last executing test programs: 2m56.900684889s ago: executing program 1 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbb9, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x6, 0x7, 0x3, 0x200, 0x6, 0x263, 0x6, 0x9, [{0x8, 0x2, 0x2, 0x5}, {0x400000, 0xff, 0x80000000, 0x7e}, {0x80, 0xf98, 0xff, 0x7f}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1}, 0x20004014) 2m56.142924079s ago: executing program 3 (id=123): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) io_setup(0x9, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@dstype3={0x7, 0xc}], 0x1) mount(0x0, 0x0, &(0x7f00000009c0)='incremental-fs\x00', 0x220000, 0x0) syz_emit_vhci(&(0x7f0000000a80)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) 2m55.243748247s ago: executing program 3 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) socket(0x1a, 0x6, 0x6) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xa, 0xffe0}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x3c}}, 0x20000055) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2m55.243582143s ago: executing program 1 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000009c0)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @random="3a91544f07c1", @private0={0xfc, 0x0, '\x00', 0x1}, @random="3f65be59f35b", @empty}}}}, 0x0) 2m55.215310298s ago: executing program 3 (id=127): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x4420, 0x0, "bb02a3c344ca41d6357e544508474004000b42920e61074e0000c534a632cd6193fcf19b2df3eea18b56c54dc46d8b6d2ccd00a0cf11007bbe000400"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38192714", 0x17}], 0x1}], 0x1, 0x40800) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2m55.139334615s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "ff0300", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) write(r0, &(0x7f0000000580)='10', 0x2) 2m54.892813924s ago: executing program 1 (id=132): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) 2m54.892670986s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) r2 = io_uring_setup(0x2b4, &(0x7f0000000440)={0x0, 0x2e8a1, 0xc000, 0x3, 0x118e}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m54.835975831s ago: executing program 1 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m54.828112203s ago: executing program 3 (id=135): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 2m51.622304734s ago: executing program 1 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000400000)={0x0, &(0x7f0000400040)=[@uexit={0x0, 0x18, 0xface}], 0x18}) r4 = memfd_create(&(0x7f0000401000)='test\x00', 0x0) pwrite64(r4, &(0x7f0000402000)="0010010000000000", 0x8, 0x0) pread64(r4, &(0x7f0000010030)=""/8, 0x8, 0x0) pwrite64(r4, &(0x7f0000402000)="0100", 0x2, 0x0) pread64(r4, &(0x7f0000010038)=""/2, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000403000)={0x4, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x80000020}, {0x40000000, 0x0, 0x0, 0x40000005, 0x756e694d, 0x6f726369, 0x3f74666f}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000004, 0x0, 0x0, 0x4000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000404000)={0x1, 0x0, [{0x40000073, 0x0, 0x1}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000405000)=@vmx={0x4, 0x0, 0x1080, {0x102000, 0xffffffffffffffff}, {"0100"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebf, &(0x7f0000406000)=@vmx={0x0, 0x0, 0x1080}) 2m51.540934648s ago: executing program 32 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000400000)={0x0, &(0x7f0000400040)=[@uexit={0x0, 0x18, 0xface}], 0x18}) r4 = memfd_create(&(0x7f0000401000)='test\x00', 0x0) pwrite64(r4, &(0x7f0000402000)="0010010000000000", 0x8, 0x0) pread64(r4, &(0x7f0000010030)=""/8, 0x8, 0x0) pwrite64(r4, &(0x7f0000402000)="0100", 0x2, 0x0) pread64(r4, &(0x7f0000010038)=""/2, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000403000)={0x4, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x80000020}, {0x40000000, 0x0, 0x0, 0x40000005, 0x756e694d, 0x6f726369, 0x3f74666f}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000004, 0x0, 0x0, 0x4000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000404000)={0x1, 0x0, [{0x40000073, 0x0, 0x1}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000405000)=@vmx={0x4, 0x0, 0x1080, {0x102000, 0xffffffffffffffff}, {"0100"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebf, &(0x7f0000406000)=@vmx={0x0, 0x0, 0x1080}) 2m51.441103443s ago: executing program 3 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m51.362353832s ago: executing program 33 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m27.184898967s ago: executing program 4 (id=1785): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m26.944779853s ago: executing program 4 (id=1787): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m26.785049993s ago: executing program 4 (id=1789): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0xf4daaaba4d84d77b, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74", 0xd}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b40)}], 0x6}, 0x54d}], 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m26.63511342s ago: executing program 4 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x7ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffbc2da4abc09b7200000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="040000000000000020001280070001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x1, 0x70000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) 1m26.499072918s ago: executing program 4 (id=1793): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x80000000, 0x0, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) poll(&(0x7f00000000c0)=[{r2, 0x70ac}], 0x1, 0x6) ptrace$getenv(0x4201, r1, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) r3 = fsmount(0xffffffffffffffff, 0x1, 0xb) file_setattr(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa80, 0x4, 0x1, 0xdfed, 0xe7d9}, 0x18, 0x400) 1m25.634858877s ago: executing program 4 (id=1802): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196e", 0xa}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e18", 0xba}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.640270104s ago: executing program 34 (id=1802): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196e", 0xa}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e18", 0xba}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.959813792s ago: executing program 6 (id=3441): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000011002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045) 2.899841278s ago: executing program 6 (id=3443): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xf0ffffffffffff) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0)) 2.839284697s ago: executing program 6 (id=3445): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x40004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.83692641s ago: executing program 6 (id=3447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x900, 0x0, 0x4}, 0x0) 2.738710673s ago: executing program 6 (id=3449): r0 = syz_usb_connect$midi(0x4, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000208205270040000102030109021f0001010400"/38], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x812}}, {0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, {0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="5f03cf8fa36cea66b213ecee91edced45e4a9cf9461c16cedeb06df32d3988f890c959c496268cb58fc062bd6e0023dbcc52efca3981c5ad20e717338b2c9ef536ee9a8a5cc136f51524f251dce91c45924da7ad97b14fb39283e4ea4d4853be075209dad4028819eca10e1d1681755330c671ca18a5f641076e88934d9c62614a7cef05f9aa134e0c9f8d175ffaf09460b27e5c63f36272ca94f149be7769572f20e5fa0724f52d71a132900a0b2382a2d0c112a42e"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88840, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x3, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x4, 0xeb}, {0x3000, 0x80a0000, 0x4, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0xa, 0x1}, {0x8000000, 0x41000, 0x9, 0xe0, 0x6, 0x7, 0x81, 0x3, 0x80, 0x9, 0xe, 0x78}, {0xeeef0000, 0x80a0000, 0x3, 0x3, 0x6, 0x9, 0x0, 0x80, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x6, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0xffff1000, 0x9, 0xb9, 0x9e, 0xfe, 0x42, 0x6, 0x1, 0x1, 0xd, 0x9}, {0x100000, 0xdddd0000, 0x10, 0x1, 0xa, 0x8, 0xa, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0x9, 0x23, 0xc, 0x3, 0x82, 0xc, 0x4, 0x28, 0x43, 0x3}, {0x30000, 0x9}, {0xf7f05000, 0x2}, 0x0, 0x0, 0x60000, 0x150690, 0x3, 0x4100, 0xeeee0c00, [0x2, 0x1004, 0x4, 0x1000]}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_mtu=0x8}) ioctl$sock_netdev_private(r6, 0x8948, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800110100000000fddbdf050a601900ff00fd0900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1810}, 0x8c854) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000000000000000000200000020000000fcffffff95ac000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd}, 0x94) syz_usb_ep_write(r0, 0x9, 0x0, 0x0) 1.93154209s ago: executing program 6 (id=3477): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000100)='V', 0x1) 1.289414666s ago: executing program 5 (id=3491): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0xc, 0xffffffff, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0xffffff7f}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.079049889s ago: executing program 0 (id=3494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffff75, 0x20000) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) syz_clone(0x8003011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff3, 0xd}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xa93}}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendfile(r10, r1, 0x0, 0x8) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) 678.193659ms ago: executing program 2 (id=3497): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07", 0x94}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 538.107104ms ago: executing program 2 (id=3498): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r2) keyctl$search(0xa, r2, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000f80)={0x0, &(0x7f0000000b40)=[@code={0xa, 0x6e, {"c7442400255026b7c7442402505aa9ebc7442406000000000f011c2466410f38f5160f005af266ba4000b82d24a797eff3400f18c066ba4000b000eef2410f015f5566baf80cb879d8bf84ef66bafc0cb000ee0f3a0f2a1236f22e0f09"}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x99, 0x6, 0x9005, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x56, {"c4e1f8173b6466400fc441a2004f0fc76f79c42259b76f28f3430f09c4c1fe2d1367f3470f09b805000000b9000000000f01c166baa10066ed67673e36640fc79ad6000000"}}, @nested_load_syzos={0x136, 0x68, {0x3, 0x9, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4, 0x6}}, @nested_vmresume={0x130, 0x18, 0x1}]}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xd74a, 0x4}}, @rdmsr={0x66, 0x18, {0xb83}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xb0a2}}, @uexit={0x0, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4014, 0x7, 0x8, 0x1}}, @in_dx={0x69, 0x20, {0x6174, 0x4}}, @wrmsr={0x65, 0x20, {0x9e3, 0x40}}, @nested_create_vm={0x12d, 0x18}, @uexit={0x0, 0x18, 0x8000000000000000}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x613, 0x63d00bbd, 0x1, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x48e4, 0x0, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xfffffffffffffffb, 0x9}}], 0x424}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 369.809311ms ago: executing program 5 (id=3499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x0) 369.525945ms ago: executing program 0 (id=3500): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaa09000000dd60cb6500fe800000000000000000000000000000fe8000000000000000000000000000aa8000907800000000"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfb94, 0x4, 0xb7a, 0x3}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001002400000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000400000043000000140004006e696376663000000000000000000000178004000400000000000000"], 0x50}}, 0x4000014) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="040025bd7000fbdbdf250100000300", @ANYRES32=r8, @ANYBLOB="0c0099000c0000004b00000004005f0006003600c20a000024002a0010016c7107000000000103c0651250505050505008021100000108021100000017002a003e0101040606610200040075060100b4ff7bba000a00060008021100000000000a000600509ef97438260000"], 0x88}, 0x1, 0x0, 0x0, 0x24008805}, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000700)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x7, 0x1b3f, 0x3, 0x40000000000001a, 0x3, 0x2, 0xb, 0x100fff}) 369.416803ms ago: executing program 2 (id=3501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x0) (fail_nth: 2) 336.697112ms ago: executing program 5 (id=3502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xf0ff, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9daee93b50574d9}}, 0xb8}}, 0x4000080) 248.319676ms ago: executing program 0 (id=3503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x1, 0x3, 0x6, 0x8, 0x80, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xd, 0xb, 0xa, 0x6, 0x4}, @generic={0x2, 0x7, 0x4, 0xfff, 0x9}, @exit, @snprintf, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x6, 0xb, 0xffffffffffffffc0, 0x10}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xe, 0x7ff, 0x631}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x2, 0x1, 0x4, 0x8}, {0x2, 0x4, 0x3, 0xa}, {0x5, 0x2, 0xe, 0x7}], 0x10, 0x9}, 0x94) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000007c0)={0x7, 0x0, r1}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$kcm(0x10, 0x3, 0x10) read$FUSE(r10, &(0x7f0000000400)={0x2020}, 0x1f8c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc50c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @jmp={0x5, 0x1, 0x5, 0xb, 0x9, 0x4, 0x8}, @alu={0x4, 0x0, 0x9, 0x3, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x400, 0xd6, &(0x7f00000003c0)=""/214, 0x40f00, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r8, 0x0, &(0x7f0000000800)=[r9, r10], 0x0, 0x10, 0x1}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0xc, 0xffffffff, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x3, 0x7) 248.159368ms ago: executing program 5 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x4000020, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 189.726715ms ago: executing program 2 (id=3505): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x15000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 189.536126ms ago: executing program 5 (id=3506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) write(r0, &(0x7f0000000400)="008dff0009020900010100800112010002000000", 0x4000) 119.746608ms ago: executing program 0 (id=3507): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd26", 0x2e}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf932"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 119.636564ms ago: executing program 2 (id=3508): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r0, 0x0, 0x4) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 119.523593ms ago: executing program 5 (id=3509): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x5, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback}, "dc65976c34f7e987"}}}}}, 0x0) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81002000080045080078000000000711"], 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2}) mkdir(0x0, 0x1ff) symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') (async) symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='dummy_udc.0', 0xb) 67.631542ms ago: executing program 0 (id=3510): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYBLOB="01000000bb10030028001280090001007665786879e97ad06576fd794e2a7d05efab6a18ecbf7802e35a493754eab5b54016691e0a6275c3256140de50d4c64ecab1b20cf79b63269f2f133aef2294bf72e4047e9c49b1c2d4aeaa51f1de3d4eb63d141a41a87de40cdf4773d6b7d85d6db8c7448c", @ANYRES32=0x0, @ANYBLOB="820003"], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74", 0xd}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b40)}], 0x6}, 0x54d}], 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 67.348157ms ago: executing program 2 (id=3511): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3", @ANYRESHEX]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x20200, 0x48) move_mount(r0, &(0x7f0000000280)='./file0\x00', r6, &(0x7f0000000300)='./file0\x00', 0x120) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=3512): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x40, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) ioctl$BSG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) io_uring_setup(0x378c, &(0x7f00000000c0)={0x0, 0x8665, 0x80, 0x1, 0x113}) (async) r1 = io_uring_setup(0x378c, &(0x7f00000000c0)={0x0, 0x8665, 0x80, 0x1, 0x113}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, r3, 0x4706, 0x37eba}}, 0x20}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) r4 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000001c0)=""/153) r5 = socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r6}, 0x38) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[r5, r6]}, 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[r5, r6]}, 0x2) kernel console output (not intermixed with test programs): dit: type=1400 audit(2000000049.672:884): avc: denied { create } for pid=12771 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.272600][ T42] audit: type=1400 audit(2000000049.692:885): avc: denied { read } for pid=12771 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.325303][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.328944][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.342851][ T5735] usb 7-1: USB disconnect, device number 16 [ 188.543523][T12785] FAULT_INJECTION: forcing a failure. [ 188.543523][T12785] name failslab, interval 1, probability 10, space 0, times 0 [ 188.547384][T12785] CPU: 0 UID: 0 PID: 12785 Comm: syz.6.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.547402][T12785] Tainted: [L]=SOFTLOCKUP [ 188.547406][T12785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.547414][T12785] Call Trace: [ 188.547418][T12785] [ 188.547423][T12785] dump_stack_lvl+0x100/0x190 [ 188.547441][T12785] should_fail_ex.cold+0x5/0xa [ 188.547456][T12785] should_failslab+0xc2/0x120 [ 188.547471][T12785] __kmalloc_noprof+0xfc/0x820 [ 188.547485][T12785] ? __pfx_dynamic_dname+0x10/0x10 [ 188.547502][T12785] ? tomoyo_encode2+0xfb/0x3c0 [ 188.547515][T12785] tomoyo_encode2+0xfb/0x3c0 [ 188.547528][T12785] tomoyo_encode+0x29/0x50 [ 188.547542][T12785] tomoyo_realpath_from_path+0x18c/0x690 [ 188.547557][T12785] tomoyo_path_number_perm+0x23c/0x580 [ 188.547574][T12785] ? tomoyo_path_number_perm+0x22e/0x580 [ 188.547591][T12785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.547622][T12785] ? find_held_lock+0x2b/0x80 [ 188.547640][T12785] ? __fget_files+0x215/0x3d0 [ 188.547651][T12785] ? hook_file_ioctl_common+0x140/0x440 [ 188.547664][T12785] ? __fget_files+0x215/0x3d0 [ 188.547678][T12785] ? __fget_files+0x21f/0x3d0 [ 188.547692][T12785] security_file_ioctl+0xd3/0x230 [ 188.547711][T12785] __x64_sys_ioctl+0xb7/0x210 [ 188.547729][T12785] do_syscall_64+0x115/0x870 [ 188.547742][T12785] ? clear_bhb_loop+0x40/0x90 [ 188.547756][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.547768][T12785] RIP: 0033:0x7f9a4e59de99 [ 188.547778][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.547789][T12785] RSP: 002b:00007f9a4f4ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.547801][T12785] RAX: ffffffffffffffda RBX: 00007f9a4e825fa0 RCX: 00007f9a4e59de99 [ 188.547808][T12785] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000009 [ 188.547815][T12785] RBP: 00007f9a4f4ab090 R08: 0000000000000000 R09: 0000000000000000 [ 188.547822][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.547829][T12785] R13: 00007f9a4e826038 R14: 00007f9a4e825fa0 R15: 00007ffef7e49ad8 [ 188.547843][T12785] [ 188.547854][T12785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.611227][ T5748] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.633848][ T1490] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 188.637146][ T1490] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 188.758280][ T42] audit: type=1400 audit(2000000050.182:886): avc: denied { sqpoll } for pid=12791 comm="syz.5.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.819671][T12797] syz.5.2337: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.826504][T12797] CPU: 0 UID: 0 PID: 12797 Comm: syz.5.2337 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.826524][T12797] Tainted: [L]=SOFTLOCKUP [ 188.826529][T12797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.826536][T12797] Call Trace: [ 188.826541][T12797] [ 188.826547][T12797] dump_stack_lvl+0x100/0x190 [ 188.826566][T12797] warn_alloc.cold+0x94/0xa8 [ 188.826579][T12797] ? __pfx_warn_alloc+0x10/0x10 [ 188.826594][T12797] ? kasan_save_stack+0x3f/0x50 [ 188.826610][T12797] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 188.826635][T12797] ? vb2_vmalloc_alloc+0xf9/0x410 [ 188.826653][T12797] ? __vb2_queue_alloc+0x8d5/0x1160 [ 188.826671][T12797] ? vb2_core_create_bufs+0x5fa/0xa30 [ 188.826687][T12797] ? vb2_create_bufs+0x40c/0x830 [ 188.826703][T12797] ? v4l_create_bufs+0x17d/0x270 [ 188.826715][T12797] ? __video_do_ioctl+0xb2a/0xdf0 [ 188.826729][T12797] ? video_usercopy+0x47a/0x1730 [ 188.826743][T12797] ? __x64_sys_ioctl+0x18e/0x210 [ 188.826759][T12797] ? do_syscall_64+0x115/0x870 [ 188.826771][T12797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.826784][T12797] ? vb2_vmalloc_alloc+0x135/0x410 [ 188.826803][T12797] __vmalloc_node_range_noprof+0x136c/0x1630 [ 188.826825][T12797] ? vb2_vmalloc_alloc+0x135/0x410 [ 188.826846][T12797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.826865][T12797] ? kasan_save_track+0x14/0x30 [ 188.826878][T12797] ? __kasan_kmalloc+0xaa/0xb0 [ 188.826892][T12797] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 188.826911][T12797] ? vb2_vmalloc_alloc+0x135/0x410 [ 188.826928][T12797] vmalloc_user_noprof+0x9e/0xe0 [ 188.826944][T12797] ? vb2_vmalloc_alloc+0x135/0x410 [ 188.826962][T12797] vb2_vmalloc_alloc+0x135/0x410 [ 188.826979][T12797] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 188.826998][T12797] __vb2_queue_alloc+0x8d5/0x1160 [ 188.827022][T12797] vb2_core_create_bufs+0x5fa/0xa30 [ 188.827042][T12797] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 188.827062][T12797] ? __mutex_lock+0x8f7/0x1bd0 [ 188.827077][T12797] vb2_create_bufs+0x40c/0x830 [ 188.827095][T12797] ? __pfx_vb2_create_bufs+0x10/0x10 [ 188.827111][T12797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.827125][T12797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.827141][T12797] v4l_create_bufs+0x17d/0x270 [ 188.827154][T12797] __video_do_ioctl+0xb2a/0xdf0 [ 188.827170][T12797] ? __might_fault+0xc5/0x140 [ 188.827181][T12797] ? __pfx___video_do_ioctl+0x10/0x10 [ 188.827200][T12797] video_usercopy+0x47a/0x1730 [ 188.827215][T12797] ? __pfx___video_do_ioctl+0x10/0x10 [ 188.827230][T12797] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.827249][T12797] ? __pfx_video_usercopy+0x10/0x10 [ 188.827272][T12797] v4l2_ioctl+0x1bd/0x250 [ 188.827287][T12797] ? __pfx_v4l2_ioctl+0x10/0x10 [ 188.827303][T12797] __x64_sys_ioctl+0x18e/0x210 [ 188.827325][T12797] do_syscall_64+0x115/0x870 [ 188.827343][T12797] ? clear_bhb_loop+0x40/0x90 [ 188.827360][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.827374][T12797] RIP: 0033:0x7f0d7bb9de99 [ 188.827386][T12797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.827399][T12797] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.827411][T12797] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 188.827418][T12797] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000005 [ 188.827426][T12797] RBP: 00007f0d7bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 188.827433][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.827440][T12797] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 188.827455][T12797] [ 188.827460][T12797] Mem-Info: [ 188.943689][T12797] active_anon:34369 inactive_anon:12011 isolated_anon:0 [ 188.943689][T12797] active_file:1124 inactive_file:57113 isolated_file:0 [ 188.943689][T12797] unevictable:1768 dirty:196 writeback:0 [ 188.943689][T12797] slab_reclaimable:9442 slab_unreclaimable:72118 [ 188.943689][T12797] mapped:26715 shmem:36040 pagetables:4069 [ 188.943689][T12797] sec_pagetables:298 bounce:0 [ 188.943689][T12797] kernel_misc_reclaimable:0 [ 188.943689][T12797] free:411792 free_pcp:11328 free_cma:0 [ 188.958502][T12797] Node 0 active_anon:85756kB inactive_anon:48044kB active_file:4496kB inactive_file:227580kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87136kB dirty:784kB writeback:0kB shmem:89188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14304kB pagetables:6684kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 188.971410][T12797] Node 1 active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:55728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 188.972274][T12795] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.981503][T12797] Node 0 DMA free:5860kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:708kB inactive_anon:8196kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 188.981562][T12797] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 188.981587][T12797] Node 0 DMA32 free:115940kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87484kB inactive_anon:39848kB active_file:4496kB inactive_file:227572kB unevictable:3536kB writepending:784kB zspages:0kB present:2080628kB managed:1255244kB mlocked:0kB bounce:0kB free_pcp:31756kB local_pcp:12204kB free_cma:0kB [ 188.981628][T12797] lowmem_reserve[]: 0 0 0 0 0 [ 188.981651][T12797] Node 1 Normal free:1523604kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:872kB unevictable:3536kB writepending:0kB zspages:744kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:12408kB local_pcp:5344kB free_cma:0kB [ 188.981683][T12797] lowmem_reserve[]: 0 0 0 0 0 [ 188.981704][T12797] Node 0 DMA: 23*4kB (UM) 15*8kB (UM) 11*16kB (UM) 11*32kB (UME) 6*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 0*4096kB = 5860kB [ 188.981816][T12797] Node 0 DMA32: 1414*4kB (UME) 875*8kB (UME) 292*16kB (UME) 140*32kB (UME) 135*64kB (UME) 30*128kB (UME) 21*256kB (UM) 17*512kB (UM) 12*1024kB (M) 7*2048kB (UM) 10*4096kB (UM) = 115952kB [ 188.981921][T12797] Node 1 Normal: 359*4kB (UM) 473*8kB (UME) 403*16kB (UM) 382*32kB (UME) 357*64kB (UME) 314*128kB (UME) 276*256kB (U) 262*512kB (UM) 237*1024kB (U) 9*2048kB (UME) 237*4096kB (M) = 1523604kB [ 188.982027][T12797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.982036][T12797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.982045][T12797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.982054][T12797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.982063][T12797] 95073 total pagecache pages [ 188.982068][T12797] 2 pages in swap cache [ 188.982072][T12797] Free swap = 124780kB [ 188.982077][T12797] Total swap = 124996kB [ 188.982082][T12797] 1048443 pages RAM [ 188.982086][T12797] 0 pages HighMem/MovableOnly [ 188.982090][T12797] 285321 pages reserved [ 188.982094][T12797] 0 pages cma reserved [ 189.111718][T12808] FAULT_INJECTION: forcing a failure. [ 189.111718][T12808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.116726][T12808] CPU: 2 UID: 0 PID: 12808 Comm: syz.5.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.116744][T12808] Tainted: [L]=SOFTLOCKUP [ 189.116749][T12808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.116755][T12808] Call Trace: [ 189.116759][T12808] [ 189.116764][T12808] dump_stack_lvl+0x100/0x190 [ 189.116782][T12808] should_fail_ex.cold+0x5/0xa [ 189.116796][T12808] _copy_from_user+0x2e/0xd0 [ 189.116813][T12808] copy_msghdr_from_user+0x9f/0x4c0 [ 189.116833][T12808] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 189.116858][T12808] ___sys_sendmsg+0x106/0x1e0 [ 189.116878][T12808] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.116895][T12808] ? __lock_acquire+0x49f/0x1a40 [ 189.116910][T12808] ? get_pid_task+0x106/0x250 [ 189.116943][T12808] __sys_sendmsg+0x160/0x210 [ 189.116958][T12808] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.116979][T12808] do_syscall_64+0x115/0x870 [ 189.116993][T12808] ? clear_bhb_loop+0x40/0x90 [ 189.117007][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.117019][T12808] RIP: 0033:0x7f0d7bb9de99 [ 189.117029][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.117040][T12808] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.117052][T12808] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 189.117060][T12808] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 189.117067][T12808] RBP: 00007f0d7c9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 189.117073][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.117080][T12808] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 189.117094][T12808] [ 189.175759][ C2] hpet: Lost 2 RTC interrupts [ 189.217564][T12795] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.254202][ T42] audit: type=1400 audit(2000000050.682:887): avc: denied { bind } for pid=12815 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.293247][T12795] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.305135][ T42] audit: type=1326 audit(2000000050.732:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.2346" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42b79de99 code=0x0 [ 189.326948][T12824] program syz.2.2347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.355786][ T42] audit: type=1326 audit(2000000050.782:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.2346" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42b79de99 code=0x0 [ 189.377427][T12795] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.407267][ T42] audit: type=1326 audit(2000000050.832:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.2346" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42b79de99 code=0x0 [ 189.469674][T12830] netlink: 'syz.0.2346': attribute type 4 has an invalid length. [ 189.509546][ T42] audit: type=1400 audit(2000000050.932:891): avc: denied { connect } for pid=12828 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.560181][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.570828][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.583082][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.591804][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.653071][ T42] audit: type=1400 audit(2000000051.072:892): avc: denied { map } for pid=12836 comm="syz.6.2351" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.676165][T12839] netlink: 'syz.5.2352': attribute type 20 has an invalid length. [ 189.678525][T12839] __nla_validate_parse: 3 callbacks suppressed [ 189.678545][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2352'. [ 189.692931][T12839] netlink: 'syz.5.2352': attribute type 20 has an invalid length. [ 189.695324][ T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.697912][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.700365][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2352'. [ 189.703266][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.707412][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.714992][T12841] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 189.771258][ T10] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 189.932654][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 189.935036][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.938342][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.942073][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.945477][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.949768][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 189.952399][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.955702][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.959318][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.963908][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.968133][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 189.970494][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.974243][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.977906][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.987388][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.996602][ T10] usb 7-1: string descriptor 0 read error: -22 [ 189.998660][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 190.003735][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.019461][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 191.083209][T12878] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 191.521777][T12891] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 191.526122][T12891] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:0 [ 192.404510][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2386'. [ 192.550279][T12947] tipc: Enabling of bearer rejected, already enabled [ 193.153477][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2408'. [ 193.375802][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 193.397679][T13012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.455095][T13012] bond3: (slave veth3): Enslaving as an active interface with an up link [ 193.464734][T13018] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 193.985279][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.988243][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.995242][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2430'. [ 193.998119][T13056] openvswitch: netlink: Actions may not be safe on all matching packets qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 194.376318][ T9] usb 7-1: USB disconnect, device number 17 [ 194.434769][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 194.434780][ T42] audit: type=1400 audit(2000000055.863:904): avc: denied { setopt } for pid=13085 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.561155][ T42] audit: type=1400 audit(2000000055.993:905): avc: denied { write } for pid=13093 comm="syz.6.2443" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.585277][ T42] audit: type=1400 audit(2000000056.013:906): avc: denied { shutdown } for pid=13095 comm="syz.5.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.821813][ T42] audit: type=1400 audit(2000000056.243:907): avc: denied { connect } for pid=13108 comm="syz.5.2448" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.951117][T13118] tipc: Failed to obtain node identity [ 194.952820][T13118] tipc: Enabling of bearer rejected, failed to enable media [ 194.988990][T13120] syzkaller0: entered promiscuous mode [ 194.990816][T13120] syzkaller0: entered allmulticast mode [ 195.139813][ T42] audit: type=1400 audit(2000000056.563:908): avc: denied { kexec_image_load } for pid=13125 comm="syz.2.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 195.429610][T13142] syzkaller0: entered promiscuous mode [ 195.435090][T13142] syzkaller0: entered allmulticast mode [ 195.446675][T13142] netlink: 'syz.6.2462': attribute type 4 has an invalid length. [ 195.514380][ T42] audit: type=1400 audit(2000000056.943:909): avc: denied { bind } for pid=13147 comm="syz.0.2465" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.536754][ T42] audit: type=1400 audit(2000000056.943:910): avc: denied { name_bind } for pid=13147 comm="syz.0.2465" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 195.554204][ T42] audit: type=1400 audit(2000000056.943:911): avc: denied { node_bind } for pid=13147 comm="syz.0.2465" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 195.719788][ T42] audit: type=1400 audit(2000000057.143:912): avc: denied { ioctl } for pid=13160 comm="syz.0.2471" path="socket:[80490]" dev="sockfs" ino=80490 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.919097][ T42] audit: type=1400 audit(2000000057.343:913): avc: denied { shutdown } for pid=13174 comm="syz.6.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.008759][T13178] FAULT_INJECTION: forcing a failure. [ 196.008759][T13178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.013409][T13178] CPU: 2 UID: 0 PID: 13178 Comm: syz.5.2477 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.013442][T13178] Tainted: [L]=SOFTLOCKUP [ 196.013447][T13178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.013454][T13178] Call Trace: [ 196.013459][T13178] [ 196.013464][T13178] dump_stack_lvl+0x100/0x190 [ 196.013494][T13178] should_fail_ex.cold+0x5/0xa [ 196.013511][T13178] _copy_to_user+0x32/0xd0 [ 196.013534][T13178] simple_read_from_buffer+0xcb/0x170 [ 196.013549][T13178] proc_fail_nth_read+0x1af/0x230 [ 196.013569][T13178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.013588][T13178] ? rw_verify_area+0xce/0x6d0 [ 196.013604][T13178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.013621][T13178] vfs_read+0x1e4/0xb40 [ 196.013641][T13178] ? __pfx_vfs_read+0x10/0x10 [ 196.013658][T13178] ? __fget_files+0x215/0x3d0 [ 196.013677][T13178] ? __fget_files+0x21f/0x3d0 [ 196.013693][T13178] ksys_read+0x12a/0x250 [ 196.013711][T13178] ? __pfx_ksys_read+0x10/0x10 [ 196.013733][T13178] do_syscall_64+0x115/0x870 [ 196.013750][T13178] ? clear_bhb_loop+0x40/0x90 [ 196.013765][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.013777][T13178] RIP: 0033:0x7f0d7bb5e6ce [ 196.013787][T13178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.013799][T13178] RSP: 002b:00007f0d7c9edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.013810][T13178] RAX: ffffffffffffffda RBX: 00007f0d7c9ee6c0 RCX: 00007f0d7bb5e6ce [ 196.013818][T13178] RDX: 000000000000000f RSI: 00007f0d7c9ee0a0 RDI: 0000000000000004 [ 196.013838][T13178] RBP: 00007f0d7c9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 196.013845][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.013852][T13178] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 196.013867][T13178] [ 196.219027][T13188] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.500322][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2487'. [ 196.501157][T13206] tipc: Failed to obtain node identity [ 196.505028][T13206] tipc: Enabling of bearer rejected, failed to enable media [ 196.658926][T13215] tipc: Failed to obtain node identity [ 196.662235][T13215] tipc: Enabling of bearer rejected, failed to enable media [ 196.728018][T13227] 9p: Invalid gid '0x00000000ffffffff' [ 196.976357][T13247] bridge0: port 3(syz_tun) entered blocking state [ 196.979652][T13247] bridge0: port 3(syz_tun) entered disabled state [ 196.983668][T13247] syz_tun: entered allmulticast mode [ 196.986780][T13247] syz_tun: entered promiscuous mode [ 197.591726][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 197.744161][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.747938][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.751853][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.757887][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.762947][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.772095][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.775261][T13283] Bluetooth: MGMT ver 1.23 [ 197.776157][ T9] usb 7-1: config 0 descriptor?? [ 198.190894][ T9] hid_parser_main: 5 callbacks suppressed [ 198.190910][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.200846][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.203044][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.210456][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.215427][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.219940][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.225087][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.227240][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.229505][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.232221][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 198.256753][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 198.445231][ T9] usb 7-1: USB disconnect, device number 18 [ 198.485767][T13317] Trying to write to read-only block-device nullb0 [ 198.629200][T13326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 198.636556][T13326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 198.639411][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 198.642727][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 198.850101][T13343] tipc: Enabling of bearer rejected, already enabled [ 199.522841][T13390] syzkaller0: entered promiscuous mode [ 199.526970][T13390] syzkaller0: entered allmulticast mode [ 199.769302][T13411] binder: 13408:13411 ioctl c0306201 200000000540 returned -22 [ 199.777492][T13411] binder: 13408:13411 ioctl c0306201 200000000640 returned -22 [ 200.239650][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2573'. [ 200.332367][T13439] kvm: kvm [13438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 200.337898][T13439] kvm: kvm [13438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 200.401406][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.405475][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.640393][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 200.640405][ T42] audit: type=1400 audit(2000000062.053:923): avc: denied { bind } for pid=13457 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.648461][ T42] audit: type=1400 audit(2000000062.053:924): avc: denied { listen } for pid=13457 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.682776][ T42] audit: type=1400 audit(2000000062.103:925): avc: denied { name_bind } for pid=13455 comm="syz.2.2581" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 200.699504][ T42] audit: type=1400 audit(2000000062.113:926): avc: denied { write } for pid=13457 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.525316][ T42] audit: type=1400 audit(2000000062.943:927): avc: denied { create } for pid=13473 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.536915][ T42] audit: type=1400 audit(2000000062.963:928): avc: denied { read } for pid=13473 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.584090][ T42] audit: type=1400 audit(2000000063.003:929): avc: denied { write } for pid=13473 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.805760][T13492] netlink: 'syz.2.2593': attribute type 21 has an invalid length. [ 201.810713][T13492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2593'. [ 201.825156][ T42] audit: type=1400 audit(2000000063.253:930): avc: denied { setattr } for pid=13491 comm="syz.2.2593" name="/" dev="9p" ino=72904267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.018557][T13496] tipc: Enabling of bearer rejected, already enabled [ 202.666117][T13543] netlink: 'syz.5.2610': attribute type 10 has an invalid length. [ 202.670256][T13543] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.672786][T13543] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.683144][T13543] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.685405][T13543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.687765][T13543] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.689955][T13543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.696351][T13543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 202.805101][T13549] syzkaller0: entered promiscuous mode [ 202.809061][T13549] syzkaller0: entered allmulticast mode [ 202.932936][T13561] FAULT_INJECTION: forcing a failure. [ 202.932936][T13561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.940622][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.2.2615 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.940642][T13561] Tainted: [L]=SOFTLOCKUP [ 202.940646][T13561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.940653][T13561] Call Trace: [ 202.940657][T13561] [ 202.940662][T13561] dump_stack_lvl+0x100/0x190 [ 202.940692][T13561] should_fail_ex.cold+0x5/0xa [ 202.940707][T13561] _copy_from_user+0x2e/0xd0 [ 202.940729][T13561] video_usercopy+0xe71/0x1730 [ 202.940750][T13561] ? __pfx___video_do_ioctl+0x10/0x10 [ 202.940765][T13561] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.940786][T13561] ? __pfx_video_usercopy+0x10/0x10 [ 202.940809][T13561] v4l2_ioctl+0x1bd/0x250 [ 202.940824][T13561] ? __pfx_v4l2_ioctl+0x10/0x10 [ 202.940841][T13561] __x64_sys_ioctl+0x18e/0x210 [ 202.940860][T13561] do_syscall_64+0x115/0x870 [ 202.940874][T13561] ? clear_bhb_loop+0x40/0x90 [ 202.940888][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.940900][T13561] RIP: 0033:0x7f652f79de99 [ 202.940909][T13561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.940920][T13561] RSP: 002b:00007f653066f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.940932][T13561] RAX: ffffffffffffffda RBX: 00007f652fa25fa0 RCX: 00007f652f79de99 [ 202.940940][T13561] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000003 [ 202.940947][T13561] RBP: 00007f653066f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.940954][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.940960][T13561] R13: 00007f652fa26038 R14: 00007f652fa25fa0 R15: 00007ffd49ef5bf8 [ 202.940975][T13561] [ 203.069895][ T42] audit: type=1400 audit(2000000064.483:931): avc: denied { read } for pid=13548 comm="syz.0.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.956676][T13573] overlayfs: failed to resolve './file2': -2 [ 204.689994][T13569] tipc: Failed to obtain node identity [ 204.693208][T13569] tipc: Enabling of bearer rejected, failed to enable media [ 204.697751][T13584] sch_fq: defrate 1 ignored. [ 204.771311][T13589] warn_alloc: 1 callbacks suppressed [ 204.771322][T13589] syz.6.2623: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.777640][T13589] CPU: 2 UID: 0 PID: 13589 Comm: syz.6.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.777658][T13589] Tainted: [L]=SOFTLOCKUP [ 204.777662][T13589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.777670][T13589] Call Trace: [ 204.777674][T13589] [ 204.777680][T13589] dump_stack_lvl+0x100/0x190 [ 204.777698][T13589] warn_alloc.cold+0x94/0xa8 [ 204.777711][T13589] ? __pfx_warn_alloc+0x10/0x10 [ 204.777723][T13589] ? __pfx_stack_trace_save+0x10/0x10 [ 204.777738][T13589] ? kasan_save_stack+0x3f/0x50 [ 204.777753][T13589] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 204.777771][T13589] ? vb2_vmalloc_alloc+0xf9/0x410 [ 204.777790][T13589] ? __vb2_queue_alloc+0x8d5/0x1160 [ 204.777807][T13589] ? vb2_core_create_bufs+0x5fa/0xa30 [ 204.777823][T13589] ? vb2_create_bufs+0x40c/0x830 [ 204.777837][T13589] ? v4l_create_bufs+0x17d/0x270 [ 204.777848][T13589] ? __video_do_ioctl+0xb2a/0xdf0 [ 204.777861][T13589] ? video_usercopy+0x47a/0x1730 [ 204.777874][T13589] ? __x64_sys_ioctl+0x18e/0x210 [ 204.777891][T13589] ? do_syscall_64+0x115/0x870 [ 204.777903][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.777916][T13589] ? vb2_vmalloc_alloc+0x135/0x410 [ 204.777935][T13589] __vmalloc_node_range_noprof+0x136c/0x1630 [ 204.777957][T13589] ? vb2_vmalloc_alloc+0x135/0x410 [ 204.777980][T13589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.778000][T13589] ? kasan_save_track+0x14/0x30 [ 204.778013][T13589] ? __kasan_kmalloc+0xaa/0xb0 [ 204.778026][T13589] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 204.778045][T13589] ? vb2_vmalloc_alloc+0x135/0x410 [ 204.778063][T13589] vmalloc_user_noprof+0x9e/0xe0 [ 204.778079][T13589] ? vb2_vmalloc_alloc+0x135/0x410 [ 204.778097][T13589] vb2_vmalloc_alloc+0x135/0x410 [ 204.778114][T13589] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 204.778133][T13589] __vb2_queue_alloc+0x8d5/0x1160 [ 204.778157][T13589] vb2_core_create_bufs+0x5fa/0xa30 [ 204.778176][T13589] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 204.778195][T13589] ? trace_contention_end+0x126/0x160 [ 204.778211][T13589] ? __mutex_lock+0x26d/0x1bd0 [ 204.778229][T13589] vb2_create_bufs+0x40c/0x830 [ 204.778249][T13589] ? __pfx_vb2_create_bufs+0x10/0x10 [ 204.778266][T13589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.778279][T13589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.778295][T13589] v4l_create_bufs+0x17d/0x270 [ 204.778308][T13589] __video_do_ioctl+0xb2a/0xdf0 [ 204.778324][T13589] ? __might_fault+0xc5/0x140 [ 204.778335][T13589] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.778354][T13589] video_usercopy+0x47a/0x1730 [ 204.778370][T13589] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.778384][T13589] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 204.778404][T13589] ? __pfx_video_usercopy+0x10/0x10 [ 204.778427][T13589] v4l2_ioctl+0x1bd/0x250 [ 204.778442][T13589] ? __pfx_v4l2_ioctl+0x10/0x10 [ 204.778457][T13589] __x64_sys_ioctl+0x18e/0x210 [ 204.778475][T13589] do_syscall_64+0x115/0x870 [ 204.778494][T13589] ? clear_bhb_loop+0x40/0x90 [ 204.778508][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.778524][T13589] RIP: 0033:0x7f9a4e59de99 [ 204.778536][T13589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.778548][T13589] RSP: 002b:00007f9a4f4ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.778558][T13589] RAX: ffffffffffffffda RBX: 00007f9a4e825fa0 RCX: 00007f9a4e59de99 [ 204.778566][T13589] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000004 [ 204.778573][T13589] RBP: 00007f9a4e633eaf R08: 0000000000000000 R09: 0000000000000000 [ 204.778581][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.778589][T13589] R13: 00007f9a4e826038 R14: 00007f9a4e825fa0 R15: 00007ffef7e49ad8 [ 204.778605][T13589] [ 204.778610][T13589] Mem-Info: [ 204.805348][T13592] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 204.819282][T13589] active_anon:31428 inactive_anon:14019 isolated_anon:0 [ 204.819282][T13589] active_file:4900 inactive_file:17669 isolated_file:0 [ 204.819282][T13589] unevictable:1768 dirty:75 writeback:0 [ 204.819282][T13589] slab_reclaimable:9494 slab_unreclaimable:72938 [ 204.819282][T13589] mapped:25922 shmem:35171 pagetables:3964 [ 204.819282][T13589] sec_pagetables:299 bounce:0 [ 204.819282][T13589] kernel_misc_reclaimable:0 [ 204.819282][T13589] free:432387 free_pcp:20245 free_cma:0 [ 204.875898][ T42] audit: type=1400 audit(2000000066.293:932): avc: denied { write } for pid=13591 comm="syz.5.2626" name="functions" dev="configfs" ino=16389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.879487][T13589] Node 0 active_anon:75480kB inactive_anon:56076kB active_file:19600kB inactive_file:69760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:83208kB dirty:384kB writeback:0kB shmem:84956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14264kB pagetables:6348kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.947208][T13589] Node 1 active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:55728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.959343][T13589] Node 0 DMA free:5612kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:568kB inactive_anon:8336kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:132kB free_cma:0kB [ 204.968443][T13589] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 204.970333][T13589] Node 0 DMA32 free:243260kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74912kB inactive_anon:47740kB active_file:19600kB inactive_file:69752kB unevictable:3536kB writepending:384kB zspages:0kB present:2080628kB managed:1255244kB mlocked:0kB bounce:0kB free_pcp:21916kB local_pcp:12192kB free_cma:0kB [ 204.989284][T13589] lowmem_reserve[]: 0 0 0 0 0 [ 204.991505][T13589] Node 1 Normal free:1473668kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:916kB unevictable:3536kB writepending:0kB zspages:1172kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:59372kB local_pcp:47624kB free_cma:0kB [ 205.001776][T13589] lowmem_reserve[]: 0 0 0 0 0 [ 205.003283][T13589] Node 0 DMA: 25*4kB (UM) 15*8kB (UM) 11*16kB (UM) 5*32kB (UME) 5*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 0*4096kB = 5612kB [ 205.008707][T13589] Node 0 DMA32: 1876*4kB (UME) 1017*8kB (UME) 530*16kB (UME) 433*32kB (UME) 145*64kB (UME) 122*128kB (UME) 70*256kB (UM) 50*512kB (UM) 32*1024kB (UM) 12*2048kB (UM) 21*4096kB (U) = 249752kB [ 205.014900][T13589] Node 1 Normal: 481*4kB (UM) 476*8kB (UE) 402*16kB (UM) 388*32kB (UME) 374*64kB (UME) 328*128kB (UME) 283*256kB (U) 246*512kB (U) 197*1024kB (U) 6*2048kB (UME) 237*4096kB (M) = 1473668kB [ 205.024404][T13589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.027374][T13589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.030424][T13589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.035071][T13589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.038546][T13589] 57738 total pagecache pages [ 205.040016][T13589] 2 pages in swap cache [ 205.047289][T13589] Free swap = 124524kB [ 205.048942][T13589] Total swap = 124996kB [ 205.051712][T13589] 1048443 pages RAM [ 205.052914][T13589] 0 pages HighMem/MovableOnly [ 205.054455][T13589] 285321 pages reserved [ 205.055767][T13589] 0 pages cma reserved [ 205.195590][T13616] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 205.201096][T13616] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2635'. [ 205.380692][T13630] devpts: Bad value for 'max' [ 205.672731][T13658] tipc: Failed to obtain node identity [ 205.674556][T13658] tipc: Enabling of bearer rejected, failed to enable media [ 205.685579][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2650'. [ 205.699785][T13660] netlink: 'syz.5.2650': attribute type 1 has an invalid length. [ 205.789022][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 205.789035][ T42] audit: type=1400 audit(2000000067.213:945): avc: denied { relabelfrom } for pid=13669 comm="syz.5.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 205.797105][ T42] audit: type=1400 audit(2000000067.223:946): avc: denied { relabelto } for pid=13669 comm="syz.5.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 206.000289][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 206.170240][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 206.175980][ T10] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 206.180557][ T10] usb 11-1: config 0 has no interface number 0 [ 206.182314][ T10] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.190213][ T10] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 206.200212][ T10] usb 11-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 206.203360][ T10] usb 11-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 206.206574][ T10] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.222044][ T10] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 206.224711][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.226953][ T10] usb 11-1: Product: syz [ 206.228149][ T10] usb 11-1: Manufacturer: syz [ 206.229424][ T10] usb 11-1: SerialNumber: syz [ 206.241905][ T10] usb 11-1: config 0 descriptor?? [ 206.250094][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input21 [ 206.447269][ T42] audit: type=1400 audit(2000000067.863:947): avc: denied { append } for pid=13667 comm="syz.6.2652" name="event4" dev="devtmpfs" ino=3283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.455208][T13668] No source specified [ 206.460719][T12031] usb 11-1: USB disconnect, device number 3 [ 206.532070][T13694] SET target dimension over the limit! [ 206.573851][ T42] audit: type=1400 audit(2000000067.993:948): avc: denied { ioctl } for pid=13697 comm="syz.5.2664" path="socket:[84384]" dev="sockfs" ino=84384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.579542][T13698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.594360][T13698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.642699][T13701] bond4: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.651423][T13701] bond4: (slave 26±ÿ): Enslaving as an active interface with an up link [ 206.653989][T13701] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 206.662949][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 206.745591][ T42] audit: type=1400 audit(2000000068.163:949): avc: denied { write } for pid=13712 comm="syz.2.2669" name="cluster" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.759775][T13715] netlink: 'syz.0.2670': attribute type 12 has an invalid length. [ 206.763071][ T42] audit: type=1400 audit(2000000068.173:950): avc: denied { write } for pid=13712 comm="syz.2.2669" name="heartbeat" dev="configfs" ino=83833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.765968][T13715] netlink: 'syz.0.2670': attribute type 29 has an invalid length. [ 206.771920][ T42] audit: type=1400 audit(2000000068.173:951): avc: denied { setopt } for pid=13714 comm="syz.0.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.779408][T13715] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2670'. [ 206.785230][T13715] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 206.789525][T13715] netlink: 'syz.0.2670': attribute type 2 has an invalid length. [ 206.793916][T13715] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2670'. [ 206.798068][T13715] netlink: 'syz.0.2670': attribute type 12 has an invalid length. [ 206.804332][T13715] netlink: 'syz.0.2670': attribute type 29 has an invalid length. [ 206.806559][T13715] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2670'. [ 206.809079][T13715] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 206.816038][T13715] netlink: 'syz.0.2670': attribute type 2 has an invalid length. [ 206.819633][T13715] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2670'. [ 206.822998][T13717] 9pnet_fd: p9_fd_create_unix (13717): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 207.224493][T13755] jfs: Unknown parameter 'usrquotam0' [ 207.258813][T13755] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2688'. [ 207.370670][T13766] syzkaller0: entered promiscuous mode [ 207.373009][T13766] syzkaller0: entered allmulticast mode [ 207.459732][T13776] binder: 13775:13776 ioctl c018620c 2000000005c0 returned -1 [ 207.466815][ T42] audit: type=1400 audit(2000000068.883:952): avc: denied { connect } for pid=13775 comm="syz.5.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.603662][ T42] audit: type=1400 audit(2000000069.023:953): avc: denied { setopt } for pid=13779 comm="syz.6.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.611075][ T42] audit: type=1400 audit(2000000069.023:954): avc: denied { read } for pid=13779 comm="syz.6.2698" path="socket:[83952]" dev="sockfs" ino=83952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.659857][T13797] tipc: Failed to obtain node identity [ 207.670192][T13797] tipc: Enabling of bearer rejected, failed to enable media [ 207.701828][T13801] overlayfs: failed to resolve './cgroup': -2 [ 207.747860][T13807] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.061400][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2719'. [ 208.266247][T13856] netlink: 'syz.0.2728': attribute type 2 has an invalid length. [ 208.270894][T13856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'. [ 208.289152][T13858] tipc: Enabling of bearer rejected, failed to enable media [ 208.325392][T13863] syzkaller0: entered promiscuous mode [ 208.327189][T13863] syzkaller0: entered allmulticast mode [ 208.349037][T13867] tipc: Failed to obtain node identity [ 208.355834][T13867] tipc: Enabling of bearer rejected, failed to enable media [ 208.473916][T13877] fuse: Bad value for 'fd' [ 208.669397][T13893] netlink: 'syz.0.2743': attribute type 9 has an invalid length. [ 208.871414][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 208.981486][T13924] tipc: Enabling of bearer rejected, already enabled [ 209.122715][T13930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2756'. [ 209.332758][ T5748] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.640058][ T34] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 209.733039][T13972] netlink: 'syz.5.2775': attribute type 3 has an invalid length. [ 209.736513][T13972] usb usb1: usbfs: process 13972 (syz.5.2775) did not claim interface 0 before use [ 209.811835][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.815277][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.818371][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.822702][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.825615][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.829857][ T34] usb 7-1: config 0 descriptor?? [ 209.996124][T13986] MPI: mpi too large (16392 bits) [ 210.243456][ T34] hid_parser_main: 28 callbacks suppressed [ 210.243470][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.250038][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.253010][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.258502][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.262993][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.265460][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.267813][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.270478][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.272811][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.275083][ T34] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.286851][ T34] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 210.323255][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2792'. [ 210.326140][T14010] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2792'. [ 210.329442][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2792'. [ 210.382425][T14015] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 210.432799][T14018] tipc: Failed to obtain node identity [ 210.434533][T14018] tipc: Enabling of bearer rejected, failed to enable media [ 210.501101][ T10] usb 7-1: USB disconnect, device number 19 [ 210.729670][T14033] FAULT_INJECTION: forcing a failure. [ 210.729670][T14033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.734132][T14033] CPU: 2 UID: 0 PID: 14033 Comm: syz.5.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.734150][T14033] Tainted: [L]=SOFTLOCKUP [ 210.734154][T14033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.734174][T14033] Call Trace: [ 210.734179][T14033] [ 210.734184][T14033] dump_stack_lvl+0x100/0x190 [ 210.734220][T14033] should_fail_ex.cold+0x5/0xa [ 210.734236][T14033] _copy_from_user+0x2e/0xd0 [ 210.734262][T14033] do_ipv6_setsockopt+0x73d/0x44a0 [ 210.734283][T14033] ? find_held_lock+0x2b/0x80 [ 210.734301][T14033] ? avc_has_perm_noaudit+0x30/0x3b0 [ 210.734315][T14033] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 210.734331][T14033] ? avc_has_perm_noaudit+0x145/0x3b0 [ 210.734346][T14033] ? avc_has_perm+0x135/0x1e0 [ 210.734359][T14033] ? __pfx_avc_has_perm+0x10/0x10 [ 210.734373][T14033] ? get_pid_task+0x106/0x250 [ 210.734394][T14033] ? sock_has_perm+0x25a/0x2f0 [ 210.734409][T14033] ? __pfx_sock_has_perm+0x10/0x10 [ 210.734424][T14033] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 210.734444][T14033] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 210.734467][T14033] ? ipv6_setsockopt+0xcb/0x170 [ 210.734479][T14033] ? __fget_files+0x215/0x3d0 [ 210.734490][T14033] ipv6_setsockopt+0xcb/0x170 [ 210.734505][T14033] udpv6_setsockopt+0x64/0xb0 [ 210.734521][T14033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 210.734544][T14033] do_sock_setsockopt+0xf3/0x1d0 [ 210.734563][T14033] __sys_setsockopt+0x195/0x220 [ 210.734580][T14033] __x64_sys_setsockopt+0xbd/0x160 [ 210.734593][T14033] ? do_syscall_64+0x90/0x870 [ 210.734606][T14033] ? lockdep_hardirqs_on+0x78/0x100 [ 210.734619][T14033] do_syscall_64+0x115/0x870 [ 210.734631][T14033] ? clear_bhb_loop+0x40/0x90 [ 210.734646][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.734657][T14033] RIP: 0033:0x7f0d7bb9de99 [ 210.734668][T14033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.734679][T14033] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.734690][T14033] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 210.734698][T14033] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 210.734705][T14033] RBP: 00007f0d7c9ee090 R08: 0000000000000108 R09: 0000000000000000 [ 210.734712][T14033] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 210.734719][T14033] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 210.734733][T14033] [ 210.811353][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 210.811363][ C2] hpet: Lost 4 RTC interrupts [ 210.879771][T14037] xt_socket: unknown flags 0x48 [ 210.884615][T14037] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 210.921933][T14037] netlink: 'syz.5.2801': attribute type 1 has an invalid length. [ 210.959779][T14037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.023433][T14037] bond2: (slave geneve2): making interface the new active one [ 211.037502][T14037] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 211.282721][ T42] audit: type=1400 audit(2000000072.704:969): avc: denied { write } for pid=14059 comm="syz.2.2809" name="functions" dev="configfs" ino=16389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.290598][ T42] audit: type=1400 audit(2000000072.704:970): avc: denied { write } for pid=14059 comm="syz.2.2809" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.299118][ T42] audit: type=1400 audit(2000000072.704:971): avc: denied { write } for pid=14059 comm="syz.2.2809" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.319818][ T42] audit: type=1400 audit(2000000072.704:972): avc: denied { write } for pid=14059 comm="syz.2.2809" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.369482][T14068] /dev/sg0: Can't lookup blockdev [ 211.444079][T14075] gtp1: entered promiscuous mode [ 211.445859][T14075] gtp1: entered allmulticast mode [ 211.448147][T14075] team0: Device gtp1 is up. Set it down before adding it as a team port [ 211.679585][T14094] bond0: (slave bridge0): Releasing backup interface [ 211.684455][T14096] FAULT_INJECTION: forcing a failure. [ 211.684455][T14096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.687005][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.688841][T14096] CPU: 2 UID: 0 PID: 14096 Comm: syz.6.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.688860][T14096] Tainted: [L]=SOFTLOCKUP [ 211.688864][T14096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.688871][T14096] Call Trace: [ 211.688876][T14096] [ 211.688881][T14096] dump_stack_lvl+0x100/0x190 [ 211.688899][T14096] should_fail_ex.cold+0x5/0xa [ 211.688914][T14096] _copy_from_user+0x2e/0xd0 [ 211.688931][T14096] copy_group_source_from_sockptr+0x538/0x5b0 [ 211.688946][T14096] ? find_held_lock+0x2b/0x80 [ 211.688965][T14096] ? __pfx_copy_group_source_from_sockptr+0x10/0x10 [ 211.688981][T14096] ? __lock_acquire+0x49f/0x1a40 [ 211.688998][T14096] ? __lock_acquire+0x49f/0x1a40 [ 211.689019][T14096] ? find_held_lock+0x2b/0x80 [ 211.689043][T14096] ? is_bpf_text_address+0x8a/0x1a0 [ 211.689059][T14096] ? look_up_lock_class+0x55/0x120 [ 211.689072][T14096] ? is_bpf_text_address+0x8a/0x1a0 [ 211.689089][T14096] do_ipv6_mcast_group_source+0xbc/0x270 [ 211.689105][T14096] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 211.689132][T14096] ? __local_bh_enable_ip+0x9e/0x120 [ 211.689153][T14096] ? lockdep_hardirqs_on+0x78/0x100 [ 211.689173][T14096] do_ipv6_setsockopt+0x1fb5/0x44a0 [ 211.689191][T14096] ? avc_has_perm_noaudit+0x30/0x3b0 [ 211.689206][T14096] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 211.689225][T14096] ? avc_has_perm_noaudit+0x145/0x3b0 [ 211.689240][T14096] ? avc_has_perm+0x135/0x1e0 [ 211.689253][T14096] ? __pfx_avc_has_perm+0x10/0x10 [ 211.689268][T14096] ? get_pid_task+0x106/0x250 [ 211.689289][T14096] ? sock_has_perm+0x25a/0x2f0 [ 211.689304][T14096] ? __pfx_sock_has_perm+0x10/0x10 [ 211.689319][T14096] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 211.689338][T14096] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 211.689361][T14096] ? ipv6_setsockopt+0xcb/0x170 [ 211.689373][T14096] ? __fget_files+0x215/0x3d0 [ 211.689384][T14096] ipv6_setsockopt+0xcb/0x170 [ 211.689402][T14096] udpv6_setsockopt+0x64/0xb0 [ 211.689418][T14096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 211.689437][T14096] do_sock_setsockopt+0xf3/0x1d0 [ 211.689454][T14096] __sys_setsockopt+0x195/0x220 [ 211.689471][T14096] __x64_sys_setsockopt+0xbd/0x160 [ 211.689484][T14096] ? do_syscall_64+0x90/0x870 [ 211.689496][T14096] ? lockdep_hardirqs_on+0x78/0x100 [ 211.689508][T14096] do_syscall_64+0x115/0x870 [ 211.689520][T14096] ? clear_bhb_loop+0x40/0x90 [ 211.689539][T14096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.689551][T14096] RIP: 0033:0x7f9a4e59de99 [ 211.689564][T14096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.689575][T14096] RSP: 002b:00007f9a4f4ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.689586][T14096] RAX: ffffffffffffffda RBX: 00007f9a4e825fa0 RCX: 00007f9a4e59de99 [ 211.689594][T14096] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 211.689601][T14096] RBP: 00007f9a4f4ab090 R08: 0000000000000108 R09: 0000000000000000 [ 211.689609][T14096] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 211.689619][T14096] R13: 00007f9a4e826038 R14: 00007f9a4e825fa0 R15: 00007ffef7e49ad8 [ 211.689642][T14096] [ 211.789927][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.809781][T14094] bridge_slave_0: left allmulticast mode [ 211.812025][T14094] bridge_slave_0: left promiscuous mode [ 211.813157][T14101] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 211.813911][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.834847][T14094] bridge_slave_1: left allmulticast mode [ 211.838620][T14094] bridge_slave_1: left promiscuous mode [ 211.841766][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.848692][T14094] bond0: (slave bond_slave_0): Releasing backup interface [ 211.854493][T14094] bond0: (slave bond_slave_1): Releasing backup interface [ 211.863785][T14094] team0: Port device team_slave_0 removed [ 211.867899][T14094] team0: Port device team_slave_1 removed [ 211.870804][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.873046][T14094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.877479][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.881351][T14094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.884903][T14094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.950690][T14094] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 211.986015][T14116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2828'. [ 212.048725][ T42] audit: type=1400 audit(2000000073.464:973): avc: denied { write } for pid=14120 comm="syz.5.2830" name="/" dev="9p" ino=72904267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.067671][T14121] tipc: Failed to obtain node identity [ 212.069551][T14121] tipc: Enabling of bearer rejected, failed to enable media [ 212.082966][T14125] netlink: 'syz.0.2832': attribute type 3 has an invalid length. [ 212.189866][ T10] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 212.358339][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.365791][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.368880][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.373616][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.376633][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.382594][ T10] usb 11-1: config 0 descriptor?? [ 212.547067][T14154] netlink: 'syz.2.2843': attribute type 3 has an invalid length. [ 212.658582][ T42] audit: type=1800 audit(2000000074.074:974): pid=14160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2846" name="midi1_first_group" dev="configfs" ino=87841 res=0 errno=0 [ 212.804383][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 212.984888][T14173] FAULT_INJECTION: forcing a failure. [ 212.984888][T14173] name failslab, interval 1, probability 10, space 0, times 0 [ 212.990225][T14173] CPU: 3 UID: 0 PID: 14173 Comm: syz.5.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.990244][T14173] Tainted: [L]=SOFTLOCKUP [ 212.990248][T14173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.990255][T14173] Call Trace: [ 212.990259][T14173] [ 212.990264][T14173] dump_stack_lvl+0x100/0x190 [ 212.990282][T14173] should_fail_ex.cold+0x5/0xa [ 212.990297][T14173] should_failslab+0xc2/0x120 [ 212.990313][T14173] __kmalloc_noprof+0xfc/0x820 [ 212.990325][T14173] ? __lock_acquire+0x49f/0x1a40 [ 212.990340][T14173] ? sock_kmalloc+0x111/0x170 [ 212.990360][T14173] sock_kmalloc+0x111/0x170 [ 212.990378][T14173] __ipv6_sock_mc_join+0x3ef/0x8e0 [ 212.990396][T14173] ? look_up_lock_class+0x55/0x120 [ 212.990409][T14173] ? is_bpf_text_address+0x8a/0x1a0 [ 212.990426][T14173] do_ipv6_mcast_group_source+0x21e/0x270 [ 212.990441][T14173] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 212.990469][T14173] ? __local_bh_enable_ip+0x9e/0x120 [ 212.990484][T14173] ? lockdep_hardirqs_on+0x78/0x100 [ 212.990499][T14173] do_ipv6_setsockopt+0x1fb5/0x44a0 [ 212.990514][T14173] ? avc_has_perm_noaudit+0x30/0x3b0 [ 212.990534][T14173] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 212.990550][T14173] ? avc_has_perm_noaudit+0x145/0x3b0 [ 212.990569][T14173] ? avc_has_perm+0x135/0x1e0 [ 212.990582][T14173] ? __pfx_avc_has_perm+0x10/0x10 [ 212.990597][T14173] ? get_pid_task+0x106/0x250 [ 212.990618][T14173] ? sock_has_perm+0x25a/0x2f0 [ 212.990633][T14173] ? __pfx_sock_has_perm+0x10/0x10 [ 212.990649][T14173] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 212.990669][T14173] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 212.990692][T14173] ? ipv6_setsockopt+0xcb/0x170 [ 212.990704][T14173] ? __fget_files+0x215/0x3d0 [ 212.990718][T14173] ipv6_setsockopt+0xcb/0x170 [ 212.990733][T14173] udpv6_setsockopt+0x64/0xb0 [ 212.990749][T14173] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.990768][T14173] do_sock_setsockopt+0xf3/0x1d0 [ 212.990786][T14173] __sys_setsockopt+0x195/0x220 [ 212.990802][T14173] __x64_sys_setsockopt+0xbd/0x160 [ 212.990815][T14173] ? do_syscall_64+0x90/0x870 [ 212.990828][T14173] ? lockdep_hardirqs_on+0x78/0x100 [ 212.990840][T14173] do_syscall_64+0x115/0x870 [ 212.990852][T14173] ? clear_bhb_loop+0x40/0x90 [ 212.990867][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.990879][T14173] RIP: 0033:0x7f0d7bb9de99 [ 212.990890][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.990901][T14173] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.990912][T14173] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 212.990919][T14173] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 212.990926][T14173] RBP: 00007f0d7c9ee090 R08: 0000000000000108 R09: 0000000000000000 [ 212.990933][T14173] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 212.990939][T14173] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 212.990954][T14173] [ 213.052497][ T10] usb 11-1: USB disconnect, device number 4 [ 213.097958][ T42] audit: type=1400 audit(2000000074.514:975): avc: denied { bind } for pid=14176 comm="syz.5.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 213.114998][T14177] random: crng reseeded on system resumption [ 213.115094][ T42] audit: type=1400 audit(2000000074.534:976): avc: denied { write } for pid=14176 comm="syz.5.2853" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.132873][ T42] audit: type=1400 audit(2000000074.554:977): avc: denied { ioctl } for pid=14176 comm="syz.5.2853" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.134141][T14177] atomic_op ffff888027bda198 conn xmit_atomic 0000000000000000 [ 213.453328][T14210] Process accounting resumed [ 213.663836][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2874'. [ 213.701111][T14240] netlink: 'syz.6.2876': attribute type 12 has an invalid length. [ 213.704627][T14240] netlink: 'syz.6.2876': attribute type 29 has an invalid length. [ 213.707575][T14240] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2876'. [ 213.711752][T14240] netlink: 'syz.6.2876': attribute type 1 has an invalid length. [ 213.714315][T14240] netlink: 'syz.6.2876': attribute type 2 has an invalid length. [ 213.717454][T14240] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2876'. [ 213.734924][T14236] team0: Mode changed to "loadbalance" [ 213.737961][T14236] futex_wake_op: syz.5.2874 tries to shift op by -1; fix this program [ 213.923005][T14257] bond1: entered promiscuous mode [ 214.234556][T14297] netlink: 'syz.0.2897': attribute type 12 has an invalid length. [ 214.237066][T14297] netlink: 'syz.0.2897': attribute type 29 has an invalid length. [ 214.239477][T14297] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2897'. [ 214.243106][T14297] netlink: 'syz.0.2897': attribute type 1 has an invalid length. [ 214.245577][T14297] netlink: 'syz.0.2897': attribute type 2 has an invalid length. [ 214.247910][T14297] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2897'. [ 214.341420][T14305] tipc: Enabling of bearer rejected, already enabled [ 214.438902][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.443793][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.651819][T14332] gre0: Caught tx_queue_len zero misconfig [ 215.044005][T14352] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2919'. [ 215.068803][T14355] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2921'. [ 215.076616][T14355] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2921'. [ 215.280704][T14375] fuse: fd is not a fuse device [ 215.335444][T14381] fuse: fd is not a fuse device [ 215.347550][T14381] gtp1: entered promiscuous mode [ 215.351495][T14381] gtp1: entered allmulticast mode [ 215.830303][T12031] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 216.005953][T12031] usb 11-1: config index 0 descriptor too short (expected 28277, got 36) [ 216.011978][ T50] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 216.015389][T12031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.022531][T12031] usb 11-1: config 0 has no interfaces? [ 216.026342][T12031] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 216.034182][T12031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.041568][T12031] usb 11-1: config 0 descriptor?? [ 216.088703][T14454] tipc: Enabling of bearer rejected, already enabled [ 216.171150][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.176399][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.180850][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.186098][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.191057][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.199659][ T50] usb 7-1: config 0 descriptor?? [ 216.211114][T14458] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 216.309487][ T10] usb 11-1: USB disconnect, device number 5 [ 216.623469][ T50] hid_parser_main: 66 callbacks suppressed [ 216.623484][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.630787][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.633993][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.637043][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.641128][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.645789][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.648944][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.652471][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.655551][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.659362][ T50] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 216.672920][ T50] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 216.825587][ T34] usb 7-1: USB disconnect, device number 20 [ 216.925758][T14507] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 216.975006][T14514] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 217.044980][T14514] 9pnet_fd: Insufficient options for proto=fd [ 217.047001][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 217.047011][ T42] audit: type=1400 audit(2000000078.464:988): avc: denied { mounton } for pid=14513 comm="syz.5.2971" path="/598/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 217.159857][ T42] audit: type=1400 audit(2000000078.584:989): avc: denied { unmount } for pid=6405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 217.298056][ T42] audit: type=1400 audit(2000000078.714:990): avc: denied { listen } for pid=14543 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.398600][ T42] audit: type=1400 audit(2000000078.804:991): avc: denied { write } for pid=14548 comm="syz.2.2984" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.408451][ T42] audit: type=1400 audit(2000000078.824:992): avc: denied { write } for pid=14548 comm="syz.2.2984" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.417267][ T42] audit: type=1400 audit(2000000078.824:993): avc: denied { write } for pid=14548 comm="syz.2.2984" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.500099][ T42] audit: type=1400 audit(2000000078.914:994): avc: denied { load_policy } for pid=14556 comm="syz.2.2986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 217.516139][T14557] SELinux: ebitmap: empty map [ 217.539285][T14557] SELinux: invalid class [ 217.555426][T14557] SELinux: failed to load policy [ 217.827035][ T42] audit: type=1400 audit(2000000079.244:995): avc: denied { bind } for pid=14575 comm="syz.5.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.827311][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2992'. [ 217.837474][ T42] audit: type=1400 audit(2000000079.244:996): avc: denied { bind } for pid=14577 comm="syz.2.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.846566][ T42] audit: type=1400 audit(2000000079.264:997): avc: denied { write } for pid=14577 comm="syz.2.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.917033][T14581] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.936543][T14583] syzkaller0: entered promiscuous mode [ 217.938358][T14583] syzkaller0: entered allmulticast mode [ 217.947364][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.951581][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.094076][T14587] binder: BC_ATTEMPT_ACQUIRE not supported [ 218.102985][T14587] binder: 14586:14587 ioctl c0306201 200000000000 returned -22 [ 218.166528][T14600] warn_alloc: 5 callbacks suppressed [ 218.166540][T14600] syz.2.3000: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.195779][T14600] CPU: 0 UID: 0 PID: 14600 Comm: syz.2.3000 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.195799][T14600] Tainted: [L]=SOFTLOCKUP [ 218.195804][T14600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.195811][T14600] Call Trace: [ 218.195816][T14600] [ 218.195821][T14600] dump_stack_lvl+0x100/0x190 [ 218.195850][T14600] warn_alloc.cold+0x94/0xa8 [ 218.195863][T14600] ? __pfx_warn_alloc+0x10/0x10 [ 218.195876][T14600] ? register_lock_class+0x40/0x560 [ 218.195892][T14600] ? kasan_save_stack+0x3f/0x50 [ 218.195906][T14600] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 218.195924][T14600] ? xskq_create+0x52/0x1d0 [ 218.195944][T14600] ? xsk_setsockopt+0x743/0xab0 [ 218.195962][T14600] ? do_sock_setsockopt+0xf3/0x1d0 [ 218.195978][T14600] ? __sys_setsockopt+0x195/0x220 [ 218.195991][T14600] ? __x64_sys_setsockopt+0xbd/0x160 [ 218.196005][T14600] ? do_syscall_64+0x115/0x870 [ 218.196019][T14600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.196047][T14600] ? xskq_create+0xfb/0x1d0 [ 218.196060][T14600] __vmalloc_node_range_noprof+0x136c/0x1630 [ 218.196082][T14600] ? xskq_create+0xfb/0x1d0 [ 218.196097][T14600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.196118][T14600] ? kasan_save_track+0x14/0x30 [ 218.196132][T14600] ? __kasan_kmalloc+0xaa/0xb0 [ 218.196146][T14600] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 218.196166][T14600] ? xskq_create+0xfb/0x1d0 [ 218.196195][T14600] vmalloc_user_noprof+0x9e/0xe0 [ 218.196214][T14600] ? xskq_create+0xfb/0x1d0 [ 218.196226][T14600] xskq_create+0xfb/0x1d0 [ 218.196239][T14600] xsk_setsockopt+0x743/0xab0 [ 218.196259][T14600] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.196278][T14600] ? find_held_lock+0x2b/0x80 [ 218.196296][T14600] ? __fget_files+0x215/0x3d0 [ 218.196314][T14600] ? selinux_socket_setsockopt+0x6a/0x80 [ 218.196331][T14600] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.196349][T14600] do_sock_setsockopt+0xf3/0x1d0 [ 218.196368][T14600] __sys_setsockopt+0x195/0x220 [ 218.196385][T14600] __x64_sys_setsockopt+0xbd/0x160 [ 218.196399][T14600] ? do_syscall_64+0x90/0x870 [ 218.196435][T14600] ? lockdep_hardirqs_on+0x78/0x100 [ 218.196448][T14600] do_syscall_64+0x115/0x870 [ 218.196460][T14600] ? clear_bhb_loop+0x40/0x90 [ 218.196480][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.196493][T14600] RIP: 0033:0x7f652f79de99 [ 218.196504][T14600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.196516][T14600] RSP: 002b:00007f653066f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.196528][T14600] RAX: ffffffffffffffda RBX: 00007f652fa25fa0 RCX: 00007f652f79de99 [ 218.196537][T14600] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 218.196545][T14600] RBP: 00007f652f833eaf R08: 0000000000000029 R09: 0000000000000000 [ 218.196552][T14600] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.196559][T14600] R13: 00007f652fa26038 R14: 00007f652fa25fa0 R15: 00007ffd49ef5bf8 [ 218.196575][T14600] [ 218.206960][T14600] Mem-Info: [ 218.296933][T14600] active_anon:31494 inactive_anon:14014 isolated_anon:0 [ 218.296933][T14600] active_file:4900 inactive_file:17696 isolated_file:0 [ 218.296933][T14600] unevictable:1768 dirty:41 writeback:0 [ 218.296933][T14600] slab_reclaimable:9517 slab_unreclaimable:72452 [ 218.296933][T14600] mapped:25972 shmem:35186 pagetables:4016 [ 218.296933][T14600] sec_pagetables:299 bounce:0 [ 218.296933][T14600] kernel_misc_reclaimable:0 [ 218.296933][T14600] free:430750 free_pcp:20260 free_cma:0 [ 218.317437][T14600] Node 0 active_anon:73416kB inactive_anon:56056kB active_file:19600kB inactive_file:69868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:83408kB dirty:164kB writeback:0kB shmem:85016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14360kB pagetables:6472kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 218.328687][T14600] Node 1 active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:55728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 218.339753][T14600] Node 0 DMA free:5676kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:568kB inactive_anon:8336kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:112kB free_cma:0kB [ 218.350540][T14600] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 218.352623][T14600] Node 0 DMA32 free:202860kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73016kB inactive_anon:47720kB active_file:19600kB inactive_file:69860kB unevictable:3536kB writepending:164kB zspages:0kB present:2080628kB managed:1255244kB mlocked:0kB bounce:0kB free_pcp:51836kB local_pcp:16676kB free_cma:0kB [ 218.362573][T14600] lowmem_reserve[]: 0 0 0 0 0 [ 218.363965][T14600] Node 1 Normal free:1506020kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52476kB inactive_anon:0kB active_file:0kB inactive_file:916kB unevictable:3536kB writepending:0kB zspages:1172kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:29432kB local_pcp:8016kB free_cma:0kB [ 218.374058][T14600] lowmem_reserve[]: 0 0 0 0 0 [ 218.375452][T14600] Node 0 DMA: 25*4kB (UM) 15*8kB (UM) 9*16kB (UM) 8*32kB (UME) 5*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 0*4096kB = 5676kB [ 218.380341][T14600] Node 0 DMA32: 404*4kB (UME) 422*8kB (UME) 225*16kB (UME) 286*32kB (UME) 117*64kB (UME) 68*128kB (UME) 76*256kB (UM) 52*512kB (UM) 34*1024kB (UM) 3*2048kB (U) 20*4096kB (U) = 202896kB [ 218.386543][T14600] Node 1 Normal: 479*4kB (UM) 475*8kB (UE) 403*16kB (UM) 395*32kB (UME) 374*64kB (UME) 329*128kB (UME) 284*256kB (U) 248*512kB (U) 225*1024kB (U) 7*2048kB (UME) 237*4096kB (M) = 1506020kB [ 218.393321][T14600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.396369][T14600] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.399154][T14600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.402131][T14600] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.404993][T14600] 57781 total pagecache pages [ 218.406544][T14600] 3 pages in swap cache [ 218.407824][T14600] Free swap = 124524kB [ 218.409137][T14600] Total swap = 124996kB [ 218.410584][T14600] 1048443 pages RAM [ 218.411807][T14600] 0 pages HighMem/MovableOnly [ 218.413266][T14600] 285321 pages reserved [ 218.414546][T14600] 0 pages cma reserved [ 218.420398][T14614] tipc: Enabling of bearer rejected, already enabled [ 219.349554][ T50] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 219.502165][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 219.509441][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 219.514859][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 219.525132][ T50] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 219.529763][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.534092][ T50] usb 7-1: Product: syz [ 219.535839][ T50] usb 7-1: Manufacturer: syz [ 219.540068][ T50] usb 7-1: SerialNumber: syz [ 219.549182][ T50] usb 7-1: config 0 descriptor?? [ 219.665242][T14675] syzkaller1: entered promiscuous mode [ 219.671623][T14675] syzkaller1: entered allmulticast mode [ 219.759581][ T50] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 219.858777][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3038'. [ 219.862903][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3038'. [ 219.907473][T14699] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.972477][T14700] tunl0: Caught tx_queue_len zero misconfig [ 220.040435][T14703] No source specified [ 220.592257][T14715] tipc: Failed to obtain node identity [ 220.596447][T14715] tipc: Enabling of bearer rejected, failed to enable media [ 221.016640][T14726] tipc: Resetting bearer [ 221.053282][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.058338][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.106027][T14726] bond2: left allmulticast mode [ 221.107665][T14726] vti0: left allmulticast mode [ 221.117471][T14726] gtp1: left promiscuous mode [ 221.119050][T14726] gtp1: left allmulticast mode [ 221.123451][T14732] validate_nla: 6 callbacks suppressed [ 221.123462][T14732] netlink: 'syz.5.3051': attribute type 3 has an invalid length. [ 221.132367][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.139354][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.145082][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.149908][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.155717][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.159794][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.165799][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.170279][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.464772][T14760] netlink: 'syz.5.3061': attribute type 2 has an invalid length. [ 221.467357][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'. [ 221.477709][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3061'. [ 221.487648][T14762] geneve3: entered promiscuous mode [ 221.492038][T14762] geneve3: entered allmulticast mode [ 221.495397][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3062'. [ 221.785845][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.887451][T14806] netlink: 'syz.0.3076': attribute type 3 has an invalid length. [ 221.914184][T14799] netlink: 'syz.5.3075': attribute type 178 has an invalid length. [ 221.917152][T14799] netlink: 'syz.5.3075': attribute type 1 has an invalid length. [ 221.959597][T14799] gretap1: entered allmulticast mode [ 221.964686][T14799] bond3: (slave gretap1): making interface the new active one [ 221.967315][T14799] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 221.973996][ T6686] usb 7-1: USB disconnect, device number 21 [ 222.058371][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 222.058388][ T42] audit: type=1400 audit(2000000083.474:1018): avc: denied { write } for pid=14821 comm="syz.6.3083" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.357064][T14836] FAULT_INJECTION: forcing a failure. [ 222.357064][T14836] name failslab, interval 1, probability 10, space 0, times 0 [ 222.361534][T14836] CPU: 0 UID: 0 PID: 14836 Comm: syz.5.3088 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.361553][T14836] Tainted: [L]=SOFTLOCKUP [ 222.361557][T14836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.361564][T14836] Call Trace: [ 222.361568][T14836] [ 222.361572][T14836] dump_stack_lvl+0x100/0x190 [ 222.361590][T14836] should_fail_ex.cold+0x5/0xa [ 222.361605][T14836] should_failslab+0xc2/0x120 [ 222.361620][T14836] __kmalloc_noprof+0xfc/0x820 [ 222.361633][T14836] ? rcu_is_watching+0x12/0xc0 [ 222.361651][T14836] ? tomoyo_realpath_from_path+0xb6/0x690 [ 222.361666][T14836] tomoyo_realpath_from_path+0xb6/0x690 [ 222.361681][T14836] tomoyo_path_number_perm+0x23c/0x580 [ 222.361697][T14836] ? tomoyo_path_number_perm+0x22e/0x580 [ 222.361714][T14836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.361744][T14836] ? find_held_lock+0x2b/0x80 [ 222.361762][T14836] ? __fget_files+0x215/0x3d0 [ 222.361773][T14836] ? hook_file_ioctl_common+0x140/0x440 [ 222.361785][T14836] ? __fget_files+0x215/0x3d0 [ 222.361799][T14836] ? __fget_files+0x21f/0x3d0 [ 222.361813][T14836] security_file_ioctl+0xd3/0x230 [ 222.361831][T14836] __x64_sys_ioctl+0xb7/0x210 [ 222.361849][T14836] do_syscall_64+0x115/0x870 [ 222.361862][T14836] ? clear_bhb_loop+0x40/0x90 [ 222.361881][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.361893][T14836] RIP: 0033:0x7f0d7bb9de99 [ 222.361902][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.361913][T14836] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.361925][T14836] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 222.361932][T14836] RDX: 0000000000000000 RSI: 0000000000006411 RDI: 0000000000000003 [ 222.361939][T14836] RBP: 00007f0d7c9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 222.361946][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.361952][T14836] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 222.361967][T14836] [ 222.362400][T14836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.612397][T14844] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.097529][T14866] netlink: 'syz.0.3099': attribute type 3 has an invalid length. [ 223.307437][T14876] syzkaller0: entered promiscuous mode [ 223.309431][T14876] syzkaller0: entered allmulticast mode [ 223.334614][T14884] syzkaller0: entered promiscuous mode [ 223.338565][T14884] syzkaller0: entered allmulticast mode [ 223.667364][T14905] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 223.678179][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.680140][T14905] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 223.680344][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.686417][ T42] audit: type=1400 audit(2000000085.104:1019): avc: denied { listen } for pid=14904 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.697087][ T42] audit: type=1400 audit(2000000085.104:1020): avc: denied { accept } for pid=14904 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.723215][T14905] bond1: entered promiscuous mode [ 223.725120][T14905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.727713][T14918] netlink: 'syz.6.3118': attribute type 3 has an invalid length. [ 223.736648][ T42] audit: type=1400 audit(2000000085.154:1021): avc: denied { read } for pid=14904 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.749489][ T42] audit: type=1400 audit(2000000085.154:1022): avc: denied { create } for pid=14919 comm="syz.0.3119" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.766900][T14923] netlink: 'syz.6.3120': attribute type 3 has an invalid length. [ 223.835433][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'. [ 223.839104][ T42] audit: type=1400 audit(2000000085.254:1023): avc: denied { setopt } for pid=14928 comm="syz.6.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.164866][T14941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3127'. [ 224.171765][T14941] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 224.303434][ T42] audit: type=1400 audit(2000000085.724:1024): avc: denied { unlink } for pid=5741 comm="syz-executor" name="file0" dev="tmpfs" ino=6840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.306781][T14945] ALSA: seq fatal error: cannot create timer (-19) [ 224.417043][ T42] audit: type=1326 audit(2000000085.834:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.5.3131" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d7bb9de99 code=0x0 [ 224.447059][ T42] audit: type=1400 audit(2000000085.864:1026): avc: denied { getopt } for pid=14960 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.454996][ T42] audit: type=1400 audit(2000000085.874:1027): avc: denied { setopt } for pid=14960 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.477780][T14962] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 224.479751][T14962] syzkaller1: group set to 0 [ 225.641307][T15013] syzkaller0: entered promiscuous mode [ 225.643067][T15013] syzkaller0: entered allmulticast mode [ 225.716955][T15015] netlink: 'syz.5.3151': attribute type 3 has an invalid length. [ 225.731160][ T5739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.864886][T15019] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 225.866766][T15019] syzkaller1: group set to 0 [ 226.178076][T15051] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.045623][T15079] team_slave_1: Caught tx_queue_len zero misconfig [ 227.169321][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 227.169337][ T42] audit: type=1400 audit(2000000088.594:1034): avc: denied { write } for pid=15102 comm="syz.2.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.181173][ T42] audit: type=1400 audit(2000000088.594:1035): avc: denied { execute } for pid=15102 comm="syz.2.3173" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.191361][ T42] audit: type=1400 audit(2000000088.604:1036): avc: denied { execute_no_trans } for pid=15102 comm="syz.2.3173" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.231073][T15108] netlink: 'syz.0.3175': attribute type 12 has an invalid length. [ 227.233787][T15108] netlink: 'syz.0.3175': attribute type 29 has an invalid length. [ 227.236244][T15108] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3175'. [ 227.390940][ T42] audit: type=1400 audit(2000000088.814:1037): avc: denied { ioctl } for pid=15102 comm="syz.2.3173" path="socket:[95341]" dev="sockfs" ino=95341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.455470][T15128] vivid-000: ================= START STATUS ================= [ 227.457967][T15128] vivid-000: Test Pattern: 75% Colorbar [ 227.462030][T15128] vivid-000: Fill Percentage of Frame: 100 [ 227.464720][T15128] vivid-000: Horizontal Movement: No Movement [ 227.466650][T15128] vivid-000: Vertical Movement: No Movement [ 227.468519][T15128] vivid-000: OSD Text Mode: All [ 227.470239][T15128] vivid-000: Show Border: false [ 227.471804][T15128] vivid-000: Show Square: false [ 227.473465][T15128] vivid-000: Sensor Flipped Horizontally: false [ 227.475394][T15128] vivid-000: Sensor Flipped Vertically: false [ 227.477334][T15128] vivid-000: Insert SAV Code in Image: false [ 227.479339][T15128] vivid-000: Insert EAV Code in Image: false [ 227.481234][T15128] vivid-000: Insert Video Guard Band: false [ 227.483062][T15128] vivid-000: Reduced Framerate: false [ 227.484819][T15128] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 227.487333][T15128] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 227.491134][T15128] vivid-000: Enable Capture Cropping: true grabbed [ 227.493231][T15128] vivid-000: Enable Capture Composing: true grabbed [ 227.495333][T15128] vivid-000: Enable Capture Scaler: true grabbed [ 227.497325][T15128] vivid-000: Timestamp Source: End of Frame [ 227.500311][T15128] vivid-000: Colorspace: sRGB [ 227.501840][T15128] vivid-000: Transfer Function: Default [ 227.503826][T15128] vivid-000: Y'CbCr Encoding: Default [ 227.510982][T15128] vivid-000: HSV Encoding: Hue 0-179 [ 227.512770][T15128] vivid-000: Quantization: Default [ 227.514427][T15128] vivid-000: Apply Alpha To Red Only: false [ 227.516377][T15128] vivid-000: Standard Aspect Ratio: 4x3 [ 227.518150][T15128] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 227.520997][T15128] vivid-000: DV Timings: 640x480p59 inactive [ 227.522933][T15128] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 227.525226][T15128] vivid-000: Maximum EDID Blocks: 2 [ 227.526934][T15128] vivid-000: Limited RGB Range (16-235): false [ 227.529135][T15128] vivid-000: Rx RGB Quantization Range: Automatic [ 227.531232][T15128] vivid-000: Power Present: 0x00000001 [ 227.537265][T15128] tpg source WxH: 320x180 (Y'CbCr) [ 227.547179][T15128] tpg field: 1 [ 227.548360][T15128] tpg crop: (0,0)/320x180 [ 227.551597][T15128] tpg compose: (0,0)/320x180 [ 227.553123][T15128] tpg colorspace: 8 [ 227.557192][T15128] tpg transfer function: 0/2 [ 227.562141][T15128] tpg Y'CbCr encoding: 0/1 [ 227.565542][T15128] tpg quantization: 0/2 [ 227.569403][T15128] tpg RGB range: 0/2 [ 227.570665][T15128] vivid-000: ================== END STATUS ================== [ 227.581188][ T42] audit: type=1400 audit(2000000089.004:1038): avc: denied { read } for pid=15127 comm="syz.5.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.663786][ T42] audit: type=1400 audit(2000000089.084:1039): avc: denied { ioctl } for pid=15143 comm="syz.6.3185" path="socket:[94544]" dev="sockfs" ino=94544 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.678479][ T42] audit: type=1400 audit(2000000089.094:1040): avc: denied { read } for pid=15143 comm="syz.6.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.685477][T15144] syzkaller0: entered promiscuous mode [ 227.687266][T15144] syzkaller0: entered allmulticast mode [ 227.882261][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3191'. [ 227.885078][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3191'. [ 228.156584][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 228.159495][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 228.167298][T15171] geneve0: entered promiscuous mode [ 228.175974][T15171] Invalid argument reading file caps for ./file0 [ 228.376547][ T42] audit: type=1400 audit(2000000089.795:1041): avc: denied { getopt } for pid=15178 comm="syz.5.3198" laddr=fe80::a lport=10601 faddr=fe80::2e fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.412546][ T42] audit: type=1400 audit(2000000089.835:1042): avc: denied { relabelfrom } for pid=15181 comm="syz.6.3199" name="" dev="pipefs" ino=93153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 228.428985][ T42] audit: type=1400 audit(2000000089.845:1043): avc: denied { listen } for pid=15181 comm="syz.6.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.897695][T15219] /dev/nullb0: Can't lookup blockdev [ 228.947591][T15221] xt_l2tp: v2 tid > 0xffff: 2031748 [ 228.958138][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 228.961722][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 228.965394][T15221] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 228.967837][T15221] UDF-fs: Scanning with blocksize 512 failed [ 228.973515][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 228.977202][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 228.980418][T15221] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 228.982869][T15221] UDF-fs: Scanning with blocksize 1024 failed [ 228.986913][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 228.990303][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 228.993230][T15221] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 228.995598][T15221] UDF-fs: Scanning with blocksize 2048 failed [ 228.997876][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 229.001604][T15221] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 229.005155][T15221] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 229.007633][T15221] UDF-fs: Scanning with blocksize 4096 failed [ 229.010145][T15221] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 229.661798][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3237'. [ 229.683784][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3237'. [ 229.685115][T15284] tipc: Enabling of bearer rejected, already enabled [ 229.805385][T15296] ip6tnl0: Caught tx_queue_len zero misconfig [ 229.873434][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3248'. [ 230.043827][T15318] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3252'. [ 230.237959][T15332] tipc: Failed to obtain node identity [ 230.240038][T15332] tipc: Enabling of bearer rejected, failed to enable media [ 230.717588][T15357] netlink: 'syz.5.3265': attribute type 1 has an invalid length. [ 230.756025][T15357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.804620][T15355] bond4: (slave geneve4): making interface the new active one [ 230.808233][T15355] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 230.811165][ T13] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 230.816937][ T13] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 230.834113][ T13] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 230.848332][ T13] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 230.897930][T15364] syzkaller0: entered promiscuous mode [ 230.904887][T15364] syzkaller0: entered allmulticast mode [ 231.030995][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 231.034290][T15380] netlink: 'syz.0.3276': attribute type 4 has an invalid length. [ 231.037861][T15380] netlink: 'syz.0.3276': attribute type 3 has an invalid length. [ 231.313599][T15410] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 231.316711][T15410] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 231.319696][T15410] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 231.322107][T15410] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 231.491874][T15425] netlink: 'syz.6.3296': attribute type 3 has an invalid length. [ 231.548829][ T50] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 231.702472][ T50] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.708561][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.713876][ T50] usb 7-1: Product: syz [ 231.715208][ T50] usb 7-1: Manufacturer: syz [ 231.722665][ T50] usb 7-1: SerialNumber: syz [ 231.750990][T12031] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.010744][ T50] usb 7-1: USB disconnect, device number 22 [ 232.179363][T15458] netlink: 'syz.6.3307': attribute type 3 has an invalid length. [ 232.293037][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 232.293050][ T42] audit: type=1400 audit(2000000093.715:1057): avc: denied { read write } for pid=15463 comm="syz.5.3310" name="file1" dev="9p" ino=72904271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.302978][ T42] audit: type=1400 audit(2000000093.715:1058): avc: denied { ioctl open } for pid=15463 comm="syz.5.3310" path="/676/file0/file1" dev="9p" ino=72904271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.358520][T15464] __nla_validate_parse: 2 callbacks suppressed [ 232.358533][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3310'. [ 232.770528][T12031] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 232.776419][T12031] ath9k_htc: Failed to initialize the device [ 232.782351][ T50] usb 7-1: ath9k_htc: USB layer deinitialized [ 233.049062][T15507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.051983][T15507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.056463][T15507] afs: Unknown parameter 'ulock' [ 233.249684][T15521] No source specified [ 233.251205][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3328'. [ 233.303595][ T42] audit: type=1400 audit(2000000094.725:1059): avc: denied { mounton } for pid=15525 comm="syz.6.3330" path="/302/file0" dev="ramfs" ino=97236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 233.319957][ T42] audit: type=1400 audit(2000000094.725:1060): avc: denied { read } for pid=15525 comm="syz.6.3330" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.331226][ T42] audit: type=1400 audit(2000000094.725:1061): avc: denied { open } for pid=15525 comm="syz.6.3330" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.346076][ T42] audit: type=1400 audit(2000000094.725:1062): avc: denied { map } for pid=15525 comm="syz.6.3330" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.363524][ T42] audit: type=1400 audit(2000000094.735:1063): avc: denied { ioctl } for pid=15525 comm="syz.6.3330" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.371632][ T42] audit: type=1400 audit(2000000094.775:1064): avc: denied { unmount } for pid=11839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 233.449643][T15538] netlink: 'syz.6.3334': attribute type 3 has an invalid length. [ 233.494464][T15542] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 233.509823][T15542] CIFS: Attempting to mount //127.0.0.1/share [ 233.515047][T15542] CIFS: VFS: Error connecting to socket. Aborting operation. [ 233.517464][T15542] CIFS: VFS: cifs_mount failed w/return code = -101 [ 233.578357][ T42] audit: type=1400 audit(2000000094.995:1065): avc: denied { ioctl } for pid=15540 comm="syz.6.3336" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 234.250018][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 234.254086][T15595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.337141][T15601] syzkaller0: entered promiscuous mode [ 234.339998][T15601] syzkaller0: entered allmulticast mode [ 234.374366][T15605] fuse: fd is not a fuse device [ 234.475109][ T42] audit: type=1400 audit(2000000095.895:1066): avc: denied { mounton } for pid=15612 comm="syz.2.3367" path="/593/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 234.595534][T15621] tipc: Enabling of bearer rejected, already enabled [ 234.642583][T15625] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1802 [ 234.737697][T15631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.742448][T15632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3372'. [ 235.155397][T15643] syzkaller0: entered promiscuous mode [ 235.157192][T15643] syzkaller0: entered allmulticast mode [ 235.289158][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3382'. [ 236.530308][T15723] --map-set only usable from mangle table [ 236.536505][T15725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15725 comm=syz.0.3410 [ 236.610581][T15729] syzkaller0: entered promiscuous mode [ 236.612430][T15729] syzkaller0: entered allmulticast mode [ 237.029746][T15783] bridge_slave_0: left allmulticast mode [ 237.031631][T15783] bridge_slave_0: left promiscuous mode [ 237.033522][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.045716][T15783] bridge_slave_1: left allmulticast mode [ 237.047374][T15783] bridge_slave_1: left promiscuous mode [ 237.050958][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.059789][T15783] bond0: (slave bond_slave_0): Releasing backup interface [ 237.074312][T15783] bond0: (slave bond_slave_1): Releasing backup interface [ 237.085059][T15783] team0: Port device team_slave_0 removed [ 237.091121][T15783] team0: Port device team_slave_1 removed [ 237.093334][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.095574][T15783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.102666][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.104885][T15783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.108126][T15783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.128485][ T34] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 237.217220][T15796] syzkaller0: entered promiscuous mode [ 237.224422][T15796] syzkaller0: entered allmulticast mode [ 237.298946][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 237.302783][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.305642][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.309605][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.313060][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.316039][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.319920][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.323191][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.328017][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.337680][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.343872][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.350944][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.354968][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.358216][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.361721][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.365798][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.372616][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.375850][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.380604][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.384116][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.387847][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.392984][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.397396][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.401119][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.407477][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.415011][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.419358][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.423225][ T34] usb 7-1: Product: syz [ 237.424737][ T34] usb 7-1: Manufacturer: syz [ 237.426355][ T34] usb 7-1: SerialNumber: syz [ 237.432542][ T34] usb 7-1: config 0 descriptor?? [ 237.449544][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 237.548553][T15814] fuse: fd is not a fuse device [ 237.574662][T15817] netlink: 592 bytes leftover after parsing attributes in process `syz.6.3445'. [ 237.681254][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 237.681265][ T42] audit: type=1400 audit(2000000099.105:1073): avc: denied { connect } for pid=15825 comm="syz.0.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.713627][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 237.718750][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 237.727834][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 237.728069][ T10] usb 7-1: USB disconnect, device number 23 [ 237.736200][ T42] audit: type=1400 audit(2000000099.155:1074): avc: denied { read } for pid=15831 comm="syz.6.3449" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 237.736629][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 237.750601][ T42] audit: type=1400 audit(2000000099.155:1075): avc: denied { open } for pid=15831 comm="syz.6.3449" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 237.859719][T15832] IPv6: Can't replace route, no match found [ 237.914812][ T42] audit: type=1400 audit(2000000099.335:1076): avc: denied { mount } for pid=15846 comm="syz.5.3453" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 237.964396][ T42] audit: type=1400 audit(2000000099.385:1077): avc: denied { mounton } for pid=15846 comm="syz.5.3453" path="/689/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 237.999562][ T42] audit: type=1400 audit(2000000099.425:1078): avc: denied { unmount } for pid=6405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 238.186894][T15874] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 238.299935][T15886] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3469'. [ 238.457022][ T42] audit: type=1400 audit(2000000099.875:1079): avc: denied { listen } for pid=15899 comm="syz.0.3475" path=0000204E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 238.550159][ T42] audit: type=1800 audit(2000000099.965:1080): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3478" name="midi1_first_group" dev="configfs" ino=100432 res=0 errno=0 [ 238.746107][ T42] audit: type=1400 audit(2000000100.165:1081): avc: denied { write } for pid=15922 comm="syz.5.3483" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.759800][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 238.761723][ T42] audit: type=1400 audit(2000000100.165:1082): avc: denied { write } for pid=15922 comm="syz.5.3483" name="c.1" dev="configfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.804601][T15925] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3484'. [ 238.808589][T15925] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3484'. [ 238.852117][T15927] FAULT_INJECTION: forcing a failure. [ 238.852117][T15927] name failslab, interval 1, probability 10, space 0, times 0 [ 238.856010][T15927] CPU: 2 UID: 0 PID: 15927 Comm: syz.5.3485 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.856028][T15927] Tainted: [L]=SOFTLOCKUP [ 238.856032][T15927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.856039][T15927] Call Trace: [ 238.856043][T15927] [ 238.856048][T15927] dump_stack_lvl+0x100/0x190 [ 238.856076][T15927] should_fail_ex.cold+0x5/0xa [ 238.856110][T15927] should_failslab+0xc2/0x120 [ 238.856126][T15927] kmem_cache_alloc_noprof+0x91/0x6a0 [ 238.856141][T15927] ? do_getname+0x35/0x390 [ 238.856158][T15927] do_getname+0x35/0x390 [ 238.856174][T15927] __x64_sys_unlinkat+0xa0/0x130 [ 238.856189][T15927] do_syscall_64+0x115/0x870 [ 238.856206][T15927] ? clear_bhb_loop+0x40/0x90 [ 238.856220][T15927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.856232][T15927] RIP: 0033:0x7f0d7bb9de99 [ 238.856242][T15927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.856253][T15927] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 238.856264][T15927] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 238.856271][T15927] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 238.856278][T15927] RBP: 00007f0d7c9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 238.856284][T15927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.856294][T15927] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 238.856309][T15927] [ 238.928845][ T34] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 238.934047][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.938549][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.944071][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 238.949127][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.951992][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.955272][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 238.961135][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.965972][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.969517][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 238.972374][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.975198][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.982491][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 238.986215][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.989741][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.993281][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 238.996306][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.999480][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.003070][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 239.006081][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.009135][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.012526][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 239.015683][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.033086][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.036827][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 239.055543][T15943] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 239.057697][ T34] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 239.069247][ T34] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 239.072339][ T34] usb 11-1: Product: syz [ 239.073648][ T34] usb 11-1: Manufacturer: syz [ 239.075145][ T34] usb 11-1: SerialNumber: syz [ 239.078024][ T34] usb 11-1: config 0 descriptor?? [ 239.084962][ T34] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 239.439667][T15919] overlayfs: statfs failed on './file0' [ 240.064253][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3500'. [ 240.090331][T15985] tmpfs: Unknown parameter 'usrquotaµ11¦àæÜù' [ 240.128042][T15987] FAULT_INJECTION: forcing a failure. [ 240.128042][T15987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.134440][T15987] CPU: 0 UID: 0 PID: 15987 Comm: syz.2.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.134458][T15987] Tainted: [L]=SOFTLOCKUP [ 240.134463][T15987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.134469][T15987] Call Trace: [ 240.134474][T15987] [ 240.134478][T15987] dump_stack_lvl+0x100/0x190 [ 240.134497][T15987] should_fail_ex.cold+0x5/0xa [ 240.134511][T15987] strncpy_from_user+0x3b/0x2d0 [ 240.134534][T15987] do_getname+0x78/0x390 [ 240.134550][T15987] __x64_sys_unlinkat+0xa0/0x130 [ 240.134565][T15987] do_syscall_64+0x115/0x870 [ 240.134579][T15987] ? clear_bhb_loop+0x40/0x90 [ 240.134593][T15987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.134605][T15987] RIP: 0033:0x7f652f79de99 [ 240.134615][T15987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.134626][T15987] RSP: 002b:00007f653066f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 240.134637][T15987] RAX: ffffffffffffffda RBX: 00007f652fa25fa0 RCX: 00007f652f79de99 [ 240.134645][T15987] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 240.134651][T15987] RBP: 00007f653066f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.134658][T15987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.134665][T15987] R13: 00007f652fa26038 R14: 00007f652fa25fa0 R15: 00007ffd49ef5bf8 [ 240.134679][T15987] [ 240.210743][T15993] tipc: Failed to obtain node identity [ 240.212538][T15993] tipc: Enabling of bearer rejected, failed to enable media [ 240.423190][T16011] team0: entered allmulticast mode [ 240.428511][T16011] team_slave_0: entered allmulticast mode [ 240.432977][T16011] team_slave_1: entered allmulticast mode [ 240.444270][T16003] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 240.483834][T16003] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 240.487489][T16003] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 240.490161][T16003] CPU: 2 UID: 0 PID: 16003 Comm: syz.5.3509 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.493500][T16003] Tainted: [L]=SOFTLOCKUP [ 240.494845][T16003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.497951][T16003] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 240.499810][T16003] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 240.505717][T16003] RSP: 0018:ffffc9000c82f830 EFLAGS: 00010202 [ 240.507590][T16003] RAX: dffffc0000000000 RBX: ffff888047384158 RCX: 1ffff11008e70827 [ 240.510021][T16003] RDX: 00000000000000e6 RSI: ffffffff87e7a866 RDI: ffff888047384128 [ 240.512421][T16003] RBP: ffff888047384150 R08: 0000000000000001 R09: 0000000000000000 [ 240.514852][T16003] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 240.517269][T16003] R13: ffff888047384128 R14: ffff888057de3920 R15: ffff888047384000 [ 240.519677][T16003] FS: 00007f0d7c9ee6c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 240.522431][T16003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.524424][T16003] CR2: 00007ffe65757d44 CR3: 00000000355ff000 CR4: 0000000000352ef0 [ 240.526840][T16003] Call Trace: [ 240.527884][T16003] [ 240.528843][T16003] ? f_midi2_unbind+0x146/0x800 [ 240.530382][T16003] f_midi2_unbind+0x265/0x800 [ 240.531872][T16003] ? __pfx_f_midi2_unbind+0x10/0x10 [ 240.533529][T16003] purge_configs_funcs+0x285/0x510 [ 240.535142][T16003] configfs_composite_bind+0xf2c/0x1960 [ 240.536859][T16003] ? kernfs_create_link+0x1bd/0x240 [ 240.538496][T16003] gadget_bind_driver+0x28c/0xbf0 [ 240.540092][T16003] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 240.541831][T16003] ? __pfx_gadget_bind_driver+0x10/0x10 [ 240.543554][T16003] really_probe+0x241/0xa60 [ 240.544993][T16003] __driver_probe_device+0x20e/0x450 [ 240.546589][T16003] driver_probe_device+0x4a/0x140 [ 240.548220][T16003] __driver_attach+0x21f/0x5b0 [ 240.549710][T16003] ? __pfx___driver_attach+0x10/0x10 [ 240.551357][T16003] bus_for_each_dev+0x13e/0x1d0 [ 240.552820][T16003] ? __pfx_bus_for_each_dev+0x10/0x10 [ 240.554448][T16003] ? bus_add_driver+0x2b5/0x5b0 [ 240.555959][T16003] bus_add_driver+0x305/0x5b0 [ 240.557444][T16003] driver_register+0x1e2/0x360 [ 240.558930][T16003] usb_gadget_register_driver_owner+0x132/0x210 [ 240.560865][T16003] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 240.562592][T16003] configfs_write_iter+0x302/0x4e0 [ 240.564178][T16003] vfs_write+0x6ac/0x1050 [ 240.565527][T16003] ? __pfx_configfs_write_iter+0x10/0x10 [ 240.567248][T16003] ? __pfx_vfs_write+0x10/0x10 [ 240.568700][T16003] ksys_write+0x12a/0x250 [ 240.570000][T16003] ? __pfx_ksys_write+0x10/0x10 [ 240.571448][T16003] do_syscall_64+0x115/0x870 [ 240.572810][T16003] ? clear_bhb_loop+0x40/0x90 [ 240.574214][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.575984][T16003] RIP: 0033:0x7f0d7bb9de99 [ 240.577325][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.583014][T16003] RSP: 002b:00007f0d7c9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.585545][T16003] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9de99 [ 240.587903][T16003] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000006 [ 240.590241][T16003] RBP: 00007f0d7bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 240.592528][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.594901][T16003] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007ffc2e30c5d8 [ 240.597319][T16003] [ 240.598293][T16003] Modules linked in: [ 240.600855][T16003] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 240.603933][T16003] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 240.606340][T16003] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 240.611966][T16003] RSP: 0018:ffffc9000c82f830 EFLAGS: 00010202 [ 240.614209][T16003] RAX: dffffc0000000000 RBX: ffff888047384158 RCX: 1ffff11008e70827 [ 240.616614][T16003] RDX: 00000000000000e6 RSI: ffffffff87e7a866 RDI: ffff888047384128 [ 240.623869][T16003] RBP: ffff888047384150 R08: 0000000000000001 R09: 0000000000000000 [ 240.628578][T16003] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 240.632897][T16003] R13: ffff888047384128 R14: ffff888057de3920 R15: ffff888047384000 [ 240.635309][T16003] FS: 00007f0d7c9ee6c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 240.637911][T16003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.639914][T16003] CR2: 00007ffe65757d44 CR3: 00000000355ff000 CR4: 0000000000352ef0 [ 240.642368][T16003] Kernel panic - not syncing: Fatal exception [ 240.644763][T16003] Kernel Offset: disabled [ 240.646100][T16003] Rebooting in 86400 seconds..