last executing test programs: 24.254032825s ago: executing program 2 (id=36): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x5a, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x301, 0x70bd2a, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005"], 0xbc}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000900)={{0xa, 0x4e24, 0xb, @local, 0x4}, {0xa, 0x4e23, 0x7, @local, 0x8}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x7, 0x6]}}, 0x5c) 24.253742841s ago: executing program 2 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = epoll_create1(0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000840)=@sack_info={0x0, 0xfffffffa, 0xfff}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x1000000, 0x2, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r2, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)='27', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000130009002abd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="06470000ba7e030008000a00", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310302f30c00000080000900000008000300", @ANYRES32=r6, @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, &(0x7f0000000980)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x19, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0x75}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xf000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000ac0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x2008, 0x1, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000b00)={0x2, 0x0, @ioapic={0x3000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x2}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x9, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0x2, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf5, '\x00', 0x7f}, {0x3, 0x4, 0x81, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0x8, 0x8, '\x00', 0x8}, {0x0, 0x28, 0x7, '\x00', 0xdb}, {0x40, 0x1, 0x5, '\x00', 0xa}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xd, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0x8}, {0x8, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0xff}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="10002abd080006005d168c876c7095c575c89aa49be9f386387f57127542ae263cfdfff7ae72dfebf4a93ef4f1f648b735954594f7", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) socket$inet6(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 24.083929607s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x3b0, 0xf8, 0x1d8, 0x0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000b00), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x3, 0x1, 0x4], 0x6}, {0x3, [0x2, 0x4, 0x1, 0x4, 0x1, 0x2], 0x3}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0xfffffff4]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x0, {0x1}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff, 0xff, 'netpci0\x00', 'wlan1\x00', {}, {0xff}, 0x84, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x35b, 0x8, @empty, 0x4e20}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x3, [0x1, 0x2, 0x4, 0x1, 0x6, 0x2], 0x2, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0xa, [0x1, 0x1f, 0x16, 0x12, 0x11, 0x24, 0x10, 0x22, 0x33, 0x36, 0x18, 0x9, 0x2c, 0xa, 0x27, 0x3c], 0x0, 0x8, 0x1}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x6, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000b80)={0x9, 0x4, 0x3, 0x40, 0x6, 0x0, [{0x6, 0x1a26, 0x5, '\x00', 0x3a8a}, {0x8, 0x9, 0x6f38, '\x00', 0x106}, {0x2, 0x4, 0xfffffffffffffffa, '\x00', 0x400}, {0x0, 0x5, 0x1}, {0x34, 0x1000, 0x3, '\x00', 0xc4efcc2206070649}, {0x0, 0x343, 0x6, '\x00', 0x1000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000d40)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000d80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000dc0)=ANY=[], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)='A', 0x1}], 0x1}}], 0x1, 0x4000801) mount(0x0, &(0x7f0000001680)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r4, &(0x7f0000000280)='100', 0x3) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10010, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dvb_demux(&(0x7f0000000500), 0x0, 0x2000) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x81fd}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6218}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000540)={0x3, {"0dbad96fff010000087f002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2b, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000002c0)={0x0, {0x2, 0x10001, 0xffff44ae, 0x6}, {0x5, 0x6, 0x0, 0x7fff}, {0x7, 0x4}}) 24.083684536s ago: executing program 2 (id=39): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000480)={0x0, 0x20000, 0x80, 0x0, 0x4, 0x1, 0x20, 0x8a2, 0x80, 0xffffffff, 0x112, 0x1, 0x0, 0x0, &(0x7f00000003c0)="9ea53bbe95795930e5724c77065649d11c1391b7db2810efb14a9572c661393b04402fadbbca6a584ad9403c82466caf4b9796745dee425a1d68c7ed5907f2f19b5deaab36c9d7819361f2dcb34e022a74e9213b535b39d90463a5c2c0c9537b6f3b681234bc7ce8c62f9f4454cd6716ffa23d", 0xfffffffffffffeeb}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 23.963979976s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x400c090) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28001, 0x0) fsopen(&(0x7f0000000600)='hfsplus\x00', 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"60ddfe05cf5ab44163f210bc961ad8d06825126d28a0dc6c6f8b4966456546e376981a00febc7c6e84f40ecc8426c26140af6064e773de180c55e2415a39c76082d6e0365d40970183aa59a45c23058e1a3bab96548e07eccc538d9cd92e94cf08e063d898eee5d6b9cb67827f2a690f89db08250cc8fbdae590d7196381607df366bd7343763dacf64432449df9ce150050aacd5cb1ddb1d50758eb44e171bc5a927c1c8f6e2e869cb8f25bd622182b2f531caf0c4b3bdcf8c6c6e4896ac9c83a7622f9606d319e7e8d8e3dea8b54a7872f11fab1190fa3b9aa1f68213b9cade6731b46657a288e4dafc236cb510841af38c3de8cee93483ead0829c2baee5a7d08b84028a53394d4c66b7110a20b06b4d039be18da617ade0091224a31c5791611f66d36e75d722d9fdfe30d2438cb5933f8c1d833c85e3cf4f12d60ec7425ee40611eb915c342fef4b532685ea878099950ef51cdeb555fb371716c34482517ee5877970c0e675a07d16987e27c0ec50b6f7ecd9e4fdaf09ea8c3e558675e92758104ebd05e8b3a01e037e32865668bedb183ef4c90f0d7ff7b24645520cccacd166a44f145426cf7d496b9ea19c2aec33650ceaee005ac2fd742820e21f62ba28fe96ed4111a0954740e12ddf113fbad49266ffc86cb45cbfba35b4298e61cff8cd209ed4efaecbae24c0ae5ebcd6edbdd5b96ed6817a37c9d6848e6d65b59013ae11fffda70e4197364b5ab7948ade0301a48997901c7b912e73d23e4ccaa33bb6528f967af7bfd4bf728d0a43cdf1db7797da7fdc479c9c07d76a0528e239c2b0d4877708f00baeaa2ff06cd1a0efd30cdfd871cd9db248ef7ef1a960955089e1f49060e4e477070078c4405b04b295b801773787ef3a36d16cfcec5f3a6e00c6e3a490dd4cfff6b2ce9a8baa70df2da6878c9e86ae01c423b71ab88e83c6c230ec4874d149b31a4d74769e43b0875636bf94bde1196f994adc44eb921a3119cce3fb48499d013b2566ceb1eabd234c79cb169aff7aae16ed890725be47ab8208c9daca87c0f7710999d2a579936c7cde984e69f230244a6272e7ca14660eaf76cc9c47405d096d7738b601206ae76b1472c5bdcd236aafefdce7f73b4bfcfda90887a38f88e55f6fd7392ca6cfbbb2d6d7f389d205a9a656c32c47e8bb0fa641df4a5354a733b008bcf7ee101c7e67ab8fcdbc0ae3c09e4ad5dee614a23c73d5873301cf0a046959f9afb214ad98fc6b6f9ab80ed4ed893ba3951be1cc14197926775e5a51dd3877b3a079a1f269fa1e4a203a849c8c12ccb195dcea9e86f10937e3c0ce65f954eab99192392818d5b75dcafdcadc70da2100c908ffb2a60edfa7807b3391968631b8f415d7f2d1390696d8e8e743879d697afd34ab0205339b36c10f4e9f88b195100f6d9e6d22b3c10d82d9d7f7c8b9b74eebdf622"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000540)=@x86={0x40, 0x8, 0x2c, 0x0, 0x4, 0x8, 0x10, 0x4, 0x80, 0x7, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xff, 0x0, 0x0, '\x00', 0x2}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000006c00)='./file0\x00', &(0x7f0000006c40), 0x80, &(0x7f0000006c80)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000008d40)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000008dc0)='./file0\x00', 0x0, 0x198) syz_fuse_handle_req(r4, &(0x7f0000008e00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000ae00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000aec0)={0xfffffffffffffc90, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000000af00)="7c60933a88d76a2979d19b1a47363b838482a15ae1ca46df7c8f814e6f323fe97147d94c37aa14d23af92584e955bf5ea604da1371ebeaabf79f6229a064fddfd40bb55b6fc2ecccd91b7d7be714f4937db04551c462bff3ec4a191aca744d2792a717c814a88fe5e7127c330d2ce063c5ace17455db94d1096bdbaba282ab0eec92a2fbe9939807c200405341a0f8ff71dad41cb475531f48647a876cb61cd4897cec082383e4f465d2788597503edf9ed5ffb2113a2aead5ca76451f88699d46132a2cb30f1144d25c248f45c91f8fc4ae359f80d83af6966ccfe642a6581d3e3d66d5acbf1cf57ede53788786821526175b67c0f43de5058211ec7c59fc7f1684d816d84649915d1f9ef40edd517e32ae9e20f1d82065111ff318badea5b9af137f4d15eb2cd861525a297df3a048a5e17536212fd5648c76048f2490597ab08f79f003ef52a34cd37fb72922757188de4e1883695c8a600c88c3173fda0799439ef7f8f3ff30d26c60c528bb5b14018179e0290fa0bc5510697b07ef514bce316a1f101286472fc464c24eae6a265b63b98472f5d669bbb5dd82925f45246c453e5f66184f69047af37a12733117e6b7dc663a8aa2e2fdec59dee998f1794aafa4a56d312b3f7820d43c78cac7b3fee7312e028fa571ecea92d3db79b185c697833e18ebdeb1a1b7d48633dc6ea78cefd74a1399d8a8362879c2416e6850b483057807d080d9ad61cd1b3d3eedfcae780315c1b5c0735f4655f732b4dd8ba55cf84d29c9c6d06f3020e7042b209de37e51a7d17a930b834f98a4805e4ee18db264a63dd0c0949d6ad332ee9ec915a1e5d1dd649ad09022023792a7a59ff1d21c18d6efed92d65cfc27d0f953c35e8a3b9d7fc23ed37bc054bbd0f867a5cc5cdacdb08b3ee2dab67b9552d0c64df74fa945db0afabd7de792ee04264c8d3f3210be29465fc2af853830c59687f3c2d5b29602c1260b3cb31e95beee609ac3bffd7ff00fc97089f5791f670bc9fbb7252c24f981010235aa54cb77be24d9b345a1e21ac19b9667712d3dd474d478235f9ab438b36b0b27151c3f403c50b0f82379f8fbcef88e3d7bafad1112804d0726b43617b332bb55a323a6eda3a7db340fd9a5b625d2f992d084d59bc05144a239dafb782663bf5d3d3f17628e5c495fdb4953fe67ed7011ead6c7202b037374f8e819259a7ab5c617ae57508ceb1ee09a79fca924ae2c2db0c1f64570f823d29f703d09af1053a3f55014e1af9f0c72710a88b26bee1735cd1b7d38c499b04aadd211efdf60a26e51bb0ab9e22a40fe86c99a48cb5c9e0a50664917279bbe161e80294192a3ea22bc0dfb4804708e8d0573a98ef6c056dea914e3bd7a49759b4438dda9ffaf86c6995ef526565c15cae88f4b340c074932fa0f161a25294b3417ff2555109705521c4fafd034b9f9e5689efa1a5003d510a1099652b46e6797af00e0328670db8b29d48e96a904f998b7ca59a348de713476785f1fb76b5ad91b4107a745ca43e67c6257b11571d70a39bd1913640514611511c54a3efc03d54fb29467973f95a7396498088e935428f8fe6021f61b536227e4c9958e7ae8cc599d8fbe5fe4218c7405b828fa4e84c92e98be66d375e1c3d31537180cd03cf0f0c3b1592dfefa9b8466bffe96127a3dfc12784ebf9ff440d824eef957ac3fe1e457a6fee39cedc00c87f9f1bcc68c91333656192f2479461ee3def59bc7cf19c8a2f36bcdca3c173264e5dc251f15d27612e869e8e18a3c412fb1c6eda45364732e6b552fca8530c4e8143d67b3697d45d5286cb5d2478a8a4d144657277bce97fea1bc405c40892e37c785b24e3126942ff0effcf6fad105493b9960a5bb1fc4dbc4dba44b141c8841ef1e44901f9f7bfe5cc942dc31b514ba36cb858d9537a5eef5cd7f6f2c2a7e5452029aeff5274f47ad6360257d1156e776ab89dc9a7adc2e151454b171f785ced26d3c69aef8a6fe53b4915977f11049a1787a3ef0bda32a10e4ca92d31e02eb77c575562f173943c119479d10e4714b86ea0209877326163813c974650cee30757ae5758dd95be001cbad0fca9d8102cd6aeae0982c017040052983c76e9733c58e94a739402451555e59e5ff0932b09ca975d66ac3a48701c7c98b4fdbf84ce894f02da3da2e0d7737b2cdd4d5970e003bd925c987fd6e17ba109ff50398869519b6e6b48141408d977d973ae99e12f541ce28ea765f72d9f09e82bd9430fa7092f67570a4af1010d0e2ed7d0e2c9f5c15488fc5369fa1546c61472e4e05c38b6a857e73fdd59f0946d0547fce3415a606700286a5272f7933d33bb1a7e5e57e20af8374524436d25df2c6e5e76fe5ee89d89643c939ada6997fd53ff45368fab6e952482a7bbc3e75e9dff4e830c836b6c2792b7ecaceab5959dd454a490a54147e56327f7187382e2e1cd78df1b7c603f4cd42e776eb9f60b0ce9c3ea3392bc7b86ea9c7c4bfd7137b0a469b83ce4cd25ed1972904d5ab825d5380846ff1ae33bbf01366d61cd6c067becb2800e6463f40300f8731d50c5ad39f8de05d9100bc0265b6fcbe548747df89e614e7767b30e086007c2435ac5b62b9ae6d4d83ee1a61e4fa608848dbc1d229bfffc3e1c05d364adae3d21b653f9a671e42f740dcc3c8b10c0a0bc70d093fa8d2b99b1a09e391004c0afc765b4aa210dead05fb9a5955a2291bd4181e752ace0db6f1217fdfc56aa2392d081176a907e26d295f03321af736bec89577e975b18b53af8a3480447e8aed18718abde41609723d82cad1a5b7a17ac578310b7fd6ee9c31bfb5def019d00eae869b8ddf9f135c5cc325026da2c6e8e5ca9f30b928c0ac884409f7b8502c4df1d5a4a1a64f294987fb94c2288de8d16dc6eef3206d38f2d0f5dcb13d43633a7d0e2f9f35cdcab95975602cb5ce0a6b6833a0b96a9d3c0fe32afbea9d9a92b86dfe5ab1caa7f77d47ac0410d81ac624ce7993054061c2e01dea2c64f0cba89ee88a0fa54c2204b74cab75b08bd92409f14952170c6e3db551f77bb5e892380a7923821da934ac6a3f3133c0ca45828e4b890ed8e1ddfa7cc0fa3d69823f18888dae08bdf8e7633db061b47555360f51493ed9f46426150e0d85744cc1df2dd55f1c02d831a4ff90173af5b9feb77c5f8d21b75a1264e53d87e3893bd32c5cc8aa3fac0547307ed481b0df6561656b144580e48e53c58783424a4cfe99b06cff968c641f05f91c141483fa9bf94ed2a70a2f4a8e809a375a11bdb1563b540bb3a0181f48d165b781fc250a5a076fc2d4c1b63d5ebc0c5bbb711f7955faf7b581560793508806dbdf490ef1b358476157784412d6bb11427b4c937e63e17044cbfa79fcf159c1e632d2cc1de85404327ebbbf4b7763184a059d92ebb6e19a6156defea425b79a4f9a4651b47d1b9f8ff65e016b62a78f4893e0bb621446cac2a6c3f7e57092904a47ffae159e4d7ca0a0d06970dae6b7e7261f70beeac02f19e26caf7e745c82690c4fe9483dfdceea399d6d254181035d9baa211e87b94bc178d6e86b5a6bf012ea39223ddeddfc4731e0c8b5d6d454e76ff6018fa5d0039f991d56f78d953633b0e2457c67f5d06f35940d75dad0904dcb9e48033f1a833beb1994ed2fa58a0d75dddc8e570eddcfd12bd2239f1ec001e940b203fa73d87e715a5d431dfed069b77f9722e6f8c0df9b4bf6374c7848b26424fbb5f75c8494532c1ce6b825e55aca77e056a7f0ca42b291e96d1d5e92b3b628ae7d5a2bb73eaf8deb5f80452ed1a47afebfa084eb06c9897eb70ec3f4aa32c5413b5118ae57fcf5b9b236099f0d8f3fe5cb3a2f0def902057fd26d2557168322c13066af51b882be00ebcfdeb6e33d294214ac4e4390b2bbec78be29938ba03ca9f31cf36d8645d1f8bcf752d6d9ccddde2e8cd3bd90d01e5c14d37666dd2e5768bbf1df585d5e0e986adbe379197d1aa77e4dbdf55e9d7f64a5bb4ab44403657913e4723a6ce5196e5a67ed0206406940202f697e2c80dd0efff938ac79458661761846ba57911d7d86bd09d94839920176460deedc3f13feb96e28554ab01cc95bc9764bf7527b0153c45955cc7e71f97ae452f2c9e8277ab66535d3f6c87283791fbfc7de2cab1313e821613b0db320985c9ee8b0066ca4a1b8da0ea43c3f453b9983a6d5cd01dcf40149fd4f441b7f593987a05cf41088f6e474c1a5a23be48adaa73d8e90a1c4857e7b88743345014670a9c74d748765872d447f00cc6be4b03e5253b1709d0e47e2532347e0bb748bbd05f2d3765c881325fbdc04d582ff128b38fe29c04e75554dd82ae6c81fb15d93cbe96563e50c46d65a65eb00890953714f5c1c198566ba6de1db794297f948f0c315d433b77d867a9db6cca86241cbb4db80fb9b1782b5bf0a57401b79644f45ecb9d8642c6aeacbfb70d8b8429c5e867ff780a19e8cd80cc153636f17e338b8c069a54829c8ae6cd9361fb10ea5eb231811a45336fa650f060d21c481580456ecacea8b5ee5050fe84ff5463df2d7d5d475fe65da9e848ecf65769dae6da4b7977d5b95307694889c703f8eff6ae51182dcd32ec27c1b453a216913a79653977ec256ad37739a6e99b6fb0f2b2aa3f1f494c01c2a7f79da0a6ec6a0a855fd0efebeec595c1dea772d064f9c046096069285c22f117ff8bd16c4d003323692036a22002f3020d28a94eeae09894017fce5747c1374c0dc158d4d930452ada5a1c4d00ed805fe14d4016d7bb5ec9b064c5e595bb63c6474d94167839a8680de9f726c5119e73c563c15d775a78425562eae4a07d70c8746de4514fde36fc0ea1c7bce94f016444812c11556d8d82bc7aae33d4eceb684208b6eef7679012ec5549144a2716226f3adab8f52b835f7704b11443df808d5921ee920899757b438d5c4a0b50264840cace40a159356fa271b039edfc696844afdde58fea1787a5f38044cc50a9978d1412930f9dba720b6036f4cff01b04b5bcbcfd4b4be2fc37742eaa4ab2cc0dc3843d8beaaf5f5e3ef70a5c48bfe26502f34647c4a6b0b6daa2db6ef89d2b808647d7ecc671be7cd014940e8c2b1e3b59f4e031921f30adfc0c1b432e8f388fbee20948e19fee912dbf7f57650abd65de07807495e273a78481c3f21dfb83e5f8a60b5564d0699a90c079dac2caf8f4c8a3e56fcaf9568d1b9120803adecd3435d9134201576ecb332296897e81a56c0b229ee3a57fec2212c9ac0c771064c3cfece323b97e8cacce390d58cefca0417d5fdf4eb9acc1c754d5d04e9b85a62e3a19d8fb1e8dc23b63ab8dd4552439f3c90ce0047792d769fa2e784a8d7098f34f11423ee1a0d47639d7759b8affbf50e77e74e4af57b33ab87a2b049c84de6c55b341bc51ae2a107995bc8d91a75cb455af7b95f5c49539aab76fdf159bc64bad8bba493fb49c5e08f2cfa8a0e4c5ec35dae9ed7e01eb24b54701ba7960a258e2428f50e185d1dbed1b566845f136302d5f88f5b3eb244e611caa6e1cfacc9b0c51d7e56d56297c08edaa1f150e138370ca12595598f4d2bbc7639adcb6cc051c71f2d04f638d570deae96842712bdbf68daeec73478148254f709776ffe187ba4b38769f04489d87d7af42c7dad6ab1064035c5c61e69a95c660d3696c6f66a43fbd57a931ee172a3eba71cc0b4d1a9c1f6a28d95489d0dc2a67772457897d74f51e3672051593e3a9624c3778d9dbfb05ff3aa672b3c1cb83ebbfc3a0212f8bc1366a0f32b62a3f698f6ee31d12388d43464955c72a6e9ed5dfc7deb7f09c7f23f01dee2b3437ab5af05ddc7f030afb8b714a34573b425288379bf84a7b5200476df88b3874f785ec3cd1aa946558159f3fdb9cc481094f1bc6a01a11fef9b56bea73a5124a62456b79f22dfe60ce8e53989c8b1d0c031ee35ba2bd408f99ca48b6d9ca1414c5e750d5efc5fbf225fafda284ef80118964292d18f77a01eabdffd68f8c62d8af07a5a6d5a23464c08e3bbfce5912abcc1f4acacc3d4bc0cf511cb9682dc5fc775a0fa0229d6260370989ae8850ffbf0aa94bbef450994083f4b0616c7f481fbcf373b4e6f8cac4949f13d9c3b55e27275c8fb6d95d9b3ca9c7df28b8b8331e81fbd8dbb9bb63e19f8f6a10ef16d1fa0b000fb72af4894b4d51663e65d717028d192ca935ec17aabaa8602867afc5942f6624a57ecd7572521c3eca53ea09cd7519c724c19ab89b63d1752c1c503e732c72b0f0d8558900ba0c575b918ac6d4fa9e0ca8584876c654a83000df383a4cf41ab54b8f8df44a0e59499dd850277c14f6ee8bfc86822dc473b33634dbb638ca0de90a4e506854d468894d8409c15bfea5ba91720a2daa2e4946f5897bb0b03accb214c3d06ecf711166202d24828fb4b9c96ae0db50ce319a64750e002198b73ebda97dd96a677da9fb59feecde57ccf492b300667b743611a29dd4b30190450c640b2ae5da517edfd88a78c8fdfbaeff0bd17eb334464c0dcb3b851a9fcdb4485bac45262bc985de4cc2ba2005e82549ba80833641a4e86cbb8e18b960e8deb880a3cd8c75941fb0c6969a6cc55977d9c970dcf7a7506e581c795fc59dca99f80486e761bce7262407df3b4f0769b295011fd4f568c18efe53a1b058b43472d07ed4860f38124678994def0a6c72f84f0b12280e91ff4699ca93d12f8c6ace9d2e89844602d52d0ce1acc16d4faebeb649bab4e3b5c16973a765e9488acaab196b5aac840826609934b99a9cc513f6a546a542c2313c5ec5a902ab4a3186ae97156b27216aea9879503d402314e7800714ad6e78cb8f627a4c80497efd68bbf522aaab7b68653236e73229378cb198ebb33aae5e4a9adfb99fa6e38b74ca1af9cad80ec974039769c633694b161628c3e97e49a78762d30f8cd513b9df0f917107afd11d77c59898ce270e60d91ddb526c679b98500934338a8a4bf994ecb6078fa2ce773350184d81d431a5e31fc672d4be414b435b779135f7f60d4a1269c24d2c135d41b613f43db878c85a414e9e79b4c09ebaf3bba6a000fdb59f9cd91cf589e09d81e41b84641d7edafd018396c2f0243de265a6a238fdfd00e07c206ea6220f3de46fcdc1ce39efb01c8569b8c1c3a3224b5dcf909a13f1d5e8ba2eabf1d533360c3f96a8628152d3c7467c9c2312f2aa4e2f5e4cb08519f75cdff4691263fed7cca0f8ebc7d0890adafb0d758794b4d82696ae782b70addae7c67d4bff760a1c2ebbab45dacccb651b2883e464aab45f98a69efbded5338ae4ce54e66c6657b40f040ccf698bc1f111ac04242508164c92add63b35a3db0ff11f29405d964c76e9cfe90dbd035249f443ecc2d80d5602bd805de38907efd1729767211e19e56c15c939c353ef18fbf56f5b2443d16354022a22ce835572d8b039face4147403633daa3823c3b6dc20f1675a28dd28187edef3d38fdd5e21ba596fa881daa52e024088aae82744d04699311228d7b1878ff726e21627f91a3e58f55e88c48d3db3592d568de891e5e48e00a39be19e4c43553d9613c34b1df3d96e3ab26a759f57f7b3c3ff971f269a51a953e23c646b39836149f50b11914d5861479d03319bdff8630e331c60c73eddd6cc3f041383b598d8055488517fcecc9bf99508bcb1e4a3120ee391ef8487265d66994dade2343717e584fb30abe59cca126ced0847eb2c4e4bd6d5fda67c18a0adc7a0bf59610c98988b3a08ec7130f3cb69be7d7ca0555e92417f25306e79b5a509f68c16ccfe8d8c69967a9f80b87e163d414efda1a9bc2f0f691b64cf58c8b6636dddf9140670d2d0d883401afc51d05445b49b4d7063dbe0c2f7ac63a6b09ce465ef5953b9b99bfa578819716d3565e4fa0d95a2e1266abdada47ece5332dcf9c4ce68ecff1397669db3fbdfa22fdffc39eb665a951d73d7fba0fafe0c02ca69b4ae43b5a251e743df672d3e5c6893c7701042a2366f7e3d9406235993f3ed63c7356651acf17cbf6229bf52d1c895d992378457bf035e3d79b58de436966e2ab4236194ea87ed0745216542866cee8cc92b1abc43b5d4628d9bde4ba674229bb83a9aa15613d102e1b39c12e3ed6095284282452bc0f63557f06aaef97f3a0604f467070a350c8f94a7d37d43c81c6b6f71cd170dcb742515a58baa40fab685a79ea8188f0d6f893d1a1a86b1fcce9fd8353c9602974ca315fd129459b88f6129b5d073435eac7c6fc00ed5da18d27e72ccb0b5e755fedafbd74770772f79930b2f5db8451e1ea004db3f826df026f16dd831a68737476b1d69d4ed46fc48ad14425a455e689d51362d5b445da484950ed2b0943e5d3a1e88afadb66f7e817b778ac049c91875a626ae347c5ef28ca1e104f8cf7f038f5551581e3d6375647777de8ae9854517217887a957527148d8a0438b5958ae7774267bcbb6ebda5f2af12454ae2d8dbaef741ed936bcee0135cd440a83146446ed63b8e279f9a02c64b8bc082b1d31157e86c7cf374af30442c2c6e91a1909289e7f193ef9caaa516a1951b6042ef3407f55b19b28646357ad6f06913466cad44576d39623376fb47f5f21a6492e9b2286bbf26e539815223ddea65635d1e5901b91902e888b8f22d8fa9989bf3373bf95458b57fffe8d5cbae020000004742d77bb799a985b245384cf66ec38175a081fee6d84d13f27409e51bf9fdaa92a596058d280f204ea98fa8468266a5dda479196a2111aebd5638b890d3da16033c6135aa57c97bf3bec417059e1e7d3066a1d094d37b05d33719e62ee392ff7091d02c26375b56a2cdb0d76e3f93dbb4ff256eb43aa281f7fa0525b33d68b0d9bcb4ee5a7787d3a9a51d87b2395b7848113b917230bc4329f89beac3d03b72e7b6e9f2404bbf5cda91dc876246bc391f6107dcfd46bb566b9371a85341e09ba0355de0b340d319c96ff0fd7f9b7e75847ddc5f902f67a109804ecc1e176c20a14d07a8726a167c2d22b272245ad607ade6524b3751d6240a7fa924ab7a0977ab7a8d53ad12598eaaee42b60fa115004d3fd5a81d5f05c8529c43bba0bfceecf640d2e1d00f1de89be887a443232d32945a6b93067b86b1ad7690bb7451e1dc05cb54368de12883a65686eaae6c572cf7ee3cafe8a37da87d62d5a19b1f0691f1a617786ee2a8ebca5e085e0bd239798946a43302da7d369feb1e9d02788378af55e7af698fa1996a0eb27ed1b7daf937331f1fd2a23d77fb74c32dd73e314bb03d6651125606f499706f19d3716990c359cd726dd6c1e670671ce0bf18db472197a36e99b8b579fb5d4284ee9d23b9774e2d9fcd47aba2faddcbc53e28cdc4b9f25417eeb8cf01a3d0cbd98ca0c83f32f935742465dec5ac714fdfe0b5fb679937cd44df27ed81ca21203e400cbcf8abb36fe86d5f99a0c425c4321f23e882ae919743e17f927bc4999135d50452b89f1fac9107b5499f3bbec5710aa6804c8b95138595ef043ea4da063a540f451917fe1facec0de011597104a577bee29e6ecf69f44892282feeb6afcb0f5ea17c3272a5fe51bbf69a60d4432358087dcc1e204c325b12fbccdf2e946420691d611d286f51d17a3e5eefa3c74351accede359968ca779b1d3035c08cc9ccf5bc62b1520efa248e5cda2bb3569dfd6571d9219486f3aac82c63b4213f8b2052f39046460557a83b3aac740182f5c1574efc752c3d8717551a554717647eff9aa015d6f484c647aafbf8f93fba8faac812b0f51beb76c0e4c1b85789f8b1259dee1bc8a013ca8b9b7e59143cc9748020a75d2d099323294179630fb42344ce9e986cff8af1287348219cfb1265b04c4225f305a6c81efc1e3176c2ed31eacbe1ad2d32dee14bd66c140ebe4dffb2b45d87f093a452cdbe459b8bff9b2814478dbe2fde437887534d5b7acb3172508bde4a98bd0453750e6ea49283e7798646863b11268ab352ade2c3a84370ea08b50245232c715efd33fafee4b5768d75afa9d8c5cc7248516df5449b930a6127e9d287ad09c9cb7cddcd7926383312627037defb1fc6c788ce27ffcb4fd2be4203a3caa2e52ef66fe74ad5a5bb268054ad9c518630944c0f2954cc16ca0b443bbc30e551533c45961c4e9e946969598e011358d60ac38e594d81cb32207369b7ca01e410b36b0ead8340147ab656c0b811a3d91fab5ba8616bd4e37340db79616d9b62525f53a2dfe0424ac56cc7ebf150158257ec3b1bec84dae3dee711cd119fc7484664ff23c173c4edde30de8c3fbe715532a3038dbf2c58e660b1c4ce47382f0f6dc175875a06e6c81f135d674854dd97e9b869965b2b570edf514959832cc6d2c6a73a0f4942b221688349aa3e18fa1b5d214c1d4a0a130b5856ba1c053392474695366691e49524335143d671858b4fba20afc81c38d367d9fb7c576a6bed03fd1b6bf8239acaf4defae336dfac2105e8cb557fc7e925a8c448836ad2007b7a861f995fc3ab468502d656d51031799397a361376a257829c948c00756f472ed7a6b90b738217ae47f5360fe8a0abd912a57b9c3b7e8bded887b394c820f5fa04f4ce9e2bfb686292a8aa55a78fb0db03947e31ae98adb3b4404275696ba63c67873d8b2dbd146933a67e0c3f2ae8ee310e778c9ae5cf11d021af9530c6066ce833c3726b600a5bbf614d4099ce5d09c0ff8b29dfba32882c431780eb48b7ad19c90808892795ccdd0cd82332564daf404a58986e6b556c1dfb582fb5e9c9febae027319dc90a69f0bf37ece6392f2c1268a0dbdbade3f10f065c4936250d0230cbf7425d68bdc65ebc174039df0a6ff2988cfbea6055e73384ee5ecece1f14431592a52b3c2e80a5d3ad6f8197bd94146f968ebccb8f0e2180d387ebee3b9269c616ede15389e9f61fd5a23778dd26e0c40321986602046335112a2022ed46077594d28aa01bd63a9affc8df91e60e5d1e498f80c14839cf335cfe017a9e15e04768d7a36382970a5ad5db557a9133ad03b0131005c9c78b3aed1978df4939f967cf6254dee706bd459dab264af3a857adfe498928be418fbd28e3576384823fb629a927e3dededee8b1d6a5fca0dd1bdd8ab6d0c6d5d3bb5e29a93d2edad215903c94af9aaa334f1be42c2b9cff2d28fb18f334534770650cfc2c60693a25f829b1167c4a1a75e244ecd0ce73fe7badb7556d0502d99bcb6341bf82f64c36da7649718005826c6f681f92304e6fc4f667d77755cc6cd40611756dc2bacc31fd67d60facf62dd23345be3aa04493274474c298b16e8a0789add54c58e6591d089783956b45055ff401788f14e2333bd2bccd81412d0aa82ab2c19ce8e7499e7056b435ca4539985734a0ae012903d790265adf79faf61f3b865b4b4a9ca968da561f23a537a411ccc13ac5ba14a85bef64f3fae0e0bdcf9e70da55dc2c44f89d263c1a44f18b50ea3a02c073183e9816adf7d841d597931f116e2b325c2908545968b863e520098a295a58d4261d0bd08d1cd77a7eac8a64feb114f231f9e760ec6d84634ebef6d1b24d85fabd72fb15735390c0aec246c909d5c82976110844b5bfde94aadfa6a89396709000a59c71331ea7ece5719057c797d57c0a4d2aa51", 0x2000, &(0x7f000000cf00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000cfc0)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000580)={0xc1, 0x0, 0x1}) getdents64(r6, 0x0, 0x0) 23.003876924s ago: executing program 2 (id=57): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0xd, 0x62143) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x4, 0x1, 0x84, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000700)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xa, &(0x7f0000001000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002739054d2fbd0592240000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) mkdir(&(0x7f0000000900)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0xc00, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r10], 0x15) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r11, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, {0xe, 0x5, 0x5, 0x2}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0x900, {0x2, 0x0, 0x3017, 0x0, 0x0, 0x0, 0x1}}) 7.952809508s ago: executing program 32 (id=57): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0xd, 0x62143) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x4, 0x1, 0x84, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000700)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xa, &(0x7f0000001000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002739054d2fbd0592240000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) mkdir(&(0x7f0000000900)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0xc00, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r10], 0x15) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r11, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, {0xe, 0x5, 0x5, 0x2}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0x900, {0x2, 0x0, 0x3017, 0x0, 0x0, 0x0, 0x1}}) 4.523642462s ago: executing program 3 (id=257): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0x4ee}], 0x1, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}, 0x200000e0) (async) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x2b7}], 0x18, 0x4090}, 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) (async) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, 0x0, 0x0, r1) (async) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x30, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000b40), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) setns(r6, 0x8000000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000034a04000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@private2, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x867f, 0xa, 0x0, 0x20, 0x5b, r8, r9}, {0x6, 0x800, 0x6, 0x8e0a, 0x8, 0xa4, 0x4, 0xae}, {0x6, 0xfffffffffffffffd, 0x2, 0x7}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0x0, @in=@remote, 0x3503, 0x2, 0x2, 0x3, 0x9, 0x6, 0x6}}, 0xe8) 4.46217187s ago: executing program 3 (id=259): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001980)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100030000000500040006000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001700)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000001780)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x1c, r17, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000019c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r18 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r18, &(0x7f00000006c0)=""/4151, 0x1037, 0xa8cf) 3.77023154s ago: executing program 4 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200010}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00000008000300"/18, @ANYRES32=r2, @ANYBLOB="040008010c00238006000200bc0000001c002380050013000100000008000b000600000006000a0007000000"], 0x48}}, 0x0) r3 = io_uring_setup(0x3450, &(0x7f00000001c0)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{0x0}], 0x0, 0x1}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x4, 0x972, 0xc}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4400}, 0x20040801) write(r4, &(0x7f0000000180)="ff00", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) read$FUSE(r4, &(0x7f00000030c0)={0x2020}, 0x2020) 1.963054292s ago: executing program 3 (id=277): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000000)=@attr_pmu_init) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x8}) r4 = syz_create_resource$futex(&(0x7f0000000080)=0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000480)='X', 0x34000, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) futex$unlock_pi_list32(r4, 0x607, 0x4a, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x10000, 0xd1a) 1.073782405s ago: executing program 3 (id=288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f0000001500)='GPL\x00', 0x4, 0x436, &(0x7f0000001540)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffffffffffc95}, 0x48) sendmsg$inet(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000001780)="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", 0x400}], 0x1, &(0x7f00000037c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ca}}], 0x30}, 0x4800) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001640)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)="0336", 0x2}], 0x1}}], 0x1, 0x40) 1.068509993s ago: executing program 3 (id=289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000bc0), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0x44, 0x11cfe, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000a00), 0x554, 0x8c860) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x1262, 0x1000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000480)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0x7ff, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400002, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff989], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7c2, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x1, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x9, 0x7, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000980)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000009250feb0e459fac1e07fe7c50eede9b6c88044ed12dcf526dd7b4966e972c57d92b1e8695ec37f142e469dad7795e340b7a2e9e743779be381ad907b41af575a74ecf19c47bc786dd92dd36debf84698a5f2073882cebef9d23b710ee03384aaf6fbdba31560cd5db03a602d5a671050f48db91eb1e4363921e073609a48d5bcbb5a4a5b255b43b5f74e93629ba6aab8f46546ffc3da250cd23db4ca42ea73ccc969b55193d7e5465d4bdbf2a656c2aa300f4b527830256c6b7981ab92e9f1fc27f10a4c33634236b0", @ANYRES16=r5, @ANYBLOB="050326bd70000000000007000000"], 0x14}}, 0x24044080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}) syz_usb_disconnect(0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 607.531551ms ago: executing program 0 (id=294): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20002040) socket$nl_netfilter(0x10, 0x3, 0xc) 532.798599ms ago: executing program 0 (id=295): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000000340)='GPL\x00', 0x7, 0xb5d5, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x23) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x200000000000006f, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x60, 0x12, 0x301, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x40, {0x3, 0x0, [], [], 0x0, [0x0, 0x8]}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000840)={0x10000000000000cf, 0x0, [{}]}) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'team_slave_0\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r8, r10, 0x25, 0x4, @val=@iter={0x0}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000640)=r11, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4802, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6}, 0x1c) 482.870363ms ago: executing program 4 (id=296): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x454, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xc0}}, @filter_kind_options=@f_basic={{0xa}, {0x41c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x10}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x10, 0x45, 0x6, 0xfffffff7, 0x7f, 0xc, 0x53, 0x7fff, 0x6, 0x8, 0x2, 0x80000001, 0xd9f9, 0x1, 0x4, 0x1, 0x6, 0xf0, 0x6, 0x4, 0x6, 0x3ff, 0x9, 0x2, 0x2, 0xd, 0x8000, 0x3, 0x6, 0x3e7, 0x4, 0x800, 0x0, 0x8, 0x4, 0x6, 0x5, 0x81, 0x7, 0x3, 0x1000, 0xfffffbff, 0x7, 0xf038, 0x10, 0x1, 0x4, 0x5, 0x2, 0x4, 0x8000, 0x7fff, 0x7f, 0xd84, 0x1, 0x0, 0x8, 0x4, 0x8, 0xfa66, 0x5f, 0x5, 0xc83, 0x6, 0xeda, 0x7ff, 0x401, 0x33e5, 0x0, 0x1000, 0xd17, 0xbd9, 0x4, 0x8001, 0x4, 0x4, 0xf2d, 0x2, 0x69, 0x1000, 0x1, 0x5, 0x6b9, 0x9, 0x400, 0x6b, 0xe, 0x7, 0xfff, 0xffffffff, 0x1334, 0xbc8, 0x3, 0xfffffff7, 0xf0ab, 0x2fca, 0x0, 0x0, 0xc, 0xffffffff, 0x8, 0x8, 0x80000001, 0x4, 0xb, 0x4000, 0x2, 0x1f3, 0x4, 0x8, 0x80000000, 0x4, 0xd, 0x100, 0x3, 0x1, 0xd94, 0x0, 0x2f27, 0x6, 0x0, 0xffff, 0x600000, 0x2, 0x8, 0xfffffffa, 0x5, 0x1, 0xe, 0xff, 0x0, 0x0, 0x4af, 0x7, 0x0, 0xb, 0x5, 0x7, 0x2, 0xe2, 0xff, 0x0, 0xe, 0x1000, 0x0, 0xc, 0x8, 0xff, 0x101, 0x55, 0x2, 0x9, 0xfff, 0x1, 0xcf, 0xffffffff, 0x1, 0xfffffe01, 0x8, 0x4, 0x6, 0x1, 0x3, 0xb68, 0x1, 0x0, 0xfffffffc, 0x3, 0xfff, 0x5fd, 0x10001, 0x8, 0xffffffff, 0x9, 0x1, 0x3, 0xfffffe91, 0xc3a, 0x2, 0x846, 0x3, 0x6, 0x9, 0x319c0b2c, 0x4, 0x40, 0x2, 0xfffffffc, 0x8, 0x6, 0x3, 0x9, 0x8, 0x7, 0x6, 0xee3c, 0xd742, 0x3, 0x2, 0x7fffffff, 0x3, 0x3, 0x3, 0xb, 0x4, 0x1, 0x64aa, 0x800, 0x78, 0x8001, 0x1, 0x8001, 0x2, 0x706f, 0x400, 0x8, 0xd, 0x2, 0xd, 0x9, 0xa8, 0x8a2, 0x80000000, 0x0, 0x4, 0x10, 0x0, 0x8001, 0x1000, 0x3, 0x3, 0x3, 0x4, 0x1, 0x1, 0x3, 0x4, 0xaf5, 0x3, 0x400, 0x7, 0x9, 0x5, 0xff, 0x1, 0x1, 0x3, 0x2ac, 0x3, 0x7, 0x4, 0x1, 0x4d3000, 0xaca]}]}]}}]}, 0x454}}, 0x10) (async) r2 = syz_open_dev$dmmidi(&(0x7f0000000940), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000980)={0x1}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000740)}, 0x10) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000a00)={0x8, 0x4, {0x56, 0x10, 0x9be, {0x0, 0x8}, {0x800, 0x7fff}, @cond=[{0x215, 0x90, 0x5, 0xde8c, 0xff, 0x6}, {0xff, 0x0, 0xf, 0x4, 0x8, 0x3}]}, {0x53, 0x0, 0x0, {0xff, 0xeb}, {0x8, 0x964}, @rumble={0x560, 0x2}}}) r4 = io_uring_setup(0x1b7b, &(0x7f00000007c0)={0x0, 0x970, 0x1f480, 0x2, 0x325}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (rerun: 64) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b40)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x20001, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x800, 0x0, 0x88, 'raid\x00', {'raid10_offset', 0x20, '3 64 daemon_sleep 100', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) 403.026174ms ago: executing program 0 (id=297): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x6a0, 0x0, 0x3ff}]}) 402.837094ms ago: executing program 4 (id=298): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000300)='autofs\x00', 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, 0x0}}], 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x1008441, 0x0) 315.439428ms ago: executing program 0 (id=299): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000080c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000008100)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000008140)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008180)={0x1, 0x3, &(0x7f0000008240)=ANY=[@ANYBLOB="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"], &(0x7f0000009000)='GPL\x00', 0x4, 0x436, &(0x7f0000009040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000009100), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000009140)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000009180)=[{{0x0, 0x0, &(0x7f0000009200)=[{&(0x7f0000009240)="89", 0x1}], 0x1, &(0x7f0000009280)=ANY=[], 0xd0}}], 0x1, 0x80) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 314.239603ms ago: executing program 4 (id=300): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=r1}, 0x20) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) write(r0, &(0x7f00000000c0)="3e0000000b001400000000000000400000", 0x11) 262.526707ms ago: executing program 1 (id=301): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0xffffffff, 0x6, 0x0, 0xfffffffc, '\x00', '\x00', '\x00', 0x1, 0x4, 0xfffffffe, 0x80000001, "b6855a32474ffa64f77a9dcf29c94337"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r2, 0xf5f) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0302, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000440)={0xff6a, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f00000004c0)={0x48, 0x13, r8, 0x0, r5}) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) 262.277632ms ago: executing program 0 (id=302): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid\x00') r0 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x40002) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/clk/clk_dump\x00', 0x101100, 0x22) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x301f00, 0x393) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000240)={0x13, &(0x7f00000001c0)=[{0x43, '\x00', @data=0x200, 0x80}]}) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000600)={0x30a32c0, 0x1, @qam={0x4, 0x15, 0x14}}) 260.625933ms ago: executing program 1 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f00000003c0)='./gadget\x00', &(0x7f0000000400)='gadgetfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000c00)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000c80)={0x2c, 0x1, r2, 0x2000000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000d00)={0x310, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x829}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x9800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000280)={0x18, r5, 0x1, 0x0, &(0x7f00000002c0)=[{0xfffffffff, 0xffffffffffffff01}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd42, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af0224a920000ffffffffffffff00"}) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000380)=0x13) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r10, &(0x7f0000000480)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 256.902526ms ago: executing program 4 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000107, 0x0, 0xccd}]}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_getroute={0x1b, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0xa, 0x1, 0x200, 0x7f}, 0x50) 206.178385ms ago: executing program 3 (id=305): syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x1, 0x0, 0x81, 0x1, "b75fc40c000000000000003707000000000000007e7573ac132aeef0b700"}) 133.838625ms ago: executing program 1 (id=306): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) preadv(r0, &(0x7f000001ab00)=[{&(0x7f000001ab40)=""/102400, 0xffffffffffffff97}, {&(0x7f0000001040)=""/4097, 0xffc}], 0x2, 0x0, 0x0) mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x2000008) 72.74867ms ago: executing program 1 (id=307): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x67f9e452, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x1e, 0x4, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7328, 0x0, 0x0, 0x0, 0x38}, [@kfunc]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) 72.522582ms ago: executing program 4 (id=308): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x7c1f1000) bpf$BPF_PROG_QUERY(0x27, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c006e070000003000f100000000000000000a00e8000802110000000000080005000600"/52], 0x50}, 0x1, 0x0, 0x0, 0x48004}, 0x0) shutdown(r0, 0x1) 72.33892ms ago: executing program 1 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f00000003c0)='./gadget\x00', &(0x7f0000000400)='gadgetfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd42, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r1, &(0x7f0000000480)="fdfb00000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 1.213942ms ago: executing program 1 (id=310): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x96400, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = dup(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$UHID_INPUT(r2, &(0x7f00000001c0)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) fstat(r0, &(0x7f0000000100)) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0x3fffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) 0s ago: executing program 0 (id=311): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0xffffffff, 0x6, 0x0, 0xfffffffc, '\x00', '\x00', '\x00', 0x1, 0x4, 0xfffffffe, 0x80000001, "b6855a32474ffa64f77a9dcf29c94337"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r2, 0xf5f) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0302, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000440)={0xff6a, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f00000004c0)={0x48, 0x13, r8, 0x0, r5}) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) kernel console output (not intermixed with test programs): Mfr=1, Product=2, SerialNumber=0 [ 49.431778][ T878] usb 8-1: Product: syz [ 49.431785][ T878] usb 8-1: Manufacturer: syz [ 49.437392][ T5943] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.441046][ T878] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 49.448948][ T878] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 49.676529][ T878] usb 8-1: USB disconnect, device number 2 [ 49.680013][ T878] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 49.680360][ T878] garmin_gps 8-1:1.0: device disconnected [ 49.727072][ T5966] FAULT_INJECTION: forcing a failure. [ 49.727072][ T5966] name failslab, interval 1, probability 0, space 0, times 1 [ 49.727094][ T5966] CPU: 3 UID: 0 PID: 5966 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 49.727106][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.727128][ T5966] Call Trace: [ 49.727132][ T5966] [ 49.727138][ T5966] dump_stack_lvl+0x100/0x190 [ 49.727157][ T5966] should_fail_ex.cold+0x5/0xa [ 49.727175][ T5966] should_failslab+0xc2/0x120 [ 49.727192][ T5966] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.727228][ T5966] ? ceph_auth_init+0x4d/0x280 [ 49.727245][ T5966] ceph_auth_init+0x4d/0x280 [ 49.727258][ T5966] ceph_monc_init+0x50b/0xcd0 [ 49.727281][ T5966] ceph_create_client+0x25e/0x370 [ 49.727295][ T5966] ceph_get_tree+0x1a4/0x1fd0 [ 49.727309][ T5966] ? bpf_lsm_capable+0x9/0x10 [ 49.727325][ T5966] ? security_capable+0x80/0x260 [ 49.727340][ T5966] vfs_get_tree+0x92/0x320 [ 49.727352][ T5966] vfs_cmd_create+0xd7/0x2a0 [ 49.727366][ T5966] __do_sys_fsconfig+0x55a/0xcb0 [ 49.727381][ T5966] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 49.727402][ T5966] do_syscall_64+0x123/0x790 [ 49.727419][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.727431][ T5966] RIP: 0033:0x7f66c999f559 [ 49.727440][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.727454][ T5966] RSP: 002b:00007f66ca8f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 49.727483][ T5966] RAX: ffffffffffffffda RBX: 00007f66c9c26090 RCX: 00007f66c999f559 [ 49.727507][ T5966] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 49.727519][ T5966] RBP: 00007f66c9a36b20 R08: 0004000000000000 R09: 0000000000000000 [ 49.727530][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.727539][ T5966] R13: 00007f66c9c26128 R14: 00007f66c9c26090 R15: 00007ffcfeeb0fc8 [ 49.727555][ T5966] [ 50.285317][ T5970] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 50.403706][ T5872] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 50.404629][ T5872] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 50.417146][ T5783] Bluetooth: hci1: command tx timeout [ 50.417188][ T5783] Bluetooth: hci2: command tx timeout [ 50.532570][ T5979] 0x0000000000ec-0x0000000000f2 : "" [ 50.543099][ T5979] ftl_cs: FTL header corrupt! [ 50.554153][ T5986] device-mapper: table: 248:1: mirror: Device lookup failure (-ENOENT) [ 50.554169][ T5986] device-mapper: ioctl: error adding target to table [ 50.621906][ T5990] e1000 0000:00:07.0 eth0: checksum_partial proto=b! [ 50.666210][ T5872] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 50.750465][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 50.860225][ T6006] bond0: entered promiscuous mode [ 50.860238][ T6006] bond_slave_0: entered promiscuous mode [ 50.860336][ T6006] bond_slave_1: entered promiscuous mode [ 50.861946][ T6006] batadv0: entered promiscuous mode [ 50.863151][ T6006] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 50.865007][ T6006] bond0: left promiscuous mode [ 50.865018][ T6006] bond_slave_0: left promiscuous mode [ 50.866506][ T6006] bond_slave_1: left promiscuous mode [ 50.867209][ T6006] batadv0: left promiscuous mode [ 50.953921][ T6008] FAULT_INJECTION: forcing a failure. [ 50.953921][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 50.953956][ T6008] CPU: 2 UID: 0 PID: 6008 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 50.953978][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.953988][ T6008] Call Trace: [ 50.953994][ T6008] [ 50.954002][ T6008] dump_stack_lvl+0x100/0x190 [ 50.954035][ T6008] should_fail_ex.cold+0x5/0xa [ 50.954063][ T6008] should_failslab+0xc2/0x120 [ 50.954091][ T6008] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 50.954114][ T6008] ? lock_acquire+0x1d1/0x380 [ 50.954136][ T6008] ? kstrdup_const+0x63/0x80 [ 50.954168][ T6008] kstrdup+0x51/0xe0 [ 50.954196][ T6008] kstrdup_const+0x63/0x80 [ 50.954221][ T6008] alloc_vfsmnt+0x19e/0x840 [ 50.954243][ T6008] ? copy_tree+0x550/0xc50 [ 50.954264][ T6008] clone_mnt+0x4b/0x9c0 [ 50.954290][ T6008] copy_tree+0x327/0xc50 [ 50.954314][ T6008] copy_mnt_ns+0x3e8/0x1180 [ 50.954339][ T6008] ? __pfx_copy_mnt_ns+0x10/0x10 [ 50.954364][ T6008] ? create_new_namespaces+0x30/0xac0 [ 50.954392][ T6008] create_new_namespaces+0xd3/0xac0 [ 50.954414][ T6008] ? bpf_lsm_capable+0x9/0x10 [ 50.954438][ T6008] ? security_capable+0x80/0x260 [ 50.954466][ T6008] copy_namespaces+0x468/0x5e0 [ 50.954489][ T6008] copy_process+0x39dc/0x84c0 [ 50.954524][ T6008] ? __pfx_copy_process+0x10/0x10 [ 50.954545][ T6008] ? futex_wake+0x4ea/0x5e0 [ 50.954577][ T6008] kernel_clone+0x176/0x9d0 [ 50.954599][ T6008] ? __pfx_kernel_clone+0x10/0x10 [ 50.954634][ T6008] __do_sys_clone+0xd9/0x120 [ 50.954654][ T6008] ? __pfx___do_sys_clone+0x10/0x10 [ 50.954692][ T6008] do_syscall_64+0x123/0x790 [ 50.954721][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.954741][ T6008] RIP: 0033:0x7f2efa39f559 [ 50.954757][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.954780][ T6008] RSP: 002b:00007f2ef85f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.954800][ T6008] RAX: ffffffffffffffda RBX: 00007f2efa625fa0 RCX: 00007f2efa39f559 [ 50.954812][ T6008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 50.954823][ T6008] RBP: 00007f2efa436b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.954835][ T6008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 50.954847][ T6008] R13: 00007f2efa626038 R14: 00007f2efa625fa0 R15: 00007fff47ca34d8 [ 50.954872][ T6008] [ 51.072996][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 51.073015][ T42] audit: type=1400 audit(1793087157.392:268): avc: denied { write } for pid=6013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.122533][ T42] audit: type=1400 audit(1793087157.442:269): avc: denied { read write } for pid=6017 comm="syz.2.21" name="vbi9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.122940][ T42] audit: type=1400 audit(1793087157.442:270): avc: denied { open } for pid=6017 comm="syz.2.21" path="/dev/vbi9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.126360][ T42] audit: type=1400 audit(1793087157.452:271): avc: denied { ioctl } for pid=6017 comm="syz.2.21" path="/dev/vbi9" dev="devtmpfs" ino=1027 ioctlcmd=0xc0205648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.133008][ T42] audit: type=1400 audit(1793087157.452:272): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.175250][ T6010] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 51.175683][ T5872] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 51.225382][ T5791] Bluetooth: hci3: command tx timeout [ 51.232893][ T42] audit: type=1400 audit(1793087157.552:273): avc: denied { write } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.252870][ T42] audit: type=1400 audit(1793087157.572:274): avc: denied { unlink } for pid=6022 comm="syz.3.22" name="#1" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.253770][ T42] audit: type=1400 audit(1793087157.572:275): avc: denied { getattr } for pid=6022 comm="syz.3.22" name="/" dev="9p" ino=71827839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.254528][ T6023] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.255327][ T42] audit: type=1400 audit(1793087157.582:276): avc: denied { mount } for pid=6022 comm="syz.3.22" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.258153][ T42] audit: type=1400 audit(1793087157.582:277): avc: denied { create } for pid=6022 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.408851][ T878] libceph: connect (1)[c::]:6789 error -101 [ 51.409038][ T878] libceph: mon0 (1)[c::]:6789 connect error [ 51.463804][ T5974] ceph: No mds server is up or the cluster is laggy [ 51.653200][ T878] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 51.669878][ T878] libceph: connect (1)[c::]:6789 error -101 [ 51.670025][ T878] libceph: mon0 (1)[c::]:6789 connect error [ 51.780962][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.781751][ T6066] hsr_slave_0: left promiscuous mode [ 51.782414][ T6066] hsr_slave_1: left promiscuous mode [ 51.833211][ T6067] netlink: 'syz.2.27': attribute type 5 has an invalid length. [ 52.101962][ T6033] ceph: No mds server is up or the cluster is laggy [ 52.505528][ T5791] Bluetooth: hci2: command tx timeout [ 52.656375][ T5791] Bluetooth: hci1: command tx timeout [ 53.137457][ T5870] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 53.295189][ T5791] Bluetooth: hci3: command tx timeout [ 53.866300][ T5791] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 53.866395][ T5791] Bluetooth: hci0: Injecting HCI hardware error event [ 53.866864][ T5791] Bluetooth: hci0: hardware error 0x00 [ 54.575271][ T5783] Bluetooth: hci2: command tx timeout [ 55.935256][ T5791] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 56.454406][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 56.454419][ T42] audit: type=1400 audit(1793087162.772:300): avc: denied { write } for pid=6083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.499869][ T42] audit: type=1400 audit(1793087162.822:301): avc: denied { write } for pid=6086 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.540695][ T1046] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.568633][ T42] audit: type=1400 audit(1793087164.892:302): avc: denied { write } for pid=6089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.623008][ T42] audit: type=1400 audit(1793087164.942:303): avc: denied { write } for pid=6092 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.230352][ T42] audit: type=1400 audit(1793087165.552:304): avc: denied { write } for pid=6095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.283375][ T42] audit: type=1400 audit(1793087165.602:305): avc: denied { write } for pid=6098 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.031419][ T42] audit: type=1400 audit(1793087166.352:306): avc: denied { bind } for pid=6101 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.032697][ T42] audit: type=1400 audit(1793087166.352:307): avc: denied { connect } for pid=6101 comm="syz.0.29" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.032969][ T42] audit: type=1400 audit(1793087166.352:308): avc: denied { setopt } for pid=6101 comm="syz.0.29" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.033558][ T42] audit: type=1400 audit(1793087166.352:309): avc: denied { write } for pid=6101 comm="syz.0.29" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.148565][ T6108] input: syz0 as /devices/virtual/input/input5 [ 60.300938][ T6126] Bluetooth: MGMT ver 1.23 [ 60.339027][ T6130] process 'syz.2.34' launched '/dev/fd/5' with NULL argv: empty string added [ 60.380333][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 60.380361][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 60.416828][ T6141] team0: entered allmulticast mode [ 60.416842][ T6141] team_slave_0: entered allmulticast mode [ 60.416851][ T6141] team_slave_1: entered allmulticast mode [ 60.417428][ T6141] team0: Cannot enslave team device to itself [ 60.545450][ T6150] x_tables: duplicate underflow at hook 1 [ 60.551710][ T6150] FAULT_INJECTION: forcing a failure. [ 60.551710][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 60.551738][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.2.38 Not tainted syzkaller #0 PREEMPT(full) [ 60.551752][ T6150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.551769][ T6150] Call Trace: [ 60.551773][ T6150] [ 60.551779][ T6150] dump_stack_lvl+0x100/0x190 [ 60.551806][ T6150] should_fail_ex.cold+0x5/0xa [ 60.551824][ T6150] should_failslab+0xc2/0x120 [ 60.551844][ T6150] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.551855][ T6150] ? __pfx___debug_object_init+0x10/0x10 [ 60.551873][ T6150] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 60.551894][ T6150] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 60.551910][ T6150] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 60.551925][ T6150] vidtv_mux_init+0x725/0xbf0 [ 60.551940][ T6150] vidtv_start_feed+0x34e/0x500 [ 60.551956][ T6150] ? __pfx_vidtv_start_feed+0x10/0x10 [ 60.551972][ T6150] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 60.551991][ T6150] ? find_held_lock+0x2b/0x80 [ 60.552006][ T6150] dmx_section_feed_start_filtering+0x3a8/0x660 [ 60.552028][ T6150] dvb_dmxdev_filter_start+0x767/0xdd0 [ 60.552066][ T6150] dvb_demux_do_ioctl+0xe64/0x1200 [ 60.552089][ T6150] dvb_usercopy+0x167/0x340 [ 60.552103][ T6150] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 60.552120][ T6150] ? __pfx_dvb_usercopy+0x10/0x10 [ 60.552134][ T6150] ? __fget_files+0x34/0x3d0 [ 60.552159][ T6150] ? selinux_file_ioctl+0x1e0/0x290 [ 60.552172][ T6150] dvb_demux_ioctl+0x29/0x40 [ 60.552186][ T6150] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 60.552201][ T6150] __x64_sys_ioctl+0x18e/0x210 [ 60.552217][ T6150] do_syscall_64+0x123/0x790 [ 60.552240][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.552260][ T6150] RIP: 0033:0x7f66c999f559 [ 60.552270][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.552280][ T6150] RSP: 002b:00007f66ca915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.552297][ T6150] RAX: ffffffffffffffda RBX: 00007f66c9c25fa0 RCX: 00007f66c999f559 [ 60.552304][ T6150] RDX: 0000200000000540 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 60.552312][ T6150] RBP: 00007f66c9a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.552319][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.552326][ T6150] R13: 00007f66c9c26038 R14: 00007f66c9c25fa0 R15: 00007ffcfeeb0fc8 [ 60.552340][ T6150] [ 60.680898][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 60.680911][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 60.707571][ T6161] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 60.727481][ T6168] device-mapper: ioctl: Unable to rename non-existent device, syzd1 to uuid syzd1 [ 60.818003][ T6181] FAULT_INJECTION: forcing a failure. [ 60.818003][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.818025][ T6181] CPU: 3 UID: 0 PID: 6181 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 60.818037][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.818043][ T6181] Call Trace: [ 60.818047][ T6181] [ 60.818051][ T6181] dump_stack_lvl+0x100/0x190 [ 60.818071][ T6181] should_fail_ex.cold+0x5/0xa [ 60.818088][ T6181] _copy_to_user+0x32/0xd0 [ 60.818102][ T6181] simple_read_from_buffer+0xcb/0x170 [ 60.818120][ T6181] proc_fail_nth_read+0x1af/0x230 [ 60.818144][ T6181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.818162][ T6181] ? rw_verify_area+0xce/0x6d0 [ 60.818174][ T6181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.818190][ T6181] vfs_read+0x1e4/0xb40 [ 60.818204][ T6181] ? lock_acquire+0x1d1/0x380 [ 60.818217][ T6181] ? __fget_files+0x34/0x3d0 [ 60.818233][ T6181] ? __pfx_vfs_read+0x10/0x10 [ 60.818253][ T6181] ? find_held_lock+0x2b/0x80 [ 60.818264][ T6181] ? __fget_files+0x215/0x3d0 [ 60.818282][ T6181] ? __fget_files+0x21f/0x3d0 [ 60.818301][ T6181] ksys_read+0x12a/0x250 [ 60.818314][ T6181] ? __pfx_ksys_read+0x10/0x10 [ 60.818331][ T6181] do_syscall_64+0x123/0x790 [ 60.818349][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.818360][ T6181] RIP: 0033:0x7f2efa35fd8e [ 60.818369][ T6181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.818379][ T6181] RSP: 002b:00007f2ef85f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.818390][ T6181] RAX: ffffffffffffffda RBX: 00007f2ef85f66c0 RCX: 00007f2efa35fd8e [ 60.818396][ T6181] RDX: 000000000000000f RSI: 00007f2ef85f60a0 RDI: 0000000000000004 [ 60.818402][ T6181] RBP: 00007f2ef85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.818408][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.818414][ T6181] R13: 00007f2efa626038 R14: 00007f2efa625fa0 R15: 00007fff47ca34d8 [ 60.818428][ T6181] [ 61.109561][ T6196] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 61.115178][ T1046] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.117752][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'. [ 61.118666][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 61.130913][ T6193] netlink: 'syz.1.49': attribute type 49 has an invalid length. [ 61.135022][ T6193] bond0: (slave bond_slave_0): Releasing backup interface [ 61.220464][ T6193] bond_slave_0: entered promiscuous mode [ 61.220487][ T6193] bond_slave_0: entered allmulticast mode [ 61.266196][ T1046] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 61.268042][ T1046] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.268066][ T1046] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.270004][ T1046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.270022][ T1046] usb 8-1: Product: syz [ 61.270033][ T1046] usb 8-1: Manufacturer: syz [ 61.270044][ T1046] usb 8-1: SerialNumber: syz [ 61.297610][ T6210] bond0: entered promiscuous mode [ 61.297626][ T6210] bond_slave_1: entered promiscuous mode [ 61.336136][ T6196] device-mapper: table: 248:4: raid: Inappropriate argument: stripe_cache (-EINVAL) [ 61.336153][ T6196] device-mapper: ioctl: error adding target to table [ 61.459821][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 61.459842][ T42] audit: type=1400 audit(1793087167.782:347): avc: denied { setopt } for pid=6220 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.462337][ T42] audit: type=1400 audit(1793087167.782:348): avc: denied { bind } for pid=6220 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.463957][ T42] audit: type=1400 audit(1793087167.782:349): avc: denied { read write } for pid=6220 comm="syz.1.54" name="usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.464161][ T42] audit: type=1400 audit(1793087167.782:350): avc: denied { open } for pid=6220 comm="syz.1.54" path="/dev/usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.466002][ T42] audit: type=1400 audit(1793087167.792:351): avc: denied { ioctl } for pid=6220 comm="syz.1.54" path="/dev/usbmon7" dev="devtmpfs" ino=757 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.467006][ T42] audit: type=1400 audit(1793087167.792:352): avc: denied { map_read map_write } for pid=6220 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.483151][ T42] audit: type=1400 audit(1793087167.802:353): avc: denied { read write } for pid=6183 comm="syz.3.46" name="chaoskey0" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.483180][ T42] audit: type=1400 audit(1793087167.802:354): avc: denied { open } for pid=6183 comm="syz.3.46" path="/dev/chaoskey0" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.486816][ T42] audit: type=1400 audit(1793087167.812:355): avc: denied { ioctl } for pid=6183 comm="syz.3.46" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x40085507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.653676][ T42] audit: type=1400 audit(1793087167.972:356): avc: denied { mounton } for pid=6236 comm="syz.2.57" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 61.738501][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 61.917964][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 62.060931][ T6258] sd 0:0:0:0: PR command failed: 1026 [ 62.061022][ T6258] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 62.061043][ T6258] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 62.066284][ T6258] netlink: 'syz.0.62': attribute type 26 has an invalid length. [ 62.066296][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 62.262396][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.262950][ T5870] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 62.262968][ T5870] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 62.350556][ T6275] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.371101][ T6275] ======================================================= [ 62.371101][ T6275] WARNING: The mand mount option has been deprecated and [ 62.371101][ T6275] and is ignored by this kernel. Remove the mand [ 62.371101][ T6275] option from the mount to silence this warning. [ 62.371101][ T6275] ======================================================= [ 62.379181][ T6275] overlayfs: overlapping lowerdir path [ 62.497402][ T6281] Invalid logical block size (65024) [ 62.642576][ T6296] nvme nvme0: failed to connect socket: -111 [ 62.747860][ T6131] usb 8-1: USB disconnect, device number 3 [ 62.826380][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.829726][ T6304] bridge0: port 3(syz_tun) entered blocking state [ 62.829773][ T6304] bridge0: port 3(syz_tun) entered disabled state [ 62.829846][ T6304] syz_tun: entered allmulticast mode [ 62.830733][ T6304] syz_tun: entered promiscuous mode [ 62.831026][ T6304] bridge0: port 3(syz_tun) entered blocking state [ 62.831074][ T6304] bridge0: port 3(syz_tun) entered listening state [ 62.915825][ T6308] capability: warning: `syz.1.79' uses deprecated v2 capabilities in a way that may be insecure [ 62.976781][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 62.976813][ T24] usb 5-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 62.977951][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 62.977975][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 62.980099][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.980117][ T24] usb 5-1: Product: syz [ 62.980130][ T24] usb 5-1: Manufacturer: syz [ 62.980142][ T24] usb 5-1: SerialNumber: syz [ 62.983615][ T6293] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 63.015456][ T24] oti6858 5-1:1.0: oti6858 converter detected [ 63.020152][ T24] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 63.315912][ T6313] FAULT_INJECTION: forcing a failure. [ 63.315912][ T6313] name failslab, interval 1, probability 0, space 0, times 0 [ 63.315968][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.3.80 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.315995][ T6313] Tainted: [L]=SOFTLOCKUP [ 63.316000][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.316015][ T6313] Call Trace: [ 63.316019][ T6313] [ 63.316025][ T6313] dump_stack_lvl+0x100/0x190 [ 63.316051][ T6313] should_fail_ex.cold+0x5/0xa [ 63.316068][ T6313] should_failslab+0xc2/0x120 [ 63.316088][ T6313] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.316101][ T6313] ? do_user_addr_fault+0x7d7/0x12f0 [ 63.316117][ T6313] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.316136][ T6313] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.316159][ T6313] kvm_mmu_load+0xe3/0x25b0 [ 63.316173][ T6313] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 63.316194][ T6313] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.316212][ T6313] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.316223][ T6313] ? kvm_check_and_inject_events+0xa8/0x1050 [ 63.316236][ T6313] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.316248][ T6313] ? kvm_check_and_inject_events+0x896/0x1050 [ 63.316264][ T6313] vcpu_run+0x4009/0x60d0 [ 63.316284][ T6313] ? __pfx_vcpu_run+0x10/0x10 [ 63.316296][ T6313] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 63.316313][ T6313] ? lock_acquire+0x1d1/0x380 [ 63.316326][ T6313] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 63.316342][ T6313] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 63.316358][ T6313] ? __local_bh_enable_ip+0xa5/0x120 [ 63.316372][ T6313] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 63.316385][ T6313] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 63.316403][ T6313] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 63.316417][ T6313] ? lock_acquire+0x1d1/0x380 [ 63.316430][ T6313] ? do_raw_write_lock+0x11e/0x260 [ 63.316445][ T6313] ? find_held_lock+0x2b/0x80 [ 63.316455][ T6313] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 63.316469][ T6313] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 63.316494][ T6313] kvm_vcpu_ioctl+0x735/0x17b0 [ 63.316517][ T6313] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.316540][ T6313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.316567][ T6313] ? do_vfs_ioctl+0x226/0x13e0 [ 63.316590][ T6313] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.316609][ T6313] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 63.316650][ T6313] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.316671][ T6313] ? __fget_files+0x34/0x3d0 [ 63.316708][ T6313] ? selinux_file_ioctl+0x1e0/0x290 [ 63.316726][ T6313] ? selinux_file_ioctl+0x1e7/0x290 [ 63.316744][ T6313] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.316771][ T6313] __x64_sys_ioctl+0x18e/0x210 [ 63.316795][ T6313] do_syscall_64+0x123/0x790 [ 63.316831][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.316850][ T6313] RIP: 0033:0x7f2efa39f559 [ 63.316865][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.316881][ T6313] RSP: 002b:00007f2ef85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.316910][ T6313] RAX: ffffffffffffffda RBX: 00007f2efa625fa0 RCX: 00007f2efa39f559 [ 63.316921][ T6313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.316931][ T6313] RBP: 00007f2ef85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.316942][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.316952][ T6313] R13: 00007f2efa626038 R14: 00007f2efa625fa0 R15: 00007fff47ca34d8 [ 63.316977][ T6313] [ 63.425446][ C1] usb 5-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -1 [ 63.428930][ T5156] usb 5-1: USB disconnect, device number 2 [ 63.439360][ T5156] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 63.439715][ T5156] oti6858 5-1:1.0: device disconnected [ 63.822144][ T6324] FAULT_INJECTION: forcing a failure. [ 63.822144][ T6324] name failslab, interval 1, probability 0, space 0, times 0 [ 63.822166][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.1.83 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.822181][ T6324] Tainted: [L]=SOFTLOCKUP [ 63.822184][ T6324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.822190][ T6324] Call Trace: [ 63.822194][ T6324] [ 63.822198][ T6324] dump_stack_lvl+0x100/0x190 [ 63.822219][ T6324] should_fail_ex.cold+0x5/0xa [ 63.822235][ T6324] should_failslab+0xc2/0x120 [ 63.822251][ T6324] __kmalloc_noprof+0xfc/0x840 [ 63.822264][ T6324] ? tomoyo_encode2+0xfb/0x3c0 [ 63.822278][ T6324] tomoyo_encode2+0xfb/0x3c0 [ 63.822292][ T6324] tomoyo_encode+0x29/0x50 [ 63.822302][ T6324] tomoyo_realpath_from_path+0x18c/0x690 [ 63.822317][ T6324] tomoyo_check_open_permission+0x2af/0x3c0 [ 63.822335][ T6324] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 63.822356][ T6324] ? hook_file_open+0x245/0x8e0 [ 63.822370][ T6324] ? avc_has_perm_noaudit+0x11e/0x470 [ 63.822404][ T6324] ? __pfx_selinux_inode_permission+0x10/0x10 [ 63.822432][ T6324] tomoyo_file_open+0x6b/0x90 [ 63.822455][ T6324] security_file_open+0xb5/0x1e0 [ 63.822475][ T6324] do_dentry_open+0x552/0x1470 [ 63.822502][ T6324] vfs_open_consume+0xcc/0x460 [ 63.822524][ T6324] path_openat+0x1547/0x23f0 [ 63.822555][ T6324] ? __pfx_path_openat+0x10/0x10 [ 63.822589][ T6324] do_file_open+0x20e/0x430 [ 63.822618][ T6324] ? __pfx_do_file_open+0x10/0x10 [ 63.822652][ T6324] ? _raw_spin_unlock+0x28/0x50 [ 63.822666][ T6324] ? alloc_fd+0x471/0x7a0 [ 63.822687][ T6324] do_sys_openat2+0x163/0x1d0 [ 63.822697][ T6324] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.822706][ T6324] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 63.822724][ T6324] __x64_sys_openat+0x12d/0x210 [ 63.822735][ T6324] ? __pfx___x64_sys_openat+0x10/0x10 [ 63.822751][ T6324] do_syscall_64+0x123/0x790 [ 63.822768][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.822784][ T6324] RIP: 0033:0x7f6465f5fd8e [ 63.822798][ T6324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.822813][ T6324] RSP: 002b:00007f6466e1cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.822832][ T6324] RAX: ffffffffffffffda RBX: 00007f6466e1d6c0 RCX: 00007f6465f5fd8e [ 63.822842][ T6324] RDX: 0000000000000002 RSI: 00007f6466e1cc00 RDI: ffffffffffffff9c [ 63.822853][ T6324] RBP: 00007f6466e1cc00 R08: 0000000000000000 R09: 0000000000000000 [ 63.822862][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 63.822872][ T6324] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 63.822895][ T6324] [ 63.822913][ T6324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.979364][ T6332] tmpfs: Bad value for 'mpol' [ 64.335165][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.335170][ T5870] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 64.335185][ T5870] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 66.415229][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.415311][ T5870] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 66.415320][ T5870] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 66.532832][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 66.532859][ T42] audit: type=1400 audit(1793087172.852:410): avc: denied { ioctl } for pid=6344 comm="syz.1.92" path="socket:[13343]" dev="sockfs" ino=13343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.563431][ T42] audit: type=1400 audit(1793087172.882:411): avc: denied { mount } for pid=6348 comm="syz.3.91" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.565625][ T42] audit: type=1400 audit(1793087172.882:412): avc: denied { ioctl } for pid=6350 comm="syz.1.94" path="socket:[13351]" dev="sockfs" ino=13351 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.585625][ T42] audit: type=1400 audit(1793087172.912:413): avc: denied { sqpoll } for pid=6348 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.586689][ T42] audit: type=1400 audit(1793087172.912:414): avc: denied { bind } for pid=6353 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.586943][ T42] audit: type=1400 audit(1793087172.912:415): avc: denied { name_bind } for pid=6353 comm="syz.0.95" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.587186][ T42] audit: type=1400 audit(1793087172.912:416): avc: denied { node_bind } for pid=6353 comm="syz.0.95" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 66.588061][ T42] audit: type=1400 audit(1793087172.912:417): avc: denied { listen } for pid=6353 comm="syz.0.95" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.664525][ T42] audit: type=1400 audit(1793087172.982:418): avc: denied { unmount } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.682856][ T6361] FAULT_INJECTION: forcing a failure. [ 66.682856][ T6361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.682878][ T6361] CPU: 3 UID: 0 PID: 6361 Comm: syz.1.97 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.682893][ T6361] Tainted: [L]=SOFTLOCKUP [ 66.682896][ T6361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.682902][ T6361] Call Trace: [ 66.682906][ T6361] [ 66.682910][ T6361] dump_stack_lvl+0x100/0x190 [ 66.682931][ T6361] should_fail_ex.cold+0x5/0xa [ 66.682947][ T6361] strncpy_from_user+0x3b/0x2d0 [ 66.682964][ T6361] do_getname+0x78/0x390 [ 66.682978][ T6361] user_path_at+0x26/0x60 [ 66.682993][ T6361] __x64_sys_mount+0x1fb/0x310 [ 66.683005][ T6361] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.683021][ T6361] do_syscall_64+0x123/0x790 [ 66.683040][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.683052][ T6361] RIP: 0033:0x7f6465f9f559 [ 66.683060][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.683070][ T6361] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.683081][ T6361] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 66.683088][ T6361] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 66.683094][ T6361] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 66.683100][ T6361] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 66.683106][ T6361] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 66.683120][ T6361] [ 66.709946][ T42] audit: type=1400 audit(1793087173.032:419): avc: denied { read } for pid=6366 comm="syz.0.98" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.726393][ T6367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6367 comm=syz.0.98 [ 66.848617][ T6371] FAULT_INJECTION: forcing a failure. [ 66.848617][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 66.848648][ T6371] CPU: 2 UID: 0 PID: 6371 Comm: syz.3.100 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.848672][ T6371] Tainted: [L]=SOFTLOCKUP [ 66.848678][ T6371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.848689][ T6371] Call Trace: [ 66.848695][ T6371] [ 66.848703][ T6371] dump_stack_lvl+0x100/0x190 [ 66.848735][ T6371] should_fail_ex.cold+0x5/0xa [ 66.848762][ T6371] should_failslab+0xc2/0x120 [ 66.848788][ T6371] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.848810][ T6371] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 66.848843][ T6371] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 66.848872][ T6371] ? kvm_msr_allowed+0x2d0/0x450 [ 66.848898][ T6371] kvm_mmu_load+0xe3/0x25b0 [ 66.848921][ T6371] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 66.848949][ T6371] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.848979][ T6371] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.849000][ T6371] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.849021][ T6371] ? kvm_check_and_inject_events+0x896/0x1050 [ 66.849047][ T6371] vcpu_run+0x4009/0x60d0 [ 66.849082][ T6371] ? __pfx_vcpu_run+0x10/0x10 [ 66.849126][ T6371] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 66.849156][ T6371] ? lock_acquire+0x1d1/0x380 [ 66.849177][ T6371] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 66.849203][ T6371] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 66.849228][ T6371] ? __local_bh_enable_ip+0xa5/0x120 [ 66.849252][ T6371] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 66.849280][ T6371] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 66.849311][ T6371] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 66.849333][ T6371] ? lock_acquire+0x1d1/0x380 [ 66.849356][ T6371] ? do_raw_write_lock+0x11e/0x260 [ 66.849381][ T6371] ? find_held_lock+0x2b/0x80 [ 66.849397][ T6371] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 66.849420][ T6371] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 66.849451][ T6371] kvm_vcpu_ioctl+0x735/0x17b0 [ 66.849478][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.849504][ T6371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.849533][ T6371] ? do_vfs_ioctl+0x226/0x13e0 [ 66.849556][ T6371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.849576][ T6371] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 66.849598][ T6371] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.849620][ T6371] ? __fget_files+0x34/0x3d0 [ 66.849659][ T6371] ? selinux_file_ioctl+0x1e0/0x290 [ 66.849676][ T6371] ? selinux_file_ioctl+0x1e7/0x290 [ 66.849694][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.849720][ T6371] __x64_sys_ioctl+0x18e/0x210 [ 66.849744][ T6371] do_syscall_64+0x123/0x790 [ 66.849774][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.849793][ T6371] RIP: 0033:0x7f2efa39f559 [ 66.849809][ T6371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.849826][ T6371] RSP: 002b:00007f2ef85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.849844][ T6371] RAX: ffffffffffffffda RBX: 00007f2efa625fa0 RCX: 00007f2efa39f559 [ 66.849855][ T6371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 66.849866][ T6371] RBP: 00007f2ef85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.849876][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.849886][ T6371] R13: 00007f2efa626038 R14: 00007f2efa625fa0 R15: 00007fff47ca34d8 [ 66.849912][ T6371] [ 67.172728][ T6402] fuse: Unknown parameter '0000000000000000000000400000000000000000003WÎQã±)!¤ÇñÌæÙL“O6. uˆæz(JÍ…ÉO¹ÜFŽKW?”óò' [ 67.173121][ T6402] netlink: 'syz.0.110': attribute type 21 has an invalid length. [ 67.173131][ T6402] netlink: 156 bytes leftover after parsing attributes in process `syz.0.110'. [ 67.174047][ T6394] ima: policy update completed [ 67.286688][ T6409] vcan0: tx address claim with dest, not broadcast [ 67.650759][ T6416] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 67.981740][ T6429] zram0: detected capacity change from 0 to 8 [ 68.012604][ T6429] FAULT_INJECTION: forcing a failure. [ 68.012604][ T6429] name fail_futex, interval 1, probability 0, space 0, times 1 [ 68.012631][ T6429] CPU: 3 UID: 0 PID: 6429 Comm: syz.0.117 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.012645][ T6429] Tainted: [L]=SOFTLOCKUP [ 68.012649][ T6429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.012655][ T6429] Call Trace: [ 68.012659][ T6429] [ 68.012663][ T6429] dump_stack_lvl+0x100/0x190 [ 68.012684][ T6429] should_fail_ex.cold+0x5/0xa [ 68.012701][ T6429] get_futex_key+0x1c9/0x13e0 [ 68.012722][ T6429] ? __pfx_get_futex_key+0x10/0x10 [ 68.012742][ T6429] futex_wake+0xf4/0x5e0 [ 68.012757][ T6429] ? __pfx_futex_wake+0x10/0x10 [ 68.012772][ T6429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.012788][ T6429] ? do_vfs_ioctl+0x226/0x13e0 [ 68.012803][ T6429] do_futex+0x2b2/0x440 [ 68.012815][ T6429] ? __pfx_do_futex+0x10/0x10 [ 68.012826][ T6429] ? __fget_files+0x34/0x3d0 [ 68.012845][ T6429] __x64_sys_futex+0x34f/0x4d0 [ 68.012858][ T6429] ? __pfx___x64_sys_futex+0x10/0x10 [ 68.012874][ T6429] do_syscall_64+0x123/0x790 [ 68.012892][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.012902][ T6429] RIP: 0033:0x7f92fa59f559 [ 68.012912][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.012922][ T6429] RSP: 002b:00007f92fb41b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 68.012932][ T6429] RAX: ffffffffffffffda RBX: 00007f92fa826098 RCX: 00007f92fa59f559 [ 68.012939][ T6429] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92fa82609c [ 68.012945][ T6429] RBP: 00007f92fa826090 R08: 0000000000000001 R09: 0000000000000000 [ 68.012951][ T6429] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 68.012957][ T6429] R13: 00007f92fa826128 R14: 00007ffcb39c3dc0 R15: 00007ffcb39c3ea8 [ 68.012971][ T6429] [ 68.020718][ T5495] veth0_vlan: left promiscuous mode [ 68.025888][ T5792] veth0_vlan: entered promiscuous mode [ 68.254259][ T6447] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 68.260050][ T6447] overlayfs: failed to resolve './file0/file1': -2 [ 68.395422][ T6454] FAULT_INJECTION: forcing a failure. [ 68.395422][ T6454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.395455][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.0.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.395479][ T6454] Tainted: [L]=SOFTLOCKUP [ 68.395486][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.395496][ T6454] Call Trace: [ 68.395502][ T6454] [ 68.395510][ T6454] dump_stack_lvl+0x100/0x190 [ 68.395541][ T6454] should_fail_ex.cold+0x5/0xa [ 68.395564][ T6454] ? prepare_alloc_pages+0x16d/0x5b0 [ 68.395591][ T6454] should_fail_alloc_page+0xeb/0x140 [ 68.395618][ T6454] prepare_alloc_pages+0x1f0/0x5b0 [ 68.395644][ T6454] ? is_bpf_text_address+0x94/0x1a0 [ 68.395665][ T6454] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 68.395716][ T6454] ? stack_trace_save+0x8e/0xc0 [ 68.395739][ T6454] ? __pfx_stack_trace_save+0x10/0x10 [ 68.395761][ T6454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 68.395785][ T6454] ? kasan_save_stack+0x3f/0x50 [ 68.395806][ T6454] ? kasan_save_stack+0x30/0x50 [ 68.395826][ T6454] ? kasan_save_track+0x14/0x30 [ 68.395846][ T6454] ? __kasan_slab_alloc+0x89/0x90 [ 68.395868][ T6454] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 68.395889][ T6454] ? alloc_vmap_area+0x643/0x2bc0 [ 68.395910][ T6454] ? __get_vm_area_node+0x1ed/0x350 [ 68.395932][ T6454] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 68.395956][ T6454] ? __vmalloc_node_noprof+0xad/0xf0 [ 68.395979][ T6454] ? copy_process+0x80b/0x84c0 [ 68.395998][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.396016][ T6454] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 68.396037][ T6454] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 68.396059][ T6454] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 68.396082][ T6454] ? __x64_sys_ioctl+0x18e/0x210 [ 68.396103][ T6454] ? do_syscall_64+0x123/0x790 [ 68.396127][ T6454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.396156][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.396188][ T6454] ? policy_nodemask+0xed/0x4f0 [ 68.396217][ T6454] alloc_pages_mpol+0x201/0x560 [ 68.396245][ T6454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 68.396278][ T6454] alloc_pages_noprof+0x1a/0x160 [ 68.396298][ T6454] get_free_pages_noprof+0x10/0xb0 [ 68.396319][ T6454] __kasan_populate_vmalloc+0xa0/0x210 [ 68.396347][ T6454] alloc_vmap_area+0x963/0x2bc0 [ 68.396378][ T6454] ? kasan_save_track+0x14/0x30 [ 68.396400][ T6454] ? __kasan_kmalloc+0xaa/0xb0 [ 68.396421][ T6454] ? __pfx_alloc_vmap_area+0x10/0x10 [ 68.396445][ T6454] ? __get_vm_area_node+0x124/0x350 [ 68.396472][ T6454] __get_vm_area_node+0x1ed/0x350 [ 68.396501][ T6454] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 68.396527][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.396545][ T6454] ? lock_acquire+0x1d1/0x380 [ 68.396567][ T6454] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 68.396588][ T6454] ? find_held_lock+0x2b/0x80 [ 68.396635][ T6454] ? rcu_read_unlock+0x17/0x60 [ 68.396652][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.396674][ T6454] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 68.396700][ T6454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.396729][ T6454] ? rcu_is_watching+0x13/0xc0 [ 68.396746][ T6454] ? trace_kmem_cache_alloc+0xdd/0x100 [ 68.396774][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.396792][ T6454] __vmalloc_node_noprof+0xad/0xf0 [ 68.396817][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.396839][ T6454] copy_process+0x80b/0x84c0 [ 68.396875][ T6454] ? __pfx_copy_process+0x10/0x10 [ 68.396894][ T6454] ? kasan_save_track+0x14/0x30 [ 68.396916][ T6454] ? __kasan_kmalloc+0xaa/0xb0 [ 68.396958][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 68.396984][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 68.397009][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.397040][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.397066][ T6454] vhost_task_create+0x1db/0x370 [ 68.397109][ T6454] ? __pfx_vhost_task_create+0x10/0x10 [ 68.397137][ T6454] ? __pfx_vhost_task_fn+0x10/0x10 [ 68.397159][ T6454] ? register_lock_class+0x3f/0x7b0 [ 68.397181][ T6454] ? rcu_is_watching+0x13/0xc0 [ 68.397198][ T6454] ? trace_contention_end+0x126/0x160 [ 68.397226][ T6454] kvm_mmu_post_init_vm+0x1b3/0x360 [ 68.397250][ T6454] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 68.397275][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 68.397300][ T6454] ? kasan_quarantine_put+0x104/0x240 [ 68.397326][ T6454] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 68.397348][ T6454] ? lock_acquire+0x1d1/0x380 [ 68.397371][ T6454] ? do_raw_write_lock+0x11e/0x260 [ 68.397396][ T6454] ? find_held_lock+0x2b/0x80 [ 68.397412][ T6454] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 68.397436][ T6454] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 68.397467][ T6454] kvm_vcpu_ioctl+0x735/0x17b0 [ 68.397495][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.397520][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.397548][ T6454] ? do_vfs_ioctl+0x226/0x13e0 [ 68.397570][ T6454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.397591][ T6454] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 68.397614][ T6454] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.397636][ T6454] ? __fget_files+0x34/0x3d0 [ 68.397675][ T6454] ? selinux_file_ioctl+0x1e0/0x290 [ 68.397697][ T6454] ? selinux_file_ioctl+0x1e7/0x290 [ 68.397716][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.397742][ T6454] __x64_sys_ioctl+0x18e/0x210 [ 68.397766][ T6454] do_syscall_64+0x123/0x790 [ 68.397796][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.397814][ T6454] RIP: 0033:0x7f92fa59f559 [ 68.397830][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.397846][ T6454] RSP: 002b:00007f92fb43c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.397865][ T6454] RAX: ffffffffffffffda RBX: 00007f92fa825fa0 RCX: 00007f92fa59f559 [ 68.397876][ T6454] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 68.397886][ T6454] RBP: 00007f92fb43c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.397897][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.397907][ T6454] R13: 00007f92fa826038 R14: 00007f92fa825fa0 R15: 00007ffcb39c3ea8 [ 68.397933][ T6454] [ 68.399127][ T6454] syz.0.121: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 68.399264][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.0.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.399288][ T6454] Tainted: [L]=SOFTLOCKUP [ 68.399295][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.399304][ T6454] Call Trace: [ 68.399311][ T6454] [ 68.399318][ T6454] dump_stack_lvl+0x100/0x190 [ 68.399346][ T6454] warn_alloc.cold+0x9e/0xb2 [ 68.399366][ T6454] ? __pfx_warn_alloc+0x10/0x10 [ 68.399383][ T6454] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.399411][ T6454] ? __get_vm_area_node+0x2f0/0x350 [ 68.399441][ T6454] ? __get_vm_area_node+0x22b/0x350 [ 68.399470][ T6454] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 68.399497][ T6454] ? lock_acquire+0x1d1/0x380 [ 68.399518][ T6454] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 68.399539][ T6454] ? find_held_lock+0x2b/0x80 [ 68.399556][ T6454] ? rcu_read_unlock+0x17/0x60 [ 68.399575][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.399596][ T6454] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 68.399617][ T6454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.399646][ T6454] ? rcu_is_watching+0x13/0xc0 [ 68.399664][ T6454] ? trace_kmem_cache_alloc+0xdd/0x100 [ 68.399697][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.399715][ T6454] __vmalloc_node_noprof+0xad/0xf0 [ 68.399740][ T6454] ? vhost_task_create+0x1db/0x370 [ 68.399761][ T6454] copy_process+0x80b/0x84c0 [ 68.399796][ T6454] ? __pfx_copy_process+0x10/0x10 [ 68.399816][ T6454] ? kasan_save_track+0x14/0x30 [ 68.399838][ T6454] ? __kasan_kmalloc+0xaa/0xb0 [ 68.399861][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 68.399886][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 68.399910][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.399939][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.399965][ T6454] vhost_task_create+0x1db/0x370 [ 68.399984][ T6454] ? __pfx_vhost_task_create+0x10/0x10 [ 68.400012][ T6454] ? __pfx_vhost_task_fn+0x10/0x10 [ 68.400033][ T6454] ? register_lock_class+0x3f/0x7b0 [ 68.400054][ T6454] ? rcu_is_watching+0x13/0xc0 [ 68.400071][ T6454] ? trace_contention_end+0x126/0x160 [ 68.400100][ T6454] kvm_mmu_post_init_vm+0x1b3/0x360 [ 68.400124][ T6454] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 68.400149][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 68.400174][ T6454] ? kasan_quarantine_put+0x104/0x240 [ 68.400198][ T6454] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 68.400221][ T6454] ? lock_acquire+0x1d1/0x380 [ 68.400243][ T6454] ? do_raw_write_lock+0x11e/0x260 [ 68.400268][ T6454] ? find_held_lock+0x2b/0x80 [ 68.400285][ T6454] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 68.400309][ T6454] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 68.400339][ T6454] kvm_vcpu_ioctl+0x735/0x17b0 [ 68.400366][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.400392][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.400420][ T6454] ? do_vfs_ioctl+0x226/0x13e0 [ 68.400443][ T6454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.400463][ T6454] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 68.400484][ T6454] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.400507][ T6454] ? __fget_files+0x34/0x3d0 [ 68.400545][ T6454] ? selinux_file_ioctl+0x1e0/0x290 [ 68.400562][ T6454] ? selinux_file_ioctl+0x1e7/0x290 [ 68.400582][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.400607][ T6454] __x64_sys_ioctl+0x18e/0x210 [ 68.400631][ T6454] do_syscall_64+0x123/0x790 [ 68.400654][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.400670][ T6454] RIP: 0033:0x7f92fa59f559 [ 68.400684][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.400704][ T6454] RSP: 002b:00007f92fb43c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.400720][ T6454] RAX: ffffffffffffffda RBX: 00007f92fa825fa0 RCX: 00007f92fa59f559 [ 68.400731][ T6454] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 68.400741][ T6454] RBP: 00007f92fb43c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.400752][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.400761][ T6454] R13: 00007f92fa826038 R14: 00007f92fa825fa0 R15: 00007ffcb39c3ea8 [ 68.400787][ T6454] [ 68.400795][ T6454] Mem-Info: [ 68.400817][ T6454] active_anon:24275 inactive_anon:0 isolated_anon:0 [ 68.400817][ T6454] active_file:0 inactive_file:61233 isolated_file:0 [ 68.400817][ T6454] unevictable:1000 dirty:2124 writeback:0 [ 68.400817][ T6454] slab_reclaimable:12376 slab_unreclaimable:69031 [ 68.400817][ T6454] mapped:25207 shmem:17326 pagetables:1302 [ 68.400817][ T6454] sec_pagetables:299 bounce:0 [ 68.400817][ T6454] kernel_misc_reclaimable:0 [ 68.400817][ T6454] free:421572 free_pcp:6485 free_cma:0 [ 68.400858][ T6454] Node 0 active_anon:97100kB inactive_anon:0kB active_file:0kB inactive_file:244740kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100828kB dirty:8492kB writeback:0kB shmem:67304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:5000kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 68.400902][ T6454] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 68.400943][ T6454] Node 0 DMA free:15300kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 68.400989][ T6454] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 68.401021][ T6454] Node 0 DMA32 free:52132kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:97100kB inactive_anon:0kB active_file:0kB inactive_file:244740kB unevictable:2000kB writepending:8492kB zspages:0kB present:2080628kB managed:1231180kB mlocked:0kB bounce:0kB free_pcp:25752kB local_pcp:7380kB free_cma:0kB [ 68.401153][ T6454] lowmem_reserve[]: 0 0 0 0 0 [ 68.401185][ T6454] Node 1 Normal free:1618856kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 68.401231][ T6454] lowmem_reserve[]: 0 0 0 0 0 [ 68.401261][ T6454] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15300kB [ 68.401399][ T6454] Node 0 DMA32: 94*4kB (UME) 322*8kB (UME) 165*16kB (UM) 137*32kB (UM) 23*64kB (UM) 14*128kB (UME) 12*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 7*2048kB (UM) 3*4096kB (UM) = 52152kB [ 68.401538][ T6454] Node 1 Normal: 4*4kB (UM) 7*8kB (U) 10*16kB (UM) 14*32kB (UM) 12*64kB (UM) 6*128kB (UM) 1*256kB (U) 3*512kB (M) 1*1024kB (U) 2*2048kB (UM) 393*4096kB (UM) = 1618856kB [ 68.401676][ T6454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.401695][ T6454] Node 0 hugepages_total=16 hugepages_free=16 hugepages_surp=0 hugepages_size=2048kB [ 68.401708][ T6454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.401721][ T6454] Node 1 hugepages_total=16 hugepages_free=16 hugepages_surp=0 hugepages_size=2048kB [ 68.401733][ T6454] 78586 total pagecache pages [ 68.401740][ T6454] 0 pages in swap cache [ 68.401745][ T6454] Free swap = 124996kB [ 68.401751][ T6454] Total swap = 124996kB [ 68.401758][ T6454] 1048443 pages RAM [ 68.401763][ T6454] 0 pages HighMem/MovableOnly [ 68.401769][ T6454] 291338 pages reserved [ 68.401775][ T6454] 0 pages cma reserved [ 68.752984][ T6472] [U] ¥ [ 68.753019][ T6472] [U]  [ 68.753046][ T6472] [U] [ 68.753073][ T6472] [U] [ 68.753151][ T6472] [U] [ 68.753179][ T6472] [U] [ 68.753204][ T6472] [U] [ 68.753228][ T6472] [U] [ 68.753258][ T6472] [U] [ 68.753284][ T6472] [U] [ 68.753311][ T6472] [U] [ 68.753339][ T6472] [U] [ 68.753375][ T6472] [U] [ 68.753403][ T6472] [U] [ 68.753430][ T6472] [U] [ 68.753457][ T6472] [U] [ 68.753485][ T6472] [U] [ 68.753512][ T6472] [U] [ 68.753539][ T6472] [U] [ 68.753566][ T6472] [U] [ 68.753604][ T6472] [U] [ 68.753632][ T6472] [U] [ 68.753657][ T6472] [U] [ 68.753691][ T6472] [U] [ 68.753723][ T6472] [U] [ 68.753753][ T6472] [U] [ 68.753783][ T6472] [U] [ 68.753812][ T6472] [U] [ 68.753852][ T6472] [U] [ 68.753882][ T6472] [U] [ 68.753911][ T6472] [U] [ 68.753939][ T6472] [U] [ 68.753969][ T6472] [U] [ 68.753996][ T6472] [U] [ 68.754023][ T6472] [U] [ 68.754050][ T6472] [U] [ 68.754087][ T6472] [U] [ 68.754114][ T6472] [U] [ 68.754141][ T6472] [U] [ 68.754169][ T6472] [U] [ 68.754196][ T6472] [U] [ 68.754224][ T6472] [U] [ 68.754250][ T6472] [U] [ 68.754276][ T6472] [U] [ 68.754312][ T6472] [U] [ 68.754339][ T6472] [U] [ 68.754364][ T6472] [U] [ 68.754392][ T6472] [U] [ 68.754420][ T6472] [U] [ 68.754447][ T6472] [U] [ 68.754474][ T6472] [U] [ 68.754500][ T6472] [U] [ 68.754540][ T6472] [U] [ 68.754588][ T6472] [U] [ 68.754618][ T6472] [U] [ 68.754648][ T6472] [U] [ 68.754716][ T6472] [U] [ 68.754746][ T6472] [U] [ 68.754776][ T6472] [U] [ 68.754806][ T6472] [U] [ 68.754835][ T6472] [U] [ 68.754875][ T6472] [U] [ 68.754905][ T6472] [U] [ 68.754945][ T6472] [U] [ 68.754974][ T6472] [U] [ 68.755049][ T6472] [U] [ 68.755093][ T6472] [U] [ 68.755124][ T6472] [U] [ 68.755154][ T6472] [U] [ 68.764354][ T6472] [U] [ 68.764390][ T6472] [U] [ 68.764419][ T6472] [U] [ 68.764446][ T6472] [U] [ 68.764477][ T6472] [U] [ 68.764502][ T6472] [U] [ 68.764529][ T6472] [U] [ 68.764556][ T6472] [U] [ 68.764595][ T6472] [U] [ 68.764622][ T6472] [U] [ 68.764649][ T6472] [U] [ 68.764676][ T6472] [U] [ 68.764713][ T6472] [U] [ 68.764742][ T6472] [U] [ 68.764771][ T6472] [U] [ 68.764801][ T6472] [U] [ 68.764860][ T6472] [U] [ 68.764891][ T6472] [U] [ 68.764921][ T6472] [U] [ 68.764951][ T6472] [U] [ 68.765012][ T6472] [U] [ 68.765042][ T6472] [U] [ 68.765097][ T6472] [U] [ 68.765128][ T6472] [U] [ 68.765254][ T6472] [U] [ 68.765284][ T6472] [U] [ 68.765314][ T6472] [U] [ 68.765343][ T6472] [U] [ 68.765374][ T6472] [U] [ 68.765402][ T6472] [U] [ 68.765428][ T6472] [U] [ 68.765455][ T6472] [U] [ 68.765492][ T6472] [U] [ 68.765520][ T6472] [U] [ 68.765546][ T6472] [U] [ 68.765573][ T6472] [U] [ 68.765602][ T6472] [U] [ 68.765628][ T6472] [U] [ 68.765656][ T6472] [U] [ 68.765682][ T6472] [U] [ 68.765728][ T6472] [U] [ 68.765757][ T6472] [U] [ 68.765801][ T6472] [U] [ 68.765829][ T6472] [U] [ 68.766345][ T6472] [U] [ 68.766375][ T6472] [U] [ 68.766402][ T6472] [U] [ 68.766430][ T6472] [U] [ 68.766468][ T6472] [U] [ 68.766495][ T6472] [U] [ 68.766524][ T6472] [U] [ 68.766554][ T6472] [U] [ 68.766584][ T6472] [U] [ 68.766612][ T6472] [U] [ 68.766638][ T6472] [U] [ 68.766665][ T6472] [U] [ 68.766708][ T6472] [U] [ 68.766736][ T6472] [U] [ 68.766764][ T6472] [U] [ 68.773565][ T6472] netlink: 'syz.0.125': attribute type 2 has an invalid length. [ 68.773584][ T6472] netlink: 'syz.0.125': attribute type 2 has an invalid length. [ 68.774469][ T6472] netlink: 'syz.0.125': attribute type 5 has an invalid length. [ 68.777815][ T6471] [U] [ 68.846337][ T6474] FAULT_INJECTION: forcing a failure. [ 68.846337][ T6474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.846362][ T6474] CPU: 3 UID: 0 PID: 6474 Comm: syz.3.126 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.846379][ T6474] Tainted: [L]=SOFTLOCKUP [ 68.846383][ T6474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.846390][ T6474] Call Trace: [ 68.846395][ T6474] [ 68.846399][ T6474] dump_stack_lvl+0x100/0x190 [ 68.846421][ T6474] should_fail_ex.cold+0x5/0xa [ 68.846438][ T6474] ? prepare_alloc_pages+0x16d/0x5b0 [ 68.846456][ T6474] should_fail_alloc_page+0xeb/0x140 [ 68.846475][ T6474] prepare_alloc_pages+0x1f0/0x5b0 [ 68.846492][ T6474] ? arch_stack_walk+0xa6/0xf0 [ 68.846511][ T6474] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 68.846528][ T6474] ? stack_trace_save+0x8e/0xc0 [ 68.846543][ T6474] ? __pfx_stack_trace_save+0x10/0x10 [ 68.846558][ T6474] ? stack_depot_save_flags+0x27/0x9f0 [ 68.846580][ T6474] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 68.846592][ T6474] ? kasan_save_stack+0x30/0x50 [ 68.846607][ T6474] ? __kasan_kmalloc+0xaa/0xb0 [ 68.846621][ T6474] ? snd_pcm_attach_substream+0x436/0xd20 [ 68.846647][ T6474] ? snd_pcm_open_substream+0x90/0x1850 [ 68.846660][ T6474] ? snd_pcm_open+0x2a3/0x6e0 [ 68.846672][ T6474] ? snd_pcm_playback_open+0x69/0xc0 [ 68.846686][ T6474] ? snd_open+0x201/0x450 [ 68.846702][ T6474] ? chrdev_open+0x234/0x6a0 [ 68.846718][ T6474] ? do_dentry_open+0x674/0x1470 [ 68.846732][ T6474] ? vfs_open_consume+0xcc/0x460 [ 68.846743][ T6474] ? path_openat+0x1547/0x23f0 [ 68.846759][ T6474] ? do_file_open+0x20e/0x430 [ 68.846776][ T6474] ? do_sys_openat2+0x163/0x1d0 [ 68.846787][ T6474] ? __x64_sys_openat+0x12d/0x210 [ 68.846797][ T6474] ? do_syscall_64+0x123/0x790 [ 68.846822][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.846845][ T6474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.846867][ T6474] ? policy_nodemask+0xed/0x4f0 [ 68.846887][ T6474] alloc_pages_mpol+0x201/0x560 [ 68.846906][ T6474] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 68.846923][ T6474] ? __kasan_kmalloc+0xaa/0xb0 [ 68.846941][ T6474] alloc_pages_noprof+0x1a/0x160 [ 68.846974][ T6474] alloc_pages_exact_noprof+0x32/0xf0 [ 68.846995][ T6474] snd_pcm_attach_substream+0x45d/0xd20 [ 68.847014][ T6474] snd_pcm_open_substream+0x90/0x1850 [ 68.847029][ T6474] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 68.847043][ T6474] ? rcu_is_watching+0x13/0xc0 [ 68.847057][ T6474] snd_pcm_open+0x2a3/0x6e0 [ 68.847072][ T6474] ? __pfx_snd_pcm_open+0x10/0x10 [ 68.847085][ T6474] ? __pfx_avc_has_perm+0x10/0x10 [ 68.847100][ T6474] ? __pfx_default_wake_function+0x10/0x10 [ 68.847122][ T6474] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 68.847147][ T6474] snd_pcm_playback_open+0x69/0xc0 [ 68.847162][ T6474] snd_open+0x201/0x450 [ 68.847180][ T6474] ? __pfx_snd_open+0x10/0x10 [ 68.847198][ T6474] chrdev_open+0x234/0x6a0 [ 68.847217][ T6474] ? __pfx_chrdev_open+0x10/0x10 [ 68.847235][ T6474] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 68.847253][ T6474] do_dentry_open+0x674/0x1470 [ 68.847269][ T6474] ? __pfx_chrdev_open+0x10/0x10 [ 68.847289][ T6474] vfs_open_consume+0xcc/0x460 [ 68.847303][ T6474] path_openat+0x1547/0x23f0 [ 68.847323][ T6474] ? __pfx_path_openat+0x10/0x10 [ 68.847346][ T6474] do_file_open+0x20e/0x430 [ 68.847366][ T6474] ? __pfx_do_file_open+0x10/0x10 [ 68.847394][ T6474] ? _raw_spin_unlock+0x28/0x50 [ 68.847410][ T6474] ? alloc_fd+0x471/0x7a0 [ 68.847432][ T6474] do_sys_openat2+0x163/0x1d0 [ 68.847443][ T6474] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.847454][ T6474] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 68.847473][ T6474] __x64_sys_openat+0x12d/0x210 [ 68.847486][ T6474] ? __pfx___x64_sys_openat+0x10/0x10 [ 68.847504][ T6474] do_syscall_64+0x123/0x790 [ 68.847523][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.847536][ T6474] RIP: 0033:0x7f2efa35fd8e [ 68.847548][ T6474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.847559][ T6474] RSP: 002b:00007f2ef85f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.847572][ T6474] RAX: ffffffffffffffda RBX: 00007f2ef85f66c0 RCX: 00007f2efa35fd8e [ 68.847579][ T6474] RDX: 0000000000000002 RSI: 00007f2ef85f5c00 RDI: ffffffffffffff9c [ 68.847586][ T6474] RBP: 00007f2ef85f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 68.847593][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 68.847601][ T6474] R13: 00007f2efa626038 R14: 00007f2efa625fa0 R15: 00007fff47ca34d8 [ 68.847618][ T6474] [ 68.906925][ T6478] FAULT_INJECTION: forcing a failure. [ 68.906925][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 68.906946][ T6478] CPU: 3 UID: 0 PID: 6478 Comm: syz.1.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.906961][ T6478] Tainted: [L]=SOFTLOCKUP [ 68.906965][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.906971][ T6478] Call Trace: [ 68.906975][ T6478] [ 68.906979][ T6478] dump_stack_lvl+0x100/0x190 [ 68.906999][ T6478] should_fail_ex.cold+0x5/0xa [ 68.907022][ T6478] should_failslab+0xc2/0x120 [ 68.907044][ T6478] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 68.907066][ T6478] ? __alloc_skb+0x140/0x710 [ 68.907096][ T6478] __alloc_skb+0x140/0x710 [ 68.907123][ T6478] ? __alloc_skb+0x5b7/0x710 [ 68.907149][ T6478] ? __pfx___alloc_skb+0x10/0x10 [ 68.907166][ T6478] ? genl_rcv_msg+0x4be/0x800 [ 68.907182][ T6478] netlink_ack+0x117/0xba0 [ 68.907194][ T6478] ? __lock_acquire+0x5c0/0x1f40 [ 68.907211][ T6478] netlink_rcv_skb+0x333/0x420 [ 68.907225][ T6478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.907239][ T6478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.907256][ T6478] ? netlink_deliver_tap+0x1ae/0xb50 [ 68.907269][ T6478] genl_rcv+0x28/0x40 [ 68.907280][ T6478] netlink_unicast+0x668/0x950 [ 68.907293][ T6478] ? __pfx_netlink_unicast+0x10/0x10 [ 68.907309][ T6478] netlink_sendmsg+0x9ac/0x10c0 [ 68.907322][ T6478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.907337][ T6478] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.907355][ T6478] ? ____sys_sendmsg+0xa99/0xc30 [ 68.907367][ T6478] ____sys_sendmsg+0xa99/0xc30 [ 68.907379][ T6478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.907392][ T6478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.907409][ T6478] ? lock_acquire+0x1d1/0x380 [ 68.907422][ T6478] ? get_pid_task+0x2a/0x250 [ 68.907439][ T6478] ___sys_sendmsg+0x190/0x1e0 [ 68.907454][ T6478] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.907467][ T6478] ? get_pid_task+0x106/0x250 [ 68.907488][ T6478] ? find_held_lock+0x2b/0x80 [ 68.907507][ T6478] __sys_sendmsg+0x160/0x210 [ 68.907518][ T6478] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.907536][ T6478] do_syscall_64+0x123/0x790 [ 68.907554][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.907565][ T6478] RIP: 0033:0x7f6465f9f559 [ 68.907574][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.907585][ T6478] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.907596][ T6478] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 68.907603][ T6478] RDX: 0000000004008054 RSI: 00002000000006c0 RDI: 0000000000000005 [ 68.907610][ T6478] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 68.907616][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.907622][ T6478] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 68.907636][ T6478] [ 68.992335][ T6487] geneve2: entered promiscuous mode [ 68.992349][ T6487] geneve2: entered allmulticast mode [ 68.996275][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 68.996292][ T6487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.130'. [ 69.005223][ T5653] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.005248][ T5653] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.005265][ T5653] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.005282][ T5653] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.147971][ T6496] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 69.375212][ T5870] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.525209][ T5870] usb 8-1: Using ep0 maxpacket: 32 [ 69.527212][ T5870] usb 8-1: unable to get BOS descriptor or descriptor too short [ 69.527246][ T5870] usb 8-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 69.528133][ T5870] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 69.528150][ T5870] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 69.528162][ T5870] usb 8-1: config 14 has no interface number 0 [ 69.528175][ T5870] usb 8-1: config 14 has no interface number 1 [ 69.528219][ T5870] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 69.528237][ T5870] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 69.528255][ T5870] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 69.528273][ T5870] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 69.528290][ T5870] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 69.528309][ T5870] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.528329][ T5870] usb 8-1: config 14 interface 57 has no altsetting 0 [ 69.528343][ T5870] usb 8-1: config 14 interface 228 has no altsetting 0 [ 69.530088][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.530105][ T5870] usb 8-1: Product: syz [ 69.530115][ T5870] usb 8-1: Manufacturer: syz [ 69.530127][ T5870] usb 8-1: SerialNumber: syz [ 69.545848][ T5792] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.716037][ T5792] usb 6-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 69.716851][ T5792] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 69.716866][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.716876][ T5792] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.716894][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.720926][ T6506] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.723681][ T5792] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 69.728607][ T5792] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 69.926273][ T6506] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 69.934957][ T2094] usb 6-1: USB disconnect, device number 2 [ 69.944376][ T6513] Bluetooth: MGMT ver 1.23 [ 69.946840][ T5870] legousbtower 8-1:14.57: interrupt endpoints not found [ 69.950656][ T2094] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 69.951058][ T2094] cyberjack 6-1:1.0: device disconnected [ 69.985362][ T6515] 0x0000000000ec-0x0000000000f2 : "" [ 69.993808][ T6515] ftl_cs: FTL header corrupt! [ 70.010883][ T6515] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 70.341793][ T5870] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 70.344862][ T5870] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 71.036052][ T6530] mmap: syz.0.146 (6530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.100522][ T9] usb 8-1: USB disconnect, device number 4 [ 71.103165][ T6531] overlay: Unknown parameter 'dont_measure' [ 71.104359][ T9] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 71.217482][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.217526][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.220253][ T63] cfg80211: failed to load regulatory.db [ 71.552309][ T6533] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 71.586273][ T6533] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 71.587996][ T6533] bond4 (unregistering): Released all slaves [ 71.639554][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 71.639567][ T42] audit: type=1400 audit(1793087177.962:524): avc: denied { write } for pid=6537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.690198][ T42] audit: type=1400 audit(1793087178.012:525): avc: denied { cmd } for pid=6542 comm="syz.3.148" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 71.706424][ T42] audit: type=1800 audit(1793087178.032:526): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133531 res=0 errno=-22 [ 71.708074][ T42] audit: type=1400 audit(1793087178.032:527): avc: denied { write } for pid=6545 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.807131][ T6552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.826972][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 71.830733][ T42] audit: type=1400 audit(1793087178.152:528): avc: denied { map } for pid=6542 comm="syz.3.148" path="/dev/ublkc0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.844356][ T6555] FAULT_INJECTION: forcing a failure. [ 71.844356][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 71.844379][ T6555] CPU: 2 UID: 0 PID: 6555 Comm: syz.1.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.844395][ T6555] Tainted: [L]=SOFTLOCKUP [ 71.844399][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.844406][ T6555] Call Trace: [ 71.844410][ T6555] [ 71.844414][ T6555] dump_stack_lvl+0x100/0x190 [ 71.844435][ T6555] should_fail_ex.cold+0x5/0xa [ 71.844453][ T6555] should_failslab+0xc2/0x120 [ 71.844469][ T6555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.844484][ T6555] ? __skb_ext_alloc+0x1a/0x80 [ 71.844502][ T6555] __skb_ext_alloc+0x1a/0x80 [ 71.844516][ T6555] skb_ext_add+0x40b/0x810 [ 71.844531][ T6555] ? mark_held_locks+0x40/0x70 [ 71.844546][ T6555] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.844578][ T6555] j1939_sk_sendmsg+0x6db/0x1470 [ 71.844593][ T6555] ? avc_has_perm_noaudit+0x81/0x470 [ 71.844610][ T6555] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 71.844621][ T6555] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.844639][ T6555] sock_write_iter+0x560/0x5d0 [ 71.844654][ T6555] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 71.844664][ T6555] ? __pfx_sock_write_iter+0x10/0x10 [ 71.844683][ T6555] ? __pfx___file_has_perm+0x10/0x10 [ 71.844699][ T6555] do_iter_readv_writev+0x6f7/0x930 [ 71.844720][ T6555] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 71.844732][ T6555] ? selinux_file_permission+0x30/0x6a0 [ 71.844752][ T6555] ? bpf_lsm_file_permission+0x9/0x10 [ 71.844766][ T6555] ? security_file_permission+0x76/0x210 [ 71.844779][ T6555] ? rw_verify_area+0xce/0x6d0 [ 71.844792][ T6555] vfs_writev+0x360/0xdd0 [ 71.844806][ T6555] ? __lock_acquire+0x5c0/0x1f40 [ 71.844822][ T6555] ? __pfx_vfs_writev+0x10/0x10 [ 71.844838][ T6555] ? lock_acquire+0x1d1/0x380 [ 71.844851][ T6555] ? __fget_files+0x34/0x3d0 [ 71.844873][ T6555] ? __fget_files+0x21f/0x3d0 [ 71.844894][ T6555] ? do_writev+0x28a/0x340 [ 71.844905][ T6555] do_writev+0x28a/0x340 [ 71.844919][ T6555] ? __pfx_do_writev+0x10/0x10 [ 71.844936][ T6555] do_syscall_64+0x123/0x790 [ 71.844955][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.844967][ T6555] RIP: 0033:0x7f6465f9f559 [ 71.844977][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.844987][ T6555] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 71.844999][ T6555] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 71.845006][ T6555] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 71.845013][ T6555] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.845019][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.845026][ T6555] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 71.845041][ T6555] [ 72.087021][ T42] audit: type=1800 audit(1793087178.412:529): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.155" name="file0" dev="tmpfs" ino=350 res=0 errno=-22 [ 72.153954][ T6571] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 72.155658][ T42] audit: type=1400 audit(1793087178.482:530): avc: denied { accept } for pid=6569 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.156013][ T42] audit: type=1400 audit(1793087178.482:531): avc: denied { write } for pid=6569 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.185467][ T34] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 72.191864][ T42] audit: type=1400 audit(1793087178.512:532): avc: denied { ioctl } for pid=6573 comm="syz.0.159" path="socket:[14976]" dev="sockfs" ino=14976 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.211945][ T42] audit: type=1800 audit(1793087178.532:533): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.157" name="xps_cpus" dev="sysfs" ino=130973 res=0 errno=-2 [ 72.241843][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 72.250138][ T6579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.160'. [ 72.292550][ T6587] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 72.607683][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=6599 comm=syz.0.165 [ 72.646488][ T6601] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 72.647220][ T78] IPVS: starting estimator thread 0... [ 72.658228][ T34] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 72.735209][ T6602] IPVS: using max 42 ests per chain, 100800 per kthread [ 72.739787][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 73.018695][ T6616] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 73.093509][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056708800: rx timeout, send abort [ 73.094297][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888056708800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 73.178934][ T6637] usbcore.quirks: string doesn't fit in 127 chars. [ 73.231757][ T6647] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.231904][ T6647] SELinux: failed to load policy [ 73.406648][ T6655] veth0_vlan: entered allmulticast mode [ 73.472580][ T6654] veth0_vlan: left allmulticast mode [ 73.873379][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.188'. [ 73.942502][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 73.953726][ T6668] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 73.953753][ T6668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.954447][ T6668] vhci_hcd vhci_hcd.0: Device attached [ 73.967570][ T6669] vhci_hcd: connection closed [ 73.969005][ T5653] vhci_hcd vhci_hcd.0: stop threads [ 73.969382][ T5653] vhci_hcd vhci_hcd.0: release socket [ 73.969408][ T5653] vhci_hcd vhci_hcd.0: disconnect device [ 74.415320][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 74.680704][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 74.803954][ T6685] bonding: unable to delete non-existent b [ 74.804087][ T6686] bonding: unable to delete non-existent b [ 74.933950][ T6690] 9pnet_virtio: no channels available for device 127.0.0.1 [ 75.215846][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.365788][ T41] usb 5-1: device descriptor read/64, error -71 [ 75.605217][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.702062][ T6730] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 75.735213][ T41] usb 5-1: device descriptor read/64, error -71 [ 75.846814][ T41] usb usb5-port1: attempt power cycle [ 76.205277][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.226338][ T41] usb 5-1: device descriptor read/8, error -71 [ 76.465596][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.485970][ T41] usb 5-1: device descriptor read/8, error -71 [ 76.578955][ T6736] netlink: 76 bytes leftover after parsing attributes in process `syz.1.213'. [ 76.606095][ T41] usb usb5-port1: unable to enumerate USB device [ 76.675256][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 76.675283][ T42] audit: type=1400 audit(1793087182.992:624): avc: denied { execute } for pid=6740 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.677882][ T42] audit: type=1400 audit(1793087183.002:625): avc: denied { execute_no_trans } for pid=6740 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.780432][ T42] audit: type=1800 audit(1793087183.102:626): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134166 res=0 errno=-22 [ 76.785243][ T42] audit: type=1800 audit(1793087183.102:627): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134177 res=0 errno=-22 [ 76.788304][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.791652][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.792575][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.794111][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.794567][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.802066][ T42] audit: type=1800 audit(1793087183.122:628): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22625 res=0 errno=-22 [ 76.809263][ T42] audit: type=1800 audit(1793087183.132:629): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22654 res=0 errno=-22 [ 76.812933][ T42] audit: type=1800 audit(1793087183.132:630): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26335 res=0 errno=-22 [ 76.815887][ T42] audit: type=1800 audit(1793087183.132:631): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26461 res=0 errno=-22 [ 76.816369][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.820610][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.821439][ T42] audit: type=1800 audit(1793087183.142:632): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26648 res=0 errno=-22 [ 76.821735][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.822655][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.825911][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.826729][ T42] audit: type=1800 audit(1793087183.152:633): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=88006 res=0 errno=-22 [ 76.854165][ T6744] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.214'. [ 77.029796][ T6757] syzkaller0: entered promiscuous mode [ 77.029819][ T6757] syzkaller0: entered allmulticast mode [ 77.072229][ T6741] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.480094][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.480188][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.480278][ T6741] bridge_slave_0: entered allmulticast mode [ 77.480963][ T6741] bridge_slave_0: entered promiscuous mode [ 77.482277][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.482355][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.482411][ T6741] bridge_slave_1: entered allmulticast mode [ 77.483091][ T6741] bridge_slave_1: entered promiscuous mode [ 77.501669][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.504108][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.525744][ T6741] team0: Port device team_slave_0 added [ 77.527997][ T6741] team0: Port device team_slave_1 added [ 77.544676][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.544691][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.544712][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.546389][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.546400][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.546420][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.578982][ T6741] hsr_slave_0: entered promiscuous mode [ 77.579710][ T6741] hsr_slave_1: entered promiscuous mode [ 77.757376][ T6741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.766408][ T6741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.773172][ T6741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.778894][ T6741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.779423][ T6741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.782873][ T6741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.783767][ T6741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.786678][ T6741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.857236][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.874218][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.883446][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.883526][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.889794][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.889877][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.155067][ T6799] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 78.159795][ T6799] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 78.159902][ T6799] overlayfs: failed to set uuid (65/file2, err=-13); falling back to uuid=null. [ 78.267135][ C1] bridge0: port 3(syz_tun) entered learning state [ 78.288971][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.335832][ T6815] device-mapper: table: 248:8: mirror: Device lookup failure (-ENOENT) [ 78.335848][ T6815] device-mapper: ioctl: error adding target to table [ 78.454425][ T6828] FAULT_INJECTION: forcing a failure. [ 78.454425][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 78.454449][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.1.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.454464][ T6828] Tainted: [L]=SOFTLOCKUP [ 78.454468][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.454489][ T6828] Call Trace: [ 78.454494][ T6828] [ 78.454512][ T6828] dump_stack_lvl+0x100/0x190 [ 78.454532][ T6828] should_fail_ex.cold+0x5/0xa [ 78.454549][ T6828] should_failslab+0xc2/0x120 [ 78.454571][ T6828] __kmalloc_noprof+0xfc/0x840 [ 78.454585][ T6828] ? lsm_blob_alloc+0x68/0x90 [ 78.454601][ T6828] lsm_blob_alloc+0x68/0x90 [ 78.454614][ T6828] security_sk_alloc+0x2d/0x290 [ 78.454631][ T6828] sk_prot_alloc+0x1d1/0x2a0 [ 78.454646][ T6828] sk_alloc+0x36/0xe80 [ 78.454668][ T6828] inet6_create+0x385/0x12b0 [ 78.454683][ T6828] ? inet6_create+0x7f/0x12b0 [ 78.454698][ T6828] __sock_create+0x339/0x860 [ 78.454715][ T6828] udp_sock_create6+0xc7/0x6a0 [ 78.454728][ T6828] ? __pfx_udp_sock_create6+0x10/0x10 [ 78.454748][ T6828] rxe_setup_udp_tunnel.constprop.0+0x1e6/0x7e0 [ 78.454767][ T6828] ? __pfx_rxe_setup_udp_tunnel.constprop.0+0x10/0x10 [ 78.454789][ T6828] ? lock_acquire+0x1d1/0x380 [ 78.454802][ T6828] ? rxe_ns_pernet_sk6+0x36/0x270 [ 78.454815][ T6828] ? rxe_ns_pernet_sk6+0xd0/0x270 [ 78.454829][ T6828] rxe_net_init+0x1c2/0x2a0 [ 78.454839][ T6828] rxe_newlink+0x6d/0x160 [ 78.454854][ T6828] nldev_newlink+0x3b0/0x630 [ 78.454868][ T6828] ? __pfx_nldev_newlink+0x10/0x10 [ 78.454921][ T6828] ? cred_has_capability.isra.0+0x186/0x300 [ 78.454936][ T6828] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 78.454949][ T6828] ? lock_acquire+0x1d1/0x380 [ 78.454964][ T6828] ? hook_capable+0x1bc/0x500 [ 78.454982][ T6828] ? cap_capable+0x107/0x430 [ 78.454998][ T6828] ? security_capable+0x80/0x260 [ 78.455013][ T6828] ? ns_capable+0xcd/0xf0 [ 78.455023][ T6828] ? __pfx_nldev_newlink+0x10/0x10 [ 78.455036][ T6828] rdma_nl_rcv_msg+0x392/0x6f0 [ 78.455049][ T6828] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 78.455064][ T6828] ? __lock_acquire+0x5c0/0x1f40 [ 78.455081][ T6828] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 78.455096][ T6828] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 78.455115][ T6828] ? netlink_deliver_tap+0x1ae/0xb50 [ 78.455129][ T6828] netlink_unicast+0x668/0x950 [ 78.455143][ T6828] ? __pfx_netlink_unicast+0x10/0x10 [ 78.455159][ T6828] netlink_sendmsg+0x9ac/0x10c0 [ 78.455173][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.455188][ T6828] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.455206][ T6828] ? ____sys_sendmsg+0xa99/0xc30 [ 78.455218][ T6828] ____sys_sendmsg+0xa99/0xc30 [ 78.455231][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.455244][ T6828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.455261][ T6828] ? lock_acquire+0x1d1/0x380 [ 78.455273][ T6828] ? get_pid_task+0x2a/0x250 [ 78.455290][ T6828] ___sys_sendmsg+0x190/0x1e0 [ 78.455305][ T6828] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.455319][ T6828] ? get_pid_task+0x106/0x250 [ 78.455341][ T6828] ? find_held_lock+0x2b/0x80 [ 78.455360][ T6828] __sys_sendmsg+0x160/0x210 [ 78.455381][ T6828] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.455400][ T6828] do_syscall_64+0x123/0x790 [ 78.455418][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.455429][ T6828] RIP: 0033:0x7f6465f9f559 [ 78.455440][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.455450][ T6828] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.455469][ T6828] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 78.455476][ T6828] RDX: 0000000000004004 RSI: 0000200000002680 RDI: 0000000000000003 [ 78.455483][ T6828] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.455489][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.455495][ T6828] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 78.455510][ T6828] [ 78.457536][ T6828] rdma_rxe: Failed to create IPv6 UDP tunnel [ 78.492579][ T6741] veth0_vlan: entered promiscuous mode [ 78.500364][ T6741] veth1_vlan: entered promiscuous mode [ 78.525648][ T6741] veth0_macvtap: entered promiscuous mode [ 78.529595][ T6741] veth1_macvtap: entered promiscuous mode [ 78.543499][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.550958][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.580076][ T5653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.581105][ T6241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.581301][ T6241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.581538][ T6241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.597559][ T6830] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 78.602429][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.602449][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.614180][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.614193][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.851768][ T6845] autofs: Unknown parameter '' [ 78.896413][ T5783] Bluetooth: hci4: command tx timeout [ 79.087338][ T6131] lg-g15 0003:046D:0A07.0002: hidraw1: USB HID vfffff5.00 Device [syz0] on syz0 [ 79.088634][ T6131] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input6 [ 79.209787][ T6874] FAULT_INJECTION: forcing a failure. [ 79.209787][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 79.209820][ T6874] CPU: 3 UID: 0 PID: 6874 Comm: syz.1.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.209846][ T6874] Tainted: [L]=SOFTLOCKUP [ 79.209853][ T6874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.209886][ T6874] Call Trace: [ 79.209894][ T6874] [ 79.209901][ T6874] dump_stack_lvl+0x100/0x190 [ 79.209933][ T6874] should_fail_ex.cold+0x5/0xa [ 79.209960][ T6874] should_failslab+0xc2/0x120 [ 79.209986][ T6874] __kmalloc_noprof+0xfc/0x840 [ 79.210011][ T6874] ? tomoyo_encode2+0xfb/0x3c0 [ 79.210036][ T6874] tomoyo_encode2+0xfb/0x3c0 [ 79.210059][ T6874] tomoyo_encode+0x29/0x50 [ 79.210077][ T6874] tomoyo_realpath_from_path+0x18c/0x690 [ 79.210104][ T6874] tomoyo_mount_acl+0x1b6/0x8b0 [ 79.210120][ T6874] ? is_bpf_text_address+0x8a/0x1a0 [ 79.210139][ T6874] ? is_bpf_text_address+0x8a/0x1a0 [ 79.210171][ T6874] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.210196][ T6874] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 79.210212][ T6874] ? kernel_text_address+0x8d/0x100 [ 79.210232][ T6874] ? unwind_get_return_address+0x59/0xa0 [ 79.210259][ T6874] ? arch_stack_walk+0xa6/0xf0 [ 79.210288][ T6874] ? __lock_acquire+0x5c0/0x1f40 [ 79.210323][ T6874] ? tomoyo_mount_permission+0x1f6/0x460 [ 79.210344][ T6874] ? tomoyo_domain+0xb2/0x150 [ 79.210365][ T6874] ? tomoyo_profile+0x47/0x60 [ 79.210391][ T6874] tomoyo_mount_permission+0x214/0x460 [ 79.210408][ T6874] ? tomoyo_mount_permission+0x1f6/0x460 [ 79.210428][ T6874] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 79.210462][ T6874] security_sb_mount+0xdd/0x270 [ 79.210491][ T6874] path_mount+0x158/0x2850 [ 79.210516][ T6874] ? __pfx_path_mount+0x10/0x10 [ 79.210535][ T6874] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.210564][ T6874] ? putname+0xb1/0x110 [ 79.210580][ T6874] ? kmem_cache_free+0x127/0x6c0 [ 79.210608][ T6874] ? __x64_sys_mount+0x293/0x310 [ 79.210627][ T6874] __x64_sys_mount+0x293/0x310 [ 79.210646][ T6874] ? __pfx___x64_sys_mount+0x10/0x10 [ 79.210673][ T6874] do_syscall_64+0x123/0x790 [ 79.210702][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.210721][ T6874] RIP: 0033:0x7f6465f9f559 [ 79.210737][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.210754][ T6874] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.210772][ T6874] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 79.210784][ T6874] RDX: 0000200000000480 RSI: 00002000000005c0 RDI: 00002000000004c0 [ 79.210796][ T6874] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 79.210806][ T6874] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 79.210817][ T6874] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 79.210844][ T6874] [ 79.210963][ T6874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.220303][ T6875] overlay: Unknown parameter 'fowner>00000000000000000000' [ 79.325370][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 79.516685][ T34] usb 8-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 79.517518][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 79.517546][ T34] usb 8-1: can't read configurations, error -71 [ 79.568131][ T6885] FAULT_INJECTION: forcing a failure. [ 79.568131][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 79.568175][ T6885] CPU: 2 UID: 0 PID: 6885 Comm: syz.1.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.568191][ T6885] Tainted: [L]=SOFTLOCKUP [ 79.568205][ T6885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.568221][ T6885] Call Trace: [ 79.568226][ T6885] [ 79.568235][ T6885] dump_stack_lvl+0x100/0x190 [ 79.568265][ T6885] should_fail_ex.cold+0x5/0xa [ 79.568282][ T6885] should_failslab+0xc2/0x120 [ 79.568302][ T6885] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.568314][ T6885] ? is_bad_inode+0xd/0x40 [ 79.568328][ T6885] ? ima_d_path+0xc9/0x260 [ 79.568344][ T6885] ima_d_path+0xc9/0x260 [ 79.568358][ T6885] ? __pfx_ima_d_path+0x10/0x10 [ 79.568374][ T6885] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 79.568389][ T6885] process_measurement+0x1b26/0x2350 [ 79.568406][ T6885] ? find_held_lock+0x2b/0x80 [ 79.568417][ T6885] ? __pfx_process_measurement+0x10/0x10 [ 79.568432][ T6885] ? avc_has_perm_noaudit+0x145/0x470 [ 79.568448][ T6885] ? avc_has_perm+0x135/0x1e0 [ 79.568462][ T6885] ? __pfx_avc_has_perm+0x10/0x10 [ 79.568488][ T6885] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 79.568505][ T6885] ima_file_check+0xbf/0x110 [ 79.568518][ T6885] ? __pfx_ima_file_check+0x10/0x10 [ 79.568534][ T6885] security_file_post_open+0xc4/0x210 [ 79.568552][ T6885] path_openat+0x5d0/0x23f0 [ 79.568571][ T6885] ? __pfx_path_openat+0x10/0x10 [ 79.568592][ T6885] do_file_open+0x20e/0x430 [ 79.568610][ T6885] ? __pfx_do_file_open+0x10/0x10 [ 79.568635][ T6885] ? __pfx_kfree_link+0x10/0x10 [ 79.568690][ T6885] ? _raw_spin_unlock+0x28/0x50 [ 79.568718][ T6885] ? alloc_fd+0x471/0x7a0 [ 79.568742][ T6885] do_sys_openat2+0x163/0x1d0 [ 79.568753][ T6885] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.568765][ T6885] ? put_files_struct+0x44/0x390 [ 79.568774][ T6885] ? __x64_sys_close_range+0x359/0x430 [ 79.568788][ T6885] __x64_sys_openat+0x12d/0x210 [ 79.568799][ T6885] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.568816][ T6885] do_syscall_64+0x123/0x790 [ 79.568834][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.568846][ T6885] RIP: 0033:0x7f6465f5fd8e [ 79.568857][ T6885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.568868][ T6885] RSP: 002b:00007f6466e1cf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.568893][ T6885] RAX: ffffffffffffffda RBX: 00007f6466e1d6c0 RCX: 00007f6465f5fd8e [ 79.568904][ T6885] RDX: 0000000000000002 RSI: 00007f646603641a RDI: ffffffffffffff9c [ 79.568916][ T6885] RBP: 00007f6466036b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.568926][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 79.568935][ T6885] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 79.568960][ T6885] [ 79.569236][ T6885] FAULT_INJECTION: forcing a failure. [ 79.569236][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 79.569260][ T6885] CPU: 2 UID: 0 PID: 6885 Comm: syz.1.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.569327][ T6885] Tainted: [L]=SOFTLOCKUP [ 79.569334][ T6885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.569346][ T6885] Call Trace: [ 79.569352][ T6885] [ 79.569359][ T6885] dump_stack_lvl+0x100/0x190 [ 79.569387][ T6885] should_fail_ex.cold+0x5/0xa [ 79.569411][ T6885] should_failslab+0xc2/0x120 [ 79.569436][ T6885] __kmalloc_noprof+0xfc/0x840 [ 79.569460][ T6885] ? tomoyo_encode2+0xfb/0x3c0 [ 79.569484][ T6885] tomoyo_encode2+0xfb/0x3c0 [ 79.569506][ T6885] tomoyo_encode+0x29/0x50 [ 79.569525][ T6885] tomoyo_realpath_from_path+0x18c/0x690 [ 79.569549][ T6885] tomoyo_check_open_permission+0x2af/0x3c0 [ 79.569578][ T6885] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 79.569612][ T6885] ? hook_file_open+0x245/0x8e0 [ 79.569633][ T6885] ? avc_has_perm_noaudit+0x11e/0x470 [ 79.569669][ T6885] ? __pfx_selinux_inode_permission+0x10/0x10 [ 79.569699][ T6885] tomoyo_file_open+0x6b/0x90 [ 79.569721][ T6885] security_file_open+0xb5/0x1e0 [ 79.569741][ T6885] do_dentry_open+0x552/0x1470 [ 79.569770][ T6885] vfs_open_consume+0xcc/0x460 [ 79.569792][ T6885] path_openat+0x1547/0x23f0 [ 79.569823][ T6885] ? __pfx_path_openat+0x10/0x10 [ 79.569856][ T6885] do_file_open+0x20e/0x430 [ 79.569884][ T6885] ? __pfx_do_file_open+0x10/0x10 [ 79.569929][ T6885] ? _raw_spin_unlock+0x28/0x50 [ 79.569951][ T6885] ? alloc_fd+0x471/0x7a0 [ 79.569978][ T6885] do_sys_openat2+0x163/0x1d0 [ 79.569989][ T6885] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.569999][ T6885] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 79.570022][ T6885] __x64_sys_openat+0x12d/0x210 [ 79.570040][ T6885] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.570067][ T6885] do_syscall_64+0x123/0x790 [ 79.570096][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.570115][ T6885] RIP: 0033:0x7f6465f5fd8e [ 79.570137][ T6885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.570155][ T6885] RSP: 002b:00007f6466e1cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.570173][ T6885] RAX: ffffffffffffffda RBX: 00007f6466e1d6c0 RCX: 00007f6465f5fd8e [ 79.570184][ T6885] RDX: 0000000000000002 RSI: 00007f6466e1cc00 RDI: ffffffffffffff9c [ 79.570194][ T6885] RBP: 00007f6466e1cc00 R08: 0000000000000000 R09: 0000000000000000 [ 79.570204][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 79.570220][ T6885] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 79.570248][ T6885] [ 79.570269][ T6885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.635968][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 79.663840][ T6889] overlayfs: upper fs does not support tmpfile. [ 79.786275][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 79.786295][ T10] usb 9-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 79.787214][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 79.787230][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 79.789371][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.789384][ T10] usb 9-1: Product: syz [ 79.789392][ T10] usb 9-1: Manufacturer: syz [ 79.789399][ T10] usb 9-1: SerialNumber: syz [ 79.795459][ T6881] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 79.797742][ T10] oti6858 9-1:1.0: oti6858 converter detected [ 79.804032][ T10] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 79.936880][ T6898] input: syz0 as /devices/virtual/input/input7 [ 80.073832][ T6902] overlayfs: workdir and upperdir must be separate subtrees [ 80.166643][ T6911] jffs2: notice: (6911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.218918][ T41] usb 9-1: USB disconnect, device number 2 [ 80.223647][ T41] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 80.223940][ T41] oti6858 9-1:1.0: device disconnected [ 80.565305][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.727879][ T34] usb 8-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.729128][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.729153][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.729171][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.729192][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 80.731624][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.731644][ T34] usb 8-1: Product: syz [ 80.731656][ T34] usb 8-1: Manufacturer: syz [ 80.731668][ T34] usb 8-1: SerialNumber: syz [ 80.734685][ T34] usb 8-1: config 0 descriptor?? [ 80.753118][ T6918] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 80.794114][ T6925] xt_bpf: check failed: parse error [ 80.856956][ T6932] kvm: user requested TSC rate below hardware speed [ 80.975314][ T5783] Bluetooth: hci4: command tx timeout [ 81.013684][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 81.135264][ T34] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 81.813207][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 81.813234][ T42] audit: type=1800 audit(1793087188.132:740): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.267" name="new_array" dev="sysfs" ino=65804 res=0 errno=-13 [ 81.850972][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 82.015577][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 82.015618][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 82.054697][ T42] audit: type=1800 audit(1793087188.372:741): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144217 res=0 errno=-22 [ 82.061054][ T42] audit: type=1800 audit(1793087188.382:742): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144236 res=0 errno=-22 [ 82.071671][ T42] audit: type=1800 audit(1793087188.392:743): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144255 res=0 errno=-22 [ 82.078921][ T6964] input: syz0 as /devices/virtual/input/input8 [ 82.080740][ T42] audit: type=1800 audit(1793087188.402:744): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144284 res=0 errno=-22 [ 82.090370][ T42] audit: type=1800 audit(1793087188.412:745): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=144299 res=0 errno=-22 [ 82.090395][ T42] audit: type=1800 audit(1793087188.412:746): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=144302 res=0 errno=-22 [ 82.090416][ T42] audit: type=1800 audit(1793087188.412:747): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=144301 res=0 errno=-22 [ 82.093517][ T42] audit: type=1800 audit(1793087188.412:748): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=144300 res=0 errno=-22 [ 82.093556][ T42] audit: type=1800 audit(1793087188.412:749): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=144291 res=0 errno=-22 [ 82.115235][ T41] usb 8-1: USB disconnect, device number 6 [ 82.142062][ T6969] FAULT_INJECTION: forcing a failure. [ 82.142062][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 82.142083][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.1.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.142099][ T6969] Tainted: [L]=SOFTLOCKUP [ 82.142103][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.142109][ T6969] Call Trace: [ 82.142113][ T6969] [ 82.142118][ T6969] dump_stack_lvl+0x100/0x190 [ 82.142138][ T6969] should_fail_ex.cold+0x5/0xa [ 82.142155][ T6969] should_failslab+0xc2/0x120 [ 82.142171][ T6969] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.142182][ T6969] ? tcf_action_init_1+0x27e/0x6c0 [ 82.142206][ T6969] tcf_action_init_1+0x27e/0x6c0 [ 82.142220][ T6969] ? __pfx_tcf_action_init_1+0x10/0x10 [ 82.142232][ T6969] ? tc_action_load_ops+0x1f5/0x3e0 [ 82.142245][ T6969] ? __pfx_tc_action_load_ops+0x10/0x10 [ 82.142264][ T6969] ? __nla_parse+0x40/0x60 [ 82.142278][ T6969] tcf_action_init+0x43f/0xa60 [ 82.142296][ T6969] ? __pfx_tcf_action_init+0x10/0x10 [ 82.142321][ T6969] ? check_buffer+0x13f/0x820 [ 82.142348][ T6969] ? __lock_acquire+0x5c0/0x1f40 [ 82.142364][ T6969] tcf_action_add+0xef/0x750 [ 82.142379][ T6969] ? __pfx_tcf_action_add+0x10/0x10 [ 82.142412][ T6969] ? __nla_parse+0x40/0x60 [ 82.142426][ T6969] tc_ctl_action+0x2e3/0x470 [ 82.142439][ T6969] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.142458][ T6969] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.142471][ T6969] rtnetlink_rcv_msg+0x3c9/0xe90 [ 82.142486][ T6969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.142521][ T6969] netlink_rcv_skb+0x159/0x420 [ 82.142535][ T6969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.142549][ T6969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.142560][ T6969] ? __asan_memcpy+0x3c/0x60 [ 82.142576][ T6969] ? netlink_deliver_tap+0x1ae/0xb50 [ 82.142590][ T6969] netlink_unicast+0x668/0x950 [ 82.142603][ T6969] ? __pfx_netlink_unicast+0x10/0x10 [ 82.142619][ T6969] netlink_sendmsg+0x9ac/0x10c0 [ 82.142633][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.142648][ T6969] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.142666][ T6969] ? ____sys_sendmsg+0xa99/0xc30 [ 82.142678][ T6969] ____sys_sendmsg+0xa99/0xc30 [ 82.142690][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.142703][ T6969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.142720][ T6969] ? lock_acquire+0x1d1/0x380 [ 82.142733][ T6969] ? get_pid_task+0x2a/0x250 [ 82.142754][ T6969] ___sys_sendmsg+0x190/0x1e0 [ 82.142769][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.142783][ T6969] ? get_pid_task+0x106/0x250 [ 82.142804][ T6969] ? find_held_lock+0x2b/0x80 [ 82.142824][ T6969] __sys_sendmsg+0x160/0x210 [ 82.142835][ T6969] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.142854][ T6969] do_syscall_64+0x123/0x790 [ 82.142873][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.142884][ T6969] RIP: 0033:0x7f6465f9f559 [ 82.142894][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.142904][ T6969] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.142915][ T6969] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 82.142922][ T6969] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 82.142928][ T6969] RBP: 00007f6466e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 82.142934][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.142941][ T6969] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 82.142956][ T6969] [ 82.204979][ T6971] FAULT_INJECTION: forcing a failure. [ 82.204979][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 82.205010][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.1.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.205062][ T6971] Tainted: [L]=SOFTLOCKUP [ 82.205069][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.205095][ T6971] Call Trace: [ 82.205101][ T6971] [ 82.205108][ T6971] dump_stack_lvl+0x100/0x190 [ 82.205142][ T6971] should_fail_ex.cold+0x5/0xa [ 82.205169][ T6971] should_failslab+0xc2/0x120 [ 82.205197][ T6971] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.205219][ T6971] ? alloc_tty_struct+0x96/0x8e0 [ 82.205245][ T6971] alloc_tty_struct+0x96/0x8e0 [ 82.205262][ T6971] ? __kasan_kmalloc+0xaa/0xb0 [ 82.205283][ T6971] ? __pfx_alloc_tty_struct+0x10/0x10 [ 82.205300][ T6971] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.205317][ T6971] ? pty_common_install+0x10e/0xb30 [ 82.205346][ T6971] pty_common_install+0x1c7/0xb30 [ 82.205379][ T6971] ? __pfx_pty_unix98_install+0x10/0x10 [ 82.205406][ T6971] tty_init_dev.part.0+0x9e/0x470 [ 82.205427][ T6971] tty_init_dev+0x60/0x80 [ 82.205446][ T6971] ? __pfx_ptmx_open+0x10/0x10 [ 82.205467][ T6971] ptmx_open+0x128/0x360 [ 82.205489][ T6971] ? __pfx_ptmx_open+0x10/0x10 [ 82.205514][ T6971] chrdev_open+0x234/0x6a0 [ 82.205543][ T6971] ? __pfx_chrdev_open+0x10/0x10 [ 82.205569][ T6971] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 82.205595][ T6971] do_dentry_open+0x674/0x1470 [ 82.205617][ T6971] ? __pfx_chrdev_open+0x10/0x10 [ 82.205644][ T6971] vfs_open_consume+0xcc/0x460 [ 82.205666][ T6971] path_openat+0x1547/0x23f0 [ 82.205700][ T6971] ? __pfx_path_openat+0x10/0x10 [ 82.205733][ T6971] do_file_open+0x20e/0x430 [ 82.205760][ T6971] ? __pfx_do_file_open+0x10/0x10 [ 82.205803][ T6971] ? _raw_spin_unlock+0x28/0x50 [ 82.205827][ T6971] ? alloc_fd+0x471/0x7a0 [ 82.205864][ T6971] do_sys_openat2+0x163/0x1d0 [ 82.205881][ T6971] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.205898][ T6971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.205932][ T6971] __x64_sys_openat+0x12d/0x210 [ 82.205949][ T6971] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.205977][ T6971] do_syscall_64+0x123/0x790 [ 82.206008][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.206026][ T6971] RIP: 0033:0x7f6465f9f559 [ 82.206041][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.206057][ T6971] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.206074][ T6971] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 82.206084][ T6971] RDX: 0000000000080042 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 82.206095][ T6971] RBP: 00007f6466036b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.206105][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.206116][ T6971] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 82.206149][ T6971] [ 82.208526][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 82.301929][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 82.355723][ T6976] FAULT_INJECTION: forcing a failure. [ 82.355723][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 82.355753][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: syz.1.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.355779][ T6976] Tainted: [L]=SOFTLOCKUP [ 82.355787][ T6976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.355797][ T6976] Call Trace: [ 82.355803][ T6976] [ 82.355811][ T6976] dump_stack_lvl+0x100/0x190 [ 82.355839][ T6976] should_fail_ex.cold+0x5/0xa [ 82.355864][ T6976] should_failslab+0xc2/0x120 [ 82.355891][ T6976] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.355914][ T6976] ? mas_preallocate+0xc22/0xee0 [ 82.355941][ T6976] mas_preallocate+0xc22/0xee0 [ 82.355964][ T6976] ? __pfx_mas_preallocate+0x10/0x10 [ 82.355988][ T6976] ? anon_vma_name+0x5a/0x250 [ 82.356018][ T6976] __split_vma+0x2f8/0x1d70 [ 82.356039][ T6976] ? __pfx___split_vma+0x10/0x10 [ 82.356065][ T6976] ? can_vma_merge_after+0x2b5/0x6f0 [ 82.356109][ T6976] vma_modify+0x137b/0x29b0 [ 82.356143][ T6976] ? __pfx_vma_modify+0x10/0x10 [ 82.356163][ T6976] ? find_held_lock+0x2b/0x80 [ 82.356181][ T6976] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 82.356216][ T6976] vma_modify_flags+0x2c3/0x460 [ 82.356238][ T6976] ? __pfx_vma_modify_flags+0x10/0x10 [ 82.356297][ T6976] mlock_fixup+0x4a8/0xc60 [ 82.356329][ T6976] ? __pfx_mlock_fixup+0x10/0x10 [ 82.356367][ T6976] apply_vma_lock_flags+0x390/0x500 [ 82.356395][ T6976] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 82.356434][ T6976] ? futex_wait+0x11e/0x370 [ 82.356461][ T6976] ? down_write_killable+0x14d/0x240 [ 82.356482][ T6976] ? rcu_read_lock_any_held+0x6a/0x90 [ 82.356503][ T6976] do_mlock+0x261/0x800 [ 82.356519][ T6976] ? do_futex+0x190/0x440 [ 82.356554][ T6976] ? __pfx_do_mlock+0x10/0x10 [ 82.356571][ T6976] ? __pfx_do_futex+0x10/0x10 [ 82.356596][ T6976] ? __x64_sys_futex+0x34f/0x4d0 [ 82.356612][ T6976] ? __x64_sys_futex+0x358/0x4d0 [ 82.356633][ T6976] __x64_sys_mlock+0xce/0x120 [ 82.356650][ T6976] ? __pfx___x64_sys_mlock+0x10/0x10 [ 82.356673][ T6976] do_syscall_64+0x123/0x790 [ 82.356702][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.356723][ T6976] RIP: 0033:0x7f6465f9f559 [ 82.356739][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.356755][ T6976] RSP: 002b:00007f6466dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 82.356772][ T6976] RAX: ffffffffffffffda RBX: 00007f6466226090 RCX: 00007f6465f9f559 [ 82.356783][ T6976] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 82.356793][ T6976] RBP: 00007f6466036b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.356803][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.356813][ T6976] R13: 00007f6466226128 R14: 00007f6466226090 R15: 00007fff4a0e64e8 [ 82.356840][ T6976] [ 82.630020][ T6977] ima: policy update completed [ 82.666770][ T6981] tmpfs: Bad value for 'mpol' [ 83.087705][ T6992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.500931][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 83.500951][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'. [ 83.628321][ T7005] nvme_fabrics: missing parameter 'transport=%s' [ 83.628337][ T7005] nvme_fabrics: missing parameter 'nqn=%s' [ 83.678283][ T7019] input: syz0 as /devices/virtual/input/input9 [ 83.732971][ T7022] kernel read not supported for file /policy (pid: 7022 comm: syz.0.290) [ 83.776610][ T7017] SELinux: policydb magic number 0x6b636f73 does not match expected magic number 0xf97cff8c [ 83.776707][ T7017] SELinux: failed to load policy [ 83.781296][ T7017] netlink: 508 bytes leftover after parsing attributes in process `syz.0.290'. [ 83.781343][ T7017] netlink: 508 bytes leftover after parsing attributes in process `syz.0.290'. [ 83.783394][ T7021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.095300][ T5783] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 84.163849][ T7037] device-mapper: raid: Choosing default region size of 4MiB [ 84.234923][ T7037] mdX: WARNING: ram9 appears to be on the same physical disk as ram9. [ 84.234944][ T7037] True protection against single-disk failure might be compromised. [ 84.234973][ T7037] md/raid10:mdX: unsupported raid10 layout: 0x 2 [ 84.234983][ T7037] md: pers->run() failed ... [ 84.235703][ T7037] device-mapper: table: 248:9: raid: Failed to run raid array (-EINVAL) [ 84.235720][ T7037] device-mapper: ioctl: error adding target to table [ 84.373516][ T7087] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 84.437166][ T7093] gadgetfs: bound to dummy_udc driver [ 84.637114][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.308'. [ 84.663466][ T7112] [ 84.664284][ T7112] ============================================ [ 84.666786][ T7112] WARNING: possible recursive locking detected [ 84.668836][ T7112] syzkaller #0 Tainted: G L [ 84.670837][ T7114] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 84.670842][ T7112] -------------------------------------------- [ 84.670849][ T7112] syz.1.310/7112 is trying to acquire lock: [ 84.677400][ T7112] ffff88802a8f9368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 84.681230][ T7112] [ 84.681230][ T7112] but task is already holding lock: [ 84.683822][ T7112] ffff88802a8f9368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 84.687558][ T7112] [ 84.687558][ T7112] other info that might help us debug this: [ 84.689904][ T7112] Possible unsafe locking scenario: [ 84.689904][ T7112] [ 84.692159][ T7112] CPU0 [ 84.693206][ T7112] ---- [ 84.694244][ T7112] lock(&sb->s_type->i_mutex_key#9); [ 84.696369][ T7112] lock(&sb->s_type->i_mutex_key#9); [ 84.698161][ T7112] [ 84.698161][ T7112] *** DEADLOCK *** [ 84.698161][ T7112] [ 84.700627][ T7112] May be due to missing lock nesting notation [ 84.700627][ T7112] [ 84.703141][ T7112] locks held by syz.1.310/7112: 1, last CPU#0: [ 84.705221][ T7112] #0: ffff88802a8f9368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 84.709720][ T7112] [ 84.709720][ T7112] stack backtrace: [ 84.711540][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.1.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.714919][ T7112] Tainted: [L]=SOFTLOCKUP [ 84.715137][ T3416] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.719605][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.722700][ T7112] Call Trace: [ 84.723749][ T7112] [ 84.724755][ T7112] dump_stack_lvl+0x100/0x190 [ 84.726387][ T7112] print_deadlock_bug.cold+0xbd/0xca [ 84.727967][ T7112] __lock_acquire+0x13f4/0x1f40 [ 84.729495][ T7112] lock_acquire+0x1d1/0x380 [ 84.731200][ T7112] ? blkdev_write_iter+0xd12/0x11d0 [ 84.733363][ T7112] ? __pfx___might_resched+0x10/0x10 [ 84.735042][ T7112] down_read+0x94/0x4c0 [ 84.736346][ T7112] ? blkdev_write_iter+0xd12/0x11d0 [ 84.737882][ T7112] ? __pfx_down_read+0x10/0x10 [ 84.739203][ T7112] ? filemap_check_errors+0xa9/0x150 [ 84.740863][ T7112] blkdev_write_iter+0xd12/0x11d0 [ 84.742439][ T7112] vfs_write+0x6af/0x1050 [ 84.743809][ T7112] ? __pfx_blkdev_write_iter+0x10/0x10 [ 84.745542][ T7112] ? __pfx_vfs_write+0x10/0x10 [ 84.747048][ T7112] ? find_held_lock+0x2b/0x80 [ 84.748509][ T7112] ksys_write+0x12a/0x250 [ 84.749864][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 84.751372][ T7112] do_syscall_64+0x123/0x790 [ 84.752813][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.754653][ T7112] RIP: 0033:0x7f6465f9f559 [ 84.756445][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.764251][ T7112] RSP: 002b:00007f6466e1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.767694][ T7112] RAX: ffffffffffffffda RBX: 00007f6466225fa0 RCX: 00007f6465f9f559 [ 84.770929][ T7112] RDX: 00000000fffffe38 RSI: 00002000000001c0 RDI: 0000000000000004 [ 84.774159][ T7112] RBP: 00007f6466036b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.777427][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.780650][ T7112] R13: 00007f6466226038 R14: 00007f6466225fa0 R15: 00007fff4a0e64e8 [ 84.783879][ T7112] [ 84.895134][ T3416] usb 8-1: Using ep0 maxpacket: 16 [ 84.895545][ T3416] usb 8-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.900065][ T3416] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.900077][ T3416] usb 8-1: config 0 has no interface number 0 [ 84.900092][ T3416] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.900106][ T3416] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 84.901251][ T3416] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.901267][ T3416] usb 8-1: Product: syz [ 84.901278][ T3416] usb 8-1: SerialNumber: syz [ 84.902353][ T3416] usb 8-1: config 0 descriptor?? [ 84.903632][ T3416] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 84.904030][ T3416] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input11 [ 85.107199][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.107378][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.107575][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.107742][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.107919][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.108097][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.108266][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.108450][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.108625][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.108800][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.109515][ T3416] usb 8-1: USB disconnect, device number 7 [ 85.109607][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 85.110448][ T3416] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 93.615197][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 93.615212][ C1] bridge0: topology change detected, propagating