last executing test programs: 21.21583127s ago: executing program 3 (id=1169): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev}, &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='invalid\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r1, &(0x7f0000001000)="4e5644494d4d5f50464e5f494e464f000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10000000000100040000002000000000000000000000000000020000000000000000000000000020000010000040000000", 0x100, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xc) 21.04776596s ago: executing program 3 (id=1171): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x0, 0x1}]}, 0xc, 0x0) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 20.975406237s ago: executing program 3 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0xa4) r1 = openat(r0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x80) getdents64(r1, &(0x7f00000001c0)=""/39, 0x27) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000001540)={0xa, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x1, r3, 0x5c2, 0x5, 0xb, 0x1fd, 0x1}) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010010418e01400004fcff", 0x58}], 0x1) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000002b00010000000000000000000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c2060000007dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe940000"], 0xbc}], 0x1}, 0x0) (async) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0xc0046209, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000005}) (async) mknodat$loop(r5, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) write$vhost_msg(r5, &(0x7f00000028c0)={0x1, {&(0x7f00000027c0)=""/182, 0xb6, &(0x7f0000002880)=""/16, 0x2, 0x4}}, 0x48) (async) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000002780)=0x869, 0x2) (async) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x1a2) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@redirect_dir_follow}]}) (async) open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) 20.90700407s ago: executing program 3 (id=1177): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) mmap(&(0x7f00007d0000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0xdc179000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="850000750000e0ff06000015000000853c214e8dc833a06ee37e5e363cc1000000001810", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='8', 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00007d1000/0x2000)=nil, &(0x7f00007ce000/0x3000)=nil, &(0x7f00007d1000/0x1000)=nil, &(0x7f00007d2000/0x4000)=nil, &(0x7f00007d4000/0x2000)=nil, &(0x7f00007ce000/0x4000)=nil, &(0x7f00007d2000/0x2000)=nil, &(0x7f00007d0000/0x2000)=nil, &(0x7f00007d4000/0x4000)=nil, &(0x7f00007cf000/0x1000)=nil, &(0x7f00007ce000/0x2000)=nil, &(0x7f0000000000)="9955fe7c1bd6dd883412681e1533f344d2af2151ae5828fe776250931b8e3920c77b618b92709bc26fd29e30d4af2933ae0eb1b7ff9d566b8e09ef6ab8c20460d37594c98d5ac7f596d7cb0a573542ca4b2346ad919b33e00c6ea98e3dd1e0ab4e35411a57dcb5676f", 0x69, r1}, 0x68) 20.790334499s ago: executing program 3 (id=1179): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev}, &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='invalid\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r1, &(0x7f0000001000)="4e5644494d4d5f50464e5f494e464f000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10000000000100040000002000000000000000000000000000020000000000000000000000000020000010000040000000", 0x100, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xc) 20.380935751s ago: executing program 3 (id=1186): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x300}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 20.262306379s ago: executing program 32 (id=1186): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x300}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 10.864945665s ago: executing program 2 (id=1359): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x1, 0xee00}], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x2c, 0x1) setsockopt$inet_int(r1, 0x0, 0x4, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xffba83) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0x14, 0x0, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x4c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x4c}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x20) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="2400000020000103000000000000000002000020"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct}}) 9.948967973s ago: executing program 2 (id=1381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "af0000000000000000003300", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0xf000) 9.919845902s ago: executing program 2 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) 9.703821608s ago: executing program 2 (id=1389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x98, 0x130, 0x288, 0x0, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@ip={@broadcast, @empty, 0x0, 0x0, '\x00', '\x00', {}, {0x1cb8ec6e9053b6d1}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@icmp={{}, {0xb, 'H\'', 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x28f) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80900000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_TDX_INIT_VM(r6, 0xc008aeba, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0xfffd, 0x4, 0x208, 0x5, 0x5, 0x9, 0x1ff, 0x7ff, r10}, 0x20) 8.714629802s ago: executing program 2 (id=1403): socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 8.712423344s ago: executing program 2 (id=1404): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000804) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f00000001c0), 0x2, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@length={{0x28}, {0x9, 0x200}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x4, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xff], @ipv4=@multicast1, [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x3501, 0x0, 0x1, 0x17, 0x1}, {@ipv6=@loopback, [0x0, 0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, [0xffffff00, 0xffffff00, 0xff0000ff, 0xffffffff], 0x4d5, 0x0, 0x2b, 0x0, 0x14, 0x18}, {@ipv4=@multicast2, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x1, 0x0, 0x17, 0x8}, {@ipv4=@loopback, [0xff000000, 0xff000000, 0xff000000, 0xff0000ff], @ipv4=@local, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4d3, 0x3500, 0x11, 0x0, 0x12}], 0x8, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r8, 0x10e, 0x7, &(0x7f0000000880)=""/156, &(0x7f0000000940)=0x9c) 8.579352464s ago: executing program 33 (id=1404): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000804) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f00000001c0), 0x2, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@length={{0x28}, {0x9, 0x200}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x4, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xff], @ipv4=@multicast1, [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x3501, 0x0, 0x1, 0x17, 0x1}, {@ipv6=@loopback, [0x0, 0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, [0xffffff00, 0xffffff00, 0xff0000ff, 0xffffffff], 0x4d5, 0x0, 0x2b, 0x0, 0x14, 0x18}, {@ipv4=@multicast2, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x1, 0x0, 0x17, 0x8}, {@ipv4=@loopback, [0xff000000, 0xff000000, 0xff000000, 0xff0000ff], @ipv4=@local, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4d3, 0x3500, 0x11, 0x0, 0x12}], 0x8, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r8, 0x10e, 0x7, &(0x7f0000000880)=""/156, &(0x7f0000000940)=0x9c) 2.327912762s ago: executing program 0 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000500)='A', 0x1000) 2.257759096s ago: executing program 0 (id=1543): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001540)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1fd, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x1, "b0dcc4a3616748a199e53d96"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b0d"}, {0x4, 0x28, "ad4b0531f50dd1048b7837eb7a3e6c96272d8d7af439cfce5a719b0e547bd0cbd3abe061bd9e941dcd39a53ed58f3e53e145b7cf6e223fc6d7f67f55cb2be57e8f7158f840b3aa2b8471c12cc86ed0671afd6aba6f8b5e88303ee1634759d71bc1b14e8422096c2585c0578806a59bfcccb013884a162d074df351e7b753f450f205f29798619a68a05c06aa1d87d9dd9b475e5d4e64e10a5f9f416551fcf2d25d8a5408ce7ec217a95a9ae3e9b2f3b59bc08b1df713464b59e815e638e0ee4c00f579c482418317196181a35af017b36d1b147ff165ee27cb32f952c8a567e009d0ee419cf4f60eed41ceef1d5f92620fa4c5a85671810e693f0128406e66a9036bd302457301713330fb5111237620320317e45f71e2d1195e5a47b38d4cec39aedf1d54b7c8e3085b9c6868220676a6549a31e4cf33f737383ea5b4389c07"}]}}}}}, 0x233) 2.137824739s ago: executing program 0 (id=1547): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x2f, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x61, 0x30, 0x30, 0x30, 0xe, 0x30, 0x33, 0x30, 0x30, 0x55, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$keyring(&(0x7f0000000680), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r0) 2.108119032s ago: executing program 0 (id=1549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) r2 = syz_usbip_server_init(0x5) r3 = fanotify_init(0x60, 0x400) write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) write$usbip_server(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000000017f"], 0x30) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 1.219168026s ago: executing program 1 (id=1570): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180), &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 1.218989532s ago: executing program 1 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) 1.10051694s ago: executing program 4 (id=1573): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.095416413s ago: executing program 1 (id=1574): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000080)=0x4) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/216) 678.972964ms ago: executing program 0 (id=1578): read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 618.978894ms ago: executing program 0 (id=1580): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r2, 0x6f6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 489.378208ms ago: executing program 5 (id=1581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d736b2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x5c, 0x0, &(0x7f0000000440)=[@dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/160, 0xa0, 0x0, 0x38}, @fda={0x66646185, 0x1, 0x0, 0xd}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}, 0x400}], 0x57, 0x0, &(0x7f00000004c0)="470480c502faf4efebef7724d7ea7882c956c6db8fe3bb62280fe131bf741ef806e411e3212f3e07408d5eb9ddaad1a6da9327fda76ce9f36845181ad385058420ae504a13be41b83dec35815a14142641aa5f0767d7ad"}) 485.971171ms ago: executing program 5 (id=1582): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001280)={0xf, {"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", 0x1000}}, 0x1006) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 338.736931ms ago: executing program 5 (id=1583): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001540)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1ff, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e285"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b0d"}, {0x4, 0x28, "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"}]}}}}}, 0x235) 262.881914ms ago: executing program 5 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000500)='A', 0x1000) 190.961029ms ago: executing program 4 (id=1585): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x2f, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x61, 0x30, 0x30, 0x30, 0xe, 0x30, 0x33, 0x30, 0x30, 0x55, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)='c', 0x1, r0) add_key$keyring(&(0x7f0000000680), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r0) 189.45254ms ago: executing program 1 (id=1586): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r0}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 187.48858ms ago: executing program 4 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x27de61678e4bf21c, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r8, 0xae9a) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb2, 0xb, 0x5}}}}]}, 0x40}}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2800}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 130.03096ms ago: executing program 1 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$FIOCLEX(r0, 0x5451) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2d, 0x40}, @llc={@snap={0xab, 0x0, "c23c", "aaa54b", 0x88f8, "49a952b2b2eca9ff0102a93985a94341323b142956073d3a97e5c6253d56e3e2d107262536a2ed5787645f19a314b42b9b305afe73487d"}}}, 0xfdef) 128.439679ms ago: executing program 5 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) 43.156232ms ago: executing program 4 (id=1590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d736b2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x5c, 0x0, &(0x7f0000000440)=[@dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/160, 0xa0, 0x0, 0x38}, @fda={0x66646185, 0x1, 0x0, 0xd}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}, 0x400}], 0x57, 0x0, &(0x7f00000004c0)="470480c502faf4efebef7724d7ea7882c956c6db8fe3bb62280fe131bf741ef806e411e3212f3e07408d5eb9ddaad1a6da9327fda76ce9f36845181ad385058420ae504a13be41b83dec35815a14142641aa5f0767d7ad"}) 41.220384ms ago: executing program 4 (id=1591): r0 = userfaultfd(0x80001) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 5.061895ms ago: executing program 1 (id=1592): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001540)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1ff, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e285"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b0d"}, {0x4, 0x28, "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"}]}}}}}, 0x235) 2.71592ms ago: executing program 5 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000dc0)=@newtaction={0x16a0, 0x30, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{0x3ec, 0x1, [@m_connmark={0x1a0, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x7, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x500000, 0x1, 0xffffffffffffffff, 0x5, 0x7fa5578}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x24ad, 0x8, 0x4, 0x25}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x80000001, 0x2, 0x8684}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x10001, 0x6, 0x51474914, 0xff57}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x10000000, 0x200, 0x8}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0xffffffffffffffff, 0x1, 0x2}, 0x401}}]}, {0xa9, 0x6, "ed8dd20984b37570650c13ad3e37ced530663d6219226cc647387e707a4048b8d8cf93969314c4a3c6d8e1a117d91984abfcf922990457fc8b64ab14839a2c4a412c2f4cd69e78427dbd22b0d22e2a9b70c4638fadf6d252ecc8a1b7fccaf9c5d9880161da7576d4fc648c72326dd7242c6134a005ccc159f38449e5519cc9251f751b6612242d57a72510b32413f8b337326ed07a942104797cc02a4220cb4a4e9d3056f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x1ac, 0x19, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x9, 0x8, 0x4, 0x28}, 0xb1a5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x80000000, 0x8, 0x3, 0x8}, 0x888}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x2, 0x4, 0x80}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3b, 0xfffffffa, 0x0, 0x80d}, 0x611}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0x452, 0xcca0}, 0x9}}]}, {0xed, 0x6, "d23b188d5cf924a79221fd5f666532653d5ff632d625d3c261f56eb744dd3bb684d24d8d8f52af069342718a5d5379b7f8133c875d3b28af40f797939f1d25b966f1ad5f71ba3796355212a65abc9186cb270be5a90c110fc568189f1f699aeaf136930eb28ad034deaa7e8b13e5d9e588688423723d99941347a9831c2d8e424b3b7619b383cd6f07a930d4fe3ae4eb273af3696905763d862cc0306e8085e07b069b571149c4ef373731efea658d45f4f403bdef8a50c3345b5f20f88b32ea6213717c2186670084a5a4985b4ced63bcb95d8551ff078f3ab4a77e5d78f165fe48ed8bd8d61a88b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x14, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x63, 0x6, "47c3618cb63b78c6af48ae89b5ad57fee0fee050c07295919461b8bf93401f7915dbb719df484959660b5a91ef005746bb2cea2288d1390889e4e96e07ca40e8b9f2a9bc80b1f484e665c5b7405fba553a23d0dd1b6b4f0434881b5838cb28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x10ac, 0x1, [@m_skbmod={0x10a8, 0x13, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x2cc, 0x2, 0x80}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5, 0x3, 0x4, 0xfffffffb}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x1004, 0x6, "e047500a95bd6296bd415e935a0c4ed82d8f70059abb09a5d37ae27f1710372a53caa8657c380772d4dcc0726947b9cc708df72c604e789151bde5e9c7a8c0cdc225248c9c8d75494459c214f3660f43b83f6e3972f6dc985ff88d5c63e798d4a641119fbdd6a8c3fc0521fa01fb29ae337e23ac9f2af6ebeac83fd43741ae20369294182744ab325b29c1ad680fa54297d645b7f642600e6fe0fd6807e8ff12cb753705f31934fd9f9301b52050252b40ab064d136fd759b36d50fe6b3b5aa253b6dcffd68b63610deb5f2a670872b2c91ec1dec08078ee000adaf4fe3bfd39f29f23f1c9b275c60943440ae7175554ebf6e4480c48ccdb7494dba1e05d854b0fa38871a04e9fd5bcc617b88411281b7c28a61841022708ac9003d08852ba5bad0e6979f08b7612f50ebe89c156b82702710ade0e57cad74d8b2217d7b86fb4a39a23ec17b617fd5440335f4787113cec28623cece451d6d5fb953bdaa3aebecd6eedc63852f4bde81f6b22edf848519339823118d3b160dcdc4d6a5367078340237f7bf25b56e00e739a78ddc026988f3e5cd400e13655eedcdbb5324f756bfad836ff0d316530ec8a4c4d6c3b711b6b0341604d455b03896442e93875c711c82124265e564d8e89c23b790d6c08534d79a78e9c555cbdeedda9f04496ba7011f8ac801b5cb1bf5755ca1971f4d9e32fac58c60c13cf3b58b7ba645a151d1c7011d05fb6fcf6c3eeebd355cb1530b6479372777def13c745aff6ed3c4c74b99866f422d34078e1206d33deadc9b827953cc4aa72950f51567b503246baf6c1a88dc3f52498cb5623b4b8d81ec45021d716f28400159cc38c593cd68ba7b9f1843c33f7f94e7b0e18338fef48297cdc4d3d74878142f7c837cb9e823225239b1b3c9eff6a1f45853c9c4eb6b20d347710384fe0c96beda89ef45d61219d8ee8bdb3cbf862752a7baeb0f0ce1b41922eaa6812a9f6e9c9c52979e7af340510175c7ca2fe36f6085808aa5f44e56124fa90eccec45054423757c89673bbbc8c3ee5e191cfd24787b7e7af8a1200e9d9524757afa2c27c6b219f54bdd1027007a45967b14cdf41116ecf596cdab580405ec8765fe4ce8d55a9303fe93f9026b8836c24934903e15121b2a5d95ef6affe3dd75944b5a24b2f79ecfa61321aaa03abc7b82d8e5ce85c19949a8538499b0fe1b78cd5d03df17440eafe569935a3105fc55f8792d2a0ea598aa312c0e7b4c2361a2a5474f92057279f1b041741028429eab6b76413f754edd6f65460d9eb4c250c261bad5634f693115eb4266f21c2d71133246796e06842e8d153a4e832d97a111ff0b7ddb34c007643ebcb72ca00609c982e4bfceaa6b2e4959bd5a87d57a350dfaebad1e856e4345615b3acece5651d0f67c120a73450aaf1417333e1541b7d41b692b0099c7593c265bd617555d32b7d56bcd428ad57aceca12a0d738b72a79ac8ff913a449ad31143a4507c920980ec9dbe3a1b1cde6b6cb9f7ab987905fc14b22f9e5f9f3ffe5b961df4b11f103683da6011540a86ceb614d226f38e3357207f3aa22b23b5d04fffe04d67b87ff388ec8bcc33b4632bbe5421ae655a57f338d70482e567300880914e0d5b6d5a9c0e4d28b571017795d2fab2e1fa2a1a65af6129fa2249ab6826289a1bcfacf5b3d01b4045228a1a47c937d2ebbf4399ed03b7247c33a4f49c25a7df4ba2245eb64416e90558c26534063233f4eea74e9e101fb08df4b2de7d8317cefacb1872e0efde18da176d9281830dc7c0e163f69d6def302c0d50d34408536310c1ca12cf483a1907db854a26849181fef4a3003c3d264ca69dedd6d1939bd62f1d8ae8ef4a99fff599934d4533562806757722f54eb0ed127c5373a702df75b337d75fe78ee38577261786ef896d9707ce036668e6269cdc7d76aada8b8816432d97e89a096c5e7cb39af30f3c2ab4618dc680f6536cba1921dde4a215fde54867e9c77b8681dbe6d30719d6e2de87fe0c9944b4e0c4ef73e4eaee71f604145ce4a5f2d2933dbd12573bde45ee5e72362ab1648188a05931ba6275199d626c76fb1f09f974968ac4678c2e98aee58e930ed83e890bb9100a5c7f6180381d743679179104557533a7e2e188d4d2e3f1b946f12599fc9d344cd0aa7ef135aa7ce982b8752ac1d58611954f38a497ac3b95ea3bdb31bf0017cc54dbfc8d1250034cff5440986b8822374d4fd16b6c68445386c1dbc89d056be74b7ec7a35ae60314ecda95325d10d09547cdfe65e8761256085355a19e20948f139cab495546cf0d5da22ee4bea3fac489d522967cb5968acfa03f826308fd99c14e6e0553e17a30f396466c9311a6d6360048505c0da87ec26de5db2db6203a851205756cffd3381e1dcfc88e41d6447e6ab9a586c92b08ea17fc1252cedfe8360d0b2d44cfacdaeeaaa5ec6e146c8ce51d8e336dbf11d2d0521241d17918702b9795ae29fdf3ea0068754dd6336e810cd314347beafe6e61937d41667f7055f18d4aaffd6cfec0653ca5f5b53ce356d7ebf2482808953c2d1ca679e2e652b9b58aeb5e4b77f8deba49f21f48a9056f8fb90f02c04644f1f34df250b81b1616ea2bcd54833b62106cf9a2cba6b5df8254de004bb122a6e478e27803228d3ddee51a1206b84b87d4201a229edcb7286f145ec22fdad645c3b05dde6c0a0b4997b260a6b53252e5b415b88f891c62fe962c0f93a15b7be7efa8158c951d8124232aaaa74b30d1c1e056215573bfb32d46510c028ee30407a23c8585b5ee2a1d53ba2945442d9d0d599fd2b2067fb04b9383291c4857f93039a06ea0f958282d8e69cac0a330520778bb98ce99c3ac60eb77456d778db1fb0083451d5611c5a7536cfa450b398f47e3135466117f2391c791cfd2390e6fa32972cabd2d960e6d9db94c0490aa957e905b36161b0f6caab946e3229a44da0a06b7f8d2fed858b462eff13a481f347dbd09855247c6ebc3f8f773009f3874f4a90191939e68db02af2dd3cf35f52e0b289dee0c3ad8a99fd22e1ebfaab3f4e17110fc4ce29ef4847c4b10ecd47fde224418f0f549f42c4397e784cc131e77a66c75f1802c8f87494a15f4b2ee875f90d4ca3d48e9a5ed166cf0280f90c14228c933abc2f393544241e3fc5557d4b21164446a694458e9efa628dcc0c1fac427dcf9df55150e7c490ce2f12e6f2ad12924d0e7db340bffff648eb21a1cb1d9d0cae5a174fc4fe3e7e6fe7dbada7761e91a1d530dab97e70a26be259fcbd5659832fb1067b8e05f0cc7d49dfc1709ba4a91d317b62b42029b53ba477f714fbb674fe36e77e79427ddd651db924c9837c40a6f2c46a83247dac0360425b5331ea2de5187c6b8c63641b4854222fe0c37355ae5a78748da4c32d99b1f1bf73e8b6a38444368ee202b62545d1a7c0b21abd39bbb031b948ba46413365a13ac1ac4d015910a41ae640a432dc3b4d94f4e8187126618bc27e26e099e28153f64102e4309b642406b77e2ccfb87022fc8db481749e456499faabbc3579fa62c302d1976c1c222d6734fa281a206cf92f214df783c95896972780d13761b75928aeb12c1d13a5d7df8b52f22290e36fe4bed72b926eb3a1533af7d2a39f2000b9dde7e03269fa208fcd6b43bc44f036acd68e3bf3805ad16e6692bf38ff0f1e553103af4eb0074100f547091051d7bebb0c3573423e7b2073b94f513551bbf521ffd943748508c82586ed99b47bb7c105e457b02b633b79945db58fdd283587b306eaf61a724a3d51d5748e9eb269fafc68cbc1cc66e5b5e775bcbe5a93880b4c0e62bb18a948d01f4ed3f07530470a333e09782da9be352079928033aa0c35411c4432a89a3f9b62503e51e3772f84b35921b57e0f7c27c191416b5fa1946ade2bcbdba27453038e8932f380e678c7aac0e505d8eb2b76ccba093396826d3e2b169ba4cee2e16b5f8f9c158286ace631ae97ce68b0f824623e6cb9c13521dc6c08e163cecd2ae2ea888f2be0e364758e04fefe3489008e761e5c65b64a10fc5649190c0b8175bc32563b338d5801f600f253a5ec5d2dba81c0e54d420b838979c8994211ac55bae571e7cdb11d2d699c981e7ae559b5e371a3f78ff596c5a48e6c4ddadfdc69b707aa5e81fd26f806f84ebb84135bedbcf1720f29ba432a610ff82f40bff34e643f39f39a13684cacc4cf8aa3620b7da36333bc7003d582926d7518376d361619b193ddadc887dc2c16049f99e10302a42917135bfb9578eef89c0fc549c235fb19c44776b13149652ce8d8f58762a60c5c48cf7426f697a389570de66ef99f465d1d6e3c0fc1dff223032f1cdb206ea3d98660360813eaa3374482d859ccd50edbd06b2c6231681e6a209a55f20421c4dd9644b495eb4627786f9c6b1a56b677c3703676862333302da4409cd554181cd3b337629544b13a94c22e70c982250d45d4c317de256b683850f42bb0c55da8f5ed449b5cd11de737748840d4df8a45a0ecf7b3c4f5dd728b0c98315b2abdd82d9a6987710c355d480bedfa341a9cfea2487b1f7b81f1d56d456b618f3b23c22d7e8b28ebdf5d6eac9e02ff386ad3a32a40cd60ebbba68886c525439aa8bfba777713bad60e0f8f32f10aaa0c3b4054899da5b21e55807547c45dcc3c3f782d70c672920a393c95638f93f1aed032b55b204934b46e00cad192df3b801d2ebfcfff9d91e60c07111e6735d7a70acbd10407d843ad27989dfc58f9f0d7d5f496902d3bcade06ac363a25fc4cca4517b04e0089d5ab0ea2e0f86d65754645dd7331cca3dcf8f3515e56c9490f7fb6bf779c6fc8b9f9423af2d92c908721b1b6874ba28e845cf001d77119c4b2f8dbb838317509257eb1569bec3672ccc9d55df0640d42adfde5e233cb941893c2d0d6e03e58cdf6df82f2465fabb1ca5761c51ecf9785cd1b0f0b7bae06977d1dd4e61934154c3c361938fa06bb08f858fe4e454721d0c307b16024e4c49ff510045fb754c5f910e1ce1507ddee851df5f9e831c688c75ff548b6806d77151dcf8aa3a7576450960a46d60164ee32f60d2c73a5f907a04d1a37006e4ff9ca4c61a636e053adad6619b2382d25adf126daa9bee4e82763c3e926069129fc2e43b31dd10e6ae793ecfc277bc91f132b73af705173f91d84a0cc32b23c47f643d46ed58c3a809008a3aed8e5845175d6143fee6a98fe0c95d0cdd3e562375bf4ea4406c09267a6def0c5b51e6bf80b6fb6c72a9085ce7639af00b4e8df0b88918d13705d1160aa73d8c121161fd80c30edf7eaedaa9375cb633b90bd87187e1c7b5c7c7f0af382af63f2866743dc923248426b8debf678a0a91d53f0706e8f0bedc7d333ff223ed595c8d533eb318d05fb2fcdec7d51ce5d6a1d171b5d13bbe8b92892f89a8a419842e1f71e23d5d8e89448e34cc125d29d4c7557b582af77ed6b60d0cfade6c6789c08b0cf9723653d64e51150ae577758737429416b2e20580d521b0e38829dd97229699b5e5587b85a732b3b41c4ed899e2638bcdf48b314da43e235ac943252391ecd0d93cf1721c3f19d954c2a2e21eeafa5fa03eb974d7d2efbbf7e90c65042f85671d1cb315cdcc038ad50bfa361ad0761fb4891e44839fbeedaee96484bd4bdb3a5d13c60fdd7c2f0f38eee04777ccc228f6cd9211bb0a4a7528a1a6c2fc4a5768386b3a8f53e3d0303babd82070c63f45de85d91453b140a93bf610f9e2f5a63ffdca6e14bd5b315d397fc74ecd37bbb08ff8f4a10c8dbf6be2ad61fb53ced1f5d6af8c586302afda1b82"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1f4, 0x1, [@m_connmark={0x4c, 0x1b, 0x0, 0x0, {{0xd}, {0x4}, {0x1c, 0x6, "9311f59a33e5df73a5cd4b149eddebaeff9f8c56aa587e52"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x164, 0x9, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x7, 0x6, 0xcdd}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xe2, 0x20000000, 0x2, 0x88}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0xbc, 0x10000000, 0x2, 0x1}}]}, {0xdf, 0x6, "e0491cae10bb03808a3c9a14190a172e0cd9aa675e90540d2bc9a08a53ad1740139b9314f5e6ca5a851f72af2f9870b2c37462eb04b499628199d9e5855b55d52557144172161ce8a1b55c22a73c1aaa5515cd644db426c56e0efd4e726598cdfc5d903cfd1be0eee6b21e7f8654361f8eb9a8ed999bad719f2b6756ee53cd0782d2fb65eb2db0e48b4cad6c550424b0874e242f13009ea1043352663357f76b392f45d4d239643f84b35d31be5c1e1b696815273cd7097bbc9eff9f7064e4417d52503af050944370a52ab55b240d557cc3fb59278202c64374e7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x40, 0x8, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xda3c}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16a0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_SET_GS(0x1e, r4, 0x0, 0x1001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x0, 0x5}, 0xc) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './config\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={&(0x7f0000000a00), 0x10, &(0x7f0000000b00)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x3}}}]}]}]}}]}, 0x54}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00'}}}}}, 0x0) 0s ago: executing program 4 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3f, 0x2d, 0x40}, @llc={@snap={0xab, 0x0, "c23c", "aaa54b", 0x88f8, "49a952b2b2eca9ff0102a93985a94341323b142956073d3a97e5c6253d56e3e2d107262536a2ed5787645f19a314b42b9b305afe73487d"}}}, 0xfdef) kernel console output (not intermixed with test programs): : None [ 127.625602][ T9049] bridge_slave_1: entered promiscuous mode [ 127.641871][ T5604] hsr_slave_0: left promiscuous mode [ 127.646525][ T5604] hsr_slave_1: left promiscuous mode [ 127.650032][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.653317][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.657398][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.660391][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.672024][ T9191] jffs2: notice: (9191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 127.673046][ T5604] veth1_macvtap: left promiscuous mode [ 127.680700][ T5604] veth0_macvtap: left promiscuous mode [ 127.683878][ T5604] veth1_vlan: left promiscuous mode [ 127.687766][ T5604] veth0_vlan: left promiscuous mode [ 127.767615][ T9187] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 127.861111][ T9196] jffs2: notice: (9196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 127.887474][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 127.900177][ T42] kauditd_printk_skb: 269 callbacks suppressed [ 127.900193][ T42] audit: type=1400 audit(1786064798.197:966): avc: denied { write } for pid=9195 comm="syz.2.1226" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.912539][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 127.998731][ T9049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.004229][ T9049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.028381][ T9049] team0: Port device team_slave_0 added [ 128.041129][ T9049] team0: Port device team_slave_1 added [ 128.047456][ T5744] Bluetooth: hci3: command tx timeout [ 128.056989][ T42] audit: type=1400 audit(1786064798.347:967): avc: denied { write } for pid=9199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.071534][ T9049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.073948][ T9049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.083862][ T9049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.089524][ T9049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.091699][ T9049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.101887][ T9049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.110083][ T42] audit: type=1400 audit(1786064798.407:968): avc: denied { write } for pid=9202 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.132579][ T9049] hsr_slave_0: entered promiscuous mode [ 128.134889][ T9049] hsr_slave_1: entered promiscuous mode [ 128.159460][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 128.269109][ T42] audit: type=1400 audit(1786064798.567:969): avc: denied { write } for pid=9205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.329276][ T9049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.335172][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.337386][ T42] audit: type=1400 audit(1786064798.627:970): avc: denied { write } for pid=9208 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.339433][ T9049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.352835][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.356668][ T9049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.364051][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.367861][ T9049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.375630][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.381938][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 128.437295][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.452222][ T9049] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.463337][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.465650][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.470118][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.472456][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.682250][ T9233] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1227'. [ 128.685824][ T9230] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1227'. [ 128.705144][ T9235] kAFS: No cell specified [ 128.709617][ T42] audit: type=1400 audit(1786064799.007:971): avc: denied { read write } for pid=9227 comm="syz.2.1228" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.719154][ T42] audit: type=1400 audit(1786064799.007:972): avc: denied { open } for pid=9227 comm="syz.2.1228" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.729805][ T9049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.773196][ T42] audit: type=1400 audit(1786064799.067:973): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 128.785470][ T42] audit: type=1800 audit(1786064799.077:974): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1230" name="alua_access_type" dev="configfs" ino=27244 res=0 errno=0 [ 128.787592][ T9245] Unable to extract alua_access_type [ 128.854521][ T9253] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1231'. [ 128.861460][ T9248] FAULT_INJECTION: forcing a failure. [ 128.861460][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 128.869631][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.2.1231 Not tainted syzkaller #0 PREEMPT(full) [ 128.869659][ T9248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.869668][ T9248] Call Trace: [ 128.869673][ T9248] [ 128.869679][ T9248] dump_stack_lvl+0x100/0x190 [ 128.869704][ T9248] should_fail_ex.cold+0x5/0xa [ 128.869724][ T9248] should_failslab+0xc2/0x120 [ 128.869744][ T9248] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 128.869763][ T9248] ? __alloc_skb+0x140/0x710 [ 128.869785][ T9248] __alloc_skb+0x140/0x710 [ 128.869801][ T9248] ? __alloc_skb+0x5b7/0x710 [ 128.869817][ T9248] ? __pfx___alloc_skb+0x10/0x10 [ 128.869839][ T9248] netlink_dump+0x194/0xd00 [ 128.869856][ T9248] ? __pfx_netlink_dump+0x10/0x10 [ 128.869869][ T9248] ? kasan_quarantine_put+0x104/0x240 [ 128.869893][ T9248] ? kfree_skbmem+0x19f/0x210 [ 128.869908][ T9248] netlink_recvmsg+0x7dc/0xa90 [ 128.869923][ T9248] ? __pfx_netlink_recvmsg+0x10/0x10 [ 128.869938][ T9248] ? __pfx__kstrtoull+0x10/0x10 [ 128.869958][ T9248] ? __pfx_netlink_recvmsg+0x10/0x10 [ 128.869972][ T9248] sock_recvmsg+0x1d5/0x220 [ 128.869988][ T9248] ____sys_recvmsg+0x21e/0x670 [ 128.870004][ T9248] ? __pfx_____sys_recvmsg+0x10/0x10 [ 128.870024][ T9248] ? __lock_acquire+0x49f/0x1a40 [ 128.870042][ T9248] ? get_pid_task+0x106/0x250 [ 128.870058][ T9248] ___sys_recvmsg+0x16a/0x1a0 [ 128.870073][ T9248] ? __pfx____sys_recvmsg+0x10/0x10 [ 128.870089][ T9248] ? find_held_lock+0x2b/0x80 [ 128.870113][ T9248] __x64_sys_recvmsg+0x19a/0x260 [ 128.870132][ T9248] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 128.870162][ T9248] do_syscall_64+0x115/0x870 [ 128.870181][ T9248] ? clear_bhb_loop+0x70/0xc0 [ 128.870198][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.870213][ T9248] RIP: 0033:0x7fce7319e0d9 [ 128.870225][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.870239][ T9248] RSP: 002b:00007fce74069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 128.870255][ T9248] RAX: ffffffffffffffda RBX: 00007fce73425fa0 RCX: 00007fce7319e0d9 [ 128.870264][ T9248] RDX: 0000000040000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 128.870272][ T9248] RBP: 00007fce74069090 R08: 0000000000000000 R09: 0000000000000000 [ 128.870280][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.870288][ T9248] R13: 00007fce73426038 R14: 00007fce73425fa0 R15: 00007ffc033b6a98 [ 128.870306][ T9248] [ 128.931712][ T9049] veth0_vlan: entered promiscuous mode [ 128.962413][ T42] audit: type=1800 audit(1786064799.257:975): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1233" name="process_ump" dev="configfs" ino=23692 res=0 errno=0 [ 128.976376][ T9049] veth1_vlan: entered promiscuous mode [ 128.998449][ T9049] veth0_macvtap: entered promiscuous mode [ 129.004986][ T9049] veth1_macvtap: entered promiscuous mode [ 129.023127][ T9049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.033886][ T9049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.057274][ T9263] jffs2: notice: (9263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 129.079388][ T5604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.091038][ T5604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.132430][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.133326][ T9266] FAULT_INJECTION: forcing a failure. [ 129.133326][ T9266] name failslab, interval 1, probability 0, space 0, times 0 [ 129.136885][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.144587][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.1.1236 Not tainted syzkaller #0 PREEMPT(full) [ 129.144625][ T9266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.144637][ T9266] Call Trace: [ 129.144643][ T9266] [ 129.144650][ T9266] dump_stack_lvl+0x100/0x190 [ 129.144681][ T9266] should_fail_ex.cold+0x5/0xa [ 129.144705][ T9266] should_failslab+0xc2/0x120 [ 129.144731][ T9266] __kmalloc_noprof+0xfc/0x820 [ 129.144751][ T9266] ? trace_kmem_cache_alloc+0xdd/0x100 [ 129.144774][ T9266] ? lsm_blob_alloc+0x68/0x90 [ 129.144799][ T9266] lsm_blob_alloc+0x68/0x90 [ 129.144820][ T9266] security_sk_alloc+0x2d/0x290 [ 129.144845][ T9266] sk_prot_alloc+0x1d1/0x2a0 [ 129.144876][ T9266] sk_alloc+0x36/0xe80 [ 129.144898][ T9266] inet_create+0x3a0/0x1060 [ 129.144922][ T9266] ? inet_create+0x94/0x1060 [ 129.144948][ T9266] __sock_create+0x339/0x860 [ 129.144970][ T9266] mptcp_subflow_create_socket+0xec/0xa30 [ 129.144992][ T9266] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 129.145009][ T9266] ? avc_has_perm_noaudit+0x145/0x3b0 [ 129.145037][ T9266] ? look_up_lock_class+0x55/0x120 [ 129.145062][ T9266] __mptcp_nmpc_sk+0x17f/0x880 [ 129.145082][ T9266] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 129.145101][ T9266] ? __lock_acquire+0x49f/0x1a40 [ 129.145128][ T9266] mptcp_connect+0x7e/0xaf0 [ 129.145150][ T9266] __inet_stream_connect+0x208/0xfa0 [ 129.145178][ T9266] ? __pfx___inet_stream_connect+0x10/0x10 [ 129.145200][ T9266] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.145227][ T9266] ? __pfx_inet_stream_connect+0x10/0x10 [ 129.145250][ T9266] ? __local_bh_enable_ip+0x9e/0x120 [ 129.145275][ T9266] ? __pfx_inet_stream_connect+0x10/0x10 [ 129.145297][ T9266] inet_stream_connect+0x57/0xa0 [ 129.145320][ T9266] __sys_connect_file+0x141/0x1a0 [ 129.145343][ T9266] __sys_connect+0x141/0x170 [ 129.145362][ T9266] ? __pfx___sys_connect+0x10/0x10 [ 129.145380][ T9266] ? __fget_files+0x21f/0x3d0 [ 129.145407][ T9266] ? __pfx_ksys_write+0x10/0x10 [ 129.145428][ T9266] __x64_sys_connect+0x72/0xb0 [ 129.145446][ T9266] ? lockdep_hardirqs_on+0x78/0x100 [ 129.145467][ T9266] do_syscall_64+0x115/0x870 [ 129.145488][ T9266] ? clear_bhb_loop+0x70/0xc0 [ 129.145510][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.145527][ T9266] RIP: 0033:0x7f04c299e0d9 [ 129.145544][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.145560][ T9266] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 129.145578][ T9266] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 129.145590][ T9266] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 129.145601][ T9266] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 129.145610][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.145621][ T9266] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 129.145645][ T9266] [ 129.265518][ T9270] Unable to extract alua_access_type [ 129.265859][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.270305][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.289017][ T5604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.294008][ T5604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.344790][ T9279] FAULT_INJECTION: forcing a failure. [ 129.344790][ T9279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.350015][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.4.1187 Not tainted syzkaller #0 PREEMPT(full) [ 129.350031][ T9279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.350038][ T9279] Call Trace: [ 129.350041][ T9279] [ 129.350046][ T9279] dump_stack_lvl+0x100/0x190 [ 129.350066][ T9279] should_fail_ex.cold+0x5/0xa [ 129.350082][ T9279] _copy_from_user+0x2e/0xd0 [ 129.350098][ T9279] memdup_user+0x6b/0xe0 [ 129.350113][ T9279] strndup_user+0x78/0xe0 [ 129.350129][ T9279] keyctl_pkey_params_get+0xd5/0x4b0 [ 129.350145][ T9279] ? __pfx_keyctl_pkey_params_get+0x10/0x10 [ 129.350158][ T9279] ? find_held_lock+0x2b/0x80 [ 129.350169][ T9279] ? __might_fault+0xc5/0x140 [ 129.350180][ T9279] ? __might_fault+0xc5/0x140 [ 129.350194][ T9279] keyctl_pkey_params_get_2+0x12f/0x3f0 [ 129.350207][ T9279] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 129.350219][ T9279] ? find_held_lock+0x2b/0x80 [ 129.350228][ T9279] ? ksys_write+0x190/0x250 [ 129.350241][ T9279] ? __mutex_unlock_slowpath+0x35d/0x930 [ 129.350265][ T9279] keyctl_pkey_e_d_s+0xac/0x360 [ 129.350282][ T9279] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 129.350305][ T9279] ? ksys_write+0x1ac/0x250 [ 129.350318][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 129.350335][ T9279] __do_sys_keyctl+0x336/0x5a0 [ 129.350360][ T9279] do_syscall_64+0x115/0x870 [ 129.350383][ T9279] ? clear_bhb_loop+0x70/0xc0 [ 129.350406][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.350424][ T9279] RIP: 0033:0x7f3850f9e0d9 [ 129.350439][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.350453][ T9279] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 129.350471][ T9279] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 129.350482][ T9279] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 000000000000001a [ 129.350493][ T9279] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.350503][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.350514][ T9279] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 129.350538][ T9279] [ 129.370212][ T9282] orangefs_devreq_open: device cannot be opened in blocking mode [ 129.481931][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.483647][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 129.510309][ T9290] fuse: fd is not a fuse device [ 129.601397][ T9300] Unable to extract alua_access_type [ 129.672202][ T9311] FAULT_INJECTION: forcing a failure. [ 129.672202][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 129.679749][ T9311] CPU: 2 UID: 0 PID: 9311 Comm: syz.0.1250 Not tainted syzkaller #0 PREEMPT(full) [ 129.679774][ T9311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.679785][ T9311] Call Trace: [ 129.679791][ T9311] [ 129.679799][ T9311] dump_stack_lvl+0x100/0x190 [ 129.679830][ T9311] should_fail_ex.cold+0x5/0xa [ 129.679851][ T9311] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.679882][ T9311] should_failslab+0xc2/0x120 [ 129.679907][ T9311] kmem_cache_alloc_noprof+0x91/0x6a0 [ 129.679929][ T9311] ? skb_clone+0x190/0x400 [ 129.679958][ T9311] skb_clone+0x190/0x400 [ 129.679986][ T9311] netlink_deliver_tap+0xaed/0xcc0 [ 129.680011][ T9311] netlink_unicast+0x62b/0x850 [ 129.680034][ T9311] ? __pfx_netlink_unicast+0x10/0x10 [ 129.680060][ T9311] netlink_sendmsg+0x8b0/0xda0 [ 129.680084][ T9311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.680105][ T9311] ? selinux_socket_sendmsg+0x198/0x2f0 [ 129.680136][ T9311] ____sys_sendmsg+0xa4d/0xbe0 [ 129.680152][ T9311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.680174][ T9311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.680203][ T9311] ___sys_sendmsg+0x190/0x1e0 [ 129.680224][ T9311] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.680241][ T9311] ? __lock_acquire+0x49f/0x1a40 [ 129.680264][ T9311] ? get_pid_task+0x106/0x250 [ 129.680309][ T9311] __sys_sendmsg+0x160/0x210 [ 129.680334][ T9311] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.680372][ T9311] do_syscall_64+0x115/0x870 [ 129.680394][ T9311] ? clear_bhb_loop+0x70/0xc0 [ 129.680417][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.680436][ T9311] RIP: 0033:0x7f4decf9e0d9 [ 129.680451][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.680467][ T9311] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.680486][ T9311] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 129.680498][ T9311] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.680508][ T9311] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 129.680519][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.680529][ T9311] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 129.680553][ T9311] [ 129.777264][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 129.881863][ T9332] Unable to extract alua_access_type [ 129.951204][ T9336] file system registered [ 130.128060][ T5748] Bluetooth: hci3: command tx timeout [ 130.245487][ T9362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.327413][ T9362] md/raid:md0: not clean -- starting background reconstruction [ 130.330280][ T9362] md/raid:md0: invalid chunk size 0 [ 130.334259][ T9362] md: pers->run() failed ... [ 130.335829][ T9362] FAULT_INJECTION: forcing a failure. [ 130.335829][ T9362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.340702][ T9362] CPU: 2 UID: 0 PID: 9362 Comm: syz.4.1266 Not tainted syzkaller #0 PREEMPT(full) [ 130.340716][ T9362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.340724][ T9362] Call Trace: [ 130.340728][ T9362] [ 130.340732][ T9362] dump_stack_lvl+0x100/0x190 [ 130.340752][ T9362] should_fail_ex.cold+0x5/0xa [ 130.340767][ T9362] _copy_to_user+0x32/0xd0 [ 130.340785][ T9362] simple_read_from_buffer+0xcb/0x170 [ 130.340799][ T9362] proc_fail_nth_read+0x1af/0x230 [ 130.340817][ T9362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.340835][ T9362] ? rw_verify_area+0xce/0x6d0 [ 130.340850][ T9362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.340866][ T9362] vfs_read+0x1e4/0xb40 [ 130.340884][ T9362] ? __pfx_vfs_read+0x10/0x10 [ 130.340900][ T9362] ? __fget_files+0x215/0x3d0 [ 130.340914][ T9362] ? __fget_files+0x21f/0x3d0 [ 130.340928][ T9362] ksys_read+0x12a/0x250 [ 130.340944][ T9362] ? __pfx_ksys_read+0x10/0x10 [ 130.340964][ T9362] do_syscall_64+0x115/0x870 [ 130.340979][ T9362] ? clear_bhb_loop+0x70/0xc0 [ 130.340993][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.341004][ T9362] RIP: 0033:0x7f3850f5e90e [ 130.341013][ T9362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.341023][ T9362] RSP: 002b:00007f3851eb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.341034][ T9362] RAX: ffffffffffffffda RBX: 00007f3851eb76c0 RCX: 00007f3850f5e90e [ 130.341041][ T9362] RDX: 000000000000000f RSI: 00007f3851eb70a0 RDI: 0000000000000006 [ 130.341048][ T9362] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.341054][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.341060][ T9362] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 130.341073][ T9362] [ 130.369203][ T9369] Unable to extract alua_access_type [ 130.481147][ T9378] jffs2: notice: (9378) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 130.494905][ T9373] usb usb9: usbfs: process 9373 (syz.4.1270) did not claim interface 46 before use [ 130.509190][ T9377] md/raid:md0: not clean -- starting background reconstruction [ 130.512115][ T9377] md/raid:md0: invalid chunk size 0 [ 130.513701][ T9377] md: pers->run() failed ... [ 130.846558][ T9402] jffs2: notice: (9402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 130.872097][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 130.891698][ T9398] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 130.898822][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1275'. [ 130.955801][ T9408] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1279'. [ 130.960533][ T9408] netdevsim netdevsim4 џџџџџџ: renamed from netdevsim0 (while UP) [ 130.977901][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 130.984520][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 130.988073][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 130.990975][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 130.994013][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 130.996993][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 131.000451][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 131.003822][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 131.006792][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 131.009992][ T24] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 131.021662][ T24] hid-generic 0004:FFFFFFFF:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 131.074342][ T9417] FAULT_INJECTION: forcing a failure. [ 131.074342][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 131.082722][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.1.1280 Not tainted syzkaller #0 PREEMPT(full) [ 131.082741][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.082747][ T9417] Call Trace: [ 131.082752][ T9417] [ 131.082757][ T9417] dump_stack_lvl+0x100/0x190 [ 131.082777][ T9417] should_fail_ex.cold+0x5/0xa [ 131.082792][ T9417] should_failslab+0xc2/0x120 [ 131.082807][ T9417] __kmalloc_node_noprof+0x101/0x830 [ 131.082821][ T9417] ? __get_vm_area_node+0x1dc/0x330 [ 131.082835][ T9417] ? __get_vm_area_node+0x208/0x330 [ 131.082849][ T9417] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 131.082867][ T9417] __vmalloc_node_range_noprof+0x409/0x1630 [ 131.082885][ T9417] ? __lock_acquire+0x49f/0x1a40 [ 131.082901][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.082931][ T9417] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.082947][ T9417] ? find_held_lock+0x2b/0x80 [ 131.082956][ T9417] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 131.082970][ T9417] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 131.082985][ T9417] ? avc_has_perm_noaudit+0x145/0x3b0 [ 131.082999][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.083013][ T9417] __vmalloc_node_noprof+0xad/0xf0 [ 131.083031][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.083046][ T9417] __vmalloc_noprof+0xa3/0x120 [ 131.083065][ T9417] ? __pfx___vmalloc_noprof+0x10/0x10 [ 131.083088][ T9417] ? rcu_is_watching+0x12/0xc0 [ 131.083125][ T9417] ? cap_capable+0x107/0x430 [ 131.083151][ T9417] bpf_prog_alloc_no_stats+0x59/0x630 [ 131.083174][ T9417] ? security_capable+0x80/0x260 [ 131.083194][ T9417] bpf_prog_alloc+0x3b/0x200 [ 131.083206][ T9417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.083229][ T9417] bpf_prog_load+0x4a9/0x2fa0 [ 131.083243][ T9417] ? __pfx_bpf_prog_load+0x10/0x10 [ 131.083254][ T9417] ? avc_has_perm_noaudit+0x145/0x3b0 [ 131.083278][ T9417] __sys_bpf+0x18dc/0x4e80 [ 131.083322][ T9417] ? __pfx___sys_bpf+0x10/0x10 [ 131.083332][ T9417] ? find_held_lock+0x2b/0x80 [ 131.083342][ T9417] ? get_pid_task+0xfc/0x250 [ 131.083352][ T9417] ? get_pid_task+0xfc/0x250 [ 131.083365][ T9417] ? find_held_lock+0x2b/0x80 [ 131.083378][ T9417] ? rcu_read_lock_any_held+0x6a/0xa0 [ 131.083388][ T9417] ? find_held_lock+0x2b/0x80 [ 131.083397][ T9417] ? ksys_write+0x190/0x250 [ 131.083407][ T9417] ? ksys_write+0x190/0x250 [ 131.083425][ T9417] ? fput+0x79/0x100 [ 131.083440][ T9417] ? __x64_sys_bpf+0xce/0x140 [ 131.083450][ T9417] __x64_sys_bpf+0xce/0x140 [ 131.083461][ T9417] ? do_syscall_64+0x90/0x870 [ 131.083477][ T9417] do_syscall_64+0x115/0x870 [ 131.083490][ T9417] ? clear_bhb_loop+0x70/0xc0 [ 131.083504][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.083519][ T9417] RIP: 0033:0x7f04c299e0d9 [ 131.083530][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.083540][ T9417] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.083553][ T9417] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 131.083559][ T9417] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 131.083565][ T9417] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 131.083571][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.083577][ T9417] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 131.083591][ T9417] [ 131.083597][ T9417] warn_alloc: 4 callbacks suppressed [ 131.083603][ T9417] syz.1.1280: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 131.154591][ T9423] jffs2: notice: (9423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 131.156630][ T9417] ,cpuset=/,mems_allowed=0-1 [ 131.231416][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.1.1280 Not tainted syzkaller #0 PREEMPT(full) [ 131.231439][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.231448][ T9417] Call Trace: [ 131.231471][ T9417] [ 131.231478][ T9417] dump_stack_lvl+0x100/0x190 [ 131.231508][ T9417] warn_alloc.cold+0x94/0xa8 [ 131.231543][ T9417] ? __pfx_warn_alloc+0x10/0x10 [ 131.231561][ T9417] ? dump_stack_lvl+0x17c/0x190 [ 131.231583][ T9417] ? rcu_is_watching+0x12/0xc0 [ 131.231611][ T9417] ? __kasan_kmalloc+0x8a/0xb0 [ 131.231633][ T9417] ? __kmalloc_node_noprof+0x357/0x830 [ 131.231654][ T9417] ? __get_vm_area_node+0x1dc/0x330 [ 131.231677][ T9417] ? __get_vm_area_node+0x208/0x330 [ 131.231707][ T9417] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 131.231737][ T9417] __vmalloc_node_range_noprof+0x1394/0x1630 [ 131.231782][ T9417] ? __lock_acquire+0x49f/0x1a40 [ 131.231810][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.231843][ T9417] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.231867][ T9417] ? find_held_lock+0x2b/0x80 [ 131.231883][ T9417] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 131.231906][ T9417] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 131.231932][ T9417] ? avc_has_perm_noaudit+0x145/0x3b0 [ 131.231961][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.231984][ T9417] __vmalloc_node_noprof+0xad/0xf0 [ 131.232006][ T9417] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 131.232031][ T9417] __vmalloc_noprof+0xa3/0x120 [ 131.232056][ T9417] ? __pfx___vmalloc_noprof+0x10/0x10 [ 131.232084][ T9417] ? rcu_is_watching+0x12/0xc0 [ 131.232110][ T9417] ? cap_capable+0x107/0x430 [ 131.232137][ T9417] bpf_prog_alloc_no_stats+0x59/0x630 [ 131.232159][ T9417] ? security_capable+0x80/0x260 [ 131.232186][ T9417] bpf_prog_alloc+0x3b/0x200 [ 131.232205][ T9417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.232228][ T9417] bpf_prog_load+0x4a9/0x2fa0 [ 131.232250][ T9417] ? __pfx_bpf_prog_load+0x10/0x10 [ 131.232267][ T9417] ? avc_has_perm_noaudit+0x145/0x3b0 [ 131.232310][ T9417] __sys_bpf+0x18dc/0x4e80 [ 131.232337][ T9417] ? __pfx___sys_bpf+0x10/0x10 [ 131.232355][ T9417] ? find_held_lock+0x2b/0x80 [ 131.232371][ T9417] ? get_pid_task+0xfc/0x250 [ 131.232387][ T9417] ? get_pid_task+0xfc/0x250 [ 131.232412][ T9417] ? find_held_lock+0x2b/0x80 [ 131.232434][ T9417] ? rcu_read_lock_any_held+0x6a/0xa0 [ 131.232451][ T9417] ? find_held_lock+0x2b/0x80 [ 131.232466][ T9417] ? ksys_write+0x190/0x250 [ 131.232483][ T9417] ? ksys_write+0x190/0x250 [ 131.232517][ T9417] ? fput+0x79/0x100 [ 131.232541][ T9417] ? __x64_sys_bpf+0xce/0x140 [ 131.232558][ T9417] __x64_sys_bpf+0xce/0x140 [ 131.232577][ T9417] ? do_syscall_64+0x90/0x870 [ 131.232603][ T9417] do_syscall_64+0x115/0x870 [ 131.232625][ T9417] ? clear_bhb_loop+0x70/0xc0 [ 131.232644][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.232662][ T9417] RIP: 0033:0x7f04c299e0d9 [ 131.232679][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.232697][ T9417] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.232715][ T9417] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 131.232727][ T9417] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 131.232738][ T9417] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 131.232749][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.232759][ T9417] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 131.232789][ T9417] [ 131.232871][ T9417] Mem-Info: [ 131.237393][ T5840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 131.241263][ T9417] active_anon:30012 inactive_anon:0 isolated_anon:0 [ 131.241263][ T9417] active_file:0 inactive_file:68207 isolated_file:0 [ 131.241263][ T9417] unevictable:1768 dirty:386 writeback:0 [ 131.241263][ T9417] slab_reclaimable:12289 slab_unreclaimable:68595 [ 131.241263][ T9417] mapped:25027 shmem:23109 pagetables:1660 [ 131.241263][ T9417] sec_pagetables:298 bounce:0 [ 131.241263][ T9417] kernel_misc_reclaimable:0 [ 131.241263][ T9417] free:413959 free_pcp:19415 free_cma:0 [ 131.388470][ T9417] Node 0 active_anon:102156kB inactive_anon:0kB active_file:0kB inactive_file:272624kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:99968kB dirty:1532kB writeback:0kB shmem:73428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:6276kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.402997][ T9417] Node 1 active_anon:408kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:12kB writeback:0kB shmem:1648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.412745][ T9417] Node 0 DMA free:12056kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1024kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:168kB free_cma:0kB [ 131.414258][ T5840] usb 9-1: config 0 has no interfaces? [ 131.422033][ T9417] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 131.422065][ T9417] Node 0 DMA32 free:64228kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101160kB inactive_anon:0kB active_file:0kB inactive_file:272312kB unevictable:5536kB writepending:1532kB zspages:0kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:27980kB local_pcp:8216kB free_cma:0kB [ 131.422098][ T9417] lowmem_reserve[]: 0 0 0 0 0 [ 131.422119][ T9417] Node 1 Normal free:1597612kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:408kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:48276kB local_pcp:2128kB free_cma:0kB [ 131.422150][ T9417] lowmem_reserve[]: 0 0 0 0 0 [ 131.422170][ T9417] Node 0 DMA: 26*4kB (UM) 39*8kB (UM) 34*16kB (UM) 34*32kB (M) 50*64kB (ME) 15*128kB (ME) 5*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 0*2048kB 0*4096kB = 12032kB [ 131.422257][ T9417] Node 0 DMA32: 815*4kB (UME) 432*8kB (UME) 263*16kB (UME) 203*32kB (UME) 79*64kB (UME) 36*128kB (UME) 22*256kB (UME) 15*512kB (UME) 7*1024kB (UME) 6*2048kB (UM) 1*4096kB (M) = 63948kB [ 131.422349][ T9417] Node 1 Normal: 27*4kB (UM) 16*8kB (M) 17*16kB (UME) 20*32kB (ME) 15*64kB (ME) 21*128kB (UM) 12*256kB (ME) 11*512kB (UME) 5*1024kB (M) 3*2048kB (ME) 384*4096kB (UM) = 1597628kB [ 131.422443][ T9417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.422452][ T9417] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 131.426228][ T5840] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 131.426935][ T9417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.438688][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.440775][ T5840] usb 9-1: config 0 descriptor?? [ 131.499086][ T9417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.502558][ T9417] 84102 total pagecache pages [ 131.504046][ T9417] 0 pages in swap cache [ 131.505595][ T9417] Free swap = 124996kB [ 131.507214][ T9417] Total swap = 124996kB [ 131.508973][ T9417] 1048443 pages RAM [ 131.510517][ T9417] 0 pages HighMem/MovableOnly [ 131.512373][ T9417] 285332 pages reserved [ 131.513921][ T9417] 0 pages cma reserved [ 131.706999][ T29] usb 9-1: USB disconnect, device number 2 [ 131.844466][ T9459] jffs2: notice: (9459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 132.118006][ T9481] ip_tables: iptables: counters copy to user failed while replacing table [ 132.151435][ T9486] Unable to extract alua_access_type [ 132.208572][ T5748] Bluetooth: hci3: command tx timeout [ 132.210193][ T9490] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 132.216763][ T9492] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 132.243480][ T9497] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 132.267740][ T9499] FAULT_INJECTION: forcing a failure. [ 132.267740][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 132.272209][ T9499] CPU: 3 UID: 0 PID: 9499 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) [ 132.272227][ T9499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.272235][ T9499] Call Trace: [ 132.272245][ T9499] [ 132.272250][ T9499] dump_stack_lvl+0x100/0x190 [ 132.272343][ T9499] should_fail_ex.cold+0x5/0xa [ 132.272385][ T9499] should_failslab+0xc2/0x120 [ 132.272425][ T9499] __kmalloc_noprof+0xfc/0x820 [ 132.272453][ T9499] ? software_key_query+0x1b8/0xe30 [ 132.272513][ T9499] software_key_query+0x1b8/0xe30 [ 132.272548][ T9499] ? __pfx_software_key_query+0x10/0x10 [ 132.272573][ T9499] ? __pfx_software_key_query+0x10/0x10 [ 132.272589][ T9499] query_asymmetric_key+0x104/0x160 [ 132.272606][ T9499] keyctl_pkey_params_get_2+0x1c6/0x3f0 [ 132.272629][ T9499] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 132.272642][ T9499] ? find_held_lock+0x2b/0x80 [ 132.272678][ T9499] ? ksys_write+0x190/0x250 [ 132.272705][ T9499] ? __mutex_unlock_slowpath+0x35d/0x930 [ 132.272773][ T9499] keyctl_pkey_e_d_s+0xac/0x360 [ 132.272787][ T9499] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 132.272803][ T9499] ? ksys_write+0x1ac/0x250 [ 132.272812][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 132.272824][ T9499] __do_sys_keyctl+0x336/0x5a0 [ 132.272841][ T9499] do_syscall_64+0x115/0x870 [ 132.272859][ T9499] ? clear_bhb_loop+0x70/0xc0 [ 132.272879][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.272894][ T9499] RIP: 0033:0x7fce7319e0d9 [ 132.272909][ T9499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.272932][ T9499] RSP: 002b:00007fce74069028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 132.272952][ T9499] RAX: ffffffffffffffda RBX: 00007fce73425fa0 RCX: 00007fce7319e0d9 [ 132.272960][ T9499] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 000000000000001a [ 132.272966][ T9499] RBP: 00007fce74069090 R08: 0000000000000000 R09: 0000000000000000 [ 132.272973][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.272979][ T9499] R13: 00007fce73426038 R14: 00007fce73425fa0 R15: 00007ffc033b6a98 [ 132.272994][ T9499] [ 132.353743][ T9502] FAULT_INJECTION: forcing a failure. [ 132.353743][ T9502] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 132.359772][ T9503] jffs2: notice: (9503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 132.362402][ T9502] CPU: 2 UID: 0 PID: 9502 Comm: syz.4.1301 Not tainted syzkaller #0 PREEMPT(full) [ 132.362418][ T9502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.362425][ T9502] Call Trace: [ 132.362430][ T9502] [ 132.362435][ T9502] dump_stack_lvl+0x100/0x190 [ 132.362456][ T9502] should_fail_ex.cold+0x5/0xa [ 132.362470][ T9502] ? prepare_alloc_pages+0x16d/0x5f0 [ 132.362487][ T9502] should_fail_alloc_page+0xeb/0x140 [ 132.362503][ T9502] prepare_alloc_pages+0x1f0/0x5f0 [ 132.362521][ T9502] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 132.362535][ T9502] ? stack_depot_save_flags+0x27/0x9d0 [ 132.362553][ T9502] ? stack_trace_save+0x8e/0xc0 [ 132.362581][ T9502] ? __pfx_stack_trace_save+0x10/0x10 [ 132.362594][ T9502] ? kasan_save_stack+0x3f/0x50 [ 132.362606][ T9502] ? kasan_save_stack+0x30/0x50 [ 132.362618][ T9502] ? kasan_save_track+0x14/0x30 [ 132.362630][ T9502] ? __kasan_slab_alloc+0x89/0x90 [ 132.362642][ T9502] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 132.362655][ T9502] ? __pmd_alloc+0xbf/0x950 [ 132.362670][ T9502] ? remap_pfn_range_track+0x10d6/0x1580 [ 132.362686][ T9502] ? remap_pfn_range+0x266/0x320 [ 132.362701][ T9502] ? pci_mmap_resource_range+0x2ef/0x500 [ 132.362714][ T9502] ? pci_mmap_resource.isra.0+0x1c3/0x290 [ 132.362729][ T9502] ? kernfs_fop_mmap+0x1c1/0x510 [ 132.362745][ T9502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.362757][ T9502] ? vm_mmap_pgoff+0x29e/0x470 [ 132.362780][ T9502] ? __x64_sys_mmap+0x125/0x190 [ 132.362803][ T9502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.362823][ T9502] ? __lock_acquire+0x49f/0x1a40 [ 132.362838][ T9502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.362861][ T9502] ? policy_nodemask+0xed/0x4f0 [ 132.362878][ T9502] alloc_pages_mpol+0x1fb/0x540 [ 132.362894][ T9502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.362908][ T9502] ? __pmd_alloc+0x3f6/0x950 [ 132.362922][ T9502] ? __pmd_alloc+0x3f6/0x950 [ 132.362940][ T9502] alloc_pages_noprof+0x1a/0x160 [ 132.362956][ T9502] pte_alloc_one+0x1c/0x3d0 [ 132.362975][ T9502] remap_pfn_range_track+0xd21/0x1580 [ 132.362999][ T9502] ? __pfx_remap_pfn_range_track+0x10/0x10 [ 132.363018][ T9502] ? lock_acquire+0x1b9/0x370 [ 132.363033][ T9502] ? __lock_acquire+0x49f/0x1a40 [ 132.363048][ T9502] remap_pfn_range+0x266/0x320 [ 132.363065][ T9502] ? __pfx_remap_pfn_range+0x10/0x10 [ 132.363084][ T9502] ? pci_mmap_fits+0x20b/0x390 [ 132.363096][ T9502] ? __pfx_pci_mmap_fits+0x10/0x10 [ 132.363110][ T9502] pci_mmap_resource_range+0x2ef/0x500 [ 132.363124][ T9502] pci_mmap_resource.isra.0+0x1c3/0x290 [ 132.363142][ T9502] kernfs_fop_mmap+0x1c1/0x510 [ 132.363158][ T9502] __mmap_region+0x13c7/0x2db0 [ 132.363171][ T9502] ? __pfx___mmap_region+0x10/0x10 [ 132.363181][ T9502] ? __pfx___might_resched+0x10/0x10 [ 132.363201][ T9502] ? find_held_lock+0x2b/0x80 [ 132.363211][ T9502] ? process_measurement+0x4c8/0x2350 [ 132.363224][ T9502] ? process_measurement+0x4c8/0x2350 [ 132.363235][ T9502] ? down_write+0x146/0x1f0 [ 132.363255][ T9502] ? process_measurement+0x1f4/0x2350 [ 132.363270][ T9502] ? find_held_lock+0x2b/0x80 [ 132.363325][ T9502] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 132.363356][ T9502] ? __lock_acquire+0x49f/0x1a40 [ 132.363387][ T9502] ? find_held_lock+0x2b/0x80 [ 132.363403][ T9502] ? is_bpf_text_address+0x8a/0x1a0 [ 132.363466][ T9502] ? avc_has_perm_noaudit+0x145/0x3b0 [ 132.363483][ T9502] mmap_region+0x527/0x620 [ 132.363496][ T9502] ? __pfx_mmap_region+0x10/0x10 [ 132.363509][ T9502] ? selinux_mmap_addr+0xe2/0x110 [ 132.363524][ T9502] ? bpf_lsm_mmap_addr+0x9/0x30 [ 132.363541][ T9502] ? security_mmap_addr+0x71/0x1e0 [ 132.363552][ T9502] ? __get_unmapped_area+0x255/0x3e0 [ 132.363569][ T9502] do_mmap+0xc63/0x12f0 [ 132.363590][ T9502] ? __pfx_do_mmap+0x10/0x10 [ 132.363604][ T9502] ? __pfx_down_write_killable+0x10/0x10 [ 132.363626][ T9502] vm_mmap_pgoff+0x29e/0x470 [ 132.363644][ T9502] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 132.363656][ T9502] ? __fget_files+0x215/0x3d0 [ 132.363672][ T9502] ? __fget_files+0x21f/0x3d0 [ 132.363686][ T9502] ksys_mmap_pgoff+0x3cb/0x610 [ 132.363702][ T9502] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 132.363714][ T9502] ? fput+0x79/0x100 [ 132.363728][ T9502] ? ksys_write+0x1ac/0x250 [ 132.363737][ T9502] ? __pfx_ksys_write+0x10/0x10 [ 132.363748][ T9502] __x64_sys_mmap+0x125/0x190 [ 132.363765][ T9502] do_syscall_64+0x115/0x870 [ 132.363779][ T9502] ? clear_bhb_loop+0x70/0xc0 [ 132.363793][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.363804][ T9502] RIP: 0033:0x7f3850f9e0d9 [ 132.363815][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.363826][ T9502] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.363837][ T9502] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 132.363844][ T9502] RDX: 0000000000000003 RSI: 0000000000001012 RDI: 0000000000000000 [ 132.363850][ T9502] RBP: 00007f3851eb7090 R08: 0000000000000003 R09: 000000000000f000 [ 132.363857][ T9502] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 132.363863][ T9502] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 132.363877][ T9502] [ 132.664671][ T9516] Unable to extract alua_access_type [ 132.712205][ T9518] FAULT_INJECTION: forcing a failure. [ 132.712205][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 132.718052][ T9518] CPU: 3 UID: 0 PID: 9518 Comm: syz.4.1306 Not tainted syzkaller #0 PREEMPT(full) [ 132.718077][ T9518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.718088][ T9518] Call Trace: [ 132.718094][ T9518] [ 132.718102][ T9518] dump_stack_lvl+0x100/0x190 [ 132.718139][ T9518] should_fail_ex.cold+0x5/0xa [ 132.718162][ T9518] should_failslab+0xc2/0x120 [ 132.718186][ T9518] __kmalloc_noprof+0xfc/0x820 [ 132.718208][ T9518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 132.718275][ T9518] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 132.718302][ T9518] genl_family_rcv_msg_doit+0xc7/0x300 [ 132.718326][ T9518] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 132.718354][ T9518] ? bpf_lsm_capable+0x9/0x10 [ 132.718372][ T9518] ? security_capable+0x80/0x260 [ 132.718396][ T9518] ? ns_capable+0xd2/0xf0 [ 132.718431][ T9518] genl_rcv_msg+0x560/0x800 [ 132.718456][ T9518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.718479][ T9518] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 132.718546][ T9518] netlink_rcv_skb+0x159/0x420 [ 132.718566][ T9518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.718589][ T9518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.718615][ T9518] ? netlink_deliver_tap+0x1ae/0xcc0 [ 132.718633][ T9518] genl_rcv+0x28/0x40 [ 132.718649][ T9518] netlink_unicast+0x585/0x850 [ 132.718669][ T9518] ? __pfx_netlink_unicast+0x10/0x10 [ 132.718693][ T9518] netlink_sendmsg+0x8b0/0xda0 [ 132.718713][ T9518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.718735][ T9518] ? selinux_socket_sendmsg+0x198/0x2f0 [ 132.718764][ T9518] ____sys_sendmsg+0xa4d/0xbe0 [ 132.718805][ T9518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.718824][ T9518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.718849][ T9518] ___sys_sendmsg+0x190/0x1e0 [ 132.718869][ T9518] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.718885][ T9518] ? __lock_acquire+0x49f/0x1a40 [ 132.718908][ T9518] ? get_pid_task+0x106/0x250 [ 132.718945][ T9518] __sys_sendmsg+0x160/0x210 [ 132.718961][ T9518] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.718983][ T9518] do_syscall_64+0x115/0x870 [ 132.718997][ T9518] ? clear_bhb_loop+0x70/0xc0 [ 132.719012][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.719022][ T9518] RIP: 0033:0x7f3850f9e0d9 [ 132.719033][ T9518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.719047][ T9518] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.719064][ T9518] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 132.719074][ T9518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 132.719084][ T9518] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.719093][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.719102][ T9518] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 132.719125][ T9518] [ 132.734080][ T9520] FAULT_INJECTION: forcing a failure. [ 132.734080][ T9520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.762066][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763984][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.1.1307 Not tainted syzkaller #0 PREEMPT(full) [ 132.764005][ T9520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.764014][ T9520] Call Trace: [ 132.764019][ T9520] [ 132.764026][ T9520] dump_stack_lvl+0x100/0x190 [ 132.764052][ T9520] should_fail_ex.cold+0x5/0xa [ 132.764072][ T9520] _copy_to_user+0x32/0xd0 [ 132.764096][ T9520] simple_read_from_buffer+0xcb/0x170 [ 132.764114][ T9520] proc_fail_nth_read+0x1af/0x230 [ 132.764141][ T9520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.764163][ T9520] ? rw_verify_area+0xce/0x6d0 [ 132.764184][ T9520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.764205][ T9520] vfs_read+0x1e4/0xb40 [ 132.764229][ T9520] ? __pfx_vfs_read+0x10/0x10 [ 132.764249][ T9520] ? __fget_files+0x215/0x3d0 [ 132.764268][ T9520] ? __fget_files+0x21f/0x3d0 [ 132.764288][ T9520] ksys_read+0x12a/0x250 [ 132.764310][ T9520] ? __pfx_ksys_read+0x10/0x10 [ 132.764337][ T9520] do_syscall_64+0x115/0x870 [ 132.764357][ T9520] ? clear_bhb_loop+0x70/0xc0 [ 132.764376][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.764391][ T9520] RIP: 0033:0x7f04c295e90e [ 132.764406][ T9520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.764419][ T9520] RSP: 002b:00007f04c3873fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.764436][ T9520] RAX: ffffffffffffffda RBX: 00007f04c38746c0 RCX: 00007f04c295e90e [ 132.764446][ T9520] RDX: 000000000000000f RSI: 00007f04c38740a0 RDI: 0000000000000004 [ 132.764454][ T9520] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 132.764462][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.764471][ T9520] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 132.764491][ T9520] [ 132.772827][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 132.775882][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789854][ T9526] jffs2: notice: (9526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 132.806907][ T9528] Mass Storage Function, version: 2009/09/11 [ 132.875414][ T9530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=9530 comm=syz.1.1310 [ 132.879762][ T9528] LUN: removable file: (no medium) [ 133.019995][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 133.020009][ T42] audit: type=1400 audit(1786064803.317:1039): avc: denied { bind } for pid=9531 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.030770][ T42] audit: type=1400 audit(1786064803.317:1040): avc: denied { listen } for pid=9531 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.038689][ T42] audit: type=1400 audit(1786064803.317:1041): avc: denied { connect } for pid=9531 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.046356][ T42] audit: type=1400 audit(1786064803.327:1042): avc: denied { shutdown } for pid=9531 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.054285][ T42] audit: type=1400 audit(1786064803.327:1043): avc: denied { read } for pid=9531 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.110103][ T9536] binder_alloc: 9535: pid 9535 spamming oneway? 1 buffers allocated for a total size of 4096 [ 133.231943][ T42] audit: type=1800 audit(1786064803.527:1044): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1314" name="alua_access_type" dev="configfs" ino=26521 res=0 errno=0 [ 133.233944][ T9538] Unable to extract alua_access_type [ 133.246823][ T9540] xt_hashlimit: size too large, truncated to 1048576 [ 133.299094][ T42] audit: type=1400 audit(1786064803.597:1045): avc: denied { mount } for pid=9539 comm="syz.0.1315" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.308427][ T9542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1315'. [ 133.317208][ T9544] jffs2: notice: (9544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 133.346674][ T42] audit: type=1400 audit(1786064803.637:1046): avc: denied { write } for pid=9543 comm="syz.1.1316" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.370985][ T42] audit: type=1400 audit(1786064803.667:1047): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.419494][ T9554] FAULT_INJECTION: forcing a failure. [ 133.419494][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 133.423335][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.0.1318 Not tainted syzkaller #0 PREEMPT(full) [ 133.423351][ T9554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.423359][ T9554] Call Trace: [ 133.423364][ T9554] [ 133.423368][ T9554] dump_stack_lvl+0x100/0x190 [ 133.423388][ T9554] should_fail_ex.cold+0x5/0xa [ 133.423404][ T9554] should_failslab+0xc2/0x120 [ 133.423420][ T9554] kmem_cache_alloc_noprof+0x91/0x6a0 [ 133.423433][ T9554] ? trace_kmem_cache_alloc+0xdd/0x100 [ 133.423451][ T9554] ? security_file_alloc+0x34/0x2c0 [ 133.423466][ T9554] security_file_alloc+0x34/0x2c0 [ 133.423477][ T9554] init_file+0x95/0x480 [ 133.423491][ T9554] alloc_empty_file+0x79/0x1c0 [ 133.423505][ T9554] alloc_file_pseudo+0x183/0x290 [ 133.423520][ T9554] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 133.423537][ T9554] __shmem_file_setup+0x205/0x460 [ 133.423554][ T9554] ? __pfx___shmem_file_setup+0x10/0x10 [ 133.423574][ T9554] newseg+0x3c0/0xed0 [ 133.423587][ T9554] ? __pfx_newseg+0x10/0x10 [ 133.423597][ T9554] ? down_write+0x146/0x1f0 [ 133.423615][ T9554] ? ksys_write+0x190/0x250 [ 133.423626][ T9554] ipcget+0xee/0xf50 [ 133.423637][ T9554] ? __mutex_unlock_slowpath+0x35d/0x930 [ 133.423652][ T9554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.423667][ T9554] ? __pfx_ipcget+0x10/0x10 [ 133.423681][ T9554] __x64_sys_shmget+0x13b/0x1b0 [ 133.423692][ T9554] ? __pfx___x64_sys_shmget+0x10/0x10 [ 133.423707][ T9554] do_syscall_64+0x115/0x870 [ 133.423721][ T9554] ? clear_bhb_loop+0x70/0xc0 [ 133.423734][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.423746][ T9554] RIP: 0033:0x7f4decf9e0d9 [ 133.423756][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.423767][ T9554] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 133.423778][ T9554] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 133.423785][ T9554] RDX: 0000000000000001 RSI: 0000000000013000 RDI: 0000000000000000 [ 133.423791][ T9554] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 133.423797][ T9554] R10: 0000200000feb000 R11: 0000000000000246 R12: 0000000000000001 [ 133.423804][ T9554] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 133.423817][ T9554] [ 133.501219][ T42] audit: type=1400 audit(1786064803.727:1048): avc: denied { write } for pid=9551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.550729][ T9562] jffs2: notice: (9562) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 133.634311][ T9570] 9pnet_virtio: no channels available for device syz [ 133.699737][ T9577] Unable to extract alua_access_type [ 133.894836][ T9590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1328'. [ 133.945849][ T9590] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 134.039623][ T9605] jffs2: notice: (9605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 134.050914][ T9608] binder: 9599:9608 ioctl 8933 2000000002c0 returned -22 [ 134.054016][ T9608] binder: 9599:9608 ioctl 8933 200000000580 returned -22 [ 134.159248][ T9615] Unable to extract alua_access_type [ 134.278173][ T5748] Bluetooth: hci3: command tx timeout [ 134.281149][ T9630] FAULT_INJECTION: forcing a failure. [ 134.281149][ T9630] name failslab, interval 1, probability 0, space 0, times 0 [ 134.290073][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.1.1338 Not tainted syzkaller #0 PREEMPT(full) [ 134.290104][ T9630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.290115][ T9630] Call Trace: [ 134.290122][ T9630] [ 134.290129][ T9630] dump_stack_lvl+0x100/0x190 [ 134.290159][ T9630] should_fail_ex.cold+0x5/0xa [ 134.290202][ T9630] should_failslab+0xc2/0x120 [ 134.290227][ T9630] kmem_cache_alloc_noprof+0x91/0x6a0 [ 134.290247][ T9630] ? __pfx_map_id_range_down+0x10/0x10 [ 134.290268][ T9630] ? security_inode_alloc+0x3b/0x2c0 [ 134.290300][ T9630] security_inode_alloc+0x3b/0x2c0 [ 134.290326][ T9630] inode_init_always_gfp+0xc77/0xfb0 [ 134.290350][ T9630] alloc_inode+0x8e/0x250 [ 134.290373][ T9630] new_inode+0x22/0x1c0 [ 134.290394][ T9630] ? do_raw_spin_lock+0x128/0x260 [ 134.290423][ T9630] configfs_new_inode+0x24/0x4a0 [ 134.290443][ T9630] configfs_create+0xcc/0x290 [ 134.290459][ T9630] configfs_lookup+0x38f/0x7d0 [ 134.290478][ T9630] ? __pfx_configfs_lookup+0x10/0x10 [ 134.290501][ T9630] path_openat+0x241f/0x4280 [ 134.290535][ T9630] ? __pfx_path_openat+0x10/0x10 [ 134.290562][ T9630] do_file_open+0x20e/0x430 [ 134.290584][ T9630] ? __pfx_do_file_open+0x10/0x10 [ 134.290619][ T9630] ? alloc_fd+0x471/0x7a0 [ 134.290641][ T9630] ? do_getname+0x191/0x390 [ 134.290666][ T9630] do_sys_openat2+0x10f/0x1e0 [ 134.290689][ T9630] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.290711][ T9630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.290739][ T9630] ? __fget_files+0x21f/0x3d0 [ 134.290761][ T9630] __x64_sys_openat+0x12d/0x210 [ 134.290783][ T9630] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.290804][ T9630] ? ksys_write+0x1ac/0x250 [ 134.290828][ T9630] do_syscall_64+0x115/0x870 [ 134.290850][ T9630] ? clear_bhb_loop+0x70/0xc0 [ 134.290872][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.290890][ T9630] RIP: 0033:0x7f04c299e0d9 [ 134.290908][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.290926][ T9630] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.290945][ T9630] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 134.290956][ T9630] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 134.290967][ T9630] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 134.290977][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.290987][ T9630] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 134.291011][ T9630] [ 134.307816][ T9632] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1337'. [ 134.399199][ T9627] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1337'. [ 134.440074][ T9641] jffs2: notice: (9641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 134.612454][ T9651] jffs2: notice: (9651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 134.629471][ T9654] Unable to extract alua_access_type [ 134.704301][ T9656] FAULT_INJECTION: forcing a failure. [ 134.704301][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 134.708387][ T9656] CPU: 3 UID: 0 PID: 9656 Comm: syz.4.1344 Not tainted syzkaller #0 PREEMPT(full) [ 134.708402][ T9656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.708409][ T9656] Call Trace: [ 134.708414][ T9656] [ 134.708418][ T9656] dump_stack_lvl+0x100/0x190 [ 134.708439][ T9656] should_fail_ex.cold+0x5/0xa [ 134.708455][ T9656] should_failslab+0xc2/0x120 [ 134.708471][ T9656] __kmalloc_node_noprof+0x101/0x830 [ 134.708484][ T9656] ? __get_vm_area_node+0x1dc/0x330 [ 134.708499][ T9656] ? __get_vm_area_node+0x208/0x330 [ 134.708513][ T9656] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 134.708531][ T9656] __vmalloc_node_range_noprof+0x409/0x1630 [ 134.708549][ T9656] ? __lock_acquire+0x49f/0x1a40 [ 134.708564][ T9656] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.708584][ T9656] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.708599][ T9656] ? find_held_lock+0x2b/0x80 [ 134.708608][ T9656] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.708622][ T9656] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.708637][ T9656] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.708651][ T9656] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.708664][ T9656] __vmalloc_node_noprof+0xad/0xf0 [ 134.708679][ T9656] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.708694][ T9656] __vmalloc_noprof+0xa3/0x120 [ 134.708709][ T9656] ? __pfx___vmalloc_noprof+0x10/0x10 [ 134.708726][ T9656] ? rcu_is_watching+0x12/0xc0 [ 134.708744][ T9656] ? cap_capable+0x107/0x430 [ 134.708760][ T9656] bpf_prog_alloc_no_stats+0x59/0x630 [ 134.708773][ T9656] ? security_capable+0x80/0x260 [ 134.708788][ T9656] bpf_prog_alloc+0x3b/0x200 [ 134.708800][ T9656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.708815][ T9656] bpf_prog_load+0x4a9/0x2fa0 [ 134.708829][ T9656] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.708840][ T9656] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.708864][ T9656] __sys_bpf+0x18dc/0x4e80 [ 134.708878][ T9656] ? __pfx___sys_bpf+0x10/0x10 [ 134.708889][ T9656] ? find_held_lock+0x2b/0x80 [ 134.708898][ T9656] ? get_pid_task+0xfc/0x250 [ 134.708907][ T9656] ? get_pid_task+0xfc/0x250 [ 134.708920][ T9656] ? find_held_lock+0x2b/0x80 [ 134.708933][ T9656] ? rcu_read_lock_any_held+0x6a/0xa0 [ 134.708943][ T9656] ? find_held_lock+0x2b/0x80 [ 134.708952][ T9656] ? ksys_write+0x190/0x250 [ 134.708972][ T9656] ? ksys_write+0x190/0x250 [ 134.708991][ T9656] ? fput+0x79/0x100 [ 134.709005][ T9656] ? __x64_sys_bpf+0xce/0x140 [ 134.709016][ T9656] __x64_sys_bpf+0xce/0x140 [ 134.709027][ T9656] ? do_syscall_64+0x90/0x870 [ 134.709042][ T9656] do_syscall_64+0x115/0x870 [ 134.709055][ T9656] ? clear_bhb_loop+0x70/0xc0 [ 134.709069][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.709084][ T9656] RIP: 0033:0x7f3850f9e0d9 [ 134.709094][ T9656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.709105][ T9656] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.709116][ T9656] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 134.709123][ T9656] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 134.709129][ T9656] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.709135][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.709141][ T9656] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 134.709154][ T9656] [ 134.864150][ T9669] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.921557][ T9676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 134.981246][ T9676] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 134.985319][ T9682] jffs2: notice: (9682) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 135.050868][ T9694] Unable to extract alua_access_type [ 135.103490][ T9697] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1353'. [ 135.110337][ T9693] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1353'. [ 135.114447][ T9693] FAULT_INJECTION: forcing a failure. [ 135.114447][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 135.120679][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.0.1353 Not tainted syzkaller #0 PREEMPT(full) [ 135.120704][ T9693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.120714][ T9693] Call Trace: [ 135.120721][ T9693] [ 135.120728][ T9693] dump_stack_lvl+0x100/0x190 [ 135.120758][ T9693] should_fail_ex.cold+0x5/0xa [ 135.120779][ T9693] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 135.120811][ T9693] should_failslab+0xc2/0x120 [ 135.120836][ T9693] kmem_cache_alloc_noprof+0x91/0x6a0 [ 135.120860][ T9693] ? skb_clone+0x190/0x400 [ 135.120887][ T9693] skb_clone+0x190/0x400 [ 135.120912][ T9693] netlink_deliver_tap+0xaed/0xcc0 [ 135.120933][ T9693] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 135.120979][ T9693] netlink_dump+0x631/0xd00 [ 135.121005][ T9693] ? __pfx_netlink_dump+0x10/0x10 [ 135.121021][ T9693] ? kasan_quarantine_put+0x104/0x240 [ 135.121054][ T9693] ? kfree_skbmem+0x19f/0x210 [ 135.121074][ T9693] netlink_recvmsg+0x7dc/0xa90 [ 135.121094][ T9693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 135.121114][ T9693] ? __pfx__kstrtoull+0x10/0x10 [ 135.121139][ T9693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 135.121159][ T9693] sock_recvmsg+0x1d5/0x220 [ 135.121178][ T9693] ____sys_recvmsg+0x21e/0x670 [ 135.121201][ T9693] ? __pfx_____sys_recvmsg+0x10/0x10 [ 135.121228][ T9693] ? __lock_acquire+0x49f/0x1a40 [ 135.121252][ T9693] ? get_pid_task+0x106/0x250 [ 135.121272][ T9693] ___sys_recvmsg+0x16a/0x1a0 [ 135.121292][ T9693] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.121314][ T9693] ? find_held_lock+0x2b/0x80 [ 135.121347][ T9693] __x64_sys_recvmsg+0x19a/0x260 [ 135.121373][ T9693] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 135.121412][ T9693] do_syscall_64+0x115/0x870 [ 135.121436][ T9693] ? clear_bhb_loop+0x70/0xc0 [ 135.121459][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.121477][ T9693] RIP: 0033:0x7f4decf9e0d9 [ 135.121493][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.121509][ T9693] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 135.121528][ T9693] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 135.121540][ T9693] RDX: 0000000040000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 135.121551][ T9693] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 135.121562][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.121573][ T9693] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 135.121598][ T9693] [ 135.270197][ T9708] nvmet: adding nsid 1 to subsystem testnqn [ 135.294652][ T9708] nvmet: failed to open block device (null): (-22) [ 135.303236][ T9708] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.343552][ T9715] FAULT_INJECTION: forcing a failure. [ 135.343552][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 135.349534][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.1.1360 Not tainted syzkaller #0 PREEMPT(full) [ 135.349576][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.349587][ T9715] Call Trace: [ 135.349595][ T9715] [ 135.349603][ T9715] dump_stack_lvl+0x100/0x190 [ 135.349634][ T9715] should_fail_ex.cold+0x5/0xa [ 135.349661][ T9715] should_failslab+0xc2/0x120 [ 135.349687][ T9715] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 135.349714][ T9715] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 135.349744][ T9715] kstrdup+0x51/0xe0 [ 135.349767][ T9715] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 135.349794][ T9715] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 135.349825][ T9715] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 135.349858][ T9715] selinux_socket_post_create+0x368/0x7e0 [ 135.349888][ T9715] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 135.349915][ T9715] ? tcp_v4_init_sock+0x15/0xb0 [ 135.349938][ T9715] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 135.349959][ T9715] ? inet_create+0x962/0x1060 [ 135.349985][ T9715] security_socket_post_create+0xaf/0x270 [ 135.350014][ T9715] __sock_create+0x70b/0x860 [ 135.350039][ T9715] mptcp_subflow_create_socket+0xec/0xa30 [ 135.350083][ T9715] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 135.350100][ T9715] ? avc_has_perm_noaudit+0x145/0x3b0 [ 135.350123][ T9715] ? look_up_lock_class+0x55/0x120 [ 135.350150][ T9715] __mptcp_nmpc_sk+0x17f/0x880 [ 135.350172][ T9715] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 135.350193][ T9715] ? __lock_acquire+0x49f/0x1a40 [ 135.350221][ T9715] mptcp_connect+0x7e/0xaf0 [ 135.350245][ T9715] __inet_stream_connect+0x208/0xfa0 [ 135.350275][ T9715] ? __pfx___inet_stream_connect+0x10/0x10 [ 135.350299][ T9715] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 135.350327][ T9715] ? __pfx_inet_stream_connect+0x10/0x10 [ 135.350352][ T9715] ? __local_bh_enable_ip+0x9e/0x120 [ 135.350381][ T9715] ? __pfx_inet_stream_connect+0x10/0x10 [ 135.350403][ T9715] inet_stream_connect+0x57/0xa0 [ 135.350428][ T9715] __sys_connect_file+0x141/0x1a0 [ 135.350454][ T9715] __sys_connect+0x141/0x170 [ 135.350474][ T9715] ? __pfx___sys_connect+0x10/0x10 [ 135.350493][ T9715] ? __fget_files+0x21f/0x3d0 [ 135.350522][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 135.350545][ T9715] __x64_sys_connect+0x72/0xb0 [ 135.350564][ T9715] ? lockdep_hardirqs_on+0x78/0x100 [ 135.350586][ T9715] do_syscall_64+0x115/0x870 [ 135.350607][ T9715] ? clear_bhb_loop+0x70/0xc0 [ 135.350630][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.350648][ T9715] RIP: 0033:0x7f04c299e0d9 [ 135.350665][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.350682][ T9715] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 135.350701][ T9715] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 135.350713][ T9715] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 135.350724][ T9715] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 135.350735][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.350745][ T9715] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 135.350770][ T9715] [ 135.360147][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 135.388193][ T9719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1361'. [ 135.500742][ T9719] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 135.550589][ T9727] Unable to extract alua_access_type [ 135.608980][ T9737] jffs2: notice: (9737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 135.613248][ T9739] FAULT_INJECTION: forcing a failure. [ 135.613248][ T9739] name failslab, interval 1, probability 0, space 0, times 0 [ 135.621449][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.4.1369 Not tainted syzkaller #0 PREEMPT(full) [ 135.621477][ T9739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.621488][ T9739] Call Trace: [ 135.621495][ T9739] [ 135.621503][ T9739] dump_stack_lvl+0x100/0x190 [ 135.621535][ T9739] should_fail_ex.cold+0x5/0xa [ 135.621561][ T9739] should_failslab+0xc2/0x120 [ 135.621585][ T9739] __kmalloc_node_noprof+0x101/0x830 [ 135.621609][ T9739] ? crypto_create_tfm_node+0x8d/0x3b0 [ 135.621639][ T9739] crypto_create_tfm_node+0x8d/0x3b0 [ 135.621680][ T9739] crypto_alloc_tfm_node+0x102/0x260 [ 135.621698][ T9739] software_key_query+0x35a/0xe30 [ 135.621716][ T9739] ? __pfx_software_key_query+0x10/0x10 [ 135.621740][ T9739] ? __pfx_software_key_query+0x10/0x10 [ 135.621756][ T9739] query_asymmetric_key+0x104/0x160 [ 135.621772][ T9739] keyctl_pkey_params_get_2+0x1c6/0x3f0 [ 135.621787][ T9739] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 135.621800][ T9739] ? find_held_lock+0x2b/0x80 [ 135.621811][ T9739] ? ksys_write+0x190/0x250 [ 135.621824][ T9739] ? __mutex_unlock_slowpath+0x35d/0x930 [ 135.621844][ T9739] keyctl_pkey_e_d_s+0xac/0x360 [ 135.621859][ T9739] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 135.621882][ T9739] ? ksys_write+0x1ac/0x250 [ 135.621898][ T9739] ? __pfx_ksys_write+0x10/0x10 [ 135.621918][ T9739] __do_sys_keyctl+0x336/0x5a0 [ 135.621944][ T9739] do_syscall_64+0x115/0x870 [ 135.621966][ T9739] ? clear_bhb_loop+0x70/0xc0 [ 135.621988][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.622006][ T9739] RIP: 0033:0x7f3850f9e0d9 [ 135.622024][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.622041][ T9739] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 135.622060][ T9739] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 135.622071][ T9739] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 000000000000001a [ 135.622088][ T9739] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.622098][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.622107][ T9739] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 135.622131][ T9739] [ 135.911014][ T9754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.913278][ T9756] Unable to extract alua_access_type [ 135.914953][ T9754] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.919706][ T9754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.922557][ T9754] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.925336][ T9754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.928206][ T9754] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.936103][ T9754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.938831][ T9754] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.941724][ T9754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.019319][ T9762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9762 comm=syz.0.1373 [ 136.059505][ T9764] xt_hashlimit: max too large, truncated to 1048576 [ 136.090490][ T9767] jffs2: notice: (9767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 136.221603][ T9776] jffs2: notice: (9776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 136.306358][ T9781] Unable to extract alua_access_type [ 136.382299][ T9788] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 136.580008][ T9811] jffs2: notice: (9811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 136.698447][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 136.705034][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 136.908863][ T9830] jffs2: notice: (9830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 136.988325][ T9833] binder_alloc: 9832: pid 9832 spamming oneway? 1 buffers allocated for a total size of 4096 [ 137.044848][ T9837] FAULT_INJECTION: forcing a failure. [ 137.044848][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 137.050281][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.4.1400 Not tainted syzkaller #0 PREEMPT(full) [ 137.050306][ T9837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.050317][ T9837] Call Trace: [ 137.050323][ T9837] [ 137.050330][ T9837] dump_stack_lvl+0x100/0x190 [ 137.050361][ T9837] should_fail_ex.cold+0x5/0xa [ 137.050386][ T9837] should_failslab+0xc2/0x120 [ 137.050409][ T9837] __kmalloc_noprof+0xfc/0x820 [ 137.050430][ T9837] ? rcu_is_watching+0x12/0xc0 [ 137.050458][ T9837] ? tomoyo_realpath_from_path+0xb6/0x690 [ 137.050485][ T9837] tomoyo_realpath_from_path+0xb6/0x690 [ 137.050510][ T9837] tomoyo_check_open_permission+0x2af/0x3c0 [ 137.050538][ T9837] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 137.050573][ T9837] ? hook_file_open+0x24f/0x8f0 [ 137.050609][ T9837] ? lock_acquire+0x1b9/0x370 [ 137.050640][ T9837] tomoyo_file_open+0x6b/0x90 [ 137.050662][ T9837] security_file_open+0xb5/0x1e0 [ 137.050684][ T9837] do_dentry_open+0x588/0x14d0 [ 137.050707][ T9837] vfs_open+0x82/0x3f0 [ 137.050732][ T9837] path_openat+0x2873/0x4280 [ 137.050764][ T9837] ? __pfx_path_openat+0x10/0x10 [ 137.050790][ T9837] do_file_open+0x20e/0x430 [ 137.050811][ T9837] ? __pfx_do_file_open+0x10/0x10 [ 137.050849][ T9837] ? alloc_fd+0x471/0x7a0 [ 137.050872][ T9837] ? do_getname+0x191/0x390 [ 137.050903][ T9837] do_sys_openat2+0x10f/0x1e0 [ 137.050926][ T9837] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.050949][ T9837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.050976][ T9837] ? __fget_files+0x21f/0x3d0 [ 137.050999][ T9837] __x64_sys_openat+0x12d/0x210 [ 137.051021][ T9837] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.051043][ T9837] ? ksys_write+0x1ac/0x250 [ 137.051066][ T9837] do_syscall_64+0x115/0x870 [ 137.051088][ T9837] ? clear_bhb_loop+0x70/0xc0 [ 137.051112][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.051130][ T9837] RIP: 0033:0x7f3850f9e0d9 [ 137.051146][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.051164][ T9837] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.051182][ T9837] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 137.051194][ T9837] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 137.051206][ T9837] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.051216][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.051226][ T9837] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 137.051250][ T9837] [ 137.051283][ T9837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.556640][ T9851] jffs2: notice: (9851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 137.606447][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.611423][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.614861][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.623342][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.626685][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.729838][ T9865] Unable to extract alua_access_type [ 137.820963][ T9874] __nla_validate_parse: 3 callbacks suppressed [ 137.820977][ T9874] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1410'. [ 137.837979][ T9874] nbd: couldn't find a device at index -2145452028 [ 137.864779][ T9880] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1412'. [ 137.922367][ T9890] jffs2: notice: (9890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 137.930738][ T9889] FAULT_INJECTION: forcing a failure. [ 137.930738][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 137.935345][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.0.1414 Not tainted syzkaller #0 PREEMPT(full) [ 137.935369][ T9889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.935379][ T9889] Call Trace: [ 137.935386][ T9889] [ 137.935393][ T9889] dump_stack_lvl+0x100/0x190 [ 137.935499][ T9889] should_fail_ex.cold+0x5/0xa [ 137.935537][ T9889] should_failslab+0xc2/0x120 [ 137.935586][ T9889] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 137.935617][ T9889] ? __d_alloc+0x35/0xa50 [ 137.935648][ T9889] __d_alloc+0x35/0xa50 [ 137.935671][ T9889] d_alloc_pseudo+0x1c/0xc0 [ 137.935696][ T9889] alloc_file_pseudo+0x118/0x290 [ 137.935730][ T9889] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 137.935754][ T9889] ? hugetlbfs_get_inode+0x3f5/0x700 [ 137.935809][ T9889] hugetlb_file_setup+0x2a8/0x5b0 [ 137.935836][ T9889] newseg+0xaf0/0xed0 [ 137.935873][ T9889] ? __pfx_newseg+0x10/0x10 [ 137.935890][ T9889] ? down_write+0x146/0x1f0 [ 137.935960][ T9889] ? ksys_write+0x190/0x250 [ 137.935980][ T9889] ipcget+0xee/0xf50 [ 137.935998][ T9889] ? __mutex_unlock_slowpath+0x35d/0x930 [ 137.936031][ T9889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.936056][ T9889] ? __pfx_ipcget+0x10/0x10 [ 137.936080][ T9889] __x64_sys_shmget+0x13b/0x1b0 [ 137.936099][ T9889] ? __pfx___x64_sys_shmget+0x10/0x10 [ 137.936125][ T9889] do_syscall_64+0x115/0x870 [ 137.936148][ T9889] ? clear_bhb_loop+0x70/0xc0 [ 137.936172][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.936191][ T9889] RIP: 0033:0x7f4decf9e0d9 [ 137.936207][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.936225][ T9889] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 137.936245][ T9889] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 137.936257][ T9889] RDX: 000000000000fffe RSI: 0000000000013000 RDI: 0000000000000000 [ 137.936268][ T9889] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 137.936278][ T9889] R10: 0000200000feb000 R11: 0000000000000246 R12: 0000000000000001 [ 137.936289][ T9889] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 137.936313][ T9889] [ 138.032863][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 138.032877][ T42] audit: type=1400 audit(1786064808.317:1133): avc: denied { create } for pid=9888 comm="syz.1.1415" name="config" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.046572][ T42] audit: type=1400 audit(1786064808.327:1134): avc: denied { mounton } for pid=9888 comm="syz.1.1415" path="/428/file0/config" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.057168][ T42] audit: type=1800 audit(1786064808.337:1135): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1415" name="process_ump" dev="configfs" ino=30858 res=0 errno=0 [ 138.064951][ T42] audit: type=1400 audit(1786064808.357:1136): avc: denied { write } for pid=5741 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.073177][ T42] audit: type=1400 audit(1786064808.357:1137): avc: denied { remove_name } for pid=5741 comm="syz-executor" name="test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.080519][ T42] audit: type=1400 audit(1786064808.357:1138): avc: denied { unlink } for pid=5741 comm="syz-executor" name="test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.087604][ T42] audit: type=1400 audit(1786064808.367:1139): avc: denied { write } for pid=5741 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.097645][ T42] audit: type=1400 audit(1786064808.377:1140): avc: denied { write } for pid=5741 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.104079][ T9901] jffs2: notice: (9901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 3 orphan) found. [ 138.105091][ T42] audit: type=1400 audit(1786064808.377:1141): avc: denied { rmdir } for pid=5741 comm="syz-executor" name="config" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.129318][ T42] audit: type=1400 audit(1786064808.427:1142): avc: denied { write } for pid=9900 comm="syz.1.1417" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.145770][ T9903] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1416'. [ 138.153396][ T9898] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1416'. [ 138.156675][ T9898] FAULT_INJECTION: forcing a failure. [ 138.156675][ T9898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.161324][ T9898] CPU: 1 UID: 0 PID: 9898 Comm: syz.0.1416 Not tainted syzkaller #0 PREEMPT(full) [ 138.161339][ T9898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.161346][ T9898] Call Trace: [ 138.161351][ T9898] [ 138.161355][ T9898] dump_stack_lvl+0x100/0x190 [ 138.161375][ T9898] should_fail_ex.cold+0x5/0xa [ 138.161390][ T9898] _copy_to_user+0x32/0xd0 [ 138.161417][ T9898] simple_read_from_buffer+0xcb/0x170 [ 138.161430][ T9898] proc_fail_nth_read+0x1af/0x230 [ 138.161448][ T9898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.161466][ T9898] ? rw_verify_area+0xce/0x6d0 [ 138.161482][ T9898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.161498][ T9898] vfs_read+0x1e4/0xb40 [ 138.161515][ T9898] ? __pfx_vfs_read+0x10/0x10 [ 138.161531][ T9898] ? __fget_files+0x215/0x3d0 [ 138.161545][ T9898] ? __fget_files+0x21f/0x3d0 [ 138.161559][ T9898] ksys_read+0x12a/0x250 [ 138.161575][ T9898] ? __pfx_ksys_read+0x10/0x10 [ 138.161600][ T9898] do_syscall_64+0x115/0x870 [ 138.161614][ T9898] ? clear_bhb_loop+0x70/0xc0 [ 138.161628][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.161639][ T9898] RIP: 0033:0x7f4decf5e90e [ 138.161649][ T9898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.161660][ T9898] RSP: 002b:00007f4deddebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.161671][ T9898] RAX: ffffffffffffffda RBX: 00007f4deddec6c0 RCX: 00007f4decf5e90e [ 138.161678][ T9898] RDX: 000000000000000f RSI: 00007f4deddec0a0 RDI: 0000000000000004 [ 138.161684][ T9898] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 138.161690][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.161696][ T9898] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 138.161709][ T9898] [ 138.185415][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.243037][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.247559][ T9854] bridge_slave_0: entered allmulticast mode [ 138.253293][ T9854] bridge_slave_0: entered promiscuous mode [ 138.264668][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.268145][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.271448][ T9854] bridge_slave_1: entered allmulticast mode [ 138.275534][ T9854] bridge_slave_1: entered promiscuous mode [ 138.293136][ T9914] FAULT_INJECTION: forcing a failure. [ 138.293136][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 138.300230][ T9914] CPU: 2 UID: 0 PID: 9914 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 138.300255][ T9914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.300267][ T9914] Call Trace: [ 138.300273][ T9914] [ 138.300281][ T9914] dump_stack_lvl+0x100/0x190 [ 138.300313][ T9914] should_fail_ex.cold+0x5/0xa [ 138.300339][ T9914] should_failslab+0xc2/0x120 [ 138.300364][ T9914] __kmalloc_cache_noprof+0x91/0x6c0 [ 138.300393][ T9914] ? selinux_netlbl_sk_security_free+0x40/0x3f0 [ 138.300438][ T9914] ? selinux_netlbl_sk_security_free+0x12c/0x3f0 [ 138.300466][ T9914] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 138.300500][ T9914] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 138.300531][ T9914] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 138.300563][ T9914] security_mptcp_add_subflow+0x91/0x210 [ 138.300591][ T9914] mptcp_subflow_create_socket+0x1a9/0xa30 [ 138.300625][ T9914] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 138.300643][ T9914] ? avc_has_perm_noaudit+0x145/0x3b0 [ 138.300669][ T9914] ? look_up_lock_class+0x55/0x120 [ 138.300718][ T9914] __mptcp_nmpc_sk+0x17f/0x880 [ 138.300743][ T9914] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 138.300766][ T9914] ? __lock_acquire+0x49f/0x1a40 [ 138.300825][ T9914] mptcp_connect+0x7e/0xaf0 [ 138.300851][ T9914] __inet_stream_connect+0x208/0xfa0 [ 138.300932][ T9914] ? __pfx___inet_stream_connect+0x10/0x10 [ 138.300959][ T9914] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.300989][ T9914] ? __pfx_inet_stream_connect+0x10/0x10 [ 138.301015][ T9914] ? __local_bh_enable_ip+0x9e/0x120 [ 138.301054][ T9914] ? __pfx_inet_stream_connect+0x10/0x10 [ 138.301078][ T9914] inet_stream_connect+0x57/0xa0 [ 138.301105][ T9914] __sys_connect_file+0x141/0x1a0 [ 138.301158][ T9914] __sys_connect+0x141/0x170 [ 138.301180][ T9914] ? __pfx___sys_connect+0x10/0x10 [ 138.301205][ T9914] ? __fget_files+0x21f/0x3d0 [ 138.301236][ T9914] ? __pfx_ksys_write+0x10/0x10 [ 138.301261][ T9914] __x64_sys_connect+0x72/0xb0 [ 138.301283][ T9914] ? lockdep_hardirqs_on+0x78/0x100 [ 138.301306][ T9914] do_syscall_64+0x115/0x870 [ 138.301330][ T9914] ? clear_bhb_loop+0x70/0xc0 [ 138.301354][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.301374][ T9914] RIP: 0033:0x7f04c299e0d9 [ 138.301392][ T9914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.301410][ T9914] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 138.301430][ T9914] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 138.301451][ T9914] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 138.301463][ T9914] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 138.301474][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.301485][ T9914] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 138.301511][ T9914] [ 138.306426][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.409055][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.449702][ T9854] team0: Port device team_slave_0 added [ 138.460713][ T9854] team0: Port device team_slave_1 added [ 138.519754][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.524193][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.537470][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.550496][ T9941] jffs2: notice: (9941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 138.555457][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.560113][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.576037][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.636688][ T9854] hsr_slave_0: entered promiscuous mode [ 138.640379][ T9854] hsr_slave_1: entered promiscuous mode [ 138.643034][ T9854] debugfs: 'hsr0' already exists in 'hsr' [ 138.645253][ T9854] Cannot create hsr debugfs directory [ 138.647151][ T9950] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1429'. [ 138.654406][ T9953] loop5: detected capacity change from 0 to 7 [ 138.667020][ T9953] Dev loop5: unable to read RDB block 7 [ 138.670619][ T9953] loop5: unable to read partition table [ 138.672603][ T9953] loop5: partition table beyond EOD, truncated [ 138.675587][ T9953] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 138.903488][ T9976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9976 comm=syz.0.1433 [ 138.943741][ T9854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.951891][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.955019][ T9854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.966058][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.972085][ T9854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.977467][ T9992] Unable to extract alua_access_type [ 138.979640][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.981659][ T9994] jffs2: notice: (9994) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 138.982410][ T9854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.993379][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.032724][T10006] FAULT_INJECTION: forcing a failure. [ 139.032724][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 139.036615][T10006] CPU: 3 UID: 0 PID: 10006 Comm: syz.1.1439 Not tainted syzkaller #0 PREEMPT(full) [ 139.036631][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.036638][T10006] Call Trace: [ 139.036642][T10006] [ 139.036647][T10006] dump_stack_lvl+0x100/0x190 [ 139.036666][T10006] should_fail_ex.cold+0x5/0xa [ 139.036682][T10006] should_failslab+0xc2/0x120 [ 139.036698][T10006] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.036716][T10006] ? bpf_prog_alloc_no_stats+0x161/0x630 [ 139.036746][T10006] bpf_prog_alloc_no_stats+0x161/0x630 [ 139.036761][T10006] bpf_prog_alloc+0x3b/0x200 [ 139.036774][T10006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.036796][T10006] bpf_prog_load+0x4a9/0x2fa0 [ 139.036810][T10006] ? __pfx_bpf_prog_load+0x10/0x10 [ 139.036821][T10006] ? avc_has_perm_noaudit+0x145/0x3b0 [ 139.036847][T10006] __sys_bpf+0x18dc/0x4e80 [ 139.036862][T10006] ? __pfx___sys_bpf+0x10/0x10 [ 139.036872][T10006] ? find_held_lock+0x2b/0x80 [ 139.036883][T10006] ? get_pid_task+0xfc/0x250 [ 139.036899][T10006] ? get_pid_task+0xfc/0x250 [ 139.036912][T10006] ? find_held_lock+0x2b/0x80 [ 139.036924][T10006] ? rcu_read_lock_any_held+0x6a/0xa0 [ 139.036941][T10006] ? find_held_lock+0x2b/0x80 [ 139.036950][T10006] ? ksys_write+0x190/0x250 [ 139.036960][T10006] ? ksys_write+0x190/0x250 [ 139.036978][T10006] ? fput+0x79/0x100 [ 139.036993][T10006] ? __x64_sys_bpf+0xce/0x140 [ 139.037004][T10006] __x64_sys_bpf+0xce/0x140 [ 139.037015][T10006] ? do_syscall_64+0x90/0x870 [ 139.037036][T10006] do_syscall_64+0x115/0x870 [ 139.037048][T10006] ? clear_bhb_loop+0x70/0xc0 [ 139.037062][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.037073][T10006] RIP: 0033:0x7f04c299e0d9 [ 139.037082][T10006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.037093][T10006] RSP: 002b:00007f04c3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.037105][T10006] RAX: ffffffffffffffda RBX: 00007f04c2c25fa0 RCX: 00007f04c299e0d9 [ 139.037111][T10006] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 139.037117][T10006] RBP: 00007f04c3874090 R08: 0000000000000000 R09: 0000000000000000 [ 139.037123][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.037129][T10006] R13: 00007f04c2c26038 R14: 00007f04c2c25fa0 R15: 00007ffcbe5d0e78 [ 139.037155][T10006] [ 139.071481][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.108374][T10009] netlink: 'syz.1.1440': attribute type 11 has an invalid length. [ 139.123972][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.133510][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.135801][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.173962][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.177196][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.316412][T10026] Unable to extract alua_access_type [ 139.329923][T10030] syz.0.1444 (10030): /proc/10027/oom_adj is deprecated, please use /proc/10027/oom_score_adj instead. [ 139.353373][T10030] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 139.454724][T10046] jffs2: notice: (10046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 139.546460][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.630749][T10068] jffs2: notice: (10068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 139.720279][ T9854] veth0_vlan: entered promiscuous mode [ 139.727527][ T5744] Bluetooth: hci1: command tx timeout [ 139.736537][ T9854] veth1_vlan: entered promiscuous mode [ 139.784156][ T9854] veth0_macvtap: entered promiscuous mode [ 139.794830][ T9854] veth1_macvtap: entered promiscuous mode [ 139.806154][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.814892][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.853703][T10078] Unable to extract alua_access_type [ 139.954352][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.956860][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.973742][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.977590][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.988739][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.017472][ T5813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.020358][ T5813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.023422][ T5813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.093335][T10092] jffs2: notice: (10092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 140.212409][T10106] Unable to extract alua_access_type [ 140.306650][T10116] binder_alloc: 10115: pid 10115 spamming oneway? 1 buffers allocated for a total size of 4096 [ 140.347416][T10123] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.441197][T10132] binder_alloc: 10111: pid 10111 spamming oneway? 1 buffers allocated for a total size of 4096 [ 140.663020][T10136] sd 0:0:0:0: PR command failed: 1026 [ 140.664987][T10136] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 140.667197][T10136] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 140.689751][T10147] Unable to extract alua_access_type [ 140.759501][T10151] jffs2: notice: (10151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 140.866560][T10161] TCP: TCP_TX_DELAY enabled [ 140.878030][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6189 sclass=netlink_route_socket pid=10161 comm=syz.4.1475 [ 141.142064][T10174] Unable to extract alua_access_type [ 141.188160][T10175] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1480'. [ 141.204350][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 141.208116][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 141.219151][T10182] jffs2: notice: (10182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 141.237778][ T12] netdevsim netdevsim4 џџџџџџ: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.248695][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.257824][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.266391][T10187] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1485'. [ 141.278964][ T5813] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.450256][T10212] FAULT_INJECTION: forcing a failure. [ 141.450256][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 141.454254][T10212] CPU: 3 UID: 0 PID: 10212 Comm: syz.0.1491 Not tainted syzkaller #0 PREEMPT(full) [ 141.454269][T10212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.454275][T10212] Call Trace: [ 141.454280][T10212] [ 141.454284][T10212] dump_stack_lvl+0x100/0x190 [ 141.454303][T10212] should_fail_ex.cold+0x5/0xa [ 141.454319][T10212] should_failslab+0xc2/0x120 [ 141.454334][T10212] __kmalloc_cache_noprof+0x91/0x6c0 [ 141.454358][T10212] ? bpf_prog_alloc_no_stats+0x161/0x630 [ 141.454383][T10212] bpf_prog_alloc_no_stats+0x161/0x630 [ 141.454406][T10212] bpf_prog_alloc+0x3b/0x200 [ 141.454424][T10212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.454445][T10212] bpf_prog_load+0x4a9/0x2fa0 [ 141.454467][T10212] ? __pfx_bpf_prog_load+0x10/0x10 [ 141.454478][T10212] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.454504][T10212] __sys_bpf+0x18dc/0x4e80 [ 141.454518][T10212] ? __pfx___sys_bpf+0x10/0x10 [ 141.454529][T10212] ? find_held_lock+0x2b/0x80 [ 141.454539][T10212] ? get_pid_task+0xfc/0x250 [ 141.454549][T10212] ? get_pid_task+0xfc/0x250 [ 141.454578][T10212] ? find_held_lock+0x2b/0x80 [ 141.454593][T10212] ? rcu_read_lock_any_held+0x6a/0xa0 [ 141.454604][T10212] ? find_held_lock+0x2b/0x80 [ 141.454613][T10212] ? ksys_write+0x190/0x250 [ 141.454623][T10212] ? ksys_write+0x190/0x250 [ 141.454643][T10212] ? fput+0x79/0x100 [ 141.454658][T10212] ? __x64_sys_bpf+0xce/0x140 [ 141.454668][T10212] __x64_sys_bpf+0xce/0x140 [ 141.454679][T10212] ? do_syscall_64+0x90/0x870 [ 141.454696][T10212] do_syscall_64+0x115/0x870 [ 141.454708][T10212] ? clear_bhb_loop+0x70/0xc0 [ 141.454723][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.454734][T10212] RIP: 0033:0x7f4decf9e0d9 [ 141.454744][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.454755][T10212] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.454766][T10212] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 141.454773][T10212] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 141.454779][T10212] RBP: 00007f4deddec090 R08: 0000000000000000 R09: 0000000000000000 [ 141.454785][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.454791][T10212] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 141.454805][T10212] [ 141.591136][T10220] Unable to extract alua_access_type [ 141.691385][T10231] jffs2: notice: (10231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 141.798366][ T5744] Bluetooth: hci1: command tx timeout [ 141.876951][T10251] warn_alloc: 3 callbacks suppressed [ 141.876964][T10251] syz.0.1502: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.886274][T10251] CPU: 2 UID: 0 PID: 10251 Comm: syz.0.1502 Not tainted syzkaller #0 PREEMPT(full) [ 141.886291][T10251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.886299][T10251] Call Trace: [ 141.886304][T10251] [ 141.886309][T10251] dump_stack_lvl+0x100/0x190 [ 141.886329][T10251] warn_alloc.cold+0x94/0xa8 [ 141.886353][T10251] ? __pfx_warn_alloc+0x10/0x10 [ 141.886367][T10251] ? policy_nodemask+0xed/0x4f0 [ 141.886386][T10251] ? alloc_pages_mpol+0x25a/0x540 [ 141.886402][T10251] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.886418][T10251] ? find_held_lock+0x2b/0x80 [ 141.886430][T10251] ? rcu_read_unlock+0x17/0x60 [ 141.886449][T10251] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 141.886470][T10251] ? bpf_check+0xf5/0xb7d0 [ 141.886490][T10251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.886509][T10251] ? rcu_is_watching+0x12/0xc0 [ 141.886529][T10251] __kvmalloc_node_noprof+0x3d3/0x970 [ 141.886542][T10251] ? bpf_check+0xf5/0xb7d0 [ 141.886556][T10251] ? ktime_get+0x22c/0x320 [ 141.886577][T10251] ? bpf_check+0xf5/0xb7d0 [ 141.886593][T10251] bpf_check+0xf5/0xb7d0 [ 141.886607][T10251] ? __lock_acquire+0x49f/0x1a40 [ 141.886626][T10251] ? find_held_lock+0x2b/0x80 [ 141.886635][T10251] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 141.886651][T10251] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 141.886667][T10251] ? __pfx_bpf_check+0x10/0x10 [ 141.886681][T10251] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.886696][T10251] ? avc_has_perm+0x135/0x1e0 [ 141.886709][T10251] ? __pfx_avc_has_perm+0x10/0x10 [ 141.886722][T10251] ? lsm_blob_alloc+0x68/0x90 [ 141.886740][T10251] ? bpf_prog_load+0x244d/0x2fa0 [ 141.886750][T10251] bpf_prog_load+0x244d/0x2fa0 [ 141.886763][T10251] ? __pfx_bpf_prog_load+0x10/0x10 [ 141.886774][T10251] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.886799][T10251] __sys_bpf+0x18dc/0x4e80 [ 141.886815][T10251] ? __pfx___sys_bpf+0x10/0x10 [ 141.886827][T10251] ? find_held_lock+0x2b/0x80 [ 141.886837][T10251] ? futex_wake+0x4ea/0x5e0 [ 141.886852][T10251] ? futex_private_hash_put+0x115/0x1c0 [ 141.886870][T10251] ? __pfx_futex_wake+0x10/0x10 [ 141.886884][T10251] ? ksys_write+0x190/0x250 [ 141.886902][T10251] ? __x64_sys_futex+0x34f/0x4d0 [ 141.886917][T10251] ? __x64_sys_futex+0x358/0x4d0 [ 141.886934][T10251] ? xfd_validate_state+0x129/0x190 [ 141.886958][T10251] ? __x64_sys_bpf+0xce/0x140 [ 141.886968][T10251] __x64_sys_bpf+0xce/0x140 [ 141.886979][T10251] ? do_syscall_64+0x90/0x870 [ 141.886995][T10251] do_syscall_64+0x115/0x870 [ 141.887007][T10251] ? clear_bhb_loop+0x70/0xc0 [ 141.887021][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.887032][T10251] RIP: 0033:0x7f4decf9e0d9 [ 141.887048][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.887058][T10251] RSP: 002b:00007f4deddec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.887069][T10251] RAX: ffffffffffffffda RBX: 00007f4ded225fa0 RCX: 00007f4decf9e0d9 [ 141.887076][T10251] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 141.887082][T10251] RBP: 00007f4ded035024 R08: 0000000000000000 R09: 0000000000000000 [ 141.887088][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.887094][T10251] R13: 00007f4ded226038 R14: 00007f4ded225fa0 R15: 00007ffd0cfc4518 [ 141.887108][T10251] [ 141.887112][T10251] Mem-Info: [ 141.917943][T10255] Unable to extract alua_access_type [ 141.919384][T10251] active_anon:26180 inactive_anon:0 isolated_anon:0 [ 141.919384][T10251] active_file:0 inactive_file:68212 isolated_file:0 [ 141.919384][T10251] unevictable:1768 dirty:525 writeback:0 [ 141.919384][T10251] slab_reclaimable:12395 slab_unreclaimable:72758 [ 141.919384][T10251] mapped:25366 shmem:18785 pagetables:1665 [ 141.919384][T10251] sec_pagetables:298 bounce:0 [ 141.919384][T10251] kernel_misc_reclaimable:0 [ 141.919384][T10251] free:422148 free_pcp:9706 free_cma:0 [ 141.958759][T10258] Dropped outbound packet type=18 [ 141.959836][T10251] Node 0 active_anon:104876kB inactive_anon:0kB active_file:0kB inactive_file:273636kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:101464kB dirty:2088kB writeback:0kB shmem:73604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:6524kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.039097][T10251] Node 1 active_anon:216kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.059978][T10251] Node 0 DMA free:11192kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1344kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:360kB free_cma:0kB [ 142.072319][T10251] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 142.074747][T10251] Node 0 DMA32 free:34040kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103180kB inactive_anon:0kB active_file:0kB inactive_file:272332kB unevictable:5536kB writepending:2088kB zspages:0kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:29668kB local_pcp:6148kB free_cma:0kB [ 142.090553][T10251] lowmem_reserve[]: 0 0 0 0 0 [ 142.092663][T10251] Node 1 Normal free:1641700kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:9680kB local_pcp:0kB free_cma:0kB [ 142.107486][T10251] lowmem_reserve[]: 0 0 0 0 0 [ 142.111254][T10251] Node 0 DMA: 34*4kB (UM) 7*8kB (U) 6*16kB (U) 15*32kB (M) 35*64kB (UM) 20*128kB (UM) 9*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (E) 0*4096kB = 10944kB [ 142.118808][T10251] Node 0 DMA32: 201*4kB (UME) 66*8kB (UM) 172*16kB (UME) 42*32kB (UM) 36*64kB (UM) 34*128kB (UME) 14*256kB (M) 10*512kB (M) 5*1024kB (ME) 2*2048kB (UM) 1*4096kB (U) = 34100kB [ 142.129906][T10251] Node 1 Normal: 73*4kB (UM) 46*8kB (UM) 35*16kB (UME) 63*32kB (UME) 44*64kB (UME) 35*128kB (UME) 18*256kB (UM) 17*512kB (UM) 10*1024kB (ME) 11*2048kB (UME) 387*4096kB (UM) = 1641764kB [ 142.139553][T10251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.147457][T10251] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 142.151177][T10272] jffs2: notice: (10272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 142.160582][T10251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.169982][T10251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.175795][T10251] 84123 total pagecache pages [ 142.179464][T10251] 0 pages in swap cache [ 142.181185][T10251] Free swap = 124988kB [ 142.196935][T10251] Total swap = 124996kB [ 142.206404][T10251] 1048443 pages RAM [ 142.208624][T10251] 0 pages HighMem/MovableOnly [ 142.210534][T10251] 285332 pages reserved [ 142.212295][T10251] 0 pages cma reserved [ 142.299751][T10286] net_ratelimit: 68 callbacks suppressed [ 142.299771][T10286] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.340121][T10290] Unable to extract alua_access_type [ 142.401851][T10296] binder: 10294:10296 ioctl c0306201 200000000140 returned -11 [ 142.457659][T10301] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 142.584796][T10305] md/raid:md0: not clean -- starting background reconstruction [ 142.588515][T10305] md/raid:md0: invalid chunk size 0 [ 142.590879][T10305] md: pers->run() failed ... [ 142.608097][T10318] jffs2: notice: (10318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 142.707819][T10325] Unable to extract alua_access_type [ 142.956623][T10351] loop5: detected capacity change from 0 to 2640 [ 142.970566][T10351] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 142.973447][T10351] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 142.976301][T10351] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 142.982322][T10351] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 142.985322][T10351] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 142.989286][T10351] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 142.992150][T10351] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 142.995070][T10351] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 142.999107][T10351] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 143.002184][T10351] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 143.093085][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 143.093143][ T42] audit: type=1800 audit(1786064813.387:1229): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1531" name="addr_trtype" dev="configfs" ino=32360 res=0 errno=0 [ 143.115768][ T42] audit: type=1400 audit(1786064813.387:1230): avc: denied { write } for pid=10357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.149014][T10360] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 143.165158][ T42] audit: type=1400 audit(1786064813.457:1231): avc: denied { write } for pid=10362 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.274002][ T42] audit: type=1400 audit(1786064813.567:1232): avc: denied { write } for pid=10365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.347874][ T42] audit: type=1400 audit(1786064813.647:1233): avc: denied { write } for pid=10372 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.365391][ T42] audit: type=1400 audit(1786064813.657:1234): avc: denied { ioctl } for pid=10370 comm="syz.1.1533" path="socket:[30649]" dev="sockfs" ino=30649 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.382992][T10376] jffs2: notice: (10376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 143.431518][ T42] audit: type=1400 audit(1786064813.727:1235): avc: denied { open } for pid=10370 comm="syz.1.1533" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 143.447843][ T42] audit: type=1400 audit(1786064813.727:1236): avc: denied { ioctl } for pid=10370 comm="syz.1.1533" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 143.462007][ T42] audit: type=1400 audit(1786064813.757:1237): avc: denied { write } for pid=10375 comm="syz.4.1534" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.607015][ T42] audit: type=1800 audit(1786064813.897:1238): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1535" name="alua_access_type" dev="configfs" ino=33170 res=0 errno=0 [ 143.607496][T10380] Unable to extract alua_access_type [ 143.728601][T10386] --map-set only usable from mangle table [ 143.749287][T10389] sctp: [Deprecated]: syz.5.1539 (pid 10389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.749287][T10389] Use struct sctp_sack_info instead [ 143.766010][T10392] jffs2: notice: (10392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 143.881344][ T5744] Bluetooth: hci1: command tx timeout [ 143.938342][T10402] Unable to extract alua_access_type [ 144.021544][T10411] ip_tables: iptables: counters copy to user failed while replacing table [ 144.036529][T10411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 144.038752][T10411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.043291][T10411] vhci_hcd vhci_hcd.0: Device attached [ 144.046670][T10413] vhci_hcd: unknown pdu 1 [ 144.054056][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 144.056374][ T5813] vhci_hcd vhci_hcd.0: release socket [ 144.058933][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 144.090866][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 144.095636][T10422] X25: received unknown 00 with LCI 000 [ 144.100196][T10421] erspan0: entered promiscuous mode [ 144.105747][T10421] macvlan2: entered allmulticast mode [ 144.107727][T10421] erspan0: entered allmulticast mode [ 144.138936][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.141501][T10420] batadv_slave_1: entered promiscuous mode [ 144.175431][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 144.186287][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 144.306934][T10437] jffs2: notice: (10437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 144.313384][T10440] Unable to extract alua_access_type [ 144.554219][T10460] jffs2: notice: (10460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 144.698727][T10472] Unable to extract alua_access_type [ 144.733950][T10478] FAULT_INJECTION: forcing a failure. [ 144.733950][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.745034][T10478] CPU: 1 UID: 0 PID: 10478 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT(full) [ 144.745051][T10478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.745058][T10478] Call Trace: [ 144.745062][T10478] [ 144.745067][T10478] dump_stack_lvl+0x100/0x190 [ 144.745146][T10478] should_fail_ex.cold+0x5/0xa [ 144.745183][T10478] strncpy_from_user+0x3b/0x2d0 [ 144.745219][T10478] bpf_prog_load+0x13d2/0x2fa0 [ 144.745249][T10478] ? __pfx_bpf_prog_load+0x10/0x10 [ 144.745259][T10478] ? avc_has_perm_noaudit+0x145/0x3b0 [ 144.745292][T10478] __sys_bpf+0x18dc/0x4e80 [ 144.745307][T10478] ? __pfx___sys_bpf+0x10/0x10 [ 144.745317][T10478] ? find_held_lock+0x2b/0x80 [ 144.745357][T10478] ? get_pid_task+0xfc/0x250 [ 144.745375][T10478] ? get_pid_task+0xfc/0x250 [ 144.745389][T10478] ? find_held_lock+0x2b/0x80 [ 144.745401][T10478] ? rcu_read_lock_any_held+0x6a/0xa0 [ 144.745418][T10478] ? find_held_lock+0x2b/0x80 [ 144.745427][T10478] ? ksys_write+0x190/0x250 [ 144.745449][T10478] ? ksys_write+0x190/0x250 [ 144.745468][T10478] ? fput+0x79/0x100 [ 144.745484][T10478] ? __x64_sys_bpf+0xce/0x140 [ 144.745496][T10478] __x64_sys_bpf+0xce/0x140 [ 144.745507][T10478] ? do_syscall_64+0x90/0x870 [ 144.745555][T10478] do_syscall_64+0x115/0x870 [ 144.745568][T10478] ? clear_bhb_loop+0x70/0xc0 [ 144.745583][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.745594][T10478] RIP: 0033:0x7f3850f9e0d9 [ 144.745604][T10478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.745615][T10478] RSP: 002b:00007f3851eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.745628][T10478] RAX: ffffffffffffffda RBX: 00007f3851225fa0 RCX: 00007f3850f9e0d9 [ 144.745635][T10478] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 144.745642][T10478] RBP: 00007f3851eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.745648][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.745654][T10478] R13: 00007f3851226038 R14: 00007f3851225fa0 R15: 00007ffc38af5448 [ 144.745668][T10478] [ 144.890029][T10486] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.895028][T10486] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.896573][T10491] jffs2: notice: (10491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 145.096536][T10505] jffs2: notice: (10505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 145.131820][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.204680][T10511] FAULT_INJECTION: forcing a failure. [ 145.204680][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.209147][T10511] CPU: 2 UID: 0 PID: 10511 Comm: syz.5.1576 Not tainted syzkaller #0 PREEMPT(full) [ 145.209171][T10511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.209181][T10511] Call Trace: [ 145.209187][T10511] [ 145.209194][T10511] dump_stack_lvl+0x100/0x190 [ 145.209222][T10511] should_fail_ex.cold+0x5/0xa [ 145.209245][T10511] _copy_from_iter+0x1f4/0x1690 [ 145.209273][T10511] ? _copy_from_iter+0x270/0x1690 [ 145.209296][T10511] ? __pfx__copy_from_iter+0x10/0x10 [ 145.209323][T10511] ? __pfx__copy_from_iter+0x10/0x10 [ 145.209363][T10511] ? _copy_from_iter+0x270/0x1690 [ 145.209397][T10511] copy_page_from_iter+0x238/0x300 [ 145.209424][T10511] skb_copy_datagram_from_iter+0x399/0x720 [ 145.209486][T10511] tun_get_user+0x1889/0x3c20 [ 145.209526][T10511] ? __pfx_tun_get_user+0x10/0x10 [ 145.209539][T10511] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 145.209560][T10511] ? find_held_lock+0x2b/0x80 [ 145.209570][T10511] ? tun_get+0x191/0x370 [ 145.209580][T10511] ? tun_get+0x191/0x370 [ 145.209593][T10511] tun_chr_write_iter+0xdc/0x200 [ 145.209606][T10511] vfs_write+0x6ac/0x1050 [ 145.209623][T10511] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 145.209636][T10511] ? __pfx_vfs_write+0x10/0x10 [ 145.209651][T10511] ? find_held_lock+0x2b/0x80 [ 145.209669][T10511] ksys_write+0x12a/0x250 [ 145.209678][T10511] ? __pfx_ksys_write+0x10/0x10 [ 145.209691][T10511] do_syscall_64+0x115/0x870 [ 145.209706][T10511] ? clear_bhb_loop+0x70/0xc0 [ 145.209720][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.209731][T10511] RIP: 0033:0x7f2f71b9e0d9 [ 145.209742][T10511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.209752][T10511] RSP: 002b:00007f2f72a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.209765][T10511] RAX: ffffffffffffffda RBX: 00007f2f71e25fa0 RCX: 00007f2f71b9e0d9 [ 145.209772][T10511] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 145.209778][T10511] RBP: 00007f2f72a90090 R08: 0000000000000000 R09: 0000000000000000 [ 145.209784][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.209790][T10511] R13: 00007f2f71e26038 R14: 00007f2f71e25fa0 R15: 00007ffda3974418 [ 145.209803][T10511] [ 145.445534][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 145.450328][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1579'. [ 145.461138][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 145.613031][T10525] binder: 10524:10525 ioctl c0306201 200000000140 returned -11 [ 145.878082][T10531] jffs2: notice: (10531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 145.967429][ T5744] Bluetooth: hci1: command tx timeout [ 146.004351][T10545] jffs2: notice: (10545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 146.055240][T10548] binder: 10547:10548 ioctl c0306201 200000000140 returned -11 [ 146.144670][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 146.166128][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 146.193866][T10557] [ 146.194633][T10557] ====================================================== [ 146.196641][T10557] WARNING: possible circular locking dependency detected [ 146.198676][T10557] syzkaller #0 Not tainted [ 146.200092][T10557] ------------------------------------------------------ [ 146.202083][T10557] syz.5.1593/10557 is trying to acquire lock: [ 146.203854][T10557] ffffffff901d15a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 146.206616][T10557] [ 146.206616][T10557] but task is already holding lock: [ 146.208697][T10557] ffff88803a2d1dc0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 146.211445][T10557] [ 146.211445][T10557] which lock already depends on the new lock. [ 146.211445][T10557] [ 146.214359][T10557] [ 146.214359][T10557] the existing dependency chain (in reverse order) is: [ 146.216944][T10557] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.216944][T10557] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 146.220001][T10557] lock_acquire+0x1b9/0x370 [ 146.221673][T10557] down_write+0x8b/0x1f0 [ 146.223229][T10557] configfs_depend_item_unlocked+0xf3/0x6a0 [ 146.225310][T10557] usbg_make_tpg+0x261/0x620 [ 146.226996][T10557] target_fabric_make_tpg+0xab/0x8c0 [ 146.228951][T10557] configfs_mkdir+0x51e/0xb70 [ 146.230646][T10557] vfs_mkdir+0x361/0x850 [ 146.232202][T10557] filename_mkdirat+0x48b/0x5e0 [ 146.233974][T10557] __x64_sys_mkdir+0x6b/0x90 [ 146.235637][T10557] do_syscall_64+0x115/0x870 [ 146.237318][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.239472][T10557] [ 146.239472][T10557] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 146.241890][T10557] lock_acquire+0x1b9/0x370 [ 146.243564][T10557] __mutex_lock+0x1a4/0x1bd0 [ 146.245207][T10557] tcm_set_name+0x29/0xb0 [ 146.246789][T10557] function_make+0x21c/0x3f0 [ 146.248607][T10557] configfs_mkdir+0x51e/0xb70 [ 146.250343][T10557] vfs_mkdir+0x361/0x850 [ 146.251892][T10557] filename_mkdirat+0x48b/0x5e0 [ 146.253667][T10557] __x64_sys_mkdir+0x6b/0x90 [ 146.255318][T10557] do_syscall_64+0x115/0x870 [ 146.256991][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.259036][T10557] [ 146.259036][T10557] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 146.261583][T10557] check_prev_add+0xeb/0xe60 [ 146.263265][T10557] __lock_acquire+0x136c/0x1a40 [ 146.265186][T10557] lock_acquire+0x1b9/0x370 [ 146.267234][T10557] __mutex_lock+0x1a4/0x1bd0 [ 146.269281][T10557] configfs_rmdir+0x5ae/0x950 [ 146.271449][T10557] vfs_rmdir+0x328/0x8a0 [ 146.273386][T10557] filename_rmdir+0x31a/0x5c0 [ 146.275520][T10557] __x64_sys_rmdir+0x46/0x70 [ 146.277637][T10557] do_syscall_64+0x115/0x870 [ 146.279785][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.282363][T10557] [ 146.282363][T10557] other info that might help us debug this: [ 146.282363][T10557] [ 146.286346][T10557] Chain exists of: [ 146.286346][T10557] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 146.286346][T10557] [ 146.290864][T10557] Possible unsafe locking scenario: [ 146.290864][T10557] [ 146.293190][T10557] CPU0 CPU1 [ 146.294854][T10557] ---- ---- [ 146.296564][T10557] lock(&sb->s_type->i_mutex_key#26); [ 146.298582][T10557] lock(&opts->dep_lock); [ 146.301358][T10557] lock(&sb->s_type->i_mutex_key#26); [ 146.304455][T10557] lock(gadget_subsys.su_mutex); [ 146.306046][T10557] [ 146.306046][T10557] *** DEADLOCK *** [ 146.306046][T10557] [ 146.308616][T10557] 3 locks held by syz.5.1593/10557: [ 146.310245][T10557] #0: ffff888023758450 (sb_writers#13){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 146.313176][T10557] #1: ffff888056277800 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 146.316680][T10557] #2: ffff88803a2d1dc0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 146.320502][T10557] [ 146.320502][T10557] stack backtrace: [ 146.322411][T10557] CPU: 2 UID: 0 PID: 10557 Comm: syz.5.1593 Not tainted syzkaller #0 PREEMPT(full) [ 146.322436][T10557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.322443][T10557] Call Trace: [ 146.322448][T10557] [ 146.322453][T10557] dump_stack_lvl+0x100/0x190 [ 146.322472][T10557] print_circular_bug.cold+0x178/0x1c7 [ 146.322493][T10557] check_noncircular+0x146/0x160 [ 146.322509][T10557] check_prev_add+0xeb/0xe60 [ 146.322522][T10557] ? __bfs+0x150/0x2a0 [ 146.322533][T10557] __lock_acquire+0x136c/0x1a40 [ 146.322548][T10557] lock_acquire+0x1b9/0x370 [ 146.322560][T10557] ? configfs_rmdir+0x5ae/0x950 [ 146.322575][T10557] ? __pfx___might_resched+0x10/0x10 [ 146.322588][T10557] ? __lock_acquire+0x49f/0x1a40 [ 146.322601][T10557] __mutex_lock+0x1a4/0x1bd0 [ 146.322615][T10557] ? configfs_rmdir+0x5ae/0x950 [ 146.322628][T10557] ? configfs_rmdir+0x5ae/0x950 [ 146.322641][T10557] ? reacquire_held_locks+0xce/0x1e0 [ 146.322654][T10557] ? __pfx___mutex_lock+0x10/0x10 [ 146.322667][T10557] ? do_raw_spin_lock+0x128/0x260 [ 146.322682][T10557] ? find_held_lock+0x2b/0x80 [ 146.322691][T10557] ? fast_dput+0x2fe/0x6d0 [ 146.322706][T10557] ? _raw_spin_unlock+0x28/0x50 [ 146.322716][T10557] ? fast_dput+0x168/0x6d0 [ 146.322730][T10557] ? configfs_rmdir+0x5ae/0x950 [ 146.322743][T10557] configfs_rmdir+0x5ae/0x950 [ 146.322758][T10557] ? __pfx_configfs_rmdir+0x10/0x10 [ 146.322772][T10557] ? __pfx_down_write+0x10/0x10 [ 146.322787][T10557] vfs_rmdir+0x328/0x8a0 [ 146.322802][T10557] filename_rmdir+0x31a/0x5c0 [ 146.322814][T10557] ? __pfx_filename_rmdir+0x10/0x10 [ 146.322828][T10557] ? do_getname+0x191/0x390 [ 146.322842][T10557] __x64_sys_rmdir+0x46/0x70 [ 146.322854][T10557] do_syscall_64+0x115/0x870 [ 146.322868][T10557] ? clear_bhb_loop+0x70/0xc0 [ 146.322880][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.322891][T10557] RIP: 0033:0x7f2f71b9e0d9 [ 146.322901][T10557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.322912][T10557] RSP: 002b:00007f2f72a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 146.322923][T10557] RAX: ffffffffffffffda RBX: 00007f2f71e25fa0 RCX: 00007f2f71b9e0d9 [ 146.322930][T10557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 146.322938][T10557] RBP: 00007f2f71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 146.322946][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.322952][T10557] R13: 00007f2f71e26038 R14: 00007f2f71e25fa0 R15: 00007ffda3974418 [ 146.322964][T10557] [ 146.537265][T10552] team0: Port device syz_tun removed [ 146.642155][ T5813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.771464][ T5813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.904892][ T5813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.000670][ T5813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.095261][ T5813] bridge_slave_1: left allmulticast mode [ 147.097139][ T5813] bridge_slave_1: left promiscuous mode [ 147.099476][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.102938][ T5813] bridge_slave_0: left allmulticast mode [ 147.105340][ T5813] bridge_slave_0: left promiscuous mode [ 147.107719][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.170732][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.174575][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.178132][ T5813] bond0 (unregistering): Released all slaves [ 147.289953][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 147.423271][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 147.495763][ T5813] hsr_slave_0: left promiscuous mode [ 147.498257][ T5813] hsr_slave_1: left promiscuous mode [ 147.500448][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.502991][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.509350][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.511666][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.515714][ T5813] veth1_macvtap: left promiscuous mode [ 147.518899][ T5813] veth0_macvtap: left promiscuous mode [ 147.520662][ T5813] veth1_vlan: left promiscuous mode [ 147.522323][ T5813] veth0_vlan: left promiscuous mode [ 147.592485][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 147.604042][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 147.659087][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 147.755583][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 148.125167][ T5813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.128524][ T5813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.129124][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 148.129139][ T42] audit: type=1400 audit(1786064818.427:1274): avc: denied { write } for pid=10590 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.232450][ T5813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.236806][ T5813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.301876][ T5813] netdevsim netdevsim4 џџџџџџ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.306103][ T5813] netdevsim netdevsim4 џџџџџџ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.385277][ T5813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.443923][ T42] audit: type=1400 audit(1786064818.737:1275): avc: denied { write } for pid=10593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.463305][ T5813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.491230][ T42] audit: type=1400 audit(1786064818.787:1276): avc: denied { write } for pid=10596 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.521546][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 148.545557][ T5813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.577663][ T42] audit: type=1400 audit(1786064818.877:1277): avc: denied { write } for pid=10599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.618022][ T42] audit: type=1400 audit(1786064818.917:1278): avc: denied { write } for pid=10602 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.633745][ T5813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.642013][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 148.702036][ T42] audit: type=1400 audit(1786064818.997:1279): avc: denied { write } for pid=10605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.723593][ T5813] bridge_slave_1: left allmulticast mode [ 148.725401][ T5813] bridge_slave_1: left promiscuous mode [ 148.727247][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.729544][ T42] audit: type=1400 audit(1786064819.027:1280): avc: denied { write } for pid=10608 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.737422][ T5813] bridge_slave_0: left allmulticast mode [ 148.739302][ T5813] bridge_slave_0: left promiscuous mode [ 148.741126][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.747117][ T5813] bridge_slave_1: left allmulticast mode [ 148.749390][ T5813] bridge_slave_1: left promiscuous mode [ 148.751199][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.754458][ T5813] bridge_slave_0: left allmulticast mode [ 148.756278][ T5813] bridge_slave_0: left promiscuous mode [ 148.758534][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.794602][ T5813] erspan0 (unregistering): left allmulticast mode [ 148.807197][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.815234][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.818842][ T5813] bond0 (unregistering): Released all slaves [ 148.838149][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.841859][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.845349][ T5813] bond0 (unregistering): Released all slaves [ 148.849170][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 148.892862][ T42] audit: type=1400 audit(1786064819.187:1281): avc: denied { write } for pid=10611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.926396][ T42] audit: type=1400 audit(1786064819.217:1282): avc: denied { write } for pid=10614 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.959679][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 149.028723][ T42] audit: type=1400 audit(1786064819.327:1283): avc: denied { write } for pid=10619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.090904][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 149.190308][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 149.265152][ T5813] hsr_slave_0: left promiscuous mode [ 149.269565][ T5813] hsr_slave_1: left promiscuous mode [ 149.272217][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.275285][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.278848][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.284565][ T5813] hsr_slave_0: left promiscuous mode [ 149.287493][ T5813] hsr_slave_1: left promiscuous mode [ 149.289911][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.292271][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.294942][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.297277][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.303497][ T5813] veth1_macvtap: left promiscuous mode [ 149.305374][ T5813] veth0_macvtap: left promiscuous mode [ 149.307133][ T5813] veth1_vlan: left promiscuous mode [ 149.308904][ T5813] veth0_vlan: left promiscuous mode [ 149.311184][ T5813] veth1_macvtap: left promiscuous mode [ 149.312946][ T5813] veth0_macvtap: left promiscuous mode [ 149.314637][ T5813] veth1_vlan: left promiscuous mode [ 149.316234][ T5813] veth0_vlan: left promiscuous mode [ 149.384929][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 149.392623][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 149.446970][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 149.459620][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 149.489559][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 149.604648][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17