last executing test programs: 2m3.190251655s ago: executing program 32 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x6}, 0x4) close(0x3) 1m52.319533928s ago: executing program 33 (id=403): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) 1m51.257345817s ago: executing program 34 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000080}, 0x20000000) 1m43.205009808s ago: executing program 35 (id=661): timerfd_create(0x8, 0x0) timerfd_create(0x9, 0x0) r0 = memfd_secret(0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0x933, 0x0, 0x0, 0x1000, 0x7c4, 0x0, 0x0, 0x1c2}}}, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x2, 0x4000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec73, 0x20000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4a4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) memfd_create(0x0, 0x6) shmdt(0x0) io_uring_setup(0x726b, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00000bb000/0x4000)=nil) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000880)=@assoc_value, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) io_uring_setup(0x4460, &(0x7f0000000ac0)={0x0, 0xc15e, 0x1d580, 0x3, 0x28b}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m42.299452303s ago: executing program 36 (id=680): setresuid(0xee00, 0xee00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) chroot(0x0) umount2(0x0, 0x1) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) close(r0) 1m40.351092436s ago: executing program 37 (id=693): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x8, 0x8, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0x3}}], 0x30, 0x40801}, 0x50) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) 1m26.534896462s ago: executing program 38 (id=937): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x12, 0x2038, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) 1m24.565492104s ago: executing program 39 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) capset(0x0, &(0x7f0000000380)={0x9, 0x9, 0x2, 0x6, 0x7, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfd, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x80000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.948809326s ago: executing program 40 (id=1035): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x62c10182}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1m12.547886979s ago: executing program 41 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200c080, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000000)={[{@huge_within_size}]}) 1m12.073873249s ago: executing program 42 (id=1130): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103a42, 0x32) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x225d4e1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2180, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) 1m6.981828s ago: executing program 43 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaabaaaaabbbbbbbbbbbb86dd60000000001406"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0x4a}], 0x2, 0xa74a, 0x80000000, 0x10) 1m6.348614458s ago: executing program 44 (id=1179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000028f, 0x10120, 0x0) sendto$inet6(r1, &(0x7f0000000140)='X', 0x34000, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20063, 0x0) 1m1.267805337s ago: executing program 45 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f0000003040)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000003080)='./dev\x00', &(0x7f00000030c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x24) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lseek(r0, 0x0, 0x2) read(r0, 0x0, 0x0) 39.260808599s ago: executing program 7 (id=1638): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143a42, 0x1e2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000940)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 39.084163573s ago: executing program 5 (id=1642): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000200)="5cf9dd3d40", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='f', 0x1}], 0x1}}], 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) 39.051758448s ago: executing program 5 (id=1644): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 39.048335973s ago: executing program 7 (id=1645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025fd0eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c3c6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x3b, 0xb2}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000002900)=0xffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.969470303s ago: executing program 5 (id=1646): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x400, 0x0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x25, 0x0, 0x41, 0x1, 0x0, r1, 0x0, 0x0, 0x4000}]) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000600)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/81, 0x7ffff000}, {&(0x7f00000009c0)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000440)=0x9, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x9, "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", 0x10, 0x9, 0xa0, 0x7, 0x5, 0xb, 0x3, 0x1}}}, 0x128) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000100)={{0x7fffffff, 0x1da4}, 0x40}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x7, 0x9, 0x80000001}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_parport\x00', [0x78, 0x7, 0x0, 0xc, 0x8, 0x7, 0x100002, 0x7, 0x4005, 0x100, 0x4, 0x1, 0x1, 0x20003, 0xffffffff, 0x103, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0xff, 0xffffffff, 0x4, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 38.789321324s ago: executing program 5 (id=1649): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 38.68885445s ago: executing program 5 (id=1650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.688150796s ago: executing program 5 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (fail_nth: 2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 38.557189091s ago: executing program 46 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (fail_nth: 2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 38.079909267s ago: executing program 7 (id=1656): bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/65, 0x33}], 0x1, 0x8, 0x10000, 0xa) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @local, 0x2}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x7f, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x49, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0xc2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xb1, 0x8, "2195673bc950"}, @sack={0x5, 0x1a, [0x2, 0x5, 0x6, 0x8001, 0x6, 0x7]}, @window={0x3, 0x3, 0x2}, @fastopen={0x22, 0x2}, @generic={0x4, 0x8, "395e563f96de"}, @mss={0x2, 0x4, 0xa}]}}, {"f1"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='ns\x00') fchdir(r5) umount2(&(0x7f0000000640)='./mnt\x00', 0x5) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 38.020021772s ago: executing program 7 (id=1658): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 37.94034008s ago: executing program 7 (id=1660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000070}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37.859984696s ago: executing program 8 (id=1662): r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 37.751646678s ago: executing program 8 (id=1663): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0x2, 0x10000, 0x0, 0x1e5}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f00000000c0)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000100)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) mq_open(&(0x7f00000001c0)='&\x02v\xdaQ\xc7\xec\x86\x90(+(\x00', 0x800, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x107, &(0x7f0000000300)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000540)=0xfffffffa) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000640)={0xfffffffd, 0x5, 0x0, 0x0, 0xf, "00769a718200"}) r7 = syz_open_pts(r5, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) 37.739537871s ago: executing program 8 (id=1664): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) write(r0, 0x0, 0x0) 37.659356027s ago: executing program 7 (id=1665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025fd0eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c3c6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x3b, 0xb2}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000002900)=0xffe) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x4, 0x10, 0x0, 0x8, 0x2, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.570438799s ago: executing program 47 (id=1665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025fd0eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c3c6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x3b, 0xb2}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000002900)=0xffe) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x4, 0x10, 0x0, 0x8, 0x2, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.486575429s ago: executing program 8 (id=1667): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 37.359081918s ago: executing program 8 (id=1668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 36.94448104s ago: executing program 8 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 36.866957888s ago: executing program 48 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 36.729610537s ago: executing program 2 (id=1672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000070}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36.484677575s ago: executing program 2 (id=1673): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xff2e) write(0xffffffffffffffff, 0x0, 0x0) 36.432880842s ago: executing program 2 (id=1674): syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0x2, 0x10000, 0x0, 0x1e5}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000000c0)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000100)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) 36.327987905s ago: executing program 2 (id=1675): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 36.270064691s ago: executing program 2 (id=1676): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 36.039897135s ago: executing program 2 (id=1677): bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/65, 0x33}], 0x1, 0x8, 0x10000, 0xa) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @local, 0x2}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x7f, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x49, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0xc2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xb1, 0x8, "2195673bc950"}, @sack={0x5, 0x1a, [0x2, 0x5, 0x6, 0x8001, 0x6, 0x7]}, @window={0x3, 0x3, 0x2}, @fastopen={0x22, 0x2}, @generic={0x4, 0x8, "395e563f96de"}, @mss={0x2, 0x4, 0xa}]}}, {"f1"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='ns\x00') fchdir(r5) umount2(&(0x7f0000000640)='./mnt\x00', 0x5) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 35.946512587s ago: executing program 49 (id=1677): bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/65, 0x33}], 0x1, 0x8, 0x10000, 0xa) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @local, 0x2}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x7f, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x49, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0xc2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xb1, 0x8, "2195673bc950"}, @sack={0x5, 0x1a, [0x2, 0x5, 0x6, 0x8001, 0x6, 0x7]}, @window={0x3, 0x3, 0x2}, @fastopen={0x22, 0x2}, @generic={0x4, 0x8, "395e563f96de"}, @mss={0x2, 0x4, 0xa}]}}, {"f1"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='ns\x00') fchdir(r5) umount2(&(0x7f0000000640)='./mnt\x00', 0x5) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 33.809033597s ago: executing program 1 (id=1653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000200)="5cf9dd3d40", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='f', 0x1}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 33.70972375s ago: executing program 1 (id=1679): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0xffff62ab, 0x0, 0x0, 0xfffffffe, 0x4, 0xa}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32.887983056s ago: executing program 1 (id=1680): mq_open(&(0x7f0000000100)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) 32.887675088s ago: executing program 1 (id=1681): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 32.803449956s ago: executing program 1 (id=1682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f01c90f209266b9080a00000f3267ff9e00000100670f6f69b10f0766b98e0300000f320f01c20f7766b8f4ffffff0f23d00f21f866353000000a0f23f8", 0x3e}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.309843092s ago: executing program 1 (id=1683): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x400, 0x0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x25, 0x0, 0x41, 0x1, 0x0, r1, 0x0, 0x0, 0x4000}]) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000600)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/81, 0x7ffff000}, {&(0x7f00000009c0)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000440)=0x9, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x9, "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", 0x10, 0x9, 0xa0, 0x7, 0x5, 0xb, 0x3, 0x1}}}, 0x128) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000100)={{0x7fffffff, 0x1da4}, 0x40}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x7, 0x9, 0x80000001}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000080)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_parport\x00', [0x78, 0x7, 0x0, 0xc, 0x8, 0x7, 0x100002, 0x7, 0x4005, 0x100, 0x4, 0x1, 0x1, 0x20003, 0xffffffff, 0x103, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0xff, 0xffffffff, 0x4, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 32.261584513s ago: executing program 50 (id=1683): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x400, 0x0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x25, 0x0, 0x41, 0x1, 0x0, r1, 0x0, 0x0, 0x4000}]) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000600)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/81, 0x7ffff000}, {&(0x7f00000009c0)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000440)=0x9, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x9, "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", 0x10, 0x9, 0xa0, 0x7, 0x5, 0xb, 0x3, 0x1}}}, 0x128) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000100)={{0x7fffffff, 0x1da4}, 0x40}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x7, 0x9, 0x80000001}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000080)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_parport\x00', [0x78, 0x7, 0x0, 0xc, 0x8, 0x7, 0x100002, 0x7, 0x4005, 0x100, 0x4, 0x1, 0x1, 0x20003, 0xffffffff, 0x103, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0xff, 0xffffffff, 0x4, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 31.82028617s ago: executing program 9 (id=1666): r0 = open(&(0x7f0000000540)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 31.739792828s ago: executing program 9 (id=1685): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 31.563114205s ago: executing program 9 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0xffff62ab, 0x0, 0x0, 0xfffffffe, 0x4, 0xa}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.679559777s ago: executing program 9 (id=1687): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140), 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 30.679204671s ago: executing program 9 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f01c90f209266b9080a00000f3267ff9e00000100670f6f69b10f0766b98e0300000f320f01c20f7766b8f4ffffff0f23d00f21f866353000000a0f23f8", 0x3e}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.859588358s ago: executing program 9 (id=1689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440), 0x8) 29.756448554s ago: executing program 51 (id=1689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440), 0x8) 5.286417192s ago: executing program 3 (id=2213): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = syz_open_dev$video4linux(&(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000006c0)={0x3, 0x980900, 0x3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000700)) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000740)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000780)={0x9d0000, 0x9, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x990afa, 0x88b9, '\x00', @ptr=0xffffffff}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000004c0)=[0xee00]) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4c, &(0x7f00000005c0)=0xcdb, 0x4) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) setregid(r3, r3) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x0, 0x3, 0xa, 0x0, 0xadc, 0xc}) fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xfffffed3) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={[0x7]}, 0x8}) r6 = fanotify_init(0xef0, 0x2) readv(r6, &(0x7f0000000800)=[{&(0x7f0000000840)=""/144, 0x90}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f0000000140)=""/129}, &(0x7f0000000200)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000004bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x9, 0x1, 0x7, 0x18, 0x4}]}, &(0x7f0000004c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 4.839051255s ago: executing program 6 (id=2219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000a40)=[@wr_crn={0x67, 0x20, {0x2, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc3ea, 0x7, 0x5}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xb1c0}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0xdd, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0xff9a}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x600a, 0x3ff, 0x4, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xffffffffffffffff, 0x1, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7d6d7c49, 0x9}}, @wr_drn={0x68, 0x20, {0x4}}, @wr_crn={0x67, 0x20, {0x8, 0xffffffffffffffb2}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x1, 0x7, 0x6}}], 0x290}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000280)="f0e8b4d0", 0x4}], 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 4.66587837s ago: executing program 6 (id=2222): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0xff, 0x6, 0x4, {0x2, @vbi={0x1, 0x5, 0x8001, 0x47524247, [0x9fe, 0x26], [0xddc, 0x7], 0x2}}, 0x6}) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @le_create_cis={{0x2064, 0x25}, {0x9, [{0xfff5, 0x6}, {0xe59d}, {0x5, 0x6}, {0x400}, {0x2, 0x5}, {0x8, 0x8}, {0x8, 0x5}, {0x4e6e, 0x1}, {0x9, 0x4}]}}}, 0x29) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) 4.407034365s ago: executing program 3 (id=2227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket(0x1e, 0x805, 0x0) (async) socket(0x1e, 0x805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./debug\x00', &(0x7f0000000980)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) preadv2(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/27, 0x1b}], 0x1, 0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=@newqdisc={0x278, 0x24, 0x20c, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0xc, 0xffe1}, {0x6, 0xa}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xd, 0x4, 0x0, 0x1, 0x2d5, 0x3, 0x2}}, {0x8, 0x2, [0xfff9, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x80, 0x12c2, 0x8000, 0x2, 0x0, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x5, 0x2, 0x10]}}, {{0x1c, 0x1, {0x3, 0x7, 0xdd84, 0x8, 0x0, 0x1, 0x2b, 0xa}}, {0x18, 0x2, [0x9, 0x9, 0x5, 0x9, 0x8000, 0xa701, 0x44, 0x200, 0x80, 0x80]}}, {{0x1c, 0x1, {0xbf, 0x9, 0x2c2c, 0x7, 0x0, 0x380000, 0x1, 0x5}}, {0xe, 0x2, [0xff00, 0x1, 0x1ff, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0x5, 0x2, 0x1d6efca0, 0x1, 0x5, 0x84000000, 0x1}}, {0x6, 0x2, [0x6d2]}}, {{0x1c, 0x1, {0x6d, 0xe, 0x4, 0x80000001, 0x2, 0x1, 0x7650, 0x7}}, {0x12, 0x2, [0xe249, 0x9, 0x20be, 0x4, 0xffff, 0x401, 0x13d]}}]}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc4, 0x0, 0x1, 0x0, 0x2, 0x8, 0x3, 0x1}}, {0x6, 0x2, [0xfff9]}}, {{0x1c, 0x1, {0x4, 0xd, 0x0, 0x7, 0x0, 0xfffffffb, 0x7, 0x5}}, {0xe, 0x2, [0x9, 0x9, 0x2, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3, 0x1, 0x3, 0x3, 0x1, 0x7ff, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0x101]}}, {{0x1c, 0x1, {0x9, 0x1, 0xa17, 0x4, 0x0, 0xb, 0x5f, 0x2}}, {0x8, 0x2, [0xe, 0x8]}}, {{0x1c, 0x1, {0x5, 0x1, 0x800, 0x4, 0x0, 0x3, 0x5, 0x7}}, {0x12, 0x2, [0x800, 0x3, 0xa, 0x7, 0x9, 0x8, 0x5]}}, {{0x1c, 0x1, {0x6, 0x2, 0x0, 0x4, 0x0, 0x4, 0xfff, 0xa}}, {0x18, 0x2, [0x8, 0x6, 0x3, 0x6, 0x100, 0x8, 0x2, 0x8, 0x4, 0xf9]}}, {{0x1c, 0x1, {0x3, 0x0, 0x8, 0x0, 0x2, 0x3, 0x7ff, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x4, 0x457, 0x1ff, 0xc5, 0x5, 0x401]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x65}}, @TCA_RATE={0x6, 0x5, {0x10, 0xb4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x278}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=@newqdisc={0x278, 0x24, 0x20c, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0xc, 0xffe1}, {0x6, 0xa}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xd, 0x4, 0x0, 0x1, 0x2d5, 0x3, 0x2}}, {0x8, 0x2, [0xfff9, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x80, 0x12c2, 0x8000, 0x2, 0x0, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x5, 0x2, 0x10]}}, {{0x1c, 0x1, {0x3, 0x7, 0xdd84, 0x8, 0x0, 0x1, 0x2b, 0xa}}, {0x18, 0x2, [0x9, 0x9, 0x5, 0x9, 0x8000, 0xa701, 0x44, 0x200, 0x80, 0x80]}}, {{0x1c, 0x1, {0xbf, 0x9, 0x2c2c, 0x7, 0x0, 0x380000, 0x1, 0x5}}, {0xe, 0x2, [0xff00, 0x1, 0x1ff, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0x5, 0x2, 0x1d6efca0, 0x1, 0x5, 0x84000000, 0x1}}, {0x6, 0x2, [0x6d2]}}, {{0x1c, 0x1, {0x6d, 0xe, 0x4, 0x80000001, 0x2, 0x1, 0x7650, 0x7}}, {0x12, 0x2, [0xe249, 0x9, 0x20be, 0x4, 0xffff, 0x401, 0x13d]}}]}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc4, 0x0, 0x1, 0x0, 0x2, 0x8, 0x3, 0x1}}, {0x6, 0x2, [0xfff9]}}, {{0x1c, 0x1, {0x4, 0xd, 0x0, 0x7, 0x0, 0xfffffffb, 0x7, 0x5}}, {0xe, 0x2, [0x9, 0x9, 0x2, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3, 0x1, 0x3, 0x3, 0x1, 0x7ff, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0x101]}}, {{0x1c, 0x1, {0x9, 0x1, 0xa17, 0x4, 0x0, 0xb, 0x5f, 0x2}}, {0x8, 0x2, [0xe, 0x8]}}, {{0x1c, 0x1, {0x5, 0x1, 0x800, 0x4, 0x0, 0x3, 0x5, 0x7}}, {0x12, 0x2, [0x800, 0x3, 0xa, 0x7, 0x9, 0x8, 0x5]}}, {{0x1c, 0x1, {0x6, 0x2, 0x0, 0x4, 0x0, 0x4, 0xfff, 0xa}}, {0x18, 0x2, [0x8, 0x6, 0x3, 0x6, 0x100, 0x8, 0x2, 0x8, 0x4, 0xf9]}}, {{0x1c, 0x1, {0x3, 0x0, 0x8, 0x0, 0x2, 0x3, 0x7ff, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x4, 0x457, 0x1ff, 0xc5, 0x5, 0x401]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x65}}, @TCA_RATE={0x6, 0x5, {0x10, 0xb4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x278}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) mknod$loop(0x0, 0xfff, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) nanosleep(&(0x7f0000000d80)={0x0, 0x3938700}, &(0x7f0000000dc0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_open_procfs(0x0, &(0x7f0000000e00)='net/packet\x00') lseek(r9, 0x20000000000002, 0x1) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000040)=0x4000200, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000040)=0x4000200, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_emit_ethernet(0x3f4, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x7}}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "47cd21", 0x3ba, 0x2f, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, {[@routing={0x89, 0x2, 0x2, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x4, 0x8, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x9}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x2f, 0x0, 0x58, 0x0, 0x0, 0x4, 0x65}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb5, 0x3, [0x1000, 0x2], "9637f589ce0f85dcb39198dc6a70373dcaf9f0c0a41367a2c7432379e52cbd003edd6160077fe314250becc96e0411a8ae31ab4b56aae297f92813893fb42cda4aa7535f29f741280d372f89de48992297d412bde123102c88fe90f651035d35a1416dbf4f1b2dc19f72fa1509afb19aae79ff8da47083589ac6905923a2888b8146f36cd1853ee12febc93aa6011bf1ef76930fdec775072917e51116249d933f6b278b766d9d4edd53bb821531e8ef77e8d51763"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x49, 0x9, 0xb], "9d44582e3356ad2323a338756668f1684a4de44ab14f92c347a4a503da695ede6371d75f14cad18407a62307923119a30db5f75c580c40f609356553809d819e27ba3e6cd2b64e65f5225c5260f983b51514c0ea11f08af71c1108436111e31fd637dd0ea65752e110a976878aa810b649145e309a5919d98e0c38f2334601a278afa12830131e6de9f58158812e261248228998a98e437c03da6198f540c134356525a1637a618be4a70466862a8e01b0a086e50e9d9e9d9e6fe8eee3090da59c4f787411fb6121e238e5ae897731cb86dfc180e09094"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x354, 0x7], "3cc2dbcf7d6675f353ef091337d5c7c704dbcf081ae6c2a6437eeb04c16238c786807b09eabbcdc24ca75121fb3daa3917e41d705cfeee3a102a4082796bf3f82223af880aa307d1995bd5ca53b3cc371b5e4df2ad5e5b531e297c00fbd176db3ecd6ded1466159991f924a5de81f8fec8e330bd1a8fc3afb962cb"}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0x4, 0x1, 0x1, 0x3, 0x1, 0x5}, 0x1, {0xa1}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x87, 0x0, 0x1, 0x1, 0x6, 0x6}, 0x2, {0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x20000002, "5c9fd92c024a05ea04c8351906bd08cf3c4eecb4d483dbd24dded6e2b9f3526318f9ae38ae6c95d116d887d55bc5eba39461286b112afb0da4116f92288eccf288bfe00ca864333ed3d24ee0b5fc3ccbd1af86b21f2008500aa1a5f5abd64aa6cadd2dd67ff6c6c1582905cd8861f010258acc7d8bfa43728a293248918c2bd5621e6a2c0e98c53d975276b2fd0de8e907b41db90ae78177e0efd836d246f886356b5ae5f9ae204d78c1edc7aed3d33abafdfa8e42d90c7ef6ab1aa6e0a0e932e7a743f15f293c04fe0c7a8005ed393cadb8875759d56dcb736b7a942bc2765229f1cc2632ad8ff4764e5ed42ba17c2bb5f89b37e5c848"}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f00000007c0)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 4.208625631s ago: executing program 3 (id=2229): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c4, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2b037180}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xffffffff80000000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x947a}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xd338}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000414) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c4}, 0x4048880) (async, rerun: 64) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002580), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x34, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xb3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000a8) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), r1) (rerun: 64) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x30, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x4e}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ee}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) process_mrelease(r1, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x50, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async) sendmsg$nl_route(r1, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)=@setneightbl={0x98, 0x43, 0x300, 0x70bd27, 0x25dfdbfd, {0x2}, [@NDTA_THRESH2={0x8, 0x3, 0x3}, @NDTA_THRESH2={0x8, 0x3, 0x48000}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x6}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x8a8c}, @NDTPA_PROXY_QLEN={0x8}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x9d7}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0xff}]}, @NDTA_NAME={0xc, 0x1, 'nl80211\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x2}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x1}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x5000000}, @NDTA_THRESH1={0x8, 0x2, 0x5}, @NDTA_THRESH1={0x8, 0x2, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x810}, 0x20000804) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000080) (async) write$6lowpan_control(r1, &(0x7f0000002bc0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c40), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002d40), r1) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000002d80)={0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e00)={0xc4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_ID={0x8}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xa8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xc3a}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3ff}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7e7f, 0x40, 0x36]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040084}, 0x4800) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x40, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4900}, 0x40000) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f00000030c0)={'vcan0\x00', 0x624}) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000032c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003180)={0xec, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x64}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7c}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x38}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xec}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xd}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xd}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}]}, 0xec}, 0x1, 0x0, 0x0, 0x40400a0}, 0x80) 4.117140636s ago: executing program 3 (id=2230): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) 4.082040739s ago: executing program 3 (id=2231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000a40)=[@wr_crn={0x67, 0x20, {0x2, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc3ea, 0x7, 0x5}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xb1c0}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0xdd, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0xff9a}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x600a, 0x3ff, 0x4, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xffffffffffffffff, 0x1, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7d6d7c49, 0x9}}, @wr_drn={0x68, 0x20, {0x4}}, @wr_crn={0x67, 0x20, {0x8, 0xffffffffffffffb2}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x1, 0x7, 0x6}}], 0x290}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000280)="f0e8b4d0", 0x4}], 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 4.079331448s ago: executing program 6 (id=2232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000012) 3.999525529s ago: executing program 6 (id=2233): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) linkat(r0, &(0x7f0000000000)='./proc\x00', r0, &(0x7f0000000180)='./proc\x00', 0x1400) 3.997832017s ago: executing program 6 (id=2234): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='fd/3\x00') ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x270, 0x138, 0x1, 0x0, 0x4a00, 0x0, 0x0, @by_dev={r1}, [@verity={0x0, 0x90, 0x0, 0x138, 'verity\x00', {'1', 0x20, @ram={'/dev/ram', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '4096', 0x20, '512', 0x20, 0x1f8, 0x20, 0x23a, 0x20, 'crc32c', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @hex=@hex32=[0x61, 0x31, 0x37, 0x38, 0x36, 0x33, 0x34, 0x62, 0x32, 0x36, 0x35, 0x64, 0x38, 0x39, 0x0, 0xe, 0x37, 0x0, 0x62, 0x32, 0x33, 0x65, 0x35, 0x6076a1b12e354774, 0x37, 0x39, 0x66, 0x66, 0x33, 0x35, 0x39, 0x64, 0x35, 0x65, 0x36, 0x30, 0x31, 0x61, 0x33, 0x61, 0x34, 0x65, 0x30, 0x34, 0x37, 0x7, 0x33, 0x37, 0x33, 0x36, 0x37, 0x39, 0x64, 0x33, 0x30, 0x31, 0x32, 0x62, 0x65, 0x65, 0x34, 0x66, 0x35, 0x63], ' 1 try_verify_in_tasklet'}}]}) (fail_nth: 6) 3.748972532s ago: executing program 3 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="b3", 0x1) syz_emit_ethernet(0x87a2f, 0x0, 0x0) 3.686063324s ago: executing program 52 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="b3", 0x1) syz_emit_ethernet(0x87a2f, 0x0, 0x0) 3.549753667s ago: executing program 6 (id=2242): syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 3.361760386s ago: executing program 53 (id=2242): syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 2.976994971s ago: executing program 0 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000012) 2.976666859s ago: executing program 0 (id=2251): r0 = syz_open_dev$ndb(&(0x7f000001c440), 0x0, 0x40200) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000001c480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x199002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r6, 0x8932, &(0x7f0000000480)='veth0') ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000200)={0x3b, r5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)="05944e175beb2d7c20aa9ad9ab51b73c6a79e79bef5ad6eed995626ef074797010379e339d77526806090ff5029e9193144bf415c2f1a48248416af78df2a525acb8ddd1faeb4008e84d9f6105bb13590016748cbf2864663e036967ee4d3aa28e7cc641bdae0b1211c7042f713515538912b7b2b1d9ad8f45b2423dc2c449d928c73d22088aaa0ba0812312edd170800d21", 0x92}, {&(0x7f0000000380)="b054ed770c7e773da0d93245e1db495c006fa8550d63ef90c4d9ace00bb2d0afc26aaaf79dc517c36f", 0x29}, {&(0x7f00000003c0)="2feff9684ffdb846ed4904fdbe42c9da3ee9d1bdef530fc33d4baaaae522eafbd8b41c37a4fe8e98f2168e336ed971c15e5b8d0998c7fb3e", 0x38}, {&(0x7f0000000400)="29bdba2325ce84af7d5335ebfde2a31c4851e175e26c884de831c5e7d0cecd7c4da8a3ea552e51581fd4c9a57a93fc86", 0x30}], 0x4, 0x8, 0x1) ioctl$NBD_DO_IT(r0, 0xab03) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000100)="a1b18ee4b34c") ioctl$NBD_SET_SIZE(r0, 0xab02, 0x10) 2.049594214s ago: executing program 0 (id=2260): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180), 0x10) shutdown(r0, 0x1) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f0000000380)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) 2.049459097s ago: executing program 0 (id=2261): sendto(0xffffffffffffffff, &(0x7f0000000180)="792a612317440bd4dd173bd8e3e7ebe0eda1f4528d85236fc9898743dfb401a2e8349d5db9ff703cb0d25bc93bf23f2190853d0651", 0x35, 0x20000011, &(0x7f00000001c0)=@generic={0xa, "c2ef4b4e9242f421e7ac845a35e1132d06cf5412a318b8b99b871ff53240ac3dcd8d45cbab1983e758de2b3ef922f1007636f6feb7a06100e8e50c8a4874e6214352d133ea9c087a381ecfefb00379c068163993347e2ce3a912cbb0911060eed8b8db72bfd92e885e9c75aa231c2ed9cf108a8749d7e33eb0c5b1c60b45"}, 0x80) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') setns(r0, 0x20000) (async) setns(r0, 0x20000) 1.907446231s ago: executing program 0 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000020301010000000000000000020000000800010001000002090002000000000002"], 0x40}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000012c0)={0x1}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000001300)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x6, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x4b, 0xfe, 0x7, 0x8, 0x8, 0x4, 0x1000000000000004}], 0xcc7b}) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000700)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f00000007c0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000001500)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x5500, 0x0, 0x3e3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000000b00)={0x2e, 0x6, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, 0x0, &(0x7f0000000c40)='syzkaller\x00'}, 0x94) r14 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @private=0xa010102}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000cc0)="c4", 0x1}, {&(0x7f0000000dc0)="52a2c9dcef52f3a1d1a5079311f9962c7295963e9199ab070e1a9ea85c427953a7b51e8f3172719810d5d5fc339b92db6ea359320dcd403d973ad37dd35761f4f530ab06608301ab66a18eef63b35e6676c93f267a5f995b62112f261955b9b746649982c928a93ca7559fd7bf12d47a627da5861cbd51a9a553e6c2d77810a032d3dcc4e95adf55eca216f7638be537be737e4f502be2cb984285c6077c7d8a098bcb1edf32793597ac0e5fd52f06a4fd46b4d53d8151a2ce4d0bf90d52c780d877552c2fd1cb5ec4cdaf5812f4d8a7c18f238cda80713b108f5665", 0xdc}, {&(0x7f0000001380)="8beddde4e47a665b4f333342ede9cb4b0962bc623e4236ed27e379c128aa664972d9aff74a6f36e6e87f3e1453ecef379b4e6c0d230b91d7e15ffc60a232e9da451690bcb6d70dba04b73c9d40c44fd98ec0b3cf23d434cdaa7c3cc2144c3c4eeb3a15334b839433ae66a232407d76f59e66248c78e120f69ea4eedeb06a19b95aa6403bb53972f9214a835f24bda2b44c667e779d0ede545b1b577256b1e63ae866e5a8af609733390c524e3d66a52b26ebe7bf5f3dc7b1cb651a1762d192be01032d167a1a1bd4acdeff1c087b3eb645e0f15484cb57c99379e8", 0xdb}, {&(0x7f0000001480)="dfe146217e3bbd43d1e2b431a3a4b78fa02dc0e7d5161c27ce2b5280e813b250d066d9610f9c735d06e7de6327be76ccfc4e69d69f97eecf", 0x38}], 0x4}}], 0x1, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000d00)=@assoc_value={0x0}, &(0x7f0000000d40)=0x8) writev(r13, &(0x7f0000001200)=[{&(0x7f0000000f00)="741f22980f7491ae870e4de2ca48226f561e6ee483e423f64c17e4b8b4468f6daee2c366c121526fd0d700be26421a615074ff87ce0fb57fc1ed67853844ad73b7d762cd8fb9471cbf3fd104800b9c43990070fbc4103b", 0x57}, {&(0x7f0000000f80)="2ffb6faf3c270428b4e31544f057ec80cc7a0d58da75", 0x16}, {&(0x7f0000000fc0)="e5b7921bf4d31e88ed794c71c30142db119f31d55db0d85c1651b8fd806b25288eeeba8759e4348fad361717e99262bb8e1c6cc58d7ccd236b5df3442075fa61b4cd36ed0c494e4b36f99fce76049238afd06d81d1f861efe7d5051a2c95da8d15a05a37e7174a07a815032456c78701329787256f2234cb561b70c705aa1e8cc7691e315719dc56552f71196b5a2fa285edbd", 0x93}, {&(0x7f0000001080)="9fd7e0afea1e271f997c2158af2d83a21cf296146d0c1a0545025a38e32bed3f5008b2585fa78ff15186656d290bf76d00a39d3c722f5bccdbbf729cf8873d217bb606fc3fc9717613f79a88ef204ef497895f92af3812038c152cb1dfb01cb7d9262713ec832b0ad97b75e763adfb56a3cdb3164ab5ec8379dd57eb0f2d754cd92e321bcb6ea3fccbcba9ca1367da83b5373ac755e8c8b8ad77", 0x9a}, {&(0x7f0000001140)="50a9e3d90ab2407d81f4086e9460628fd557ab9693daf966fc9ec6fa9e5a8721244503f8bd7201ba4e0d50d02c676d27162e1f6638508d4bb2ba09eb46dc24b47aa0a059", 0x44}, {&(0x7f00000011c0)="cb42dbc5c38561877d7c3f2f5c23e53334b7347017908ddfa20ec3a8a1ae22c0ad874747c16aa30e856d620ff4b5e7", 0x2f}], 0x6) setsockopt$TIPC_GROUP_LEAVE(r12, 0x10f, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000d80)={0xf, 0x2, 0x80000000, 0xffff, r15}, 0x10) 586.844371ms ago: executing program 0 (id=2269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000e00100300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800800010067726500080002800400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000004c0)={0xf000000000000000, 0x18, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 586.168305ms ago: executing program 4 (id=2270): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mount$overlay(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./config\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) timer_create(0x3, &(0x7f0000000800)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000840)) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000740)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nullb/nullb1/power\x00', 0x1, 0x0) mkdir(&(0x7f0000000a80)='./file0\x00', 0x1d3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="99742bbd7000fbdbdf25150000004c000180380004001400010002004e21ac14141d00000f0000000000000002000a004e2000000004000000000000000000000000000000001a0000000d0001007564703a73797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) write(r4, &(0x7f00000007c0)='1', 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r8 = syz_io_uring_setup(0x18f9, &(0x7f00000001c0)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000300)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=[0x4, 0x9]}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0xc0, "5bd911a6219c14b488ee6683834960e31ab651ab7461b1562d0ba59b5dc6f3b5649cd354dd4ba5d9b93310b088c1e0748dc913e0221396b0cc149c5574a6b30ce0971580a39451f3d613a89ffa73bc8ddf1d726c550c8b4c7491b34884d11281fadbbfb8ecab0fe632ac6c71855a140aa0761de74a50d934ef844f94a8254cfa595d561c2ade108de5474fda2efdd6e54c4cd12050a1e2cb98d1842d463f7616a64c129f73afdd7d37e209834ef8e737cc9d8e93e2c867dba446bcdaf2a8c7be"}, &(0x7f00000004c0)=0xe4) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000a40)={0x7, 0x9, 0x2, 0x5, 0x7, "7b446bccff611d84"}) 451.946776ms ago: executing program 4 (id=2271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 169.81346ms ago: executing program 4 (id=2272): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180), 0x10) shutdown(r1, 0x1) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f0000000380)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) 59.746129ms ago: executing program 4 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000012) 59.510152ms ago: executing program 4 (id=2274): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) (fail_nth: 6) 0s ago: executing program 4 (id=2275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x366, 0x10, &(0x7f0000000600), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES64=r2], 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x1, 0x0, 0x0, 0x17, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcc6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082bbd7000fcdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmmsg(r3, &(0x7f0000000fc0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='100', 0x3) r6 = openat$md_new_array(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r7 = openat$sysfs(0xffffff9c, 0x0, 0x40042, 0x80) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8001, 0x1, 0x3, 0x1000, 0x7a3353be, r9}) write$md_new_array(r6, &(0x7f0000000340)={'md', @named={'_syz', 0x0, '2'}}, 0x8) kernel console output (not intermixed with test programs): T13980] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 166.980727][T13980] do_anonymous_page+0xac9/0x2050 [ 166.980745][T13980] ? __pfx_do_anonymous_page+0x10/0x10 [ 166.980758][T13980] ? rcu_read_unlock+0x2d/0xb0 [ 166.980772][T13980] ? rcu_read_unlock+0x2d/0xb0 [ 166.980790][T13980] __handle_mm_fault+0x1ff3/0x2f60 [ 166.980807][T13980] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.980820][T13980] ? __pfx_mt_find+0x10/0x10 [ 166.980843][T13980] ? find_vma+0xbf/0x140 [ 166.980860][T13980] ? __pfx_find_vma+0x10/0x10 [ 166.980879][T13980] handle_mm_fault+0x363/0xa20 [ 166.980896][T13980] do_user_addr_fault+0x745/0x12f0 [ 166.980938][T13980] exc_page_fault+0x6f/0xd0 [ 166.980951][T13980] asm_exc_page_fault+0x26/0x30 [ 166.980963][T13980] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 166.980978][T13980] Code: 89 ee 48 89 ef e8 21 a6 d3 fc 4d 85 ff 75 26 e8 37 ac d3 fc 89 de 4c 89 e7 e8 3d f1 4d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 11 ac d3 fc 48 89 d8 5b 5d 41 [ 166.980990][T13980] RSP: 0018:ffffc90003f07c88 EFLAGS: 00050246 [ 166.981000][T13980] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 166.981008][T13980] RDX: 0000000000000001 RSI: ffff88805d24e000 RDI: 00002000000010c0 [ 166.981016][T13980] RBP: 00002000000010c0 R08: 0000000000000000 R09: ffffed100ba49dff [ 166.981024][T13980] R10: ffff88805d24efff R11: 0000000000000000 R12: ffff88805d24e000 [ 166.981031][T13980] R13: 00002000000020c0 R14: 00007ffffffff000 R15: 0000000000000000 [ 166.981046][T13980] ? _copy_to_user+0x93/0xd0 [ 166.981061][T13980] md_ioctl+0x56b/0x3700 [ 166.981074][T13980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.981094][T13980] ? __pfx_md_ioctl+0x10/0x10 [ 166.981105][T13980] ? do_vfs_ioctl+0x226/0x13e0 [ 166.981117][T13980] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.981127][T13980] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 166.981148][T13980] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.981170][T13980] ? __fget_files+0x34/0x3d0 [ 166.981187][T13980] ? __pfx_md_ioctl+0x10/0x10 [ 166.981198][T13980] blkdev_ioctl+0x5ad/0x6f0 [ 166.981212][T13980] ? __pfx_blkdev_ioctl+0x10/0x10 [ 166.981225][T13980] ? selinux_file_ioctl+0x1e0/0x290 [ 166.981243][T13980] ? selinux_file_ioctl+0x1e7/0x290 [ 166.981262][T13980] ? __pfx_blkdev_ioctl+0x10/0x10 [ 166.981275][T13980] __x64_sys_ioctl+0x18e/0x210 [ 166.981288][T13980] do_syscall_64+0x123/0x790 [ 166.981302][T13980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.981314][T13980] RIP: 0033:0x7fdff299fb19 [ 166.981324][T13980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.981335][T13980] RSP: 002b:00007fdff0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.981345][T13980] RAX: ffffffffffffffda RBX: 00007fdff2c25fa0 RCX: 00007fdff299fb19 [ 166.981353][T13980] RDX: 00002000000010c0 RSI: 0000000090000915 RDI: 0000000000000003 [ 166.981360][T13980] RBP: 00007fdff0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.981367][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.981374][T13980] R13: 00007fdff2c26038 R14: 00007fdff2c25fa0 R15: 00007ffc88efcdd8 [ 166.981390][T13980] [ 166.983871][ T7485] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 167.056122][T13983] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 167.056193][T13983] CIFS: Attempting to mount //127.0.0.1/share [ 167.087234][T13985] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 167.106443][T13985] pci 0000:00:00.0: Adding to iommu group 0 [ 167.143939][ T7485] usb 8-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 167.144849][ T7485] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 167.144873][ T7485] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 167.144892][ T7485] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.144931][ T7485] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.144952][ T7485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.153281][T13947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.153438][T13947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.155254][ T7485] pl2303 8-1:1.0: pl2303 converter detected [ 167.173541][T13991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.173567][T13991] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 167.175324][ T7485] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 167.215229][T13991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.215246][T13991] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 167.224370][T13991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.224386][T13991] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 167.238498][T13991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.238514][T13991] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 167.328189][T14011] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 167.328278][T14011] qnx6: wrong signature (magic) in superblock #1. [ 167.328285][T14011] qnx6: unable to read the first superblock [ 167.393191][T14017] FAULT_INJECTION: forcing a failure. [ 167.393191][T14017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.393214][T14017] CPU: 1 UID: 0 PID: 14017 Comm: syz.4.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.393233][T14017] Tainted: [L]=SOFTLOCKUP [ 167.393238][T14017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.393246][T14017] Call Trace: [ 167.393251][T14017] [ 167.393257][T14017] dump_stack_lvl+0x100/0x190 [ 167.393297][T14017] should_fail_ex.cold+0x5/0xa [ 167.393318][T14017] _copy_from_user+0x2e/0xd0 [ 167.393334][T14017] kstrtouint_from_user+0xd6/0x1d0 [ 167.393352][T14017] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 167.393373][T14017] ? lock_acquire+0x1d1/0x380 [ 167.393394][T14017] proc_fail_nth_write+0x83/0x220 [ 167.393412][T14017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 167.393433][T14017] vfs_write+0x2aa/0x1050 [ 167.393445][T14017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 167.393469][T14017] ? lock_acquire+0x1d1/0x380 [ 167.393485][T14017] ? __fget_files+0x34/0x3d0 [ 167.393500][T14017] ? __pfx_vfs_write+0x10/0x10 [ 167.393511][T14017] ? find_held_lock+0x2b/0x80 [ 167.393525][T14017] ? __fget_files+0x215/0x3d0 [ 167.393542][T14017] ? __fget_files+0x21f/0x3d0 [ 167.393561][T14017] ksys_write+0x12a/0x250 [ 167.393573][T14017] ? __pfx_ksys_write+0x10/0x10 [ 167.393589][T14017] do_syscall_64+0x123/0x790 [ 167.393604][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.393617][T14017] RIP: 0033:0x7fb66156034e [ 167.393628][T14017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.393640][T14017] RSP: 002b:00007fb66244ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.393653][T14017] RAX: ffffffffffffffda RBX: 00007fb6624506c0 RCX: 00007fb66156034e [ 167.393661][T14017] RDX: 0000000000000001 RSI: 00007fb6624500a0 RDI: 0000000000000006 [ 167.393669][T14017] RBP: 00007fb662450090 R08: 0000000000000000 R09: 0000000000000000 [ 167.393676][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.393684][T14017] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 167.393700][T14017] [ 167.449294][T14021] syzkaller1: entered promiscuous mode [ 167.449317][T14021] syzkaller1: entered allmulticast mode [ 167.456711][T14027] FAULT_INJECTION: forcing a failure. [ 167.456711][T14027] name failslab, interval 1, probability 0, space 0, times 0 [ 167.456781][T14027] CPU: 0 UID: 0 PID: 14027 Comm: syz.4.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.456800][T14027] Tainted: [L]=SOFTLOCKUP [ 167.456805][T14027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.456812][T14027] Call Trace: [ 167.456817][T14027] [ 167.456823][T14027] dump_stack_lvl+0x100/0x190 [ 167.456846][T14027] should_fail_ex.cold+0x5/0xa [ 167.456867][T14027] should_failslab+0xc2/0x120 [ 167.456881][T14027] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.456933][T14027] ? skb_clone+0x187/0x3f0 [ 167.456951][T14027] skb_clone+0x187/0x3f0 [ 167.456965][T14027] __skb_tstamp_tx+0x770/0xae0 [ 167.456983][T14027] __dev_queue_xmit+0x21de/0x48d0 [ 167.456996][T14027] ? arch_stack_walk+0xa6/0xf0 [ 167.457020][T14027] ? __pfx___dev_queue_xmit+0x10/0x10 [ 167.457035][T14027] ? __lock_acquire+0x5c0/0x1f40 [ 167.457053][T14027] ? ipt_do_table+0xd94/0x1b10 [ 167.457072][T14027] ? lock_acquire+0x1d1/0x380 [ 167.457088][T14027] ? __ip_finish_output.part.0+0x43b/0x6f0 [ 167.457107][T14027] ip_finish_output2+0xfa4/0x2740 [ 167.457124][T14027] ? __pfx_ip_finish_output2+0x10/0x10 [ 167.457137][T14027] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 167.457153][T14027] __ip_finish_output.part.0+0x43b/0x6f0 [ 167.457168][T14027] ip_output+0x392/0xc00 [ 167.457181][T14027] ? __pfx_ip_output+0x10/0x10 [ 167.457196][T14027] ? __pfx_ip_finish_output+0x10/0x10 [ 167.457211][T14027] ? __pfx_ip_output+0x10/0x10 [ 167.457223][T14027] ip_local_out+0x193/0x1f0 [ 167.457237][T14027] __ip_queue_xmit+0x876/0x1f50 [ 167.457251][T14027] ? tcp_rcv_established+0x38a0/0x3900 [ 167.457268][T14027] ? __pfx_ip_queue_xmit+0x10/0x10 [ 167.457281][T14027] __tcp_transmit_skb+0x34d9/0x4f00 [ 167.457306][T14027] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 167.457327][T14027] ? lock_acquire+0x1d1/0x380 [ 167.457347][T14027] ? ktime_get+0x22c/0x320 [ 167.457365][T14027] ? tcp_tso_autosize+0x1ed/0x2a0 [ 167.457384][T14027] tcp_write_xmit+0x1133/0x84a0 [ 167.457408][T14027] ? _copy_from_iter+0x270/0x16c0 [ 167.457423][T14027] ? __asan_memset+0x23/0x50 [ 167.457442][T14027] ? __pfx__copy_from_iter+0x10/0x10 [ 167.457457][T14027] __tcp_push_pending_frames+0xaf/0x3b0 [ 167.457475][T14027] ? skb_page_frag_refill+0x309/0x4b0 [ 167.457495][T14027] tcp_push+0x225/0x700 [ 167.457512][T14027] tcp_sendmsg_locked+0x184b/0x46b0 [ 167.457539][T14027] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 167.457555][T14027] ? lock_acquire+0x1d1/0x380 [ 167.457572][T14027] ? do_raw_spin_lock+0x128/0x260 [ 167.457584][T14027] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.457599][T14027] ? __local_bh_enable_ip+0xa5/0x120 [ 167.457628][T14027] tcp_sendmsg+0x2e/0x50 [ 167.457647][T14027] ? __pfx_tcp_sendmsg+0x10/0x10 [ 167.457663][T14027] inet_sendmsg+0xb9/0x140 [ 167.457678][T14027] __sys_sendto+0x470/0x4e0 [ 167.457690][T14027] ? __pfx_inet_sendmsg+0x10/0x10 [ 167.457705][T14027] ? __pfx___sys_sendto+0x10/0x10 [ 167.457722][T14027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.457743][T14027] ? ksys_write+0x1ac/0x250 [ 167.457754][T14027] ? __pfx_ksys_write+0x10/0x10 [ 167.457769][T14027] __x64_sys_sendto+0xe0/0x1c0 [ 167.457780][T14027] ? do_syscall_64+0xae/0x790 [ 167.457793][T14027] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.457806][T14027] do_syscall_64+0x123/0x790 [ 167.457820][T14027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.457832][T14027] RIP: 0033:0x7fb66159fb19 [ 167.457843][T14027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.457855][T14027] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 167.457868][T14027] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 167.457876][T14027] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 167.457883][T14027] RBP: 00007fb662450090 R08: 0000000000000000 R09: 0000000000000000 [ 167.457891][T14027] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 167.457898][T14027] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 167.457914][T14027] [ 167.872198][T13948] pl2303 ttyUSB0: pl2303_set_line_request - failed: -110 [ 167.874197][T13948] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 167.874271][T13948] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 167.883612][T13983] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with RawNTLMSSP: -11 [ 167.883759][T13983] CIFS: VFS: cifs_mount failed w/return code = -11 [ 167.965633][ T5936] usb 8-1: USB disconnect, device number 5 [ 167.977230][ T5936] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 167.977843][ T5936] pl2303 8-1:1.0: device disconnected [ 168.066202][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2137'. [ 168.276956][T14088] FAULT_INJECTION: forcing a failure. [ 168.276956][T14088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.277008][T14088] CPU: 1 UID: 0 PID: 14088 Comm: syz.0.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.277035][T14088] Tainted: [L]=SOFTLOCKUP [ 168.277042][T14088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.277065][T14088] Call Trace: [ 168.277086][T14088] [ 168.277093][T14088] dump_stack_lvl+0x100/0x190 [ 168.277139][T14088] should_fail_ex.cold+0x5/0xa [ 168.277168][T14088] should_fail_alloc_page+0xeb/0x140 [ 168.277199][T14088] prepare_alloc_pages+0x1f0/0x5b0 [ 168.277224][T14088] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 168.277253][T14088] ? __pfx_get_page_from_freelist+0x10/0x10 [ 168.277282][T14088] ? rcu_is_watching+0x13/0xc0 [ 168.277304][T14088] ? trace_mm_page_alloc+0x164/0x1c0 [ 168.277324][T14088] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 168.277356][T14088] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.277389][T14088] ? stack_trace_save+0x8e/0xc0 [ 168.277414][T14088] ? __pfx_stack_trace_save+0x10/0x10 [ 168.277440][T14088] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.277473][T14088] ? __kasan_slab_alloc+0x89/0x90 [ 168.277492][T14088] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 168.277521][T14088] ? alloc_vmap_area+0x643/0x2bc0 [ 168.277548][T14088] ? __get_vm_area_node+0x1ed/0x350 [ 168.277565][T14088] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 168.277585][T14088] ? __vmalloc_node_noprof+0xad/0xf0 [ 168.277605][T14088] ? __vmalloc_noprof+0xa3/0x120 [ 168.277623][T14088] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 168.277645][T14088] ? bpf_prog_alloc+0x3b/0x200 [ 168.277665][T14088] ? bpf_prog_load+0x4a3/0x2b20 [ 168.277692][T14088] ? __sys_bpf+0x146f/0x4b60 [ 168.277708][T14088] ? __x64_sys_bpf+0xce/0x140 [ 168.277726][T14088] ? do_syscall_64+0x123/0x790 [ 168.277757][T14088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.277783][T14088] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 168.277816][T14088] ? policy_nodemask+0xed/0x5e0 [ 168.277841][T14088] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 168.277882][T14088] __kasan_populate_vmalloc+0xf0/0x210 [ 168.277917][T14088] alloc_vmap_area+0x963/0x2bc0 [ 168.277954][T14088] ? kasan_save_track+0x14/0x30 [ 168.277979][T14088] ? __kasan_kmalloc+0xaa/0xb0 [ 168.277998][T14088] ? __pfx_alloc_vmap_area+0x10/0x10 [ 168.278029][T14088] ? __get_vm_area_node+0x124/0x350 [ 168.278051][T14088] __get_vm_area_node+0x1ed/0x350 [ 168.278076][T14088] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 168.278097][T14088] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 168.278119][T14088] ? __lock_acquire+0x5c0/0x1f40 [ 168.278152][T14088] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 168.278176][T14088] ? lock_acquire+0x1d1/0x380 [ 168.278203][T14088] ? find_held_lock+0x2b/0x80 [ 168.278223][T14088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.278244][T14088] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.278272][T14088] ? avc_has_perm_noaudit+0x145/0x470 [ 168.278296][T14088] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 168.278317][T14088] __vmalloc_node_noprof+0xad/0xf0 [ 168.278338][T14088] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 168.278363][T14088] __vmalloc_noprof+0xa3/0x120 [ 168.278384][T14088] ? __pfx___vmalloc_noprof+0x10/0x10 [ 168.278407][T14088] ? rcu_is_watching+0x13/0xc0 [ 168.278429][T14088] ? cap_capable+0x107/0x430 [ 168.278454][T14088] bpf_prog_alloc_no_stats+0x59/0x690 [ 168.278475][T14088] ? security_capable+0x80/0x260 [ 168.278501][T14088] bpf_prog_alloc+0x3b/0x200 [ 168.278522][T14088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.278554][T14088] bpf_prog_load+0x4a3/0x2b20 [ 168.278581][T14088] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.278608][T14088] ? __pfx_bpf_prog_load+0x10/0x10 [ 168.278674][T14088] __sys_bpf+0x146f/0x4b60 [ 168.278699][T14088] ? __pfx___sys_bpf+0x10/0x10 [ 168.278716][T14088] ? find_held_lock+0x2b/0x80 [ 168.278737][T14088] ? get_pid_task+0xfc/0x250 [ 168.278753][T14088] ? get_pid_task+0xfc/0x250 [ 168.278778][T14088] ? find_held_lock+0x2b/0x80 [ 168.278805][T14088] ? rcu_read_lock_any_held+0x6a/0x90 [ 168.278828][T14088] ? find_held_lock+0x2b/0x80 [ 168.278848][T14088] ? ksys_write+0x190/0x250 [ 168.278867][T14088] ? ksys_write+0x190/0x250 [ 168.278886][T14088] ? lock_acquire+0x1d1/0x380 [ 168.278927][T14088] ? fput+0x7c/0x100 [ 168.278951][T14088] ? ksys_write+0x1ac/0x250 [ 168.278972][T14088] ? __x64_sys_bpf+0xce/0x140 [ 168.278996][T14088] __x64_sys_bpf+0xce/0x140 [ 168.279017][T14088] ? do_syscall_64+0xae/0x790 [ 168.279037][T14088] do_syscall_64+0x123/0x790 [ 168.279059][T14088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.279079][T14088] RIP: 0033:0x7fdff299fb19 [ 168.279096][T14088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.279114][T14088] RSP: 002b:00007fdff0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.279135][T14088] RAX: ffffffffffffffda RBX: 00007fdff2c25fa0 RCX: 00007fdff299fb19 [ 168.279147][T14088] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 168.279161][T14088] RBP: 00007fdff0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.279172][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.279182][T14088] R13: 00007fdff2c26038 R14: 00007fdff2c25fa0 R15: 00007ffc88efcdd8 [ 168.279208][T14088] [ 168.354560][T14093] »»»»»»: renamed from vlan0 (while UP) [ 168.758051][T14118] FAULT_INJECTION: forcing a failure. [ 168.758051][T14118] name failslab, interval 1, probability 0, space 0, times 0 [ 168.758075][T14118] CPU: 1 UID: 0 PID: 14118 Comm: syz.3.2150 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.758092][T14118] Tainted: [L]=SOFTLOCKUP [ 168.758097][T14118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.758105][T14118] Call Trace: [ 168.758110][T14118] [ 168.758115][T14118] dump_stack_lvl+0x100/0x190 [ 168.758139][T14118] should_fail_ex.cold+0x5/0xa [ 168.758159][T14118] should_failslab+0xc2/0x120 [ 168.758173][T14118] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.758192][T14118] ? netlink_deliver_tap+0x103/0xb50 [ 168.758211][T14118] ? skb_clone+0x187/0x3f0 [ 168.758228][T14118] skb_clone+0x187/0x3f0 [ 168.758242][T14118] netlink_deliver_tap+0x82f/0xb50 [ 168.758259][T14118] netlink_unicast+0x708/0x950 [ 168.758276][T14118] ? __pfx_netlink_unicast+0x10/0x10 [ 168.758295][T14118] netlink_sendmsg+0x9ac/0x10c0 [ 168.758312][T14118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.758331][T14118] ? selinux_socket_sendmsg+0x198/0x2f0 [ 168.758350][T14118] ? ____sys_sendmsg+0xa99/0xc30 [ 168.758366][T14118] ____sys_sendmsg+0xa99/0xc30 [ 168.758383][T14118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.758399][T14118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.758420][T14118] ? lock_acquire+0x1d1/0x380 [ 168.758437][T14118] ? get_pid_task+0x2a/0x250 [ 168.758450][T14118] ___sys_sendmsg+0x190/0x1e0 [ 168.758469][T14118] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.758487][T14118] ? get_pid_task+0x106/0x250 [ 168.758504][T14118] ? find_held_lock+0x2b/0x80 [ 168.758531][T14118] __sys_sendmsg+0x160/0x210 [ 168.758546][T14118] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.758579][T14118] do_syscall_64+0x123/0x790 [ 168.758596][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.758609][T14118] RIP: 0033:0x7efe6679fb19 [ 168.758619][T14118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.758631][T14118] RSP: 002b:00007efe6761d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.758644][T14118] RAX: ffffffffffffffda RBX: 00007efe66a25fa0 RCX: 00007efe6679fb19 [ 168.758652][T14118] RDX: 0000000004000012 RSI: 0000200000000080 RDI: 0000000000000003 [ 168.758660][T14118] RBP: 00007efe6761d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.758667][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.758675][T14118] R13: 00007efe66a26038 R14: 00007efe66a25fa0 R15: 00007ffe4b9f8c58 [ 168.758691][T14118] [ 168.788503][T14120] FAULT_INJECTION: forcing a failure. [ 168.788503][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 168.788527][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.3.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.788544][T14120] Tainted: [L]=SOFTLOCKUP [ 168.788550][T14120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.788557][T14120] Call Trace: [ 168.788563][T14120] [ 168.788568][T14120] dump_stack_lvl+0x100/0x190 [ 168.788606][T14120] should_fail_ex.cold+0x5/0xa [ 168.788626][T14120] should_failslab+0xc2/0x120 [ 168.788641][T14120] __kmalloc_cache_noprof+0x91/0x6d0 [ 168.788658][T14120] ? percpu_ref_init+0xec/0x3f0 [ 168.788679][T14120] ? __pfx_no_op+0x10/0x10 [ 168.788691][T14120] percpu_ref_init+0xec/0x3f0 [ 168.788711][T14120] mddev_init+0xae/0x820 [ 168.788726][T14120] md_alloc+0xc7/0x10c0 [ 168.788746][T14120] md_alloc_and_put+0x16/0xb0 [ 168.788764][T14120] add_named_array+0x360/0x3a0 [ 168.788782][T14120] ? __pfx_add_named_array+0x10/0x10 [ 168.788804][T14120] ? __pfx_add_named_array+0x10/0x10 [ 168.788825][T14120] param_attr_store+0x199/0x300 [ 168.788844][T14120] ? __pfx_param_attr_store+0x10/0x10 [ 168.788860][T14120] module_attr_store+0x58/0x80 [ 168.788874][T14120] ? __pfx_module_attr_store+0x10/0x10 [ 168.788888][T14120] sysfs_kf_write+0xf2/0x150 [ 168.788924][T14120] kernfs_fop_write_iter+0x3e0/0x5f0 [ 168.788939][T14120] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.788957][T14120] vfs_write+0x6af/0x1050 [ 168.788970][T14120] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 168.788985][T14120] ? __pfx_vfs_write+0x10/0x10 [ 168.788996][T14120] ? find_held_lock+0x2b/0x80 [ 168.789020][T14120] ksys_write+0x12a/0x250 [ 168.789032][T14120] ? __pfx_ksys_write+0x10/0x10 [ 168.789049][T14120] do_syscall_64+0x123/0x790 [ 168.789064][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.789077][T14120] RIP: 0033:0x7efe6679fb19 [ 168.789088][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.789100][T14120] RSP: 002b:00007efe6761d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.789112][T14120] RAX: ffffffffffffffda RBX: 00007efe66a25fa0 RCX: 00007efe6679fb19 [ 168.789121][T14120] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 168.789128][T14120] RBP: 00007efe6761d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.789136][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.789143][T14120] R13: 00007efe66a26038 R14: 00007efe66a25fa0 R15: 00007ffe4b9f8c58 [ 168.789160][T14120] [ 168.789280][T14120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.890906][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 168.890964][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 168.890979][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xaec8 instead [ 168.890991][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0713 instead [ 168.891002][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 168.891012][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 168.891022][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 168.891034][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 168.891053][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 168.891072][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 168.891130][T14126] jffs2: Further such events for this erase block will not be printed [ 168.891374][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 168.891386][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 168.891447][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xaec8 instead [ 168.891461][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0713 instead [ 168.891471][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 168.891482][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 168.891493][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 168.891506][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 168.891526][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 168.891545][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 168.891602][T14126] jffs2: Further such events for this erase block will not be printed [ 168.891936][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 168.891948][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 168.891959][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xaec8 instead [ 168.891971][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0713 instead [ 168.891998][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 168.892008][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 168.892019][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xaec8 instead [ 168.892078][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0713 instead [ 168.892108][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 168.892119][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 168.892130][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xaec8 instead [ 168.892142][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0713 instead [ 168.892169][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 168.892180][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 168.892237][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xaec8 instead [ 168.892250][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0713 instead [ 168.892277][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 168.892287][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 168.892298][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xaec8 instead [ 168.892310][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0713 instead [ 168.892336][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 168.892346][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 168.892403][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xaec8 instead [ 168.892416][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0713 instead [ 168.892461][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 168.892471][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 168.892483][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xaec8 instead [ 168.892494][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0713 instead [ 168.892559][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 168.892571][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 168.892582][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xaec8 instead [ 168.892595][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0713 instead [ 168.892622][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 168.892633][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 168.892643][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xaec8 instead [ 168.892654][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0713 instead [ 168.892729][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 168.892741][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 168.892751][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xaec8 instead [ 168.892762][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0713 instead [ 168.892789][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 168.892798][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 168.892809][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xaec8 instead [ 168.892820][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0713 instead [ 168.892957][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 168.892970][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 168.892981][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xaec8 instead [ 168.892994][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0713 instead [ 168.895221][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 168.895236][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 168.895248][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xaec8 instead [ 168.895260][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0713 instead [ 168.895287][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 168.895345][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 168.895358][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xaec8 instead [ 168.895370][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0713 instead [ 168.895402][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 168.895413][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 168.895423][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xaec8 instead [ 168.895436][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0713 instead [ 168.895512][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 168.895524][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 168.895536][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xaec8 instead [ 168.895548][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0713 instead [ 168.895576][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 168.895587][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 168.895598][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xaec8 instead [ 168.895647][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0713 instead [ 168.895677][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 168.895688][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 168.895700][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xaec8 instead [ 168.895712][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0713 instead [ 168.895740][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 168.895750][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 168.895808][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xaec8 instead [ 168.895821][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0713 instead [ 168.895849][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 168.895859][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 168.895870][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xaec8 instead [ 168.895881][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0713 instead [ 168.895908][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 168.895955][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 168.895967][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xaec8 instead [ 168.895979][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0713 instead [ 168.896007][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 168.896017][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 168.896027][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xaec8 instead [ 168.896039][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0713 instead [ 168.896065][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 168.896122][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 168.896135][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xaec8 instead [ 168.896146][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0713 instead [ 168.896175][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 168.896185][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 168.896195][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xaec8 instead [ 168.896207][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0713 instead [ 168.896271][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 168.896283][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 168.896294][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xaec8 instead [ 168.896305][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0713 instead [ 168.896332][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 168.896342][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 168.896353][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xaec8 instead [ 168.896364][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0713 instead [ 168.896447][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 168.896460][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 168.896471][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xaec8 instead [ 168.896484][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0713 instead [ 168.896511][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 168.896521][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 168.896578][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xaec8 instead [ 168.896591][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0713 instead [ 168.896619][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 168.896630][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 168.896641][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xaec8 instead [ 168.896653][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0713 instead [ 168.896681][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 168.896737][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 168.896749][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xaec8 instead [ 168.896761][T14126] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0713 instead [ 168.896783][T14126] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 168.896789][T14126] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 168.909664][T14128] FAULT_INJECTION: forcing a failure. [ 168.909664][T14128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.909688][T14128] CPU: 0 UID: 0 PID: 14128 Comm: syz.6.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.909706][T14128] Tainted: [L]=SOFTLOCKUP [ 168.909712][T14128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.909720][T14128] Call Trace: [ 168.909726][T14128] [ 168.909732][T14128] dump_stack_lvl+0x100/0x190 [ 168.909773][T14128] should_fail_ex.cold+0x5/0xa [ 168.909795][T14128] should_fail_alloc_page+0xeb/0x140 [ 168.909813][T14128] prepare_alloc_pages+0x1f0/0x5b0 [ 168.909830][T14128] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 168.909850][T14128] ? bpf_ksym_find+0x128/0x1c0 [ 168.909870][T14128] ? is_bpf_text_address+0x94/0x1a0 [ 168.909887][T14128] ? kernel_text_address+0x8d/0x100 [ 168.909902][T14128] ? __kernel_text_address+0xd/0x30 [ 168.909918][T14128] ? unwind_get_return_address+0x59/0xa0 [ 168.909934][T14128] ? __lock_acquire+0x5c0/0x1f40 [ 168.909964][T14128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.909992][T14128] ? __lock_acquire+0x5c0/0x1f40 [ 168.910018][T14128] ? lock_acquire+0x1d1/0x380 [ 168.910038][T14128] ? page_table_check_set+0x1aa/0x630 [ 168.910055][T14128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.910079][T14128] ? policy_nodemask+0xed/0x5e0 [ 168.910096][T14128] alloc_pages_mpol+0x201/0x560 [ 168.910113][T14128] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.910129][T14128] ? __page_table_check_ptes_set+0x1d5/0x530 [ 168.910148][T14128] folio_alloc_mpol_noprof+0x36/0x260 [ 168.910168][T14128] vma_alloc_folio_noprof+0xed/0x1d0 [ 168.910197][T14128] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 168.910222][T14128] do_anonymous_page+0xac9/0x2050 [ 168.910244][T14128] ? __pfx_do_anonymous_page+0x10/0x10 [ 168.910260][T14128] ? rcu_read_unlock+0x2d/0xb0 [ 168.910275][T14128] ? rcu_read_unlock+0x2d/0xb0 [ 168.910294][T14128] __handle_mm_fault+0x1ff3/0x2f60 [ 168.910313][T14128] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.910329][T14128] ? pte_offset_map_lock+0x174/0x320 [ 168.910348][T14128] ? find_held_lock+0x2b/0x80 [ 168.910362][T14128] ? find_held_lock+0x2b/0x80 [ 168.910376][T14128] ? follow_page_pte+0x536/0x1050 [ 168.910403][T14128] handle_mm_fault+0x363/0xa20 [ 168.910421][T14128] __get_user_pages+0x8a9/0x2c20 [ 168.910452][T14128] ? __pfx___get_user_pages+0x10/0x10 [ 168.910475][T14128] ? wakeup_preempt_fair+0x4fc/0xf60 [ 168.910502][T14128] faultin_page_range+0x1f1/0x9e0 [ 168.910524][T14128] ? lock_acquire+0x1d1/0x380 [ 168.910545][T14128] madvise_do_behavior+0x354/0x510 [ 168.910562][T14128] ? __pfx_madvise_do_behavior+0x10/0x10 [ 168.910580][T14128] ? down_read+0x136/0x4c0 [ 168.910598][T14128] ? find_held_lock+0x2b/0x80 [ 168.910613][T14128] ? clockevents_program_event+0x1bf/0x820 [ 168.910634][T14128] do_madvise+0x238/0x290 [ 168.910650][T14128] ? __pfx_do_madvise+0x10/0x10 [ 168.910680][T14128] ? do_raw_spin_unlock+0x145/0x1e0 [ 168.910696][T14128] __x64_sys_madvise+0xa9/0x110 [ 168.910712][T14128] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.910726][T14128] do_syscall_64+0x123/0x790 [ 168.910742][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.910757][T14128] RIP: 0033:0x7f863a59fb19 [ 168.910770][T14128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.910783][T14128] RSP: 002b:00007f863b4ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 168.910799][T14128] RAX: ffffffffffffffda RBX: 00007f863a825fa0 RCX: 00007f863a59fb19 [ 168.910808][T14128] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 168.910817][T14128] RBP: 00007f863a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 168.910826][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.910834][T14128] R13: 00007f863a826038 R14: 00007f863a825fa0 R15: 00007ffcbe030d58 [ 168.910852][T14128] [ 169.072202][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 169.072223][ T43] audit: type=1400 audit(1793904679.080:1888): avc: denied { write } for pid=14129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.133004][ T43] audit: type=1400 audit(1793904679.140:1889): avc: denied { write } for pid=14137 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.170395][ T43] audit: type=1400 audit(1793904679.180:1890): avc: denied { getopt } for pid=14134 comm="syz.6.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.204652][T14135] tipc: Enabling of bearer rejected, failed to enable media [ 169.291979][T14147] bond0: entered allmulticast mode [ 169.291995][T14147] bond_slave_0: entered allmulticast mode [ 169.292007][T14147] bond_slave_1: entered allmulticast mode [ 169.335288][T14149] FAULT_INJECTION: forcing a failure. [ 169.335288][T14149] name failslab, interval 1, probability 0, space 0, times 0 [ 169.335311][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.4.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.335330][T14149] Tainted: [L]=SOFTLOCKUP [ 169.335335][T14149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.335356][T14149] Call Trace: [ 169.335360][T14149] [ 169.335367][T14149] dump_stack_lvl+0x100/0x190 [ 169.335392][T14149] should_fail_ex.cold+0x5/0xa [ 169.335413][T14149] should_failslab+0xc2/0x120 [ 169.335428][T14149] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.335447][T14149] ? __asan_memcpy+0x3c/0x60 [ 169.335479][T14149] ? __kernfs_new_node+0xd2/0xa10 [ 169.335495][T14149] __kernfs_new_node+0xd2/0xa10 [ 169.335510][T14149] ? __pfx___kernfs_new_node+0x10/0x10 [ 169.335524][T14149] ? lock_acquire+0x1d1/0x380 [ 169.335542][T14149] ? kernfs_root+0x23/0x2a0 [ 169.335560][T14149] ? find_held_lock+0x2b/0x80 [ 169.335574][T14149] ? kernfs_root+0xee/0x2a0 [ 169.335597][T14149] ? kernfs_root+0xee/0x2a0 [ 169.335627][T14149] kernfs_new_node+0x194/0x200 [ 169.335641][T14149] ? __pfx_kernfs_new_node+0x10/0x10 [ 169.335652][T14149] ? kernfs_create_link+0xe4/0x280 [ 169.335667][T14149] ? kernfs_create_link+0xe4/0x280 [ 169.335686][T14149] kernfs_create_link+0x100/0x280 [ 169.335703][T14149] sysfs_do_create_link_sd+0x90/0x140 [ 169.335723][T14149] sysfs_create_link+0x61/0xc0 [ 169.335741][T14149] device_add+0xb62/0x1970 [ 169.335760][T14149] ? __pfx_device_add+0x10/0x10 [ 169.335783][T14149] __add_disk+0x592/0xf10 [ 169.335800][T14149] ? find_held_lock+0x2b/0x80 [ 169.335815][T14149] add_disk_fwnode+0x279/0x480 [ 169.335834][T14149] md_alloc+0x3dc/0x10c0 [ 169.335855][T14149] md_alloc_and_put+0x16/0xb0 [ 169.335874][T14149] add_named_array+0x360/0x3a0 [ 169.335892][T14149] ? __pfx_add_named_array+0x10/0x10 [ 169.335919][T14149] param_attr_store+0x199/0x300 [ 169.335938][T14149] ? __pfx_param_attr_store+0x10/0x10 [ 169.335955][T14149] module_attr_store+0x58/0x80 [ 169.335979][T14149] ? __pfx_module_attr_store+0x10/0x10 [ 169.335994][T14149] sysfs_kf_write+0xf2/0x150 [ 169.336012][T14149] kernfs_fop_write_iter+0x3e0/0x5f0 [ 169.336027][T14149] ? __pfx_sysfs_kf_write+0x10/0x10 [ 169.336047][T14149] vfs_write+0x6af/0x1050 [ 169.336061][T14149] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 169.336079][T14149] ? __pfx_vfs_write+0x10/0x10 [ 169.336091][T14149] ? find_held_lock+0x2b/0x80 [ 169.336118][T14149] ksys_write+0x12a/0x250 [ 169.336131][T14149] ? __pfx_ksys_write+0x10/0x10 [ 169.336150][T14149] do_syscall_64+0x123/0x790 [ 169.336165][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.336178][T14149] RIP: 0033:0x7fb66159fb19 [ 169.336190][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.336203][T14149] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.336216][T14149] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 169.336225][T14149] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000007 [ 169.336233][T14149] RBP: 00007fb661637b70 R08: 0000000000000000 R09: 0000000000000000 [ 169.336240][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.336248][T14149] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 169.336265][T14149] [ 169.338456][T14149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.378679][T14151] FAULT_INJECTION: forcing a failure. [ 169.378679][T14151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.378711][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.6.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.378737][T14151] Tainted: [L]=SOFTLOCKUP [ 169.378743][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.378754][T14151] Call Trace: [ 169.378761][T14151] [ 169.378770][T14151] dump_stack_lvl+0x100/0x190 [ 169.378806][T14151] should_fail_ex.cold+0x5/0xa [ 169.378831][T14151] should_fail_alloc_page+0xeb/0x140 [ 169.378855][T14151] prepare_alloc_pages+0x1f0/0x5b0 [ 169.378882][T14151] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 169.378910][T14151] ? find_held_lock+0x2b/0x80 [ 169.378929][T14151] ? free_unref_folios+0x83c/0x17e0 [ 169.378952][T14151] ? free_unref_folios+0x83c/0x17e0 [ 169.378980][T14151] ? folios_put_refs+0x58a/0xaa0 [ 169.379012][T14151] ? __pfx_folios_put_refs+0x10/0x10 [ 169.379037][T14151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.379065][T14151] ? folio_batch_move_lru+0x390/0xc00 [ 169.379095][T14151] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 169.379123][T14151] ? folio_batch_move_lru+0x3bd/0xc00 [ 169.379153][T14151] ? __pfx_lru_add+0x10/0x10 [ 169.379174][T14151] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 169.379211][T14151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.379243][T14151] ? policy_nodemask+0xed/0x5e0 [ 169.379269][T14151] alloc_pages_mpol+0x201/0x560 [ 169.379294][T14151] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 169.379319][T14151] folio_alloc_mpol_noprof+0x36/0x260 [ 169.379345][T14151] shmem_alloc_folio+0x135/0x160 [ 169.379376][T14151] shmem_alloc_and_add_folio+0x371/0xd40 [ 169.379397][T14151] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 169.379418][T14151] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 169.379444][T14151] shmem_get_folio_gfp+0x758/0x1af0 [ 169.379472][T14151] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 169.379490][T14151] ? __lock_acquire+0x5c0/0x1f40 [ 169.379527][T14151] shmem_fault+0x1fb/0xa30 [ 169.379550][T14151] ? __pfx_shmem_fault+0x10/0x10 [ 169.379571][T14151] ? lock_acquire+0x1d1/0x380 [ 169.379592][T14151] ? __pte_offset_map+0x9a/0x470 [ 169.379624][T14151] ? __pfx___up_read+0x10/0x10 [ 169.379641][T14151] ? fault_dirty_shared_page+0x496/0x5a0 [ 169.379666][T14151] ? inode_to_bdi+0x9e/0x160 [ 169.379687][T14151] ? fault_dirty_shared_page+0x496/0x5a0 [ 169.379719][T14151] __do_fault+0x10b/0x440 [ 169.379741][T14151] do_fault+0x585/0x1890 [ 169.379758][T14151] ? __pfx_filemap_map_pages+0x10/0x10 [ 169.379789][T14151] ? __pfx_do_fault+0x10/0x10 [ 169.379805][T14151] ? rcu_read_unlock+0x2d/0xb0 [ 169.379822][T14151] ? rcu_read_unlock+0x2d/0xb0 [ 169.379850][T14151] __handle_mm_fault+0x150b/0x2f60 [ 169.379878][T14151] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.379900][T14151] ? pte_offset_map_lock+0x174/0x320 [ 169.379927][T14151] ? find_held_lock+0x2b/0x80 [ 169.379944][T14151] ? find_held_lock+0x2b/0x80 [ 169.379964][T14151] ? follow_page_pte+0x536/0x1050 [ 169.380005][T14151] handle_mm_fault+0x363/0xa20 [ 169.380028][T14151] __get_user_pages+0x8a9/0x2c20 [ 169.380065][T14151] ? __pfx___get_user_pages+0x10/0x10 [ 169.380092][T14151] ? __pfx_down_read_killable+0x10/0x10 [ 169.380112][T14151] ? plist_check_list+0x1b8/0x280 [ 169.380150][T14151] faultin_page_range+0x1f1/0x9e0 [ 169.380183][T14151] madvise_do_behavior+0x354/0x510 [ 169.380210][T14151] ? __pfx_madvise_do_behavior+0x10/0x10 [ 169.380232][T14151] ? down_read+0x136/0x4c0 [ 169.380267][T14151] do_madvise+0x238/0x290 [ 169.380290][T14151] ? __pfx_do_madvise+0x10/0x10 [ 169.380310][T14151] ? do_futex+0x190/0x440 [ 169.380357][T14151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.380398][T14151] __x64_sys_madvise+0xa9/0x110 [ 169.380419][T14151] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.380441][T14151] do_syscall_64+0x123/0x790 [ 169.380465][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.380484][T14151] RIP: 0033:0x7f863a59fb19 [ 169.380503][T14151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.380524][T14151] RSP: 002b:00007f863b4ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 169.380547][T14151] RAX: ffffffffffffffda RBX: 00007f863a825fa0 RCX: 00007f863a59fb19 [ 169.380561][T14151] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 169.380573][T14151] RBP: 00007f863a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 169.380584][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.380597][T14151] R13: 00007f863a826038 R14: 00007f863a825fa0 R15: 00007ffcbe030d58 [ 169.380625][T14151] [ 169.388918][T14153] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2162'. [ 169.560075][ T43] audit: type=1400 audit(1793904679.570:1891): avc: denied { mount } for pid=14162 comm="syz.4.2167" name="/" dev="rpc_pipefs" ino=62782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 169.637036][ T43] audit: type=1400 audit(1793904679.650:1892): avc: denied { unmount } for pid=12299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 169.674013][T14174] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„L½ô;ȧ0Gš¤“I¾q6•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 169.722651][T14176] FAULT_INJECTION: forcing a failure. [ 169.722651][T14176] name failslab, interval 1, probability 0, space 0, times 0 [ 169.722674][T14176] CPU: 0 UID: 0 PID: 14176 Comm: syz.4.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.722691][T14176] Tainted: [L]=SOFTLOCKUP [ 169.722696][T14176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.722704][T14176] Call Trace: [ 169.722708][T14176] [ 169.722714][T14176] dump_stack_lvl+0x100/0x190 [ 169.722758][T14176] should_fail_ex.cold+0x5/0xa [ 169.722789][T14176] should_failslab+0xc2/0x120 [ 169.722812][T14176] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.722833][T14176] ? d_instantiate+0x8a/0xb0 [ 169.722851][T14176] ? alloc_empty_file+0x5b/0x1c0 [ 169.722871][T14176] alloc_empty_file+0x5b/0x1c0 [ 169.722889][T14176] alloc_file_pseudo+0x17e/0x290 [ 169.722906][T14176] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.722929][T14176] create_pipe_files+0x33a/0x930 [ 169.722946][T14176] do_pipe2+0xbd/0x1e0 [ 169.722962][T14176] ? __pfx_do_pipe2+0x10/0x10 [ 169.722976][T14176] ? xfd_validate_state+0x129/0x190 [ 169.722996][T14176] __x64_sys_pipe2+0x54/0x80 [ 169.723012][T14176] do_syscall_64+0x123/0x790 [ 169.723026][T14176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.723042][T14176] RIP: 0033:0x7fb66159fb19 [ 169.723053][T14176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.723066][T14176] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 169.723079][T14176] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 169.723088][T14176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 169.723095][T14176] RBP: 00007fb661637b70 R08: 0000000000000000 R09: 0000000000000000 [ 169.723103][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.723110][T14176] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 169.723126][T14176] [ 169.724413][T14176] 9p: Bad value for 'rfdno' [ 169.725713][T14176] 9p: Bad value for 'wfdno' [ 169.735425][ T43] audit: type=1400 audit(1793904679.750:1893): avc: denied { ioctl } for pid=14177 comm="syz.0.2171" path="socket:[65439]" dev="sockfs" ino=65439 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.745486][T14178] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 169.745940][T14178] team0: Device ipvlan2 is already an upper device of the team interface [ 169.814744][T14180] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2172'. [ 169.892446][ T43] audit: type=1400 audit(1793904679.900:1894): avc: denied { mounton } for pid=14179 comm="syz.3.2172" path="/proc/306/task/307/fd" dev="proc" ino=65451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.912558][T14193] FAULT_INJECTION: forcing a failure. [ 169.912558][T14193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.912581][T14193] CPU: 0 UID: 0 PID: 14193 Comm: syz.0.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.912610][T14193] Tainted: [L]=SOFTLOCKUP [ 169.912615][T14193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.912623][T14193] Call Trace: [ 169.912628][T14193] [ 169.912633][T14193] dump_stack_lvl+0x100/0x190 [ 169.912657][T14193] should_fail_ex.cold+0x5/0xa [ 169.912677][T14193] _copy_from_user+0x2e/0xd0 [ 169.912693][T14193] ctl_ioctl+0x289/0xcc0 [ 169.912710][T14193] ? __pfx_target_message+0x10/0x10 [ 169.912729][T14193] ? __pfx_ctl_ioctl+0x10/0x10 [ 169.912760][T14193] ? selinux_file_ioctl+0x1e0/0x290 [ 169.912782][T14193] dm_ctl_ioctl+0x22/0x30 [ 169.912797][T14193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 169.912813][T14193] __x64_sys_ioctl+0x18e/0x210 [ 169.912827][T14193] do_syscall_64+0x123/0x790 [ 169.912842][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.912855][T14193] RIP: 0033:0x7fdff299fb19 [ 169.912865][T14193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.912877][T14193] RSP: 002b:00007fdff0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.912891][T14193] RAX: ffffffffffffffda RBX: 00007fdff2c25fa0 RCX: 00007fdff299fb19 [ 169.912918][T14193] RDX: 0000200000000d40 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 169.912926][T14193] RBP: 00007fdff0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.912934][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.912941][T14193] R13: 00007fdff2c26038 R14: 00007fdff2c25fa0 R15: 00007ffc88efcdd8 [ 169.912957][T14193] [ 170.155641][T14210] FAULT_INJECTION: forcing a failure. [ 170.155641][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 170.155665][T14210] CPU: 3 UID: 0 PID: 14210 Comm: syz.0.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.155683][T14210] Tainted: [L]=SOFTLOCKUP [ 170.155687][T14210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.155695][T14210] Call Trace: [ 170.155700][T14210] [ 170.155705][T14210] dump_stack_lvl+0x100/0x190 [ 170.155729][T14210] should_fail_ex.cold+0x5/0xa [ 170.155749][T14210] should_failslab+0xc2/0x120 [ 170.155763][T14210] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 170.155783][T14210] ? __alloc_skb+0x5b7/0x710 [ 170.155797][T14210] ? __alloc_skb+0x140/0x710 [ 170.155812][T14210] __alloc_skb+0x140/0x710 [ 170.155824][T14210] ? __alloc_skb+0x5b7/0x710 [ 170.155836][T14210] ? __pfx___alloc_skb+0x10/0x10 [ 170.155853][T14210] netlink_alloc_large_skb+0x69/0x150 [ 170.155870][T14210] netlink_sendmsg+0x755/0x10c0 [ 170.155887][T14210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.155906][T14210] ? selinux_socket_sendmsg+0x198/0x2f0 [ 170.155932][T14210] ? ____sys_sendmsg+0xa99/0xc30 [ 170.155949][T14210] ____sys_sendmsg+0xa99/0xc30 [ 170.155965][T14210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.156000][T14210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.156022][T14210] ? lock_acquire+0x1d1/0x380 [ 170.156038][T14210] ? get_pid_task+0x2a/0x250 [ 170.156052][T14210] ___sys_sendmsg+0x190/0x1e0 [ 170.156071][T14210] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.156089][T14210] ? get_pid_task+0x106/0x250 [ 170.156105][T14210] ? find_held_lock+0x2b/0x80 [ 170.156127][T14210] __sys_sendmsg+0x160/0x210 [ 170.156142][T14210] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.156164][T14210] do_syscall_64+0x123/0x790 [ 170.156179][T14210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.156192][T14210] RIP: 0033:0x7fdff299fb19 [ 170.156203][T14210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.156216][T14210] RSP: 002b:00007fdff0bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.156229][T14210] RAX: ffffffffffffffda RBX: 00007fdff2c25fa0 RCX: 00007fdff299fb19 [ 170.156237][T14210] RDX: 0000000004000012 RSI: 0000200000000080 RDI: 0000000000000003 [ 170.156245][T14210] RBP: 00007fdff0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.156252][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.156260][T14210] R13: 00007fdff2c26038 R14: 00007fdff2c25fa0 R15: 00007ffc88efcdd8 [ 170.156275][T14210] [ 170.247882][ T43] audit: type=1400 audit(1793904680.260:1895): avc: denied { write } for pid=14214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.281968][T14222] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 170.288205][T14222] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 170.320203][ T43] audit: type=1400 audit(1793904680.330:1896): avc: denied { write } for pid=14223 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.401670][T14228] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147483653 (only 8 groups) [ 170.470664][ T43] audit: type=1400 audit(1793904680.480:1897): avc: denied { create } for pid=14234 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.506012][T14238] team0: Device xfrm0 is of different type [ 170.910739][T14288] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.953347][ T5754] net_ratelimit: 362 callbacks suppressed [ 170.953368][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.976294][T14301] loop4: detected capacity change from 0 to 7 [ 170.987329][T14301] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 170.987350][T14301] loop4: partition table partially beyond EOD, truncated [ 170.987465][T14301] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 171.003109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.003973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.004112][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.005348][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.005476][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.035015][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 171.067082][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.114118][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.114297][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.114860][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.152442][T14306] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.552813][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2218'. [ 171.783783][T14339] tmpfs: Using encoding : utf8-12.1.0 [ 171.926336][T14353] FAULT_INJECTION: forcing a failure. [ 171.926336][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 171.926371][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.0.2226 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.926389][T14353] Tainted: [L]=SOFTLOCKUP [ 171.926393][T14353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.926408][T14353] Call Trace: [ 171.926423][T14353] [ 171.926430][T14353] dump_stack_lvl+0x100/0x190 [ 171.926463][T14353] should_fail_ex.cold+0x5/0xa [ 171.926490][T14353] should_failslab+0xc2/0x120 [ 171.926509][T14353] __kmalloc_noprof+0xfc/0x840 [ 171.926529][T14353] ? rcu_is_watching+0x13/0xc0 [ 171.926543][T14353] ? tomoyo_realpath_from_path+0xb6/0x690 [ 171.926560][T14353] tomoyo_realpath_from_path+0xb6/0x690 [ 171.926576][T14353] tomoyo_check_open_permission+0x2af/0x3c0 [ 171.926596][T14353] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 171.926619][T14353] ? hook_file_open+0x245/0x8e0 [ 171.926633][T14353] ? avc_has_perm_noaudit+0x11e/0x470 [ 171.926658][T14353] ? __pfx_selinux_inode_permission+0x10/0x10 [ 171.926680][T14353] tomoyo_file_open+0x6b/0x90 [ 171.926695][T14353] security_file_open+0xb5/0x1e0 [ 171.926708][T14353] do_dentry_open+0x552/0x1470 [ 171.926724][T14353] vfs_open_consume+0xcc/0x460 [ 171.926743][T14353] path_openat+0x1547/0x23f0 [ 171.926761][T14353] ? __pfx_path_openat+0x10/0x10 [ 171.926780][T14353] do_file_open+0x20e/0x430 [ 171.926797][T14353] ? __pfx_do_file_open+0x10/0x10 [ 171.926822][T14353] ? _raw_spin_unlock+0x28/0x50 [ 171.926850][T14353] ? alloc_fd+0x471/0x7a0 [ 171.926871][T14353] do_sys_openat2+0x163/0x1d0 [ 171.926889][T14353] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.926912][T14353] __x64_sys_openat+0x12d/0x210 [ 171.926929][T14353] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.926953][T14353] do_syscall_64+0x123/0x790 [ 171.926968][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.926982][T14353] RIP: 0033:0x7fdff299fb19 [ 171.926999][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.927012][T14353] RSP: 002b:00007fdff0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.927030][T14353] RAX: ffffffffffffffda RBX: 00007fdff2c25fa0 RCX: 00007fdff299fb19 [ 171.927038][T14353] RDX: 0000000000080200 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 171.927047][T14353] RBP: 00007fdff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 171.927055][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.927064][T14353] R13: 00007fdff2c26038 R14: 00007fdff2c25fa0 R15: 00007ffc88efcdd8 [ 171.927082][T14353] [ 171.927088][T14353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.080312][T14366] netlink: 'syz.0.2228': attribute type 39 has an invalid length. [ 172.132958][T14369] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syza3 [ 172.264105][T14380] FAULT_INJECTION: forcing a failure. [ 172.264105][T14380] name failslab, interval 1, probability 0, space 0, times 0 [ 172.264144][T14380] CPU: 1 UID: 0 PID: 14380 Comm: syz.3.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.264175][T14380] Tainted: [L]=SOFTLOCKUP [ 172.264184][T14380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.264199][T14380] Call Trace: [ 172.264208][T14380] [ 172.264217][T14380] dump_stack_lvl+0x100/0x190 [ 172.264253][T14380] should_fail_ex.cold+0x5/0xa [ 172.264285][T14380] should_failslab+0xc2/0x120 [ 172.264308][T14380] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 172.264345][T14380] ? __d_alloc+0x34/0xad0 [ 172.264379][T14380] __d_alloc+0x34/0xad0 [ 172.264412][T14380] __d_alloc_parallel+0x105/0x15e0 [ 172.264438][T14380] ? __lock_acquire+0x5c0/0x1f40 [ 172.264474][T14380] ? lock_acquire+0x1d1/0x380 [ 172.264505][T14380] ? lookup_slow+0x41/0x80 [ 172.264537][T14380] ? __pfx___d_alloc_parallel+0x10/0x10 [ 172.264562][T14380] ? __pfx___might_resched+0x10/0x10 [ 172.264589][T14380] ? find_held_lock+0x2b/0x80 [ 172.264625][T14380] ? __d_lookup+0x25c/0x4a0 [ 172.264655][T14380] ? down_read+0x136/0x4c0 [ 172.264687][T14380] ? __pfx_down_read+0x10/0x10 [ 172.264717][T14380] __lookup_slow+0x98/0x320 [ 172.264757][T14380] lookup_slow+0x54/0x80 [ 172.264793][T14380] lookup_one_unlocked+0xb8/0xd0 [ 172.264823][T14380] ovl_lookup_single+0x3da/0x12e0 [ 172.264864][T14380] ? __pfx_ovl_lookup_single+0x10/0x10 [ 172.264939][T14380] ovl_lookup_layer+0x3f1/0x4b0 [ 172.264975][T14380] ? trace_kmalloc+0xeb/0x110 [ 172.265003][T14380] ? __kasan_kmalloc+0xaa/0xb0 [ 172.265027][T14380] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 172.265057][T14380] ? __kmalloc_noprof+0x350/0x840 [ 172.265092][T14380] ? ovl_lookup_layers+0x1405/0x2aa0 [ 172.265129][T14380] ovl_lookup_layers+0x16da/0x2aa0 [ 172.265168][T14380] ? __lock_acquire+0x5c0/0x1f40 [ 172.265210][T14380] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 172.265267][T14380] ? lock_acquire+0x1d1/0x380 [ 172.265301][T14380] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 172.265339][T14380] ? find_held_lock+0x2b/0x80 [ 172.265365][T14380] ? rcu_read_unlock+0x17/0x60 [ 172.265392][T14380] ? rcu_read_unlock+0x17/0x60 [ 172.265429][T14380] ovl_lookup+0x4a8/0x6b0 [ 172.265460][T14380] ? __pfx_ovl_lookup+0x10/0x10 [ 172.265496][T14380] ? do_raw_spin_lock+0x128/0x260 [ 172.265523][T14380] ? do_raw_spin_unlock+0x145/0x1e0 [ 172.265544][T14380] ? _raw_spin_unlock+0x28/0x50 [ 172.265580][T14380] lookup_one_qstr_excl+0x1cd/0x250 [ 172.265622][T14380] ? mnt_want_write+0x15f/0x420 [ 172.265653][T14380] filename_create+0x1cf/0x400 [ 172.265677][T14380] ? __pfx_filename_create+0x10/0x10 [ 172.265704][T14380] ? __might_fault+0xc5/0x140 [ 172.265735][T14380] filename_mknodat+0x190/0x830 [ 172.265768][T14380] ? __pfx_filename_mknodat+0x10/0x10 [ 172.265797][T14380] ? strncpy_from_user+0x19d/0x2d0 [ 172.265834][T14380] ? do_getname+0x191/0x390 [ 172.265870][T14380] __x64_sys_mknodat+0xb5/0xf0 [ 172.265900][T14380] do_syscall_64+0x123/0x790 [ 172.265927][T14380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.265951][T14380] RIP: 0033:0x7efe6679fb19 [ 172.265972][T14380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.265996][T14380] RSP: 002b:00007efe6761d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 172.266020][T14380] RAX: ffffffffffffffda RBX: 00007efe66a25fa0 RCX: 00007efe6679fb19 [ 172.266036][T14380] RDX: 0000000000006004 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 172.266051][T14380] RBP: 00007efe66837b70 R08: 0000000000000000 R09: 0000000000000000 [ 172.266069][T14380] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000000 [ 172.266083][T14380] R13: 00007efe66a26038 R14: 00007efe66a25fa0 R15: 00007ffe4b9f8c58 [ 172.266112][T14380] [ 172.285855][T11966] overlayfs: failed lookup in lower (newroot/126, name='bus', err=-40): overlapping layers [ 172.285992][T11966] overlayfs: failed lookup in lower (newroot/126, name='bus', err=-40): overlapping layers [ 172.373871][T14386] FAULT_INJECTION: forcing a failure. [ 172.373871][T14386] name failslab, interval 1, probability 0, space 0, times 0 [ 172.373894][T14386] CPU: 0 UID: 0 PID: 14386 Comm: syz.6.2233 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.373924][T14386] Tainted: [L]=SOFTLOCKUP [ 172.373928][T14386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.373936][T14386] Call Trace: [ 172.373942][T14386] [ 172.373947][T14386] dump_stack_lvl+0x100/0x190 [ 172.373971][T14386] should_fail_ex.cold+0x5/0xa [ 172.373991][T14386] should_failslab+0xc2/0x120 [ 172.374007][T14386] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 172.374027][T14386] ? __d_alloc+0x34/0xad0 [ 172.374062][T14386] __d_alloc+0x34/0xad0 [ 172.374080][T14386] __d_alloc_parallel+0x105/0x15e0 [ 172.374095][T14386] ? __lock_acquire+0x5c0/0x1f40 [ 172.374115][T14386] ? lock_acquire+0x1d1/0x380 [ 172.374131][T14386] ? lookup_slow+0x41/0x80 [ 172.374149][T14386] ? __pfx___d_alloc_parallel+0x10/0x10 [ 172.374162][T14386] ? __pfx___might_resched+0x10/0x10 [ 172.374177][T14386] ? find_held_lock+0x2b/0x80 [ 172.374190][T14386] ? __d_lookup+0x25c/0x4a0 [ 172.374204][T14386] ? down_read+0x136/0x4c0 [ 172.374220][T14386] ? __pfx_down_read+0x10/0x10 [ 172.374235][T14386] __lookup_slow+0x98/0x320 [ 172.374254][T14386] lookup_slow+0x54/0x80 [ 172.374273][T14386] lookup_one_unlocked+0xb8/0xd0 [ 172.374288][T14386] ovl_lookup_single+0x3da/0x12e0 [ 172.374310][T14386] ? __pfx_ovl_lookup_single+0x10/0x10 [ 172.374330][T14386] ovl_lookup_layer+0x3f1/0x4b0 [ 172.374347][T14386] ? trace_kmalloc+0xeb/0x110 [ 172.374359][T14386] ? __kasan_kmalloc+0xaa/0xb0 [ 172.374372][T14386] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 172.374386][T14386] ? __kmalloc_noprof+0x350/0x840 [ 172.374405][T14386] ? ovl_lookup_layers+0x1405/0x2aa0 [ 172.374430][T14386] ovl_lookup_layers+0x16da/0x2aa0 [ 172.374451][T14386] ? __lock_acquire+0x5c0/0x1f40 [ 172.374473][T14386] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 172.374492][T14386] ? lock_acquire+0x1d1/0x380 [ 172.374510][T14386] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 172.374530][T14386] ? find_held_lock+0x2b/0x80 [ 172.374544][T14386] ? rcu_read_unlock+0x17/0x60 [ 172.374560][T14386] ? rcu_read_unlock+0x17/0x60 [ 172.374582][T14386] ovl_lookup+0x4a8/0x6b0 [ 172.374600][T14386] ? __pfx_ovl_lookup+0x10/0x10 [ 172.374620][T14386] ? do_raw_spin_lock+0x128/0x260 [ 172.374635][T14386] ? do_raw_spin_unlock+0x145/0x1e0 [ 172.374647][T14386] ? _raw_spin_unlock+0x28/0x50 [ 172.374667][T14386] lookup_one_qstr_excl+0x1cd/0x250 [ 172.374685][T14386] ? mnt_want_write+0x15f/0x420 [ 172.374700][T14386] filename_create+0x1cf/0x400 [ 172.374713][T14386] ? __pfx_filename_create+0x10/0x10 [ 172.374728][T14386] ? __might_fault+0xc5/0x140 [ 172.374745][T14386] filename_mknodat+0x190/0x830 [ 172.374764][T14386] ? __pfx_filename_mknodat+0x10/0x10 [ 172.374779][T14386] ? strncpy_from_user+0x19d/0x2d0 [ 172.374798][T14386] ? do_getname+0x191/0x390 [ 172.374817][T14386] __x64_sys_mknodat+0xb5/0xf0 [ 172.374833][T14386] do_syscall_64+0x123/0x790 [ 172.374848][T14386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.374861][T14386] RIP: 0033:0x7f863a59fb19 [ 172.374873][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.374885][T14386] RSP: 002b:00007f863b4ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 172.374898][T14386] RAX: ffffffffffffffda RBX: 00007f863a825fa0 RCX: 00007f863a59fb19 [ 172.374907][T14386] RDX: 0000000000006004 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 172.374915][T14386] RBP: 00007f863a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 172.374923][T14386] R10: 000000000000070d R11: 0000000000000246 R12: 0000000000000000 [ 172.374931][T14386] R13: 00007f863a826038 R14: 00007f863a825fa0 R15: 00007ffcbe030d58 [ 172.374948][T14386] [ 172.402040][T12180] overlayfs: failed lookup in lower (newroot/164, name='bus', err=-40): overlapping layers [ 172.402136][T12180] overlayfs: failed lookup in lower (newroot/164, name='bus', err=-40): overlapping layers [ 172.726950][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.781376][T14414] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2240'. [ 172.827800][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.832589][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.836060][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.849200][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.850372][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.874421][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.897066][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.898261][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2244'. [ 172.899576][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.900828][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.901246][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.901478][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.014094][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.139202][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.142574][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.143266][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.143737][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.144064][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.158633][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.200709][T14417] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.358246][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 173.390165][T14447] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.393573][T14463] FAULT_INJECTION: forcing a failure. [ 173.393573][T14463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.393652][T14463] CPU: 0 UID: 0 PID: 14463 Comm: syz.4.2249 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.393670][T14463] Tainted: [L]=SOFTLOCKUP [ 173.393675][T14463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.393691][T14463] Call Trace: [ 173.393707][T14463] [ 173.393713][T14463] dump_stack_lvl+0x100/0x190 [ 173.393743][T14463] should_fail_ex.cold+0x5/0xa [ 173.393775][T14463] _copy_from_iter+0x1f4/0x16c0 [ 173.393798][T14463] ? __pfx__copy_from_iter+0x10/0x10 [ 173.393816][T14463] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 173.393834][T14463] skb_copy_datagram_from_iter+0x11f/0x710 [ 173.393855][T14463] ? _kstrtoull+0x144/0x200 [ 173.393871][T14463] ? iov_iter_advance+0xac/0x6c0 [ 173.393886][T14463] tun_get_user+0x1955/0x3ee0 [ 173.393909][T14463] ? __lock_acquire+0x5c0/0x1f40 [ 173.393926][T14463] ? __pfx_tun_get_user+0x10/0x10 [ 173.393944][T14463] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.393968][T14463] ? find_held_lock+0x2b/0x80 [ 173.393981][T14463] ? tun_get+0x191/0x370 [ 173.393995][T14463] ? tun_get+0x191/0x370 [ 173.394013][T14463] tun_chr_write_iter+0xdc/0x200 [ 173.394031][T14463] vfs_write+0x6af/0x1050 [ 173.394045][T14463] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.394063][T14463] ? __pfx_vfs_write+0x10/0x10 [ 173.394074][T14463] ? find_held_lock+0x2b/0x80 [ 173.394095][T14463] ksys_write+0x12a/0x250 [ 173.394107][T14463] ? __pfx_ksys_write+0x10/0x10 [ 173.394123][T14463] do_syscall_64+0x123/0x790 [ 173.394146][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.394159][T14463] RIP: 0033:0x7fb66159fb19 [ 173.394169][T14463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.394182][T14463] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.394194][T14463] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 173.394202][T14463] RDX: 000000000000004a RSI: 0000200000000180 RDI: 0000000000000003 [ 173.394210][T14463] RBP: 00007fb662450090 R08: 0000000000000000 R09: 0000000000000000 [ 173.394217][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.394225][T14463] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 173.394240][T14463] [ 173.446450][ T13] bridge_slave_1: left allmulticast mode [ 173.446469][ T13] bridge_slave_1: left promiscuous mode [ 173.446714][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.450234][ T13] bridge_slave_0: left allmulticast mode [ 173.450249][ T13] bridge_slave_0: left promiscuous mode [ 173.450379][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.577074][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 173.577101][ T13] bridge1 (unregistering): left promiscuous mode [ 173.577119][ T13] bridge1 (unregistering): left allmulticast mode [ 173.598286][T14479] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 173.609856][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.655341][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.706944][ T13] bond0 (unregistering): Released all slaves [ 173.717425][ T13] bond1 (unregistering): Released all slaves [ 173.931768][T14417] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.931842][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.931938][T14417] bridge_slave_0: entered allmulticast mode [ 173.932947][T14417] bridge_slave_0: entered promiscuous mode [ 173.944924][T14417] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.944973][T14417] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.945035][T14417] bridge_slave_1: entered allmulticast mode [ 173.945728][T14417] bridge_slave_1: entered promiscuous mode [ 173.968698][ T5492] 8021q: adding VLAN 0 to HW filter on device eth22 [ 173.970555][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.978337][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.994882][T14417] team0: Port device team_slave_0 added [ 174.018568][T14417] team0: Port device team_slave_1 added [ 174.076624][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 174.076647][ T43] audit: type=1400 audit(1793904684.090:1925): avc: denied { write } for pid=14505 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.122392][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.122419][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.122434][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.126667][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.126724][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.126741][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.166658][T14447] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.166778][T14447] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.166877][T14447] bridge_slave_0: entered allmulticast mode [ 174.167876][T14447] bridge_slave_0: entered promiscuous mode [ 174.215128][T14417] hsr_slave_0: entered promiscuous mode [ 174.216121][T14417] hsr_slave_1: entered promiscuous mode [ 174.216810][T14447] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.216854][T14447] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.216991][T14447] bridge_slave_1: entered allmulticast mode [ 174.217929][T14447] bridge_slave_1: entered promiscuous mode [ 174.284405][ T9668] block nbd0: Receive control failed (result -32) [ 174.289644][T14471] block nbd0: shutting down sockets [ 174.314598][T14447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.338692][T14447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.371762][ T13] hsr_slave_0: left promiscuous mode [ 174.372342][ T13] hsr_slave_1: left promiscuous mode [ 174.372735][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.372748][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.378064][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.378078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.388985][ T13] veth1_macvtap: left promiscuous mode [ 174.389009][ T13] veth0_macvtap: left promiscuous mode [ 174.389106][ T13] veth1_vlan: left promiscuous mode [ 174.389141][ T13] veth0_vlan: left promiscuous mode [ 174.407960][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 174.407978][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 174.407989][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xaec8 instead [ 174.408001][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0713 instead [ 174.408010][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 174.408020][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 174.408029][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 174.408042][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 174.408060][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 174.408078][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 174.408087][T14522] jffs2: Further such events for this erase block will not be printed [ 174.408284][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 174.408294][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 174.408304][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xaec8 instead [ 174.408319][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0713 instead [ 174.408332][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 174.408345][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 174.408358][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 174.408376][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 174.408403][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 174.408430][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 174.408444][T14522] jffs2: Further such events for this erase block will not be printed [ 174.408684][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 174.408700][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 174.408715][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xaec8 instead [ 174.408730][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0713 instead [ 174.408757][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 174.408766][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 174.408777][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xaec8 instead [ 174.408788][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0713 instead [ 174.408815][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 174.408825][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 174.408835][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xaec8 instead [ 174.408847][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0713 instead [ 174.408913][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 174.408930][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 174.408942][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xaec8 instead [ 174.408958][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0713 instead [ 174.409000][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 174.409015][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 174.409027][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xaec8 instead [ 174.409038][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0713 instead [ 174.409067][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 174.409078][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 174.409093][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xaec8 instead [ 174.409110][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0713 instead [ 174.409184][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 174.409196][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 174.409210][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xaec8 instead [ 174.409221][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0713 instead [ 174.409255][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 174.409271][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 174.409286][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xaec8 instead [ 174.409303][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0713 instead [ 174.409338][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 174.409354][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 174.409369][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xaec8 instead [ 174.409386][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0713 instead [ 174.409425][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 174.409440][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 174.409457][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xaec8 instead [ 174.409474][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0713 instead [ 174.409515][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 174.409530][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 174.409546][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xaec8 instead [ 174.409568][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0713 instead [ 174.409609][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 174.409624][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 174.409640][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xaec8 instead [ 174.409656][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0713 instead [ 174.409684][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 174.409694][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 174.409705][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xaec8 instead [ 174.409716][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0713 instead [ 174.409743][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 174.409753][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 174.409767][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xaec8 instead [ 174.409784][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0713 instead [ 174.412243][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 174.412257][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 174.412267][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xaec8 instead [ 174.412279][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0713 instead [ 174.412305][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 174.412314][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 174.412325][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xaec8 instead [ 174.412335][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0713 instead [ 174.412362][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 174.412372][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 174.412382][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xaec8 instead [ 174.412393][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0713 instead [ 174.412435][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 174.412444][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 174.412454][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xaec8 instead [ 174.412465][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0713 instead [ 174.412492][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 174.412502][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 174.412512][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xaec8 instead [ 174.412523][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0713 instead [ 174.412549][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 174.412563][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 174.412573][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xaec8 instead [ 174.412595][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0713 instead [ 174.412621][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 174.412630][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 174.412641][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xaec8 instead [ 174.412652][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0713 instead [ 174.412679][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 174.412689][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 174.412699][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xaec8 instead [ 174.412710][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0713 instead [ 174.412736][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 174.412746][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 174.412756][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xaec8 instead [ 174.412767][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0713 instead [ 174.412793][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 174.412802][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 174.412812][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xaec8 instead [ 174.412823][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0713 instead [ 174.412849][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 174.412859][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 174.412869][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xaec8 instead [ 174.412905][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0713 instead [ 174.412933][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 174.412942][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 174.412953][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xaec8 instead [ 174.412963][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0713 instead [ 174.413005][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 174.413015][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 174.415700][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xaec8 instead [ 174.415714][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0713 instead [ 174.415743][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 174.415752][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 174.415762][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xaec8 instead [ 174.415773][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0713 instead [ 174.415798][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 174.415808][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 174.415819][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xaec8 instead [ 174.415830][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0713 instead [ 174.415856][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 174.415866][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 174.415876][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xaec8 instead [ 174.415887][T14522] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0713 instead [ 174.415908][T14522] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 174.415914][T14522] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 174.476351][ T43] audit: type=1400 audit(1793904684.490:1926): avc: denied { write } for pid=14526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.541707][T14533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2262'. [ 174.563154][ T43] audit: type=1400 audit(1793904684.560:1927): avc: denied { write } for pid=14532 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.609015][ T13] team0 (unregistering): Port device team_slave_1 removed [ 174.636754][ T13] team0 (unregistering): Port device team_slave_0 removed [ 174.683229][T14542] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 174.689324][ T43] audit: type=1400 audit(1793904684.700:1928): avc: denied { cmd } for pid=14529 comm="iou-wrk-14542" path="socket:[67392]" dev="sockfs" ino=67392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.725713][ T5492] 8021q: adding VLAN 0 to HW filter on device eth23 [ 174.743351][T14447] team0: Port device team_slave_0 added [ 174.744735][T14447] team0: Port device team_slave_1 added [ 174.839457][T14447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.839470][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.839485][T14447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.850607][T14447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.850618][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.850634][T14447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.900129][T14447] hsr_slave_0: entered promiscuous mode [ 174.900732][T14447] hsr_slave_1: entered promiscuous mode [ 174.901054][T14447] debugfs: 'hsr0' already exists in 'hsr' [ 174.901064][T14447] Cannot create hsr debugfs directory [ 174.983125][ T5138] Bluetooth: hci0: command tx timeout [ 174.992527][ T43] audit: type=1400 audit(1793904685.000:1929): avc: denied { write } for pid=14548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.066153][ T43] audit: type=1400 audit(1793904685.080:1930): avc: denied { write } for pid=14551 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.112242][ T5492] 8021q: adding VLAN 0 to HW filter on device eth24 [ 175.136568][T14554] FAULT_INJECTION: forcing a failure. [ 175.136568][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 175.136591][T14554] CPU: 1 UID: 0 PID: 14554 Comm: syz.4.2264 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.136607][T14554] Tainted: [L]=SOFTLOCKUP [ 175.136612][T14554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.136620][T14554] Call Trace: [ 175.136624][T14554] [ 175.136629][T14554] dump_stack_lvl+0x100/0x190 [ 175.136666][T14554] should_fail_ex.cold+0x5/0xa [ 175.136685][T14554] should_failslab+0xc2/0x120 [ 175.136700][T14554] __kmalloc_node_noprof+0xff/0x870 [ 175.136718][T14554] ? __get_vm_area_node+0x1ff/0x350 [ 175.136729][T14554] ? __get_vm_area_node+0x22b/0x350 [ 175.136740][T14554] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 175.136756][T14554] __vmalloc_node_range_noprof+0x424/0x1440 [ 175.136769][T14554] ? __lock_acquire+0x5c0/0x1f40 [ 175.136790][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.136807][T14554] ? find_held_lock+0x2b/0x80 [ 175.136820][T14554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.136833][T14554] ? avc_has_perm_noaudit+0x11e/0x470 [ 175.136851][T14554] ? avc_has_perm_noaudit+0x145/0x470 [ 175.136865][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.136900][T14554] __vmalloc_node_noprof+0xad/0xf0 [ 175.136913][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.136929][T14554] __vmalloc_noprof+0xa3/0x120 [ 175.136942][T14554] ? __pfx___vmalloc_noprof+0x10/0x10 [ 175.136956][T14554] ? rcu_is_watching+0x13/0xc0 [ 175.136970][T14554] ? cap_capable+0x107/0x430 [ 175.136986][T14554] bpf_prog_alloc_no_stats+0x59/0x690 [ 175.136999][T14554] ? security_capable+0x80/0x260 [ 175.137016][T14554] bpf_prog_alloc+0x3b/0x200 [ 175.137028][T14554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.137049][T14554] bpf_prog_load+0x4a3/0x2b20 [ 175.137067][T14554] ? avc_has_perm_noaudit+0x11e/0x470 [ 175.137084][T14554] ? __pfx_bpf_prog_load+0x10/0x10 [ 175.137115][T14554] __sys_bpf+0x146f/0x4b60 [ 175.137130][T14554] ? __pfx___sys_bpf+0x10/0x10 [ 175.137140][T14554] ? find_held_lock+0x2b/0x80 [ 175.137153][T14554] ? get_pid_task+0xfc/0x250 [ 175.137164][T14554] ? get_pid_task+0xfc/0x250 [ 175.137179][T14554] ? find_held_lock+0x2b/0x80 [ 175.137195][T14554] ? rcu_read_lock_any_held+0x6a/0x90 [ 175.137209][T14554] ? find_held_lock+0x2b/0x80 [ 175.137233][T14554] ? ksys_write+0x190/0x250 [ 175.137246][T14554] ? ksys_write+0x190/0x250 [ 175.137257][T14554] ? lock_acquire+0x1d1/0x380 [ 175.137283][T14554] ? fput+0x7c/0x100 [ 175.137297][T14554] ? ksys_write+0x1ac/0x250 [ 175.137310][T14554] ? __x64_sys_bpf+0xce/0x140 [ 175.137321][T14554] __x64_sys_bpf+0xce/0x140 [ 175.137333][T14554] ? do_syscall_64+0xae/0x790 [ 175.137347][T14554] do_syscall_64+0x123/0x790 [ 175.137360][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.137373][T14554] RIP: 0033:0x7fb66159fb19 [ 175.137384][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.137395][T14554] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.137408][T14554] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 175.137416][T14554] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 175.137423][T14554] RBP: 00007fb662450090 R08: 0000000000000000 R09: 0000000000000000 [ 175.137431][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.137437][T14554] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 175.137453][T14554] [ 175.137701][T14554] warn_alloc: 2 callbacks suppressed [ 175.137710][T14554] syz.4.2264: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.137748][T14554] CPU: 1 UID: 0 PID: 14554 Comm: syz.4.2264 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.137764][T14554] Tainted: [L]=SOFTLOCKUP [ 175.137769][T14554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.137776][T14554] Call Trace: [ 175.137780][T14554] [ 175.137785][T14554] dump_stack_lvl+0x100/0x190 [ 175.137805][T14554] warn_alloc.cold+0x9e/0xb2 [ 175.137818][T14554] ? __pfx_warn_alloc+0x10/0x10 [ 175.137835][T14554] ? dump_stack_lvl+0x17c/0x190 [ 175.137867][T14554] ? rcu_is_watching+0x13/0xc0 [ 175.137882][T14554] ? __kasan_kmalloc+0x8a/0xb0 [ 175.137894][T14554] ? __kmalloc_node_noprof+0x360/0x870 [ 175.137912][T14554] ? __get_vm_area_node+0x1ff/0x350 [ 175.137923][T14554] ? __get_vm_area_node+0x22b/0x350 [ 175.137934][T14554] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 175.137950][T14554] __vmalloc_node_range_noprof+0x107c/0x1440 [ 175.137969][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.137988][T14554] ? find_held_lock+0x2b/0x80 [ 175.138001][T14554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.138014][T14554] ? avc_has_perm_noaudit+0x11e/0x470 [ 175.138031][T14554] ? avc_has_perm_noaudit+0x145/0x470 [ 175.138045][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.138059][T14554] __vmalloc_node_noprof+0xad/0xf0 [ 175.138072][T14554] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 175.138087][T14554] __vmalloc_noprof+0xa3/0x120 [ 175.138100][T14554] ? __pfx___vmalloc_noprof+0x10/0x10 [ 175.138115][T14554] ? rcu_is_watching+0x13/0xc0 [ 175.138127][T14554] ? cap_capable+0x107/0x430 [ 175.138144][T14554] bpf_prog_alloc_no_stats+0x59/0x690 [ 175.138157][T14554] ? security_capable+0x80/0x260 [ 175.138173][T14554] bpf_prog_alloc+0x3b/0x200 [ 175.138186][T14554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.138206][T14554] bpf_prog_load+0x4a3/0x2b20 [ 175.138224][T14554] ? avc_has_perm_noaudit+0x11e/0x470 [ 175.138241][T14554] ? __pfx_bpf_prog_load+0x10/0x10 [ 175.138271][T14554] __sys_bpf+0x146f/0x4b60 [ 175.138286][T14554] ? __pfx___sys_bpf+0x10/0x10 [ 175.138296][T14554] ? find_held_lock+0x2b/0x80 [ 175.138309][T14554] ? get_pid_task+0xfc/0x250 [ 175.138319][T14554] ? get_pid_task+0xfc/0x250 [ 175.138335][T14554] ? find_held_lock+0x2b/0x80 [ 175.138350][T14554] ? rcu_read_lock_any_held+0x6a/0x90 [ 175.138364][T14554] ? find_held_lock+0x2b/0x80 [ 175.138377][T14554] ? ksys_write+0x190/0x250 [ 175.138387][T14554] ? ksys_write+0x190/0x250 [ 175.138399][T14554] ? lock_acquire+0x1d1/0x380 [ 175.138424][T14554] ? fput+0x7c/0x100 [ 175.138439][T14554] ? ksys_write+0x1ac/0x250 [ 175.138452][T14554] ? __x64_sys_bpf+0xce/0x140 [ 175.138463][T14554] __x64_sys_bpf+0xce/0x140 [ 175.138474][T14554] ? do_syscall_64+0xae/0x790 [ 175.138491][T14554] do_syscall_64+0x123/0x790 [ 175.138504][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.138517][T14554] RIP: 0033:0x7fb66159fb19 [ 175.138526][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.138537][T14554] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.138549][T14554] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 175.138557][T14554] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 175.138564][T14554] RBP: 00007fb662450090 R08: 0000000000000000 R09: 0000000000000000 [ 175.138571][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.138579][T14554] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 175.138594][T14554] [ 175.138669][T14554] Mem-Info: [ 175.138686][T14554] active_anon:8141 inactive_anon:3931 isolated_anon:0 [ 175.138686][T14554] active_file:1157 inactive_file:30744 isolated_file:0 [ 175.138686][T14554] unevictable:1000 dirty:637 writeback:0 [ 175.138686][T14554] slab_reclaimable:8973 slab_unreclaimable:82298 [ 175.138686][T14554] mapped:27755 shmem:1592 pagetables:4191 [ 175.138686][T14554] sec_pagetables:308 bounce:0 [ 175.138686][T14554] kernel_misc_reclaimable:0 [ 175.138686][T14554] free:390336 free_pcp:8013 free_cma:0 [ 175.138716][T14554] Node 0 active_anon:32220kB inactive_anon:15724kB active_file:4628kB inactive_file:122144kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:110976kB dirty:2540kB writeback:0kB shmem:4360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16608kB pagetables:7696kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 175.138803][T14554] Node 1 active_anon:344kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:8kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9068kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 175.138835][T14554] Node 0 DMA free:10740kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 175.138917][T14554] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 175.138940][T14554] Node 0 DMA32 free:108424kB boost:8192kB min:35260kB low:42024kB high:48788kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32220kB inactive_anon:15480kB active_file:4628kB inactive_file:122144kB unevictable:2000kB writepending:2540kB zspages:0kB present:2080628kB managed:1230692kB mlocked:0kB bounce:0kB free_pcp:32048kB local_pcp:13276kB free_cma:0kB [ 175.138974][T14554] lowmem_reserve[]: 0 0 0 0 0 [ 175.138994][T14554] Node 1 Normal free:1442180kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:344kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.139026][T14554] lowmem_reserve[]: 0 0 0 0 0 [ 175.139093][T14554] Node 0 DMA: 21*4kB (UM) 14*8kB (UM) 17*16kB (UME) 17*32kB (UME) 14*64kB (UME) 7*128kB (UME) 5*256kB (UM) 5*512kB (UME) 4*1024kB (ME) 0*2048kB 0*4096kB = 10740kB [ 175.139179][T14554] Node 0 DMA32: 1617*4kB (UM) 448*8kB (UME) 249*16kB (UME) 217*32kB (UME) 61*64kB (UME) 50*128kB (UME) 45*256kB (UME) 60*512kB (UME) 16*1024kB (UM) 9*2048kB (UM) 0*4096kB = 108340kB [ 175.139315][T14554] Node 1 Normal: 279*4kB (UME) 313*8kB (UME) 292*16kB (UME) 315*32kB (UME) 259*64kB (UME) 222*128kB (UME) 198*256kB (UME) 184*512kB (UME) 153*1024kB (UM) 18*2048kB (UME) 254*4096kB (UM) = 1442180kB [ 175.139406][T14554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.139416][T14554] Node 0 hugepages_total=49 hugepages_free=49 hugepages_surp=0 hugepages_size=2048kB [ 175.139425][T14554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.139435][T14554] Node 1 hugepages_total=91 hugepages_free=91 hugepages_surp=0 hugepages_size=2048kB [ 175.139493][T14554] 33491 total pagecache pages [ 175.139499][T14554] 2 pages in swap cache [ 175.139503][T14554] Free swap = 124988kB [ 175.139508][T14554] Total swap = 124996kB [ 175.139513][T14554] 1048443 pages RAM [ 175.139517][T14554] 0 pages HighMem/MovableOnly [ 175.139521][T14554] 291460 pages reserved [ 175.139525][T14554] 0 pages cma reserved [ 175.196597][ T43] audit: type=1400 audit(1793904685.210:1931): avc: denied { write } for pid=14556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.216599][ T43] audit: type=1400 audit(1793904685.230:1932): avc: denied { write } for pid=14561 comm="syz.4.2266" name="dlm" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.217218][ T43] audit: type=1400 audit(1793904685.230:1933): avc: denied { write } for pid=14561 comm="syz.4.2266" name="comms" dev="configfs" ino=67895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.225358][ T5138] Bluetooth: hci2: command tx timeout [ 175.289280][ T43] audit: type=1400 audit(1793904685.300:1934): avc: denied { write } for pid=14565 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.353005][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.353441][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.369218][ T5492] 8021q: adding VLAN 0 to HW filter on device eth25 [ 175.533542][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.533566][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.675396][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.675434][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.782511][T14586] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 175.795345][T14586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.821360][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.821395][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.852821][T14586] gretap1: entered promiscuous mode [ 175.857475][T14586] bond1: (slave gretap1): making interface the new active one [ 175.858516][T14586] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 175.897779][T14590] null_blk: disk nullb1 created [ 175.920212][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 175.920235][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 176.100252][ T5753] net_ratelimit: 248 callbacks suppressed [ 176.100280][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.100366][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.160047][ T13] bridge_slave_1: left allmulticast mode [ 176.160068][ T13] bridge_slave_1: left promiscuous mode [ 176.160195][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.164707][ T13] bridge_slave_0: left allmulticast mode [ 176.164725][ T13] bridge_slave_0: left promiscuous mode [ 176.164841][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.186871][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.233177][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.233548][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.233669][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.234766][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.234898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.285316][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.301933][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.323536][ T13] bond_slave_0: left allmulticast mode [ 176.326258][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.343203][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.346114][T14617] FAULT_INJECTION: forcing a failure. [ 176.346114][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 176.346134][T14617] CPU: 3 UID: 0 PID: 14617 Comm: syz.4.2274 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.346151][T14617] Tainted: [L]=SOFTLOCKUP [ 176.346156][T14617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.346163][T14617] Call Trace: [ 176.346168][T14617] [ 176.346173][T14617] dump_stack_lvl+0x100/0x190 [ 176.346198][T14617] should_fail_ex.cold+0x5/0xa [ 176.346217][T14617] should_failslab+0xc2/0x120 [ 176.346231][T14617] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.346250][T14617] ? skb_clone+0x187/0x3f0 [ 176.346267][T14617] skb_clone+0x187/0x3f0 [ 176.346281][T14617] ip_mc_output+0x528/0xd70 [ 176.346295][T14617] ? __pfx_ip_mc_output+0x10/0x10 [ 176.346307][T14617] ? __ip_make_skb+0x120a/0x2280 [ 176.346322][T14617] ? __pfx_dst_output+0x10/0x10 [ 176.346336][T14617] ? __pfx_ip_mc_output+0x10/0x10 [ 176.346350][T14617] ip_push_pending_frames+0x29e/0x300 [ 176.346365][T14617] raw_sendmsg+0x1492/0x37a0 [ 176.346386][T14617] ? __pfx_raw_sendmsg+0x10/0x10 [ 176.346402][T14617] ? avc_has_perm+0x135/0x1e0 [ 176.346424][T14617] ? __pfx_avc_has_perm+0x10/0x10 [ 176.346440][T14617] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 176.346475][T14617] ? __pfx_raw_sendmsg+0x10/0x10 [ 176.346491][T14617] inet_sendmsg+0x11c/0x140 [ 176.346507][T14617] __sys_sendto+0x470/0x4e0 [ 176.346519][T14617] ? __pfx_inet_sendmsg+0x10/0x10 [ 176.346534][T14617] ? __pfx___sys_sendto+0x10/0x10 [ 176.346550][T14617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.346570][T14617] ? ksys_write+0x1ac/0x250 [ 176.346582][T14617] ? __pfx_ksys_write+0x10/0x10 [ 176.346595][T14617] __x64_sys_sendto+0xe0/0x1c0 [ 176.346608][T14617] ? do_syscall_64+0xae/0x790 [ 176.346620][T14617] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.346632][T14617] do_syscall_64+0x123/0x790 [ 176.346646][T14617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.346659][T14617] RIP: 0033:0x7fb66159fb19 [ 176.346670][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.346682][T14617] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 176.346694][T14617] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 176.346702][T14617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 176.346709][T14617] RBP: 00007fb662450090 R08: 0000200000000680 R09: 000000000000006e [ 176.346716][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.346723][T14617] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 176.346739][T14617] [ 176.366942][ T13] bond_slave_1: left allmulticast mode [ 176.367718][ T13] bond0 (unregistering): Released all slaves [ 176.474785][T14619] FAULT_INJECTION: forcing a failure. [ 176.474785][T14619] name failslab, interval 1, probability 0, space 0, times 0 [ 176.474808][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.4.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.474831][T14623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.474837][T14619] Tainted: [L]=SOFTLOCKUP [ 176.474843][T14619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.474851][T14619] Call Trace: [ 176.474857][T14619] [ 176.474862][T14619] dump_stack_lvl+0x100/0x190 [ 176.474900][T14619] should_fail_ex.cold+0x5/0xa [ 176.474921][T14619] should_failslab+0xc2/0x120 [ 176.474936][T14619] __kmalloc_noprof+0xfc/0x840 [ 176.474957][T14619] ? tracepoint_add_func+0x3a8/0x1150 [ 176.474972][T14619] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 176.474992][T14619] tracepoint_add_func+0x3a8/0x1150 [ 176.475004][T14619] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 176.475032][T14619] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 176.475052][T14619] tracepoint_probe_register+0xc4/0x110 [ 176.475066][T14619] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 176.475079][T14619] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 176.475100][T14619] ? relay_open+0x793/0xa00 [ 176.475121][T14619] blk_register_tracepoints+0xfc/0x440 [ 176.475137][T14619] blk_trace_setup_finalize+0x320/0x3a0 [ 176.475155][T14619] blk_trace_setup+0x254/0x440 [ 176.475176][T14619] ? __pfx_blk_trace_setup+0x10/0x10 [ 176.475194][T14619] ? vsnprintf+0x4c5/0x1300 [ 176.475211][T14619] ? __pfx_vsnprintf+0x10/0x10 [ 176.475233][T14619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.475254][T14619] ? do_vfs_ioctl+0x226/0x13e0 [ 176.475268][T14619] blk_trace_ioctl+0x245/0x320 [ 176.475287][T14619] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 176.475313][T14619] blkdev_ioctl+0x17c/0x6f0 [ 176.475327][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.475341][T14619] ? selinux_file_ioctl+0x1e0/0x290 [ 176.475360][T14619] ? selinux_file_ioctl+0x1e7/0x290 [ 176.475380][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.475394][T14619] __x64_sys_ioctl+0x18e/0x210 [ 176.475407][T14619] do_syscall_64+0x123/0x790 [ 176.475422][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.475435][T14619] RIP: 0033:0x7fb66159fb19 [ 176.475446][T14619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.475458][T14619] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.475472][T14619] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 176.475480][T14619] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000008 [ 176.475488][T14619] RBP: 00007fb661637b70 R08: 0000000000000000 R09: 0000000000000000 [ 176.475496][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.475503][T14619] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 176.475520][T14619] [ 176.480777][T14619] ------------[ cut here ]------------ [ 176.480833][T14619] ret [ 176.480849][T14619] WARNING: kernel/trace/blktrace.c:1342 at blk_register_tracepoints+0x382/0x440, CPU#0: syz.4.2275/14619 [ 176.577543][T14619] Modules linked in: [ 176.578929][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.4.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.582151][T14619] Tainted: [L]=SOFTLOCKUP [ 176.583480][T14619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.586465][T14619] RIP: 0010:blk_register_tracepoints+0x382/0x440 [ 176.588423][T14619] Code: 0f 0b 90 e9 28 fd ff ff e8 9b 86 f7 ff 90 0f 0b 90 e9 47 fd ff ff e8 8d 86 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 7f 86 f7 ff 90 <0f> 0b 90 e9 85 fd ff ff e8 71 86 f7 ff 90 0f 0b 90 e9 a4 fd ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.594104][T14619] RSP: 0018:ffffc9000f63fb00 EFLAGS: 00010246 [ 176.596140][T14619] RAX: 0000000000080000 RBX: 00000000fffffff4 RCX: ffffc90006ef1000 [ 176.598502][T14619] RDX: 0000000000080000 RSI: ffffffff8216de61 RDI: 0000000000000005 [ 176.600881][T14619] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000fffffff4 [ 176.603294][T14619] R10: ffffc9000f63f9bf R11: 0000000000000001 R12: 000000007a3353be [ 176.605694][T14619] R13: ffff888027f78000 R14: ffffc9000f63fda0 R15: 0000000000000001 [ 176.608064][T14619] FS: 00007fb6624506c0(0000) GS:ffff8880d447c000(0000) knlGS:0000000000000000 [ 176.610771][T14619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.612805][T14619] CR2: 00007fb66242fd58 CR3: 0000000036432000 CR4: 0000000000352ef0 [ 176.615450][T14619] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 176.617908][T14619] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 176.620320][T14619] Call Trace: [ 176.621389][T14619] [ 176.622360][T14619] blk_trace_setup_finalize+0x320/0x3a0 [ 176.624246][T14619] blk_trace_setup+0x254/0x440 [ 176.625752][T14619] ? __pfx_blk_trace_setup+0x10/0x10 [ 176.627380][T14619] ? vsnprintf+0x4c5/0x1300 [ 176.628784][T14619] ? __pfx_vsnprintf+0x10/0x10 [ 176.630266][T14619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.632093][T14619] ? do_vfs_ioctl+0x226/0x13e0 [ 176.633636][T14619] blk_trace_ioctl+0x245/0x320 [ 176.635110][T14619] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 176.636746][T14619] blkdev_ioctl+0x17c/0x6f0 [ 176.638173][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.639689][T14619] ? selinux_file_ioctl+0x1e0/0x290 [ 176.641280][T14619] ? selinux_file_ioctl+0x1e7/0x290 [ 176.642889][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.644548][T14619] __x64_sys_ioctl+0x18e/0x210 [ 176.646055][T14619] do_syscall_64+0x123/0x790 [ 176.647483][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.649324][T14619] RIP: 0033:0x7fb66159fb19 [ 176.650710][T14619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.656421][T14619] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.658930][T14619] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 176.661456][T14619] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000008 [ 176.663893][T14619] RBP: 00007fb661637b70 R08: 0000000000000000 R09: 0000000000000000 [ 176.666374][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.668780][T14619] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 176.671245][T14619] [ 176.672315][T14619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.674525][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.4.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.677761][T14619] Tainted: [L]=SOFTLOCKUP [ 176.679062][T14619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.682047][T14619] Call Trace: [ 176.683042][T14619] [ 176.684043][T14619] dump_stack_lvl+0x100/0x190 [ 176.685578][T14619] vpanic+0x2dc/0x6f8 [ 176.686852][T14619] panic+0xd1/0xe0 [ 176.687984][T14619] ? __pfx_panic+0x10/0x10 [ 176.689340][T14619] check_panic_on_warn.cold+0x19/0x34 [ 176.690943][T14619] ? blk_register_tracepoints+0x382/0x440 [ 176.692716][T14619] __warn.cold+0x191/0x321 [ 176.694035][T14619] __report_bug+0x30f/0x440 [ 176.695439][T14619] ? blk_register_tracepoints+0x382/0x440 [ 176.697171][T14619] ? __pfx___report_bug+0x10/0x10 [ 176.698730][T14619] ? __mutex_unlock_slowpath+0x35d/0x930 [ 176.700400][T14619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.702205][T14619] ? blk_register_tracepoints+0x382/0x440 [ 176.703914][T14619] report_bug+0xb3/0x220 [ 176.705179][T14619] ? blk_register_tracepoints+0x382/0x440 [ 176.706902][T14619] handle_bug+0x16a/0x2a0 [ 176.708199][T14619] exc_invalid_op+0x17/0x50 [ 176.709541][T14619] asm_exc_invalid_op+0x1a/0x20 [ 176.710988][T14619] RIP: 0010:blk_register_tracepoints+0x382/0x440 [ 176.712880][T14619] Code: 0f 0b 90 e9 28 fd ff ff e8 9b 86 f7 ff 90 0f 0b 90 e9 47 fd ff ff e8 8d 86 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 7f 86 f7 ff 90 <0f> 0b 90 e9 85 fd ff ff e8 71 86 f7 ff 90 0f 0b 90 e9 a4 fd ff ff [ 176.718399][T14619] RSP: 0018:ffffc9000f63fb00 EFLAGS: 00010246 [ 176.720191][T14619] RAX: 0000000000080000 RBX: 00000000fffffff4 RCX: ffffc90006ef1000 [ 176.722478][T14619] RDX: 0000000000080000 RSI: ffffffff8216de61 RDI: 0000000000000005 [ 176.724834][T14619] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000fffffff4 [ 176.727142][T14619] R10: ffffc9000f63f9bf R11: 0000000000000001 R12: 000000007a3353be [ 176.729478][T14619] R13: ffff888027f78000 R14: ffffc9000f63fda0 R15: 0000000000000001 [ 176.731831][T14619] ? blk_register_tracepoints+0x381/0x440 [ 176.733556][T14619] blk_trace_setup_finalize+0x320/0x3a0 [ 176.735192][T14619] blk_trace_setup+0x254/0x440 [ 176.736634][T14619] ? __pfx_blk_trace_setup+0x10/0x10 [ 176.738222][T14619] ? vsnprintf+0x4c5/0x1300 [ 176.739628][T14619] ? __pfx_vsnprintf+0x10/0x10 [ 176.741123][T14619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.742937][T14619] ? do_vfs_ioctl+0x226/0x13e0 [ 176.744396][T14619] blk_trace_ioctl+0x245/0x320 [ 176.745857][T14619] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 176.747455][T14619] blkdev_ioctl+0x17c/0x6f0 [ 176.748834][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.750335][T14619] ? selinux_file_ioctl+0x1e0/0x290 [ 176.751912][T14619] ? selinux_file_ioctl+0x1e7/0x290 [ 176.753477][T14619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 176.754963][T14619] __x64_sys_ioctl+0x18e/0x210 [ 176.756354][T14619] do_syscall_64+0x123/0x790 [ 176.757735][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.759465][T14619] RIP: 0033:0x7fb66159fb19 [ 176.760818][T14619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.766487][T14619] RSP: 002b:00007fb662450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.768938][T14619] RAX: ffffffffffffffda RBX: 00007fb661825fa0 RCX: 00007fb66159fb19 [ 176.771254][T14619] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000008 [ 176.773608][T14619] RBP: 00007fb661637b70 R08: 0000000000000000 R09: 0000000000000000 [ 176.775951][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.778264][T14619] R13: 00007fb661826038 R14: 00007fb661825fa0 R15: 00007ffc1064eb08 [ 176.780602][T14619] [ 176.782290][T14619] Kernel Offset: disabled [ 176.783590][T14619] Rebooting in 86400 seconds..