last executing test programs: 4m58.13867329s ago: executing program 32 (id=496): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m49.801245693s ago: executing program 1 (id=866): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m49.582469811s ago: executing program 1 (id=869): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m48.712172324s ago: executing program 1 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m48.578515831s ago: executing program 1 (id=891): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f00000002c0)=ANY=[], 0xf0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0xe2) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) fchdir(r5) r6 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9361, 0x0) 4m48.501876197s ago: executing program 1 (id=893): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 4m40.901138522s ago: executing program 33 (id=765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x1, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 4m35.600560475s ago: executing program 5 (id=1001): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (fail_nth: 10) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 4m33.99859471s ago: executing program 34 (id=885): r0 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x3, 0x9100, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) umount2(&(0x7f00000000c0)='./proc/file0\x00', 0x4) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2ec5) socket(0x1e, 0x4, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) 4m33.952137911s ago: executing program 5 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m33.791172169s ago: executing program 5 (id=1005): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x80086301, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000001541}) 4m33.732024963s ago: executing program 5 (id=1006): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xb, 0xd2f]) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0xf}) r1 = accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000001c0)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xeff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000805) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000340)={0x200, 0x8, 0x2, 0xfffffff9, 0x9}) fcntl$setpipe(r0, 0x407, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0)={0x5}, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)={0x16, 0x0, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x72}]}, 0x10) r2 = memfd_secret(0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) setns(r0, 0x40000000) ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000440)) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000480)={@broadcast, @rand_addr, 0x0}, &(0x7f00000004c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000500)={@private2, r3}, 0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x6a, "0674ee1bca5b70d1bd3bc9f643bf344f4cce1eef1ed7732a88ad9fa4d00c5c333785e875de5a900dfee4ceafac15e9360be1af82b7d875a1fdd866004c756ff044e55b92f937d106b197dd9adde68e1942a4dca62e3b6d94b710ceb4196d8fd31f0deb3ac5b638db5dfd"}, &(0x7f00000005c0)=0x72) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={r4, @in6={{0xa, 0x4e23, 0x7fffffff, @empty, 0xe60f}}, 0x6, 0x1}, 0x90) syz_extract_tcp_res(&(0x7f00000006c0)={0x41424344, 0x41424344}, 0xf16, 0x100) syz_extract_tcp_res(&(0x7f0000000700)={0x41424344, 0x41424344}, 0x8, 0x8001) syz_emit_ethernet(0x1329, &(0x7f0000000740)={@remote, @multicast, @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x7cd, 0x0, 0x1}, {0x6}, {0xfffff, 0x0, 0x1}], @ipv6=@tcp={0xf, 0x6, "652511", 0x12e3, 0x6, 0x59c0b072dc5a81d8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x87, 0x23d, '\x00', [@generic={0x9a, 0xe1, "9f69141f746a885a9cc8f791417b75bbec220aee5e6cd452e7c45e28fd99d82e86749ff22137b2bfedfb7ed929e8db40726f1bb351741888dbbd4e88dfd17fe5999f391e9b66a80175179690de6a0e08a4915d8257dcbc8983150a2257859520c580a0478aadbebd886c8dd2abf23de90df49972388f3cc954551d025a1038604509a8423206d954dc40a63a4a015ff4ef9f55ecceeaaabeef05d977ccbb25fd3267ba9f49227161ea2686579075e21fdf1c3e8da19cd30ba6834199644505d99115d94c32dc3494e47b424e3cedac65a03888b47c1283360604238843c5ab980d"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xec}, @generic={0x7, 0xe7, "10799dac44866bd4a597a061370dd8f002240d4749fdad8d293129f9cd347a20570df80e72d6eefe84ec6ea5b78eda90002d5d4ff61b9bf039c0f25095251bac007ecbad3132a838392390f441c6469adcb16c320ebc37341e047542374a634cc8f180860ad0d1c083856897bbcc5575573750c8278ff80326ecb3f566de0149978b4ae10d0a568a7cf082666871ba943d4344eb6f00d93e92e1b5a1465e2ad858ef47f00f60bef028f2227600f1c706553944599b03d4606c71038d2bafca44547c30b18ba48e022d86cbe376d6efeaf2a60e2ca72bb46e7c5e1a7de1378eec1478087b2a8de6"}, @enc_lim={0x4, 0x1, 0x6d}, @generic={0x28, 0x1000, "761f77f9b4b3ff7337482a2fa2ddc174c7536659fa142a55c70c21b17bf95f8cffb83d2ed5d348226a91d9d752e26725a0e4397e09670cb2be70d5695d985dffe8234c8e0d007551d28654305b41ad10ac3367fd86fba8cd1d5660a53d8c4193dd1c14351f32d671e40a870ff92d4a3d1e7657e2a15e82c0337adb23d3c86201fffa2383ded744d3c30ca2b0ebed2001bfc5e17bda7df36ace3d09cf098830b365ccc3d8d78c6ee6b25bccc62d4f621d63609a3ae5974874be97496626f64ece93002b1b924e495d32f5cdddb00ef7b7f1062452ac4f11cf013bee3af73160ae1fc4b5f16b70622381e3d880fd48b6c98d977ac3eae0d11e1b515c576b34215938bede643a09faf719ee9a0f77ad1494299c1daa606e534996a9aa1455283552eaa973457638a2cbf19b17c834bd93c4d20591cf44ae1f7bff9e26bd529531a3124d4ad9b6921b88c541a7db6d8120a1c594bb5ae1354d44b9f0f3d6082410de0b4e87d6ee6d0c216bc99ae6101132d8343f54220e0f34fa7f2b5385bd87567b6718448c5cc2b68fb841ecb211d24c4f6fa4b2b25e6ed772301203bd4cdc26e1f40f5a0796867d72367c6f3b7841c153445a0d8a1f72682052e56a88fe616d6693a598e49e31603af445a21a37e67ad3372abbf87007a681aefa1d5dd5b434e46be66c0254f5e69c19e349f89081ae5130852c26ab00aea6686d53d95a3bda987e2eded9edc338c0660c60bd165b5d137cafbfd02b415f333b728a9de4d71a8597b7c7cc74a5c3cf7947344fa25855bb1ece204935612b49da1d42427ca33af2de50e6c95d30c397837ac9b4a462cc908e87e8fee8dfc15f65e4b37b7835f097c03c8d6f0ee0a8848de31f95b4ca99d73272a781ea18c2d32d8d7b16e0709e3290726d2af556319e8c5803a66824acf760a0974ef3687574008daa4a4a6fd13572bc32bfb3d3c0aaf985435ffff9ecd2155c0ce1023e549bc99621acc8b9d59e70598f2cbcf5e34d2ad9f564b6489f8cddeb883a4320f294b4d06875e29ae879ce5aae99cfb5db698d50aa094af6b6f3aa4c62477f4860b5da23b35280c135131ef35e04b31ae6610234338029bc593df91869c4713637f758af7287b46429f013a7ca511f759e912908503aabdb8f0b8cbb0a731c8674c50b68822c810306757fd3bf8cba9884ad2cb39e408a336cc78a5913d1a92e4edee8e0d134e9c5bc044e6ceb2208e3d6da4efff32b288cc91933dee6edde612a3e2e38f774beea1d8481a5b81eba8de4b46f4556afd4733470372241b1d815d1303db316563b99c8be44aa7a4de00ff13ab6a76918cb6b1097c92e1713f50018799aec5c4c830fd8f7219c32fb4f0e60c065647d32befa910addc47b9e3cf0ef63787e5eb3eb0dc406a42177e5fcf9b0abd6a1827a482eea581d800c0c08a7270b7c910ef6e571d8aa030553f9cdfdba97324a5e2b944115796d2b7d7e761c3a38476cbd32e29623ede392fd07f6d2712c3cfbc9aa6e2e38611acfa03b59c5f74d8b466526efe0bffbf2f8bd5e6903238ea8546013ae2f5537fbacfa6a8c693eec1a808df87b65cbebf668330194e2efb4ea499de78f46d938b40d3d17636717114dd89cd703431161d1fbaa5b93a231a48662889acd13a53b52a2efed7fe6d6bfd2b188d2530e6613c01deb9ee19bad55aa0667bab8082956462ca9622da16e561e6a22e24dbb03d1d3579e25f49d85a65db98210161de60b6ac91e1d1312e28e4ee07a5da25c2d227c4bee71f46e8f7cbc7b24c6d7970424a63b706b4d716db03981ebcde919645d155040bfe0c9512091c0f00df0d144ed0610e656382298832d53f727e469e085d2fd583a735a6964123cd1747a812300d86bcc4028e86726fca471ac4556a707bbc9696ff0342f859d3650b01da5d36947553f3da6cab8fdb25ba6e0d4e342732b59b0ad8572ca41214e00b6b5d5a2c4045f2da437ccd948645dd0514cb936ece07e5f5c8d02f9401a9d1348b2934e9e1cdb6fc7e108673c0c098f099ed389250f112eaa860494027270f11206c0d5f06cd3ef95cd307a95357c3a5180740d78c3324fb146037bbd5612954b6e17d537afba457c861edcb3df552d40fa33a168b122e7d9aaf8c651d3a4904fd1d7cc6545bdfcc786c69ecc2fd3d16060a05649cf2189507a3fab2457a299b738fab02e8b2c6435c0f842eb0ded0c731cc9c96589380b356498e2fde7ab85b5227673be4a4e9b942a63bee2e271efbc813e88c7225050c839d8943dc77f1eb9db2faec487c8d572161840ab16ac2d3522f54fd66e9b4e0d3a6161ea4810863a21e95db09fa8d727cabfab12addf80e34cd8c2865601672377a9f916432e083e80851a51bc80bab8218550848780c30328728e4196da39d9ca05960f906c1c3d38f40a84d1097cbb13c5f1ae83ff696d77d1abcc599fd58377bde465dfd364c99759adc185004ab3195d15c996f3e9998e8078a7325a16d81fb7c3631667effb54a06ff40aa01067c080b799025c77e35d37ea8d82305cdd63331b49d3978d8a6889f79d757984b7f2e996ca8e7a85e7733bcc8485295158d2459ea0a48ffe229103d4332ea8551f47462630dd620828114f98f00939c09002badf7a5e0738c75385632f0392bb9e39a788cdbeb24c08d33f8cc315c788b53b6839d16c06b91d0766e255e755f18630d2e48f3e3f386ba4026f30adf7e34b813324bd4e7e53fb656fd89bf22341900cdecff5bab4da4d94278cd61a26f0aaed500aeebbd730e1a8fcdcd696d617e0a38302486b374cf0217b6836de82b7012ede0612fc83b51e421a96af2b86440c50510548c2af25b182ce468e40e55cd8b6129e2f66aa3c9c2cdd1e9582a221f8e086f3cf6ca5708eceddc57e06394b966b54832a0af46f7da33328576071c62a0ddec951c60de80efe7501bbcfc52bcaba6da7eddc24c6f3fe49727c3fcaa6d777aff97df5d2d0f856336b85561681ff170e97fad56db1daffdeb4deae05014757a1870f4d2f679868aace33508de236dee5cbe070576a8403846e17ef79fc49ae7e5346bf787ad6e7d1cc6c8ef28a561f13cfcc3ac4f45ae118c0b97f498c0daf3f16062f3e3bd439ed37fbeb43eb7a68a01b9675d96db57c43ec149ef09807c22efc209ae80d52d6f8d34b71e5e45141046d4b59f2726eda7e2b07deb5a981c1d9f0b4f27d6702f604a1edb093a9bbb549674877caeea5379d1f030ffa9e7e5d069725b02aad650eba1fb56fbc7bebfd7796843b89e3a983d961978783f45e5c5c0206297362e74f4eff81f736f53ee7f243a8252bd77f68ac3687bb19794427d0373de0c5bd557477f0a5d655a3c58f3b130fe5e5cd2499c5277626667d417fcea89a574c510f12ea6b370e0ae3647b72eb5aa6dbb9d0225f4744add444d42075af5a5bf53fddc0cf08f34140d1cf8e4c1ef8d6bd9b0bd9bb04fa14e311d29d4644ad2f42ec06aa7a09c9f33fd98ec88fba740e67068f5a9d1c3b8da7e22522f16dda49c1e240f5090601db27a5d36ffcff6827540614b9b94ebaa0636c14242693ac8a915d167049afd8ffc2012bb5e5973f334578cc72cf9f9410f223b69a853f22fc511883cdc3733a29ffa58bce67f452fde00b5661eb90b58c879d1e6e00bf02bb88790424eb0f3f193e85223d636fff8adf92a401e5fe2b083b42468fed3b06584adc5a4eaf3a776d18f12f56c6009ee81c62e932930c7347f84d844b820a80b555749c025e442daf71fde99602f8b28fc6c9f4423a41cca9d535f14244c4b1688eeab845241a170ad89fff42c7628b7e21e93e26334b48bee718497f87ca14cba6b5f23e45415b1196e329e13541191ae11cece45f58b7cff48630304f9e08a476006e3929d16dc970ddc00aedd2dd32b346e5c46320f67ad8705452c342bfe0a12aede58525dcad2bba8b28f4f3cd707fec3f2f31032e228bcfb06acbecc67d6e1ab2baaaca8bd7fc6d8c56b51bb4fc6a0794c6bad8122ac20668b9ca888f3b0a33e24f3536029b70d9df22dc4b19f42df754834ff3eef5c2c046fb2e18617cf1e288a9a3d3aebeb1f7f88ff735b2d046f013f76db249710b964f36eeebb0c8968170a451487c2fc2e34afbe207460998fef77664f6cbb0a3d0594599082225f1ad194342bc38029f131de386ede9dd3f0e52657cacd631831cc7d0790542513b765db517d8229d62aca7849297aff999ca4eb766bb67c18ed862f889cf98656cf02fd64f9667c2b25901a31ba944e45e4622ce806d7e420e44fe36ba472ed3719007b5cd5762374ca8ffa070bc197c7bad04a9ea803ac0bffd57d16ca122105d8696ba38faf76dfb1a983f2540fa2d84fe744fd7e65732b9218f7ec4906476deabfc9dcdbcb439d0957664b932afe3411fec9b9ef0d6660785fd05b689d6ab5244689d3228f3b0f7ed752b936d4ba6f5be55584937e3a1e268917dcf1a3203e8c9bdd76aa8dc48169665b62b40e991d4ece35b3507d403cde0524abbe4c2ce839d23e386a40f0a35c60ebcb5989302b795affe416dc47444e5a30a1f8c4634b99a5c019ff319ef23b3738dd017ed5fb325a9f1c28a201aebe6f82a8f134c056e36cdadfb946ad9be786e65f13b5e5e2f603369171b403cf7a49c4668cd12d3cf168b46e8987756e10d87c59846c650bcafb73a01151549509627876b8588bf326deb49ea4591d0a3e8df8c1285bc042d4a6af513f0caebf42c4ae7dd2ee4712ef2379d2144b0c8107a2c7d51a2c217bcc46f5fbec4368caa24e73aa67812500d2e0472c07b9e012092adf1f983fa5697927499a1604a7f80a758411759ebbac1a7780023d40fe00e6fbe479983169d0a7d9078af7cd39e4f7e502f3eba7bf3c4b63c189137a345dcac032f96d4d9f0c6d72072d77599d2ca7cc23cd4161584e5403f52d2f02c766b3d759a40d15d8d24cd91cab4e864248672e9617880e083e024c9fb393fbae2fe35e1da31d51ce40465ad31a3c7450eaa18be076e1461500b48a47525501ddf4f1488223452aa51e2217b08f2bfc9fa73a8dd01cbdb9701c71a65ce1323b377f6f71bba1e1b7e228a81255204520720a906e1685caaeb28f55c20ba8c7ab27d45f5d06691221242b750c0b80b9f86be0c0eb0e6c47f7534a8c3793db620fb8334aac558f6c0f58efd11d8eff2fa3b5dff77641a931c9358dc2e4cac9398ce469a18e67e8112876fb836f750e67b07c8019ded83d7fdf9f548071b5e3463b6a334c6e30a61ee9ebd12b152da09689daacbdab2b9b96c802b342e74539bca2590c03fa755a920bd0a423a99888ab6910edefdbb44b572d54557e2a4fc7390317bbbeb2815a26212b570c380fe020e4287c351809cbff4a49f82274833d5b3d17bd5b8d473a0011618e5ba47e5e3eac462c5f21fa7ae7b8664eb3f231bfb0baeecaee635ae19b93a4b26700b2859333d9e5dee22aacd6a20ec58572e21e66e2cc598176cd2a4ba091a8928c538d5ccb7a921e23c3833a3f6e1594397a95083f668cc94d4492c8bcf32e460fe7a53cc6a4b1a5c3131dd7f7f27fce95ac23583cbdf46de04769f4f20c0a246245f9d5e84c272e400c4ac6583b562f0d31894974318432d1a3e259915b6b9b866da226bf061c81c008a82743eabeb17231355a769be3d79ccab3cb3c218bda9c716b4e54aa6381980bfaf95db7eb1bb3bbc5d99969f7d9c4455c8cb0fe0c3e75b5479462e81fa0b1a67d01d55d76caddc1236a6541f33c781177198e46a77a29a20a86e859bf797f4a989b686fb59250d19d60f60"}, @generic={0x2, 0xb, "08ab317d0ad8036030355e"}]}], {{0x4e20, 0x4e20, r5, r6, 0x1, 0x0, 0xd, 0x10, 0x4b, 0x0, 0xffff, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0x4, 0x10000000000}, @exp_fastopen={0xfe, 0x11, 0xf989, "161dc201b1da4fdbc9b8434a91"}]}}, {"a73a0622a9dfb81b555027f414dfbe9bcdbe7932f51dfa1def240c8e74f74a78033cbdc306160e91046835a1935fc7d00c9f460a565bae822ce4bf1f9702d2360494b5a80b22376461973d6b1f1c52c1c157e7de458fb730ea6247dd157c556eda6888be87e57ad4501ffae5803a84f1c41998ecf535eaceff45db9eed9eca47c0c936f2ad97cf671d3e2e5c7f42d14f51608dd67a7d6835dceb2087adea1041afaddef0ee6e54aa9ada8d55db8848248ad14c9b395d85baa6528eb2c9c0dc"}}}}}}}}, &(0x7f0000001a80)={0x1, 0x4, [0xfd1, 0x104, 0xadf, 0x3e7]}) recvmmsg(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001ac0)=""/68, 0x44}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/140, 0x8c}, {&(0x7f0000002c00)=""/234, 0xea}, {&(0x7f0000002d00)=""/165, 0xa5}, {&(0x7f0000002dc0)=""/226, 0xe2}], 0x6}, 0x4}, {{&(0x7f0000002f40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004400)=[{&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000003040)=""/250, 0xfa}, {&(0x7f0000003140)=""/132, 0x84}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/106, 0x6a}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/173, 0xad}, {&(0x7f0000004380)=""/100, 0x64}], 0x8, &(0x7f0000004480)=""/61, 0x3d}}, {{&(0x7f00000044c0), 0x80, &(0x7f0000005a00)=[{&(0x7f0000004540)=""/112, 0x70}, {&(0x7f00000045c0)=""/58, 0x3a}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/174, 0xae}, {&(0x7f00000056c0)=""/106, 0x6a}, {&(0x7f0000005740)=""/50, 0x32}, {&(0x7f0000005780)=""/201, 0xc9}, {&(0x7f0000005880)=""/68, 0x44}, {&(0x7f0000005900)=""/236, 0xec}], 0x9, &(0x7f0000005ac0)=""/193, 0xc1}, 0x100}, {{&(0x7f0000005bc0)=@nfc, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005c40)=""/15, 0xf}], 0x1, &(0x7f0000005cc0)=""/250, 0xfa}, 0x1}], 0x4, 0x2, &(0x7f0000005ec0)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000005f00), 0x3) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) ppoll(&(0x7f0000005f40)=[{r0, 0x1692}, {r0, 0x2}, {r1, 0x5419}], 0x3, &(0x7f0000005fc0)={r7, r8+60000000}, &(0x7f0000006000)={[0x3]}, 0x8) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000006040)=0x4000) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000006080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000006100)={0xffffffffffffffff, &(0x7f00000060c0)}, 0x20) 4m33.104871522s ago: executing program 35 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 4m32.888570795s ago: executing program 5 (id=1008): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x79d4246e, @mcast2, 0x40}, 0x1c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0xfdef}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r6, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2a, 0x21dfdbfc, {0x2, 0x18, 0x49, 0xff, r1}, [@IFA_FLAGS={0x8, 0x8, 0x6c0}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x28}}, 0x24008044) syz_emit_ethernet(0x82, &(0x7f0000000200)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) 4m17.751261528s ago: executing program 36 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x79d4246e, @mcast2, 0x40}, 0x1c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0xfdef}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r6, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2a, 0x21dfdbfc, {0x2, 0x18, 0x49, 0xff, r1}, [@IFA_FLAGS={0x8, 0x8, 0x6c0}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x28}}, 0x24008044) syz_emit_ethernet(0x82, &(0x7f0000000200)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) 4m12.284622686s ago: executing program 6 (id=1287): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x100000001, 0x0, 0x0, 0x7, 0x0, 0x5, 0xfffffffffffffffc, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x500) 4m12.168138871s ago: executing program 6 (id=1289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000122000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0xea, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000440)={0xc480000000000000, 0x2, 0x8, 0x4, 0x1d}) r3 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8, 0x0, 0x0, 0x0, 0x40, 0x80, 0xfd, 0x0, 0x0, 0x0, [0x0, 0xffffffff, 0x0, 0x4, 0x8, 0x400]}}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x66}}, './file0\x00'}) connect$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x8}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000140)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9e, 0x4, 0x10000000, 0x60, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd1dbb33b56561cf1, 0x7800, 0x5b, 0xfffffff7}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r9, 0x25, 0x2, @val=@perf_event={0x401}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m11.258904005s ago: executing program 6 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000014"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m11.05649156s ago: executing program 6 (id=1302): socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000040)='\x8c\xeb\x80\xe3\xa6\xebf\xe8\x869\x83\xe6q\xfc\xe0jF\xe7\x83|SP5\x11\xa9\x1e\xc4/\xe8\x81\xd2', 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) 4m10.991651158s ago: executing program 6 (id=1304): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001042dbd74000000000000000000", @ANYBLOB="4b02060025210000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) 4m10.330823823s ago: executing program 8 (id=1316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed45"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 4m10.330407038s ago: executing program 8 (id=1317): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000140)={0xffffffffffffffb7, 0x0, 0xc9, &(0x7f0000000040)="5210d71596e8aee2ee63fe1edf1a88e0f911ceec281c975ba5d519514b190df5e9ff8a219ac9f604f7d776a1f3af4a5590872c91cd7ca0238c93c32537a4591c29ff6f269dda35b467123a5061cc3c6dbcfd60df96a4224a727d65caa365af683a24efb333f638bfbad5cfea11ad2dcd8937b08b2e6be50a6a34f241238e68180808355b8fae6f7c8a86260995a35cc86ec08a9d58426299dd4510b94792d4858ff3894cc4552b1b8669d8dba778454011eb764e2fc06f1831808c8fca66594630147207fd14a6faba"}) 4m10.330326712s ago: executing program 8 (id=1318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r1, 0x2cb2765a9d7889ab, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404088c}, 0x0) 4m10.22057226s ago: executing program 8 (id=1321): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xffffd200, 0x9}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x70, 0x16, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x3a, 0x6, "91870612f723ba39cde3499fb458b27d5b8cf48b273d0adc6dc55cab092f97fa82cdf53d9abb5814284535ea68dabae11cee5a860714"}, {0xc, 0x7, {0xf2252c54eb766759, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xd4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000a000000900004800900010073797a3000000000"], 0x24}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0x4000, 0x1, 0x3c5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r7, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 4m10.112887974s ago: executing program 8 (id=1322): r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 3m55.598439735s ago: executing program 37 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001042dbd74000000000000000000", @ANYBLOB="4b02060025210000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) 3m55.041534622s ago: executing program 38 (id=1324): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 1m12.020087513s ago: executing program 4 (id=3740): mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000240)=""/254, 0xfe, 0x4313) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x100, 0x5, 0x300, 0x9, 0xe, 0x1, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0xfd, 0xfffffff8, 0x9, 0x3, 0x7fffffff, 0x89, 0x7ff, 0x0, 0x20001e58, 0x7ff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff7]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000380)={0x4000000, 0x0, 0x0, 0x0, 0x2}) (fail_nth: 2) 1m12.019901516s ago: executing program 4 (id=3741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m11.907603739s ago: executing program 4 (id=3743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e23, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3}, {0x800000000000, 0x3, 0x1ffffffffffd}, 0x1, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x7, 0x2, 0x3, 0x9, 0xfffffff9, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m11.839534311s ago: executing program 4 (id=3744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000380)={{}, 0x1, 0x65, 0x1}, 0x18) write$input_event(r2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x4}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000905000300000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m11.62241424s ago: executing program 4 (id=3748): mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000040)) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./proc\x00', &(0x7f0000000280), 0x2100000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(r1, &(0x7f0000000300)='net/xfrm_stat\x00') pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/246, 0xf6, 0x11) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x100, 0x5, 0x300, 0x9, 0xe, 0x1, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0xfd, 0xfffffff8, 0x9, 0x3, 0x7fffffff, 0x89, 0x7ff, 0x0, 0x20001e58, 0x7ff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff7]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) kexec_load(0x0, 0x2, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x3e0000000000}, {0x0, 0x0, 0x0, 0x10000}], 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats={0x19}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='maxtcpc 0', 0x9) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000380)={0x6000004, 0x0, 0x0}) bind(r5, &(0x7f0000000740)=@qipcrtr={0x2a, 0x2}, 0x80) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x8, &(0x7f0000000180)) sendmsg(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0xa0}, 0x40c4) fsetxattr$security_ima(r6, &(0x7f0000000180), &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYBLOB="b06dc30b0222640a213ff0b0593aababc4c879babf76191165e2e27e522649b31a3df4299f87f5"], 0x3, 0x1) 1m11.509702741s ago: executing program 4 (id=3752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x3, 0xfffffffc], [0x1, 0x0, 0x7]}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000540)={0x3, 0x0, [{0x26000, 0xf9, &(0x7f0000000200)=""/249}, {0x4, 0x3b, &(0x7f0000000300)=""/59}, {0x8080000, 0x94, &(0x7f0000000480)=""/148}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 56.458016772s ago: executing program 39 (id=3752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x3, 0xfffffffc], [0x1, 0x0, 0x7]}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000540)={0x3, 0x0, [{0x26000, 0xf9, &(0x7f0000000200)=""/249}, {0x4, 0x3b, &(0x7f0000000300)=""/59}, {0x8080000, 0x94, &(0x7f0000000480)=""/148}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 40.755013265s ago: executing program 9 (id=4188): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./proc_mnt\x00', 0x3) r0 = syz_usb_connect$cdc_ecm(0x4, 0x179, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x167, 0x1, 0x1, 0x10, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "a67a0a05452a"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x4, 0xd189, 0x77}, [@ncm={0x6, 0x24, 0x1a, 0xff1c, 0x22}, @mdlm_detail={0xef, 0x24, 0x13, 0x7, "4a12ea7929c80120fa92ec191abb23f4a8f54ec2c777e167c94c6d05168b566aef8038ff6c572fb309fb4d540971bd4325dec5bd440439336a7d9b47fdbf430882d7d41fb60abfa37048d608ed3c0bd4bd6cc4d85045c23c39d68fc0126ae5a5fc1c7f7256745ada272b737477af360306563c9ab5e7ad0de7ff1c12bf3925a26b51141b1022f9ce17e981b2549f665af48c9004be1b30c882312e6ce3abce7148533591fd62076f52cf6fb8270a7a12f7ea898d60cbfdfe95fe2490ca5003f0292b2873839c21fc8097cf8c71a211308a24ea738c169f3bae9b07fa89b5144c8f395c953f3cdb17c6a3ac"}, @obex={0x5, 0x24, 0x15, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x6, 0x2, 0xe}, @mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x2f, 0x7140}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x3, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x40, 0x21}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe7, 0x6, 0xff}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x2, 0x3, 0x4, 0xff, 0x3}, 0x24, &(0x7f0000000500)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ff5fef1a26eaf5561b4d63d9a5bfffcb"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x6, 0x0, 0x6, 0x4}]}, 0x7, [{0x35, &(0x7f0000000540)=@string={0x35, 0x3, "48732aae6810892e56fe93b6910d2f15e92c439cce736c19febc23b3850f0f4ca145ad43bead9e949f09802db103304b750aa8"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2413}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_disconnect(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt/asound/pcm\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x100) r2 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x7, 0x20, &(0x7f0000000140)="2c4f597efd9201275084a3880c4f51433408662e31a0f0af5c4d9214cf8faece") r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000220be04020506056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 37.677447371s ago: executing program 9 (id=4232): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) 37.6488683s ago: executing program 9 (id=4234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x14, 0x4, 0x0, @broadcast, @remote}}}}) 37.554398056s ago: executing program 9 (id=4235): setgroups(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0xa00000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2e, {0x2, 0x1000, @local}, 'ip_vti0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0x5207, 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) listen(0xffffffffffffffff, 0xfffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(r2, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) getgroups(0x1, &(0x7f0000000280)=[0xee00]) syz_clone3(&(0x7f0000000780)={0x800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) setregid(r5, r5) epoll_create1(0x0) 37.44078593s ago: executing program 9 (id=4238): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) close(r0) 37.015309123s ago: executing program 9 (id=4239): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r1 = dup2(r0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r4, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) read$msr(r1, &(0x7f0000001100)=""/4096, 0x1000) 36.924906158s ago: executing program 40 (id=4239): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r1 = dup2(r0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r4, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) read$msr(r1, &(0x7f0000001100)=""/4096, 0x1000) 2.46359938s ago: executing program 3 (id=4683): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000200)='\v'}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) listen(r2, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) accept4(r2, 0x0, 0x0, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 2.031088407s ago: executing program 0 (id=4690): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='aio\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.03052714s ago: executing program 0 (id=4691): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.945000801s ago: executing program 0 (id=4692): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) (async) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0xa, &(0x7f00000005c0)=[{0x0, 0x45}, {&(0x7f00000002c0)=""/35, 0x23}], 0x2}, 0x7}], 0x2, 0x40000102, 0x0) 1.835212043s ago: executing program 0 (id=4693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.595405572s ago: executing program 0 (id=4694): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0xff}, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x0, 0xe, 0x80, 0xfffffffd, 0xfffffffe, 0x6b88}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x0, 0x201, 0x1c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00020004000000010000b000ff000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000340)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6201, 0x100) 1.484183391s ago: executing program 7 (id=4696): getrlimit(0x7, &(0x7f0000000040)) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xb, @pix={0x800, 0x3, 0x20363159, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1, 0xe, 0x1, 0x7}}) setrlimit(0x6, &(0x7f0000000200)={0x6, 0x6}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50010000100001002cbc700000000000ff0200000000000000000000000000010a0100fe0000000000000000000000000000ecdf000000000200000000030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x44050) 1.255065581s ago: executing program 7 (id=4697): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0xd846deb6531cdeab}, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="40000000101402002abd7000fedbdf2508004a00000000000801010000000000080015000100000008004b001300000008000300020400000800010300000000c989195b21d12d02eb87b98e254ef8ef1a9947ed61597a090c86dece43d77392c7f249366c013d26b49372f08c956a156df19f959f04bf3fe4aea0d168eaebbda78b828809a8d70e63bbc3c97f01265429e2b20b6984889b32ac31cbd9cc18a86a5b2b9b99a6863cdd4105e9d599f91e9c6b38c9ae747ea4e015394ef65c09f1b91f7ada6aa1a9"], 0x40}, 0x1, 0x0, 0x0, 0xca718d62fee01fd1}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0x800040068], 0x2ffc, 0x557c1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) 1.104993879s ago: executing program 3 (id=4698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x1, 0x0, 0x110}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) (fail_nth: 9) 1.103942568s ago: executing program 7 (id=4699): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0xfffffffffffffd14, {0x2, 0x4321, @broadcast}}, 0x24) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000200)="0100000000") ioctl(r3, 0xc048aeca, &(0x7f0000000300)="0100") recvfrom$rxrpc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0xd, 0x10, 0x9, 0x800}, &(0x7f00000000c0)=0x14) 1.103829378s ago: executing program 3 (id=4700): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.013252261s ago: executing program 3 (id=4701): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='aio\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 914.447869ms ago: executing program 3 (id=4702): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x524, 0x0) io_uring_enter(r0, 0x2219, 0xb4c3, 0x16, 0x0, 0x0) syz_io_uring_setup(0x4f95, 0x0, 0x0, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000) 914.138533ms ago: executing program 7 (id=4703): mount$overlay(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303fa020303315ba6ad7edaa1200000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ata_device/dev1.0/id\x00', 0x0, 0x0) read(r5, &(0x7f0000000200)=""/1024, 0x400) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110095010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket(0xa, 0x5, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)='0', 0x1) openat(r8, &(0x7f0000000600)='./proc/sys/net/mpls/platform_labels\x00', 0x36bc83, 0x23) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x200) 315.762505ms ago: executing program 2 (id=4706): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe800000000000000000000000000088000300004e220000000000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000202700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001240)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001480)=0x14) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/power/pm_debug_messages', 0x101902, 0x101) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x6, 0xf3, 0xc, 0x1, 0x5, 0x79, 0x3, 0x1ff, 0x100, 0x1000, 0x5, 0x6, 0x80000001, 0x0, 0xfd, 0xfffffffc, 0xf3, 0x10, 0x8, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x8000003, 0x6, 0x8000000c, 0xa6b5, 0x4, 0xc25]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1f, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860900009500000000000000"], &(0x7f0000001300)='syzkaller\x00', 0x4, 0xd5, &(0x7f0000001340)=""/213, 0x41000, 0x24, '\x00', r4, @fallback=0x2e, r5, 0x8, &(0x7f0000001500)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x3, &(0x7f00000016c0)=[r9, 0x1, r10], &(0x7f0000001700)=[{0x2, 0x2, 0x0, 0x3}, {0x3, 0x5, 0xa, 0x7}, {0x3, 0x1, 0x10, 0x6}], 0x10, 0x3}, 0x94) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f0000001800)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 215.659001ms ago: executing program 2 (id=4707): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x36, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 215.035951ms ago: executing program 7 (id=4708): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0xd846deb6531cdeab}, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="40000000101402002abd7000fedbdf2508004a00000000000801010000000000080015000100000008004b001300000008000300020400000800010300000000c989195b21d12d02eb87b98e254ef8ef1a9947ed61597a090c86dece43d77392c7f249366c013d26b49372f08c956a156df19f959f04bf3fe4aea0d168eaebbda78b828809a8d70e63bbc3c97f01265429e2b20b6984889b32ac31cbd9cc18a86a5b2b9b99a6863cdd4105e9d599f91e9c6b38c9ae747ea4e015394ef65c09f1b91f7ada6aa1a9"], 0x40}, 0x1, 0x0, 0x0, 0xca718d62fee01fd1}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0x800040068], 0x2ffc, 0x557c1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) 214.864094ms ago: executing program 2 (id=4709): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 135.684119ms ago: executing program 2 (id=4710): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 135.024322ms ago: executing program 2 (id=4711): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='aio\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 64.205299ms ago: executing program 2 (id=4712): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) getpid() syz_io_uring_submit$UBLK(r2, r3, r4, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 63.021554ms ago: executing program 3 (id=4713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000500)="0802110095010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 62.833362ms ago: executing program 7 (id=4714): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x1) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x10122, 0x0) 0s ago: executing program 0 (id=4715): fsopen(&(0x7f0000000000)='exfat\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) inotify_init1(0x80000) write(r2, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450300207bacdf65c669c80defd400000000002f9078ac1414aaffffffff4000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): T19238] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 374.059295][T19238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.059332][T19238] ? __fget_files+0x34/0x3d0 [ 374.059366][T19238] ? selinux_file_ioctl+0x13b/0x290 [ 374.059387][T19238] ? selinux_file_ioctl+0xb6/0x290 [ 374.059411][T19238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 374.059439][T19238] __x64_sys_ioctl+0x18e/0x210 [ 374.059463][T19238] do_syscall_64+0x123/0x790 [ 374.059489][T19238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.059508][T19238] RIP: 0033:0x7f057099e159 [ 374.059523][T19238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.059540][T19238] RSP: 002b:00007f05718d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.059560][T19238] RAX: ffffffffffffffda RBX: 00007f0570c25fa0 RCX: 00007f057099e159 [ 374.059572][T19238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000098 [ 374.059582][T19238] RBP: 00007f05718d7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.059593][T19238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.059603][T19238] R13: 00007f0570c26038 R14: 00007f0570c25fa0 R15: 00007ffd43d266a8 [ 374.059631][T19238] [ 374.223894][ T1345] usb 12-1: Incompatible driver and firmware versions [ 374.237922][ T1345] usb 12-1: USB disconnect, device number 15 [ 374.329105][T19252] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 374.333859][ T5738] Bluetooth: hci3: command tx timeout [ 374.333889][T19252] input: syz0 as /devices/virtual/input/input22 [ 374.385998][T19255] overlayfs: overlapping lowerdir path [ 374.537792][T19257] kvm [19256]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 374.538241][T19257] kvm [19256]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 374.554109][T19257] kvm [19256]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 374.573025][T19257] kvm [19256]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 374.573354][T19257] kvm [19256]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 374.656790][ T5812] usb 5-1: USB disconnect, device number 17 [ 374.738191][T19266] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 374.747792][T19266] input: syz0 as /devices/virtual/input/input23 [ 374.922921][T19271] netlink: 'syz.7.4362': attribute type 1 has an invalid length. [ 374.951966][T19271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.270203][ T43] audit: type=1400 audit(1791071269.044:1377): avc: denied { write } for pid=19279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.327030][ T56] IPVS: starting estimator thread 0... [ 375.337339][T19290] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 375.337352][T19290] audit: out of memory in audit_log_start [ 375.346882][T19290] PKCS8: Unsupported PKCS#8 version [ 375.348577][ T43] audit: type=1400 audit(1791071269.124:1378): avc: denied { write } for pid=19286 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.349898][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4367'. [ 375.361130][T19283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.373966][T19292] overlayfs: overlapping lowerdir path [ 375.402056][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 375.405002][T19295] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 375.405783][T19295] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 375.406460][T19295] debugfs: 'hsr1' already exists in 'hsr' [ 375.406472][T19295] Cannot create hsr debugfs directory [ 375.409900][T19289] IPVS: using max 42 ests per chain, 100800 per kthread [ 375.417116][T19299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=19299 comm=syz.7.4369 [ 375.519255][T19301] kvm [19300]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 375.519549][T19301] kvm [19300]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 375.535926][T19301] kvm [19300]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 375.557239][T19301] kvm [19300]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 375.557566][T19301] kvm [19300]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 375.569129][ T43] audit: type=1400 audit(1791071269.344:1379): avc: denied { write } for pid=19305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.627916][ T43] audit: type=1400 audit(1791071269.404:1380): avc: denied { write } for pid=19310 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.836568][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4379'. [ 375.841999][T19328] overlayfs: overlapping lowerdir path [ 375.895644][T19331] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 376.261440][T19348] tmpfs: Bad value for 'mpol' [ 376.534351][T19356] FAULT_INJECTION: forcing a failure. [ 376.534351][T19356] name failslab, interval 1, probability 0, space 0, times 0 [ 376.534376][T19356] CPU: 0 UID: 0 PID: 19356 Comm: syz.7.4388 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.534393][T19356] Tainted: [L]=SOFTLOCKUP [ 376.534398][T19356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.534405][T19356] Call Trace: [ 376.534410][T19356] [ 376.534415][T19356] dump_stack_lvl+0x100/0x190 [ 376.534449][T19356] should_fail_ex.cold+0x5/0xa [ 376.534467][T19356] should_failslab+0xc2/0x120 [ 376.534489][T19356] __kmalloc_cache_noprof+0x91/0x6d0 [ 376.534502][T19356] ? percpu_ref_init+0xec/0x3f0 [ 376.534516][T19356] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 376.534535][T19356] percpu_ref_init+0xec/0x3f0 [ 376.534548][T19356] io_uring_setup.cold+0x2be/0x1cde [ 376.534562][T19356] ? lock_acquire+0x1d1/0x380 [ 376.534576][T19356] ? avc_has_perm_noaudit+0x56/0x470 [ 376.534597][T19356] ? __pfx_io_uring_setup+0x10/0x10 [ 376.534613][T19356] ? find_held_lock+0x2b/0x80 [ 376.534630][T19356] ? avc_has_perm_noaudit+0x11e/0x470 [ 376.534651][T19356] ? avc_has_perm_noaudit+0x11e/0x470 [ 376.534691][T19356] ? ksys_write+0x1ac/0x250 [ 376.534710][T19356] ? __pfx_ksys_write+0x10/0x10 [ 376.534738][T19356] __x64_sys_io_uring_setup+0xc2/0x170 [ 376.534761][T19356] do_syscall_64+0x123/0x790 [ 376.534781][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.534794][T19356] RIP: 0033:0x7fb86a39e159 [ 376.534804][T19356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.534816][T19356] RSP: 002b:00007fb8685f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 376.534828][T19356] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fb86a39e159 [ 376.534836][T19356] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000004 [ 376.534843][T19356] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 376.534850][T19356] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 376.534857][T19356] R13: 0000200000000890 R14: 00007fb8685f5fd8 R15: 0000000000000000 [ 376.534872][T19356] [ 376.588573][ T43] audit: type=1400 audit(1791071270.365:1381): avc: denied { write } for pid=19352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.652385][ T43] audit: type=1400 audit(1791071270.435:1382): avc: denied { write } for pid=19362 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.677456][T19365] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 376.775503][T19369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.877639][T19373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4393'. [ 376.952690][T19375] FAULT_INJECTION: forcing a failure. [ 376.952690][T19375] name failslab, interval 1, probability 0, space 0, times 0 [ 376.952721][T19375] CPU: 2 UID: 0 PID: 19375 Comm: syz.0.4394 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.952737][T19375] Tainted: [L]=SOFTLOCKUP [ 376.952741][T19375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.952748][T19375] Call Trace: [ 376.952753][T19375] [ 376.952758][T19375] dump_stack_lvl+0x100/0x190 [ 376.952794][T19375] should_fail_ex.cold+0x5/0xa [ 376.952814][T19375] should_failslab+0xc2/0x120 [ 376.952831][T19375] kmem_cache_alloc_noprof+0x92/0x6a0 [ 376.952845][T19375] ? d_instantiate+0x8a/0xb0 [ 376.952856][T19375] ? alloc_empty_file+0x5b/0x1c0 [ 376.952890][T19375] alloc_empty_file+0x5b/0x1c0 [ 376.952908][T19375] alloc_file_pseudo+0x183/0x290 [ 376.952926][T19375] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 376.952944][T19375] ? alloc_fd+0x471/0x7a0 [ 376.952962][T19375] sock_alloc_file+0x50/0x210 [ 376.952988][T19375] __sys_socket+0x1c0/0x260 [ 376.953001][T19375] ? __pfx___sys_socket+0x10/0x10 [ 376.953014][T19375] ? __pfx_do_sync_core+0x10/0x10 [ 376.953031][T19375] ? trace_csd_function_exit+0x73/0x1f0 [ 376.953049][T19375] __x64_sys_socket+0x72/0xb0 [ 376.953062][T19375] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.953075][T19375] do_syscall_64+0x123/0x790 [ 376.953089][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.953100][T19375] RIP: 0033:0x7f1c1959e159 [ 376.953110][T19375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.953121][T19375] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 376.953133][T19375] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 376.953141][T19375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 376.953147][T19375] RBP: 00007f1c1963506b R08: 0000000000000000 R09: 0000000000000000 [ 376.953154][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.953161][T19375] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 376.953177][T19375] [ 376.954046][T19375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 377.047364][ T43] audit: type=1400 audit(1791071270.825:1383): avc: denied { write } for pid=19376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.110967][ T43] audit: type=1400 audit(1791071270.895:1384): avc: denied { write } for pid=19379 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.358943][T19389] overlayfs: overlapping lowerdir path [ 377.406979][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 377.564231][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4403'. [ 377.587586][T19402] netlink: 'syz.0.4403': attribute type 28 has an invalid length. [ 377.587601][T19402] netlink: 'syz.0.4403': attribute type 3 has an invalid length. [ 377.587609][T19402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4403'. [ 377.738634][ T6311] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 377.770500][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.810504][T19406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.900164][ T6311] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 377.901614][ T6311] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 377.901634][ T6311] usb 7-1: config 1 has no interface number 0 [ 377.901664][ T6311] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 377.901684][ T6311] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 377.901704][ T6311] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.903666][ T6311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.903679][ T6311] usb 7-1: Product: syz [ 377.903686][ T6311] usb 7-1: Manufacturer: syz [ 377.903694][ T6311] usb 7-1: SerialNumber: syz [ 377.908376][T19397] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.923971][T19409] FAULT_INJECTION: forcing a failure. [ 377.923971][T19409] name failslab, interval 1, probability 0, space 0, times 0 [ 377.923992][T19409] CPU: 1 UID: 0 PID: 19409 Comm: syz.0.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.924008][T19409] Tainted: [L]=SOFTLOCKUP [ 377.924012][T19409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.924019][T19409] Call Trace: [ 377.924023][T19409] [ 377.924028][T19409] dump_stack_lvl+0x100/0x190 [ 377.924048][T19409] should_fail_ex.cold+0x5/0xa [ 377.924064][T19409] should_failslab+0xc2/0x120 [ 377.924098][T19409] __kmalloc_cache_noprof+0x91/0x6d0 [ 377.924147][T19409] ? tc_new_tfilter+0xf83/0x24e0 [ 377.924165][T19409] tc_new_tfilter+0xf83/0x24e0 [ 377.924184][T19409] ? avc_has_perm_noaudit+0xc0/0x470 [ 377.924203][T19409] ? avc_has_perm_noaudit+0x11e/0x470 [ 377.924222][T19409] ? __pfx_tc_new_tfilter+0x10/0x10 [ 377.924241][T19409] ? __lock_acquire+0x5c0/0x1f40 [ 377.924260][T19409] ? lock_acquire+0x1d1/0x380 [ 377.924273][T19409] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 377.924284][T19409] ? find_held_lock+0x2b/0x80 [ 377.924301][T19409] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 377.924312][T19409] ? __pfx_tc_new_tfilter+0x10/0x10 [ 377.924327][T19409] rtnetlink_rcv_msg+0x95e/0xe90 [ 377.924339][T19409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.924354][T19409] ? ref_tracker_free+0x37e/0x6c0 [ 377.924373][T19409] netlink_rcv_skb+0x159/0x420 [ 377.924388][T19409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.924400][T19409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.924421][T19409] ? netlink_deliver_tap+0x1ae/0xcc0 [ 377.924438][T19409] netlink_unicast+0x585/0x850 [ 377.924456][T19409] ? __pfx_netlink_unicast+0x10/0x10 [ 377.924471][T19409] ? __pfx_sock_has_perm+0x10/0x10 [ 377.924487][T19409] netlink_sendmsg+0x8b0/0xda0 [ 377.924507][T19409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.924524][T19409] ? selinux_socket_sendmsg+0x198/0x2f0 [ 377.924541][T19409] ____sys_sendmsg+0xa4d/0xbe0 [ 377.924552][T19409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.924569][T19409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.924584][T19409] ? lock_acquire+0x1d1/0x380 [ 377.924596][T19409] ? get_pid_task+0x2a/0x250 [ 377.924614][T19409] ___sys_sendmsg+0x190/0x1e0 [ 377.924627][T19409] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.924641][T19409] ? get_pid_task+0x106/0x250 [ 377.924661][T19409] ? find_held_lock+0x2b/0x80 [ 377.924687][T19409] __sys_sendmsg+0x160/0x210 [ 377.924704][T19409] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.924733][T19409] do_syscall_64+0x123/0x790 [ 377.924748][T19409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.924760][T19409] RIP: 0033:0x7f1c1959e159 [ 377.924770][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.924781][T19409] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.924793][T19409] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 377.924800][T19409] RDX: 0000000024000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 377.924807][T19409] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 377.924814][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.924821][T19409] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 377.924836][T19409] [ 377.979866][T19411] ip_tables: iptables: counters copy to user failed while replacing table [ 378.174075][T19421] syzkaller0: entered promiscuous mode [ 378.174089][T19421] syzkaller0: entered allmulticast mode [ 378.205736][T19423] xt_hashlimit: max too large, truncated to 1048576 [ 378.205915][T19423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.207865][T19423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.502874][ T6311] usb 7-1: Incompatible driver and firmware versions [ 378.511886][ T6311] usb 7-1: USB disconnect, device number 22 [ 378.888347][ T2338] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 379.038693][ T2338] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 379.039636][ T2338] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 379.039659][ T2338] usb 8-1: config 1 has no interface number 0 [ 379.044197][ T2338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.044225][ T2338] usb 8-1: Product: syz [ 379.044241][ T2338] usb 8-1: Manufacturer: syz [ 379.044255][ T2338] usb 8-1: SerialNumber: syz [ 379.057162][ T2338] usb 8-1: 3:0 : does not exist [ 379.057184][ T2338] usb 8-1: 3:0 : does not exist [ 379.282231][T19452] syzkaller0: entered promiscuous mode [ 379.282252][T19452] syzkaller0: entered allmulticast mode [ 379.525957][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 379.536711][T19457] netlink: 'syz.0.4424': attribute type 28 has an invalid length. [ 379.536732][T19457] netlink: 'syz.0.4424': attribute type 3 has an invalid length. [ 379.536742][T19457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4424'. [ 379.605225][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4417'. [ 379.737567][T18943] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 379.898138][T18943] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 379.898961][T18943] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 379.898973][T18943] usb 7-1: config 1 has no interface number 0 [ 379.898991][T18943] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 379.899004][T18943] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 379.899017][T18943] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.900533][T18943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.900546][T18943] usb 7-1: Product: syz [ 379.900571][T18943] usb 7-1: Manufacturer: syz [ 379.900579][T18943] usb 7-1: SerialNumber: syz [ 379.905208][T19471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 380.107487][T19475] overlayfs: overlapping lowerdir path [ 380.179704][T19478] xt_hashlimit: max too large, truncated to 1048576 [ 380.179907][T19478] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 380.187825][T19478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 380.331196][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4430'. [ 380.369811][ T43] kauditd_printk_skb: 113 callbacks suppressed [ 380.369874][ T43] audit: type=1400 audit(1791071274.147:1498): avc: denied { create } for pid=19476 comm="syz.0.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.370169][ T43] audit: type=1400 audit(1791071274.147:1499): avc: denied { setopt } for pid=19476 comm="syz.0.4429" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.387991][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4430'. [ 380.394844][ T43] audit: type=1400 audit(1791071274.167:1500): avc: denied { mount } for pid=19470 comm="syz.2.4427" name="/" dev="9p" ino=71827879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 380.480361][T18943] usb 7-1: Incompatible driver and firmware versions [ 380.490029][T18943] usb 7-1: USB disconnect, device number 23 [ 380.508377][ T43] audit: type=1400 audit(1791071274.287:1501): avc: denied { recv } for pid=0 comm="swapper/3" saddr=127.0.0.1 src=40992 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 380.519974][ T43] audit: type=1400 audit(1791071274.297:1502): avc: denied { create } for pid=19484 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.521493][ T43] audit: type=1400 audit(1791071274.297:1503): avc: denied { create } for pid=19484 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 380.523857][ T43] audit: type=1400 audit(1791071274.297:1504): avc: denied { bind } for pid=19484 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.524187][ T43] audit: type=1400 audit(1791071274.297:1505): avc: denied { write } for pid=19484 comm="syz.7.4431" path="socket:[106976]" dev="sockfs" ino=106976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.677267][ T43] audit: type=1400 audit(1791071274.457:1506): avc: denied { create } for pid=19488 comm="syz.7.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.677735][ T43] audit: type=1400 audit(1791071274.457:1507): avc: denied { ioctl } for pid=19488 comm="syz.7.4433" path="socket:[105890]" dev="sockfs" ino=105890 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.209882][T19504] overlayfs: overlapping lowerdir path [ 381.226909][ T1345] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 381.287094][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 381.305915][T19506] netlink: 'syz.2.4439': attribute type 28 has an invalid length. [ 381.305935][T19506] netlink: 'syz.2.4439': attribute type 3 has an invalid length. [ 381.305946][T19506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4439'. [ 381.376918][ T1345] usb 5-1: Using ep0 maxpacket: 8 [ 381.377705][ T1345] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 381.378713][ T1345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 381.378742][ T1345] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 381.378772][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.378803][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.378826][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.378850][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.378875][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 381.378899][ T1345] usb 5-1: config 168 interface 0 has no altsetting 0 [ 381.379799][ T1345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 381.379828][ T1345] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 381.379860][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.379884][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.379906][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.379929][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.379952][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 381.379976][ T1345] usb 5-1: config 168 interface 0 has no altsetting 0 [ 381.380873][ T1345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 381.380900][ T1345] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 381.380931][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.380955][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.380977][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.381000][ T1345] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.381023][ T1345] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 381.381047][ T1345] usb 5-1: config 168 interface 0 has no altsetting 0 [ 381.383706][ T1345] usb 5-1: string descriptor 0 read error: -22 [ 381.383817][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.396037][ T1345] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 381.419442][ T5588] usb 8-1: USB disconnect, device number 20 [ 381.681673][T19528] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 382.486323][T18943] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 382.649073][T18943] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 382.650031][T18943] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 382.650055][T18943] usb 8-1: config 1 has no interface number 0 [ 382.653641][T18943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.653663][T18943] usb 8-1: Product: syz [ 382.653676][T18943] usb 8-1: Manufacturer: syz [ 382.653690][T18943] usb 8-1: SerialNumber: syz [ 382.671631][T18943] usb 8-1: 3:0 : does not exist [ 382.671654][T18943] usb 8-1: 3:0 : does not exist [ 382.941108][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 382.982330][T19567] FAULT_INJECTION: forcing a failure. [ 382.982330][T19567] name failslab, interval 1, probability 0, space 0, times 0 [ 382.982363][T19567] CPU: 2 UID: 0 PID: 19567 Comm: syz.2.4458 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.982391][T19567] Tainted: [L]=SOFTLOCKUP [ 382.982399][T19567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.982411][T19567] Call Trace: [ 382.982418][T19567] [ 382.982427][T19567] dump_stack_lvl+0x100/0x190 [ 382.982473][T19567] should_fail_ex.cold+0x5/0xa [ 382.982502][T19567] should_failslab+0xc2/0x120 [ 382.982534][T19567] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 382.982558][T19567] ? __alloc_skb+0x5b7/0x710 [ 382.982588][T19567] ? __alloc_skb+0x140/0x710 [ 382.982617][T19567] __alloc_skb+0x140/0x710 [ 382.982639][T19567] ? __alloc_skb+0x5b7/0x710 [ 382.982664][T19567] ? __pfx___alloc_skb+0x10/0x10 [ 382.982694][T19567] netlink_alloc_large_skb+0x69/0x150 [ 382.982723][T19567] netlink_sendmsg+0x680/0xda0 [ 382.982752][T19567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.982778][T19567] ? selinux_socket_sendmsg+0x198/0x2f0 [ 382.982808][T19567] ____sys_sendmsg+0xa4d/0xbe0 [ 382.982826][T19567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.982853][T19567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.982879][T19567] ? lock_acquire+0x1d1/0x380 [ 382.982900][T19567] ? get_pid_task+0x2a/0x250 [ 382.982928][T19567] ___sys_sendmsg+0x190/0x1e0 [ 382.982951][T19567] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.982972][T19567] ? get_pid_task+0x106/0x250 [ 382.983007][T19567] ? find_held_lock+0x2b/0x80 [ 382.983050][T19567] __sys_sendmsg+0x160/0x210 [ 382.983076][T19567] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.983117][T19567] do_syscall_64+0x123/0x790 [ 382.983147][T19567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.983166][T19567] RIP: 0033:0x7f83a279e159 [ 382.983180][T19567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.983198][T19567] RSP: 002b:00007f83a36b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.983217][T19567] RAX: ffffffffffffffda RBX: 00007f83a2a25fa0 RCX: 00007f83a279e159 [ 382.983230][T19567] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 382.983241][T19567] RBP: 00007f83a36b7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.983272][T19567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.983283][T19567] R13: 00007f83a2a26038 R14: 00007f83a2a25fa0 R15: 00007fffd6524c88 [ 382.983308][T19567] [ 383.220520][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4450'. [ 383.629701][T19581] kAFS: No cell specified [ 383.765077][T19588] openvswitch: netlink: IP tunnel dst address not specified [ 383.765094][T19588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.858310][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4468'. [ 383.908957][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4468'. [ 384.007380][ T5874] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 384.156160][ T5874] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 384.157093][ T5874] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 384.157113][ T5874] usb 7-1: config 1 has no interface number 0 [ 384.158937][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.158956][ T5874] usb 7-1: Product: syz [ 384.158970][ T5874] usb 7-1: Manufacturer: syz [ 384.158982][ T5874] usb 7-1: SerialNumber: syz [ 384.171491][ T5874] usb 7-1: 3:0 : does not exist [ 384.171504][ T5874] usb 7-1: 3:0 : does not exist [ 384.687972][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4469'. [ 384.739288][T19595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4462'. [ 385.016260][ T1345] usb 8-1: USB disconnect, device number 21 [ 385.044326][T19597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19597 comm=syz.3.4470 [ 385.044753][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4470'. [ 385.126434][T19599] syzkaller0: entered promiscuous mode [ 385.126455][T19599] syzkaller0: entered allmulticast mode [ 385.326666][T19607] syzkaller0: entered promiscuous mode [ 385.326687][T19607] syzkaller0: entered allmulticast mode [ 385.421215][ T43] kauditd_printk_skb: 171 callbacks suppressed [ 385.421228][ T43] audit: type=1400 audit(1791071279.199:1679): avc: denied { read write } for pid=19613 comm="syz.7.4478" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.421254][ T43] audit: type=1400 audit(1791071279.199:1680): avc: denied { open } for pid=19613 comm="syz.7.4478" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.468888][ T43] audit: type=1400 audit(1791071279.249:1681): avc: denied { read } for pid=17809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.468926][ T43] audit: type=1400 audit(1791071279.249:1682): avc: denied { open } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.468965][ T43] audit: type=1400 audit(1791071279.249:1683): avc: denied { ioctl } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.610293][ T43] audit: type=1400 audit(1791071279.389:1684): avc: denied { mounton } for pid=19618 comm="syz.3.4480" path="/155/file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 385.610393][T19619] kAFS: No cell specified [ 385.616101][ T43] audit: type=1400 audit(1791071279.389:1685): avc: denied { unlink } for pid=19618 comm="syz.3.4480" name="#53" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.617737][ T43] audit: type=1400 audit(1791071279.399:1686): avc: denied { mount } for pid=19618 comm="syz.3.4480" name="/" dev="overlay" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 385.637387][ T43] audit: type=1400 audit(1791071279.419:1687): avc: denied { unmount } for pid=17809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 385.683162][ T43] audit: type=1400 audit(1791071279.459:1688): avc: denied { create } for pid=19620 comm="syz.3.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.690247][ T6311] usb 5-1: USB disconnect, device number 18 [ 385.703146][T19621] FAULT_INJECTION: forcing a failure. [ 385.703146][T19621] name failslab, interval 1, probability 0, space 0, times 0 [ 385.703179][T19621] CPU: 0 UID: 0 PID: 19621 Comm: syz.3.4481 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.703208][T19621] Tainted: [L]=SOFTLOCKUP [ 385.703216][T19621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.703230][T19621] Call Trace: [ 385.703237][T19621] [ 385.703246][T19621] dump_stack_lvl+0x100/0x190 [ 385.703292][T19621] should_fail_ex.cold+0x5/0xa [ 385.703322][T19621] should_failslab+0xc2/0x120 [ 385.703356][T19621] kmem_cache_alloc_noprof+0x92/0x6a0 [ 385.703381][T19621] ? __kernfs_new_node+0xd2/0xa10 [ 385.703406][T19621] __kernfs_new_node+0xd2/0xa10 [ 385.703430][T19621] ? __pfx___kernfs_new_node+0x10/0x10 [ 385.703453][T19621] ? lock_acquire+0x1d1/0x380 [ 385.703474][T19621] ? kernfs_root+0x23/0x2a0 [ 385.703502][T19621] ? find_held_lock+0x2b/0x80 [ 385.703529][T19621] ? kernfs_root+0xee/0x2a0 [ 385.703556][T19621] ? kernfs_root+0xee/0x2a0 [ 385.703590][T19621] kernfs_new_node+0x117/0x150 [ 385.703635][T19621] kernfs_create_link+0xcc/0x240 [ 385.703664][T19621] sysfs_do_create_link_sd+0x90/0x140 [ 385.703697][T19621] sysfs_create_link+0x61/0xc0 [ 385.703725][T19621] driver_sysfs_add+0x112/0x2d0 [ 385.703754][T19621] really_probe+0x146/0xa60 [ 385.703789][T19621] __driver_probe_device+0x210/0x460 [ 385.703815][T19621] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.703844][T19621] driver_probe_device+0x4a/0x140 [ 385.703872][T19621] __driver_attach+0x21f/0x5b0 [ 385.703900][T19621] ? __pfx___driver_attach+0x10/0x10 [ 385.703926][T19621] bus_for_each_dev+0x13e/0x1d0 [ 385.703948][T19621] ? __pfx_bus_for_each_dev+0x10/0x10 [ 385.703969][T19621] ? bus_add_driver+0x2b5/0x5b0 [ 385.703999][T19621] bus_add_driver+0x305/0x5b0 [ 385.704026][T19621] driver_register+0x1e2/0x360 [ 385.704053][T19621] ? rcu_is_watching+0x13/0xc0 [ 385.704083][T19621] usb_gadget_register_driver_owner+0x132/0x210 [ 385.704119][T19621] raw_ioctl+0x1a85/0x2b80 [ 385.704149][T19621] ? __pfx_raw_ioctl+0x10/0x10 [ 385.704173][T19621] ? selinux_file_ioctl+0x13b/0x290 [ 385.704199][T19621] ? selinux_file_ioctl+0xb6/0x290 [ 385.704226][T19621] ? __pfx_raw_ioctl+0x10/0x10 [ 385.704250][T19621] __x64_sys_ioctl+0x18e/0x210 [ 385.704276][T19621] do_syscall_64+0x123/0x790 [ 385.704300][T19621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.704320][T19621] RIP: 0033:0x7f057099ddeb [ 385.704337][T19621] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 385.704355][T19621] RSP: 002b:00007f05718d4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.704374][T19621] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f057099ddeb [ 385.704386][T19621] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 385.704398][T19621] RBP: 00007f05718d5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 385.704410][T19621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.704421][T19621] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 385.704449][T19621] [ 385.707861][T19621] raw-gadget.1 gadget.3: really_probe: driver_sysfs_add failed [ 385.708300][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.708542][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.763661][T19625] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 385.854626][ T1345] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 386.006029][ T1345] usb 12-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 386.007192][ T1345] usb 12-1: config 1 has an invalid interface number: 3 but max is 0 [ 386.007213][ T1345] usb 12-1: config 1 has no interface number 0 [ 386.009024][ T1345] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.009037][ T1345] usb 12-1: Product: syz [ 386.009044][ T1345] usb 12-1: Manufacturer: syz [ 386.009052][ T1345] usb 12-1: SerialNumber: syz [ 386.016295][ T1345] usb 12-1: 3:0 : does not exist [ 386.016307][ T1345] usb 12-1: 3:0 : does not exist [ 386.347367][T19631] syzkaller0: entered promiscuous mode [ 386.347383][T19631] syzkaller0: entered allmulticast mode [ 386.551522][T19642] syzkaller0: entered promiscuous mode [ 386.551543][T19642] syzkaller0: entered allmulticast mode [ 386.573072][T19644] kAFS: No cell specified [ 386.585698][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4478'. [ 386.592649][ T5874] usb 7-1: USB disconnect, device number 24 [ 386.653694][T19651] FAULT_INJECTION: forcing a failure. [ 386.653694][T19651] name failslab, interval 1, probability 0, space 0, times 0 [ 386.653765][T19651] CPU: 0 UID: 0 PID: 19651 Comm: syz.2.4494 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.653794][T19651] Tainted: [L]=SOFTLOCKUP [ 386.653802][T19651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.653816][T19651] Call Trace: [ 386.653823][T19651] [ 386.653831][T19651] dump_stack_lvl+0x100/0x190 [ 386.653864][T19651] should_fail_ex.cold+0x5/0xa [ 386.653893][T19651] should_failslab+0xc2/0x120 [ 386.653921][T19651] kmem_cache_alloc_noprof+0x92/0x6a0 [ 386.653943][T19651] ? __asan_memcpy+0x3c/0x60 [ 386.653962][T19651] ? __kernfs_new_node+0xd2/0xa10 [ 386.653986][T19651] __kernfs_new_node+0xd2/0xa10 [ 386.654009][T19651] ? __pfx___kernfs_new_node+0x10/0x10 [ 386.654050][T19651] ? lock_acquire+0x1d1/0x380 [ 386.654095][T19651] ? kernfs_root+0x23/0x2a0 [ 386.654126][T19651] ? find_held_lock+0x2b/0x80 [ 386.654153][T19651] ? kernfs_root+0xee/0x2a0 [ 386.654179][T19651] ? kernfs_root+0xee/0x2a0 [ 386.654211][T19651] kernfs_new_node+0x117/0x150 [ 386.654234][T19651] kernfs_create_link+0xcc/0x240 [ 386.654260][T19651] sysfs_do_create_link_sd+0x90/0x140 [ 386.654290][T19651] sysfs_create_link+0x61/0xc0 [ 386.654319][T19651] driver_sysfs_add+0x91/0x2d0 [ 386.654346][T19651] really_probe+0x146/0xa60 [ 386.654376][T19651] __driver_probe_device+0x210/0x460 [ 386.654403][T19651] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.654426][T19651] driver_probe_device+0x4a/0x140 [ 386.654453][T19651] __driver_attach+0x21f/0x5b0 [ 386.654478][T19651] ? __pfx___driver_attach+0x10/0x10 [ 386.654500][T19651] bus_for_each_dev+0x13e/0x1d0 [ 386.654521][T19651] ? __pfx_bus_for_each_dev+0x10/0x10 [ 386.654539][T19651] ? bus_add_driver+0x2b5/0x5b0 [ 386.654569][T19651] bus_add_driver+0x305/0x5b0 [ 386.654594][T19651] driver_register+0x1e2/0x360 [ 386.654618][T19651] ? rcu_is_watching+0x13/0xc0 [ 386.654647][T19651] usb_gadget_register_driver_owner+0x132/0x210 [ 386.654683][T19651] raw_ioctl+0x1a85/0x2b80 [ 386.654714][T19651] ? __pfx_raw_ioctl+0x10/0x10 [ 386.654737][T19651] ? selinux_file_ioctl+0x13b/0x290 [ 386.654761][T19651] ? selinux_file_ioctl+0xb6/0x290 [ 386.654787][T19651] ? __pfx_raw_ioctl+0x10/0x10 [ 386.654810][T19651] __x64_sys_ioctl+0x18e/0x210 [ 386.654833][T19651] do_syscall_64+0x123/0x790 [ 386.654859][T19651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.654880][T19651] RIP: 0033:0x7f83a279ddeb [ 386.654899][T19651] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 386.654919][T19651] RSP: 002b:00007f83a36b4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.654940][T19651] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f83a279ddeb [ 386.654954][T19651] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 386.654966][T19651] RBP: 00007f83a36b5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 386.654978][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.654990][T19651] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 386.655016][T19651] [ 386.657848][T19651] raw-gadget.1 gadget.2: really_probe: driver_sysfs_add failed [ 386.658155][T19651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.663729][T19651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.687544][T19653] FAULT_INJECTION: forcing a failure. [ 386.687544][T19653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.687564][T19653] CPU: 2 UID: 0 PID: 19653 Comm: syz.0.4497 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.687579][T19653] Tainted: [L]=SOFTLOCKUP [ 386.687584][T19653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.687590][T19653] Call Trace: [ 386.687594][T19653] [ 386.687599][T19653] dump_stack_lvl+0x100/0x190 [ 386.687620][T19653] should_fail_ex.cold+0x5/0xa [ 386.687634][T19653] ? prepare_alloc_pages+0x16d/0x5b0 [ 386.687651][T19653] should_fail_alloc_page+0xeb/0x140 [ 386.687668][T19653] prepare_alloc_pages+0x1f0/0x5b0 [ 386.687684][T19653] ? is_bpf_text_address+0x94/0x1a0 [ 386.687702][T19653] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 386.687722][T19653] ? stack_trace_save+0x8e/0xc0 [ 386.687734][T19653] ? __pfx_stack_trace_save+0x10/0x10 [ 386.687745][T19653] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.687757][T19653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.687770][T19653] ? is_bpf_text_address+0x94/0x1a0 [ 386.687788][T19653] ? kasan_save_stack+0x3f/0x50 [ 386.687802][T19653] ? kasan_save_stack+0x30/0x50 [ 386.687816][T19653] ? kasan_save_track+0x14/0x30 [ 386.687830][T19653] ? __kasan_slab_alloc+0x89/0x90 [ 386.687844][T19653] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 386.687858][T19653] ? alloc_vmap_area+0x640/0x2bb0 [ 386.687871][T19653] ? __get_vm_area_node+0x1ed/0x350 [ 386.687903][T19653] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 386.687920][T19653] ? __vmalloc_node_noprof+0xad/0xf0 [ 386.687935][T19653] ? copy_process+0x803/0x8380 [ 386.687948][T19653] ? vhost_task_create+0x1db/0x370 [ 386.687957][T19653] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 386.687971][T19653] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 386.687985][T19653] ? kvm_vcpu_ioctl+0x730/0x1700 [ 386.687999][T19653] ? __x64_sys_ioctl+0x18e/0x210 [ 386.688011][T19653] ? do_syscall_64+0x123/0x790 [ 386.688023][T19653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.688041][T19653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.688057][T19653] ? policy_nodemask+0xed/0x4f0 [ 386.688074][T19653] alloc_pages_mpol+0x201/0x550 [ 386.688092][T19653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 386.688113][T19653] alloc_pages_noprof+0x1a/0x160 [ 386.688124][T19653] get_free_pages_noprof+0x10/0xb0 [ 386.688139][T19653] __kasan_populate_vmalloc+0xa0/0x210 [ 386.688160][T19653] alloc_vmap_area+0x95d/0x2bb0 [ 386.688179][T19653] ? kasan_save_track+0x14/0x30 [ 386.688193][T19653] ? __kasan_kmalloc+0xaa/0xb0 [ 386.688207][T19653] ? __pfx_alloc_vmap_area+0x10/0x10 [ 386.688224][T19653] ? __get_vm_area_node+0x124/0x350 [ 386.688241][T19653] __get_vm_area_node+0x1ed/0x350 [ 386.688260][T19653] __vmalloc_node_range_noprof+0x268/0x1420 [ 386.688277][T19653] ? vhost_task_create+0x1db/0x370 [ 386.688287][T19653] ? lock_acquire+0x1d1/0x380 [ 386.688305][T19653] ? vhost_task_create+0x1db/0x370 [ 386.688316][T19653] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 386.688330][T19653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.688349][T19653] ? rcu_is_watching+0x13/0xc0 [ 386.688365][T19653] ? trace_kmem_cache_alloc+0xdd/0x100 [ 386.688383][T19653] ? vhost_task_create+0x1db/0x370 [ 386.688393][T19653] __vmalloc_node_noprof+0xad/0xf0 [ 386.688409][T19653] ? vhost_task_create+0x1db/0x370 [ 386.688421][T19653] copy_process+0x803/0x8380 [ 386.688442][T19653] ? __pfx_copy_process+0x10/0x10 [ 386.688455][T19653] ? kasan_save_track+0x14/0x30 [ 386.688469][T19653] ? __kasan_kmalloc+0xaa/0xb0 [ 386.688483][T19653] ? lockdep_init_map_type+0x5c/0x250 [ 386.688498][T19653] ? lockdep_init_map_type+0x5c/0x250 [ 386.688512][T19653] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 386.688537][T19653] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 386.688558][T19653] vhost_task_create+0x1db/0x370 [ 386.688572][T19653] ? __pfx_vhost_task_create+0x10/0x10 [ 386.688594][T19653] ? __pfx_vhost_task_fn+0x10/0x10 [ 386.688608][T19653] ? register_lock_class+0x3f/0x7b0 [ 386.688621][T19653] ? rcu_is_watching+0x13/0xc0 [ 386.688637][T19653] ? trace_contention_end+0x126/0x160 [ 386.688657][T19653] kvm_mmu_post_init_vm+0x1b3/0x360 [ 386.688672][T19653] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 386.688686][T19653] ? __pfx___mutex_lock+0x10/0x10 [ 386.688699][T19653] ? kasan_quarantine_put+0x104/0x240 [ 386.688714][T19653] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 386.688728][T19653] ? lock_acquire+0x1d1/0x380 [ 386.688742][T19653] ? do_raw_write_lock+0x11e/0x260 [ 386.688757][T19653] ? find_held_lock+0x2b/0x80 [ 386.688773][T19653] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 386.688789][T19653] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 386.688807][T19653] kvm_vcpu_ioctl+0x730/0x1700 [ 386.688825][T19653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 386.688841][T19653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.688856][T19653] ? do_vfs_ioctl+0x226/0x13e0 [ 386.688869][T19653] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 386.688881][T19653] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 386.688898][T19653] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 386.688916][T19653] ? __fget_files+0x34/0x3d0 [ 386.688937][T19653] ? selinux_file_ioctl+0x13b/0x290 [ 386.688951][T19653] ? selinux_file_ioctl+0xb6/0x290 [ 386.688967][T19653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 386.688983][T19653] __x64_sys_ioctl+0x18e/0x210 [ 386.688997][T19653] do_syscall_64+0x123/0x790 [ 386.689011][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.689022][T19653] RIP: 0033:0x7f1c1959e159 [ 386.689032][T19653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.689043][T19653] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.689054][T19653] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 386.689062][T19653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 386.689069][T19653] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 386.689075][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.689082][T19653] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 386.689097][T19653] [ 386.689294][T19653] syz.0.4497: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.689331][T19653] CPU: 2 UID: 0 PID: 19653 Comm: syz.0.4497 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.689346][T19653] Tainted: [L]=SOFTLOCKUP [ 386.689349][T19653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.689355][T19653] Call Trace: [ 386.689359][T19653] [ 386.689364][T19653] dump_stack_lvl+0x100/0x190 [ 386.689382][T19653] warn_alloc.cold+0x9e/0xb2 [ 386.689395][T19653] ? __pfx_warn_alloc+0x10/0x10 [ 386.689406][T19653] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.689420][T19653] ? __get_vm_area_node+0x2f0/0x350 [ 386.689451][T19653] ? __get_vm_area_node+0x22b/0x350 [ 386.689471][T19653] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 386.689488][T19653] ? lock_acquire+0x1d1/0x380 [ 386.689505][T19653] ? vhost_task_create+0x1db/0x370 [ 386.689517][T19653] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 386.689530][T19653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.689549][T19653] ? rcu_is_watching+0x13/0xc0 [ 386.689564][T19653] ? trace_kmem_cache_alloc+0xdd/0x100 [ 386.689582][T19653] ? vhost_task_create+0x1db/0x370 [ 386.689592][T19653] __vmalloc_node_noprof+0xad/0xf0 [ 386.689622][T19653] ? vhost_task_create+0x1db/0x370 [ 386.689634][T19653] copy_process+0x803/0x8380 [ 386.689657][T19653] ? __pfx_copy_process+0x10/0x10 [ 386.689670][T19653] ? kasan_save_track+0x14/0x30 [ 386.689684][T19653] ? __kasan_kmalloc+0xaa/0xb0 [ 386.689698][T19653] ? lockdep_init_map_type+0x5c/0x250 [ 386.689713][T19653] ? lockdep_init_map_type+0x5c/0x250 [ 386.689727][T19653] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 386.689745][T19653] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 386.689761][T19653] vhost_task_create+0x1db/0x370 [ 386.689772][T19653] ? __pfx_vhost_task_create+0x10/0x10 [ 386.689787][T19653] ? __pfx_vhost_task_fn+0x10/0x10 [ 386.689799][T19653] ? register_lock_class+0x3f/0x7b0 [ 386.689812][T19653] ? rcu_is_watching+0x13/0xc0 [ 386.689828][T19653] ? trace_contention_end+0x126/0x160 [ 386.689845][T19653] kvm_mmu_post_init_vm+0x1b3/0x360 [ 386.689859][T19653] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 386.689874][T19653] ? __pfx___mutex_lock+0x10/0x10 [ 386.689886][T19653] ? kasan_quarantine_put+0x104/0x240 [ 386.689902][T19653] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 386.689916][T19653] ? lock_acquire+0x1d1/0x380 [ 386.689929][T19653] ? do_raw_write_lock+0x11e/0x260 [ 386.689944][T19653] ? find_held_lock+0x2b/0x80 [ 386.689961][T19653] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 386.689976][T19653] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 386.689995][T19653] kvm_vcpu_ioctl+0x730/0x1700 [ 386.690012][T19653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 386.690029][T19653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.690043][T19653] ? do_vfs_ioctl+0x226/0x13e0 [ 386.690056][T19653] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 386.690086][T19653] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 386.690104][T19653] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 386.690122][T19653] ? __fget_files+0x34/0x3d0 [ 386.690147][T19653] ? selinux_file_ioctl+0x13b/0x290 [ 386.690161][T19653] ? selinux_file_ioctl+0xb6/0x290 [ 386.690177][T19653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 386.690200][T19653] __x64_sys_ioctl+0x18e/0x210 [ 386.690218][T19653] do_syscall_64+0x123/0x790 [ 386.690236][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.690253][T19653] RIP: 0033:0x7f1c1959e159 [ 386.690263][T19653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.690274][T19653] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.690285][T19653] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 386.690292][T19653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 386.690299][T19653] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 386.690305][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.690312][T19653] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 386.690327][T19653] [ 386.690363][T19653] Mem-Info: [ 386.690371][T19653] active_anon:11669 inactive_anon:4 isolated_anon:0 [ 386.690371][T19653] active_file:3023 inactive_file:51093 isolated_file:0 [ 386.690371][T19653] unevictable:1000 dirty:559 writeback:0 [ 386.690371][T19653] slab_reclaimable:10899 slab_unreclaimable:99117 [ 386.690371][T19653] mapped:26606 shmem:1578 pagetables:1971 [ 386.690371][T19653] sec_pagetables:310 bounce:0 [ 386.690371][T19653] kernel_misc_reclaimable:0 [ 386.690371][T19653] free:386943 free_pcp:8062 free_cma:0 [ 386.690397][T19653] Node 0 active_anon:46624kB inactive_anon:16kB active_file:12092kB inactive_file:204060kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:53068kB dirty:2192kB writeback:0kB shmem:6312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19616kB pagetables:7632kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.690425][T19653] Node 1 active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53356kB dirty:44kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.690453][T19653] Node 0 DMA free:15132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 386.690482][T19653] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 386.690500][T19653] Node 0 DMA32 free:101464kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46620kB inactive_anon:16kB active_file:12092kB inactive_file:204060kB unevictable:4000kB writepending:2192kB zspages:400kB present:2080628kB managed:1253104kB mlocked:0kB bounce:0kB free_pcp:23228kB local_pcp:2652kB free_cma:0kB [ 386.690531][T19653] lowmem_reserve[]: 0 0 0 0 0 [ 386.690549][T19653] Node 1 Normal free:1431176kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:44kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:9008kB local_pcp:4720kB free_cma:0kB [ 386.690579][T19653] lowmem_reserve[]: 0 0 0 0 0 [ 386.690596][T19653] Node 0 DMA: 21*4kB (UM) 15*8kB (UM) 19*16kB (UME) 13*32kB (UME) 14*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 1*4096kB (U) = 15132kB [ 386.690682][T19653] Node 0 DMA32: 277*4kB (UME) 310*8kB (UME) 85*16kB (UM) 71*32kB (UME) 45*64kB (UME) 31*128kB (ME) 21*256kB (M) 44*512kB (UM) 20*1024kB (UM) 13*2048kB (UM) 3*4096kB (UM) = 101364kB [ 386.690764][T19653] Node 1 Normal: 54*4kB (UM) 94*8kB (UM) 68*16kB (UME) 46*32kB (UME) 29*64kB (UME) 23*128kB (UME) 12*256kB (UME) 7*512kB (UM) 3*1024kB (ME) 4*2048kB (ME) 343*4096kB (UM) = 1431176kB [ 386.690847][T19653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.690856][T19653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.690865][T19653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.690873][T19653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.690881][T19653] 55687 total pagecache pages [ 386.690886][T19653] 1 pages in swap cache [ 386.690890][T19653] Free swap = 124876kB [ 386.690894][T19653] Total swap = 124996kB [ 386.690898][T19653] 1048443 pages RAM [ 386.690902][T19653] 0 pages HighMem/MovableOnly [ 386.690906][T19653] 285857 pages reserved [ 386.690910][T19653] 0 pages cma reserved [ 386.988186][T19663] xt_cgroup: invalid path, errno=-2 [ 386.989447][T19663] gfs2: gfs2 mount does not exist [ 387.014845][T19665] overlayfs: failed to resolve './file1': -2 [ 387.092644][T19671] FAULT_INJECTION: forcing a failure. [ 387.092644][T19671] name failslab, interval 1, probability 0, space 0, times 0 [ 387.092674][T19671] CPU: 1 UID: 0 PID: 19671 Comm: syz.3.4505 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.092698][T19671] Tainted: [L]=SOFTLOCKUP [ 387.092705][T19671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.092715][T19671] Call Trace: [ 387.092722][T19671] [ 387.092729][T19671] dump_stack_lvl+0x100/0x190 [ 387.092759][T19671] should_fail_ex.cold+0x5/0xa [ 387.092784][T19671] should_failslab+0xc2/0x120 [ 387.092809][T19671] __kmalloc_noprof+0xfc/0x840 [ 387.092830][T19671] ? tomoyo_encode2+0xfb/0x3c0 [ 387.092854][T19671] tomoyo_encode2+0xfb/0x3c0 [ 387.092872][T19671] tomoyo_encode+0x29/0x50 [ 387.092888][T19671] tomoyo_realpath_from_path+0x18c/0x690 [ 387.092907][T19671] tomoyo_path_number_perm+0x23c/0x580 [ 387.092921][T19671] ? tomoyo_path_number_perm+0x22e/0x580 [ 387.092936][T19671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.092951][T19671] ? rcu_read_unlock+0x17/0x60 [ 387.092975][T19671] ? __lock_acquire+0x5c0/0x1f40 [ 387.093029][T19671] ? current_check_access_path+0x262/0x420 [ 387.093050][T19671] ? __pfx_current_check_access_path+0x10/0x10 [ 387.093071][T19671] ? d_alloc_parallel+0x9f6/0x14c0 [ 387.093098][T19671] tomoyo_path_mknod+0x164/0x190 [ 387.093115][T19671] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 387.093133][T19671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.093159][T19671] security_path_mknod+0x161/0x300 [ 387.093186][T19671] may_o_create+0x30/0x3a0 [ 387.093213][T19671] lookup_open+0xe35/0x1990 [ 387.093243][T19671] path_openat+0xa2c/0x2440 [ 387.093271][T19671] ? __pfx_path_openat+0x10/0x10 [ 387.093301][T19671] do_file_open+0x20e/0x430 [ 387.093327][T19671] ? __pfx_do_file_open+0x10/0x10 [ 387.093369][T19671] ? alloc_fd+0x471/0x7a0 [ 387.093396][T19671] ? do_getname+0x191/0x390 [ 387.093415][T19671] do_sys_openat2+0x10f/0x1e0 [ 387.093441][T19671] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.093469][T19671] ? __fget_files+0x21f/0x3d0 [ 387.093497][T19671] __x64_sys_open+0xfe/0x1d0 [ 387.093522][T19671] ? __pfx___x64_sys_open+0x10/0x10 [ 387.093545][T19671] ? ksys_write+0x1ac/0x250 [ 387.093574][T19671] do_syscall_64+0x123/0x790 [ 387.093598][T19671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.093615][T19671] RIP: 0033:0x7f057099e159 [ 387.093629][T19671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.093645][T19671] RSP: 002b:00007f05718d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 387.093663][T19671] RAX: ffffffffffffffda RBX: 00007f0570c25fa0 RCX: 00007f057099e159 [ 387.093674][T19671] RDX: 0000000000000021 RSI: 0000000000066842 RDI: 00002000000000c0 [ 387.093685][T19671] RBP: 00007f05718d7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.093696][T19671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.093706][T19671] R13: 00007f0570c26038 R14: 00007f0570c25fa0 R15: 00007ffd43d266a8 [ 387.093732][T19671] [ 387.102777][T19669] FAULT_INJECTION: forcing a failure. [ 387.102777][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 387.102805][T19669] CPU: 0 UID: 0 PID: 19669 Comm: syz.0.4504 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.102828][T19669] Tainted: [L]=SOFTLOCKUP [ 387.102834][T19669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.102844][T19669] Call Trace: [ 387.102850][T19669] [ 387.102858][T19669] dump_stack_lvl+0x100/0x190 [ 387.102888][T19669] should_fail_ex.cold+0x5/0xa [ 387.102913][T19669] should_failslab+0xc2/0x120 [ 387.102937][T19669] kmem_cache_alloc_noprof+0x92/0x6a0 [ 387.102958][T19669] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 387.102989][T19669] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 387.103020][T19669] mmu_topup_memory_caches+0x25/0x170 [ 387.103042][T19669] kvm_mmu_load+0xe8/0x2580 [ 387.103063][T19669] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 387.103089][T19669] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 387.103116][T19669] ? __pfx_kvm_mmu_load+0x10/0x10 [ 387.103135][T19669] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 387.103154][T19669] ? kvm_check_and_inject_events+0x896/0x1050 [ 387.103178][T19669] vcpu_run+0x419f/0x61a0 [ 387.103203][T19669] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 387.103237][T19669] ? __pfx_vcpu_run+0x10/0x10 [ 387.103261][T19669] ? lock_acquire+0x1d1/0x380 [ 387.103280][T19669] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 387.103305][T19669] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 387.103329][T19669] ? __local_bh_enable_ip+0xa5/0x120 [ 387.103352][T19669] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 387.103373][T19669] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 387.103398][T19669] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 387.103421][T19669] ? lock_acquire+0x1d1/0x380 [ 387.103440][T19669] ? do_raw_write_lock+0x11e/0x260 [ 387.103463][T19669] ? find_held_lock+0x2b/0x80 [ 387.103487][T19669] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 387.103508][T19669] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 387.103529][T19669] kvm_vcpu_ioctl+0x730/0x1700 [ 387.103546][T19669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.103562][T19669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.103578][T19669] ? do_vfs_ioctl+0x226/0x13e0 [ 387.103592][T19669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 387.103604][T19669] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 387.103622][T19669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 387.103647][T19669] ? __fget_files+0x34/0x3d0 [ 387.103681][T19669] ? selinux_file_ioctl+0x13b/0x290 [ 387.103702][T19669] ? selinux_file_ioctl+0xb6/0x290 [ 387.103725][T19669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.103750][T19669] __x64_sys_ioctl+0x18e/0x210 [ 387.103771][T19669] do_syscall_64+0x123/0x790 [ 387.103809][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.103828][T19669] RIP: 0033:0x7f1c1959e159 [ 387.103842][T19669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.103863][T19669] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.103879][T19669] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 387.103889][T19669] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 387.103899][T19669] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 387.103910][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.103919][T19669] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 387.103944][T19669] [ 387.106527][T19671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.106645][T19671] overlayfs: failed lookup in lower (newroot/168, name='file1', err=-40): overlapping layers [ 387.125837][ T5874] page_pool_release_retry() stalled pool shutdown: id 151, 1 inflight 60 sec [ 387.378110][T19686] Invalid option length (480) for dns_resolver key [ 387.531075][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 387.611098][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 387.939167][T19714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.942093][T19715] ip_tables: iptables: counters copy to user failed while replacing table [ 388.081540][T19714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.111012][T19719] overlayfs: overlapping lowerdir path [ 388.157028][T19714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.296406][T19714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.433648][ T5588] usb 12-1: USB disconnect, device number 16 [ 388.487989][T19736] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 388.604203][T19745] overlayfs: overlapping lowerdir path [ 388.692579][T19753] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 388.728638][T19759] FAULT_INJECTION: forcing a failure. [ 388.728638][T19759] name failslab, interval 1, probability 0, space 0, times 0 [ 388.728672][T19759] CPU: 1 UID: 0 PID: 19759 Comm: syz.0.4535 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.728698][T19759] Tainted: [L]=SOFTLOCKUP [ 388.728707][T19759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.728719][T19759] Call Trace: [ 388.728726][T19759] [ 388.728734][T19759] dump_stack_lvl+0x100/0x190 [ 388.728774][T19759] should_fail_ex.cold+0x5/0xa [ 388.728800][T19759] should_failslab+0xc2/0x120 [ 388.728828][T19759] __kmalloc_noprof+0xfc/0x840 [ 388.728851][T19759] ? tomoyo_encode2+0xfb/0x3c0 [ 388.728880][T19759] tomoyo_encode2+0xfb/0x3c0 [ 388.728910][T19759] tomoyo_encode+0x29/0x50 [ 388.728935][T19759] tomoyo_realpath_from_path+0x18c/0x690 [ 388.728966][T19759] tomoyo_path_number_perm+0x23c/0x580 [ 388.728987][T19759] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.729012][T19759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.729044][T19759] ? __lock_acquire+0x5c0/0x1f40 [ 388.729078][T19759] ? __fget_files+0x34/0x3d0 [ 388.729103][T19759] ? find_held_lock+0x2b/0x80 [ 388.729130][T19759] ? hook_file_ioctl_common+0x140/0x440 [ 388.729163][T19759] ? __fget_files+0x21f/0x3d0 [ 388.729192][T19759] security_file_ioctl+0xd3/0x230 [ 388.729218][T19759] __x64_sys_ioctl+0xb7/0x210 [ 388.729240][T19759] do_syscall_64+0x123/0x790 [ 388.729262][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.729280][T19759] RIP: 0033:0x7f1c1959e159 [ 388.729294][T19759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.729309][T19759] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.729328][T19759] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 388.729339][T19759] RDX: 0000200000000980 RSI: 0000000000002289 RDI: 0000000000000003 [ 388.729350][T19759] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 388.729361][T19759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.729373][T19759] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 388.729397][T19759] [ 388.729415][T19759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.833863][T19767] overlayfs: overlapping lowerdir path [ 388.944530][T19777] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 389.026535][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4542'. [ 389.045820][T19773] netlink: 'syz.3.4542': attribute type 28 has an invalid length. [ 389.045842][T19773] netlink: 'syz.3.4542': attribute type 3 has an invalid length. [ 389.045853][T19773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4542'. [ 389.057580][T19784] xt_hashlimit: size too large, truncated to 1048576 [ 389.357766][T19798] »»»»»»: renamed from vlan0 (while UP) [ 389.436751][T19803] overlayfs: overlapping lowerdir path [ 389.539551][T19809] FAULT_INJECTION: forcing a failure. [ 389.539551][T19809] name failslab, interval 1, probability 0, space 0, times 0 [ 389.539573][T19809] CPU: 2 UID: 0 PID: 19809 Comm: syz.7.4554 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.539588][T19809] Tainted: [L]=SOFTLOCKUP [ 389.539592][T19809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.539600][T19809] Call Trace: [ 389.539604][T19809] [ 389.539609][T19809] dump_stack_lvl+0x100/0x190 [ 389.539629][T19809] should_fail_ex.cold+0x5/0xa [ 389.539646][T19809] should_failslab+0xc2/0x120 [ 389.539663][T19809] __kmalloc_noprof+0xfc/0x840 [ 389.539678][T19809] ? lsm_blob_alloc+0x68/0x90 [ 389.539692][T19809] lsm_blob_alloc+0x68/0x90 [ 389.539702][T19809] security_task_alloc+0x2a/0x260 [ 389.539719][T19809] copy_process+0x2c11/0x8380 [ 389.539741][T19809] ? __pfx_copy_process+0x10/0x10 [ 389.539754][T19809] ? kasan_save_track+0x14/0x30 [ 389.539768][T19809] ? __kasan_kmalloc+0xaa/0xb0 [ 389.539783][T19809] ? lockdep_init_map_type+0x5c/0x250 [ 389.539799][T19809] ? lockdep_init_map_type+0x5c/0x250 [ 389.539813][T19809] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 389.539832][T19809] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 389.539848][T19809] vhost_task_create+0x1db/0x370 [ 389.539859][T19809] ? __pfx_vhost_task_create+0x10/0x10 [ 389.539875][T19809] ? __pfx_vhost_task_fn+0x10/0x10 [ 389.539887][T19809] ? register_lock_class+0x3f/0x7b0 [ 389.539900][T19809] ? rcu_is_watching+0x13/0xc0 [ 389.539917][T19809] ? trace_contention_end+0x126/0x160 [ 389.539933][T19809] kvm_mmu_post_init_vm+0x1b3/0x360 [ 389.539948][T19809] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 389.539963][T19809] ? __pfx___mutex_lock+0x10/0x10 [ 389.539976][T19809] ? kasan_quarantine_put+0x104/0x240 [ 389.539992][T19809] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 389.540006][T19809] ? lock_acquire+0x1d1/0x380 [ 389.540023][T19809] ? do_raw_write_lock+0x11e/0x260 [ 389.540046][T19809] ? find_held_lock+0x2b/0x80 [ 389.540073][T19809] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 389.540094][T19809] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 389.540113][T19809] kvm_vcpu_ioctl+0x730/0x1700 [ 389.540131][T19809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.540147][T19809] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.540167][T19809] ? do_vfs_ioctl+0x226/0x13e0 [ 389.540181][T19809] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 389.540192][T19809] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 389.540209][T19809] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 389.540227][T19809] ? __fget_files+0x34/0x3d0 [ 389.540248][T19809] ? selinux_file_ioctl+0x13b/0x290 [ 389.540263][T19809] ? selinux_file_ioctl+0xb6/0x290 [ 389.540278][T19809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.540295][T19809] __x64_sys_ioctl+0x18e/0x210 [ 389.540309][T19809] do_syscall_64+0x123/0x790 [ 389.540323][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.540335][T19809] RIP: 0033:0x7fb86a39e159 [ 389.540345][T19809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.540356][T19809] RSP: 002b:00007fb8685f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.540368][T19809] RAX: ffffffffffffffda RBX: 00007fb86a625fa0 RCX: 00007fb86a39e159 [ 389.540375][T19809] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000098 [ 389.540382][T19809] RBP: 00007fb8685f6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.540389][T19809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.540396][T19809] R13: 00007fb86a626038 R14: 00007fb86a625fa0 R15: 00007fff8f365918 [ 389.540411][T19809] [ 389.694136][T19818] overlayfs: overlapping lowerdir path [ 389.706832][T19821] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 389.774772][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4562'. [ 389.855323][T19834] FAULT_INJECTION: forcing a failure. [ 389.855323][T19834] name fail_futex, interval 1, probability 0, space 0, times 0 [ 389.855358][T19834] CPU: 2 UID: 0 PID: 19834 Comm: syz.7.4565 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.855387][T19834] Tainted: [L]=SOFTLOCKUP [ 389.855396][T19834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.855409][T19834] Call Trace: [ 389.855416][T19834] [ 389.855425][T19834] dump_stack_lvl+0x100/0x190 [ 389.855461][T19834] should_fail_ex.cold+0x5/0xa [ 389.855490][T19834] get_futex_key+0x1d0/0x14f0 [ 389.855523][T19834] ? __pfx_get_futex_key+0x10/0x10 [ 389.855553][T19834] ? ___sys_sendmsg+0x127/0x1e0 [ 389.855581][T19834] futex_wake+0xf4/0x5e0 [ 389.855600][T19834] ? futex_wait+0x11e/0x370 [ 389.855624][T19834] ? __pfx_futex_wake+0x10/0x10 [ 389.855649][T19834] ? find_held_lock+0x2b/0x80 [ 389.855684][T19834] do_futex+0x2b2/0x440 [ 389.855714][T19834] ? __pfx_do_futex+0x10/0x10 [ 389.855745][T19834] ? fput+0x7c/0x100 [ 389.855777][T19834] __x64_sys_futex+0x34f/0x4d0 [ 389.855810][T19834] ? __pfx___x64_sys_futex+0x10/0x10 [ 389.855850][T19834] do_syscall_64+0x123/0x790 [ 389.855877][T19834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.855916][T19834] RIP: 0033:0x7fb86a39e159 [ 389.855935][T19834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.855956][T19834] RSP: 002b:00007fb8685f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 389.855977][T19834] RAX: ffffffffffffffda RBX: 00007fb86a625fa8 RCX: 00007fb86a39e159 [ 389.855991][T19834] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb86a625fac [ 389.856004][T19834] RBP: 00007fb86a625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 389.856017][T19834] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 389.856030][T19834] R13: 00007fb86a626038 R14: 00007fff8f365830 R15: 00007fff8f365918 [ 389.856058][T19834] [ 390.020823][T19845] FAULT_INJECTION: forcing a failure. [ 390.020823][T19845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.020855][T19845] CPU: 3 UID: 0 PID: 19845 Comm: syz.0.4569 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.020879][T19845] Tainted: [L]=SOFTLOCKUP [ 390.020885][T19845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.020896][T19845] Call Trace: [ 390.020902][T19845] [ 390.020907][T19845] dump_stack_lvl+0x100/0x190 [ 390.020936][T19845] should_fail_ex.cold+0x5/0xa [ 390.020961][T19845] _copy_from_user+0x2e/0xd0 [ 390.020984][T19845] memdup_user+0x6b/0xe0 [ 390.021002][T19845] strndup_user+0x78/0xe0 [ 390.021018][T19845] __x64_sys_mount+0x136/0x310 [ 390.021036][T19845] ? __pfx___x64_sys_mount+0x10/0x10 [ 390.021060][T19845] do_syscall_64+0x123/0x790 [ 390.021082][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.021099][T19845] RIP: 0033:0x7f1c1959e159 [ 390.021110][T19845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.021125][T19845] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 390.021144][T19845] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 390.021155][T19845] RDX: 0000200000000100 RSI: 00002000000001c0 RDI: 0000200000000240 [ 390.021166][T19845] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 390.021177][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.021188][T19845] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 390.021206][T19845] [ 390.052988][T19847] overlayfs: overlapping lowerdir path [ 390.072618][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4571'. [ 390.163953][T19859] FAULT_INJECTION: forcing a failure. [ 390.163953][T19859] name failslab, interval 1, probability 0, space 0, times 0 [ 390.163975][T19859] CPU: 0 UID: 0 PID: 19859 Comm: syz.2.4577 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.163990][T19859] Tainted: [L]=SOFTLOCKUP [ 390.163995][T19859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.164001][T19859] Call Trace: [ 390.164005][T19859] [ 390.164010][T19859] dump_stack_lvl+0x100/0x190 [ 390.164030][T19859] should_fail_ex.cold+0x5/0xa [ 390.164047][T19859] should_failslab+0xc2/0x120 [ 390.164063][T19859] kmem_cache_alloc_noprof+0x92/0x6a0 [ 390.164078][T19859] ? skb_clone+0x190/0x400 [ 390.164097][T19859] skb_clone+0x190/0x400 [ 390.164119][T19859] netlink_deliver_tap+0xaed/0xcc0 [ 390.164144][T19859] netlink_unicast+0x6a5/0x850 [ 390.164168][T19859] ? __pfx_netlink_unicast+0x10/0x10 [ 390.164199][T19859] netlink_ack+0x655/0xb80 [ 390.164228][T19859] netlink_rcv_skb+0x333/0x420 [ 390.164254][T19859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.164272][T19859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.164293][T19859] ? netlink_deliver_tap+0x1ae/0xcc0 [ 390.164310][T19859] netlink_unicast+0x585/0x850 [ 390.164328][T19859] ? __pfx_netlink_unicast+0x10/0x10 [ 390.164343][T19859] ? __pfx_sock_has_perm+0x10/0x10 [ 390.164360][T19859] netlink_sendmsg+0x8b0/0xda0 [ 390.164378][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.164395][T19859] ? selinux_socket_sendmsg+0x198/0x2f0 [ 390.164412][T19859] ____sys_sendmsg+0xa4d/0xbe0 [ 390.164423][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.164440][T19859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.164455][T19859] ? lock_acquire+0x1d1/0x380 [ 390.164468][T19859] ? get_pid_task+0x2a/0x250 [ 390.164485][T19859] ___sys_sendmsg+0x190/0x1e0 [ 390.164499][T19859] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.164512][T19859] ? get_pid_task+0x106/0x250 [ 390.164532][T19859] ? find_held_lock+0x2b/0x80 [ 390.164558][T19859] __sys_sendmsg+0x160/0x210 [ 390.164574][T19859] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.164598][T19859] do_syscall_64+0x123/0x790 [ 390.164618][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.164630][T19859] RIP: 0033:0x7f83a279e159 [ 390.164640][T19859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.164650][T19859] RSP: 002b:00007f83a36b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.164662][T19859] RAX: ffffffffffffffda RBX: 00007f83a2a25fa0 RCX: 00007f83a279e159 [ 390.164669][T19859] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 390.164676][T19859] RBP: 00007f83a36b7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.164682][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.164689][T19859] R13: 00007f83a2a26038 R14: 00007f83a2a25fa0 R15: 00007fffd6524c88 [ 390.164703][T19859] [ 390.190654][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4573'. [ 390.403654][T19875] overlayfs: overlapping lowerdir path [ 390.428487][ T43] kauditd_printk_skb: 279 callbacks suppressed [ 390.428504][ T43] audit: type=1400 audit(1791071284.212:1968): avc: denied { unmount } for pid=18788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.429175][ T43] audit: type=1400 audit(1791071284.212:1969): avc: denied { recv } for pid=5708 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40992 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 390.452773][ T43] audit: type=1400 audit(1791071284.242:1970): avc: denied { create } for pid=19878 comm="syz.2.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.468873][ T43] audit: type=1400 audit(1791071284.252:1971): avc: denied { create } for pid=19880 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.469665][ T43] audit: type=1400 audit(1791071284.252:1972): avc: denied { bind } for pid=19880 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.471475][ T43] audit: type=1400 audit(1791071284.252:1973): avc: denied { accept } for pid=19880 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.496997][ T43] audit: type=1400 audit(1791071284.282:1974): avc: denied { create } for pid=19880 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 390.497272][T19886] FAULT_INJECTION: forcing a failure. [ 390.497272][T19886] name failslab, interval 1, probability 0, space 0, times 0 [ 390.497295][T19886] CPU: 2 UID: 0 PID: 19886 Comm: syz.2.4585 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.497318][T19886] Tainted: [L]=SOFTLOCKUP [ 390.497324][T19886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.497326][ T43] audit: type=1400 audit(1791071284.282:1975): avc: denied { write } for pid=19880 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 390.497335][T19886] Call Trace: [ 390.497349][T19886] [ 390.497358][T19886] dump_stack_lvl+0x100/0x190 [ 390.497400][T19886] should_fail_ex.cold+0x5/0xa [ 390.497427][T19886] should_failslab+0xc2/0x120 [ 390.497457][T19886] kmem_cache_alloc_noprof+0x92/0x6a0 [ 390.497481][T19886] ? security_file_alloc+0x34/0x2c0 [ 390.497503][T19886] security_file_alloc+0x34/0x2c0 [ 390.497519][T19886] init_file+0x95/0x480 [ 390.497536][T19886] alloc_empty_file+0x79/0x1c0 [ 390.497554][T19886] alloc_file_pseudo+0x183/0x290 [ 390.497572][T19886] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 390.497590][T19886] ? alloc_fd+0x471/0x7a0 [ 390.497609][T19886] sock_alloc_file+0x50/0x210 [ 390.497631][T19886] __sys_socket+0x1c0/0x260 [ 390.497644][T19886] ? __pfx___sys_socket+0x10/0x10 [ 390.497657][T19886] ? ksys_write+0x1ac/0x250 [ 390.497673][T19886] __x64_sys_socket+0x72/0xb0 [ 390.497701][T19886] ? lockdep_hardirqs_on+0x7d/0x110 [ 390.497721][T19886] do_syscall_64+0x123/0x790 [ 390.497734][T19886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.497746][T19886] RIP: 0033:0x7f83a279e159 [ 390.497756][T19886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.497767][T19886] RSP: 002b:00007f83a36b6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 390.497783][T19886] RAX: ffffffffffffffda RBX: 00007f83a2a25fa0 RCX: 00007f83a279e159 [ 390.497790][T19886] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 390.497797][T19886] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000101 [ 390.497803][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.497810][T19886] R13: 00007f83a2a26038 R14: 00007f83a2a25fa0 R15: 00007fffd6524c88 [ 390.497824][T19886] [ 390.553994][ T43] audit: type=1400 audit(1791071284.342:1976): avc: denied { write } for pid=19887 comm="syz.2.4586" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 390.554040][ T43] audit: type=1400 audit(1791071284.342:1977): avc: denied { open } for pid=19887 comm="syz.2.4586" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 390.652520][T19889] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 390.723764][T19893] netlink: 'syz.3.4588': attribute type 2 has an invalid length. [ 390.764177][T19895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=19895 comm=syz.3.4589 [ 390.995617][T19906] overlayfs: overlapping lowerdir path [ 391.025247][T19910] input: syz0 as /devices/virtual/input/input29 [ 391.495986][T19917] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 391.721131][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4603'. [ 391.754294][T19932] overlayfs: overlapping lowerdir path [ 392.071590][ T5874] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 392.221346][ T5874] usb 7-1: device descriptor read/64, error -71 [ 392.471309][ T5874] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 392.613385][ T5874] usb 7-1: device descriptor read/64, error -71 [ 392.644595][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4610'. [ 392.644596][T19953] FAULT_INJECTION: forcing a failure. [ 392.644596][T19953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.644631][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.0.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.644649][T19953] Tainted: [L]=SOFTLOCKUP [ 392.644653][T19953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.644660][T19953] Call Trace: [ 392.644664][T19953] [ 392.644670][T19953] dump_stack_lvl+0x100/0x190 [ 392.644690][T19953] should_fail_ex.cold+0x5/0xa [ 392.644708][T19953] _copy_to_user+0x32/0xd0 [ 392.644729][T19953] simple_read_from_buffer+0xcb/0x170 [ 392.644753][T19953] proc_fail_nth_read+0x1af/0x230 [ 392.644776][T19953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.644802][T19953] ? rw_verify_area+0xce/0x6d0 [ 392.644821][T19953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.644844][T19953] vfs_read+0x1e4/0xb40 [ 392.644867][T19953] ? lock_acquire+0x1d1/0x380 [ 392.644888][T19953] ? __fget_files+0x34/0x3d0 [ 392.644913][T19953] ? __pfx_vfs_read+0x10/0x10 [ 392.644932][T19953] ? find_held_lock+0x2b/0x80 [ 392.644959][T19953] ? __fget_files+0x215/0x3d0 [ 392.644988][T19953] ? __fget_files+0x21f/0x3d0 [ 392.645021][T19953] ksys_read+0x12a/0x250 [ 392.645041][T19953] ? __pfx_ksys_read+0x10/0x10 [ 392.645070][T19953] do_syscall_64+0x123/0x790 [ 392.645095][T19953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.645115][T19953] RIP: 0033:0x7f1c1955e98e [ 392.645131][T19953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 392.645147][T19953] RSP: 002b:00007f1c1a3e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.645167][T19953] RAX: ffffffffffffffda RBX: 00007f1c1a3e96c0 RCX: 00007f1c1955e98e [ 392.645179][T19953] RDX: 000000000000000f RSI: 00007f1c1a3e90a0 RDI: 0000000000000005 [ 392.645191][T19953] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 392.645202][T19953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.645213][T19953] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 392.645240][T19953] [ 392.699420][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4610'. [ 392.742918][T19957] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 392.745049][ T5874] usb usb7-port1: attempt power cycle [ 392.858250][T19962] overlayfs: overlapping lowerdir path [ 392.912901][T19966] »»»»»»: renamed from vlan0 (while UP) [ 392.916804][T19964] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 392.991642][T19964] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 393.012343][T19969] overlayfs: overlapping lowerdir path [ 393.110977][ T5874] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 393.133437][ T5874] usb 7-1: device descriptor read/8, error -71 [ 393.153544][T19971] ip_tables: iptables: counters copy to user failed while replacing table [ 393.380768][ T5874] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 393.401429][ T5874] usb 7-1: device descriptor read/8, error -71 [ 393.521027][ T5874] usb usb7-port1: unable to enumerate USB device [ 393.750606][ T30] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 393.910524][ T30] usb 12-1: Using ep0 maxpacket: 32 [ 393.912711][ T30] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 393.913576][ T30] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 393.913601][ T30] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 393.913615][ T30] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.913628][ T30] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 393.915390][ T30] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.915402][ T30] usb 12-1: Product: syz [ 393.915410][ T30] usb 12-1: Manufacturer: syz [ 393.915417][ T30] usb 12-1: SerialNumber: syz [ 393.924712][ C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 393.940627][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input30 [ 394.126650][T19994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.127038][T19994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.140682][ T30] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 394.140695][ T30] (id 0x00) [ 394.180593][ T30] rc_core: IR keymap rc-imon-pad not found [ 394.180610][ T30] Registered IR keymap rc-empty [ 394.180673][ T30] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 394.180683][ T30] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 394.213009][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 394.216949][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input31 [ 394.221047][ T30] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:17> initialized [ 394.271636][T20000] FAULT_INJECTION: forcing a failure. [ 394.271636][T20000] name failslab, interval 1, probability 0, space 0, times 0 [ 394.271666][T20000] CPU: 0 UID: 0 PID: 20000 Comm: syz.0.4625 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.271690][T20000] Tainted: [L]=SOFTLOCKUP [ 394.271699][T20000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.271710][T20000] Call Trace: [ 394.271718][T20000] [ 394.271726][T20000] dump_stack_lvl+0x100/0x190 [ 394.271754][T20000] should_fail_ex.cold+0x5/0xa [ 394.271774][T20000] should_failslab+0xc2/0x120 [ 394.271791][T20000] __kmalloc_cache_noprof+0x91/0x6d0 [ 394.271803][T20000] ? tc_new_tfilter+0xf83/0x24e0 [ 394.271821][T20000] tc_new_tfilter+0xf83/0x24e0 [ 394.271841][T20000] ? avc_has_perm_noaudit+0xc0/0x470 [ 394.271859][T20000] ? avc_has_perm_noaudit+0x11e/0x470 [ 394.271878][T20000] ? __pfx_tc_new_tfilter+0x10/0x10 [ 394.271898][T20000] ? __lock_acquire+0x5c0/0x1f40 [ 394.271917][T20000] ? lock_acquire+0x1d1/0x380 [ 394.271929][T20000] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 394.271941][T20000] ? find_held_lock+0x2b/0x80 [ 394.271958][T20000] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 394.271969][T20000] ? __pfx_tc_new_tfilter+0x10/0x10 [ 394.271984][T20000] rtnetlink_rcv_msg+0x95e/0xe90 [ 394.271996][T20000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.272011][T20000] ? ref_tracker_free+0x37e/0x6c0 [ 394.272030][T20000] netlink_rcv_skb+0x159/0x420 [ 394.272046][T20000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.272058][T20000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.272078][T20000] ? netlink_deliver_tap+0x1ae/0xcc0 [ 394.272096][T20000] netlink_unicast+0x585/0x850 [ 394.272113][T20000] ? __pfx_netlink_unicast+0x10/0x10 [ 394.272130][T20000] ? __pfx_sock_has_perm+0x10/0x10 [ 394.272146][T20000] netlink_sendmsg+0x8b0/0xda0 [ 394.272164][T20000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.272181][T20000] ? selinux_socket_sendmsg+0x198/0x2f0 [ 394.272211][T20000] ____sys_sendmsg+0xa4d/0xbe0 [ 394.272225][T20000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.272242][T20000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.272257][T20000] ? lock_acquire+0x1d1/0x380 [ 394.272270][T20000] ? get_pid_task+0x2a/0x250 [ 394.272287][T20000] ___sys_sendmsg+0x190/0x1e0 [ 394.272301][T20000] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.272314][T20000] ? get_pid_task+0x106/0x250 [ 394.272335][T20000] ? find_held_lock+0x2b/0x80 [ 394.272361][T20000] __sys_sendmsg+0x160/0x210 [ 394.272377][T20000] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.272402][T20000] do_syscall_64+0x123/0x790 [ 394.272416][T20000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.272428][T20000] RIP: 0033:0x7f1c1959e159 [ 394.272438][T20000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.272449][T20000] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.272461][T20000] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 394.272469][T20000] RDX: 0000000024000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 394.272476][T20000] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 394.272482][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.272489][T20000] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 394.272503][T20000] [ 394.318803][T20002] overlayfs: overlapping lowerdir path [ 394.463609][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4627'. [ 394.465036][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4627'. [ 394.483373][T19994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.483616][T19994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.200154][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 395.298306][T20036] ip_tables: iptables: counters copy to user failed while replacing table [ 395.431770][ T43] kauditd_printk_skb: 214 callbacks suppressed [ 395.431789][ T43] audit: type=1400 audit(1791071289.224:2192): avc: denied { prog_load } for pid=20037 comm="syz.2.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.433167][ T43] audit: type=1400 audit(1791071289.224:2193): avc: denied { prog_run } for pid=20037 comm="syz.2.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.480490][ T43] audit: type=1400 audit(1791071289.274:2194): avc: denied { map_create } for pid=20039 comm="syz.2.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.480624][ T43] audit: type=1400 audit(1791071289.274:2195): avc: denied { map_read map_write } for pid=20039 comm="syz.2.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.545291][ T43] audit: type=1400 audit(1791071289.334:2196): avc: denied { create } for pid=20043 comm="syz.2.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.612857][ T43] audit: type=1400 audit(1791071289.404:2197): avc: denied { mount } for pid=20047 comm="syz.2.4643" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 395.614278][ T43] audit: type=1400 audit(1791071289.404:2198): avc: denied { mount } for pid=20047 comm="syz.2.4643" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 395.626297][ T43] audit: type=1400 audit(1791071289.414:2199): avc: denied { unlink } for pid=20047 comm="syz.2.4643" name="#75" dev="sda1" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 395.628435][T20048] overlayfs: overlapping lowerdir path [ 395.657265][ T43] audit: type=1400 audit(1791071289.444:2200): avc: denied { unmount } for pid=19097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 395.664129][ T43] audit: type=1400 audit(1791071289.444:2201): avc: denied { unmount } for pid=19097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 396.155468][ T5084] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 396.172418][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 396.177283][T20064] netlink: 'syz.3.4650': attribute type 28 has an invalid length. [ 396.177296][T20064] netlink: 'syz.3.4650': attribute type 3 has an invalid length. [ 396.177303][T20064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4650'. [ 396.205972][T20078] can0: slcan on ttynull. [ 396.260316][T20077] can0 (unregistered): slcan off ttynull. [ 396.506798][ T6311] usb 12-1: USB disconnect, device number 17 [ 396.724943][T20114] FAULT_INJECTION: forcing a failure. [ 396.724943][T20114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.724964][T20114] CPU: 0 UID: 0 PID: 20114 Comm: syz.0.4662 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.724980][T20114] Tainted: [L]=SOFTLOCKUP [ 396.724984][T20114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.724991][T20114] Call Trace: [ 396.724995][T20114] [ 396.725000][T20114] dump_stack_lvl+0x100/0x190 [ 396.725031][T20114] should_fail_ex.cold+0x5/0xa [ 396.725047][T20114] _copy_to_user+0x32/0xd0 [ 396.725066][T20114] simple_read_from_buffer+0xcb/0x170 [ 396.725083][T20114] proc_fail_nth_read+0x1af/0x230 [ 396.725100][T20114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.725116][T20114] ? rw_verify_area+0xce/0x6d0 [ 396.725128][T20114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.725143][T20114] vfs_read+0x1e4/0xb40 [ 396.725156][T20114] ? lock_acquire+0x1d1/0x380 [ 396.725169][T20114] ? __fget_files+0x34/0x3d0 [ 396.725184][T20114] ? __pfx_vfs_read+0x10/0x10 [ 396.725195][T20114] ? find_held_lock+0x2b/0x80 [ 396.725212][T20114] ? __fget_files+0x215/0x3d0 [ 396.725230][T20114] ? __fget_files+0x21f/0x3d0 [ 396.725249][T20114] ksys_read+0x12a/0x250 [ 396.725262][T20114] ? __pfx_ksys_read+0x10/0x10 [ 396.725281][T20114] do_syscall_64+0x123/0x790 [ 396.725299][T20114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.725311][T20114] RIP: 0033:0x7f1c1955e98e [ 396.725320][T20114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.725331][T20114] RSP: 002b:00007f1c1a3e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.725342][T20114] RAX: ffffffffffffffda RBX: 00007f1c1a3e96c0 RCX: 00007f1c1955e98e [ 396.725349][T20114] RDX: 000000000000000f RSI: 00007f1c1a3e90a0 RDI: 0000000000000004 [ 396.725356][T20114] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 396.725363][T20114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.725369][T20114] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 396.725384][T20114] [ 397.138986][ T58] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 397.157253][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4672'. [ 397.164754][T20141] netlink: 'syz.7.4672': attribute type 28 has an invalid length. [ 397.164773][T20141] netlink: 'syz.7.4672': attribute type 3 has an invalid length. [ 397.164786][T20141] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4672'. [ 397.289668][ T58] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 397.290741][ T58] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.290762][ T58] usb 7-1: config 1 has no interface number 0 [ 397.292658][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.292679][ T58] usb 7-1: Product: syz [ 397.292692][ T58] usb 7-1: Manufacturer: syz [ 397.292704][ T58] usb 7-1: SerialNumber: syz [ 397.302694][ T58] usb 7-1: 3:0 : does not exist [ 397.302715][ T58] usb 7-1: 3:0 : does not exist [ 397.541235][T20161] FAULT_INJECTION: forcing a failure. [ 397.541235][T20161] name failslab, interval 1, probability 0, space 0, times 0 [ 397.541270][T20161] CPU: 3 UID: 0 PID: 20161 Comm: syz.0.4676 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.541296][T20161] Tainted: [L]=SOFTLOCKUP [ 397.541303][T20161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.541314][T20161] Call Trace: [ 397.541323][T20161] [ 397.541333][T20161] dump_stack_lvl+0x100/0x190 [ 397.541364][T20161] should_fail_ex.cold+0x5/0xa [ 397.541394][T20161] should_failslab+0xc2/0x120 [ 397.541420][T20161] kmem_cache_alloc_noprof+0x92/0x6a0 [ 397.541444][T20161] ? d_instantiate+0x8a/0xb0 [ 397.541464][T20161] ? alloc_empty_file+0x5b/0x1c0 [ 397.541498][T20161] alloc_empty_file+0x5b/0x1c0 [ 397.541528][T20161] alloc_file_pseudo+0x183/0x290 [ 397.541559][T20161] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 397.541595][T20161] ? alloc_fd+0x471/0x7a0 [ 397.541628][T20161] sock_alloc_file+0x50/0x210 [ 397.541669][T20161] __sys_socket+0x1c0/0x260 [ 397.541709][T20161] ? __pfx___sys_socket+0x10/0x10 [ 397.541732][T20161] ? ksys_write+0x1ac/0x250 [ 397.541763][T20161] __x64_sys_socket+0x72/0xb0 [ 397.541784][T20161] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.541806][T20161] do_syscall_64+0x123/0x790 [ 397.541830][T20161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.541852][T20161] RIP: 0033:0x7f1c1959e159 [ 397.541868][T20161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.541886][T20161] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 397.541905][T20161] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 397.541918][T20161] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 397.541930][T20161] RBP: 00007f1c1963506b R08: 0000000000000000 R09: 0000000000000000 [ 397.541941][T20161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.541955][T20161] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 397.541981][T20161] [ 397.643215][T20165] FAULT_INJECTION: forcing a failure. [ 397.643215][T20165] name failslab, interval 1, probability 0, space 0, times 0 [ 397.643245][T20165] CPU: 2 UID: 0 PID: 20165 Comm: syz.0.4678 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.643271][T20165] Tainted: [L]=SOFTLOCKUP [ 397.643278][T20165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.643288][T20165] Call Trace: [ 397.643297][T20165] [ 397.643304][T20165] dump_stack_lvl+0x100/0x190 [ 397.643336][T20165] should_fail_ex.cold+0x5/0xa [ 397.643363][T20165] should_failslab+0xc2/0x120 [ 397.643390][T20165] __kvmalloc_node_noprof+0x113/0x9b0 [ 397.643411][T20165] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 397.643432][T20165] ? percpu_ref_init+0xec/0x3f0 [ 397.643451][T20165] ? io_alloc_cache_init+0x38/0x170 [ 397.643475][T20165] io_alloc_cache_init+0x38/0x170 [ 397.643491][T20165] io_uring_setup.cold+0x4b5/0x1cde [ 397.643514][T20165] ? lock_acquire+0x1d1/0x380 [ 397.643535][T20165] ? avc_has_perm_noaudit+0x56/0x470 [ 397.643562][T20165] ? __pfx_io_uring_setup+0x10/0x10 [ 397.643587][T20165] ? find_held_lock+0x2b/0x80 [ 397.643614][T20165] ? avc_has_perm_noaudit+0x11e/0x470 [ 397.643641][T20165] ? avc_has_perm_noaudit+0x11e/0x470 [ 397.643687][T20165] ? ksys_write+0x1ac/0x250 [ 397.643708][T20165] ? __pfx_ksys_write+0x10/0x10 [ 397.643733][T20165] __x64_sys_io_uring_setup+0xc2/0x170 [ 397.643760][T20165] do_syscall_64+0x123/0x790 [ 397.643784][T20165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.643804][T20165] RIP: 0033:0x7f1c1959e159 [ 397.643820][T20165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.643836][T20165] RSP: 002b:00007f1c1a3e8ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 397.643856][T20165] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f1c1959e159 [ 397.643870][T20165] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 397.643881][T20165] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 397.643893][T20165] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 397.643904][T20165] R13: 0000200000000890 R14: 00007f1c1a3e8fd8 R15: 0000000000000000 [ 397.643927][T20165] [ 397.786823][T20174] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 397.786838][T20174] kvm [20173]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 397.803368][T20172] FAULT_INJECTION: forcing a failure. [ 397.803368][T20172] name failslab, interval 1, probability 0, space 0, times 0 [ 397.803401][T20172] CPU: 2 UID: 0 PID: 20172 Comm: syz.0.4681 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.803428][T20172] Tainted: [L]=SOFTLOCKUP [ 397.803437][T20172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.803447][T20172] Call Trace: [ 397.803455][T20172] [ 397.803463][T20172] dump_stack_lvl+0x100/0x190 [ 397.803493][T20172] should_fail_ex.cold+0x5/0xa [ 397.803521][T20172] should_failslab+0xc2/0x120 [ 397.803549][T20172] __kmalloc_node_noprof+0xff/0x880 [ 397.803572][T20172] ? __get_vm_area_node+0x1ff/0x350 [ 397.803597][T20172] ? __get_vm_area_node+0x22b/0x350 [ 397.803620][T20172] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 397.803653][T20172] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 397.803691][T20172] ? vhost_task_create+0x1db/0x370 [ 397.803713][T20172] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 397.803737][T20172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.803767][T20172] ? rcu_is_watching+0x13/0xc0 [ 397.803795][T20172] ? trace_kmem_cache_alloc+0xdd/0x100 [ 397.803824][T20172] ? vhost_task_create+0x1db/0x370 [ 397.803839][T20172] __vmalloc_node_noprof+0xad/0xf0 [ 397.803865][T20172] ? vhost_task_create+0x1db/0x370 [ 397.803887][T20172] copy_process+0x803/0x8380 [ 397.803923][T20172] ? __pfx_copy_process+0x10/0x10 [ 397.803942][T20172] ? kasan_save_track+0x14/0x30 [ 397.803965][T20172] ? __kasan_kmalloc+0xaa/0xb0 [ 397.803988][T20172] ? lockdep_init_map_type+0x5c/0x250 [ 397.804013][T20172] ? lockdep_init_map_type+0x5c/0x250 [ 397.804037][T20172] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 397.804066][T20172] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 397.804092][T20172] vhost_task_create+0x1db/0x370 [ 397.804112][T20172] ? __pfx_vhost_task_create+0x10/0x10 [ 397.804139][T20172] ? __pfx_vhost_task_fn+0x10/0x10 [ 397.804156][T20172] ? register_lock_class+0x3f/0x7b0 [ 397.804175][T20172] ? rcu_is_watching+0x13/0xc0 [ 397.804205][T20172] ? trace_contention_end+0x126/0x160 [ 397.804233][T20172] kvm_mmu_post_init_vm+0x1b3/0x360 [ 397.804259][T20172] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 397.804285][T20172] ? __pfx___mutex_lock+0x10/0x10 [ 397.804307][T20172] ? kasan_quarantine_put+0x104/0x240 [ 397.804334][T20172] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 397.804357][T20172] ? lock_acquire+0x1d1/0x380 [ 397.804380][T20172] ? do_raw_write_lock+0x11e/0x260 [ 397.804405][T20172] ? find_held_lock+0x2b/0x80 [ 397.804433][T20172] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 397.804459][T20172] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 397.804492][T20172] kvm_vcpu_ioctl+0x730/0x1700 [ 397.804521][T20172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.804548][T20172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.804576][T20172] ? do_vfs_ioctl+0x226/0x13e0 [ 397.804601][T20172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.804621][T20172] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 397.804650][T20172] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 397.804679][T20172] ? __fget_files+0x34/0x3d0 [ 397.804712][T20172] ? selinux_file_ioctl+0x13b/0x290 [ 397.804736][T20172] ? selinux_file_ioctl+0xb6/0x290 [ 397.804761][T20172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.804783][T20172] __x64_sys_ioctl+0x18e/0x210 [ 397.804808][T20172] do_syscall_64+0x123/0x790 [ 397.804832][T20172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.804853][T20172] RIP: 0033:0x7f1c1959e159 [ 397.804870][T20172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.804888][T20172] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.804908][T20172] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 397.804917][T20172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 397.804927][T20172] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 397.804955][T20172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.804968][T20172] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 397.804994][T20172] [ 397.805045][T20172] syz.0.4681: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.805104][T20172] CPU: 2 UID: 0 PID: 20172 Comm: syz.0.4681 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.805130][T20172] Tainted: [L]=SOFTLOCKUP [ 397.805136][T20172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.805147][T20172] Call Trace: [ 397.805154][T20172] [ 397.805162][T20172] dump_stack_lvl+0x100/0x190 [ 397.805192][T20172] warn_alloc.cold+0x9e/0xb2 [ 397.805218][T20172] ? __pfx_warn_alloc+0x10/0x10 [ 397.805237][T20172] ? dump_stack_lvl+0x17c/0x190 [ 397.805265][T20172] ? rcu_is_watching+0x13/0xc0 [ 397.805292][T20172] ? __kasan_kmalloc+0x8a/0xb0 [ 397.805317][T20172] ? __kmalloc_node_noprof+0x360/0x880 [ 397.805339][T20172] ? __get_vm_area_node+0x1ff/0x350 [ 397.805363][T20172] ? __get_vm_area_node+0x22b/0x350 [ 397.805386][T20172] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 397.805415][T20172] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 397.805452][T20172] ? vhost_task_create+0x1db/0x370 [ 397.805473][T20172] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 397.805494][T20172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.805523][T20172] ? rcu_is_watching+0x13/0xc0 [ 397.805550][T20172] ? trace_kmem_cache_alloc+0xdd/0x100 [ 397.805577][T20172] ? vhost_task_create+0x1db/0x370 [ 397.805594][T20172] __vmalloc_node_noprof+0xad/0xf0 [ 397.805622][T20172] ? vhost_task_create+0x1db/0x370 [ 397.805642][T20172] copy_process+0x803/0x8380 [ 397.805678][T20172] ? __pfx_copy_process+0x10/0x10 [ 397.805700][T20172] ? kasan_save_track+0x14/0x30 [ 397.805723][T20172] ? __kasan_kmalloc+0xaa/0xb0 [ 397.805747][T20172] ? lockdep_init_map_type+0x5c/0x250 [ 397.805770][T20172] ? lockdep_init_map_type+0x5c/0x250 [ 397.805795][T20172] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 397.805826][T20172] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 397.805853][T20172] vhost_task_create+0x1db/0x370 [ 397.805872][T20172] ? __pfx_vhost_task_create+0x10/0x10 [ 397.805899][T20172] ? __pfx_vhost_task_fn+0x10/0x10 [ 397.805920][T20172] ? register_lock_class+0x3f/0x7b0 [ 397.805943][T20172] ? rcu_is_watching+0x13/0xc0 [ 397.805971][T20172] ? trace_contention_end+0x126/0x160 [ 397.806000][T20172] kvm_mmu_post_init_vm+0x1b3/0x360 [ 397.806046][T20172] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 397.806071][T20172] ? __pfx___mutex_lock+0x10/0x10 [ 397.806090][T20172] ? kasan_quarantine_put+0x104/0x240 [ 397.806118][T20172] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 397.806139][T20172] ? lock_acquire+0x1d1/0x380 [ 397.806160][T20172] ? do_raw_write_lock+0x11e/0x260 [ 397.806186][T20172] ? find_held_lock+0x2b/0x80 [ 397.806217][T20172] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 397.806242][T20172] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 397.806273][T20172] kvm_vcpu_ioctl+0x730/0x1700 [ 397.806303][T20172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.806329][T20172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.806355][T20172] ? do_vfs_ioctl+0x226/0x13e0 [ 397.806378][T20172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.806398][T20172] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 397.806425][T20172] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 397.806453][T20172] ? __fget_files+0x34/0x3d0 [ 397.806487][T20172] ? selinux_file_ioctl+0x13b/0x290 [ 397.806508][T20172] ? selinux_file_ioctl+0xb6/0x290 [ 397.806534][T20172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.806562][T20172] __x64_sys_ioctl+0x18e/0x210 [ 397.806586][T20172] do_syscall_64+0x123/0x790 [ 397.806610][T20172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.806630][T20172] RIP: 0033:0x7f1c1959e159 [ 397.806647][T20172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.806664][T20172] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.806683][T20172] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 397.806695][T20172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 397.806706][T20172] RBP: 00007f1c1a3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 397.806718][T20172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.806726][T20172] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 397.806752][T20172] [ 397.806760][T20172] Mem-Info: [ 397.806768][T20172] active_anon:11651 inactive_anon:8 isolated_anon:0 [ 397.806768][T20172] active_file:4011 inactive_file:48071 isolated_file:0 [ 397.806768][T20172] unevictable:1000 dirty:116 writeback:0 [ 397.806768][T20172] slab_reclaimable:10921 slab_unreclaimable:98024 [ 397.806768][T20172] mapped:26483 shmem:1571 pagetables:1995 [ 397.806768][T20172] sec_pagetables:311 bounce:0 [ 397.806768][T20172] kernel_misc_reclaimable:0 [ 397.806768][T20172] free:386646 free_pcp:12354 free_cma:0 [ 397.806813][T20172] Node 0 active_anon:46552kB inactive_anon:32kB active_file:16044kB inactive_file:191972kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:52636kB dirty:464kB writeback:0kB shmem:6284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19744kB pagetables:7728kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.806859][T20172] Node 1 active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53296kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.806903][T20172] Node 0 DMA free:15132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 397.806949][T20172] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 397.806985][T20172] Node 0 DMA32 free:99748kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46548kB inactive_anon:32kB active_file:16044kB inactive_file:191972kB unevictable:4000kB writepending:464kB zspages:396kB present:2080628kB managed:1253104kB mlocked:0kB bounce:0kB free_pcp:40924kB local_pcp:17052kB free_cma:0kB [ 397.807037][T20172] lowmem_reserve[]: 0 0 0 0 0 [ 397.807069][T20172] Node 1 Normal free:1431704kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:8480kB local_pcp:4192kB free_cma:0kB [ 397.807120][T20172] lowmem_reserve[]: 0 0 0 0 0 [ 397.807153][T20172] Node 0 DMA: 21*4kB (UM) 15*8kB (UM) 19*16kB (UME) 13*32kB (UME) 14*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 1*4096kB (U) = 15132kB [ 397.807305][T20172] Node 0 DMA32: 108*4kB (UME) 159*8kB (UE) 162*16kB (UME) 169*32kB (UME) 25*64kB (UE) 59*128kB (UME) 43*256kB (UM) 46*512kB (UM) 19*1024kB (M) 7*2048kB (UM) 3*4096kB (UM) = 99496kB [ 397.807452][T20172] Node 1 Normal: 54*4kB (UM) 96*8kB (UM) 66*16kB (UME) 51*32kB (UME) 31*64kB (UME) 25*128kB (UME) 12*256kB (UME) 7*512kB (UM) 3*1024kB (ME) 4*2048kB (ME) 343*4096kB (UM) = 1431704kB [ 397.807593][T20172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.807609][T20172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.807621][T20172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.807634][T20172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.807649][T20172] 53656 total pagecache pages [ 397.807655][T20172] 11 pages in swap cache [ 397.807663][T20172] Free swap = 124836kB [ 397.807670][T20172] Total swap = 124996kB [ 397.807678][T20172] 1048443 pages RAM [ 397.807685][T20172] 0 pages HighMem/MovableOnly [ 397.807691][T20172] 285857 pages reserved [ 397.807699][T20172] 0 pages cma reserved [ 398.386975][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4688'. [ 398.394086][T20195] netlink: 'syz.7.4688': attribute type 28 has an invalid length. [ 398.394111][T20195] netlink: 'syz.7.4688': attribute type 3 has an invalid length. [ 398.394123][T20195] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4688'. [ 398.625966][T20212] kvm [20211]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 399.078149][ T5588] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 399.228761][ T5588] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 399.229946][ T5588] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 399.229968][ T5588] usb 5-1: config 1 has no interface number 0 [ 399.229999][ T5588] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 399.230046][ T5588] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 399.230073][ T5588] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.234917][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.234937][ T5588] usb 5-1: Product: syz [ 399.234948][ T5588] usb 5-1: Manufacturer: syz [ 399.234959][ T5588] usb 5-1: SerialNumber: syz [ 399.238867][T20215] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.313562][T20233] FAULT_INJECTION: forcing a failure. [ 399.313562][T20233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.313585][T20233] CPU: 0 UID: 0 PID: 20233 Comm: syz.3.4698 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.313601][T20233] Tainted: [L]=SOFTLOCKUP [ 399.313606][T20233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.313613][T20233] Call Trace: [ 399.313617][T20233] [ 399.313622][T20233] dump_stack_lvl+0x100/0x190 [ 399.313650][T20233] should_fail_ex.cold+0x5/0xa [ 399.313669][T20233] strncpy_from_user+0x3b/0x2d0 [ 399.313690][T20233] bpf_prog_load+0x14d4/0x2a70 [ 399.313709][T20233] ? __pfx_bpf_prog_load+0x10/0x10 [ 399.313737][T20233] __sys_bpf+0x1f46/0x4a30 [ 399.313755][T20233] ? __pfx___sys_bpf+0x10/0x10 [ 399.313771][T20233] ? find_held_lock+0x2b/0x80 [ 399.313793][T20233] ? get_pid_task+0xfc/0x250 [ 399.313814][T20233] ? get_pid_task+0xfc/0x250 [ 399.313840][T20233] ? find_held_lock+0x2b/0x80 [ 399.313868][T20233] ? rcu_read_lock_any_held+0x6a/0x90 [ 399.313897][T20233] ? find_held_lock+0x2b/0x80 [ 399.313920][T20233] ? ksys_write+0x190/0x250 [ 399.313942][T20233] ? ksys_write+0x190/0x250 [ 399.313963][T20233] ? lock_acquire+0x1d1/0x380 [ 399.313992][T20233] ? fput+0x7c/0x100 [ 399.314028][T20233] ? ksys_write+0x1ac/0x250 [ 399.314044][T20233] ? __x64_sys_bpf+0xce/0x140 [ 399.314056][T20233] __x64_sys_bpf+0xce/0x140 [ 399.314069][T20233] ? do_syscall_64+0xae/0x790 [ 399.314086][T20233] do_syscall_64+0x123/0x790 [ 399.314100][T20233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.314112][T20233] RIP: 0033:0x7f057099e159 [ 399.314122][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.314133][T20233] RSP: 002b:00007f05718d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.314144][T20233] RAX: ffffffffffffffda RBX: 00007f0570c25fa0 RCX: 00007f057099e159 [ 399.314151][T20233] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 399.314158][T20233] RBP: 00007f05718d7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.314169][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.314176][T20233] R13: 00007f0570c26038 R14: 00007f0570c25fa0 R15: 00007ffd43d266a8 [ 399.314190][T20233] [ 399.393361][T20236] overlayfs: overlapping lowerdir path [ 399.548725][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 399.564483][T20250] xt_hashlimit: max too large, truncated to 1048576 [ 399.564867][T20250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 399.582903][T20250] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.601772][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 399.666891][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4703'. [ 399.678426][T20244] netlink: 'syz.7.4703': attribute type 28 has an invalid length. [ 399.678440][T20244] netlink: 'syz.7.4703': attribute type 3 has an invalid length. [ 399.678447][T20244] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4703'. [ 399.703707][ T76] usb 7-1: USB disconnect, device number 29 [ 399.881615][ T5588] usb 5-1: Incompatible driver and firmware versions [ 399.888900][ T5588] usb 5-1: USB disconnect, device number 19 [ 400.161785][ T5084] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 400.161849][ T5084] Bluetooth: hci0: Injecting HCI hardware error event [ 400.162712][ T5084] Bluetooth: hci0: hardware error 0x00 [ 400.455917][T20290] netlink: 'syz.0.4715': attribute type 6 has an invalid length. [ 400.456750][ T43] kauditd_printk_skb: 311 callbacks suppressed [ 400.456761][ T43] audit: type=1400 audit(1791071294.237:2513): avc: denied { mounton } for pid=20289 comm="syz ** replaying previous printk message ** [ 400.456761][ T43] audit: type=1400 audit(1791071294.237:2513): avc: denied { mounton } for pid=20289 comm="syz.0.4715" path="/112/proc" dev="tmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 400.457274][ T43] audit: type=1400 audit(1791071294.247:2514): avc: denied { mount } for pid=20289 comm="syz.0.4715" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 400.457934][ T43] audit: type=1400 audit(1791071294.247:2515): avc: denied { mount } for pid=20289 comm="syz.0.4715" name="/" dev="configfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 400.458222][ T43] audit: type=1400 audit(1791071294.247:2516): avc: denied { search } for pid=20289 comm="syz.0.4715" name="/" dev="configfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458320][ T43] audit: type=1400 audit(1791071294.247:2517): avc: denied { search } for pid=20289 comm="syz.0.4715" name="usb_gadget" dev="configfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458416][ T43] audit: type=1400 audit(1791071294.247:2518): avc: denied { search } for pid=20289 comm="syz.0.4715" name="g1" dev="configfs" ino=8682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458509][ T43] audit: type=1400 audit(1791071294.247:2519): avc: denied { search } for pid=20289 comm="syz.0.4715" name="functions" dev="configfs" ino=8683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458736][ T43] audit: type=1400 audit(1791071294.247:2520): avc: denied { search } for pid=20289 comm="syz.0.4715" name="/" dev="configfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458830][ T43] audit: type=1400 audit(1791071294.247:2521): avc: denied { search } for pid=20289 comm="syz.0.4715" name="usb_gadget" dev="configfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.458925][ T43] audit: type=1400 audit(1791071294.247:2522): avc: denied { search } for pid=20289 comm="syz.0.4715" name="g1" dev="configfs" ino=8682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.465955][T20290] [ 400.501780][T20288] tipc: Enabling of bearer rejected, already enabled [ 400.548303][T20290] ====================================================== [ 400.551254][T20290] WARNING: possible circular locking dependency detected [ 400.554174][T20290] syzkaller #0 Tainted: G L [ 400.556881][T20290] ------------------------------------------------------ [ 400.559836][T20290] syz.0.4715/20290 is trying to acquire lock: [ 400.560462][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4716'. [ 400.566078][T20290] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 400.570124][T20290] [ 400.570124][T20290] but task is already holding lock: [ 400.573160][T20290] ffff888036c356c0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 400.577095][T20290] [ 400.577095][T20290] which lock already depends on the new lock. [ 400.577095][T20290] [ 400.581351][T20290] [ 400.581351][T20290] the existing dependency chain (in reverse order) is: [ 400.585079][T20290] [ 400.585079][T20290] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 400.588714][T20290] lock_acquire+0x1d1/0x380 [ 400.590869][T20290] down_write+0x8b/0x1f0 [ 400.592895][T20290] configfs_depend_item_unlocked+0xf3/0x6a0 [ 400.595557][T20290] usbg_make_tpg+0x251/0x610 [ 400.597715][T20290] target_fabric_make_tpg+0xab/0x8c0 [ 400.600185][T20290] configfs_mkdir+0x525/0xd40 [ 400.602394][T20290] vfs_mkdir+0x364/0x850 [ 400.604406][T20290] filename_mkdirat+0x48b/0x5e0 [ 400.606676][T20290] __x64_sys_mkdirat+0x89/0xc0 [ 400.608892][T20290] do_syscall_64+0x123/0x790 [ 400.611075][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.613759][T20290] [ 400.613759][T20290] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 400.617051][T20290] lock_acquire+0x1d1/0x380 [ 400.619182][T20290] __mutex_lock+0x1a4/0x1bd0 [ 400.621328][T20290] tcm_alloc_inst+0x5f/0x1e0 [ 400.623147][T20290] try_get_usb_function_instance+0x136/0x1f0 [ 400.625108][T20290] usb_get_function_instance+0x16/0x70 [ 400.626875][T20290] function_make+0x18c/0x3f0 [ 400.628402][T20290] configfs_mkdir+0x525/0xd40 [ 400.629971][T20290] vfs_mkdir+0x364/0x850 [ 400.631455][T20290] filename_mkdirat+0x48b/0x5e0 [ 400.633126][T20290] __x64_sys_mkdirat+0x89/0xc0 [ 400.634782][T20290] do_syscall_64+0x123/0x790 [ 400.636383][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.638368][T20290] [ 400.638368][T20290] -> #1 (func_lock){+.+.}-{4:4}: [ 400.640589][T20290] lock_acquire+0x1d1/0x380 [ 400.642169][T20290] __mutex_lock+0x1a4/0x1bd0 [ 400.643773][T20290] try_get_usb_function_instance+0x26/0x1f0 [ 400.645766][T20290] usb_get_function_instance+0x16/0x70 [ 400.647639][T20290] function_make+0x18c/0x3f0 [ 400.649235][T20290] configfs_mkdir+0x525/0xd40 [ 400.650895][T20290] vfs_mkdir+0x364/0x850 [ 400.652410][T20290] filename_mkdirat+0x48b/0x5e0 [ 400.654110][T20290] __x64_sys_mkdirat+0x89/0xc0 [ 400.655770][T20290] do_syscall_64+0x123/0x790 [ 400.657357][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.659357][T20290] [ 400.659357][T20290] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 400.661882][T20290] check_prev_add+0xeb/0xe60 [ 400.663493][T20290] __lock_acquire+0x1528/0x1f40 [ 400.665156][T20290] lock_acquire+0x1d1/0x380 [ 400.666736][T20290] __mutex_lock+0x1a4/0x1bd0 [ 400.668334][T20290] configfs_rmdir+0x5ae/0x950 [ 400.669958][T20290] vfs_rmdir+0x328/0x8a0 [ 400.671461][T20290] filename_rmdir+0x31a/0x5c0 [ 400.673104][T20290] __x64_sys_rmdir+0x46/0x70 [ 400.674791][T20290] do_syscall_64+0x123/0x790 [ 400.676418][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.678446][T20290] [ 400.678446][T20290] other info that might help us debug this: [ 400.678446][T20290] [ 400.681609][T20290] Chain exists of: [ 400.681609][T20290] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 400.681609][T20290] [ 400.686058][T20290] Possible unsafe locking scenario: [ 400.686058][T20290] [ 400.688235][T20290] CPU0 CPU1 [ 400.689850][T20290] ---- ---- [ 400.691528][T20290] lock(&sb->s_type->i_mutex_key#24); [ 400.693233][T20290] lock(tpg_instances_lock); [ 400.695469][T20290] lock(&sb->s_type->i_mutex_key#24); [ 400.697927][T20290] lock(gadget_subsys.su_mutex); [ 400.699500][T20290] [ 400.699500][T20290] *** DEADLOCK *** [ 400.699500][T20290] [ 400.701984][T20290] locks held by syz.0.4715/20290: 3, last CPU#0: [ 400.703947][T20290] #0: ffff88802489c460 (sb_writers#13){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 400.706835][T20290] #1: ffff88803efc1900 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 400.710285][T20290] #2: ffff888036c356c0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 400.713380][T20290] [ 400.713380][T20290] stack backtrace: [ 400.715239][T20290] CPU: 0 UID: 0 PID: 20290 Comm: syz.0.4715 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.718560][T20290] Tainted: [L]=SOFTLOCKUP [ 400.719906][T20290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.723011][T20290] Call Trace: [ 400.724074][T20290] [ 400.725013][T20290] dump_stack_lvl+0x100/0x190 [ 400.726504][T20290] print_circular_bug.cold+0x178/0x1be [ 400.728208][T20290] check_noncircular+0x146/0x160 [ 400.729771][T20290] check_prev_add+0xeb/0xe60 [ 400.731244][T20290] __lock_acquire+0x1528/0x1f40 [ 400.732782][T20290] ? trace_sched_exit_tp+0x120/0x160 [ 400.734442][T20290] lock_acquire+0x1d1/0x380 [ 400.735871][T20290] ? configfs_rmdir+0x5ae/0x950 [ 400.737505][T20290] ? __pfx___might_resched+0x10/0x10 [ 400.739187][T20290] ? __lock_acquire+0x5c0/0x1f40 [ 400.740760][T20290] __mutex_lock+0x1a4/0x1bd0 [ 400.742232][T20290] ? configfs_rmdir+0x5ae/0x950 [ 400.743771][T20290] ? configfs_rmdir+0x5ae/0x950 [ 400.745300][T20290] ? reacquire_held_locks+0xdd/0x1f0 [ 400.746964][T20290] ? __pfx___mutex_lock+0x10/0x10 [ 400.748544][T20290] ? do_raw_spin_lock+0x128/0x260 [ 400.750146][T20290] ? find_held_lock+0x2b/0x80 [ 400.751666][T20290] ? fast_dput+0x2fe/0x6f0 [ 400.753315][T20290] ? do_raw_spin_unlock+0x145/0x1e0 [ 400.755110][T20290] ? _raw_spin_unlock+0x28/0x50 [ 400.756659][T20290] ? fast_dput+0x168/0x6f0 [ 400.758086][T20290] ? configfs_rmdir+0x5ae/0x950 [ 400.759614][T20290] configfs_rmdir+0x5ae/0x950 [ 400.761124][T20290] ? __pfx_configfs_rmdir+0x10/0x10 [ 400.762767][T20290] ? __pfx_down_write+0x10/0x10 [ 400.764273][T20290] vfs_rmdir+0x328/0x8a0 [ 400.765550][T20290] filename_rmdir+0x31a/0x5c0 [ 400.767068][T20290] ? __pfx_filename_rmdir+0x10/0x10 [ 400.768894][T20290] ? do_getname+0x191/0x390 [ 400.770498][T20290] __x64_sys_rmdir+0x46/0x70 [ 400.772042][T20290] do_syscall_64+0x123/0x790 [ 400.773917][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.776328][T20290] RIP: 0033:0x7f1c1959e159 [ 400.777963][T20290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.785566][T20290] RSP: 002b:00007f1c1a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 400.788887][T20290] RAX: ffffffffffffffda RBX: 00007f1c19825fa0 RCX: 00007f1c1959e159 [ 400.791983][T20290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 400.795134][T20290] RBP: 00007f1c1963506b R08: 0000000000000000 R09: 0000000000000000 [ 400.798327][T20290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.801568][T20290] R13: 00007f1c19826038 R14: 00007f1c19825fa0 R15: 00007ffd918a0518 [ 400.804776][T20290] [ 402.236476][ T5084] Bluetooth: hci0: Opcode 0x0c03 failed: -110