [ 96.450238][ T7808] total_swap 127946752 [ 96.450242][ T7808] total_swapcached 145588224 [ 96.450246][ T7808] total_pgpgin 182698 [ 96.450249][ T7808] total_pgpgout 108292 [ 96.450253][ T7808] total_pgfault 52650 [ 96.450257][ T7808] total_pgmajfault 61 [ 96.450261][ T7808] total_inactive_anon 158752768 [ 96.450265][ T7808] total_active_anon 145281024 [ 96.450269][ T7808] total_inactive_file 0 [ 96.450273][ T7808] total_active_file 0 [ 96.450276][ T7808] total_unevictable 1048576 [ 96.450281][ T7808] anon_cost 0 [ 96.450284][ T7808] file_cost 0 [ 96.450288][ T7808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7845,uid=0 [ 96.450903][ T7808] Memory cgroup out of memory: Killed process 7845 (syz.2.516) total-vm:99072kB, anon-rss:1244kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 96.477000][ T7903] syz.2.526 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.477023][ T7903] CPU: 3 UID: 0 PID: 7903 Comm: syz.2.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.477038][ T7903] Tainted: [L]=SOFTLOCKUP [ 96.477042][ T7903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.477048][ T7903] Call Trace: [ 96.477052][ T7903] [ 96.477057][ T7903] dump_stack_lvl+0x100/0x190 [ 96.477077][ T7903] dump_header+0xfb/0x606 [ 96.477090][ T7903] oom_kill_process.cold+0xd/0x380 [ 96.477104][ T7903] out_of_memory+0x340/0x14f0 [ 96.477121][ T7903] ? __pfx_out_of_memory+0x10/0x10 [ 96.477139][ T7903] mem_cgroup_out_of_memory+0xc6/0x130 [ 96.477152][ T7903] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 96.477163][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477182][ T7903] ? do_raw_spin_unlock+0x145/0x1e0 [ 96.477196][ T7903] ? _raw_spin_unlock+0x28/0x50 [ 96.477210][ T7903] try_charge_memcg+0x783/0xf60 [ 96.477229][ T7903] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.477244][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477259][ T7903] ? rcu_read_unlock+0x17/0x60 [ 96.477275][ T7903] ? rcu_read_unlock+0x17/0x60 [ 96.477291][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477306][ T7903] ? rcu_read_unlock+0x17/0x60 [ 96.477340][ T7903] charge_memcg+0x1ae/0x210 [ 96.477356][ T7903] __mem_cgroup_charge+0x2b/0x1c0 [ 96.477374][ T7903] shmem_alloc_and_add_folio+0x451/0xd40 [ 96.477394][ T7903] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 96.477411][ T7903] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 96.477431][ T7903] shmem_get_folio_gfp+0x75b/0x1980 [ 96.477450][ T7903] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 96.477468][ T7903] ? filemap_map_pages+0x114a/0x2100 [ 96.477485][ T7903] shmem_fault+0x1fb/0xa30 [ 96.477502][ T7903] ? __pfx_shmem_fault+0x10/0x10 [ 96.477520][ T7903] ? __pfx_filemap_map_pages+0x10/0x10 [ 96.477536][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477552][ T7903] ? __pfx_filemap_map_pages+0x10/0x10 [ 96.477565][ T7903] __do_fault+0x10b/0x440 [ 96.477578][ T7903] do_fault+0xb3f/0x1830 [ 96.477595][ T7903] ? rcu_is_watching+0x13/0xc0 [ 96.477611][ T7903] ? __pfx_do_fault+0x10/0x10 [ 96.477623][ T7903] ? rcu_read_unlock+0x2d/0xb0 [ 96.477638][ T7903] ? rcu_read_unlock+0x2d/0xb0 [ 96.477654][ T7903] ? __pte_offset_map+0x179/0x310 [ 96.477667][ T7903] __handle_mm_fault+0x150b/0x2f60 [ 96.477686][ T7903] ? __pfx___handle_mm_fault+0x10/0x10 [ 96.477702][ T7903] ? pte_offset_map_lock+0x174/0x320 [ 96.477714][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477729][ T7903] ? find_held_lock+0x2b/0x80 [ 96.477744][ T7903] ? follow_page_pte+0x536/0x1050 [ 96.477765][ T7903] handle_mm_fault+0x363/0xa20 [ 96.477783][ T7903] __get_user_pages+0x8ae/0x2c30 [ 96.477799][ T7903] ? __pfx_mt_find+0x10/0x10 [ 96.477815][ T7903] ? __pfx___get_user_pages+0x10/0x10 [ 96.477833][ T7903] populate_vma_page_range+0x267/0x3f0 [ 96.477847][ T7903] ? __pfx_populate_vma_page_range+0x10/0x10 [ 96.477860][ T7903] ? __pfx_find_vma_intersection+0x10/0x10 [ 96.477877][ T7903] __mm_populate+0x107/0x3a0 [ 96.477891][ T7903] ? __pfx___mm_populate+0x10/0x10 [ 96.477905][ T7903] ? up_write+0x2dc/0x5b0 [ 96.477920][ T7903] vm_mmap_pgoff+0x441/0x470 [ 96.477933][ T7903] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 96.477948][ T7903] ? __pfx_do_futex+0x10/0x10 [ 96.477966][ T7903] ksys_mmap_pgoff+0xe4/0x610 [ 96.477979][ T7903] ? __x64_sys_futex+0x358/0x4d0 [ 96.477994][ T7903] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 96.478006][ T7903] ? xfd_validate_state+0x129/0x190 [ 96.478022][ T7903] __x64_sys_mmap+0x125/0x190 [ 96.478036][ T7903] do_syscall_64+0x123/0x790 [ 96.478051][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.478063][ T7903] RIP: 0033:0x7ffa78d9e159 [ 96.478074][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.478084][ T7903] RSP: 002b:00007ffa79c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 96.478095][ T7903] RAX: ffffffffffffffda RBX: 00007ffa79025fa0 RCX: 00007ffa78d9e159 [ 96.478102][ T7903] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 96.478109][ T7903] RBP: 00007ffa78e35024 R08: ffffffffffffffff R09: 0000000000000000 [ 96.478116][ T7903] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 96.478122][ T7903] R13: 00007ffa79026038 R14: 00007ffa79025fa0 R15: 00007ffd6b0adcb8 [ 96.478137][ T7903] [ 96.487720][ T7903] memory: usage 307200kB, limit 307200kB, failcnt 25937 [ 96.487732][ T7903] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 96.487739][ T7903] kmem: usage 9268kB, limit 9007199254740988kB, failcnt 0 [ 96.487746][ T7903] Memory cgroup stats for /syz2: [ 96.487842][ T7903] cache 305025024 [ 96.487847][ T7903] rss 12288 [ 96.487851][ T7903] rss_huge 0 [ 96.487854][ T7903] shmem 305025024 [ 96.487858][ T7903] mapped_file 2375680 [ 96.487862][ T7903] dirty 0 [ 96.487865][ T7903] writeback 0 [ 96.487869][ T7903] workingset_refault_anon 53 [ 96.487873][ T7903] workingset_refault_file 3071 [ 96.487877][ T7903] swap 127946752 [ 96.487881][ T7903] swapcached 145588224 [ 96.487884][ T7903] pgpgin 182698 [ 96.487888][ T7903] pgpgout 108292 [ 96.487892][ T7903] pgfault 52650 [ 96.487895][ T7903] pgmajfault 61 [ 96.487899][ T7903] inactive_anon 158752768 [ 96.487903][ T7903] active_anon 145281024 [ 96.487906][ T7903] inactive_file 0 [ 96.487910][ T7903] active_file 0 [ 96.487914][ T7903] unevictable 1048576 [ 96.487918][ T7903] hierarchical_memory_limit 314572800 [ 96.487942][ T7903] hierarchical_memsw_limit 9223372036854771712 [ 96.487947][ T7903] total_cache 305025024 [ 96.487951][ T7903] total_rss 12288 [ 96.487955][ T7903] total_rss_huge 0 [ 96.487959][ T7903] total_shmem 305025024 [ 96.487963][ T7903] total_mapped_file 2375680 [ 96.487967][ T7903] total_dirty 0 [ 96.487970][ T7903] total_writeback 0 [ 96.487974][ T7903] total_workingset_refault_anon 53 [ 96.487978][ T7903] total_workingset_refault_file 3071 [ 96.487983][ T7903] total_swap 127946752 [ 96.487987][ T7903] total_swapcached 145588224 [ 96.487991][ T7903] total_pgpgin 182698 [ 96.487994][ T7903] total_pgpgout 108292 [ 96.487998][ T7903] total_pgfault 52650 [ 96.488002][ T7903] total_pgmajfault 61 [ 96.488006][ T7903] total_inactive_anon 158752768 [ 96.488010][ T7903] total_active_anon 145281024 [ 96.488014][ T7903] total_inactive_file 0 [ 96.488018][ T7903] total_active_file 0 [ 96.488021][ T7903] total_unevictable 1048576 [ 96.488026][ T7903] anon_cost 0 [ 96.488029][ T7903] file_cost 0 [ 96.488033][ T7903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7808,uid=0 [ 96.489116][ T7903] Memory cgroup out of memory: Killed process 7808 (syz.2.516) total-vm:98940kB, anon-rss:1244kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 96.507024][ T7779] syz.2.516 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.507046][ T7779] CPU: 2 UID: 0 PID: 7779 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.507062][ T7779] Tainted: [L]=SOFTLOCKUP [ 96.507066][ T7779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.507072][ T7779] Call Trace: [ 96.507076][ T7779] [ 96.507080][ T7779] dump_stack_lvl+0x100/0x190 [ 96.507099][ T7779] dump_header+0xfb/0x606 [ 96.507114][ T7779] oom_kill_process.cold+0xd/0x380 [ 96.507128][ T7779] out_of_memory+0x340/0x14f0 [ 96.507145][ T7779] ? __pfx_out_of_memory+0x10/0x10 [ 96.507163][ T7779] mem_cgroup_out_of_memory+0xc6/0x130 [ 96.507176][ T7779] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 96.507187][ T7779] ? find_held_lock+0x2b/0x80 [ 96.507205][ T7779] ? do_raw_spin_unlock+0x145/0x1e0 [ 96.507220][ T7779] ? _raw_spin_unlock+0x28/0x50 [ 96.507233][ T7779] try_charge_memcg+0x783/0xf60 [ 96.507252][ T7779] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.507267][ T7779] ? find_held_lock+0x2b/0x80 [ 96.507282][ T7779] ? rcu_read_unlock+0x17/0x60 [ 96.507298][ T7779] ? rcu_read_unlock+0x17/0x60 [ 96.507314][ T7779] ? find_held_lock+0x2b/0x80 [ 96.507329][ T7779] ? rcu_read_unlock+0x17/0x60 [ 96.507348][ T7779] charge_memcg+0x1ae/0x210 [ 96.507364][ T7779] __mem_cgroup_charge+0x2b/0x1c0 [ 96.507382][ T7779] shmem_alloc_and_add_folio+0x451/0xd40 [ 96.507402][ T7779] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 96.507419][ T7779] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 96.507439][ T7779] shmem_get_folio_gfp+0x75b/0x1980 [ 96.507458][ T7779] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 96.507475][ T7779] ? vm_normal_page+0x1d1/0x380 [ 96.507491][ T7779] ? __pfx_vm_normal_page+0x10/0x10 [ 96.507506][ T7779] shmem_write_begin+0x1a4/0x420 [ 96.507524][ T7779] ? __pfx_shmem_write_begin+0x10/0x10 [ 96.507541][ T7779] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 96.507561][ T7779] generic_perform_write+0x292/0xa40 [ 96.507575][ T7779] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 96.507590][ T7779] ? __pfx_generic_perform_write+0x10/0x10 [ 96.507604][ T7779] ? file_update_time_flags+0x38c/0x520 [ 96.507623][ T7779] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 96.507634][ T7779] shmem_file_write_iter+0x10e/0x140 [ 96.507646][ T7779] __kernel_write_iter+0x2ac/0x930 [ 96.507658][ T7779] ? __pfx___kernel_write_iter+0x10/0x10 [ 96.507669][ T7779] ? __up_read+0x333/0x980 [ 96.507684][ T7779] ? dump_user_range+0x65e/0xad0 [ 96.507698][ T7779] dump_user_range+0x3f9/0xad0 [ 96.507712][ T7779] ? __pfx_dump_user_range+0x10/0x10 [ 96.507728][ T7779] ? __pfx_writenote+0x10/0x10 [ 96.507740][ T7779] ? elf_core_dump+0x1f25/0x3d20 [ 96.507754][ T7779] elf_core_dump+0x2d68/0x3d20 [ 96.507773][ T7779] ? __pfx_elf_core_dump+0x10/0x10 [ 96.507785][ T7779] ? kasan_save_stack+0x3f/0x50 [ 96.507796][ T7779] ? kasan_save_stack+0x30/0x50 [ 96.507807][ T7779] ? kasan_save_track+0x14/0x30 [ 96.507818][ T7779] ? __kasan_kmalloc+0xaa/0xb0 [ 96.507829][ T7779] ? vfs_coredump+0x21f6/0x54a0 [ 96.507839][ T7779] ? get_signal+0x1f2a/0x21e0 [ 96.507850][ T7779] ? arch_do_signal_or_restart+0x91/0x7e0 [ 96.507875][ T7779] ? 0xffffffffff600000 [ 96.507901][ T7779] ? lock_acquire+0x1d1/0x380 [ 96.507912][ T7779] ? get_signal+0x1f2a/0x21e0 [ 96.507948][ T7779] ? vfs_coredump+0x281a/0x54a0 [ 96.507959][ T7779] vfs_coredump+0x281a/0x54a0 [ 96.507975][ T7779] ? __pfx_vfs_coredump+0x10/0x10 [ 96.507985][ T7779] ? __lock_acquire+0x5c0/0x1f40 [ 96.508000][ T7779] ? __lock_acquire+0x5c0/0x1f40 [ 96.508013][ T7779] ? lock_acquire+0x1d1/0x380 [ 96.508024][ T7779] ? unwind_next_frame+0xbd/0x2090 [ 96.508042][ T7779] ? lock_acquire+0x1d1/0x380 [ 96.508056][ T7779] ? bpf_ksym_find+0x128/0x1c0 [ 96.508073][ T7779] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.508095][ T7779] ? arch_stack_walk+0xa6/0xf0 [ 96.508114][ T7779] ? __sigqueue_free+0xbe/0x2a0 [ 96.508128][ T7779] ? stack_trace_save+0x8e/0xc0 [ 96.508145][ T7779] ? __pfx_stack_trace_save+0x10/0x10 [ 96.508163][ T7779] ? stack_depot_save_flags+0x27/0x9f0 [ 96.508176][ T7779] ? __lock_acquire+0x5c0/0x1f40 [ 96.508212][ T7779] ? proc_coredump_connector+0x2d3/0x4f0 [ 96.508228][ T7779] ? __pfx_proc_coredump_connector+0x10/0x10 [ 96.508247][ T7779] ? rcu_is_watching+0x13/0xc0 [ 96.508264][ T7779] get_signal+0x1f2a/0x21e0 [ 96.508281][ T7779] ? __pfx_get_signal+0x10/0x10 [ 96.508297][ T7779] arch_do_signal_or_restart+0x91/0x7e0 [ 96.508314][ T7779] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.508334][ T7779] ? cond_local_irq_disable.part.0+0x38/0x40 [ 96.508365][ T7779] ? exc_general_protection+0x120/0x240 [ 96.508385][ T7779] irqentry_exit+0x402/0xa10 [ 96.508401][ T7779] asm_exc_general_protection+0x26/0x30 [ 96.508413][ T7779] RIP: 0033:0x7ffa78d9e161 [ 96.508435][ T7779] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 96.508446][ T7779] RSP: 002b:0000200000000200 EFLAGS: 00010217 [ 96.508455][ T7779] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 96.508462][ T7779] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 96.508469][ T7779] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 96.508475][ T7779] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 96.508482][ T7779] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 96.508500][ T7779] [ 96.535617][ T7779] memory: usage 307200kB, limit 307200kB, failcnt 26325 [ 96.535630][ T7779] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 96.535637][ T7779] kmem: usage 9252kB, limit 9007199254740988kB, failcnt 0 [ 96.535643][ T7779] Memory cgroup stats for /syz2: [ 96.535763][ T7779] cache 304967680 [ 96.535768][ T7779] rss 12288 [ 96.535772][ T7779] rss_huge 0 [ 96.535776][ T7779] shmem 304963584 [ 96.535779][ T7779] mapped_file 2629632 [ 96.535783][ T7779] dirty 0 [ 96.535786][ T7779] writeback 0 [ 96.535790][ T7779] workingset_refault_anon 53 [ 96.535794][ T7779] workingset_refault_file 3072 [ 96.535798][ T7779] swap 127778816 [ 96.535802][ T7779] swapcached 146055168 [ 96.535806][ T7779] pgpgin 183141 [ 96.535809][ T7779] pgpgout 108731 [ 96.535813][ T7779] pgfault 52739 [ 96.535816][ T7779] pgmajfault 61 [ 96.535820][ T7779] inactive_anon 128606208 [ 96.535824][ T7779] active_anon 174743552 [ 96.535828][ T7779] inactive_file 0 [ 96.535831][ T7779] active_file 0 [ 96.535835][ T7779] unevictable 1048576 [ 96.535839][ T7779] hierarchical_memory_limit 314572800 [ 96.535843][ T7779] hierarchical_memsw_limit 9223372036854771712 [ 96.535848][ T7779] total_cache 304967680 [ 96.535852][ T7779] total_rss 12288 [ 96.535855][ T7779] total_rss_huge 0 [ 96.535859][ T7779] total_shmem 304963584 [ 96.535863][ T7779] total_mapped_file 2629632 [ 96.535867][ T7779] total_dirty 0 [ 96.535870][ T7779] total_writeback 0 [ 96.535874][ T7779] total_workingset_refault_anon 53 [ 96.535878][ T7779] total_workingset_refault_file 3072 [ 96.535882][ T7779] total_swap 127778816 [ 96.535886][ T7779] total_swapcached 146055168 [ 96.535890][ T7779] total_pgpgin 183141 [ 96.535894][ T7779] total_pgpgout 108731 [ 96.535898][ T7779] total_pgfault 52739 [ 96.535901][ T7779] total_pgmajfault 61 [ 96.535905][ T7779] total_inactive_anon 128606208 [ 96.535909][ T7779] total_active_anon 174743552 [ 96.535913][ T7779] total_inactive_file 0 [ 96.535917][ T7779] total_active_file 0 [ 96.535940][ T7779] total_unevictable 1048576 [ 96.535946][ T7779] anon_cost 0 [ 96.535950][ T7779] file_cost 0 [ 96.535957][ T7779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7786,uid=0 [ 96.537544][ T7779] Memory cgroup out of memory: Killed process 7786 (syz.2.516) total-vm:98800kB, anon-rss:1248kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 96.679143][ T7786] syz.2.516 (7786) used greatest stack depth: 19176 bytes left [ 96.993727][ T7845] syz.2.516 (7845) used greatest stack depth: 19128 bytes left [ 97.018744][ T7808] syz.2.516 (7808) used greatest stack depth: 17448 bytes left [ 97.792422][ T7965] fuse: Unknown parameter 'group_il' [ 97.853728][ T7844] syz.2.516 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.853789][ T7844] CPU: 3 UID: 0 PID: 7844 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.853806][ T7844] Tainted: [L]=SOFTLOCKUP [ 97.853810][ T7844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.853817][ T7844] Call Trace: [ 97.853821][ T7844] [ 97.853825][ T7844] dump_stack_lvl+0x100/0x190 [ 97.853845][ T7844] dump_header+0xfb/0x606 [ 97.853859][ T7844] oom_kill_process.cold+0xd/0x380 [ 97.853873][ T7844] out_of_memory+0x340/0x14f0 [ 97.853891][ T7844] ? __pfx_out_of_memory+0x10/0x10 [ 97.853909][ T7844] mem_cgroup_out_of_memory+0xc6/0x130 [ 97.853921][ T7844] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.853933][ T7844] ? find_held_lock+0x2b/0x80 [ 97.853951][ T7844] ? do_raw_spin_unlock+0x145/0x1e0 [ 97.853965][ T7844] ? _raw_spin_unlock+0x28/0x50 [ 97.853979][ T7844] try_charge_memcg+0x783/0xf60 [ 97.853997][ T7844] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.854012][ T7844] ? find_held_lock+0x2b/0x80 [ 97.854027][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.854042][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.854058][ T7844] ? find_held_lock+0x2b/0x80 [ 97.854073][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.854093][ T7844] charge_memcg+0x1ae/0x210 [ 97.854109][ T7844] __mem_cgroup_charge+0x2b/0x1c0 [ 97.854127][ T7844] shmem_alloc_and_add_folio+0x451/0xd40 [ 97.854160][ T7844] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.854177][ T7844] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 97.854197][ T7844] shmem_get_folio_gfp+0x75b/0x1980 [ 97.854216][ T7844] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.854233][ T7844] ? vm_normal_page+0x1d1/0x380 [ 97.854245][ T7844] ? __pfx_vm_normal_page+0x10/0x10 [ 97.854259][ T7844] shmem_write_begin+0x1a4/0x420 [ 97.854277][ T7844] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.854294][ T7844] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 97.854315][ T7844] generic_perform_write+0x292/0xa40 [ 97.854328][ T7844] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.854343][ T7844] ? __pfx_generic_perform_write+0x10/0x10 [ 97.854358][ T7844] ? file_update_time_flags+0x38c/0x520 [ 97.854376][ T7844] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.854386][ T7844] shmem_file_write_iter+0x10e/0x140 [ 97.854398][ T7844] __kernel_write_iter+0x2ac/0x930 [ 97.854410][ T7844] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.854421][ T7844] ? __up_read+0x333/0x980 [ 97.854436][ T7844] ? dump_user_range+0x65e/0xad0 [ 97.854451][ T7844] dump_user_range+0x3f9/0xad0 [ 97.854465][ T7844] ? __pfx_dump_user_range+0x10/0x10 [ 97.854481][ T7844] ? __pfx_writenote+0x10/0x10 [ 97.854492][ T7844] ? elf_core_dump+0x1f25/0x3d20 [ 97.854506][ T7844] elf_core_dump+0x2d68/0x3d20 [ 97.854526][ T7844] ? __pfx_elf_core_dump+0x10/0x10 [ 97.854537][ T7844] ? kasan_save_stack+0x3f/0x50 [ 97.854552][ T7844] ? kasan_save_stack+0x30/0x50 [ 97.854563][ T7844] ? kasan_save_track+0x14/0x30 [ 97.854574][ T7844] ? __kasan_kmalloc+0xaa/0xb0 [ 97.854585][ T7844] ? vfs_coredump+0x21f6/0x54a0 [ 97.854595][ T7844] ? get_signal+0x1f2a/0x21e0 [ 97.854606][ T7844] ? arch_do_signal_or_restart+0x91/0x7e0 [ 97.854626][ T7844] ? 0xffffffffff600000 [ 97.854653][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.854664][ T7844] ? get_signal+0x1f2a/0x21e0 [ 97.854680][ T7844] ? vfs_coredump+0x281a/0x54a0 [ 97.854690][ T7844] vfs_coredump+0x281a/0x54a0 [ 97.854706][ T7844] ? __pfx_vfs_coredump+0x10/0x10 [ 97.854717][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.854731][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.854744][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.854755][ T7844] ? unwind_next_frame+0xbd/0x2090 [ 97.854773][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.854788][ T7844] ? bpf_ksym_find+0x128/0x1c0 [ 97.854805][ T7844] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.854827][ T7844] ? arch_stack_walk+0xa6/0xf0 [ 97.854846][ T7844] ? __sigqueue_free+0xbe/0x2a0 [ 97.854861][ T7844] ? stack_trace_save+0x8e/0xc0 [ 97.854877][ T7844] ? __pfx_stack_trace_save+0x10/0x10 [ 97.854895][ T7844] ? stack_depot_save_flags+0x27/0x9f0 [ 97.854909][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.854945][ T7844] ? proc_coredump_connector+0x2d3/0x4f0 [ 97.854962][ T7844] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.854981][ T7844] ? rcu_is_watching+0x13/0xc0 [ 97.854998][ T7844] get_signal+0x1f2a/0x21e0 [ 97.855017][ T7844] ? __pfx_get_signal+0x10/0x10 [ 97.855029][ T7844] ? __pfx_force_sig_fault+0x10/0x10 [ 97.855044][ T7844] arch_do_signal_or_restart+0x91/0x7e0 [ 97.855061][ T7844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.855086][ T7844] irqentry_exit+0x402/0xa10 [ 97.855101][ T7844] asm_exc_page_fault+0x26/0x30 [ 97.855112][ T7844] RIP: 0033:0x0 [ 97.855120][ T7844] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 97.855125][ T7844] RSP: 002b:0000200000000208 EFLAGS: 00010217 [ 97.855134][ T7844] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 97.855141][ T7844] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 97.855148][ T7844] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 97.855155][ T7844] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 97.855161][ T7844] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 97.855176][ T7844] [ 97.855208][ T7844] memory: usage 307200kB, limit 307200kB, failcnt 41693 [ 97.855217][ T7844] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 97.855224][ T7844] kmem: usage 8268kB, limit 9007199254740988kB, failcnt 0 [ 97.855230][ T7844] Memory cgroup stats for /syz2: [ 97.855308][ T7844] cache 305885184 [ 97.855313][ T7844] rss 192512 [ 97.855317][ T7844] rss_huge 0 [ 97.855320][ T7844] shmem 305848320 [ 97.855324][ T7844] mapped_file 14999552 [ 97.855327][ T7844] dirty 0 [ 97.855331][ T7844] writeback 0 [ 97.855335][ T7844] workingset_refault_anon 88 [ 97.855339][ T7844] workingset_refault_file 4663 [ 97.855343][ T7844] swap 127778816 [ 97.855346][ T7844] swapcached 230244352 [ 97.855350][ T7844] pgpgin 245270 [ 97.855354][ T7844] pgpgout 170614 [ 97.855357][ T7844] pgfault 59190 [ 97.855361][ T7844] pgmajfault 149 [ 97.855365][ T7844] inactive_anon 114622464 [ 97.855368][ T7844] active_anon 190398464 [ 97.855372][ T7844] inactive_file 0 [ 97.855376][ T7844] active_file 0 [ 97.855379][ T7844] unevictable 1048576 [ 97.855383][ T7844] hierarchical_memory_limit 314572800 [ 97.855388][ T7844] hierarchical_memsw_limit 9223372036854771712 [ 97.855392][ T7844] total_cache 305885184 [ 97.855396][ T7844] total_rss 192512 [ 97.855400][ T7844] total_rss_huge 0 [ 97.855403][ T7844] total_shmem 305848320 [ 97.855407][ T7844] total_mapped_file 14999552 [ 97.855411][ T7844] total_dirty 0 [ 97.855414][ T7844] total_writeback 0 [ 97.855418][ T7844] total_workingset_refault_anon 88 [ 97.855422][ T7844] total_workingset_refault_file 4663 [ 97.855427][ T7844] total_swap 127778816 [ 97.855430][ T7844] total_swapcached 230244352 [ 97.855434][ T7844] total_pgpgin 245270 [ 97.855438][ T7844] total_pgpgout 170614 [ 97.855442][ T7844] total_pgfault 59190 [ 97.855446][ T7844] total_pgmajfault 149 [ 97.855450][ T7844] total_inactive_anon 114622464 [ 97.855454][ T7844] total_active_anon 190398464 [ 97.855458][ T7844] total_inactive_file 0 [ 97.855462][ T7844] total_active_file 0 [ 97.855465][ T7844] total_unevictable 1048576 [ 97.855469][ T7844] anon_cost 0 [ 97.855473][ T7844] file_cost 0 [ 97.855477][ T7844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7851,uid=0 [ 97.855528][ T7844] Memory cgroup out of memory: Killed process 7851 (syz.2.516) total-vm:99072kB, anon-rss:1276kB, file-rss:57412kB, shmem-rss:11448kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 97.927651][ T7844] syz.2.516 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.927675][ T7844] CPU: 3 UID: 0 PID: 7844 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.927690][ T7844] Tainted: [L]=SOFTLOCKUP [ 97.927694][ T7844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.927700][ T7844] Call Trace: [ 97.927704][ T7844] [ 97.927708][ T7844] dump_stack_lvl+0x100/0x190 [ 97.927728][ T7844] dump_header+0xfb/0x606 [ 97.927742][ T7844] oom_kill_process.cold+0xd/0x380 [ 97.927756][ T7844] out_of_memory+0x340/0x14f0 [ 97.927773][ T7844] ? __pfx_out_of_memory+0x10/0x10 [ 97.927791][ T7844] mem_cgroup_out_of_memory+0xc6/0x130 [ 97.927804][ T7844] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.927816][ T7844] ? find_held_lock+0x2b/0x80 [ 97.927834][ T7844] ? do_raw_spin_unlock+0x145/0x1e0 [ 97.927848][ T7844] ? _raw_spin_unlock+0x28/0x50 [ 97.927862][ T7844] try_charge_memcg+0x783/0xf60 [ 97.927881][ T7844] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.927895][ T7844] ? find_held_lock+0x2b/0x80 [ 97.927910][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.927950][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.927966][ T7844] ? find_held_lock+0x2b/0x80 [ 97.927982][ T7844] ? rcu_read_unlock+0x17/0x60 [ 97.928001][ T7844] charge_memcg+0x1ae/0x210 [ 97.928017][ T7844] __mem_cgroup_charge+0x2b/0x1c0 [ 97.928036][ T7844] shmem_alloc_and_add_folio+0x451/0xd40 [ 97.928059][ T7844] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.928077][ T7844] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 97.928094][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.928107][ T7844] shmem_get_folio_gfp+0x75b/0x1980 [ 97.928126][ T7844] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.928141][ T7844] ? inode_set_ctime_current+0x9c/0x850 [ 97.928157][ T7844] ? find_held_lock+0x2b/0x80 [ 97.928173][ T7844] ? timestamp_truncate+0x22e/0x2f0 [ 97.928190][ T7844] shmem_write_begin+0x1a4/0x420 [ 97.928207][ T7844] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.928223][ T7844] ? inode_set_ctime_current+0x283/0x850 [ 97.928238][ T7844] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 97.928255][ T7844] ? inode_maybe_inc_iversion+0x169/0x220 [ 97.928270][ T7844] generic_perform_write+0x292/0xa40 [ 97.928283][ T7844] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.928309][ T7844] ? __pfx_generic_perform_write+0x10/0x10 [ 97.928325][ T7844] ? mnt_put_write_access_file+0x4e/0x100 [ 97.928339][ T7844] ? file_update_time_flags+0x38c/0x520 [ 97.928357][ T7844] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.928368][ T7844] shmem_file_write_iter+0x10e/0x140 [ 97.928380][ T7844] __kernel_write_iter+0x2ac/0x930 [ 97.928392][ T7844] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.928403][ T7844] ? __up_read+0x333/0x980 [ 97.928418][ T7844] ? dump_user_range+0x65e/0xad0 [ 97.928432][ T7844] dump_user_range+0x3f9/0xad0 [ 97.928457][ T7844] ? __pfx_dump_user_range+0x10/0x10 [ 97.928474][ T7844] ? __pfx_writenote+0x10/0x10 [ 97.928485][ T7844] ? elf_core_dump+0x1f25/0x3d20 [ 97.928499][ T7844] elf_core_dump+0x2d68/0x3d20 [ 97.928519][ T7844] ? __pfx_elf_core_dump+0x10/0x10 [ 97.928530][ T7844] ? kasan_save_stack+0x3f/0x50 [ 97.928542][ T7844] ? kasan_save_stack+0x30/0x50 [ 97.928553][ T7844] ? kasan_save_track+0x14/0x30 [ 97.928564][ T7844] ? __kasan_kmalloc+0xaa/0xb0 [ 97.928575][ T7844] ? vfs_coredump+0x21f6/0x54a0 [ 97.928584][ T7844] ? get_signal+0x1f2a/0x21e0 [ 97.928596][ T7844] ? arch_do_signal_or_restart+0x91/0x7e0 [ 97.928615][ T7844] ? 0xffffffffff600000 [ 97.928642][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.928653][ T7844] ? get_signal+0x1f2a/0x21e0 [ 97.928669][ T7844] ? vfs_coredump+0x281a/0x54a0 [ 97.928678][ T7844] vfs_coredump+0x281a/0x54a0 [ 97.928694][ T7844] ? __pfx_vfs_coredump+0x10/0x10 [ 97.928705][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.928720][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.928733][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.928743][ T7844] ? unwind_next_frame+0xbd/0x2090 [ 97.928761][ T7844] ? lock_acquire+0x1d1/0x380 [ 97.928776][ T7844] ? bpf_ksym_find+0x128/0x1c0 [ 97.928792][ T7844] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.928814][ T7844] ? arch_stack_walk+0xa6/0xf0 [ 97.928834][ T7844] ? __sigqueue_free+0xbe/0x2a0 [ 97.928848][ T7844] ? stack_trace_save+0x8e/0xc0 [ 97.928864][ T7844] ? __pfx_stack_trace_save+0x10/0x10 [ 97.928882][ T7844] ? stack_depot_save_flags+0x27/0x9f0 [ 97.928895][ T7844] ? __lock_acquire+0x5c0/0x1f40 [ 97.928931][ T7844] ? proc_coredump_connector+0x2d3/0x4f0 [ 97.928949][ T7844] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.928968][ T7844] ? rcu_is_watching+0x13/0xc0 [ 97.928985][ T7844] get_signal+0x1f2a/0x21e0 [ 97.929002][ T7844] ? __pfx_get_signal+0x10/0x10 [ 97.929014][ T7844] ? __pfx_force_sig_fault+0x10/0x10 [ 97.929029][ T7844] arch_do_signal_or_restart+0x91/0x7e0 [ 97.929046][ T7844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.929070][ T7844] irqentry_exit+0x402/0xa10 [ 97.929086][ T7844] asm_exc_page_fault+0x26/0x30 [ 97.929097][ T7844] RIP: 0033:0x0 [ 97.929104][ T7844] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 97.929109][ T7844] RSP: 002b:0000200000000208 EFLAGS: 00010217 [ 97.929119][ T7844] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 97.929126][ T7844] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 97.929132][ T7844] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 97.929139][ T7844] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 97.929146][ T7844] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 97.929160][ T7844] [ 97.930018][ T7844] memory: usage 307200kB, limit 307200kB, failcnt 42080 [ 97.930027][ T7844] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 97.930033][ T7844] kmem: usage 8268kB, limit 9007199254740988kB, failcnt 0 [ 97.930040][ T7844] Memory cgroup stats for /syz2: [ 97.930113][ T7844] cache 305885184 [ 97.930118][ T7844] rss 192512 [ 97.930122][ T7844] rss_huge 0 [ 97.930125][ T7844] shmem 305852416 [ 97.930129][ T7844] mapped_file 14999552 [ 97.930133][ T7844] dirty 0 [ 97.930136][ T7844] writeback 0 [ 97.930140][ T7844] workingset_refault_anon 88 [ 97.930144][ T7844] workingset_refault_file 4664 [ 97.930148][ T7844] swap 127778816 [ 97.930151][ T7844] swapcached 230244352 [ 97.930155][ T7844] pgpgin 245272 [ 97.930159][ T7844] pgpgout 170616 [ 97.930162][ T7844] pgfault 59191 [ 97.930166][ T7844] pgmajfault 150 [ 97.930170][ T7844] inactive_anon 70447104 [ 97.930174][ T7844] active_anon 234577920 [ 97.930177][ T7844] inactive_file 0 [ 97.930181][ T7844] active_file 0 [ 97.930185][ T7844] unevictable 1048576 [ 97.930189][ T7844] hierarchical_memory_limit 314572800 [ 97.930193][ T7844] hierarchical_memsw_limit 9223372036854771712 [ 97.930198][ T7844] total_cache 305885184 [ 97.930201][ T7844] total_rss 192512 [ 97.930205][ T7844] total_rss_huge 0 [ 97.930209][ T7844] total_shmem 305852416 [ 97.930212][ T7844] total_mapped_file 14999552 [ 97.930216][ T7844] total_dirty 0 [ 97.930220][ T7844] total_writeback 0 [ 97.930224][ T7844] total_workingset_refault_anon 88 [ 97.930228][ T7844] total_workingset_refault_file 4664 [ 97.930232][ T7844] total_swap 127778816 [ 97.930236][ T7844] total_swapcached 230244352 [ 97.930240][ T7844] total_pgpgin 245272 [ 97.930243][ T7844] total_pgpgout 170616 [ 97.930252][ T7844] total_pgfault 59191 [ 97.930256][ T7844] total_pgmajfault 150 [ 97.930260][ T7844] total_inactive_anon 70447104 [ 97.930264][ T7844] total_active_anon 234577920 [ 97.930268][ T7844] total_inactive_file 0 [ 97.930272][ T7844] total_active_file 0 [ 97.930276][ T7844] total_unevictable 1048576 [ 97.930280][ T7844] anon_cost 0 [ 97.930283][ T7844] file_cost 0 [ 97.930287][ T7844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7844,uid=0 [ 97.930477][ T7844] Memory cgroup out of memory: Killed process 7844 (syz.2.516) total-vm:99072kB, anon-rss:1276kB, file-rss:57412kB, shmem-rss:11448kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 97.932569][ T7826] syz.2.516 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.932593][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.932607][ T7826] Tainted: [L]=SOFTLOCKUP [ 97.932611][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.932617][ T7826] Call Trace: [ 97.932621][ T7826] [ 97.932626][ T7826] dump_stack_lvl+0x100/0x190 [ 97.932645][ T7826] dump_header+0xfb/0x606 [ 97.932658][ T7826] oom_kill_process.cold+0xd/0x380 [ 97.932672][ T7826] out_of_memory+0x340/0x14f0 [ 97.932689][ T7826] ? __pfx_out_of_memory+0x10/0x10 [ 97.932707][ T7826] mem_cgroup_out_of_memory+0xc6/0x130 [ 97.932719][ T7826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.932731][ T7826] ? find_held_lock+0x2b/0x80 [ 97.932749][ T7826] ? do_raw_spin_unlock+0x145/0x1e0 [ 97.932763][ T7826] ? _raw_spin_unlock+0x28/0x50 [ 97.932776][ T7826] try_charge_memcg+0x783/0xf60 [ 97.932795][ T7826] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.932810][ T7826] ? find_held_lock+0x2b/0x80 [ 97.932824][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.932840][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.932856][ T7826] ? find_held_lock+0x2b/0x80 [ 97.932871][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.932890][ T7826] charge_memcg+0x1ae/0x210 [ 97.932906][ T7826] __mem_cgroup_charge+0x2b/0x1c0 [ 97.932924][ T7826] shmem_alloc_and_add_folio+0x451/0xd40 [ 97.932944][ T7826] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.932962][ T7826] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 97.932979][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.932992][ T7826] shmem_get_folio_gfp+0x75b/0x1980 [ 97.933011][ T7826] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.933026][ T7826] ? inode_set_ctime_current+0x9c/0x850 [ 97.933041][ T7826] ? find_held_lock+0x2b/0x80 [ 97.933058][ T7826] ? timestamp_truncate+0x22e/0x2f0 [ 97.933074][ T7826] shmem_write_begin+0x1a4/0x420 [ 97.933092][ T7826] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.933108][ T7826] ? inode_set_ctime_current+0x283/0x850 [ 97.933123][ T7826] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 97.933140][ T7826] ? inode_maybe_inc_iversion+0x169/0x220 [ 97.933156][ T7826] generic_perform_write+0x292/0xa40 [ 97.933169][ T7826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.933184][ T7826] ? __pfx_generic_perform_write+0x10/0x10 [ 97.933197][ T7826] ? mnt_put_write_access_file+0x4e/0x100 [ 97.933212][ T7826] ? file_update_time_flags+0x38c/0x520 [ 97.933230][ T7826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.933241][ T7826] shmem_file_write_iter+0x10e/0x140 [ 97.933252][ T7826] __kernel_write_iter+0x2ac/0x930 [ 97.933265][ T7826] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.933276][ T7826] ? __up_read+0x333/0x980 [ 97.933291][ T7826] ? dump_user_range+0x65e/0xad0 [ 97.933304][ T7826] dump_user_range+0x3f9/0xad0 [ 97.933318][ T7826] ? __pfx_dump_user_range+0x10/0x10 [ 97.933334][ T7826] ? __pfx_writenote+0x10/0x10 [ 97.933345][ T7826] ? elf_core_dump+0x1f25/0x3d20 [ 97.933360][ T7826] elf_core_dump+0x2d68/0x3d20 [ 97.933379][ T7826] ? __pfx_elf_core_dump+0x10/0x10 [ 97.933390][ T7826] ? kasan_save_stack+0x3f/0x50 [ 97.933402][ T7826] ? kasan_save_stack+0x30/0x50 [ 97.933413][ T7826] ? kasan_save_track+0x14/0x30 [ 97.933424][ T7826] ? __kasan_kmalloc+0xaa/0xb0 [ 97.933435][ T7826] ? vfs_coredump+0x21f6/0x54a0 [ 97.933444][ T7826] ? get_signal+0x1f2a/0x21e0 [ 97.933455][ T7826] ? arch_do_signal_or_restart+0x91/0x7e0 [ 97.933474][ T7826] ? 0xffffffffff600000 [ 97.933500][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.933511][ T7826] ? get_signal+0x1f2a/0x21e0 [ 97.933527][ T7826] ? vfs_coredump+0x281a/0x54a0 [ 97.933536][ T7826] vfs_coredump+0x281a/0x54a0 [ 97.933565][ T7826] ? __pfx_vfs_coredump+0x10/0x10 [ 97.933580][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.933594][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.933607][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.933618][ T7826] ? unwind_next_frame+0xbd/0x2090 [ 97.933636][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.933651][ T7826] ? bpf_ksym_find+0x128/0x1c0 [ 97.933667][ T7826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.933689][ T7826] ? arch_stack_walk+0xa6/0xf0 [ 97.933707][ T7826] ? __sigqueue_free+0xbe/0x2a0 [ 97.933721][ T7826] ? stack_trace_save+0x8e/0xc0 [ 97.933738][ T7826] ? __pfx_stack_trace_save+0x10/0x10 [ 97.933755][ T7826] ? stack_depot_save_flags+0x27/0x9f0 [ 97.933768][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.933804][ T7826] ? proc_coredump_connector+0x2d3/0x4f0 [ 97.933820][ T7826] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.933839][ T7826] ? rcu_is_watching+0x13/0xc0 [ 97.933857][ T7826] get_signal+0x1f2a/0x21e0 [ 97.933874][ T7826] ? __pfx_get_signal+0x10/0x10 [ 97.933886][ T7826] ? __pfx_force_sig_fault+0x10/0x10 [ 97.933901][ T7826] arch_do_signal_or_restart+0x91/0x7e0 [ 97.933917][ T7826] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.933942][ T7826] irqentry_exit+0x402/0xa10 [ 97.933958][ T7826] asm_exc_page_fault+0x26/0x30 [ 97.933969][ T7826] RIP: 0033:0x0 [ 97.933977][ T7826] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 97.933982][ T7826] RSP: 002b:0000200000000208 EFLAGS: 00010217 [ 97.933991][ T7826] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 97.933998][ T7826] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 97.934004][ T7826] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 97.934011][ T7826] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 97.934017][ T7826] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 97.934032][ T7826] [ 97.939131][ T7826] memory: usage 307200kB, limit 307200kB, failcnt 42103 [ 97.939142][ T7826] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 97.939148][ T7826] kmem: usage 8268kB, limit 9007199254740988kB, failcnt 0 [ 97.939155][ T7826] Memory cgroup stats for /syz2: [ 97.939249][ T7826] cache 305885184 [ 97.939254][ T7826] rss 192512 [ 97.939258][ T7826] rss_huge 0 [ 97.939261][ T7826] shmem 305876992 [ 97.939265][ T7826] mapped_file 14999552 [ 97.939269][ T7826] dirty 0 [ 97.939272][ T7826] writeback 0 [ 97.939276][ T7826] workingset_refault_anon 88 [ 97.939280][ T7826] workingset_refault_file 4664 [ 97.939284][ T7826] swap 127778816 [ 97.939287][ T7826] swapcached 230244352 [ 97.939291][ T7826] pgpgin 245278 [ 97.939295][ T7826] pgpgout 170622 [ 97.939298][ T7826] pgfault 59191 [ 97.939302][ T7826] pgmajfault 150 [ 97.939305][ T7826] inactive_anon 248639488 [ 97.939309][ T7826] active_anon 56406016 [ 97.939313][ T7826] inactive_file 0 [ 97.939317][ T7826] active_file 0 [ 97.939320][ T7826] unevictable 1048576 [ 97.939324][ T7826] hierarchical_memory_limit 314572800 [ 97.939328][ T7826] hierarchical_memsw_limit 9223372036854771712 [ 97.939333][ T7826] total_cache 305885184 [ 97.939337][ T7826] total_rss 192512 [ 97.939340][ T7826] total_rss_huge 0 [ 97.939344][ T7826] total_shmem 305876992 [ 97.939348][ T7826] total_mapped_file 14999552 [ 97.939352][ T7826] total_dirty 0 [ 97.939355][ T7826] total_writeback 0 [ 97.939359][ T7826] total_workingset_refault_anon 88 [ 97.939363][ T7826] total_workingset_refault_file 4664 [ 97.939367][ T7826] total_swap 127778816 [ 97.939371][ T7826] total_swapcached 230244352 [ 97.939375][ T7826] total_pgpgin 245278 [ 97.939379][ T7826] total_pgpgout 170622 [ 97.939383][ T7826] total_pgfault 59191 [ 97.939386][ T7826] total_pgmajfault 150 [ 97.939390][ T7826] total_inactive_anon 248639488 [ 97.939394][ T7826] total_active_anon 56406016 [ 97.939398][ T7826] total_inactive_file 0 [ 97.939402][ T7826] total_active_file 0 [ 97.939406][ T7826] total_unevictable 1048576 [ 97.939410][ T7826] anon_cost 0 [ 97.939413][ T7826] file_cost 0 [ 97.939417][ T7826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7833,uid=0 [ 97.939558][ T7826] Memory cgroup out of memory: Killed process 7833 (syz.2.516) total-vm:99072kB, anon-rss:1276kB, file-rss:57412kB, shmem-rss:11448kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 97.957456][ T7826] syz.2.516 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.957477][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.2.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.957492][ T7826] Tainted: [L]=SOFTLOCKUP [ 97.957497][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.957503][ T7826] Call Trace: [ 97.957507][ T7826] [ 97.957512][ T7826] dump_stack_lvl+0x100/0x190 [ 97.957531][ T7826] dump_header+0xfb/0x606 [ 97.957556][ T7826] oom_kill_process.cold+0xd/0x380 [ 97.957571][ T7826] out_of_memory+0x340/0x14f0 [ 97.957592][ T7826] ? __pfx_out_of_memory+0x10/0x10 [ 97.957610][ T7826] mem_cgroup_out_of_memory+0xc6/0x130 [ 97.957623][ T7826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.957634][ T7826] ? find_held_lock+0x2b/0x80 [ 97.957652][ T7826] ? do_raw_spin_unlock+0x145/0x1e0 [ 97.957667][ T7826] ? _raw_spin_unlock+0x28/0x50 [ 97.957680][ T7826] try_charge_memcg+0x783/0xf60 [ 97.957699][ T7826] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.957714][ T7826] ? find_held_lock+0x2b/0x80 [ 97.957728][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.957744][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.957759][ T7826] ? find_held_lock+0x2b/0x80 [ 97.957774][ T7826] ? rcu_read_unlock+0x17/0x60 [ 97.957794][ T7826] charge_memcg+0x1ae/0x210 [ 97.957810][ T7826] __mem_cgroup_charge+0x2b/0x1c0 [ 97.957828][ T7826] shmem_alloc_and_add_folio+0x451/0xd40 [ 97.957848][ T7826] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.957865][ T7826] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 97.957882][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.957895][ T7826] shmem_get_folio_gfp+0x75b/0x1980 [ 97.957914][ T7826] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.957929][ T7826] ? inode_set_ctime_current+0x9c/0x850 [ 97.957945][ T7826] ? find_held_lock+0x2b/0x80 [ 97.957961][ T7826] ? timestamp_truncate+0x22e/0x2f0 [ 97.957978][ T7826] shmem_write_begin+0x1a4/0x420 [ 97.957995][ T7826] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.958011][ T7826] ? inode_set_ctime_current+0x283/0x850 [ 97.958026][ T7826] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 97.958044][ T7826] ? inode_maybe_inc_iversion+0x169/0x220 [ 97.958059][ T7826] generic_perform_write+0x292/0xa40 [ 97.958072][ T7826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.958087][ T7826] ? __pfx_generic_perform_write+0x10/0x10 [ 97.958101][ T7826] ? mnt_put_write_access_file+0x4e/0x100 [ 97.958115][ T7826] ? file_update_time_flags+0x38c/0x520 [ 97.958133][ T7826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.958144][ T7826] shmem_file_write_iter+0x10e/0x140 [ 97.958155][ T7826] __kernel_write_iter+0x2ac/0x930 [ 97.958168][ T7826] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.958179][ T7826] ? __up_read+0x333/0x980 [ 97.958193][ T7826] ? dump_user_range+0x65e/0xad0 [ 97.958207][ T7826] dump_user_range+0x3f9/0xad0 [ 97.958221][ T7826] ? __pfx_dump_user_range+0x10/0x10 [ 97.958237][ T7826] ? __pfx_writenote+0x10/0x10 [ 97.958248][ T7826] ? elf_core_dump+0x1f25/0x3d20 [ 97.958262][ T7826] elf_core_dump+0x2d68/0x3d20 [ 97.958282][ T7826] ? __pfx_elf_core_dump+0x10/0x10 [ 97.958293][ T7826] ? kasan_save_stack+0x3f/0x50 [ 97.958305][ T7826] ? kasan_save_stack+0x30/0x50 [ 97.958316][ T7826] ? kasan_save_track+0x14/0x30 [ 97.958340][ T7826] ? __kasan_kmalloc+0xaa/0xb0 [ 97.958352][ T7826] ? vfs_coredump+0x21f6/0x54a0 [ 97.958361][ T7826] ? get_signal+0x1f2a/0x21e0 [ 97.958372][ T7826] ? arch_do_signal_or_restart+0x91/0x7e0 [ 97.958391][ T7826] ? 0xffffffffff600000 [ 97.958417][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.958428][ T7826] ? get_signal+0x1f2a/0x21e0 [ 97.958444][ T7826] ? vfs_coredump+0x281a/0x54a0 [ 97.958454][ T7826] vfs_coredump+0x281a/0x54a0 [ 97.958470][ T7826] ? __pfx_vfs_coredump+0x10/0x10 [ 97.958480][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.958495][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.958508][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.958518][ T7826] ? unwind_next_frame+0xbd/0x2090 [ 97.958536][ T7826] ? lock_acquire+0x1d1/0x380 [ 97.958551][ T7826] ? bpf_ksym_find+0x128/0x1c0 [ 97.958567][ T7826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.958593][ T7826] ? arch_stack_walk+0xa6/0xf0 [ 97.958611][ T7826] ? __sigqueue_free+0xbe/0x2a0 [ 97.958626][ T7826] ? stack_trace_save+0x8e/0xc0 [ 97.958642][ T7826] ? __pfx_stack_trace_save+0x10/0x10 [ 97.958660][ T7826] ? stack_depot_save_flags+0x27/0x9f0 [ 97.958673][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 97.958709][ T7826] ? proc_coredump_connector+0x2d3/0x4f0 [ 97.958726][ T7826] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.958745][ T7826] ? rcu_is_watching+0x13/0xc0 [ 97.958762][ T7826] get_signal+0x1f2a/0x21e0 [ 97.958779][ T7826] ? __pfx_get_signal+0x10/0x10 [ 97.958791][ T7826] ? __pfx_force_sig_fault+0x10/0x10 [ 97.958806][ T7826] arch_do_signal_or_restart+0x91/0x7e0 [ 97.958823][ T7826] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.958848][ T7826] irqentry_exit+0x402/0xa10 [ 97.958864][ T7826] asm_exc_page_fault+0x26/0x30 [ 97.958874][ T7826] RIP: 0033:0x0 [ 97.958883][ T7826] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 97.958887][ T7826] RSP: 002b:0000200000000208 EFLAGS: 00010217 [ 97.958897][ T7826] RAX: 0000000000000000 RBX: 00007ffa79026090 RCX: 00007ffa78d9e159 [ 97.958904][ T7826] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000080000 [ 97.958910][ T7826] RBP: 00007ffa78e35024 R08: 0000200000000480 R09: 0000200000000480 [ 97.958917][ T7826] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 97.958923][ T7826] R13: 00007ffa79026128 R14: 00007ffa79026090 R15: 00007ffd6b0adcb8 [ 97.958938][ T7826] [ 97.968407][ T7826] memory: usage 307200kB, limit 307200kB, failcnt 42210 [ 97.968417][ T7826] memory+swap: usage 431960kB, limit 9007199254740988kB, failcnt 0 [ 97.968424][ T7826] kmem: usage 8268kB, limit 9007199254740988kB, failcnt 0 [ 97.968430][ T7826] Memory cgroup stats for /syz2: [ 97.968506][ T7826] cache 305885184 [ 97.968511][ T7826] rss 192512 [ 97.968515][ T7826] rss_huge 0 [ 97.968518][ T7826] shmem 305885184 [ 97.968522][ T7826] mapped_file 14991360 [ 97.968526][ T7826] dirty 0 [ 97.968530][ T7826] writeback 0 [ 97.968533][ T7826] workingset_refault_anon 88 [ 97.968537][ T7826] workingset_refault_file 4664 [ 97.968541][ T7826] swap 127754240 [ 97.968545][ T7826] swapcached 230244352 [ 97.968549][ T7826] pgpgin 245280 [ 97.968552][ T7826] pgpgout 170624 [ 97.968556][ T7826] pgfault 59191 [ 97.968560][ T7826] pgmajfault 151 [ 97.968563][ T7826] inactive_anon 125997056 [ 97.968567][ T7826] active_anon 179060736 [ 97.968571][ T7826] inactive_file 0 [ 97.968574][ T7826] active_file 0 [ 97.968582][ T7826] unevictable 1048576 [ 97.968586][ T7826] hierarchical_memory_limit 314572800 [ 97.968590][ T7826] hierarchical_memsw_limit 9223372036854771712 [ 97.968594][ T7826] total_cache 305885184 [ 97.968598][ T7826] total_rss 192512 [ 97.968602][ T7826] total_rss_huge 0 [ 97.968606][ T7826] total_shmem 305885184 [ 97.968609][ T7826] total_mapped_file 14991360 [ 97.968613][ T7826] total_dirty 0 [ 97.968617][ T7826] total_writeback 0 [ 97.968621][ T7826] total_workingset_refault_anon 88 [ 97.968625][ T7826] total_workingset_refault_file 4664 [ 97.968629][ T7826] total_swap 127754240 [ 97.968633][ T7826] total_swapcached 230244352 [ 97.968637][ T7826] total_pgpgin 245280 [ 97.968640][ T7826] total_pgpgout 170624 [ 97.968644][ T7826] total_pgfault 59191 [ 97.968648][ T7826] total_pgmajfault 151 [ 97.968651][ T7826] total_inactive_anon 125997056 [ 97.968656][ T7826] total_active_anon 179060736 [ 97.968659][ T7826] total_inactive_file 0 [ 97.968663][ T7826] total_active_file 0 [ 97.968667][ T7826] total_unevictable 1048576 [ 97.968671][ T7826] anon_cost 0 [ 97.968674][ T7826] file_cost 0 [ 97.968678][ T7826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=7826,uid=0 [ 97.968729][ T7826] Memory cgroup out of memory: Killed process 7826 (syz.2.516) total-vm:99072kB, anon-rss:1276kB, file-rss:57412kB, shmem-rss:11448kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 98.991051][ T7823] syz.2.516 (7823) used greatest stack depth: 17064 bytes left [ 99.091534][ T8017] overlayfs: failed to resolve './file0:redirect_dir=follow': -2 [ 99.138267][ T8023] loop6: detected capacity change from 0 to 524288000 [ 99.151613][ T8020] 9p: Could not find request transport: virt$o [ 99.210913][ T8023] Invalid logical block size (255) [ 99.327772][ T8030] nvme_fabrics: no handler found for transport hoop. [ 99.349708][ T8030] bridge0: entered promiscuous mode [ 99.349776][ T8030] bridge0: entered allmulticast mode [ 99.439966][ T8043] vlan2: entered promiscuous mode [ 99.440013][ T8043] bridge0: entered promiscuous mode [ 99.469340][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 99.469428][ T43] audit: type=1400 audit(1788815042.982:700): avc: denied { write } for pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.524615][ T43] audit: type=1400 audit(1788815043.032:701): avc: denied { write } for pid=8048 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.610716][ T8051] overlayfs: conflicting options: userxattr,redirect_dir=on [ 100.182072][ T43] audit: type=1400 audit(1788815043.692:702): avc: denied { bind } for pid=8060 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.254721][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 100.254962][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 100.439661][ T8073] jffs2: notice: (8073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 100.443370][ T43] audit: type=1400 audit(1788815043.952:703): avc: denied { write } for pid=8072 comm="syz.3.562" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.450801][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 100.542910][ T8078] netlink: 'syz.3.564': attribute type 9 has an invalid length. [ 100.582727][ T43] audit: type=1400 audit(1788815044.092:704): avc: denied { write } for pid=8079 comm="syz.3.565" name="usb_gadget" dev="configfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.583309][ T43] audit: type=1400 audit(1788815044.092:705): avc: denied { append } for pid=8079 comm="syz.3.565" name="idVendor" dev="configfs" ino=23194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 100.583667][ T43] audit: type=1400 audit(1788815044.092:706): avc: denied { write } for pid=8079 comm="syz.3.565" name="functions" dev="configfs" ino=23189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.585184][ T43] audit: type=1400 audit(1788815044.092:707): avc: denied { write } for pid=8079 comm="syz.3.565" name="configs" dev="configfs" ino=23190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.585573][ T43] audit: type=1400 audit(1788815044.092:708): avc: denied { write } for pid=8079 comm="syz.3.565" name="c.1" dev="configfs" ino=23198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.585780][ T43] audit: type=1400 audit(1788815044.092:709): avc: denied { write } for pid=8079 comm="syz.3.565" name="c.1" dev="configfs" ino=23198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.109219][ T8107] input: syz1 as /devices/virtual/input/input12 [ 101.152884][ T8109] input: syz0 as /devices/virtual/input/input13 [ 101.163919][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=8109 comm=syz.3.572 [ 101.164819][ T8109] cgroup: Unknown subsys name 'fowner<00000000000000000000' [ 101.332245][ T8120] Invalid/unusable pipe [ 103.175864][ T8061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.234756][ T8133] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 103.240475][ T5734] Bluetooth: latency 65520 > 499 [ 103.241341][ T5734] Bluetooth: latency 65520 > 499 [ 103.241411][ T5734] Bluetooth: latency 65520 > 499 [ 103.241477][ T5734] Bluetooth: latency 65520 > 499 [ 103.241544][ T5734] Bluetooth: latency 65520 > 499 [ 103.241611][ T5734] Bluetooth: latency 65520 > 499 [ 103.242866][ T8133] tipc: Resetting bearer [ 103.256544][ T5734] Bluetooth: latency 65520 > 499 [ 103.257751][ T8133] syz_tun: entered promiscuous mode [ 103.260268][ T8133] tipc: Resetting bearer [ 103.260609][ T5734] Bluetooth: latency 65520 > 499 [ 103.260682][ T5734] Bluetooth: latency 65520 > 499 [ 103.260750][ T5734] Bluetooth: latency 65520 > 499 [ 103.260818][ T5734] Bluetooth: latency 65520 > 499 [ 103.260881][ T5734] Bluetooth: latency 65520 > 499 [ 103.260939][ T5734] Bluetooth: latency 65520 > 499 [ 103.261006][ T5734] Bluetooth: latency 65520 > 499 [ 103.261083][ T5734] Bluetooth: latency 65520 > 499 [ 103.261152][ T5734] Bluetooth: latency 65520 > 499 [ 103.261220][ T5734] Bluetooth: latency 65520 > 499 [ 103.261287][ T5734] Bluetooth: latency 65520 > 499 [ 103.261351][ T5734] Bluetooth: latency 65520 > 499 [ 103.261418][ T5734] Bluetooth: latency 65520 > 499 [ 103.261466][ T8133] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.261486][ T5734] Bluetooth: latency 65520 > 499 [ 103.261589][ T5734] Bluetooth: latency 65520 > 499 [ 103.261658][ T5734] Bluetooth: latency 65520 > 499 [ 103.261725][ T5734] Bluetooth: latency 65520 > 499 [ 103.261798][ T5734] Bluetooth: latency 65520 > 499 [ 103.261862][ T5734] Bluetooth: latency 65520 > 499 [ 103.261926][ T5734] Bluetooth: latency 65520 > 499 [ 103.261989][ T5734] Bluetooth: latency 65520 > 499 [ 103.264288][ T5734] Bluetooth: latency 65520 > 499 [ 103.264363][ T5734] Bluetooth: latency 65520 > 499 [ 103.264448][ T5734] Bluetooth: latency 65520 > 499 [ 103.264520][ T5734] Bluetooth: latency 65520 > 499 [ 103.264596][ T5734] Bluetooth: latency 65520 > 499 [ 103.347863][ T8149] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.568470][ T78] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 104.720249][ T78] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.721191][ T78] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.721210][ T78] usb 7-1: config 0 has no interface number 0 [ 104.721239][ T78] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 104.721259][ T78] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 927, setting to 8 [ 104.721289][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.723549][ T78] usb 7-1: config 0 descriptor?? [ 104.724887][ T8195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.739103][ T78] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 104.928926][ T78] usb 7-1: USB disconnect, device number 7 [ 104.960422][ T8198] libceph: resolve '0' (ret=-3): failed [ 105.278529][ T5734] Bluetooth: hci3: command tx timeout [ 105.696426][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 105.863518][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 105.872219][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 105.872302][ T43] audit: type=1400 audit(1788815049.382:711): avc: denied { create } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.872631][ T43] audit: type=1400 audit(1788815049.382:712): avc: denied { bind } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.872835][ T43] audit: type=1400 audit(1788815049.382:713): avc: denied { setopt } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.873019][ T43] audit: type=1400 audit(1788815049.382:714): avc: denied { accept } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.873315][ T43] audit: type=1400 audit(1788815049.382:715): avc: denied { write } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.873350][ T8212] trusted_key: syz.3.590 sent an empty control message without MSG_MORE. [ 105.873891][ T43] audit: type=1400 audit(1788815049.382:716): avc: denied { read } for pid=8211 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.877633][ T43] audit: type=1400 audit(1788815049.382:717): avc: denied { audit_write } for pid=8211 comm="syz.3.590" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.877787][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.590'. [ 105.885382][ T8215] syzkaller1: entered allmulticast mode [ 105.892614][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.892717][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.892802][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.892888][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.892971][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.893058][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.893145][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.893227][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.893311][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8215 comm=syz.2.591 [ 105.944707][ T8219] xt_REDIRECT: bad MAP_IPS. [ 106.003383][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 106.017479][ T8226] input: syz0 as /devices/virtual/input/input14 [ 106.184081][ T8234] can: request_module (can-proto-0) failed. [ 106.211396][ T8234] can: request_module (can-proto-0) failed. [ 106.213441][ T43] audit: type=1400 audit(1788815049.722:718): avc: denied { write } for pid=8237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.274383][ T43] audit: type=1400 audit(1788815049.782:719): avc: denied { write } for pid=8244 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.311372][ T8248] netlink: 9152 bytes leftover after parsing attributes in process `syz.2.597'. [ 106.358515][ T43] audit: type=1400 audit(1788815049.862:720): avc: denied { getopt } for pid=8255 comm="syz.3.598" lport=56011 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.381073][ T8258] bond1: (slave veth0_to_batadv): Device is not bonding slave [ 106.384343][ T8258] bond1: option active_slave: invalid value (veth0_to_batadv) [ 106.395871][ T8258] bond1 (unregistering): Released all slaves [ 106.433562][ T8263] fuse: Unknown parameter 'rootmoye' [ 106.695294][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.752097][ T8275] veth1_to_bridge: left allmulticast mode [ 106.780957][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.789328][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.798500][ T3382] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 106.928447][ T3382] usb 7-1: device descriptor read/64, error -71 [ 106.930532][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.933450][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.933474][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.933488][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.933505][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.933518][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.933535][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.934176][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.024637][ T8280] netlink: ct family unspecified [ 107.168470][ T3382] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.298505][ T3382] usb 7-1: device descriptor read/64, error -71 [ 107.368502][ T5734] Bluetooth: hci3: command tx timeout [ 107.408930][ T3382] usb usb7-port1: attempt power cycle [ 107.748574][ T3382] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 107.769236][ T3382] usb 7-1: device descriptor read/8, error -71 [ 108.038475][ T3382] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.068925][ T3382] usb 7-1: device descriptor read/8, error -71 [ 108.088443][ T30] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 108.178839][ T3382] usb usb7-port1: unable to enumerate USB device [ 108.249759][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 108.250543][ T30] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.251537][ T30] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.251558][ T30] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.251575][ T30] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.251610][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.251626][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.251645][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.251661][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.251678][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.251707][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.256016][ T30] usb 9-1: config 0 descriptor?? [ 108.336147][ T8295] ip_tables: iptables: counters copy to user failed while replacing table [ 108.459258][ T30] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.511280][ T5734] Bluetooth: Frame is too long (len 18, expected len 4) [ 108.721485][ T78] usb 9-1: USB disconnect, device number 4 [ 108.727739][ T78] usblp1: removed [ 109.438472][ T5734] Bluetooth: hci3: command tx timeout [ 109.511272][ T8322] loop7: detected capacity change from 0 to 7 [ 109.576021][ T8322] Dev loop7: unable to read RDB block 7 [ 109.576083][ T8322] loop7: unable to read partition table [ 109.576188][ T8322] loop7: partition table beyond EOD, truncated [ 109.576211][ T8322] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.643217][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 109.898488][ T30] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 110.052838][ T30] usb 9-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 110.054007][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.054040][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.056746][ T30] usb 9-1: config 0 descriptor?? [ 110.460538][ T30] hid (null): invalid report_size 24935 [ 110.470232][ T30] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5005.0003/input/input15 [ 110.550710][ T30] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5005.0003/input/input16 [ 110.645806][ T30] kye 0003:0458:5005.0003: input,hiddev1,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 110.709353][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.712986][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.715185][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.716095][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.716649][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.820841][ T8371] jffs2: notice: (8371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 110.929709][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 111.020233][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 111.020294][ T43] audit: type=1400 audit(1788815054.532:740): avc: denied { ioctl } for pid=8393 comm="syz.2.629" path="socket:[25929]" dev="sockfs" ino=25929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.090634][ T8398] syzkaller0: entered promiscuous mode [ 111.090690][ T8398] syzkaller0: entered allmulticast mode [ 111.176143][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.176263][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.176322][ T8360] bridge_slave_0: entered allmulticast mode [ 111.177455][ T8360] bridge_slave_0: entered promiscuous mode [ 111.179281][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.179320][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.179468][ T8360] bridge_slave_1: entered allmulticast mode [ 111.180213][ T8360] bridge_slave_1: entered promiscuous mode [ 111.195525][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.197124][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.210263][ T8360] team0: Port device team_slave_0 added [ 111.211461][ T8360] team0: Port device team_slave_1 added [ 111.225267][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.225302][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.225469][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.226429][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.226437][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.226450][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.258647][ T8360] hsr_slave_0: entered promiscuous mode [ 111.259361][ T8360] hsr_slave_1: entered promiscuous mode [ 111.259822][ T8360] debugfs: 'hsr0' already exists in 'hsr' [ 111.259833][ T8360] Cannot create hsr debugfs directory [ 111.407033][ T8360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.415676][ T8360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.416539][ T8360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.426508][ T8360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.427447][ T8360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.431793][ T8360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.432459][ T8360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.437164][ T8360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.510572][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.518512][ T5745] Bluetooth: hci3: command tx timeout [ 111.524860][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.529347][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.529470][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.533843][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.533889][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.815918][ T43] audit: type=1400 audit(1788815055.322:741): avc: denied { shutdown } for pid=8434 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.827660][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.853738][ T8428] kvm [8427]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 111.854371][ T8428] kvm [8427]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 111.886985][ T8433] kvm [8431]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 111.887741][ T8433] kvm [8431]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 111.998319][ T8360] veth0_vlan: entered promiscuous mode [ 112.009832][ T8360] veth1_vlan: entered promiscuous mode [ 112.056741][ T8450] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 112.131502][ T43] audit: type=1326 audit(1788815055.642:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.139547][ T43] audit: type=1326 audit(1788815055.642:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.139575][ T43] audit: type=1326 audit(1788815055.642:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.139595][ T43] audit: type=1326 audit(1788815055.642:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.139657][ T43] audit: type=1326 audit(1788815055.642:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.153693][ T43] audit: type=1326 audit(1788815055.662:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.154889][ T8360] veth0_macvtap: entered promiscuous mode [ 112.156107][ T43] audit: type=1326 audit(1788815055.662:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.156148][ T43] audit: type=1326 audit(1788815055.662:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.3.640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13d99e159 code=0x7ffc0000 [ 112.171634][ T8452] netlink: 8183 bytes leftover after parsing attributes in process `syz.2.639'. [ 112.173788][ T8360] veth1_macvtap: entered promiscuous mode [ 112.190248][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.195465][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.240539][ T5782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.259371][ T5809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.259454][ T5809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.259479][ T5809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.293024][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 112.299764][ T8464] openvswitch: netlink: Missing valid actions attribute. [ 112.299822][ T8464] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.301195][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.301212][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.334264][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.334310][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.407016][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.644'. [ 112.705571][ T8507] syz.2.648 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.808521][ T5745] Bluetooth: hci0: command tx timeout [ 113.306927][ T8484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.308468][ T8484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.315779][ T8484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.323130][ T8484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.323296][ T8484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.326444][ T8484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.337531][ T8484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.339249][ T8484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.350430][ T8484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.362966][ T8484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.363144][ T8484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.369597][ T8484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.529277][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 113.529427][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 113.530223][ T8516] netlink: 112 bytes leftover after parsing attributes in process `syz.4.651'. [ 113.530973][ T8529] netlink: 112 bytes leftover after parsing attributes in process `syz.4.651'. [ 113.700540][ T8556] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 113.784331][ T8519] cgroup: fork rejected by pids controller in /syz3 [ 114.200486][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 114.649022][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.660901][ T8606] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 114.665907][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.914501][ T8628] nbd2: detected capacity change from 0 to 1125899906842625 [ 114.968982][ T8633] block nbd2: shutting down sockets [ 114.977750][ C0] blk_print_req_error: 5 callbacks suppressed [ 114.977861][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.977944][ C0] buffer_io_error: 5 callbacks suppressed [ 114.977955][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.979356][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.979373][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.980873][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.980890][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.980968][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.980981][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981032][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981045][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981107][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981120][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981178][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981191][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981240][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981252][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981270][ T5739] ldm_validate_partition_table(): Disk read failed. [ 114.981309][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981321][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981382][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.981401][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 114.981617][ T5739] Dev nbd2: unable to read RDB block 0 [ 114.981855][ T5739] nbd2: unable to read partition table [ 114.993582][ T8615] kvm [8614]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 114.994251][ T8615] kvm [8614]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 115.021667][ T5739] ldm_validate_partition_table(): Disk read failed. [ 115.021846][ T5739] Dev nbd2: unable to read RDB block 0 [ 115.022061][ T5739] nbd2: unable to read partition table [ 115.041934][ T8636] FAULT_INJECTION: forcing a failure. [ 115.041934][ T8636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.041966][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.4.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.041990][ T8636] Tainted: [L]=SOFTLOCKUP [ 115.041997][ T8636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.042007][ T8636] Call Trace: [ 115.042013][ T8636] [ 115.042021][ T8636] dump_stack_lvl+0x100/0x190 [ 115.042063][ T8636] should_fail_ex.cold+0x5/0xa [ 115.042088][ T8636] ? prepare_alloc_pages+0x16d/0x5b0 [ 115.042120][ T8636] should_fail_alloc_page+0xeb/0x140 [ 115.042145][ T8636] prepare_alloc_pages+0x1f0/0x5b0 [ 115.042172][ T8636] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 115.042207][ T8636] ? stack_trace_save+0x8e/0xc0 [ 115.042237][ T8636] ? __pfx_stack_trace_save+0x10/0x10 [ 115.042265][ T8636] ? stack_depot_save_flags+0x27/0x9f0 [ 115.042292][ T8636] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.042320][ T8636] ? kasan_save_track+0x14/0x30 [ 115.042340][ T8636] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 115.042367][ T8636] ? create_new_namespaces+0x48a/0xac0 [ 115.042387][ T8636] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 115.042405][ T8636] ? ksys_unshare+0x4a2/0xa70 [ 115.042425][ T8636] ? __x64_sys_unshare+0x31/0x40 [ 115.042443][ T8636] ? do_syscall_64+0x123/0x790 [ 115.042477][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.042518][ T8636] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.042543][ T8636] ? policy_nodemask+0xed/0x4f0 [ 115.042571][ T8636] alloc_pages_mpol+0x201/0x550 [ 115.042595][ T8636] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.042618][ T8636] ? kasan_save_track+0x14/0x30 [ 115.042637][ T8636] ? __kasan_kmalloc+0xaa/0xb0 [ 115.042658][ T8636] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 115.042687][ T8636] alloc_pages_noprof+0x1a/0x160 [ 115.042714][ T8636] timens_vdso_alloc_vvar_page+0x1d/0x70 [ 115.042737][ T8636] copy_time_ns+0x10b/0x790 [ 115.042759][ T8636] create_new_namespaces+0x48a/0xac0 [ 115.042786][ T8636] unshare_nsproxy_namespaces+0xf2/0x220 [ 115.042810][ T8636] ksys_unshare+0x4a2/0xa70 [ 115.042850][ T8636] ? __pfx_ksys_unshare+0x10/0x10 [ 115.042883][ T8636] __x64_sys_unshare+0x31/0x40 [ 115.042905][ T8636] do_syscall_64+0x123/0x790 [ 115.042930][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.042950][ T8636] RIP: 0033:0x7feeb999e159 [ 115.042967][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.042984][ T8636] RSP: 002b:00007feeb7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.043003][ T8636] RAX: ffffffffffffffda RBX: 00007feeb9c25fa0 RCX: 00007feeb999e159 [ 115.043015][ T8636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 115.043026][ T8636] RBP: 00007feeb9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 115.043037][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.043048][ T8636] R13: 00007feeb9c26038 R14: 00007feeb9c25fa0 R15: 00007ffcd5e68518 [ 115.043073][ T8636] [ 115.200940][ T8647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.680'. [ 115.214372][ T8649] bond1: invalid ARP target 0.0.0.0 specified for addition [ 115.214416][ T8649] bond1: option arp_ip_target: invalid value (0) [ 115.218064][ T8649] bond1 (unregistering): Released all slaves [ 115.291950][ T8657] FAULT_INJECTION: forcing a failure. [ 115.291950][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 115.292011][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.4.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.292046][ T8657] Tainted: [L]=SOFTLOCKUP [ 115.292052][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.292062][ T8657] Call Trace: [ 115.292068][ T8657] [ 115.292074][ T8657] dump_stack_lvl+0x100/0x190 [ 115.292100][ T8657] should_fail_ex.cold+0x5/0xa [ 115.292121][ T8657] should_failslab+0xc2/0x120 [ 115.292141][ T8657] kmem_cache_alloc_noprof+0x92/0x6a0 [ 115.292157][ T8657] ? __pfx_map_id_range_down+0x10/0x10 [ 115.292175][ T8657] ? security_inode_alloc+0x3b/0x2c0 [ 115.292202][ T8657] security_inode_alloc+0x3b/0x2c0 [ 115.292225][ T8657] inode_init_always_gfp+0xc6f/0xfb0 [ 115.292248][ T8657] alloc_inode+0x8e/0x250 [ 115.292263][ T8657] new_inode+0x22/0x1c0 [ 115.292276][ T8657] ? refcount_dec_not_one+0x136/0x1c0 [ 115.292300][ T8657] mqueue_get_inode+0x2e/0xe00 [ 115.292320][ T8657] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 115.292342][ T8657] ? __kasan_kmalloc+0xaa/0xb0 [ 115.292360][ T8657] ? __pfx_mqueue_fill_super+0x10/0x10 [ 115.292379][ T8657] mqueue_fill_super+0x145/0x250 [ 115.292399][ T8657] get_tree_nodev+0xdd/0x190 [ 115.292416][ T8657] mqueue_get_tree+0xf1/0x130 [ 115.292436][ T8657] vfs_get_tree+0x92/0x320 [ 115.292458][ T8657] fc_mount_longterm+0x1a/0x270 [ 115.292484][ T8657] mq_init_ns+0x482/0x820 [ 115.292507][ T8657] copy_ipcs+0x3dd/0x7e0 [ 115.292530][ T8657] create_new_namespaces+0x20a/0xac0 [ 115.292549][ T8657] ? security_capable+0x80/0x260 [ 115.292572][ T8657] unshare_nsproxy_namespaces+0xf2/0x220 [ 115.292592][ T8657] ksys_unshare+0x4a2/0xa70 [ 115.292609][ T8657] ? __pfx_ksys_unshare+0x10/0x10 [ 115.292635][ T8657] __x64_sys_unshare+0x31/0x40 [ 115.292652][ T8657] do_syscall_64+0x123/0x790 [ 115.292673][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.292690][ T8657] RIP: 0033:0x7feeb999e159 [ 115.292703][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.292717][ T8657] RSP: 002b:00007feeb7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.292733][ T8657] RAX: ffffffffffffffda RBX: 00007feeb9c25fa0 RCX: 00007feeb999e159 [ 115.292743][ T8657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 115.292752][ T8657] RBP: 00007feeb9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 115.292761][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.292770][ T8657] R13: 00007feeb9c26038 R14: 00007feeb9c25fa0 R15: 00007ffcd5e68518 [ 115.292792][ T8657] [ 115.368788][ T5093] Bluetooth: hci3: command 0x2021 tx timeout [ 115.368932][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.438638][ T5734] Bluetooth: hci0: command 0x040f tx timeout [ 116.057804][ T43] kauditd_printk_skb: 101 callbacks suppressed [ 116.057887][ T43] audit: type=1400 audit(1788815059.562:851): avc: denied { prog_run } for pid=8677 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.062513][ T43] audit: type=1400 audit(1788815059.572:852): avc: denied { connect } for pid=8677 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.066406][ T43] audit: type=1400 audit(1788815059.572:853): avc: denied { create } for pid=8680 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.067059][ T8681] netlink: 80 bytes leftover after parsing attributes in process `syz.2.688'. [ 116.067124][ T8679] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 116.067137][ T8679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.067431][ T8678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 116.067450][ T8678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.067750][ T43] audit: type=1400 audit(1788815059.572:854): avc: denied { ioctl } for pid=8680 comm="syz.2.688" path="socket:[27968]" dev="sockfs" ino=27968 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.067998][ T8678] vhci_hcd vhci_hcd.0: Device attached [ 116.068102][ T43] audit: type=1400 audit(1788815059.572:855): avc: denied { write } for pid=8680 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.068127][ T8679] vhci_hcd vhci_hcd.0: Device attached [ 116.123302][ T43] audit: type=1400 audit(1788815059.632:856): avc: denied { setattr } for pid=8677 comm="syz.3.687" name="RDS" dev="sockfs" ino=28992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.154198][ T43] audit: type=1400 audit(1788815059.662:857): avc: denied { module_request } for pid=8687 comm="syz.5.689" kmod="crypto-echainiv(authenc(digest_null,cbc(blowfish)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 116.215137][ T43] audit: type=1400 audit(1788815059.722:858): avc: denied { create } for pid=8693 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.233597][ T43] audit: type=1400 audit(1788815059.742:859): avc: denied { read } for pid=5446 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 116.236707][ T43] audit: type=1400 audit(1788815059.742:860): avc: denied { search } for pid=5446 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.265643][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.691'. [ 116.268608][ T8694] openvswitch: netlink: Flow key attr not present in new flow. [ 116.280604][ T8694] program syz.2.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.298422][ T9] usb 43-2: new high-speed USB device number 2 using vhci_hcd [ 116.475302][ T8719] netlink: 'syz.5.695': attribute type 11 has an invalid length. [ 116.528234][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.533972][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.657622][ T8733] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 116.662747][ T8735] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 116.718541][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.740336][ T8741] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 116.740402][ T8741] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 116.740458][ T8741] PKCS7: Unsupported data type 106 [ 116.806392][ T8744] sg_write: data in/out 808464396/116 bytes for SCSI command 0x30-- guessing data in; [ 116.806392][ T8744] program syz.2.700 not setting count and/or reply_len properly [ 116.887444][ T8684] vhci_hcd: connection reset by peer [ 116.891745][ T8682] vhci_hcd: connection closed [ 116.891776][ T5782] vhci_hcd vhci_hcd.3: stop threads [ 116.892312][ T5782] vhci_hcd vhci_hcd.3: release socket [ 116.893133][ T5782] vhci_hcd vhci_hcd.3: disconnect device [ 116.893308][ T5782] vhci_hcd vhci_hcd.3: stop threads [ 116.893317][ T5782] vhci_hcd vhci_hcd.3: release socket [ 116.894918][ T5782] vhci_hcd vhci_hcd.3: disconnect device [ 117.138413][ T8277] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 117.203094][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.203322][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.288901][ T8277] usb 7-1: Using ep0 maxpacket: 8 [ 117.289785][ T8277] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.290992][ T8277] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.291005][ T8277] usb 7-1: config 0 has no interface number 0 [ 117.291023][ T8277] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.291048][ T8277] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.316970][ T8277] usb 7-1: config 0 descriptor?? [ 117.330200][ T8277] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 117.438754][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.438875][ T5734] Bluetooth: hci3: command 0x2021 tx timeout [ 117.525971][ T1480] usb 7-1: USB disconnect, device number 12 [ 117.529626][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 117.613989][ T8774] FAULT_INJECTION: forcing a failure. [ 117.613989][ T8774] name failslab, interval 1, probability 0, space 0, times 0 [ 117.618059][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.3.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.618089][ T8774] Tainted: [L]=SOFTLOCKUP [ 117.618094][ T8774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.618101][ T8774] Call Trace: [ 117.618105][ T8774] [ 117.618110][ T8774] dump_stack_lvl+0x100/0x190 [ 117.618130][ T8774] should_fail_ex.cold+0x5/0xa [ 117.618146][ T8774] should_failslab+0xc2/0x120 [ 117.618162][ T8774] kmem_cache_alloc_noprof+0x92/0x6a0 [ 117.618175][ T8774] ? security_file_alloc+0x34/0x2c0 [ 117.618190][ T8774] security_file_alloc+0x34/0x2c0 [ 117.618202][ T8774] init_file+0x95/0x480 [ 117.618217][ T8774] alloc_empty_file+0x79/0x1c0 [ 117.618233][ T8774] path_openat+0xdb/0x2440 [ 117.618248][ T8774] ? __pfx_path_openat+0x10/0x10 [ 117.618267][ T8774] do_file_open+0x20e/0x430 [ 117.618281][ T8774] ? __pfx_do_file_open+0x10/0x10 [ 117.618304][ T8774] ? _raw_spin_unlock+0x28/0x50 [ 117.618315][ T8774] ? alloc_fd+0x471/0x7a0 [ 117.618351][ T8774] do_sys_openat2+0x10f/0x1e0 [ 117.618376][ T8774] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.618395][ T8774] __x64_sys_openat+0x12d/0x210 [ 117.618415][ T8774] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.618435][ T8774] do_syscall_64+0x123/0x790 [ 117.618449][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.618460][ T8774] RIP: 0033:0x7ff13d95e98e [ 117.618471][ T8774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.618482][ T8774] RSP: 002b:00007ff13e7b6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.618494][ T8774] RAX: ffffffffffffffda RBX: 00007ff13e7b76c0 RCX: 00007ff13d95e98e [ 117.618501][ T8774] RDX: 0000000000000002 RSI: 00007ff13e7b6f90 RDI: ffffffffffffff9c [ 117.618508][ T8774] RBP: 00007ff13da35024 R08: 0000000000000000 R09: 0000000000000000 [ 117.618514][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.618521][ T8774] R13: 00007ff13dc26038 R14: 00007ff13dc25fa0 R15: 00007ffc52c4f938 [ 117.618535][ T8774] [ 117.681753][ T8776] geneve2: entered promiscuous mode [ 117.683244][ T8778] nbd5: detected capacity change from 0 to 1125899906842625 [ 117.734159][ T8781] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.709:8781 [ 117.751842][ T8783] dns_resolver: Unsupported server list version (0) [ 118.018475][ T1480] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 118.104265][ T8806] cgroup: No subsys list or none specified [ 118.170282][ T1480] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.171796][ T5745] Bluetooth: hci4: Malformed Event: 0x13 [ 118.172651][ T1480] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 118.172675][ T1480] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.174866][ T1480] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.174886][ T1480] usb 8-1: Product: syz [ 118.174898][ T1480] usb 8-1: Manufacturer: syz [ 118.174910][ T1480] usb 8-1: SerialNumber: syz [ 118.181762][ T1480] usb 8-1: config 0 descriptor?? [ 118.194112][ T1480] usb 8-1: selecting invalid altsetting 0 [ 118.388021][ T851] usb 8-1: USB disconnect, device number 12 [ 118.502696][ T65] block nbd5: Receive control failed (result -104) [ 118.798576][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.218454][ T3383] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 119.353166][ T8836] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 119.372682][ T8836] bond2: entered promiscuous mode [ 119.373219][ T3383] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 119.374079][ T8840] openvswitch: netlink: Tunnel attr 10 has unexpected len 60 expected 2 [ 119.374121][ T8836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.375377][ T3383] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.375396][ T3383] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.377274][ T3383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.377286][ T3383] usb 7-1: Product: syz [ 119.377293][ T3383] usb 7-1: Manufacturer: syz [ 119.377300][ T3383] usb 7-1: SerialNumber: syz [ 119.395975][ T8836] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.395996][ T8836] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 119.396009][ T8836] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 119.442979][ T8843] netlink: 64 bytes leftover after parsing attributes in process `syz.3.727'. [ 119.518518][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.518649][ T5734] Bluetooth: hci3: command 0x2021 tx timeout [ 119.519408][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.730'. [ 119.599542][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 119.948415][ T30] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 120.118382][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 120.119059][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.119863][ T30] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 120.119930][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.119943][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.119954][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.119965][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.119984][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.291831][ T5745] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 120.324291][ T30] usb 8-1: usb_control_msg returned -32 [ 120.324378][ T30] usbtmc 8-1:16.0: can't read capabilities [ 120.357327][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.738'. [ 120.451154][ T8874] FAULT_INJECTION: forcing a failure. [ 120.451154][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 120.451250][ T8874] CPU: 1 UID: 0 PID: 8874 Comm: syz.4.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.451278][ T8874] Tainted: [L]=SOFTLOCKUP [ 120.451283][ T8874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.451291][ T8874] Call Trace: [ 120.451296][ T8874] [ 120.451301][ T8874] dump_stack_lvl+0x100/0x190 [ 120.451357][ T8874] should_fail_ex.cold+0x5/0xa [ 120.451376][ T8874] should_failslab+0xc2/0x120 [ 120.451395][ T8874] __kmalloc_cache_noprof+0x91/0x6d0 [ 120.451413][ T8874] ? blk_mq_free_request+0x1df/0x250 [ 120.451434][ T8874] ? sr_read_tochdr.isra.0+0xaa/0x280 [ 120.451474][ T8874] sr_read_tochdr.isra.0+0xaa/0x280 [ 120.451499][ T8874] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 120.451531][ T8874] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 120.451562][ T8874] sr_audio_ioctl+0x13e/0x2f0 [ 120.451586][ T8874] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 120.451612][ T8874] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 120.451645][ T8874] cdrom_count_tracks+0x26f/0x840 [ 120.451675][ T8874] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 120.451701][ T8874] ? __pfx_sr_drive_status+0x10/0x10 [ 120.451724][ T8874] ? sr_init_command+0x6a0/0x1010 [ 120.451754][ T8874] cdrom_open+0xa8a/0x2760 [ 120.451773][ T8874] ? __pfx_cdrom_open+0x10/0x10 [ 120.451789][ T8874] ? rcu_is_watching+0x13/0xc0 [ 120.451831][ T8874] ? trace_contention_end+0x126/0x160 [ 120.451856][ T8874] ? __mutex_lock+0x26c/0x1bd0 [ 120.451883][ T8874] ? sr_block_open+0xbc/0x180 [ 120.451908][ T8874] ? lock_acquire+0x1d1/0x380 [ 120.451930][ T8874] ? __pfx___mutex_lock+0x10/0x10 [ 120.451953][ T8874] ? mark_held_locks+0x40/0x70 [ 120.451971][ T8874] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.451995][ T8874] ? __pfx_disk_check_media_change+0x10/0x10 [ 120.452016][ T8874] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.452037][ T8874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.452061][ T8874] sr_block_open+0xc8/0x180 [ 120.452083][ T8874] ? __pfx_sr_block_open+0x10/0x10 [ 120.452107][ T8874] blkdev_get_whole+0x99/0x290 [ 120.452133][ T8874] bdev_open+0x2c7/0xe40 [ 120.452162][ T8874] blkdev_open+0x34e/0x4f0 [ 120.452183][ T8874] do_dentry_open+0x6ab/0x14d0 [ 120.452200][ T8874] ? __pfx_blkdev_open+0x10/0x10 [ 120.452223][ T8874] vfs_open+0x82/0x3f0 [ 120.452249][ T8874] path_openat+0x19fa/0x2440 [ 120.452274][ T8874] ? __pfx_path_openat+0x10/0x10 [ 120.452302][ T8874] do_file_open+0x20e/0x430 [ 120.452324][ T8874] ? __pfx_do_file_open+0x10/0x10 [ 120.452362][ T8874] ? _raw_spin_unlock+0x28/0x50 [ 120.452379][ T8874] ? alloc_fd+0x471/0x7a0 [ 120.452407][ T8874] do_sys_openat2+0x10f/0x1e0 [ 120.452430][ T8874] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.452459][ T8874] ? fdget+0x18b/0x210 [ 120.452486][ T8874] __x64_sys_openat+0x12d/0x210 [ 120.452511][ T8874] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.452545][ T8874] do_syscall_64+0x123/0x790 [ 120.452571][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.452589][ T8874] RIP: 0033:0x7feeb999e159 [ 120.452604][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.452621][ T8874] RSP: 002b:00007feeb7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.452639][ T8874] RAX: ffffffffffffffda RBX: 00007feeb9c25fa0 RCX: 00007feeb999e159 [ 120.452649][ T8874] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 120.452660][ T8874] RBP: 00007feeb9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 120.452670][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.452681][ T8874] R13: 00007feeb9c26038 R14: 00007feeb9c25fa0 R15: 00007ffcd5e68518 [ 120.452706][ T8874] [ 121.214913][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 121.214986][ T43] audit: type=1400 audit(1788815064.722:950): avc: denied { read } for pid=6660 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 121.215056][ T43] audit: type=1400 audit(1788815064.722:951): avc: denied { open } for pid=6660 comm="syz-executor" path="/153/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 121.215499][ T43] audit: type=1804 audit(1788815064.722:952): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/153/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 121.215681][ T43] audit: type=1400 audit(1788815064.722:953): avc: denied { setattr } for pid=6660 comm="syz-executor" path="/153/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 121.428553][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 121.598558][ T5745] Bluetooth: hci3: command 0x2021 tx timeout [ 121.678563][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 121.960228][ T3383] usblp 7-1:1.0: usblp3: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 121.962177][ T3383] usb 7-1: USB disconnect, device number 13 [ 121.965738][ T3383] usblp3: removed [ 122.156037][ T43] audit: type=1400 audit(1788815065.662:954): avc: denied { mount } for pid=8878 comm="syz.2.743" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.163589][ T43] audit: type=1400 audit(1788815065.672:955): avc: denied { remount } for pid=8878 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.173942][ T43] audit: type=1400 audit(1788815065.682:956): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.233204][ T43] audit: type=1400 audit(1788815065.742:957): avc: denied { bind } for pid=8883 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.505165][ T43] audit: type=1400 audit(1788815066.012:958): avc: denied { read write } for pid=8889 comm="syz.2.747" name="uhid" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.505280][ T43] audit: type=1400 audit(1788815066.012:959): avc: denied { open } for pid=8889 comm="syz.2.747" path="/dev/uhid" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.516347][ T8277] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.523026][ T8277] hid-generic 0000:0000:0000.0004: hidraw2: HID v0.00 Device [syz1] on syz0 [ 122.703429][ T3383] usb 8-1: USB disconnect, device number 13 [ 122.727479][ T8893] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 122.747447][ T8893] bond3: entered promiscuous mode [ 122.748998][ T8893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.777977][ T8893] veth3: entered allmulticast mode [ 122.781834][ T8893] bond3: (slave veth3): making interface the new active one [ 122.781894][ T8893] veth3: entered promiscuous mode [ 122.785895][ T8893] bond3: (slave veth3): Enslaving as an active interface with an up link [ 122.803252][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 122.811533][ T8894] veth5: entered allmulticast mode [ 122.817421][ T8894] bond3: (slave veth5): Enslaving as a backup interface with an up link [ 122.851391][ T8900] hsr_slave_0: left promiscuous mode [ 122.854038][ T8900] hsr_slave_1: left promiscuous mode [ 122.915492][ T8902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.750'. [ 123.323514][ T8908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.332546][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.688539][ T5745] Bluetooth: hci3: command 0x2021 tx timeout [ 123.721682][ T8913] ima: policy update failed [ 123.768603][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 124.369127][ T8930] Bluetooth: MGMT ver 1.23 [ 124.371559][ T8930] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 124.401867][ T8932] overlayfs: missing 'lowerdir' [ 124.468706][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 124.468769][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 124.599932][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.764'. [ 124.752931][ T8958] FAULT_INJECTION: forcing a failure. [ 124.752931][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 124.752998][ T8958] CPU: 2 UID: 0 PID: 8958 Comm: syz.3.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.753026][ T8958] Tainted: [L]=SOFTLOCKUP [ 124.753034][ T8958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.753045][ T8958] Call Trace: [ 124.753050][ T8958] [ 124.753055][ T8958] dump_stack_lvl+0x100/0x190 [ 124.753088][ T8958] should_fail_ex.cold+0x5/0xa [ 124.753113][ T8958] should_failslab+0xc2/0x120 [ 124.753136][ T8958] __kmalloc_cache_noprof+0x91/0x6d0 [ 124.753159][ T8958] ? do_seccomp+0xc90/0x27c0 [ 124.753187][ T8958] do_seccomp+0xc90/0x27c0 [ 124.753217][ T8958] ? __pfx_do_seccomp+0x10/0x10 [ 124.753240][ T8958] ? __sys_socket+0xac/0x260 [ 124.753265][ T8958] ? xfd_validate_state+0x129/0x190 [ 124.753293][ T8958] do_syscall_64+0x123/0x790 [ 124.753317][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.753337][ T8958] RIP: 0033:0x7ff13d99e159 [ 124.753354][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.753370][ T8958] RSP: 002b:00007ff13e7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 124.753389][ T8958] RAX: ffffffffffffffda RBX: 00007ff13dc25fa0 RCX: 00007ff13d99e159 [ 124.753399][ T8958] RDX: 0000200000000580 RSI: 0000000000000008 RDI: 0000000000000001 [ 124.753409][ T8958] RBP: 00007ff13da35024 R08: 0000000000000000 R09: 0000000000000000 [ 124.753421][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.753431][ T8958] R13: 00007ff13dc26038 R14: 00007ff13dc25fa0 R15: 00007ffc52c4f938 [ 124.753456][ T8958] [ 124.789946][ T8958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 124.789974][ T8958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.792983][ T8958] vhci_hcd vhci_hcd.0: Device attached [ 124.794611][ T8961] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 1 [ 124.795290][ T5809] vhci_hcd vhci_hcd.3: stop threads [ 124.795306][ T5809] vhci_hcd vhci_hcd.3: release socket [ 124.795322][ T5809] vhci_hcd vhci_hcd.3: disconnect device [ 124.806770][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 124.931551][ T8970] xt_hashlimit: max too large, truncated to 1048576 [ 124.931900][ T8970] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.119180][ T8974] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 125.139161][ T8974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.170600][ T8973] bond1: (slave geneve2): making interface the new active one [ 125.173908][ T8973] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.208906][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.211915][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.211937][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.211954][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.392826][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 125.392933][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 125.461090][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 125.461164][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 125.463991][ T8994] geneve0: entered promiscuous mode ** replaying previous printk message ** [ 125.724425][ T9018] ------------[ cut here ]------------ [ 125.724487][ T9018] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 125.724567][ T9018] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1a9e/0x22d0, CPU#3: syz.2.784/9018 [ 125.734330][ T9018] Modules linked in: [ 125.735725][ T9018] CPU: 3 UID: 0 PID: 9018 Comm: syz.2.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.739485][ T9018] Tainted: [L]=SOFTLOCKUP [ 125.741020][ T9018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.744239][ T9018] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.746176][ T9018] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 b3 34 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 a5 34 88 00 48 c7 c6 80 ba e2 8b 48 89 [ 125.754344][ T9018] RSP: 0018:ffffc90024f17238 EFLAGS: 00010293 [ 125.756150][ T9020] can0: slcan on ttyS3. [ 125.758618][ T5745] Bluetooth: hci3: command 0x2021 tx timeout [ 125.761138][ T9018] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 0000000000000000 [ 125.764414][ T9018] RDX: ffff888032218000 RSI: ffffffff8183dc5d RDI: ffff888032218000 [ 125.767424][ T9018] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 125.770632][ T9018] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 125.773636][ T9018] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90024f17458 [ 125.775501][ T9019] xt_connbytes: Forcing CT accounting to be enabled [ 125.779174][ T9018] FS: 00007ffa79c036c0(0000) GS:ffff8880d5e5d000(0000) knlGS:0000000000000000 [ 125.782393][ T9018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.784534][ T9018] CR2: 00007ffa79be2d58 CR3: 000000004a7b0000 CR4: 0000000000352ef0 [ 125.787050][ T9018] Call Trace: [ 125.788159][ T9018] [ 125.789303][ T9018] ? find_held_lock+0x2b/0x80 [ 125.791006][ T9018] ? __pfx___mutex_lock+0x10/0x10 [ 125.792708][ T9018] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 125.794461][ T9018] ? lock_acquire+0x1d1/0x380 [ 125.795993][ T9018] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 125.797871][ T9018] kvm_gpc_refresh+0xc9/0x160 [ 125.799493][ T9018] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 125.801515][ T9018] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 125.803777][ T9018] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 125.806109][ T9018] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 125.808781][ T9018] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 125.810588][ T9018] ? kvm_pmu_reset+0x64c/0xa30 [ 125.812179][ T9018] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 125.813960][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 125.815719][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 125.817829][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 125.819922][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 125.821881][ T9018] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.823679][ T9018] ? irqentry_exit+0x24d/0xa10 [ 125.825248][ T9018] ? find_held_lock+0x2b/0x80 [ 125.826780][ T9018] ? is_bpf_text_address+0x8a/0x1a0 [ 125.828498][ T9018] ? is_bpf_text_address+0x8a/0x1a0 [ 125.830169][ T9018] ? bpf_ksym_find+0x128/0x1c0 [ 125.831734][ T9018] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.833651][ T9018] ? is_bpf_text_address+0x94/0x1a0 [ 125.835246][ T9018] ? kernel_text_address+0x8d/0x100 [ 125.836915][ T9018] ? __kernel_text_address+0xd/0x30 [ 125.838632][ T9018] ? unwind_get_return_address+0x59/0xa0 [ 125.840437][ T9018] ? arch_stack_walk+0xa6/0xf0 [ 125.842006][ T9018] ? tomoyo_path_number_perm+0x46d/0x580 [ 125.843839][ T9018] ? stack_trace_save+0x8e/0xc0 [ 125.845424][ T9018] ? __pfx_stack_trace_save+0x10/0x10 [ 125.847142][ T9018] ? stack_depot_save_flags+0x27/0x9f0 [ 125.848908][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 125.849157][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 125.852439][ T9018] ? tomoyo_path_number_perm+0x46d/0x580 [ 125.854232][ T9018] ? kasan_save_stack+0x3f/0x50 [ 125.855798][ T9018] kvm_vm_ioctl+0x167d/0x42d0 [ 125.857299][ T9018] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 125.858912][ T9018] ? kasan_quarantine_put+0x104/0x240 [ 125.860607][ T9018] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.862277][ T9018] ? find_held_lock+0x2b/0x80 [ 125.863859][ T9018] ? tomoyo_path_number_perm+0x28f/0x580 [ 125.865692][ T9018] ? tomoyo_path_number_perm+0x28f/0x580 [ 125.867567][ T9018] ? tomoyo_path_number_perm+0x188/0x580 [ 125.869267][ T9018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.871076][ T9018] ? __pfx_futex_wait+0x10/0x10 [ 125.872627][ T9018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.874563][ T9018] ? do_vfs_ioctl+0x226/0x13e0 [ 125.876081][ T9018] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.877736][ T9018] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 125.879846][ T9018] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.882059][ T9018] ? __fget_files+0x34/0x3d0 [ 125.883652][ T9018] ? selinux_file_ioctl+0x13b/0x290 [ 125.885408][ T9018] ? selinux_file_ioctl+0xb6/0x290 [ 125.887065][ T9018] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 125.888682][ T9018] __x64_sys_ioctl+0x18e/0x210 [ 125.890185][ T9018] do_syscall_64+0x123/0x790 [ 125.891643][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.893569][ T9018] RIP: 0033:0x7ffa78d9e159 [ 125.895049][ T9018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.901638][ T9018] RSP: 002b:00007ffa79c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.904462][ T9018] RAX: ffffffffffffffda RBX: 00007ffa79025fa0 RCX: 00007ffa78d9e159 [ 125.907183][ T9018] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000005 [ 125.909854][ T9018] RBP: 00007ffa78e35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.912295][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.914857][ T9018] R13: 00007ffa79026038 R14: 00007ffa79025fa0 R15: 00007ffd6b0adcb8 [ 125.917452][ T9018] [ 125.918762][ T9018] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.921650][ T9018] CPU: 3 UID: 0 PID: 9018 Comm: syz.2.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.925980][ T9018] Tainted: [L]=SOFTLOCKUP [ 125.927783][ T9018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.931965][ T9018] Call Trace: [ 125.933364][ T9018] [ 125.934586][ T9018] dump_stack_lvl+0x100/0x190 [ 125.936554][ T9018] vpanic+0x553/0x970 [ 125.938210][ T9018] ? __pfx_vpanic+0x10/0x10 [ 125.940131][ T9018] panic+0xd1/0xe0 [ 125.941721][ T9018] ? __pfx_panic+0x10/0x10 [ 125.943636][ T9018] check_panic_on_warn.cold+0x19/0x34 [ 125.945827][ T9018] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.948100][ T9018] __warn.cold+0x191/0x318 [ 125.950033][ T9018] __report_bug+0x30f/0x440 [ 125.951970][ T9018] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.954217][ T9018] ? __pfx___report_bug+0x10/0x10 [ 125.956351][ T9018] ? check_prev_add+0xfe/0xe60 [ 125.958299][ T9018] ? check_prev_add+0xfe/0xe60 [ 125.960265][ T9018] ? __lock_acquire+0xe8b/0x1f40 [ 125.962110][ T9018] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.964251][ T9018] report_bug+0xb3/0x220 [ 125.966052][ T9018] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.968224][ T9018] handle_bug+0x16a/0x2a0 [ 125.969835][ T9018] exc_invalid_op+0x17/0x50 [ 125.971534][ T9018] asm_exc_invalid_op+0x1a/0x20 [ 125.973492][ T9018] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 125.975893][ T9018] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 b3 34 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 a5 34 88 00 48 c7 c6 80 ba e2 8b 48 89 [ 125.983521][ T9018] RSP: 0018:ffffc90024f17238 EFLAGS: 00010293 [ 125.986110][ T9018] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 0000000000000000 [ 125.989260][ T9018] RDX: ffff888032218000 RSI: ffffffff8183dc5d RDI: ffff888032218000 [ 125.992247][ T9018] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 125.995256][ T9018] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 125.998192][ T9018] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90024f17458 [ 126.001002][ T9018] ? __kvm_gpc_refresh+0x1a9d/0x22d0 [ 126.002868][ T9018] ? __kvm_gpc_refresh+0x1a9d/0x22d0 [ 126.004917][ T9018] ? find_held_lock+0x2b/0x80 [ 126.006856][ T9018] ? __pfx___mutex_lock+0x10/0x10 [ 126.008966][ T9018] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 126.011264][ T9018] ? lock_acquire+0x1d1/0x380 [ 126.013305][ T9018] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 126.015738][ T9018] kvm_gpc_refresh+0xc9/0x160 [ 126.017731][ T9018] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 126.020089][ T9018] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 126.022659][ T9018] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 126.024973][ T9018] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 126.027478][ T9018] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 126.029466][ T9018] ? kvm_pmu_reset+0x64c/0xa30 [ 126.031327][ T9018] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 126.033710][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 126.035825][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 126.037716][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 126.039586][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 126.041469][ T9018] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.043313][ T9018] ? irqentry_exit+0x24d/0xa10 [ 126.044849][ T9018] ? find_held_lock+0x2b/0x80 [ 126.046335][ T9018] ? is_bpf_text_address+0x8a/0x1a0 [ 126.048027][ T9018] ? is_bpf_text_address+0x8a/0x1a0 [ 126.049795][ T9018] ? bpf_ksym_find+0x128/0x1c0 [ 126.051327][ T9018] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.053289][ T9018] ? is_bpf_text_address+0x94/0x1a0 [ 126.054927][ T9018] ? kernel_text_address+0x8d/0x100 [ 126.056803][ T9018] ? __kernel_text_address+0xd/0x30 [ 126.058436][ T9018] ? unwind_get_return_address+0x59/0xa0 [ 126.060387][ T9018] ? arch_stack_walk+0xa6/0xf0 [ 126.062081][ T9018] ? tomoyo_path_number_perm+0x46d/0x580 [ 126.063865][ T9018] ? stack_trace_save+0x8e/0xc0 [ 126.065402][ T9018] ? __pfx_stack_trace_save+0x10/0x10 [ 126.067068][ T9018] ? stack_depot_save_flags+0x27/0x9f0 [ 126.068805][ T9018] ? __lock_acquire+0x5c0/0x1f40 [ 126.070367][ T9018] ? tomoyo_path_number_perm+0x46d/0x580 [ 126.072137][ T9018] ? kasan_save_stack+0x3f/0x50 [ 126.073672][ T9018] kvm_vm_ioctl+0x167d/0x42d0 [ 126.075169][ T9018] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 126.076831][ T9018] ? kasan_quarantine_put+0x104/0x240 [ 126.078521][ T9018] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.080186][ T9018] ? find_held_lock+0x2b/0x80 [ 126.081689][ T9018] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.083482][ T9018] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.085267][ T9018] ? tomoyo_path_number_perm+0x188/0x580 [ 126.087035][ T9018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.088950][ T9018] ? __pfx_futex_wait+0x10/0x10 [ 126.090514][ T9018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.092382][ T9018] ? do_vfs_ioctl+0x226/0x13e0 [ 126.093947][ T9018] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.095519][ T9018] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 126.097566][ T9018] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.099677][ T9018] ? __fget_files+0x34/0x3d0 [ 126.101147][ T9018] ? selinux_file_ioctl+0x13b/0x290 [ 126.102815][ T9018] ? selinux_file_ioctl+0xb6/0x290 [ 126.104429][ T9018] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 126.106007][ T9018] __x64_sys_ioctl+0x18e/0x210 [ 126.107505][ T9018] do_syscall_64+0x123/0x790 [ 126.108988][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.110889][ T9018] RIP: 0033:0x7ffa78d9e159 [ 126.112376][ T9018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.118357][ T9018] RSP: 002b:00007ffa79c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.120773][ T9018] RAX: ffffffffffffffda RBX: 00007ffa79025fa0 RCX: 00007ffa78d9e159 [ 126.123273][ T9018] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000005 [ 126.125748][ T9018] RBP: 00007ffa78e35024 R08: 0000000000000000 R09: 0000000000000000 [ 126.128231][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.130705][ T9018] R13: 00007ffa79026038 R14: 00007ffa79025fa0 R15: 00007ffd6b0adcb8 [ 126.133192][ T9018] [ 126.134960][ T9018] Kernel Offset: disabled [ 126.136341][ T9018] Rebooting in 86400 seconds..