last executing test programs: 4m57.091066296s ago: executing program 32 (id=1560): setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000300)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000008c0)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x190) close_range(r2, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40044080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5d, &(0x7f0000001a40)=[{&(0x7f0000001a80)="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"}, {&(0x7f0000000440)="3162d81e5214369fd045c47829aa5b952708cf1f3e0d4d925c3b558ff8b0f130d68ff729a023721fe2cd963d23e49555daf151fb181d316a46b0bfa2a6613e81d94589f4cdf66420f9550aaebbeb1670c2387b479eb5c553afbdde9a1f7724e043a8d831aab2cc59f4ab5ded580dff0972887c1dfab27b4cca78f75d027c8e62284a012223bf2ebbba16d6f0950725327767dda619a1db1d1cf6127e0ef4cb9e7db89d80320fd2e83b77d612b1f2bf07ece7826ccf2da739400f4ea688e1cd69b774d42d75bafdd08ff27ad169ee940248d3e74844890eed02381897fbf40f2c935f1f6b7bf97ca0d32651eef136657d932022"}, {&(0x7f0000000340)="a5ce0afccfbdb0f6ec9a2e5cefd67d2b56d6d8e70b4221353923807cf9cf219dd57d7292ed1c65f70454738a40e205ec76acae8196067e9b3653dda4cac9fb39705453f51b7f2fb284fef671ce14e4c77f6287df104bda4280e81b2bd5792996d4108b72920af22ba895d287e0294fa343eea37fb47adbe625afe1115afd3cfe775503f377f8e692f02d0533943d88d57a3b03732c9c710474341d807fae2c0478314f1de391d00000000000105b30daf73f89777036b3b311452ce82d13a2f0087222aab1c78b6363268d4cc7bfe1e51f89e603fa492ea3e73803a430518e825593ecdae51985c5c444e35721ee"}], 0x10000000000001ac}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) close_range(r1, r4, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r4, 0xcc5f5000) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x22380, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x12) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usb_storage/parameters/delay_use\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4m28.52683312s ago: executing program 33 (id=2118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) read(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x200000e, 0x11, r6, 0x100000000) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r11, &(0x7f0000000040)=""/3, 0x3, 0x40000002, &(0x7f0000000100)=@can, 0x80) 4m27.850574035s ago: executing program 34 (id=1868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="306663353a313232373a620afaf6379a248d1d6534518f1095109da34b6d", 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}, 0x30000004) 4m21.512236026s ago: executing program 0 (id=2197): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="4c9500002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) write(r0, &(0x7f0000000200)="4c0000002c0001040300000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 4m21.511991768s ago: executing program 0 (id=2198): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0x45, {0x45, 0x30, "eea02be0fadb848a9101fe3e75c9cef9e4d33a73ff4fea7d4169ce3319257a3e107970df49ae8b246bf81555fd5b564ec72d92af8fa2d0602089df83c6711cb8ffae1c"}}, &(0x7f0000000740)={0x0, 0x3, 0xa, @string={0xa, 0x3, "1e149d316268952f"}}}, &(0x7f0000000cc0)={0x1c, &(0x7f00000007c0)={0x0, 0xe, 0x67, "e7d822bf50667973618f50fc65b94ef785782d88987e5ed08982495c83fd2c572078accac4906eb9623e61217fc82fa877caf27d5333ebc09cd974faeb697ecb657c84b3c637ca3c93df0e94be531345138d97de70eff83bc83c6061c7cc9ee6b4fd17e3c806d4"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c80)={0x21, 0x0, 0x1, "a9"}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000180)={0x0, 0x8, 0x6, {0x7e, 0x7}, 0x10000, 0xe}) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x7f, 0x0, 0x0, 0xb, @remote}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff01000080aaaaaaaaaabb00040c"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@multicast1, @loopback, 0xff000000, 0xffffffff, 'bond_slave_1\x00', 'macvlan1\x00', {}, {}, 0x1, 0x3, 0x60}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0xff, 0xff, 'tunl0\x00', 'vlan0\x00', {}, {0xff}, 0x15, 0x6, 0x4}, 0x0, 0x158, 0x1b8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa35, 0x1}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@rand_addr=' \x01\x00', [0xffffffff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv6=@mcast1, [0x0, 0xff000000, 0x0, 0xff000000], @ipv4=@loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 0x2bb, 0x1, 0x5e, 0x4e23, 0x4e20, 0x4e22, 0x4e21, 0x800, 0x33}, 0xc1, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x5, 0x1, 0x2, 0x1, 0x2], 0x6, 0x8}, {0x4, [0x4, 0x4, 0x4, 0x7, 0x1], 0x1, 0x2}}}}, {{@ip={@private=0xa010101, @broadcast, 0xff000000, 0xff000000, 'dvmrp1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x88, 0x2, 0x16}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0x7f7fff80, 0xff, 0xff000000], 0x4e23, 0x1, 0x4, 0x4e23, 0x2, 0x4}}, @common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e23], 0x3, 0x4, 0x8, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x7fff, 0xd, [0x38, 0x3d, 0x40, 0x20, 0x2, 0x25, 0x2, 0x34, 0x36, 0x38, 0x2c, 0x3d, 0x19, 0x13, 0x15, 0x15], 0x1, 0x2, 0xcb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 4m18.23109892s ago: executing program 0 (id=2205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r6 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) 4m18.152372304s ago: executing program 0 (id=2207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 4m18.074280181s ago: executing program 0 (id=2208): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0xe0, 0xfffffffe, 0x7, 0x4, 0x99, 0x6, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffff272, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x403, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1003, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0xffffffff, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x3, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0x4, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x7a, 0x3, 0xcd36, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x8001, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0x3, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x94, 0x66}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 4m17.621315706s ago: executing program 5 (id=2214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x7, 0xc, 0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0xa}) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 4m17.619754235s ago: executing program 5 (id=2215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r6 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) 4m17.522990588s ago: executing program 5 (id=2216): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xb5, 0x1, 0x7, 0x5, 0x10, "0d21ac76f999950825c922cd7c39a6ae0bec4d"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xb5, 0x1, 0x7, 0x5, 0x10, "0d21ac76f999950825c922cd7c39a6ae0bec4d"}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x2, r0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0x3, 0x5}) write$tcp_congestion(r0, &(0x7f0000000100)='bic\x00', 0x4) (async) write$tcp_congestion(r0, &(0x7f0000000100)='bic\x00', 0x4) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f00000001c0)=0x3, 0x4) (async) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f00000001c0)=0x3, 0x4) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2f, 0x894, 0x10001, 0x3ff, 0x3, 0x8, 0xffff, 0xc, 0x6, 0x10, 0xff, 0x8, 0x3, 0x7ff, 0x9, 0xa8], 0x6000, 0x10040}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001300)={[0xff, 0xf, 0x4, 0xb, 0x6, 0xffffffffffffffff, 0x7fffffff, 0xffffffff, 0x9, 0x1, 0x80, 0x10, 0x1, 0x10001, 0x5, 0x6], 0xfff81000, 0x200082}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002440)={0x1, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], &(0x7f0000002400)=[0x5, 0x3]}, 0x20) unlink(&(0x7f0000002480)='./file0\x00') (async) unlink(&(0x7f0000002480)='./file0\x00') umount2(&(0x7f00000024c0)='./file0\x00', 0x8) fchdir(r0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000002500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x0, 0x29) preadv2(r0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/220, 0xdc}, {&(0x7f0000002700)=""/11, 0xb}, {&(0x7f0000002740)=""/112, 0x70}, {&(0x7f00000027c0)=""/30, 0x1e}, {&(0x7f0000002800)=""/29, 0x1d}, {&(0x7f0000002840)=""/225, 0xe1}, {&(0x7f0000002940)=""/24, 0x18}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/77, 0x4d}], 0x9, 0x10000, 0x100, 0x2) pipe2(&(0x7f0000003b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) renameat2(r0, &(0x7f0000003ac0)='./file0\x00', r2, &(0x7f0000003b40)='./file1\x00', 0x1) (async) renameat2(r0, &(0x7f0000003ac0)='./file0\x00', r2, &(0x7f0000003b40)='./file1\x00', 0x1) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000003b80)=0x1, 0x4) setxattr$incfs_metadata(&(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), &(0x7f0000003c40)="08af186600c741d10fde6c2e9be909fcb76c79", 0x13, 0x2) (async) setxattr$incfs_metadata(&(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), &(0x7f0000003c40)="08af186600c741d10fde6c2e9be909fcb76c79", 0x13, 0x2) getpgrp(0x0) (async) r4 = getpgrp(0x0) capset(&(0x7f0000003c80)={0x20071026, r4}, &(0x7f0000003cc0)={0x9, 0x14a, 0x401, 0x1, 0x9, 0x6}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) statx(r2, &(0x7f0000003d00)='./file0\x00', 0x2000, 0x200, &(0x7f0000003d40)) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000003e40)={0x51, 0x0, r1}) (async) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000003e40)={0x51, 0x0, r1}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003e80)={r3, r5, 0x17, 0x0, @val=@perf_event={0x7}}, 0x18) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xe) 4m17.439709209s ago: executing program 5 (id=2217): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000380)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffd}, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d9946edc4ec79c66d9a1a239c8b77571cf41e3c5f1d520fc94f2fded82d2ef3d52e355746ce0afd2c4ab6fa305dbb2fc17146b40a350f44f1bff95b719b861820628f9a1227c4284290002d84f0c22737b31c44c7be11330a59c340c372eb1334d3c7865519cab1adfff6193c9380f9bb2379ad8f0c048f9d5e9925d08bff91f46d545dd5a909c6a6ebae29385a270c538c5444c32ea54e33bb157", @ANYRES32=r4, @ANYBLOB="08000200ac1e00011400060000000000008000000300000007000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x0, 0x37) write(r5, &(0x7f0000000100)='+b', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r8 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x100002) ioctl$I2C_SLAVE(r8, 0x703, 0xc) readv(r7, &(0x7f0000000640)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r10, 0x100000000000011, 0x3, 0x2f93) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x80, 0xfe}, 'port0\x00', 0x0, 0x49, 0x8000, 0x0, 0xa6ed}) 4m13.506548232s ago: executing program 6 (id=2226): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x0, r2, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x80000000}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000180)={0x8, r3}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f00000000c0)={0x8, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000122000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x101800, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x13, 0xfa00, {0x2, &(0x7f0000002100), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m3.191176195s ago: executing program 35 (id=2200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f00000008c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x4, @empty, 0x24c}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000100)="fb0ad7d537295d2078a2ef8b29e093c348670c6d5fbc8a09f6bc4efc8cef7c8c8fec7ba9e246d8943040628652cd0be26b4752597db2c33daf8574c86db8c75f1cd8533c561aef0909a0caf90dacd5d54dc0ef", 0x53}, {&(0x7f0000000740)="1d015b9f9b16aa6df9def2cc152ccea428d71e81ce165f0ff3d34a0cc6e06fd5030e06d0225b9baed22a396aaa3f309bb0f48441628075afe5619f3d9e53fda6682b9d5c82472afcb5ac9082d54f78b034671eb25aa86411d8f702ce89acd5c521386d16b0c543c95f27011f12c5a150509831177808b3df69090298adba3f495a79dca80e072e5a59846923b5efd95fe330b61f6ba918931a8cdb3e12bf3f7b7d6a90ffbe071ff2836e1df57642b59057a3629d1384915036a622ee023ba541c123faff2d8c5d705133fd7526b07f270d96953f4d2d6c86d6faf8026c3b59a0f299", 0xe2}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000002900000034000000ce99000000000000280000000000000029000000390000003a02000500000000ff020000000000080000000000000001c3d3109d275ccc46262d62279fb34659bd4ed9a25faf7177357f092448dee48b44c75ad04e6e6904e0a552d78e81c868e36ff33a68334cdff02d9937180f5c097bfd32685f376573153fb6dbfe37cae2"], 0x40}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/control\x00', 0x2002, 0xf0) ioctl(r3, 0xc138fd0a, &(0x7f0000000280)="040000000000000048e3bc705102") r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x800, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000900)="2785a616c26770c21f9664eb0f8c9b364eab39d93ecbf6583ef88cf8c55021bf980a06d5efcbc39793b01c64533b376a418f7475818fd0f4ec24b1b9b6e77d02b8f1b0c7d123620872b9c56b25027cc3c2b2fcef734d8851627339a4485e93fa725fb76db2090d0abac0754dc7e115f1758d414256651d71a74ab7915401c9180413b88c57ec7520d36bf95cd98e1f629d22846abb0234920f88903410d6d3b364f995bae3b9dd84dc417e0bd9ab43ff292a8d30656d11203b0efd750007497403bcc0600a11134b2a761e26d1b1a07096fef9268dead3f60561ca61ccd42fc4", 0xe0) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept$inet(r0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r6, r7, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r5}, 0x20) sendto(r5, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) 4m1.692774078s ago: executing program 36 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x6000, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) 4m1.190191141s ago: executing program 37 (id=2218): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m0.986045129s ago: executing program 7 (id=2231): readlink(&(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)=""/173, 0xad) r0 = open(&(0x7f0000000040)='./dev\x00', 0x4c27e, 0x130) ftruncate(r0, 0x1) 4m0.906348683s ago: executing program 7 (id=2232): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0xfdf9) close(0x3) 4m0.764865338s ago: executing program 7 (id=2233): r0 = syz_socket_connect_nvme_tcp() (fail_nth: 17) sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) close(r0) 4m0.764709391s ago: executing program 7 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) 4m0.731436837s ago: executing program 7 (id=2235): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x0, r2, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x80000000}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000180)={0x8, r3}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f00000000c0)={0x8, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000122000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x101800, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x13, 0xfa00, {0x2, &(0x7f0000002100), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m44.327647139s ago: executing program 39 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r1, &(0x7f0000000300)=@generic={0x8, "ffff0000feff00"}, 0xc) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) 3m2.365410537s ago: executing program 1 (id=3297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x8000, 0xffffffff, 0xc, {{0x9, 0x4, 0x0, 0x10, 0x24, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x8, 0x9e, 0x0, 0x7, [0x1]}]}}}}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) 3m2.284710162s ago: executing program 1 (id=3300): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(r1, 0x0, 0x0, 0x1c) 3m1.938810432s ago: executing program 1 (id=3303): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff9d) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082", 0x6, 0xffffffffffffffff) 3m1.903248818s ago: executing program 1 (id=3306): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a1d804, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3m1.801374564s ago: executing program 1 (id=3310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x4000005, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x19) 3m1.429855302s ago: executing program 1 (id=3321): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000300), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 3m1.342684119s ago: executing program 40 (id=3321): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000300), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 2m45.706628697s ago: executing program 2 (id=3490): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m45.54247811s ago: executing program 2 (id=3494): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf50", 0x18}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2m45.495144836s ago: executing program 2 (id=3495): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m45.394563262s ago: executing program 2 (id=3497): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc', 0x9) 2m44.439794413s ago: executing program 2 (id=3502): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m44.302005199s ago: executing program 2 (id=3505): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x2278, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x10400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 2m28.252965842s ago: executing program 41 (id=3505): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x2278, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x10400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 2.710404933s ago: executing program 8 (id=5233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x10, 0x2082, 0x132, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000b0fffd000000119078ac1e0001e0000001000017c1009c90780100000003000000fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa03d3a793c99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829099446c31273fd7ec60f852bdbf775ec59036644ec92021d72dd3dc6cd23008a"], 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) connect$netlink(r0, &(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) 2.165238391s ago: executing program 8 (id=5244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)) 2.038193495s ago: executing program 3 (id=5245): socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) 2.037592457s ago: executing program 3 (id=5247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r7, 0x0, 0x0, 0x100, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 2.00543448s ago: executing program 8 (id=5248): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc', 0x9) 1.672269092s ago: executing program 3 (id=5251): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x358, 0x230, 0xa, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0x1c0, 0x230, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x800, 0x10, 0x7, 0xa696, 0x6b22, 0xb870, 0x20, 0x20}, {0xffffffffffffff7b}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3b8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000041000701feffffff00000000017c000004001e002000018010000400cab1893a20b8d2a93521800a0c001c8008465e00e00000010400028000c0fba6ab8889", @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40815}, 0x4004) 1.599993202s ago: executing program 3 (id=5253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0xd846deb6531cdeab}, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="40000000101402002abd7000fedbdf2508004a00000000000801010000000000080015000100000008004b001300000008000300020400000800010300000000c989195b21d12d02eb87b98e254ef8ef1a9947ed61597a090c86dece43d77392c7f249366c013d26b49372f08c956a156df19f959f04bf3fe4aea0d168eaebbda78b828809a8d70e63bbc3c97f01265429e2b20b6984889b32ac31cbd9cc18a86a5b2b9b99a6863cdd4105e9d599f91e9c6b38c9ae747ea4e015394ef65c09f1b91f7ada6aa1a9"], 0x40}, 0x1, 0x0, 0x0, 0xca718d62fee01fd1}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0x800040068], 0x2ffc, 0x557c1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) 1.341416067s ago: executing program 9 (id=5256): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (fail_nth: 8) 1.341251196s ago: executing program 9 (id=5257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x28, 0x7b, 0x403, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x10500}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008080) 1.258219037s ago: executing program 9 (id=5258): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'L-', 0x200}, 0x16, 0x1) syz_emit_vhci(0x0, 0x7) 1.049736845s ago: executing program 8 (id=5259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x3f) 930.534839ms ago: executing program 4 (id=5260): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 884.547426ms ago: executing program 8 (id=5261): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x524, 0x0) io_uring_enter(r0, 0x2219, 0xb4c3, 0x16, 0x0, 0x0) syz_io_uring_setup(0x4f95, 0x0, 0x0, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000) 882.91705ms ago: executing program 4 (id=5262): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000240)=""/157, 0x9d) 842.442022ms ago: executing program 4 (id=5263): mount$overlay(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303fa020303315ba6ad7edaa1200000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ata_device/dev1.0/id\x00', 0x0, 0x0) read(r5, &(0x7f0000000200)=""/1024, 0x400) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 691.442853ms ago: executing program 9 (id=5264): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 691.199874ms ago: executing program 9 (id=5265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0xe9fc, 0xac400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="391a25bd7000fddbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a0018000303030303030000140023800600120009000000080014"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x200}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000040)={0x9, r4, 0x2, {0xfffffffffffffffb, 0xfffffffffffffc01}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000009c0)=""/84) r13 = dup(r1) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_RUN(r14, 0xae80, 0x0) 638.786904ms ago: executing program 3 (id=5266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0f09800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140100001000010000000000000000000500000a2c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 551.786593ms ago: executing program 3 (id=5267): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc', 0x9) 467.232388ms ago: executing program 9 (id=5268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000340)=""/16, 0x10}], 0x1}, 0x2}], 0x2, 0x10160, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(r2, &(0x7f0000000000)='27', 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) 165.586142ms ago: executing program 4 (id=5269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xff9e, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 97.3171ms ago: executing program 4 (id=5270): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 95.157812ms ago: executing program 4 (id=5271): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x1) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x10122, 0x0) 0s ago: executing program 8 (id=5272): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000240)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x20000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001b40)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$MEMREADOOB64(r6, 0xc0184d16, &(0x7f0000000140)={0xffffffffffffffb7, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=5273): fsopen(&(0x7f0000000000)='exfat\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) inotify_init1(0x80000) write(r2, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450300207bacdf65c669c80defd400000000002f9078ac1414aaffffffff4000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 00 [ 408.273024][T20219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.273035][T20219] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 408.273062][T20219] [ 408.534086][ T5716] net_ratelimit: 394 callbacks suppressed [ 408.534101][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.534293][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.534398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.537104][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.537258][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.537874][ T43] audit: type=1400 audit(1791595518.009:1897): avc: denied { read } for pid=20231 comm="syz.9.4895" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.538077][ T43] audit: type=1400 audit(1791595518.009:1898): avc: denied { open } for pid=20231 comm="syz.9.4895" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.544290][ T43] audit: type=1400 audit(1791595518.018:1899): avc: denied { ioctl } for pid=20231 comm="syz.9.4895" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.570361][T20237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 408.604697][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.604986][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.605132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.608390][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.609355][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.671253][ T43] audit: type=1400 audit(1791595518.130:1900): avc: denied { ioctl } for pid=20231 comm="syz.9.4895" path="socket:[116324]" dev="sockfs" ino=116324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.675275][T20242] syzkaller0: entered promiscuous mode [ 408.675296][T20242] syzkaller0: entered allmulticast mode [ 408.899941][T20245] UDC core: g1: couldn't find an available UDC or it's busy [ 409.574724][ T43] audit: type=1326 audit(1791595518.982:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20260 comm="syz.3.4903" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31c79e159 code=0x0 [ 409.628000][ T43] audit: type=1326 audit(1791595519.029:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20260 comm="syz.3.4903" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31c79e159 code=0x0 [ 410.461622][T20268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.517941][T20270] syzkaller0: entered promiscuous mode [ 410.517961][T20270] syzkaller0: entered allmulticast mode [ 410.811497][T20292] UDC core: g1: couldn't find an available UDC or it's busy [ 410.868402][T20295] FAULT_INJECTION: forcing a failure. [ 410.868402][T20295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.868433][T20295] CPU: 3 UID: 0 PID: 20295 Comm: syz.3.4913 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.868459][T20295] Tainted: [L]=SOFTLOCKUP [ 410.868466][T20295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.868477][T20295] Call Trace: [ 410.868483][T20295] [ 410.868491][T20295] dump_stack_lvl+0x100/0x190 [ 410.868524][T20295] should_fail_ex.cold+0x5/0xa [ 410.868551][T20295] strncpy_from_user+0x3b/0x2d0 [ 410.868580][T20295] do_getname+0x78/0x390 [ 410.868629][T20295] user_path_at+0x26/0x60 [ 410.868653][T20295] __x64_sys_mount+0x1fb/0x310 [ 410.868679][T20295] ? __pfx___x64_sys_mount+0x10/0x10 [ 410.868705][T20295] do_syscall_64+0x123/0x790 [ 410.868729][T20295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.868748][T20295] RIP: 0033:0x7fe31c79e159 [ 410.868763][T20295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.868780][T20295] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 410.868805][T20295] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 410.868818][T20295] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 410.868829][T20295] RBP: 00007fe31d5cb090 R08: 00002000000004c0 R09: 0000000000000000 [ 410.868841][T20295] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 410.868851][T20295] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 410.868876][T20295] [ 410.990025][T20299] FAULT_INJECTION: forcing a failure. [ 410.990025][T20299] name failslab, interval 1, probability 0, space 0, times 0 [ 410.990063][T20299] CPU: 0 UID: 0 PID: 20299 Comm: syz.3.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.990093][T20299] Tainted: [L]=SOFTLOCKUP [ 410.990102][T20299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.990115][T20299] Call Trace: [ 410.990123][T20299] [ 410.990132][T20299] dump_stack_lvl+0x100/0x190 [ 410.990165][T20299] should_fail_ex.cold+0x5/0xa [ 410.990194][T20299] should_failslab+0xc2/0x120 [ 410.990224][T20299] __kmalloc_cache_node_noprof+0x94/0x720 [ 410.990255][T20299] ? blk_mq_init_tags+0x8c/0x300 [ 410.990279][T20299] blk_mq_init_tags+0x8c/0x300 [ 410.990301][T20299] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 410.990355][T20299] blk_mq_alloc_sched_tags+0x1de/0x350 [ 410.990389][T20299] blk_mq_alloc_sched_res+0x8e/0x250 [ 410.990418][T20299] elevator_change+0x136/0x530 [ 410.990447][T20299] elv_iosched_store+0x3be/0x460 [ 410.990473][T20299] ? __pfx_elv_iosched_store+0x10/0x10 [ 410.990506][T20299] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 410.990534][T20299] ? __pfx_elv_iosched_store+0x10/0x10 [ 410.990588][T20299] queue_attr_store+0x25f/0x2f0 [ 410.990611][T20299] ? __pfx_queue_attr_store+0x10/0x10 [ 410.990633][T20299] ? __lock_acquire+0x5c0/0x1f40 [ 410.990666][T20299] ? lock_acquire+0x1d1/0x380 [ 410.990689][T20299] ? sysfs_file_kobj+0x21/0x290 [ 410.990716][T20299] ? find_held_lock+0x2b/0x80 [ 410.990746][T20299] ? sysfs_file_kobj+0xe4/0x290 [ 410.990771][T20299] ? sysfs_file_kobj+0xe4/0x290 [ 410.990801][T20299] ? __pfx_queue_attr_store+0x10/0x10 [ 410.990826][T20299] sysfs_kf_write+0xf2/0x150 [ 410.990855][T20299] kernfs_fop_write_iter+0x3e0/0x5f0 [ 410.990879][T20299] ? __pfx_sysfs_kf_write+0x10/0x10 [ 410.990910][T20299] vfs_write+0x6af/0x1050 [ 410.990936][T20299] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 410.990962][T20299] ? __fget_files+0x34/0x3d0 [ 410.990990][T20299] ? __pfx_vfs_write+0x10/0x10 [ 410.991011][T20299] ? find_held_lock+0x2b/0x80 [ 410.991059][T20299] ksys_write+0x12a/0x250 [ 410.991082][T20299] ? __pfx_ksys_write+0x10/0x10 [ 410.991114][T20299] do_syscall_64+0x123/0x790 [ 410.991141][T20299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.991162][T20299] RIP: 0033:0x7fe31c79e159 [ 410.991180][T20299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.991198][T20299] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.991218][T20299] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 410.991231][T20299] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 410.991244][T20299] RBP: 00007fe31c83506b R08: 0000000000000000 R09: 0000000000000000 [ 410.991257][T20299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.991271][T20299] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 410.991301][T20299] [ 411.006378][T20299] FAULT_INJECTION: forcing a failure. [ 411.006378][T20299] name failslab, interval 1, probability 0, space 0, times 0 [ 411.006415][T20299] CPU: 2 UID: 0 PID: 20299 Comm: syz.3.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.006439][T20299] Tainted: [L]=SOFTLOCKUP [ 411.006446][T20299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.006457][T20299] Call Trace: [ 411.006466][T20299] [ 411.006474][T20299] dump_stack_lvl+0x100/0x190 [ 411.006504][T20299] should_fail_ex.cold+0x5/0xa [ 411.006532][T20299] should_failslab+0xc2/0x120 [ 411.006559][T20299] __kmalloc_cache_noprof+0x91/0x6d0 [ 411.006580][T20299] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 411.006613][T20299] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 411.006650][T20299] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 411.006686][T20299] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 411.006720][T20299] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 411.006747][T20299] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 411.006781][T20299] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 411.006801][T20299] ? __pfx___mutex_lock+0x10/0x10 [ 411.006846][T20299] ? tomoyo_path_number_perm+0x28f/0x580 [ 411.006891][T20299] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 411.006916][T20299] snd_pcm_oss_get_formats+0x7d/0x350 [ 411.006939][T20299] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 411.006968][T20299] snd_pcm_oss_ioctl+0x1870/0x3790 [ 411.006993][T20299] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 411.007019][T20299] ? selinux_file_ioctl+0x13b/0x290 [ 411.007043][T20299] ? selinux_file_ioctl+0xb6/0x290 [ 411.007070][T20299] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 411.007092][T20299] __x64_sys_ioctl+0x18e/0x210 [ 411.007118][T20299] do_syscall_64+0x123/0x790 [ 411.007143][T20299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.007164][T20299] RIP: 0033:0x7fe31c79e159 [ 411.007181][T20299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.007199][T20299] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.007221][T20299] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 411.007233][T20299] RDX: 0000200000000640 RSI: 00000000c0045005 RDI: 0000000000000009 [ 411.007245][T20299] RBP: 00007fe31c83506b R08: 0000000000000000 R09: 0000000000000000 [ 411.007258][T20299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.007268][T20299] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 411.007293][T20299] [ 411.095448][T20299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4915'. [ 411.168440][T20305] syzkaller0: entered promiscuous mode [ 411.168458][T20305] syzkaller0: entered allmulticast mode [ 411.656492][T20324] FAULT_INJECTION: forcing a failure. [ 411.656492][T20324] name failslab, interval 1, probability 0, space 0, times 0 [ 411.656514][T20324] CPU: 0 UID: 0 PID: 20324 Comm: syz.9.4924 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.656529][T20324] Tainted: [L]=SOFTLOCKUP [ 411.656534][T20324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.656540][T20324] Call Trace: [ 411.656544][T20324] [ 411.656549][T20324] dump_stack_lvl+0x100/0x190 [ 411.656569][T20324] should_fail_ex.cold+0x5/0xa [ 411.656608][T20324] should_failslab+0xc2/0x120 [ 411.656631][T20324] __kmalloc_noprof+0xfc/0x840 [ 411.656644][T20324] ? iter_file_splice_write+0x1d8/0x10b0 [ 411.656664][T20324] iter_file_splice_write+0x1d8/0x10b0 [ 411.656683][T20324] ? copy_splice_read+0x640/0xbb0 [ 411.656699][T20324] ? copy_splice_read+0x734/0xbb0 [ 411.656717][T20324] ? copy_splice_read+0x739/0xbb0 [ 411.656734][T20324] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.656753][T20324] ? __pfx_copy_splice_read+0x10/0x10 [ 411.656772][T20324] ? look_up_lock_class+0x64/0x120 [ 411.656785][T20324] ? rcu_is_watching+0x13/0xc0 [ 411.656806][T20324] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.656824][T20324] direct_splice_actor+0x192/0x690 [ 411.656842][T20324] splice_direct_to_actor+0x345/0xa30 [ 411.656861][T20324] ? __pfx_direct_splice_actor+0x10/0x10 [ 411.656880][T20324] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 411.656898][T20324] ? lock_acquire+0x1d1/0x380 [ 411.656913][T20324] do_splice_direct+0x174/0x240 [ 411.656930][T20324] ? __pfx_do_splice_direct+0x10/0x10 [ 411.656946][T20324] ? avc_policy_seqno+0x9/0x20 [ 411.656957][T20324] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 411.656974][T20324] ? bpf_lsm_file_permission+0x9/0x10 [ 411.656991][T20324] ? security_file_permission+0x76/0x210 [ 411.657007][T20324] ? rw_verify_area+0xce/0x6d0 [ 411.657020][T20324] do_sendfile+0xadc/0xe20 [ 411.657037][T20324] ? __pfx_do_sendfile+0x10/0x10 [ 411.657049][T20324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.657063][T20324] ? __fget_files+0x21f/0x3d0 [ 411.657082][T20324] __x64_sys_sendfile64+0x1d8/0x220 [ 411.657102][T20324] ? ksys_write+0x1ac/0x250 [ 411.657120][T20324] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 411.657152][T20324] do_syscall_64+0x123/0x790 [ 411.657175][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.657195][T20324] RIP: 0033:0x7f6b1859e159 [ 411.657208][T20324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.657219][T20324] RSP: 002b:00007f6b1945a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.657231][T20324] RAX: ffffffffffffffda RBX: 00007f6b18825fa0 RCX: 00007f6b1859e159 [ 411.657239][T20324] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 411.657246][T20324] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.657253][T20324] R10: 0000000000110000 R11: 0000000000000246 R12: 0000000000000002 [ 411.657260][T20324] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 411.657273][T20324] [ 411.731162][T20326] syzkaller0: entered promiscuous mode [ 411.731176][T20326] syzkaller0: entered allmulticast mode [ 411.841762][ T43] audit: type=1400 audit(1791595521.106:1903): avc: denied { connect } for pid=20319 comm="syz.4.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.964065][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4929'. [ 411.967914][T20339] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 411.968781][T20339] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 411.969779][T20339] debugfs: 'hsr1' already exists in 'hsr' [ 411.969793][T20339] Cannot create hsr debugfs directory [ 411.973164][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4929'. [ 412.147304][T20349] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 412.186539][T20357] syzkaller0: entered promiscuous mode [ 412.186554][T20357] syzkaller0: entered allmulticast mode [ 412.240441][T20359] »»»»»»: renamed from vlan0 (while UP) [ 412.519062][T10253] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 412.680185][T10253] usb 13-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 412.684049][T10253] usb 13-1: config 1 has an invalid interface number: 7 but max is 0 [ 412.684066][T10253] usb 13-1: config 1 has no interface number 0 [ 412.684086][T10253] usb 13-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 412.684100][T10253] usb 13-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 412.684114][T10253] usb 13-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 412.686140][T10253] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.686155][T10253] usb 13-1: Product: syz [ 412.686163][T10253] usb 13-1: Manufacturer: syz [ 412.686171][T10253] usb 13-1: SerialNumber: syz [ 412.691733][T20361] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 412.874144][T20390] syzkaller0: entered promiscuous mode [ 412.874166][T20390] syzkaller0: entered allmulticast mode [ 412.907756][T20361] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 412.932407][T20392] FAULT_INJECTION: forcing a failure. [ 412.932407][T20392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.932435][T20392] CPU: 0 UID: 0 PID: 20392 Comm: syz.3.4948 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.932469][T20392] Tainted: [L]=SOFTLOCKUP [ 412.932476][T20392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.932484][T20392] Call Trace: [ 412.932490][T20392] [ 412.932496][T20392] dump_stack_lvl+0x100/0x190 [ 412.932521][T20392] should_fail_ex.cold+0x5/0xa [ 412.932539][T20392] ? prepare_alloc_pages+0x16d/0x5b0 [ 412.932561][T20392] should_fail_alloc_page+0xeb/0x140 [ 412.932611][T20392] prepare_alloc_pages+0x1f0/0x5b0 [ 412.932639][T20392] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 412.932658][T20392] ? stack_trace_save+0x8e/0xc0 [ 412.932673][T20392] ? __pfx_stack_trace_save+0x10/0x10 [ 412.932687][T20392] ? stack_depot_save_flags+0x27/0x9f0 [ 412.932709][T20392] ? tomoyo_path_number_perm+0x46d/0x580 [ 412.932729][T20392] ? kasan_save_stack+0x3f/0x50 [ 412.932747][T20392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 412.932763][T20392] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 412.932777][T20392] ? fuse_ioctl_common+0x12d/0x1a0 [ 412.932793][T20392] ? do_syscall_64+0x123/0x790 [ 412.932808][T20392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.932838][T20392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.932857][T20392] ? policy_nodemask+0xed/0x4f0 [ 412.932879][T20392] alloc_pages_mpol+0x201/0x550 [ 412.932901][T20392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 412.932921][T20392] ? __kasan_kmalloc+0xaa/0xb0 [ 412.932939][T20392] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 412.932953][T20392] ? kasan_quarantine_put+0x104/0x240 [ 412.932972][T20392] folio_alloc_noprof+0x22/0x250 [ 412.932987][T20392] fuse_do_ioctl+0x67d/0x17d0 [ 412.933007][T20392] ? __pfx_fuse_do_ioctl+0x10/0x10 [ 412.933027][T20392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.933047][T20392] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 412.933085][T20392] fuse_ioctl_common+0x12d/0x1a0 [ 412.933104][T20392] ? __pfx_fuse_file_ioctl+0x10/0x10 [ 412.933126][T20392] __x64_sys_ioctl+0x18e/0x210 [ 412.933160][T20392] do_syscall_64+0x123/0x790 [ 412.933186][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.933207][T20392] RIP: 0033:0x7fe31c79e159 [ 412.933224][T20392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.933236][T20392] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.933249][T20392] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 412.933257][T20392] RDX: 0000000000000000 RSI: 00000000c018937b RDI: 0000000000000003 [ 412.933264][T20392] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 412.933272][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.933279][T20392] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 412.933295][T20392] [ 413.132356][T10253] sierra_net 13-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:06:07 [ 413.343116][T10253] sierra_net 13-1:1.7 wwan0: Submit SYNC failed -71 [ 413.343133][T10253] sierra_net 13-1:1.7 wwan0: Send SYNC failed, status -71 [ 413.343340][T10253] sierra_net 13-1:1.7 wwan0: Submit SYNC failed -71 [ 413.343351][T10253] sierra_net 13-1:1.7 wwan0: Send SYNC failed, status -71 [ 413.346100][T10253] usb 13-1: USB disconnect, device number 8 [ 413.347481][T10253] sierra_net 13-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem [ 413.440809][T10253] sierra_net 13-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 413.895044][ T5716] net_ratelimit: 286 callbacks suppressed [ 413.895063][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.920447][T20432] syzkaller0: entered promiscuous mode [ 413.920469][T20432] syzkaller0: entered allmulticast mode [ 413.940456][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.940959][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.941040][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.944422][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.944603][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.953163][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.953367][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.954028][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.956154][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.981874][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 413.985018][T10253] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 414.118047][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 414.118060][ T43] audit: type=1326 audit(1791595523.230:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.4.4962" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83619e159 code=0x0 [ 414.155164][T10253] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 414.156321][T10253] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 414.156340][T10253] usb 8-1: config 1 has no interface number 0 [ 414.158744][T10253] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.158764][T10253] usb 8-1: Product: syz [ 414.158776][T10253] usb 8-1: Manufacturer: syz [ 414.158789][T10253] usb 8-1: SerialNumber: syz [ 414.168629][T10253] usb 8-1: 3:0 : does not exist [ 414.168649][T10253] usb 8-1: 3:0 : does not exist [ 414.327906][T20451] netlink: 'syz.8.4966': attribute type 1 has an invalid length. [ 414.361094][T20455] syzkaller0: entered promiscuous mode [ 414.361117][T20455] syzkaller0: entered allmulticast mode [ 414.481140][T20459] FAULT_INJECTION: forcing a failure. [ 414.481140][T20459] name failslab, interval 1, probability 0, space 0, times 0 [ 414.481174][T20459] CPU: 1 UID: 0 PID: 20459 Comm: syz.8.4969 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.481200][T20459] Tainted: [L]=SOFTLOCKUP [ 414.481207][T20459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.481242][T20459] Call Trace: [ 414.481249][T20459] [ 414.481258][T20459] dump_stack_lvl+0x100/0x190 [ 414.481290][T20459] should_fail_ex.cold+0x5/0xa [ 414.481317][T20459] should_failslab+0xc2/0x120 [ 414.481345][T20459] kmem_cache_alloc_noprof+0x92/0x6a0 [ 414.481368][T20459] ? do_getname+0x35/0x390 [ 414.481391][T20459] do_getname+0x35/0x390 [ 414.481413][T20459] __x64_sys_rmdir+0x36/0x70 [ 414.481441][T20459] do_syscall_64+0x123/0x790 [ 414.481465][T20459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.481484][T20459] RIP: 0033:0x7fcf9259e159 [ 414.481500][T20459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.481517][T20459] RSP: 002b:00007fcf93491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 414.481536][T20459] RAX: ffffffffffffffda RBX: 00007fcf92825fa0 RCX: 00007fcf9259e159 [ 414.481549][T20459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 414.481560][T20459] RBP: 00007fcf93491090 R08: 0000000000000000 R09: 0000000000000000 [ 414.481571][T20459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.481584][T20459] R13: 00007fcf92826038 R14: 00007fcf92825fa0 R15: 00007ffd40f22228 [ 414.481609][T20459] [ 414.764873][T20470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4957'. [ 415.056330][T20480] FAULT_INJECTION: forcing a failure. [ 415.056330][T20480] name failslab, interval 1, probability 0, space 0, times 0 [ 415.056365][T20480] CPU: 2 UID: 0 PID: 20480 Comm: syz.9.4973 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.056391][T20480] Tainted: [L]=SOFTLOCKUP [ 415.056398][T20480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.056410][T20480] Call Trace: [ 415.056416][T20480] [ 415.056425][T20480] dump_stack_lvl+0x100/0x190 [ 415.056459][T20480] should_fail_ex.cold+0x5/0xa [ 415.056488][T20480] should_failslab+0xc2/0x120 [ 415.056516][T20480] __kvmalloc_node_noprof+0x113/0x9b0 [ 415.056542][T20480] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 415.056601][T20480] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 415.056637][T20480] mmu_topup_memory_caches+0x25/0x170 [ 415.056661][T20480] kvm_mmu_load+0xe8/0x2580 [ 415.056684][T20480] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 415.056713][T20480] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 415.056745][T20480] ? __pfx_kvm_mmu_load+0x10/0x10 [ 415.056765][T20480] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 415.056787][T20480] ? kvm_check_and_inject_events+0x896/0x1050 [ 415.056813][T20480] vcpu_run+0x419f/0x61a0 [ 415.056836][T20480] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 415.056873][T20480] ? __pfx_vcpu_run+0x10/0x10 [ 415.056899][T20480] ? lock_acquire+0x1d1/0x380 [ 415.056921][T20480] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 415.056947][T20480] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 415.056973][T20480] ? __local_bh_enable_ip+0xa5/0x120 [ 415.056999][T20480] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 415.057022][T20480] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 415.057052][T20480] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 415.057076][T20480] ? lock_acquire+0x1d1/0x380 [ 415.057098][T20480] ? do_raw_write_lock+0x11e/0x260 [ 415.057123][T20480] ? find_held_lock+0x2b/0x80 [ 415.057149][T20480] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 415.057173][T20480] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 415.057204][T20480] kvm_vcpu_ioctl+0x730/0x1700 [ 415.057232][T20480] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.057259][T20480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.057290][T20480] ? do_vfs_ioctl+0x226/0x13e0 [ 415.057313][T20480] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 415.057332][T20480] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 415.057361][T20480] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 415.057389][T20480] ? __fget_files+0x34/0x3d0 [ 415.057426][T20480] ? selinux_file_ioctl+0x13b/0x290 [ 415.057448][T20480] ? selinux_file_ioctl+0xb6/0x290 [ 415.057475][T20480] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.057504][T20480] __x64_sys_ioctl+0x18e/0x210 [ 415.057528][T20480] do_syscall_64+0x123/0x790 [ 415.057553][T20480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.057573][T20480] RIP: 0033:0x7f6b1859e159 [ 415.057590][T20480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.057607][T20480] RSP: 002b:00007f6b1945a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.057627][T20480] RAX: ffffffffffffffda RBX: 00007f6b18825fa0 RCX: 00007f6b1859e159 [ 415.057639][T20480] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 415.057650][T20480] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.057662][T20480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.057673][T20480] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 415.057700][T20480] [ 415.086230][ T5807] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 415.177990][T20489] syzkaller0: entered promiscuous mode [ 415.178014][T20489] syzkaller0: entered allmulticast mode [ 415.223079][ T5807] usb 13-1: device descriptor read/64, error -71 [ 415.479560][ T5807] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 415.586461][ T35] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 415.618973][ T5807] usb 13-1: device descriptor read/64, error -71 [ 415.736315][ T5807] usb usb13-port1: attempt power cycle [ 415.747485][ T35] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.750319][ T35] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.750341][ T35] usb 14-1: Product: syz [ 415.750351][ T35] usb 14-1: Manufacturer: syz [ 415.750363][ T35] usb 14-1: SerialNumber: syz [ 415.798773][ T43] audit: type=1400 audit(1791595524.802:1907): avc: denied { firmware_load } for pid=42 comm="kworker/3:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 415.808848][ T42] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.028599][T12522] usb 14-1: USB disconnect, device number 7 [ 416.099405][ T5807] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 416.121518][ T5807] usb 13-1: device descriptor read/8, error -71 [ 416.276148][ T43] audit: type=1400 audit(1791595525.251:1908): avc: denied { write } for pid=20509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.317902][ T43] audit: type=1400 audit(1791595525.288:1909): avc: denied { write } for pid=20514 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.377298][ T5807] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 416.402769][ T5807] usb 13-1: device descriptor read/8, error -71 [ 416.488794][ T43] audit: type=1400 audit(1791595525.457:1910): avc: denied { remount } for pid=20492 comm="syz.9.4978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 416.516417][ T5807] usb usb13-port1: unable to enumerate USB device [ 416.732761][ T9] usb 8-1: USB disconnect, device number 22 [ 416.782965][T20524] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 416.800050][T20524] input: syz0 as /devices/virtual/input/input24 [ 416.900982][ T42] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive [ 416.904756][ T42] ath9k_htc: Failed to initialize the device [ 416.907891][T12522] usb 14-1: ath9k_htc: USB layer deinitialized [ 417.810989][T20532] syzkaller0: entered promiscuous mode [ 417.811013][T20532] syzkaller0: entered allmulticast mode [ 417.819439][ T43] audit: type=1400 audit(1791595526.692:1911): avc: denied { create } for pid=20529 comm="syz.4.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.824634][ T43] audit: type=1400 audit(1791595526.701:1912): avc: denied { bind } for pid=20529 comm="syz.4.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.993778][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4990'. [ 418.048030][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4990'. [ 418.092121][T20544] binder: 20541:20544 unknown command 0 [ 418.092137][T20544] binder: 20541:20544 ioctl c0306201 200000000480 returned -22 [ 418.228681][T20556] syzkaller0: entered promiscuous mode [ 418.228696][T20556] syzkaller0: entered allmulticast mode [ 418.369222][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4999'. [ 418.374095][ T43] audit: type=1400 audit(1791595527.216:1913): avc: denied { lock } for pid=20560 comm="syz.8.4999" path="socket:[122319]" dev="sockfs" ino=122319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 419.241566][ C2] net_ratelimit: 221 callbacks suppressed [ 419.241580][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.242028][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.242127][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.243775][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.243900][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.262988][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.291937][ T43] audit: type=1400 audit(1791595528.077:1914): avc: denied { setattr } for pid=20569 comm="syz.8.5002" name="unix" dev="proc" ino=4026534384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 419.305687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.306003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.306123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.307678][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.328506][ T43] audit: type=1400 audit(1791595528.114:1915): avc: denied { mounton } for pid=20569 comm="syz.8.5002" path="/164/sys_mnt" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 419.549073][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 419.579533][T20595] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 419.581737][T20595] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 419.811471][T20571] cgroup: fork rejected by pids controller in /syz8 [ 419.854120][T20616] syzkaller0: entered promiscuous mode [ 419.854142][T20616] syzkaller0: entered allmulticast mode [ 420.136277][T20633] syzkaller0: entered promiscuous mode [ 420.136297][T20633] syzkaller0: entered allmulticast mode [ 420.138995][T20633] FAULT_INJECTION: forcing a failure. [ 420.138995][T20633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.139025][T20633] CPU: 3 UID: 0 PID: 20633 Comm: syz.4.5008 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.139049][T20633] Tainted: [L]=SOFTLOCKUP [ 420.139055][T20633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 420.139065][T20633] Call Trace: [ 420.139072][T20633] [ 420.139079][T20633] dump_stack_lvl+0x100/0x190 [ 420.139133][T20633] should_fail_ex.cold+0x5/0xa [ 420.139159][T20633] _copy_to_user+0x32/0xd0 [ 420.139182][T20633] simple_read_from_buffer+0xcb/0x170 [ 420.139217][T20633] proc_fail_nth_read+0x1af/0x230 [ 420.139242][T20633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.139269][T20633] ? rw_verify_area+0xce/0x6d0 [ 420.139287][T20633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.139310][T20633] vfs_read+0x1e4/0xb40 [ 420.139330][T20633] ? lock_acquire+0x1d1/0x380 [ 420.139350][T20633] ? __fget_files+0x34/0x3d0 [ 420.139374][T20633] ? __pfx_vfs_read+0x10/0x10 [ 420.139393][T20633] ? find_held_lock+0x2b/0x80 [ 420.139420][T20633] ? __fget_files+0x215/0x3d0 [ 420.139448][T20633] ? __fget_files+0x21f/0x3d0 [ 420.139480][T20633] ksys_read+0x12a/0x250 [ 420.139503][T20633] ? __pfx_ksys_read+0x10/0x10 [ 420.139528][T20633] do_syscall_64+0x123/0x790 [ 420.139549][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.139567][T20633] RIP: 0033:0x7fe83615e98e [ 420.139582][T20633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.139598][T20633] RSP: 002b:00007fe837147fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.139615][T20633] RAX: ffffffffffffffda RBX: 00007fe8371486c0 RCX: 00007fe83615e98e [ 420.139627][T20633] RDX: 000000000000000f RSI: 00007fe8371480a0 RDI: 0000000000000008 [ 420.139637][T20633] RBP: 00007fe837148090 R08: 0000000000000000 R09: 0000000000000000 [ 420.139648][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.139658][T20633] R13: 00007fe836426038 R14: 00007fe836425fa0 R15: 00007ffce8066b98 [ 420.139683][T20633] [ 420.278550][T20638] bridge0: port 3(syz_tun) entered blocking state [ 420.278634][T20638] bridge0: port 3(syz_tun) entered disabled state [ 420.278772][T20638] syz_tun: entered allmulticast mode [ 420.280109][T20638] syz_tun: entered promiscuous mode [ 420.280738][T20638] bridge0: port 3(syz_tun) entered blocking state [ 420.280826][T20638] bridge0: port 3(syz_tun) entered forwarding state [ 420.326950][T20641] FAULT_INJECTION: forcing a failure. [ 420.326950][T20641] name failslab, interval 1, probability 0, space 0, times 0 [ 420.326983][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.3.5010 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.327011][T20641] Tainted: [L]=SOFTLOCKUP [ 420.327019][T20641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 420.327031][T20641] Call Trace: [ 420.327038][T20641] [ 420.327047][T20641] dump_stack_lvl+0x100/0x190 [ 420.327080][T20641] should_fail_ex.cold+0x5/0xa [ 420.327117][T20641] should_failslab+0xc2/0x120 [ 420.327145][T20641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 420.327170][T20641] ? alloc_pid+0x1bd/0x1930 [ 420.327203][T20641] alloc_pid+0x1bd/0x1930 [ 420.327236][T20641] ? __pfx_alloc_pid+0x10/0x10 [ 420.327273][T20641] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.327293][T20641] ? __debug_object_init+0x2de/0x3d0 [ 420.327335][T20641] ? fpu_clone+0x226/0x7a0 [ 420.327365][T20641] ? copy_thread+0x729/0xbe0 [ 420.327391][T20641] copy_process+0x4de6/0x8380 [ 420.327431][T20641] ? __pfx_copy_process+0x10/0x10 [ 420.327454][T20641] ? kasan_save_track+0x14/0x30 [ 420.327479][T20641] ? __kasan_kmalloc+0xaa/0xb0 [ 420.327505][T20641] ? lockdep_init_map_type+0x5c/0x250 [ 420.327531][T20641] ? lockdep_init_map_type+0x5c/0x250 [ 420.327556][T20641] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 420.327588][T20641] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 420.327615][T20641] vhost_task_create+0x1db/0x370 [ 420.327636][T20641] ? __pfx_vhost_task_create+0x10/0x10 [ 420.327664][T20641] ? __pfx_vhost_task_fn+0x10/0x10 [ 420.327686][T20641] ? register_lock_class+0x3f/0x7b0 [ 420.327709][T20641] ? rcu_is_watching+0x13/0xc0 [ 420.327738][T20641] ? trace_contention_end+0x126/0x160 [ 420.327769][T20641] kvm_mmu_post_init_vm+0x1b3/0x360 [ 420.327795][T20641] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 420.327821][T20641] ? __pfx___mutex_lock+0x10/0x10 [ 420.327842][T20641] ? kasan_quarantine_put+0x104/0x240 [ 420.327871][T20641] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 420.327895][T20641] ? lock_acquire+0x1d1/0x380 [ 420.327917][T20641] ? do_raw_write_lock+0x11e/0x260 [ 420.327943][T20641] ? find_held_lock+0x2b/0x80 [ 420.327971][T20641] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 420.327994][T20641] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 420.328026][T20641] kvm_vcpu_ioctl+0x730/0x1700 [ 420.328055][T20641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.328084][T20641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.328116][T20641] ? do_vfs_ioctl+0x226/0x13e0 [ 420.328140][T20641] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 420.328183][T20641] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 420.328214][T20641] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 420.328244][T20641] ? __fget_files+0x34/0x3d0 [ 420.328283][T20641] ? selinux_file_ioctl+0x13b/0x290 [ 420.328308][T20641] ? selinux_file_ioctl+0xb6/0x290 [ 420.328335][T20641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.328364][T20641] __x64_sys_ioctl+0x18e/0x210 [ 420.328390][T20641] do_syscall_64+0x123/0x790 [ 420.328414][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.328435][T20641] RIP: 0033:0x7fe31c79e159 [ 420.328452][T20641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.328471][T20641] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.328492][T20641] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 420.328505][T20641] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 420.328518][T20641] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 420.328530][T20641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.328543][T20641] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 420.328598][T20641] [ 420.417084][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5014'. [ 420.434867][T20649] ªªªªªª: renamed from vlan0 [ 420.443581][ T43] audit: type=1400 audit(1791595529.153:1916): avc: denied { watch watch_reads } for pid=20647 comm="syz.4.5013" path="/446/file5" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.446303][T20650] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 420.448739][T20650] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 420.552689][T20654] syzkaller0: entered promiscuous mode [ 420.552702][T20654] syzkaller0: entered allmulticast mode [ 420.645637][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 420.687704][T20663] netlink: 'syz.9.5019': attribute type 4 has an invalid length. [ 420.708716][T20663] netlink: 'syz.9.5019': attribute type 4 has an invalid length. [ 420.760466][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5022'. [ 420.815770][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5022'. [ 420.930729][ T3269] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 420.934987][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5024'. [ 421.101318][ T3269] usb 9-1: Using ep0 maxpacket: 8 [ 421.102045][ T3269] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 421.103405][ T3269] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.103426][ T3269] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 421.103517][ T3269] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 421.103541][ T3269] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 421.103577][ T3269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.118416][ T3269] hub 9-1:1.0: bad descriptor, ignoring hub [ 421.118441][ T3269] hub 9-1:1.0: probe with driver hub failed with error -5 [ 421.118859][ T3269] cdc_wdm 9-1:1.0: skipping garbage [ 421.118873][ T3269] cdc_wdm 9-1:1.0: skipping garbage [ 421.152494][ T3269] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 421.152514][ T3269] cdc_wdm 9-1:1.0: Unknown control protocol [ 421.166711][T20683] syzkaller0: entered promiscuous mode [ 421.166734][T20683] syzkaller0: entered allmulticast mode [ 421.194845][T20685] »»»»»»: renamed from vlan0 (while UP) [ 421.293676][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5028'. [ 421.326594][ T43] audit: type=1400 audit(1791595529.976:1917): avc: denied { read write } for pid=20660 comm="syz.4.5018" name="cdc-wdm0" dev="devtmpfs" ino=3360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 421.326642][ T43] audit: type=1400 audit(1791595529.985:1918): avc: denied { open } for pid=20660 comm="syz.4.5018" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 421.628399][T20696] kvm [20695]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 421.628714][T20696] kvm [20695]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 421.663423][T20696] kvm [20695]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 421.690826][T20696] kvm [20695]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 421.691247][T20696] kvm [20695]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 421.719329][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'. [ 421.729619][T20702] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 421.730775][T20702] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 421.737863][T20702] debugfs: 'hsr1' already exists in 'hsr' [ 421.737886][T20702] Cannot create hsr debugfs directory [ 421.743082][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'. [ 421.817880][T20662] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 421.926490][T20711] syzkaller0: entered promiscuous mode [ 421.926513][T20711] syzkaller0: entered allmulticast mode [ 422.048516][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5037'. [ 422.054287][T20716] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 422.057666][T20716] input: syz0 as /devices/virtual/input/input25 [ 422.322958][ T5827] usb 9-1: USB disconnect, device number 4 [ 422.383913][ T5733] Bluetooth: hci4: command 0x0406 tx timeout [ 422.765057][T20740] syzkaller0: entered promiscuous mode [ 422.765071][T20740] syzkaller0: entered allmulticast mode [ 422.893403][T20744] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 422.895623][T20744] input: syz0 as /devices/virtual/input/input26 [ 422.991840][T20746] overlayfs: overlapping lowerdir path [ 423.435096][T20768] syzkaller0: entered promiscuous mode [ 423.435109][T20768] syzkaller0: entered allmulticast mode [ 423.530144][T20772] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 423.531933][T20772] input: syz0 as /devices/virtual/input/input27 [ 423.766449][T20782] UDC core: g1: couldn't find an available UDC or it's busy [ 424.251084][T20798] syzkaller0: entered promiscuous mode [ 424.251098][T20798] syzkaller0: entered allmulticast mode [ 424.438223][T20802] bridge0: port 3(syz_tun) entered disabled state [ 424.438378][T20802] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.438942][T20802] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.567839][T20804] netlink: 'syz.9.5068': attribute type 28 has an invalid length. [ 424.567863][T20804] netlink: 'syz.9.5068': attribute type 3 has an invalid length. [ 424.631687][ T5716] net_ratelimit: 360 callbacks suppressed [ 424.631705][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.631892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.632029][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.634292][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.634406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.635856][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.635982][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.658782][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.661730][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.661843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.690692][T20825] syzkaller0: entered promiscuous mode [ 424.690815][T20825] syzkaller0: entered allmulticast mode [ 424.923472][T20839] UDC core: g1: couldn't find an available UDC or it's busy [ 425.007752][T20842] FAULT_INJECTION: forcing a failure. [ 425.007752][T20842] name failslab, interval 1, probability 0, space 0, times 0 [ 425.007776][T20842] CPU: 2 UID: 0 PID: 20842 Comm: syz.3.5079 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.007797][T20842] Tainted: [L]=SOFTLOCKUP [ 425.007802][T20842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.007823][T20842] Call Trace: [ 425.007827][T20842] [ 425.007832][T20842] dump_stack_lvl+0x100/0x190 [ 425.007855][T20842] should_fail_ex.cold+0x5/0xa [ 425.007872][T20842] should_failslab+0xc2/0x120 [ 425.007890][T20842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 425.007906][T20842] ? net_alloc_generic+0x1e/0x70 [ 425.007923][T20842] ? copy_net_ns+0xe8/0x7a0 [ 425.007937][T20842] copy_net_ns+0xe8/0x7a0 [ 425.007947][T20842] ? copy_cgroup_ns+0x71/0x970 [ 425.007965][T20842] create_new_namespaces+0x3ea/0xac0 [ 425.007981][T20842] unshare_nsproxy_namespaces+0xf2/0x220 [ 425.007996][T20842] ksys_unshare+0x4a2/0xa70 [ 425.008011][T20842] ? __pfx_ksys_unshare+0x10/0x10 [ 425.008032][T20842] __x64_sys_unshare+0x31/0x40 [ 425.008046][T20842] do_syscall_64+0x123/0x790 [ 425.008061][T20842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.008073][T20842] RIP: 0033:0x7fe31c79e159 [ 425.008083][T20842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.008093][T20842] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 425.008105][T20842] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 425.008112][T20842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040000 [ 425.008119][T20842] RBP: 00007fe31c83506b R08: 0000000000000000 R09: 0000000000000000 [ 425.008125][T20842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.008132][T20842] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 425.008146][T20842] [ 425.217447][T20851] __nla_validate_parse: 7 callbacks suppressed [ 425.217465][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5083'. [ 425.273025][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5083'. [ 425.444988][T20860] syzkaller0: entered promiscuous mode [ 425.445010][T20860] syzkaller0: entered allmulticast mode [ 425.734206][ T43] audit: type=1400 audit(1791595534.102:1919): avc: denied { ioctl } for pid=20863 comm="syz.9.5088" path="socket:[121833]" dev="sockfs" ino=121833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.878553][ T9] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 426.039533][ T9] usb 13-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 426.040501][ T9] usb 13-1: config 1 has an invalid interface number: 3 but max is 0 [ 426.040602][ T9] usb 13-1: config 1 has no interface number 0 [ 426.042459][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.042473][ T9] usb 13-1: Product: syz [ 426.042481][ T9] usb 13-1: Manufacturer: syz [ 426.042488][ T9] usb 13-1: SerialNumber: syz [ 426.048790][ T9] usb 13-1: 3:0 : does not exist [ 426.048803][ T9] usb 13-1: 3:0 : does not exist [ 426.180787][T20883] syzkaller0: entered promiscuous mode [ 426.180809][T20883] syzkaller0: entered allmulticast mode [ 426.268925][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5096'. [ 426.434675][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5098'. [ 426.444300][T20897] UDC core: g1: couldn't find an available UDC or it's busy [ 426.644916][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5084'. [ 427.043490][ T42] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 427.204398][ T42] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 427.205339][ T42] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 427.205359][ T42] usb 9-1: config 1 has no interface number 0 [ 427.207271][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.207293][ T42] usb 9-1: Product: syz [ 427.207307][ T42] usb 9-1: Manufacturer: syz [ 427.207321][ T42] usb 9-1: SerialNumber: syz [ 427.219366][ T42] usb 9-1: 3:0 : does not exist [ 427.219388][ T42] usb 9-1: 3:0 : does not exist [ 427.579920][T20916] syzkaller0: entered promiscuous mode [ 427.579942][T20916] syzkaller0: entered allmulticast mode [ 427.685693][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 427.692842][T20918] netlink: 'syz.3.5105': attribute type 28 has an invalid length. [ 427.692862][T20918] netlink: 'syz.3.5105': attribute type 3 has an invalid length. [ 427.692872][T20918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5105'. [ 427.730176][T20918] mac80211_hwsim hwsim30 wlan0 (unregistering): left promiscuous mode [ 427.811016][T20919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5101'. [ 428.612286][T12522] usb 13-1: USB disconnect, device number 13 [ 428.715662][T20921] kvm [20920]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 428.715970][T20921] kvm [20920]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 428.729140][T20921] kvm [20920]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 428.745803][T20921] kvm [20920]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 428.746091][T20921] kvm [20920]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 428.862380][T20927] »»»»»»: renamed from vlan0 (while UP) [ 428.902582][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5107'. [ 428.988787][T20937] input: syz0 as /devices/virtual/input/input29 [ 429.090921][T20940] overlayfs: overlapping lowerdir path [ 429.124718][T20941] UDC core: g1: couldn't find an available UDC or it's busy [ 429.175681][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5113'. [ 429.192973][T20943] overlayfs: overlapping lowerdir path [ 429.317250][T20945] netlink: 'syz.9.5114': attribute type 28 has an invalid length. [ 429.317270][T20945] netlink: 'syz.9.5114': attribute type 3 has an invalid length. [ 429.479803][T20953] FAULT_INJECTION: forcing a failure. [ 429.479803][T20953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.479834][T20953] CPU: 2 UID: 0 PID: 20953 Comm: syz.9.5116 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.479860][T20953] Tainted: [L]=SOFTLOCKUP [ 429.479866][T20953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.479878][T20953] Call Trace: [ 429.479885][T20953] [ 429.479893][T20953] dump_stack_lvl+0x100/0x190 [ 429.479921][T20953] should_fail_ex.cold+0x5/0xa [ 429.479942][T20953] ? prepare_alloc_pages+0x16d/0x5b0 [ 429.479969][T20953] should_fail_alloc_page+0xeb/0x140 [ 429.479996][T20953] prepare_alloc_pages+0x1f0/0x5b0 [ 429.480044][T20953] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 429.480068][T20953] ? lock_acquire+0x1d1/0x380 [ 429.480087][T20953] ? page_table_check_set+0x11d/0x580 [ 429.480114][T20953] ? find_held_lock+0x2b/0x80 [ 429.480140][T20953] ? page_table_check_set+0x30f/0x580 [ 429.480163][T20953] ? page_table_check_set+0x30f/0x580 [ 429.480189][T20953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 429.480209][T20953] ? page_table_check_set+0x31e/0x580 [ 429.480253][T20953] ? __page_table_check_ptes_set+0x1d5/0x530 [ 429.480283][T20953] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 429.480311][T20953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.480338][T20953] ? xas_find+0x32c/0x8e0 [ 429.480365][T20953] ? find_held_lock+0x2b/0x80 [ 429.480389][T20953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.480412][T20953] ? policy_nodemask+0xed/0x4f0 [ 429.480439][T20953] alloc_pages_mpol+0x201/0x550 [ 429.480467][T20953] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 429.480496][T20953] folio_alloc_mpol_noprof+0x36/0x260 [ 429.480538][T20953] vma_alloc_folio_noprof+0xed/0x1d0 [ 429.480555][T20953] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 429.480583][T20953] do_anonymous_page+0xac9/0x2050 [ 429.480617][T20953] ? __pfx_do_anonymous_page+0x10/0x10 [ 429.480641][T20953] ? rcu_read_unlock+0x2d/0xb0 [ 429.480658][T20953] ? rcu_read_unlock+0x2d/0xb0 [ 429.480675][T20953] ? __pte_offset_map+0x179/0x310 [ 429.480701][T20953] __handle_mm_fault+0x1ff3/0x2f60 [ 429.480732][T20953] ? lock_vma_under_rcu+0x11d/0x590 [ 429.480757][T20953] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.480788][T20953] ? lock_vma_under_rcu+0x17c/0x590 [ 429.480829][T20953] handle_mm_fault+0x363/0xa20 [ 429.480860][T20953] do_user_addr_fault+0x59c/0x12f0 [ 429.480890][T20953] exc_page_fault+0x6f/0xd0 [ 429.480910][T20953] asm_exc_page_fault+0x26/0x30 [ 429.480928][T20953] RIP: 0033:0x7f6b1845f6cb [ 429.480944][T20953] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 429.480962][T20953] RSP: 002b:00007f6b19458fa0 EFLAGS: 00010206 [ 429.480976][T20953] RAX: 0000000000000000 RBX: 00007f6b18825fa0 RCX: 0000000000000000 [ 429.480987][T20953] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000300 [ 429.480999][T20953] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 429.481010][T20953] R10: 0000200000000300 R11: 0000000000000000 R12: 0000000000000001 [ 429.481021][T20953] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 429.481047][T20953] [ 429.481935][T20953] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 429.612744][T20960] kvm [20954]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 429.792113][ T42] usb 9-1: USB disconnect, device number 5 [ 429.829051][T20969] FAULT_INJECTION: forcing a failure. [ 429.829051][T20969] name failslab, interval 1, probability 0, space 0, times 0 [ 429.829083][T20969] CPU: 0 UID: 0 PID: 20969 Comm: syz.9.5123 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.829110][T20969] Tainted: [L]=SOFTLOCKUP [ 429.829117][T20969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.829128][T20969] Call Trace: [ 429.829135][T20969] [ 429.829143][T20969] dump_stack_lvl+0x100/0x190 [ 429.829182][T20969] should_fail_ex.cold+0x5/0xa [ 429.829210][T20969] should_failslab+0xc2/0x120 [ 429.829236][T20969] __kmalloc_noprof+0xfc/0x840 [ 429.829259][T20969] ? __pfx_dynamic_dname+0x10/0x10 [ 429.829282][T20969] ? tomoyo_encode2+0xfb/0x3c0 [ 429.829313][T20969] tomoyo_encode2+0xfb/0x3c0 [ 429.829342][T20969] tomoyo_encode+0x29/0x50 [ 429.829366][T20969] tomoyo_realpath_from_path+0x18c/0x690 [ 429.829398][T20969] tomoyo_path_number_perm+0x23c/0x580 [ 429.829420][T20969] ? tomoyo_path_number_perm+0x22e/0x580 [ 429.829444][T20969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.829476][T20969] ? __lock_acquire+0x5c0/0x1f40 [ 429.829511][T20969] ? __fget_files+0x34/0x3d0 [ 429.829537][T20969] ? find_held_lock+0x2b/0x80 [ 429.829564][T20969] ? hook_file_ioctl_common+0x140/0x440 [ 429.829598][T20969] ? __fget_files+0x21f/0x3d0 [ 429.829628][T20969] security_file_ioctl+0xd3/0x230 [ 429.829653][T20969] __x64_sys_ioctl+0xb7/0x210 [ 429.829676][T20969] do_syscall_64+0x123/0x790 [ 429.829699][T20969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.829719][T20969] RIP: 0033:0x7f6b1859e159 [ 429.829735][T20969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.829751][T20969] RSP: 002b:00007f6b1945a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.829772][T20969] RAX: ffffffffffffffda RBX: 00007f6b18825fa0 RCX: 00007f6b1859e159 [ 429.829785][T20969] RDX: 0000200000000300 RSI: 000000004008ae89 RDI: 0000000000000005 [ 429.829795][T20969] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 429.829808][T20969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.829818][T20969] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 429.829842][T20969] [ 429.829857][T20969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.843947][T20972] input: syz0 as /devices/virtual/input/input31 [ 429.918663][T20976] syzkaller0: entered promiscuous mode [ 429.918681][T20976] syzkaller0: entered allmulticast mode [ 430.023674][ T5716] net_ratelimit: 283 callbacks suppressed [ 430.023690][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.023929][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.025255][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.026820][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.027082][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.074085][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.074371][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.074391][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.074513][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.074614][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.108791][T20983] FAULT_INJECTION: forcing a failure. [ 430.108791][T20983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.108821][T20983] CPU: 0 UID: 0 PID: 20983 Comm: syz.3.5127 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.108844][T20983] Tainted: [L]=SOFTLOCKUP [ 430.108850][T20983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.108861][T20983] Call Trace: [ 430.108867][T20983] [ 430.108874][T20983] dump_stack_lvl+0x100/0x190 [ 430.108906][T20983] should_fail_ex.cold+0x5/0xa [ 430.108931][T20983] ? prepare_alloc_pages+0x16d/0x5b0 [ 430.108958][T20983] should_fail_alloc_page+0xeb/0x140 [ 430.108982][T20983] prepare_alloc_pages+0x1f0/0x5b0 [ 430.109009][T20983] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 430.109029][T20983] ? __pfx_get_page_from_freelist+0x10/0x10 [ 430.109049][T20983] ? prepare_alloc_pages+0x1f0/0x5b0 [ 430.109075][T20983] ? is_bpf_text_address+0x94/0x1a0 [ 430.109102][T20983] ? rcu_is_watching+0x13/0xc0 [ 430.109126][T20983] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 430.109148][T20983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 430.109172][T20983] ? stack_trace_save+0x8e/0xc0 [ 430.109189][T20983] ? __pfx_stack_trace_save+0x10/0x10 [ 430.109205][T20983] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.109227][T20983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 430.109247][T20983] ? is_bpf_text_address+0x94/0x1a0 [ 430.109277][T20983] ? kasan_save_track+0x14/0x30 [ 430.109298][T20983] ? __kasan_slab_alloc+0x89/0x90 [ 430.109318][T20983] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 430.109337][T20983] ? alloc_vmap_area+0x640/0x2bb0 [ 430.109356][T20983] ? __get_vm_area_node+0x1ed/0x350 [ 430.109381][T20983] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 430.109406][T20983] ? __vmalloc_node_noprof+0xad/0xf0 [ 430.109428][T20983] ? copy_process+0x803/0x8380 [ 430.109446][T20983] ? vhost_task_create+0x1db/0x370 [ 430.109460][T20983] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 430.109480][T20983] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 430.109499][T20983] ? kvm_vcpu_ioctl+0x730/0x1700 [ 430.109523][T20983] ? __x64_sys_ioctl+0x18e/0x210 [ 430.109545][T20983] ? do_syscall_64+0x123/0x790 [ 430.109564][T20983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.109587][T20983] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 430.109612][T20983] ? policy_nodemask+0xed/0x4f0 [ 430.109653][T20983] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 430.109691][T20983] __kasan_populate_vmalloc+0xf0/0x210 [ 430.109720][T20983] alloc_vmap_area+0x95d/0x2bb0 [ 430.109754][T20983] ? kasan_save_track+0x14/0x30 [ 430.109774][T20983] ? __kasan_kmalloc+0xaa/0xb0 [ 430.109794][T20983] ? __pfx_alloc_vmap_area+0x10/0x10 [ 430.109816][T20983] ? __get_vm_area_node+0x124/0x350 [ 430.109846][T20983] __get_vm_area_node+0x1ed/0x350 [ 430.109875][T20983] __vmalloc_node_range_noprof+0x268/0x1420 [ 430.109900][T20983] ? vhost_task_create+0x1db/0x370 [ 430.109915][T20983] ? lock_acquire+0x1d1/0x380 [ 430.109933][T20983] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 430.109954][T20983] ? find_held_lock+0x2b/0x80 [ 430.109981][T20983] ? rcu_read_unlock+0x17/0x60 [ 430.110003][T20983] ? vhost_task_create+0x1db/0x370 [ 430.110023][T20983] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 430.110043][T20983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 430.110070][T20983] ? rcu_is_watching+0x13/0xc0 [ 430.110093][T20983] ? trace_kmem_cache_alloc+0xdd/0x100 [ 430.110118][T20983] ? vhost_task_create+0x1db/0x370 [ 430.110137][T20983] __vmalloc_node_noprof+0xad/0xf0 [ 430.110165][T20983] ? vhost_task_create+0x1db/0x370 [ 430.110184][T20983] copy_process+0x803/0x8380 [ 430.110216][T20983] ? __pfx_copy_process+0x10/0x10 [ 430.110235][T20983] ? kasan_save_track+0x14/0x30 [ 430.110256][T20983] ? __kasan_kmalloc+0xaa/0xb0 [ 430.110277][T20983] ? lockdep_init_map_type+0x5c/0x250 [ 430.110302][T20983] ? lockdep_init_map_type+0x5c/0x250 [ 430.110327][T20983] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 430.110357][T20983] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 430.110380][T20983] vhost_task_create+0x1db/0x370 [ 430.110396][T20983] ? __pfx_vhost_task_create+0x10/0x10 [ 430.110419][T20983] ? __pfx_vhost_task_fn+0x10/0x10 [ 430.110438][T20983] ? register_lock_class+0x3f/0x7b0 [ 430.110461][T20983] ? rcu_is_watching+0x13/0xc0 [ 430.110487][T20983] ? trace_contention_end+0x126/0x160 [ 430.110512][T20983] kvm_mmu_post_init_vm+0x1b3/0x360 [ 430.110533][T20983] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 430.110554][T20983] ? __pfx___mutex_lock+0x10/0x10 [ 430.110571][T20983] ? kasan_quarantine_put+0x104/0x240 [ 430.110596][T20983] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 430.110620][T20983] ? lock_acquire+0x1d1/0x380 [ 430.110641][T20983] ? do_raw_write_lock+0x11e/0x260 [ 430.110662][T20983] ? find_held_lock+0x2b/0x80 [ 430.110685][T20983] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 430.110707][T20983] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 430.110739][T20983] kvm_vcpu_ioctl+0x730/0x1700 [ 430.110768][T20983] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.110794][T20983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.110817][T20983] ? do_vfs_ioctl+0x226/0x13e0 [ 430.110836][T20983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 430.110853][T20983] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 430.110878][T20983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 430.110906][T20983] ? __fget_files+0x34/0x3d0 [ 430.110942][T20983] ? selinux_file_ioctl+0x13b/0x290 [ 430.110963][T20983] ? selinux_file_ioctl+0xb6/0x290 [ 430.110985][T20983] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.111009][T20983] __x64_sys_ioctl+0x18e/0x210 [ 430.111030][T20983] do_syscall_64+0x123/0x790 [ 430.111052][T20983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.111072][T20983] RIP: 0033:0x7fe31c79e159 [ 430.111090][T20983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.111106][T20983] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.111124][T20983] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 430.111135][T20983] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 430.111145][T20983] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 430.111156][T20983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.111166][T20983] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 430.111190][T20983] [ 430.120677][T20983] warn_alloc: 1 callbacks suppressed [ 430.120693][T20983] syz.3.5127: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 430.120756][T20983] CPU: 0 UID: 0 PID: 20983 Comm: syz.3.5127 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.120778][T20983] Tainted: [L]=SOFTLOCKUP [ 430.120785][T20983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.120794][T20983] Call Trace: [ 430.120800][T20983] [ 430.120808][T20983] dump_stack_lvl+0x100/0x190 [ 430.120839][T20983] warn_alloc.cold+0x9e/0xb2 [ 430.120863][T20983] ? __pfx_warn_alloc+0x10/0x10 [ 430.120882][T20983] ? lockdep_hardirqs_on+0x7d/0x110 [ 430.120902][T20983] ? __get_vm_area_node+0x2f0/0x350 [ 430.120930][T20983] ? __get_vm_area_node+0x22b/0x350 [ 430.120957][T20983] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 430.120982][T20983] ? lock_acquire+0x1d1/0x380 [ 430.121005][T20983] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 430.121028][T20983] ? find_held_lock+0x2b/0x80 [ 430.121056][T20983] ? rcu_read_unlock+0x17/0x60 [ 430.121074][T20983] ? vhost_task_create+0x1db/0x370 [ 430.121092][T20983] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 430.121112][T20983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 430.121139][T20983] ? rcu_is_watching+0x13/0xc0 [ 430.121167][T20983] ? trace_kmem_cache_alloc+0xdd/0x100 [ 430.121194][T20983] ? vhost_task_create+0x1db/0x370 [ 430.121209][T20983] __vmalloc_node_noprof+0xad/0xf0 [ 430.121249][T20983] ? vhost_task_create+0x1db/0x370 [ 430.121270][T20983] copy_process+0x803/0x8380 [ 430.121309][T20983] ? __pfx_copy_process+0x10/0x10 [ 430.121332][T20983] ? kasan_save_track+0x14/0x30 [ 430.121356][T20983] ? __kasan_kmalloc+0xaa/0xb0 [ 430.121378][T20983] ? lockdep_init_map_type+0x5c/0x250 [ 430.121399][T20983] ? lockdep_init_map_type+0x5c/0x250 [ 430.121420][T20983] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 430.121446][T20983] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 430.121473][T20983] vhost_task_create+0x1db/0x370 [ 430.121494][T20983] ? __pfx_vhost_task_create+0x10/0x10 [ 430.121518][T20983] ? __pfx_vhost_task_fn+0x10/0x10 [ 430.121536][T20983] ? register_lock_class+0x3f/0x7b0 [ 430.121554][T20983] ? rcu_is_watching+0x13/0xc0 [ 430.121577][T20983] ? trace_contention_end+0x126/0x160 [ 430.121602][T20983] kvm_mmu_post_init_vm+0x1b3/0x360 [ 430.121628][T20983] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 430.121663][T20983] ? __pfx___mutex_lock+0x10/0x10 [ 430.121682][T20983] ? kasan_quarantine_put+0x104/0x240 [ 430.121706][T20983] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 430.121726][T20983] ? lock_acquire+0x1d1/0x380 [ 430.121749][T20983] ? do_raw_write_lock+0x11e/0x260 [ 430.121774][T20983] ? find_held_lock+0x2b/0x80 [ 430.121801][T20983] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 430.121824][T20983] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 430.121851][T20983] kvm_vcpu_ioctl+0x730/0x1700 [ 430.121876][T20983] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.121899][T20983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.121926][T20983] ? do_vfs_ioctl+0x226/0x13e0 [ 430.121950][T20983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 430.121967][T20983] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 430.121993][T20983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 430.122019][T20983] ? __fget_files+0x34/0x3d0 [ 430.122052][T20983] ? selinux_file_ioctl+0x13b/0x290 [ 430.122075][T20983] ? selinux_file_ioctl+0xb6/0x290 [ 430.122102][T20983] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.122129][T20983] __x64_sys_ioctl+0x18e/0x210 [ 430.122150][T20983] do_syscall_64+0x123/0x790 [ 430.122171][T20983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.122188][T20983] RIP: 0033:0x7fe31c79e159 [ 430.122203][T20983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.122220][T20983] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.122240][T20983] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 430.122253][T20983] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 430.122263][T20983] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 430.122274][T20983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.122283][T20983] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 430.122307][T20983] [ 430.124388][T20983] Mem-Info: [ 430.124400][T20983] active_anon:5106 inactive_anon:6249 isolated_anon:0 [ 430.124400][T20983] active_file:19688 inactive_file:11478 isolated_file:0 [ 430.124400][T20983] unevictable:0 dirty:234 writeback:0 [ 430.124400][T20983] slab_reclaimable:13841 slab_unreclaimable:89302 [ 430.124400][T20983] mapped:30892 shmem:580 pagetables:4626 [ 430.124400][T20983] sec_pagetables:302 bounce:0 [ 430.124400][T20983] kernel_misc_reclaimable:0 [ 430.124400][T20983] free:421523 free_pcp:14171 free_cma:0 [ 430.124444][T20983] Node 0 active_anon:20424kB inactive_anon:24900kB active_file:78728kB inactive_file:45740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90800kB dirty:936kB writeback:0kB shmem:2320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18080kB pagetables:8716kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 430.124491][T20983] Node 1 active_anon:0kB inactive_anon:96kB active_file:24kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32768kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 430.124562][T20983] Node 0 DMA free:11092kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 430.124609][T20983] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 430.124648][T20983] Node 0 DMA32 free:156060kB boost:43008kB min:70364kB low:77200kB high:84036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20424kB inactive_anon:24900kB active_file:78728kB inactive_file:45740kB unevictable:0kB writepending:936kB zspages:652kB present:2080628kB managed:1253104kB mlocked:0kB bounce:0kB free_pcp:30004kB local_pcp:6964kB free_cma:0kB [ 430.124698][T20983] lowmem_reserve[]: 0 0 0 0 0 [ 430.124729][T20983] Node 1 Normal free:1518940kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:96kB active_file:24kB inactive_file:172kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:26516kB local_pcp:9960kB free_cma:0kB [ 430.124778][T20983] lowmem_reserve[]: 0 0 0 0 0 [ 430.124809][T20983] Node 0 DMA: 9*4kB (UM) 8*8kB (UM) 9*16kB (UM) 9*32kB (UM) 7*64kB (UM) 7*128kB (UM) 6*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 11092kB [ 430.124939][T20983] Node 0 DMA32: 1229*4kB (UME) 853*8kB (UM) 628*16kB (UME) 496*32kB (UM) 153*64kB (UME) 40*128kB (UM) 50*256kB (UME) 47*512kB (UM) 29*1024kB (UM) 6*2048kB (UME) 6*4096kB (UM) = 155996kB [ 430.125078][T20983] Node 1 Normal: 37*4kB (UM) 22*8kB (UM) 186*16kB (UME) 290*32kB (UM) 273*64kB (UM) 242*128kB (UM) 223*256kB (UME) 220*512kB (UME) 204*1024kB (UME) 7*2048kB (UME) 260*4096kB (M) = 1518948kB [ 430.125217][T20983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.125232][T20983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.125245][T20983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.125260][T20983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.125273][T20983] 31757 total pagecache pages [ 430.125280][T20983] 17 pages in swap cache [ 430.125287][T20983] Free swap = 124708kB [ 430.125294][T20983] Total swap = 124996kB [ 430.125301][T20983] 1048443 pages RAM [ 430.125308][T20983] 0 pages HighMem/MovableOnly [ 430.125314][T20983] 285857 pages reserved [ 430.125320][T20983] 0 pages cma reserved [ 430.182098][ T43] audit: type=1400 audit(1791595538.266:1920): avc: denied { bind } for pid=20990 comm="syz.8.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 430.289981][T20993] kvm [20992]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 430.380076][T20998] overlayfs: overlapping lowerdir path [ 430.447571][T21001] input: syz0 as /devices/virtual/input/input32 [ 430.462607][T21004] syzkaller0: entered promiscuous mode [ 430.462630][T21004] syzkaller0: entered allmulticast mode [ 430.578787][T21010] FAULT_INJECTION: forcing a failure. [ 430.578787][T21010] name failslab, interval 1, probability 0, space 0, times 0 [ 430.578819][T21010] CPU: 3 UID: 0 PID: 21010 Comm: syz.4.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.578847][T21010] Tainted: [L]=SOFTLOCKUP [ 430.578853][T21010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.578865][T21010] Call Trace: [ 430.578872][T21010] [ 430.578880][T21010] dump_stack_lvl+0x100/0x190 [ 430.578913][T21010] should_fail_ex.cold+0x5/0xa [ 430.578940][T21010] should_failslab+0xc2/0x120 [ 430.578967][T21010] __kvmalloc_node_noprof+0x113/0x9b0 [ 430.578994][T21010] ? traverse.part.0.constprop.0+0x397/0x650 [ 430.579022][T21010] traverse.part.0.constprop.0+0x397/0x650 [ 430.579043][T21010] ? __pfx__kstrtoull+0x10/0x10 [ 430.579077][T21010] seq_read_iter+0x93f/0x1270 [ 430.579112][T21010] seq_read+0x344/0x4d0 [ 430.579137][T21010] ? __pfx_seq_read+0x10/0x10 [ 430.579171][T21010] ? selinux_file_permission+0x8f/0x6d0 [ 430.579197][T21010] ? __pfx_seq_read+0x10/0x10 [ 430.579217][T21010] proc_reg_read+0x240/0x330 [ 430.579237][T21010] ? __pfx_proc_reg_read+0x10/0x10 [ 430.579264][T21010] vfs_read+0x1e4/0xb40 [ 430.579287][T21010] ? lock_acquire+0x1d1/0x380 [ 430.579307][T21010] ? __fget_files+0x34/0x3d0 [ 430.579331][T21010] ? __pfx_vfs_read+0x10/0x10 [ 430.579351][T21010] ? find_held_lock+0x2b/0x80 [ 430.579377][T21010] ? __fget_files+0x215/0x3d0 [ 430.579402][T21010] ? __fget_files+0x215/0x3d0 [ 430.579432][T21010] ? __fget_files+0x21f/0x3d0 [ 430.579465][T21010] __x64_sys_pread64+0x1eb/0x250 [ 430.579489][T21010] ? __pfx___x64_sys_pread64+0x10/0x10 [ 430.579520][T21010] do_syscall_64+0x123/0x790 [ 430.579545][T21010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.579564][T21010] RIP: 0033:0x7fe83619e159 [ 430.579580][T21010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.579596][T21010] RSP: 002b:00007fe837148028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 430.579616][T21010] RAX: ffffffffffffffda RBX: 00007fe836425fa0 RCX: 00007fe83619e159 [ 430.579628][T21010] RDX: 00000000000000fe RSI: 0000200000000240 RDI: 0000000000000003 [ 430.579640][T21010] RBP: 00007fe837148090 R08: 0000000000000000 R09: 0000000000000000 [ 430.579651][T21010] R10: 0000000000004313 R11: 0000000000000246 R12: 0000000000000001 [ 430.579660][T21010] R13: 00007fe836426038 R14: 00007fe836425fa0 R15: 00007ffce8066b98 [ 430.579686][T21010] [ 430.655759][T21009] UDC core: g1: couldn't find an available UDC or it's busy [ 430.706385][T21016] __nla_validate_parse: 2 callbacks suppressed [ 430.706403][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 430.731555][ T43] audit: type=1400 audit(1791595538.781:1921): avc: denied { write } for pid=21017 comm="syz.3.5139" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 430.733931][T21016] netlink: 'syz.4.5138': attribute type 28 has an invalid length. [ 430.733950][T21016] netlink: 'syz.4.5138': attribute type 3 has an invalid length. [ 430.733963][T21016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5138'. [ 430.747688][ T43] audit: type=1400 audit(1791595538.790:1922): avc: denied { read } for pid=21017 comm="syz.3.5139" path="socket:[126605]" dev="sockfs" ino=126605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 430.791114][T21020] FAULT_INJECTION: forcing a failure. [ 430.791114][T21020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.791146][T21020] CPU: 3 UID: 0 PID: 21020 Comm: syz.3.5140 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.791173][T21020] Tainted: [L]=SOFTLOCKUP [ 430.791180][T21020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.791192][T21020] Call Trace: [ 430.791199][T21020] [ 430.791207][T21020] dump_stack_lvl+0x100/0x190 [ 430.791238][T21020] should_fail_ex.cold+0x5/0xa [ 430.791272][T21020] _copy_from_user+0x2e/0xd0 [ 430.791297][T21020] bpf_prog_load+0x1488/0x2a70 [ 430.791331][T21020] ? __pfx_bpf_prog_load+0x10/0x10 [ 430.791379][T21020] __sys_bpf+0x1f46/0x4a30 [ 430.791407][T21020] ? __pfx___sys_bpf+0x10/0x10 [ 430.791427][T21020] ? find_held_lock+0x2b/0x80 [ 430.791454][T21020] ? get_pid_task+0xfc/0x250 [ 430.791479][T21020] ? get_pid_task+0xfc/0x250 [ 430.791512][T21020] ? find_held_lock+0x2b/0x80 [ 430.791546][T21020] ? rcu_read_lock_any_held+0x6a/0x90 [ 430.791574][T21020] ? find_held_lock+0x2b/0x80 [ 430.791601][T21020] ? ksys_write+0x190/0x250 [ 430.791623][T21020] ? ksys_write+0x190/0x250 [ 430.791645][T21020] ? lock_acquire+0x1d1/0x380 [ 430.791684][T21020] ? fput+0x7c/0x100 [ 430.791708][T21020] ? ksys_write+0x1ac/0x250 [ 430.791732][T21020] ? __x64_sys_bpf+0xce/0x140 [ 430.791753][T21020] __x64_sys_bpf+0xce/0x140 [ 430.791775][T21020] ? do_syscall_64+0xae/0x790 [ 430.791799][T21020] do_syscall_64+0x123/0x790 [ 430.791823][T21020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.791843][T21020] RIP: 0033:0x7fe31c79e159 [ 430.791859][T21020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.791877][T21020] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.791895][T21020] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 430.791908][T21020] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 430.791920][T21020] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 430.791933][T21020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.791945][T21020] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 430.791971][T21020] [ 431.194114][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5143'. [ 431.381463][T21041] syzkaller0: entered promiscuous mode [ 431.381477][T21041] syzkaller0: entered allmulticast mode [ 431.405446][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5146'. [ 431.411696][T21044] overlayfs: overlapping lowerdir path [ 431.462391][T21048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5146'. [ 431.490413][T21046] FAULT_INJECTION: forcing a failure. [ 431.490413][T21046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.490443][T21046] CPU: 2 UID: 0 PID: 21046 Comm: syz.4.5149 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.490465][T21046] Tainted: [L]=SOFTLOCKUP [ 431.490472][T21046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.490483][T21046] Call Trace: [ 431.490489][T21046] [ 431.490497][T21046] dump_stack_lvl+0x100/0x190 [ 431.490527][T21046] should_fail_ex.cold+0x5/0xa [ 431.490547][T21046] ? prepare_alloc_pages+0x16d/0x5b0 [ 431.490573][T21046] should_fail_alloc_page+0xeb/0x140 [ 431.490598][T21046] prepare_alloc_pages+0x1f0/0x5b0 [ 431.490621][T21046] ? is_bpf_text_address+0x94/0x1a0 [ 431.490650][T21046] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 431.490683][T21046] ? stack_trace_save+0x8e/0xc0 [ 431.490702][T21046] ? __pfx_stack_trace_save+0x10/0x10 [ 431.490718][T21046] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 431.490745][T21046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 431.490765][T21046] ? is_bpf_text_address+0x94/0x1a0 [ 431.490793][T21046] ? kasan_save_stack+0x3f/0x50 [ 431.490814][T21046] ? kasan_save_stack+0x30/0x50 [ 431.490834][T21046] ? kasan_save_track+0x14/0x30 [ 431.490854][T21046] ? __kasan_slab_alloc+0x89/0x90 [ 431.490876][T21046] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 431.490896][T21046] ? alloc_vmap_area+0x1814/0x2bb0 [ 431.490916][T21046] ? __get_vm_area_node+0x1ed/0x350 [ 431.490938][T21046] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 431.490963][T21046] ? __vmalloc_node_noprof+0xad/0xf0 [ 431.490986][T21046] ? copy_process+0x803/0x8380 [ 431.491002][T21046] ? vhost_task_create+0x1db/0x370 [ 431.491018][T21046] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 431.491038][T21046] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 431.491060][T21046] ? kvm_vcpu_ioctl+0x730/0x1700 [ 431.491084][T21046] ? __x64_sys_ioctl+0x18e/0x210 [ 431.491103][T21046] ? do_syscall_64+0x123/0x790 [ 431.491121][T21046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.491151][T21046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.491175][T21046] ? policy_nodemask+0xed/0x4f0 [ 431.491205][T21046] alloc_pages_mpol+0x201/0x550 [ 431.491230][T21046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 431.491263][T21046] alloc_pages_noprof+0x1a/0x160 [ 431.491281][T21046] get_free_pages_noprof+0x10/0xb0 [ 431.491311][T21046] __kasan_populate_vmalloc+0xa0/0x210 [ 431.491339][T21046] alloc_vmap_area+0x95d/0x2bb0 [ 431.491370][T21046] ? kasan_save_track+0x14/0x30 [ 431.491392][T21046] ? __kasan_kmalloc+0xaa/0xb0 [ 431.491415][T21046] ? __pfx_alloc_vmap_area+0x10/0x10 [ 431.491441][T21046] ? __get_vm_area_node+0x124/0x350 [ 431.491469][T21046] __get_vm_area_node+0x1ed/0x350 [ 431.491518][T21046] __vmalloc_node_range_noprof+0x268/0x1420 [ 431.491548][T21046] ? vhost_task_create+0x1db/0x370 [ 431.491565][T21046] ? lock_acquire+0x1d1/0x380 [ 431.491586][T21046] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 431.491609][T21046] ? find_held_lock+0x2b/0x80 [ 431.491636][T21046] ? rcu_read_unlock+0x17/0x60 [ 431.491657][T21046] ? vhost_task_create+0x1db/0x370 [ 431.491677][T21046] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 431.491699][T21046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.491735][T21046] ? rcu_is_watching+0x13/0xc0 [ 431.491761][T21046] ? trace_kmem_cache_alloc+0xdd/0x100 [ 431.491790][T21046] ? vhost_task_create+0x1db/0x370 [ 431.491808][T21046] __vmalloc_node_noprof+0xad/0xf0 [ 431.491835][T21046] ? vhost_task_create+0x1db/0x370 [ 431.491856][T21046] copy_process+0x803/0x8380 [ 431.491893][T21046] ? __pfx_copy_process+0x10/0x10 [ 431.491915][T21046] ? kasan_save_track+0x14/0x30 [ 431.491939][T21046] ? __kasan_kmalloc+0xaa/0xb0 [ 431.491963][T21046] ? lockdep_init_map_type+0x5c/0x250 [ 431.491986][T21046] ? lockdep_init_map_type+0x5c/0x250 [ 431.492010][T21046] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 431.492041][T21046] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 431.492067][T21046] vhost_task_create+0x1db/0x370 [ 431.492086][T21046] ? __pfx_vhost_task_create+0x10/0x10 [ 431.492112][T21046] ? __pfx_vhost_task_fn+0x10/0x10 [ 431.492132][T21046] ? register_lock_class+0x3f/0x7b0 [ 431.492153][T21046] ? rcu_is_watching+0x13/0xc0 [ 431.492179][T21046] ? trace_contention_end+0x126/0x160 [ 431.492207][T21046] kvm_mmu_post_init_vm+0x1b3/0x360 [ 431.492230][T21046] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 431.492253][T21046] ? __pfx___mutex_lock+0x10/0x10 [ 431.492273][T21046] ? kasan_quarantine_put+0x104/0x240 [ 431.492299][T21046] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 431.492322][T21046] ? lock_acquire+0x1d1/0x380 [ 431.492344][T21046] ? do_raw_write_lock+0x11e/0x260 [ 431.492368][T21046] ? find_held_lock+0x2b/0x80 [ 431.492394][T21046] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 431.492418][T21046] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 431.492449][T21046] kvm_vcpu_ioctl+0x730/0x1700 [ 431.492477][T21046] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 431.492528][T21046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.492553][T21046] ? do_vfs_ioctl+0x226/0x13e0 [ 431.492575][T21046] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 431.492594][T21046] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 431.492623][T21046] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 431.492651][T21046] ? __fget_files+0x34/0x3d0 [ 431.492687][T21046] ? selinux_file_ioctl+0x13b/0x290 [ 431.492710][T21046] ? selinux_file_ioctl+0xb6/0x290 [ 431.492740][T21046] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 431.492767][T21046] __x64_sys_ioctl+0x18e/0x210 [ 431.492792][T21046] do_syscall_64+0x123/0x790 [ 431.492815][T21046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.492834][T21046] RIP: 0033:0x7fe83619e159 [ 431.492850][T21046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.492868][T21046] RSP: 002b:00007fe837148028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.492888][T21046] RAX: ffffffffffffffda RBX: 00007fe836425fa0 RCX: 00007fe83619e159 [ 431.492902][T21046] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 431.492913][T21046] RBP: 00007fe837148090 R08: 0000000000000000 R09: 0000000000000000 [ 431.492925][T21046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.492937][T21046] R13: 00007fe836426038 R14: 00007fe836425fa0 R15: 00007ffce8066b98 [ 431.492964][T21046] [ 431.796735][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5153'. [ 431.884885][ T5806] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.990037][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5156'. [ 431.996534][T21071] netlink: 'syz.4.5156': attribute type 28 has an invalid length. [ 431.996553][T21071] netlink: 'syz.4.5156': attribute type 3 has an invalid length. [ 431.996564][T21071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5156'. [ 432.086608][T21075] overlayfs: overlapping lowerdir path [ 432.101301][T21077] syzkaller0: entered promiscuous mode [ 432.101316][T21077] syzkaller0: entered allmulticast mode [ 432.298926][T21088] FAULT_INJECTION: forcing a failure. [ 432.298926][T21088] name failslab, interval 1, probability 0, space 0, times 0 [ 432.298961][T21088] CPU: 2 UID: 0 PID: 21088 Comm: syz.9.5163 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.298989][T21088] Tainted: [L]=SOFTLOCKUP [ 432.298999][T21088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.299011][T21088] Call Trace: [ 432.299020][T21088] [ 432.299028][T21088] dump_stack_lvl+0x100/0x190 [ 432.299061][T21088] should_fail_ex.cold+0x5/0xa [ 432.299090][T21088] should_failslab+0xc2/0x120 [ 432.299118][T21088] kmem_cache_alloc_noprof+0x92/0x6a0 [ 432.299143][T21088] ? __asan_memcpy+0x3c/0x60 [ 432.299166][T21088] ? __kernfs_new_node+0xd2/0xa10 [ 432.299192][T21088] __kernfs_new_node+0xd2/0xa10 [ 432.299219][T21088] ? __pfx___kernfs_new_node+0x10/0x10 [ 432.299250][T21088] ? lock_acquire+0x1d1/0x380 [ 432.299276][T21088] ? kernfs_root+0x23/0x2a0 [ 432.299308][T21088] ? find_held_lock+0x2b/0x80 [ 432.299339][T21088] ? kernfs_root+0xee/0x2a0 [ 432.299368][T21088] ? kernfs_root+0xee/0x2a0 [ 432.299403][T21088] kernfs_new_node+0x117/0x150 [ 432.299430][T21088] kernfs_create_link+0xcc/0x240 [ 432.299459][T21088] sysfs_do_create_link_sd+0x90/0x140 [ 432.299509][T21088] sysfs_create_link+0x61/0xc0 [ 432.299541][T21088] driver_sysfs_add+0x91/0x2d0 [ 432.299572][T21088] really_probe+0x146/0xa60 [ 432.299604][T21088] __driver_probe_device+0x210/0x460 [ 432.299632][T21088] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.299658][T21088] driver_probe_device+0x4a/0x140 [ 432.299686][T21088] __driver_attach+0x21f/0x5b0 [ 432.299713][T21088] ? __pfx___driver_attach+0x10/0x10 [ 432.299740][T21088] bus_for_each_dev+0x13e/0x1d0 [ 432.299764][T21088] ? __pfx_bus_for_each_dev+0x10/0x10 [ 432.299785][T21088] ? bus_add_driver+0x2b5/0x5b0 [ 432.299816][T21088] bus_add_driver+0x305/0x5b0 [ 432.299844][T21088] driver_register+0x1e2/0x360 [ 432.299869][T21088] ? rcu_is_watching+0x13/0xc0 [ 432.299901][T21088] usb_gadget_register_driver_owner+0x132/0x210 [ 432.299926][T21088] raw_ioctl+0x1a85/0x2b80 [ 432.299953][T21088] ? __pfx_raw_ioctl+0x10/0x10 [ 432.299973][T21088] ? selinux_file_ioctl+0x13b/0x290 [ 432.299995][T21088] ? selinux_file_ioctl+0xb6/0x290 [ 432.300023][T21088] ? __pfx_raw_ioctl+0x10/0x10 [ 432.300048][T21088] __x64_sys_ioctl+0x18e/0x210 [ 432.300073][T21088] do_syscall_64+0x123/0x790 [ 432.300099][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.300121][T21088] RIP: 0033:0x7f6b1859ddeb [ 432.300140][T21088] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 432.300162][T21088] RSP: 002b:00007f6b19457f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.300182][T21088] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f6b1859ddeb [ 432.300196][T21088] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 432.300209][T21088] RBP: 00007f6b19458fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 432.300223][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.300236][T21088] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 432.300270][T21088] [ 432.300392][T21088] raw-gadget.0 gadget.9: really_probe: driver_sysfs_add failed [ 432.300906][T21088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.301478][T21088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.351056][T21091] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 432.436891][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5165'. [ 432.529899][T21101] syzkaller0: entered promiscuous mode [ 432.529921][T21101] syzkaller0: entered allmulticast mode [ 432.681948][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 432.914252][T21112] Bluetooth: hci0: unsupported parameter 255 [ 432.914266][T21112] Bluetooth: hci0: unsupported parameter 255 [ 432.949415][T21116] FAULT_INJECTION: forcing a failure. [ 432.949415][T21116] name failslab, interval 1, probability 0, space 0, times 0 [ 432.949438][T21116] CPU: 0 UID: 0 PID: 21116 Comm: syz.9.5175 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.949454][T21116] Tainted: [L]=SOFTLOCKUP [ 432.949458][T21116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.949465][T21116] Call Trace: [ 432.949469][T21116] [ 432.949474][T21116] dump_stack_lvl+0x100/0x190 [ 432.949494][T21116] should_fail_ex.cold+0x5/0xa [ 432.949511][T21116] should_failslab+0xc2/0x120 [ 432.949528][T21116] __kmalloc_cache_noprof+0x91/0x6d0 [ 432.949540][T21116] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 432.949561][T21116] bpf_prog_alloc_no_stats+0x161/0x690 [ 432.949579][T21116] bpf_prog_alloc+0x3b/0x200 [ 432.949593][T21116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.949609][T21116] bpf_prog_load+0x1247/0x2a70 [ 432.949636][T21116] ? __pfx_bpf_prog_load+0x10/0x10 [ 432.949680][T21116] __sys_bpf+0x1f46/0x4a30 [ 432.949708][T21116] ? __pfx___sys_bpf+0x10/0x10 [ 432.949721][T21116] ? find_held_lock+0x2b/0x80 [ 432.949738][T21116] ? get_pid_task+0xfc/0x250 [ 432.949753][T21116] ? get_pid_task+0xfc/0x250 [ 432.949774][T21116] ? find_held_lock+0x2b/0x80 [ 432.949803][T21116] ? rcu_read_lock_any_held+0x6a/0x90 [ 432.949833][T21116] ? find_held_lock+0x2b/0x80 [ 432.949860][T21116] ? ksys_write+0x190/0x250 [ 432.949881][T21116] ? ksys_write+0x190/0x250 [ 432.949900][T21116] ? lock_acquire+0x1d1/0x380 [ 432.949937][T21116] ? fput+0x7c/0x100 [ 432.949963][T21116] ? ksys_write+0x1ac/0x250 [ 432.949985][T21116] ? __x64_sys_bpf+0xce/0x140 [ 432.950003][T21116] __x64_sys_bpf+0xce/0x140 [ 432.950023][T21116] ? do_syscall_64+0xae/0x790 [ 432.950046][T21116] do_syscall_64+0x123/0x790 [ 432.950074][T21116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.950092][T21116] RIP: 0033:0x7f6b1859e159 [ 432.950107][T21116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.950119][T21116] RSP: 002b:00007f6b1945a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.950131][T21116] RAX: ffffffffffffffda RBX: 00007f6b18825fa0 RCX: 00007f6b1859e159 [ 432.950139][T21116] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 432.950146][T21116] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 432.950153][T21116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.950159][T21116] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 432.950173][T21116] [ 433.111495][T21126] netlink: 'syz.9.5177': attribute type 28 has an invalid length. [ 433.111509][T21126] netlink: 'syz.9.5177': attribute type 3 has an invalid length. [ 433.147805][T21132] syzkaller0: entered promiscuous mode [ 433.147829][T21132] syzkaller0: entered allmulticast mode [ 433.319218][T21138] Bluetooth: hci0: unsupported parameter 255 [ 433.319233][T21138] Bluetooth: hci0: unsupported parameter 255 [ 433.363262][T21140] FAULT_INJECTION: forcing a failure. [ 433.363262][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 433.363294][T21140] CPU: 1 UID: 0 PID: 21140 Comm: syz.4.5183 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.363320][T21140] Tainted: [L]=SOFTLOCKUP [ 433.363326][T21140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.363338][T21140] Call Trace: [ 433.363345][T21140] [ 433.363352][T21140] dump_stack_lvl+0x100/0x190 [ 433.363383][T21140] should_fail_ex.cold+0x5/0xa [ 433.363408][T21140] should_failslab+0xc2/0x120 [ 433.363434][T21140] kmem_cache_alloc_noprof+0x92/0x6a0 [ 433.363457][T21140] ? __asan_memcpy+0x3c/0x60 [ 433.363477][T21140] ? __kernfs_new_node+0xd2/0xa10 [ 433.363501][T21140] __kernfs_new_node+0xd2/0xa10 [ 433.363524][T21140] ? __pfx___kernfs_new_node+0x10/0x10 [ 433.363546][T21140] ? lock_acquire+0x1d1/0x380 [ 433.363567][T21140] ? kernfs_root+0x23/0x2a0 [ 433.363593][T21140] ? find_held_lock+0x2b/0x80 [ 433.363618][T21140] ? kernfs_root+0xee/0x2a0 [ 433.363643][T21140] ? kernfs_root+0xee/0x2a0 [ 433.363676][T21140] kernfs_new_node+0x117/0x150 [ 433.363699][T21140] kernfs_create_link+0xcc/0x240 [ 433.363723][T21140] sysfs_do_create_link_sd+0x90/0x140 [ 433.363750][T21140] sysfs_create_link+0x61/0xc0 [ 433.363776][T21140] driver_sysfs_add+0x91/0x2d0 [ 433.363801][T21140] really_probe+0x146/0xa60 [ 433.363828][T21140] __driver_probe_device+0x210/0x460 [ 433.363852][T21140] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 433.363875][T21140] driver_probe_device+0x4a/0x140 [ 433.363900][T21140] __driver_attach+0x21f/0x5b0 [ 433.363924][T21140] ? __pfx___driver_attach+0x10/0x10 [ 433.363948][T21140] bus_for_each_dev+0x13e/0x1d0 [ 433.363969][T21140] ? __pfx_bus_for_each_dev+0x10/0x10 [ 433.363987][T21140] ? bus_add_driver+0x2b5/0x5b0 [ 433.364016][T21140] bus_add_driver+0x305/0x5b0 [ 433.364040][T21140] driver_register+0x1e2/0x360 [ 433.364090][T21140] ? rcu_is_watching+0x13/0xc0 [ 433.364121][T21140] usb_gadget_register_driver_owner+0x132/0x210 [ 433.364149][T21140] raw_ioctl+0x1a85/0x2b80 [ 433.364179][T21140] ? __pfx_raw_ioctl+0x10/0x10 [ 433.364199][T21140] ? selinux_file_ioctl+0x13b/0x290 [ 433.364224][T21140] ? selinux_file_ioctl+0xb6/0x290 [ 433.364251][T21140] ? __pfx_raw_ioctl+0x10/0x10 [ 433.364276][T21140] __x64_sys_ioctl+0x18e/0x210 [ 433.364301][T21140] do_syscall_64+0x123/0x790 [ 433.364323][T21140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.364339][T21140] RIP: 0033:0x7fe83619ddeb [ 433.364356][T21140] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 433.364375][T21140] RSP: 002b:00007fe837145f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.364395][T21140] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe83619ddeb [ 433.364407][T21140] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 433.364419][T21140] RBP: 00007fe837146fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 433.364432][T21140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.364445][T21140] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 433.364469][T21140] [ 433.364542][T21140] raw-gadget.0 gadget.4: really_probe: driver_sysfs_add failed [ 433.365016][T21140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.365515][T21140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.559719][T21142] overlayfs: overlapping lowerdir path [ 433.614101][T21144] FAULT_INJECTION: forcing a failure. [ 433.614101][T21144] name failslab, interval 1, probability 0, space 0, times 0 [ 433.614125][T21144] CPU: 0 UID: 0 PID: 21144 Comm: syz.3.5185 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.614144][T21144] Tainted: [L]=SOFTLOCKUP [ 433.614149][T21144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.614156][T21144] Call Trace: [ 433.614160][T21144] [ 433.614165][T21144] dump_stack_lvl+0x100/0x190 [ 433.614188][T21144] should_fail_ex.cold+0x5/0xa [ 433.614205][T21144] should_failslab+0xc2/0x120 [ 433.614224][T21144] __kmalloc_noprof+0xfc/0x840 [ 433.614239][T21144] ? tomoyo_encode2+0xfb/0x3c0 [ 433.614258][T21144] tomoyo_encode2+0xfb/0x3c0 [ 433.614277][T21144] tomoyo_encode+0x29/0x50 [ 433.614293][T21144] tomoyo_realpath_from_path+0x18c/0x690 [ 433.614314][T21144] tomoyo_path_number_perm+0x23c/0x580 [ 433.614328][T21144] ? tomoyo_path_number_perm+0x22e/0x580 [ 433.614344][T21144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.614364][T21144] ? __lock_acquire+0x5c0/0x1f40 [ 433.614385][T21144] ? __fget_files+0x34/0x3d0 [ 433.614402][T21144] ? find_held_lock+0x2b/0x80 [ 433.614419][T21144] ? hook_file_ioctl_common+0x140/0x440 [ 433.614441][T21144] ? __fget_files+0x21f/0x3d0 [ 433.614460][T21144] security_file_ioctl+0xd3/0x230 [ 433.614476][T21144] __x64_sys_ioctl+0xb7/0x210 [ 433.614491][T21144] do_syscall_64+0x123/0x790 [ 433.614506][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.614519][T21144] RIP: 0033:0x7fe31c79e159 [ 433.614529][T21144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.614541][T21144] RSP: 002b:00007fe31d5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.614554][T21144] RAX: ffffffffffffffda RBX: 00007fe31ca25fa0 RCX: 00007fe31c79e159 [ 433.614561][T21144] RDX: 0000200000001080 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 433.614568][T21144] RBP: 00007fe31d5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 433.614575][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.614583][T21144] R13: 00007fe31ca26038 R14: 00007fe31ca25fa0 R15: 00007fff9871cd48 [ 433.614598][T21144] [ 433.614609][T21144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.768279][T21153] syzkaller0: entered promiscuous mode [ 433.768294][T21153] syzkaller0: entered allmulticast mode [ 433.896274][T21157] Bluetooth: hci0: unsupported parameter 255 [ 433.896295][T21157] Bluetooth: hci0: unsupported parameter 255 [ 433.985838][T21165] overlayfs: overlapping lowerdir path [ 434.044592][ T5807] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 434.087792][T21169] netlink: 'syz.4.5195': attribute type 28 has an invalid length. [ 434.087815][T21169] netlink: 'syz.4.5195': attribute type 3 has an invalid length. [ 434.205292][ T5807] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 434.206217][ T5807] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 434.206236][ T5807] usb 8-1: config 1 has no interface number 0 [ 434.206266][ T5807] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 434.206286][ T5807] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 434.206305][ T5807] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.208125][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.208144][ T5807] usb 8-1: Product: syz [ 434.208156][ T5807] usb 8-1: Manufacturer: syz [ 434.208168][ T5807] usb 8-1: SerialNumber: syz [ 434.210672][T21155] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.525495][T21173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.810892][T21179] kAFS: No cell specified [ 434.838712][ T5807] usb 8-1: Incompatible driver and firmware versions [ 434.847058][ T5807] usb 8-1: USB disconnect, device number 23 [ 435.001667][T21191] overlayfs: overlapping lowerdir path [ 435.036923][T21193] netlink: 'syz.8.5204': attribute type 28 has an invalid length. [ 435.036944][T21193] netlink: 'syz.8.5204': attribute type 3 has an invalid length. [ 435.070992][T21195] overlayfs: overlapping lowerdir path [ 435.378167][ T5716] net_ratelimit: 375 callbacks suppressed [ 435.378182][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.378331][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.380093][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.380183][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.380328][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.388216][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.388386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.393821][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.393989][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.394067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.415212][T21204] kAFS: No cell specified [ 435.589549][T21208] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 435.692173][T21212] FAULT_INJECTION: forcing a failure. [ 435.692173][T21212] name failslab, interval 1, probability 0, space 0, times 0 [ 435.692204][T21212] CPU: 3 UID: 0 PID: 21212 Comm: syz.8.5211 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.692228][T21212] Tainted: [L]=SOFTLOCKUP [ 435.692240][T21212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.692251][T21212] Call Trace: [ 435.692257][T21212] [ 435.692262][T21212] dump_stack_lvl+0x100/0x190 [ 435.692291][T21212] should_fail_ex.cold+0x5/0xa [ 435.692316][T21212] should_failslab+0xc2/0x120 [ 435.692340][T21212] kmem_cache_alloc_noprof+0x92/0x6a0 [ 435.692359][T21212] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 435.692400][T21212] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 435.692435][T21212] mmu_topup_memory_caches+0x25/0x170 [ 435.692456][T21212] kvm_mmu_load+0xe8/0x2580 [ 435.692492][T21212] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 435.692520][T21212] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 435.692548][T21212] ? __pfx_kvm_mmu_load+0x10/0x10 [ 435.692565][T21212] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 435.692582][T21212] ? kvm_check_and_inject_events+0x896/0x1050 [ 435.692606][T21212] vcpu_run+0x419f/0x61a0 [ 435.692627][T21212] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 435.692661][T21212] ? __pfx_vcpu_run+0x10/0x10 [ 435.692681][T21212] ? lock_acquire+0x1d1/0x380 [ 435.692701][T21212] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 435.692725][T21212] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 435.692749][T21212] ? __local_bh_enable_ip+0xa5/0x120 [ 435.692766][T21212] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 435.692787][T21212] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 435.692814][T21212] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 435.692835][T21212] ? lock_acquire+0x1d1/0x380 [ 435.692853][T21212] ? do_raw_write_lock+0x11e/0x260 [ 435.692871][T21212] ? find_held_lock+0x2b/0x80 [ 435.692896][T21212] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 435.692918][T21212] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 435.692947][T21212] kvm_vcpu_ioctl+0x730/0x1700 [ 435.692969][T21212] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 435.692992][T21212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.693016][T21212] ? do_vfs_ioctl+0x226/0x13e0 [ 435.693036][T21212] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 435.693053][T21212] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 435.693075][T21212] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 435.693101][T21212] ? __fget_files+0x34/0x3d0 [ 435.693135][T21212] ? selinux_file_ioctl+0x13b/0x290 [ 435.693155][T21212] ? selinux_file_ioctl+0xb6/0x290 [ 435.693176][T21212] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 435.693198][T21212] __x64_sys_ioctl+0x18e/0x210 [ 435.693220][T21212] do_syscall_64+0x123/0x790 [ 435.693247][T21212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.693262][T21212] RIP: 0033:0x7fcf9259e159 [ 435.693275][T21212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.693291][T21212] RSP: 002b:00007fcf93491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.693309][T21212] RAX: ffffffffffffffda RBX: 00007fcf92825fa0 RCX: 00007fcf9259e159 [ 435.693320][T21212] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 435.693331][T21212] RBP: 00007fcf93491090 R08: 0000000000000000 R09: 0000000000000000 [ 435.693342][T21212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.693353][T21212] R13: 00007fcf92826038 R14: 00007fcf92825fa0 R15: 00007ffd40f22228 [ 435.693370][T21212] [ 436.175572][T21231] tipc: Enabling of bearer rejected, already enabled [ 436.375195][T21239] kAFS: No cell specified [ 436.468791][T21236] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 436.621242][ T43] audit: type=1400 audit(1791595544.292:1923): avc: denied { execmod } for pid=21253 comm="syz.4.5225" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=125718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 436.624630][T21254] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 436.654313][ T43] audit: type=1400 audit(1791595544.320:1924): avc: denied { read } for pid=21253 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 436.685305][T21257] FAULT_INJECTION: forcing a failure. [ 436.685305][T21257] name failslab, interval 1, probability 0, space 0, times 0 [ 436.685337][T21257] CPU: 3 UID: 0 PID: 21257 Comm: syz.4.5227 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.685364][T21257] Tainted: [L]=SOFTLOCKUP [ 436.685371][T21257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.685382][T21257] Call Trace: [ 436.685389][T21257] [ 436.685398][T21257] dump_stack_lvl+0x100/0x190 [ 436.685430][T21257] should_fail_ex.cold+0x5/0xa [ 436.685456][T21257] should_failslab+0xc2/0x120 [ 436.685484][T21257] kmem_cache_alloc_noprof+0x92/0x6a0 [ 436.685516][T21257] ? do_getname+0x35/0x390 [ 436.685539][T21257] do_getname+0x35/0x390 [ 436.685561][T21257] path_listxattrat+0x2db/0x370 [ 436.685586][T21257] ? ksys_write+0x1ac/0x250 [ 436.685608][T21257] ? __pfx_path_listxattrat+0x10/0x10 [ 436.685643][T21257] do_syscall_64+0x123/0x790 [ 436.685666][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.685686][T21257] RIP: 0033:0x7fe83619e159 [ 436.685703][T21257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.685721][T21257] RSP: 002b:00007fe837148028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 436.685741][T21257] RAX: ffffffffffffffda RBX: 00007fe836425fa0 RCX: 00007fe83619e159 [ 436.685752][T21257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 436.685763][T21257] RBP: 00007fe837148090 R08: 0000000000000000 R09: 0000000000000000 [ 436.685775][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.685787][T21257] R13: 00007fe836426038 R14: 00007fe836425fa0 R15: 00007ffce8066b98 [ 436.685829][T21257] [ 436.711565][ T43] audit: type=1400 audit(1791595544.376:1925): avc: denied { append } for pid=21259 comm="syz.4.5228" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.092240][T21290] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 437.095903][T21264] cgroup: fork rejected by pids controller in /syz4 [ 437.150846][ T43] audit: type=1400 audit(1791595544.778:1926): avc: denied { accept } for pid=21307 comm="syz.3.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.452078][T21329] netlink: 'syz.3.5242': attribute type 1 has an invalid length. [ 437.488011][T21329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.511920][T21330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21330 comm=syz.3.5242 [ 437.568040][T21330] bond1: (slave geneve2): making interface the new active one [ 437.569122][T21330] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 437.687968][T21347] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 437.780517][T21357] FAULT_INJECTION: forcing a failure. [ 437.780517][T21357] name failslab, interval 1, probability 0, space 0, times 0 [ 437.780539][T21357] CPU: 2 UID: 0 PID: 21357 Comm: syz.4.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.780556][T21357] Tainted: [L]=SOFTLOCKUP [ 437.780562][T21357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.780569][T21357] Call Trace: [ 437.780573][T21357] [ 437.780578][T21357] dump_stack_lvl+0x100/0x190 [ 437.780598][T21357] should_fail_ex.cold+0x5/0xa [ 437.780615][T21357] should_failslab+0xc2/0x120 [ 437.780632][T21357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 437.780646][T21357] ? __asan_memcpy+0x3c/0x60 [ 437.780658][T21357] ? __kernfs_new_node+0xd2/0xa10 [ 437.780671][T21357] __kernfs_new_node+0xd2/0xa10 [ 437.780684][T21357] ? __pfx___kernfs_new_node+0x10/0x10 [ 437.780696][T21357] ? lock_acquire+0x1d1/0x380 [ 437.780709][T21357] ? kernfs_root+0x23/0x2a0 [ 437.780725][T21357] ? find_held_lock+0x2b/0x80 [ 437.780741][T21357] ? kernfs_root+0xee/0x2a0 [ 437.780757][T21357] ? kernfs_root+0xee/0x2a0 [ 437.780776][T21357] kernfs_new_node+0x117/0x150 [ 437.780789][T21357] kernfs_create_link+0xcc/0x240 [ 437.780804][T21357] sysfs_do_create_link_sd+0x90/0x140 [ 437.780822][T21357] sysfs_create_link+0x61/0xc0 [ 437.780838][T21357] driver_sysfs_add+0x91/0x2d0 [ 437.780854][T21357] really_probe+0x146/0xa60 [ 437.780870][T21357] __driver_probe_device+0x210/0x460 [ 437.780885][T21357] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 437.780898][T21357] driver_probe_device+0x4a/0x140 [ 437.780914][T21357] __driver_attach+0x21f/0x5b0 [ 437.780929][T21357] ? __pfx___driver_attach+0x10/0x10 [ 437.780944][T21357] bus_for_each_dev+0x13e/0x1d0 [ 437.780957][T21357] ? __pfx_bus_for_each_dev+0x10/0x10 [ 437.780970][T21357] ? bus_add_driver+0x2b5/0x5b0 [ 437.780988][T21357] bus_add_driver+0x305/0x5b0 [ 437.781002][T21357] driver_register+0x1e2/0x360 [ 437.781017][T21357] ? rcu_is_watching+0x13/0xc0 [ 437.781034][T21357] usb_gadget_register_driver_owner+0x132/0x210 [ 437.781052][T21357] raw_ioctl+0x1a85/0x2b80 [ 437.781068][T21357] ? __pfx_raw_ioctl+0x10/0x10 [ 437.781081][T21357] ? selinux_file_ioctl+0x13b/0x290 [ 437.781095][T21357] ? selinux_file_ioctl+0xb6/0x290 [ 437.781110][T21357] ? __pfx_raw_ioctl+0x10/0x10 [ 437.781123][T21357] __x64_sys_ioctl+0x18e/0x210 [ 437.781143][T21357] do_syscall_64+0x123/0x790 [ 437.781164][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.781182][T21357] RIP: 0033:0x7fe83619ddeb [ 437.781199][T21357] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 437.781219][T21357] RSP: 002b:00007fe837145f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.781247][T21357] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe83619ddeb [ 437.781260][T21357] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 437.781271][T21357] RBP: 00007fe837146fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 437.781283][T21357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.781295][T21357] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 437.781320][T21357] [ 437.781341][T21357] raw-gadget.0 gadget.4: really_probe: driver_sysfs_add failed [ 437.782272][T21357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.782493][T21357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.851683][T21358] UDC core: g1: couldn't find an available UDC or it's busy [ 438.213881][T21372] overlayfs: overlapping lowerdir path [ 438.299672][T21376] FAULT_INJECTION: forcing a failure. [ 438.299672][T21376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.299696][T21376] CPU: 0 UID: 0 PID: 21376 Comm: syz.9.5256 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.299712][T21376] Tainted: [L]=SOFTLOCKUP [ 438.299716][T21376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 438.299723][T21376] Call Trace: [ 438.299727][T21376] [ 438.299733][T21376] dump_stack_lvl+0x100/0x190 [ 438.299753][T21376] should_fail_ex.cold+0x5/0xa [ 438.299769][T21376] _copy_to_user+0x32/0xd0 [ 438.299784][T21376] msr_read+0x144/0x240 [ 438.299803][T21376] ? __pfx_msr_read+0x10/0x10 [ 438.299820][T21376] ? bpf_lsm_file_permission+0x9/0x10 [ 438.299836][T21376] ? security_file_permission+0x76/0x210 [ 438.299852][T21376] ? rw_verify_area+0xce/0x6d0 [ 438.299863][T21376] ? __pfx_msr_read+0x10/0x10 [ 438.299894][T21376] vfs_read+0x1e4/0xb40 [ 438.299907][T21376] ? lock_acquire+0x1d1/0x380 [ 438.299919][T21376] ? __fget_files+0x34/0x3d0 [ 438.299936][T21376] ? __pfx_vfs_read+0x10/0x10 [ 438.299952][T21376] ? find_held_lock+0x2b/0x80 [ 438.299974][T21376] ? __fget_files+0x215/0x3d0 [ 438.299991][T21376] ? __fget_files+0x215/0x3d0 [ 438.300008][T21376] ? __fget_files+0x21f/0x3d0 [ 438.300032][T21376] ksys_read+0x12a/0x250 [ 438.300049][T21376] ? __pfx_ksys_read+0x10/0x10 [ 438.300073][T21376] do_syscall_64+0x123/0x790 [ 438.300093][T21376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.300107][T21376] RIP: 0033:0x7f6b1859e159 [ 438.300117][T21376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.300127][T21376] RSP: 002b:00007f6b1945a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.300139][T21376] RAX: ffffffffffffffda RBX: 00007f6b18825fa0 RCX: 00007f6b1859e159 [ 438.300147][T21376] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 438.300154][T21376] RBP: 00007f6b1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 438.300160][T21376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.300167][T21376] R13: 00007f6b18826038 R14: 00007f6b18825fa0 R15: 00007fff89abcbc8 [ 438.300181][T21376] [ 438.331034][T21378] __nla_validate_parse: 12 callbacks suppressed [ 438.331053][T21378] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5257'. [ 438.352985][T21378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.358328][T21378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=21378 comm=syz.9.5257 [ 438.823467][T21389] overlayfs: failed to resolve './file1': -2 [ 438.836586][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5261'. [ 438.892151][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5261'. [ 438.936452][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 438.948300][T21393] netlink: 'syz.4.5263': attribute type 28 has an invalid length. [ 438.948313][T21393] netlink: 'syz.4.5263': attribute type 3 has an invalid length. [ 438.948320][T21393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5263'. [ 438.995802][ T43] audit: type=1400 audit(1791595546.509:1927): avc: denied { append } for pid=21400 comm="syz.9.5265" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 439.069782][T21405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5266'. [ 439.220001][T21412] FAULT_INJECTION: forcing a failure. [ 439.220001][T21412] name failslab, interval 1, probability 0, space 0, times 0 [ 439.220046][T21412] CPU: 2 UID: 0 PID: 21412 Comm: syz.9.5268 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.220064][T21412] Tainted: [L]=SOFTLOCKUP [ 439.220069][T21412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.220076][T21412] Call Trace: [ 439.220082][T21412] [ 439.220089][T21412] dump_stack_lvl+0x100/0x190 [ 439.220111][T21412] should_fail_ex.cold+0x5/0xa [ 439.220129][T21412] should_failslab+0xc2/0x120 [ 439.220159][T21412] kmem_cache_alloc_noprof+0x92/0x6a0 [ 439.220175][T21412] ? __kernfs_new_node+0xd2/0xa10 [ 439.220189][T21412] __kernfs_new_node+0xd2/0xa10 [ 439.220207][T21412] ? __pfx___kernfs_new_node+0x10/0x10 [ 439.220219][T21412] ? lock_acquire+0x1d1/0x380 [ 439.220232][T21412] ? kernfs_root+0x23/0x2a0 [ 439.220250][T21412] ? find_held_lock+0x2b/0x80 [ 439.220267][T21412] ? kernfs_root+0xee/0x2a0 [ 439.220285][T21412] ? kernfs_root+0xee/0x2a0 [ 439.220306][T21412] kernfs_new_node+0x117/0x150 [ 439.220320][T21412] kernfs_create_link+0xcc/0x240 [ 439.220335][T21412] sysfs_do_create_link_sd+0x90/0x140 [ 439.220353][T21412] sysfs_create_link+0x61/0xc0 [ 439.220370][T21412] driver_sysfs_add+0x112/0x2d0 [ 439.220386][T21412] really_probe+0x146/0xa60 [ 439.220402][T21412] __driver_probe_device+0x210/0x460 [ 439.220417][T21412] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 439.220430][T21412] driver_probe_device+0x4a/0x140 [ 439.220446][T21412] __driver_attach+0x21f/0x5b0 [ 439.220481][T21412] ? __pfx___driver_attach+0x10/0x10 [ 439.220498][T21412] bus_for_each_dev+0x13e/0x1d0 [ 439.220511][T21412] ? __pfx_bus_for_each_dev+0x10/0x10 [ 439.220524][T21412] ? bus_add_driver+0x2b5/0x5b0 [ 439.220542][T21412] bus_add_driver+0x305/0x5b0 [ 439.220558][T21412] driver_register+0x1e2/0x360 [ 439.220575][T21412] ? rcu_is_watching+0x13/0xc0 [ 439.220593][T21412] usb_gadget_register_driver_owner+0x132/0x210 [ 439.220611][T21412] raw_ioctl+0x1a85/0x2b80 [ 439.220627][T21412] ? __pfx_raw_ioctl+0x10/0x10 [ 439.220640][T21412] ? selinux_file_ioctl+0x13b/0x290 [ 439.220654][T21412] ? selinux_file_ioctl+0xb6/0x290 [ 439.220670][T21412] ? __pfx_raw_ioctl+0x10/0x10 [ 439.220684][T21412] __x64_sys_ioctl+0x18e/0x210 [ 439.220698][T21412] do_syscall_64+0x123/0x790 [ 439.220712][T21412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.220724][T21412] RIP: 0033:0x7f6b1859ddeb [ 439.220734][T21412] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 439.220744][T21412] RSP: 002b:00007f6b19457f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.220756][T21412] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f6b1859ddeb [ 439.220764][T21412] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 439.220770][T21412] RBP: 00007f6b19458fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 439.220777][T21412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.220784][T21412] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 439.220798][T21412] [ 439.220847][T21412] raw-gadget.0 gadget.9: really_probe: driver_sysfs_add failed [ 439.222610][T21412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.223465][T21412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.251995][T21411] UDC core: g1: couldn't find an available UDC or it's busy [ 439.749941][T21423] netlink: 'syz.8.5273': attribute type 6 has an invalid length. [ 439.753200][ T43] audit: type=1400 audit(1791595547.220:1928): avc: denied { write } for pid=21422 comm="syz.8.5273" name="functions" dev="configfs" ino=9954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.765259][ T43] audit: type=1400 audit(1791595547.230:1929): avc: denied { write } for pid=21422 comm="syz.8.5273" name="functions" dev="configfs" ino=9954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.766040][T21423] [ 439.767671][T21421] tipc: Enabling of bearer rejected, already enabled [ 439.779482][T21423] ====================================================== [ 439.782332][T21423] WARNING: possible circular locking dependency detected [ 439.785236][T21423] syzkaller #0 Tainted: G L [ 439.787794][T21423] ------------------------------------------------------ [ 439.790682][T21423] syz.8.5273/21423 is trying to acquire lock: [ 439.793216][T21423] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 439.797323][T21423] [ 439.797323][T21423] but task is already holding lock: [ 439.800333][T21423] ffff888039b88600 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 439.804290][T21423] [ 439.804290][T21423] which lock already depends on the new lock. [ 439.804290][T21423] [ 439.808484][T21423] [ 439.808484][T21423] the existing dependency chain (in reverse order) is: [ 439.812156][T21423] [ 439.812156][T21423] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 439.815694][T21423] lock_acquire+0x1d1/0x380 [ 439.817801][T21423] down_write+0x8b/0x1f0 [ 439.819803][T21423] configfs_depend_item_unlocked+0xf3/0x6a0 [ 439.820271][ T43] audit: type=1400 audit(1791595547.286:1930): avc: denied { ioctl } for pid=21422 comm="syz.8.5273" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 439.829302][T21423] usbg_make_tpg+0x251/0x610 [ 439.830894][T21423] target_fabric_make_tpg+0xab/0x8c0 [ 439.832949][T21423] configfs_mkdir+0x525/0xd40 [ 439.834626][T21423] vfs_mkdir+0x364/0x850 [ 439.836241][T21423] filename_mkdirat+0x48b/0x5e0 [ 439.837950][T21423] __x64_sys_mkdirat+0x89/0xc0 [ 439.839608][T21423] do_syscall_64+0x123/0x790 [ 439.841301][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.843371][T21423] [ 439.843371][T21423] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 439.845939][T21423] lock_acquire+0x1d1/0x380 [ 439.847645][T21423] __mutex_lock+0x1a4/0x1bd0 [ 439.849341][T21423] tcm_alloc_inst+0x5f/0x1e0 [ 439.850910][T21423] try_get_usb_function_instance+0x136/0x1f0 [ 439.853107][T21423] usb_get_function_instance+0x16/0x70 [ 439.855051][T21423] function_make+0x18c/0x3f0 [ 439.856819][T21423] configfs_mkdir+0x525/0xd40 [ 439.858511][T21423] vfs_mkdir+0x364/0x850 [ 439.860070][T21423] filename_mkdirat+0x48b/0x5e0 [ 439.861972][T21423] __x64_sys_mkdirat+0x89/0xc0 [ 439.864024][T21423] do_syscall_64+0x123/0x790 [ 439.866144][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.869000][T21423] [ 439.869000][T21423] -> #1 (func_lock){+.+.}-{4:4}: [ 439.872012][T21423] lock_acquire+0x1d1/0x380 [ 439.874178][T21423] __mutex_lock+0x1a4/0x1bd0 [ 439.876419][T21423] try_get_usb_function_instance+0x26/0x1f0 [ 439.879145][T21423] usb_get_function_instance+0x16/0x70 [ 439.881705][T21423] function_make+0x18c/0x3f0 [ 439.883906][T21423] configfs_mkdir+0x525/0xd40 [ 439.886173][T21423] vfs_mkdir+0x364/0x850 [ 439.888198][T21423] filename_mkdirat+0x48b/0x5e0 [ 439.890503][T21423] __x64_sys_mkdirat+0x89/0xc0 [ 439.892759][T21423] do_syscall_64+0x123/0x790 [ 439.894970][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.897721][T21423] [ 439.897721][T21423] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 439.901166][T21423] check_prev_add+0xeb/0xe60 [ 439.903334][T21423] __lock_acquire+0x1528/0x1f40 [ 439.905647][T21423] lock_acquire+0x1d1/0x380 [ 439.907791][T21423] __mutex_lock+0x1a4/0x1bd0 [ 439.909894][T21423] configfs_rmdir+0x5ae/0x950 [ 439.911980][T21423] vfs_rmdir+0x328/0x8a0 [ 439.914142][T21423] filename_rmdir+0x31a/0x5c0 [ 439.916452][T21423] __x64_sys_rmdir+0x46/0x70 [ 439.918676][T21423] do_syscall_64+0x123/0x790 [ 439.920865][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.923579][T21423] [ 439.923579][T21423] other info that might help us debug this: [ 439.923579][T21423] [ 439.927836][T21423] Chain exists of: [ 439.927836][T21423] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 439.927836][T21423] [ 439.933919][T21423] Possible unsafe locking scenario: [ 439.933919][T21423] [ 439.937056][T21423] CPU0 CPU1 [ 439.939317][T21423] ---- ---- [ 439.941552][T21423] lock(&sb->s_type->i_mutex_key#26); [ 439.943909][T21423] lock(tpg_instances_lock); [ 439.946900][T21423] lock(&sb->s_type->i_mutex_key#26); [ 439.950276][T21423] lock(gadget_subsys.su_mutex); [ 439.952425][T21423] [ 439.952425][T21423] *** DEADLOCK *** [ 439.952425][T21423] [ 439.955775][T21423] locks held by syz.8.5273/21423: 3, last CPU#2: [ 439.958467][T21423] #0: ffff888023dc6460 (sb_writers#15){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 439.962411][T21423] #1: ffff888056733f00 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 439.966895][T21423] #2: ffff888039b88600 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 439.971054][T21423] [ 439.971054][T21423] stack backtrace: [ 439.973516][T21423] CPU: 2 UID: 0 PID: 21423 Comm: syz.8.5273 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.977918][T21423] Tainted: [L]=SOFTLOCKUP [ 439.979701][T21423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.983806][T21423] Call Trace: [ 439.985255][T21423] [ 439.986529][T21423] dump_stack_lvl+0x100/0x190 [ 439.988564][T21423] print_circular_bug.cold+0x178/0x1be [ 439.990796][T21423] check_noncircular+0x146/0x160 [ 439.992941][T21423] check_prev_add+0xeb/0xe60 [ 439.994897][T21423] ? detach_attrs+0x58b/0x7d0 [ 439.996920][T21423] __lock_acquire+0x1528/0x1f40 [ 439.998957][T21423] lock_acquire+0x1d1/0x380 [ 440.000904][T21423] ? configfs_rmdir+0x5ae/0x950 [ 440.002987][T21423] ? __pfx___might_resched+0x10/0x10 [ 440.005206][T21423] ? __lock_acquire+0x5c0/0x1f40 [ 440.007313][T21423] __mutex_lock+0x1a4/0x1bd0 [ 440.009306][T21423] ? configfs_rmdir+0x5ae/0x950 [ 440.011269][T21423] ? configfs_rmdir+0x5ae/0x950 [ 440.013242][T21423] ? reacquire_held_locks+0xdd/0x1f0 [ 440.015417][T21423] ? __pfx___mutex_lock+0x10/0x10 [ 440.017484][T21423] ? do_raw_spin_lock+0x128/0x260 [ 440.019624][T21423] ? find_held_lock+0x2b/0x80 [ 440.021608][T21423] ? fast_dput+0x2fe/0x6f0 [ 440.023446][T21423] ? do_raw_spin_unlock+0x145/0x1e0 [ 440.025571][T21423] ? _raw_spin_unlock+0x28/0x50 [ 440.027514][T21423] ? fast_dput+0x168/0x6f0 [ 440.029270][T21423] ? configfs_rmdir+0x5ae/0x950 [ 440.031198][T21423] configfs_rmdir+0x5ae/0x950 [ 440.033131][T21423] ? __pfx_configfs_rmdir+0x10/0x10 [ 440.035225][T21423] ? __pfx_down_write+0x10/0x10 [ 440.037247][T21423] vfs_rmdir+0x328/0x8a0 [ 440.039043][T21423] filename_rmdir+0x31a/0x5c0 [ 440.041025][T21423] ? __pfx_filename_rmdir+0x10/0x10 [ 440.043144][T21423] ? do_getname+0x191/0x390 [ 440.044977][T21423] __x64_sys_rmdir+0x46/0x70 [ 440.046869][T21423] do_syscall_64+0x123/0x790 [ 440.048723][T21423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.051149][T21423] RIP: 0033:0x7fcf9259e159 [ 440.052839][T21423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.060539][T21423] RSP: 002b:00007fcf93491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 440.063852][T21423] RAX: ffffffffffffffda RBX: 00007fcf92825fa0 RCX: 00007fcf9259e159 [ 440.066893][T21423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 440.069974][T21423] RBP: 00007fcf9263506b R08: 0000000000000000 R09: 0000000000000000 [ 440.073084][T21423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.076146][T21423] R13: 00007fcf92826038 R14: 00007fcf92825fa0 R15: 00007ffd40f22228 [ 440.079196][T21423]