last executing test programs: 8m54.192816153s ago: executing program 32 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) rmdir(&(0x7f0000000200)='./file1\x00') 7m45.590204392s ago: executing program 33 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select \n', 0x10) write(r1, &(0x7f0000000100)='file read @etc/passwd /as/\\Aid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[@fragment={0x3a, 0x0, 0xf8, 0x0, 0x0, 0x1, 0x68}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7m35.232971336s ago: executing program 34 (id=1200): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000199000/0x3000)=nil, 0x3000, &(0x7f0000000000)='&)\'!\'\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000019e000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='environ\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m30.222116288s ago: executing program 35 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munlockall() r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x1, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x28064fe8, 0xa8, 0xfffffff7fffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0xb152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x7, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x20000000005, 0x20000000000000, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000, 0x9, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x1002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfffe}, {0xfff2, 0x8}, {0x1, 0x2}}}, 0x24}}, 0x2000c085) sendto(r3, 0x0, 0x0, 0x40010, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./proc/sys/net/ipv4/conf/default/forwarding\x00', &(0x7f0000000240), &(0x7f0000000280)="fcc1f844955b2396e51430b55fb6d5d6fb2cae6d430a4a1b45a310f027a10d5d994b327f7c503472dbebf53d36c1e66a2bcac938c12ed3c43c7581d2b83219ff88eb63c94ab0978645e6b9317848367794e8e2e501af79ceceaa30ff4de76c979f4018b6054705aaef206b80ffbb463994ccbc294e6884a579cd657491276acf351026b445d07bd9fd3b0bf6dec6973ec9bd9d9c4223a04d165a616db9b17f77343c0945d9429854b3bc7dc4222a901674cd5de17791014e7a4a77276c91ffa3131ac4db0b07f4b1ce1dfe18072b76de56fe1312bdd3666319e590f47686fb88928dd5d18ce687819ade8b1eed08710ef5b4d8375125f683ece266ab80a1", 0xfe, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x8, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000a40)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/default/forwarding\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./proc\x00', 0x100, &(0x7f0000000b80)={0x1000fb, 0x8, 0x20000}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) openat(r4, &(0x7f0000000400)='./proc\x00', 0x40, 0x110) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006000000fe871efaef07bff3d44c2995e398b6"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 6m17.219805744s ago: executing program 7 (id=1934): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'L-', 0x200}, 0x16, 0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x80000000) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="c4c1fa6f80a2000000b9e20200000f320f236fc7442400e5f20000c74424021be20000c7442406000000000f011424c4e15dd1f00f01f22e660f388248000f20c035010000000f22c066b8ba008ee0d9f3", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m16.56509549s ago: executing program 7 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46040d0702040000000000000003003e00f6ffff"], 0x440) close(r0) execve(0x0, 0x0, 0x0) 6m16.412641729s ago: executing program 7 (id=1945): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xffdffff9, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x11) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1800}], 0x1, 0x0, 0x100000}}], 0x1, 0x121, 0x0) 6m16.304982629s ago: executing program 7 (id=1946): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x1, 0x80) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x76, &(0x7f0000000580)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x1, 0x3a, 0x68, 0x68, 0x0, 0x7, 0x6f825672d74d1302, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@generic={0x7, 0xf, "6a6d9de2efef2c383c71f515f1"}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0x7, [{@local, 0x7}]}]}}, "5b96879516e4f4eca2b5f011fd3e1fd9c21cab5a16dc3e0f071e3873392f166bf09e957b79fe7dc6965894035dcc1eb668b7cd0884aee40b"}}}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') write(r0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@wr_drn={0x68, 0x20, {0x2, 0x6}}], 0x20}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f0000000400)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000300)={0x1, 0x12c, @pic={0x80, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000040)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000440)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000340)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r8}, &(0x7f0000000480)=0x20) 6m16.133575169s ago: executing program 7 (id=1955): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5001", @ANYRES16=r2], 0x14) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m15.76365392s ago: executing program 7 (id=1951): syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 6m15.619247319s ago: executing program 36 (id=1951): syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 5m49.894615902s ago: executing program 0 (id=2241): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b9563b1000000000000000f8dcffffff"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 5m49.894397798s ago: executing program 0 (id=2242): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r8, 0x800003, 0x12, r6, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) 5m49.467663243s ago: executing program 0 (id=2250): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f00000002c0)='btrfs\x00', 0x10b8f2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./config\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000140)={[{@userxattr}, {@metacopy_on}], [{@subj_user={'subj_user', 0x3d, '\x06^('}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000000000004c0000004c0000001c0000000000000000000001040000002000000005000000010000040400000001000000010000000000000018000000020000040800000013000000020000faff0000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000795a0204b86d9521d9eefe0125685414fd1ea14c14d3f26ee5d64a191fd58416915f029549735cfba02d1fd0758da1f66104835b95e5b6fcfab95aabb3afbf24fc8dadbedb4db300b9915d49d1bf9b82faaa", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/bsg/0:0:0:0\x00', 0x1000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, 0x0, 0x4048043) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e23, @local}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4018807) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x3, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x21}, 0x9c) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 5m49.364894358s ago: executing program 0 (id=2251): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x4, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10280, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x8, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140089056cbd7000fddbdf25021f00cb", @ANYRES32, @ANYBLOB="08000400e0000002080001007f00000108000200ac"], 0x48}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5m49.133448419s ago: executing program 0 (id=2259): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m48.975009875s ago: executing program 0 (id=2261): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r8, 0x800003, 0x12, r6, 0x0) 5m44.323077125s ago: executing program 8 (id=2305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xb0, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x2b, 0xf2, "21a023c1a0c3f9eaa85f04b7b5289160279c02abf83facb0dccbb19c31d52c1ebf68d2b966c6c5"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x2, 0x0, {0x7f, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x6, 0x1}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0xb0}}, 0x4) 5m44.265115194s ago: executing program 8 (id=2306): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3}, 0x18, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ffff02"], 0xe) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48041}, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) landlock_restrict_self(r0, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES64=r0], 0x48) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400007fa9dfd299"], 0x14}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x40000, 0x0) fcntl$dupfd(r7, 0x0, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x4e}]}}]}, 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r10, 0x25, 0xb, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m43.705160546s ago: executing program 8 (id=2310): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x4, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10280, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x8, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5m43.488931574s ago: executing program 8 (id=2317): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x24020400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, r3}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x231c7000, 0x1, 0x401, 0x6, 0x0, [{0xe, 0x5, 0x3, '\x00', 0x2}, {0xf3, 0x2, 0x6, '\x00', 0x38}, {0x9b, 0x3, 0xcc, '\x00', 0x4f}, {0x0, 0x2, 0x10, '\x00', 0x9}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x1, 0x80, 0xfd, '\x00', 0x7}, {0x7, 0xf8, 0x6, '\x00', 0xff}, {0x0, 0x1, 0xd0, '\x00', 0x1}, {0x6, 0xa, 0xa, '\x00', 0x4}, {0x7, 0x4, 0x6, '\x00', 0x9e}, {0x3, 0x8, 0xf, '\x00', 0x8}, {0x80, 0xd, 0x1, '\x00', 0x6}, {0x7, 0x1, 0x7, '\x00', 0x5}, {0xff, 0x89, 0xfa, '\x00', 0x9d}, {0x1, 0x8, 0x9, '\x00', 0x2}, {0x2, 0xb}, {0x6, 0xd, 0xe, '\x00', 0x6a}, {0x4, 0x2, 0xa, '\x00', 0x6}, {0x38, 0x9, 0x1, '\x00', 0x9}, {0x7a, 0x80, 0x8, '\x00', 0x3}, {0x7f, 0x9c, 0xf7}, {0x2, 0xb, 0x21, '\x00', 0x2}, {0x7f, 0x10, 0x6, '\x00', 0x8}, {0x7, 0x9, 0x1, '\x00', 0x5}]}}) syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x3723, 0x1000, 0x0, 0x1a3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 5m43.395122393s ago: executing program 8 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x24008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20240, 0x0) 5m43.163298003s ago: executing program 8 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xff9e, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 5m43.067500109s ago: executing program 37 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xff9e, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 5m33.478172604s ago: executing program 38 (id=2261): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r8, 0x800003, 0x12, r6, 0x0) 5m7.669553478s ago: executing program 9 (id=2551): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000200100000c000280070002006c6f0000180003800400010008000200050000000800040004000000"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x40, 0x9, 0x8, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0xdc, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x1e, 0x3, [{0x7, 0x8, "27e8bfe0330c"}, {0x2, 0x10, "f41c54c1cc8e73c3a5d9e9fea159"}]}]}}}}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x6, 0x5, 0x16, 0x4, 0x9, 0xffff, 0xb}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x100, 0x7, 0x10000, 0x7, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xa010101, {[@noop, @ssrr={0x89, 0x23, 0x75, [@empty, @private=0xa010100, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ssrr={0x89, 0x23, 0xdb, [@loopback, @local, @rand_addr=0x64010100, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x66, 0x3, 0x0, [{@multicast2, 0x4}, {@rand_addr=0x64010101, 0x9d}, {@private=0xa010101, 0x5a}, {@remote, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x1ff}, {@broadcast, 0x9}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x2, 0x8, 0xb, @loopback, @loopback, 0x700, 0x700, 0x5f5d, 0xc3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x80, 0x7, 0x27, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x20, 0x3, 0x2}}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r12, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000000540)={0x128c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4255ef99}, @ETHTOOL_A_EEE_MODES_OURS={0x1174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "11851ea1c368ce0cbe00ce90b473e0f0eb40fd370b1863def0b89af28222aadba478d96f00bdb343e1f1b3b7ff"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "bb60d39341af5516e693ee1d6cf563493f5aeadc83bbcf223b4e793ef7721b5e30bd9beda7c151bc1737d493421286b4c7b3da30565eb56635160df03813a897a85e29ee66953b058dd715ee0c83e65c6286132cc765af9a87b7fdaac88b57d838c92ccf65f9a28a6716ae7b7cd1e321d2d2a3230561b20a36bb896d28c802ac48bde7c1f7cac6f5198cad52f9be17fdef068b92411b01c7459be35c435ac8dce12f0da8c535c0521634422ac577a37c6bd71b46e5986edb"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "cd15baafd11932710a5b77c51b35bbcd3b8063e8847e8c1b9454a7dee06a14872335190c6486003292d8a673cfe568c57b54b1bac29a3ef2d24d5ceb4557484393a31eae6e9b8826d974191fd4d848499cba45326c14dda252697d2d014cf10b30e263394587dddc47f17c19c5a0f728a52aaf"}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xca4}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40010) 5m7.513034254s ago: executing program 9 (id=2555): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async, rerun: 64) getpeername$packet(r0, 0x0, &(0x7f0000000840)) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x2, 0x10, 0xfffffffffffffff9, 0x7}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x3}, 0x8) (async) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) 5m7.414243526s ago: executing program 9 (id=2556): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x4c02, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/3:0:0:0\x00', 0x80000, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x1, 0x0) write$FUSE_STATX(r5, &(0x7f0000004540)={0x130, 0x0, 0x0, {0x1, 0x0, 0x0, '\x00', {0x0, 0x3ff, 0x9, 0x6, 0x0, 0x0, 0x1000, '\x00', 0x3, 0xaa92, 0x6, 0x8000, {0x4, 0x37d2}, {0x4700, 0x5}, {0x5cf0b9e9, 0x2}, {0xfffffffffffffff5, 0xffffffff}, 0x1, 0xfffffeff, 0x7f, 0x80000001}}}, 0x130) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000800)={0x30000000}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 5m6.814934671s ago: executing program 9 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/packet\x00') lseek(r0, 0x7ffffffffffffffc, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_user(r2, 0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46040d0702040000000000000003003e00f6ffff"], 0x440) close(r1) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0x3ff8) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m6.509300704s ago: executing program 9 (id=2565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000000)={'adq12b\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0xf, 0x2000006, 0x77fd]}) ioctl$COMEDI_CANCEL(r2, 0x6407) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140e, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x28000}, 0x4040010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x4000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x20000000) 5m6.184857678s ago: executing program 9 (id=2567): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x175a978679fbbe1d, 0x18a) futimesat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x0, 0x2710}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10845}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 5m6.086504033s ago: executing program 39 (id=2567): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x175a978679fbbe1d, 0x18a) futimesat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x0, 0x2710}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10845}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3m4.80469529s ago: executing program 3 (id=3403): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0xfe) 3m4.76275347s ago: executing program 3 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 3m3.509805575s ago: executing program 3 (id=3416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x800, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa250000000000004305400f008000650000028650ffffffff000cab444cfa17fe110577ad00124c985e594ee96c2b09f6e55ec84c916e05052450"], 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close(0xffffffffffffffff) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m2.205572338s ago: executing program 3 (id=3423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x1000000) 3m2.011526961s ago: executing program 3 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 3m1.761650605s ago: executing program 3 (id=3428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 3m1.669243064s ago: executing program 40 (id=3428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 1m46.832133382s ago: executing program 1 (id=3936): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 1m46.799677994s ago: executing program 1 (id=3937): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, &(0x7f00000004c0)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="042ff904aaaaaaaaaa1141d90d5c2503000818"], 0x3fc) 1m46.123755298s ago: executing program 1 (id=3949): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000001880)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}) fstat(r4, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './dev_mnt', [{0x20, '['}, {0x20, '\':'}], 0xa, "74e7f79aea5a0d9e3b3d80e3c9fb1b6e1ed1cd2487d7241e0fee171ae100be0c5f0a66b5d1d42f43c020d3975f8cb7e39fef1d290c5093e1e2b188439b5d23bac1b3b303abe689a2bf0ae1eca8e96f4d0cf7fa7ada8f980694e2a7b2f3b3e28e15b06e0b254216d6f20c6dcb7c61e07bcdf59279344e25dc4fc93ecfe2dcd3629719eb27e66802c19bf28d660e93ec6397999e0a6321423167d0376fcfc069c21532dc439c07fdaf198ad7816be8e4367b358fab34ebe32c840de9ffd96d9d24feadeedb5226cb12d46600cdb3b1cb72cd23ea31da810489e39d2f81f43d0eb2e5f2b52526cb0e34dfb778204dcba11ee3"}, 0x103) 1m43.543955909s ago: executing program 1 (id=3983): socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7}) 1m43.401309225s ago: executing program 1 (id=3987): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) ptrace$pokeuser(0x6, r0, 0x388, 0x20000) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x192) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x78) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2040) 1m43.222685919s ago: executing program 1 (id=3991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)='\v\x00\x00\x00\x00\x00\x00\x00Ul6\x00\x003', 0x0, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'rm\x00'}, 0x9) 1m28.161411533s ago: executing program 41 (id=3991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)='\v\x00\x00\x00\x00\x00\x00\x00Ul6\x00\x003', 0x0, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'rm\x00'}, 0x9) 3.929897587s ago: executing program 2 (id=5138): lremovexattr(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='syst']) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') process_madvise(r4, 0x0, 0x0, 0x66, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r5 = fanotify_init(0xf00, 0x0) r6 = fanotify_init(0x10, 0x101000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x455, 0x8000008, r7, 0x0) fanotify_mark(r5, 0x7e, 0x800103a, r7, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4020, 0x3234564e, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x0, 0x1}, {0xa8}, {0x3, 0x2000}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r9, 0x8c630000) 3.45896997s ago: executing program 2 (id=5145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x672c4000) r0 = inotify_init() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000040)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000092000/0x1000)=nil, &(0x7f000057b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000181000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r3}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r3}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2.380708259s ago: executing program 2 (id=5150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000900), 0x100) 1.768816145s ago: executing program 6 (id=5155): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x40702, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xf, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x2, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xc008af12, &(0x7f0000000040)) 1.582580373s ago: executing program 6 (id=5157): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 1.506786647s ago: executing program 6 (id=5159): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e3) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 1.380968091s ago: executing program 5 (id=5160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x24008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) umount2(&(0x7f0000000100)='./cgroup\x00', 0xb) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20240, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1], 0x48}}, 0x0) r6 = dup3(0xffffffffffffffff, r0, 0x80000) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x440302) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f00000000c0)={{r6}, {@void, @max}}) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x4040801) 1.380842895s ago: executing program 2 (id=5161): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x800000000004a, 0xb}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)="ffffffff0000000089") socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.377101671s ago: executing program 6 (id=5162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0100001a0007002abd700000000000000000000000000000000000000000000a010100000000000000000000000000ffff00004e2280000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fcffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb050021000200000008000c00fdffffff08001f0001"], 0x11c}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) 1.311565292s ago: executing program 5 (id=5163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 1.305570353s ago: executing program 5 (id=5164): lremovexattr(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='syst']) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') process_madvise(r4, 0x0, 0x0, 0x66, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r5 = fanotify_init(0xf00, 0x0) r6 = fanotify_init(0x10, 0x101000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x455, 0x8000008, r7, 0x0) fanotify_mark(r5, 0x7e, 0x800103a, r7, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4020, 0x3234564e, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x0, 0x1}, {0xa8}, {0x3, 0x2000}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r9, 0x8c630000) 1.210585387s ago: executing program 6 (id=5165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 1.205752463s ago: executing program 6 (id=5166): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000086dd60e2fa0800380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000b4965000000f00100000000000004017f05020000c2040000000800000000004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9031bbad5e55a96602aef5d265e25baaff7323b136f4d12035f25f6281d22c7980e50a3f8a514aecb2e25c5af7398559538b359e21480b00c96249e742be44601e4be4e43a20cded90304e2865bfb79ccdf2a2d1b0936724cac59fca7d755057a6e794575e"], 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="110000000400"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x10ba00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x800000, 0x20, 0xffffffff, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x48, 0x1002, 0x7, 0x10004, 0x8000020, 0x7fffc, 0x0, 0x20000}}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x2284, &(0x7f00000000c0)={0x101, 0x1}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff88806a40e000) ptrace$getregs(0xc, r3, 0x8, &(0x7f0000000280)=""/179) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.157069132s ago: executing program 2 (id=5167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000e10000000000ffff00000000080008000903"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r9 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@remote, 0x4d2, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000546}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0x2, 0x4, 0x0, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@rand_addr=0x64010101}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "2155aa7e0025b4c968f819dfea1a0466d3006bfb"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfffffd9d) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2, 0x13, r10, 0x82000000) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x400001, 0x0) read$char_usb(r14, &(0x7f0000019040)=""/10, 0xa) ppoll(&(0x7f0000000000)=[{r6, 0x15a}, {r0, 0x482}], 0x2, &(0x7f0000000080)={r12, r13+60000000}, &(0x7f00000000c0)={[0x1]}, 0x8) r15 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x5, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_REGS(r15, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffed, 0x100000000, 0x0, 0xffffffffffffffff, 0x2000100001, 0x1, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x5, 0x0, 0x0, 0xffffffffffffffff], 0xffff1000, 0x200}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r15, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x8, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0xeb32]}}) 921.732963ms ago: executing program 5 (id=5170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000900), 0x100) 921.459595ms ago: executing program 4 (id=5171): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e3) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 786.385142ms ago: executing program 4 (id=5172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2b, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sync_file_range(r3, 0x100, 0x4, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xc, 0x0, 0x10000, @value=r0}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4000, 0x7fff, 0x203, 0x7, 0x1ff, 0x1, 0x5, 0xfff}, 0x20) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0xc040, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) 567.040488ms ago: executing program 5 (id=5173): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x5, 0x7, 0x14, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7, 0x3c, 0x5}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@empty, 0x4e23, 0x9e, 0x4e24, 0x0, 0x2, 0x20, 0xc0, 0x11, r1, 0xee00}, {0x12a, 0xb60d, 0xb, 0x101, 0xb, 0x5, 0xd0, 0x2}, {0x1, 0x3, 0x7651d814, 0x7f}, 0x7fff, 0x6e6bb4, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010102, 0x3501, 0x2, 0x1, 0xf9, 0x0, 0x4, 0x8}}, 0xe8) syz_emit_ethernet(0x40, &(0x7f0000000200)={@multicast, @random="dc898ba9c4f6", @void, {@llc={0x4, {@snap={0xaa, 0x0, "f7", "cd11cc", 0x10, "bba7e9932dcc5d6aad10bb65bb26e989f0071e8e5df1534fb9ba2b088cb2a3c770b63d1cdc22ffae34cf"}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x5, 0x400002) (async, rerun: 64) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0x0}) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x2, 0x0, 0x7, 0x200, '\x00', 0x3}, 0x3, 0x400, 0x6, r5, 0x3, 0x14a, 'syz0\x00', &(0x7f00000003c0)=['@\x00', '\x00', '\\\x00'], 0x5}) (async) ioctl$sock_ifreq(r3, 0x89b0, &(0x7f0000000540)={'veth0_virt_wifi\x00', @ifru_ivalue=0xe}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r7, 0x608, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x48}}, 0x90) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r7, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x14}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "fd24ffb3d9df3c08"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7ce5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x30, 0x18, 0x30, 0xc, 0xb]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x10}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r8 = accept4(r2, &(0x7f0000000880), &(0x7f0000000900)=0x80, 0x1800) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000940)={0x2, {{0xa, 0x4e20, 0x2b04, @mcast2, 0x8}}}, 0x88) (async) write(r4, &(0x7f0000000a00)="8712e26dd466dce3d7ba16033f74e46b9dd570538459e98a6c490751094ba99b899c9976d4959d478c6fc77d08ebc5ad0339e2afc11636c104eb2ef1b6f22c24c113903d6ae82478568d231c33226088d7b622ad7fa76867919de8509ff172289595b7fdf51a33c5fce68dfe58667b959f411ced3032d3a492c6c0d6015c3ba74791baabf869718bdbf53242ff59a7f53066d2d6d673e4067bba7bfca640fd306a1ed3c1718a44948b63c3c3ac4dec4b2117947991588ba5783833c8ae78", 0xbe) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000b00)={&(0x7f0000000ac0)=[{0x0, 0x0, 0xd, 0x8001, 0x7, 0x7ff, 0x3a6b05ab, 0x100000000}], 0x1, 0x38, 0x0, 0x2}) (async, rerun: 32) ioctl$sock_proto_private(r9, 0x89e4, &(0x7f0000000b40)="bb6e967e0beda778cdc125a40c73bb04ff4fe47c46412a54c58324ed21b007b46306e49a1e83aa6d0fe9ad38125fc984e67d0568e10f372116c353639bae0d7c48e82179d0c3cce8125bc5f7947dceff80e9b51b3f91227d352836b1478487a61b5e783ca3d1db07fb") (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x406, r2) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1ff, 0x1}, &(0x7f0000000c00)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000c40)={r11, 0x7}, 0x8) (async) r12 = syz_io_uring_setup(0x6e54, &(0x7f0000000c80)={0x0, 0xfca4, 0x8000, 0x0, 0x3c1, 0x0, r10}, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f0000000dc0)={0x6, 0xffffffffffffffff, 0x2, {0x58, 0x8000000000000000}, 0x5}, 0x1) sendmsg$inet(r10, &(0x7f00000012c0)={&(0x7f0000000e00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000e40)="27105c0fb504f7e73224036e5134c5833f9b098c419f3f576d7c5ee1a0076f345b3e9832c5f633800e97bd42e4eb868b8b93167c67c09480b8998ed24f", 0x3d}, {&(0x7f0000000e80)="d619a670a542e7babeb244697d5c81cf4849e4e130", 0x15}, {&(0x7f0000000ec0)="e48f64af2725d22917c10429af2741caa4a14d6aeda0776dbb02131a2ec93562a95e196667f41a56433fa8b6fc92e6025d5c07dab516283a19cbc93f746c2fe4b2", 0x41}, {&(0x7f0000000f40)="86bdedb6aa968053998fa7ec35e8edf43b9a6d37ff3f1aa6695b062603d6c7dc7f626dcbeacef672eff5e26372103395ebf29c8cd5b7fd83030cee0b9968fffa87fabe1a7bae5324c0f49b5e2bcdce206d4b8fb98943e18c81122206a81b8ddff7179f997664e83fc6cecdbb7cc502ccfe84a3a9e11511320724e0e27f9c3efdabd582c8b33b81f5", 0x88}, {&(0x7f0000001000)="26c5c1e5194f36857b2102b666f4eb9a3ff3ca9bbc92c867cdccb6e7dbff8badb630bf4df1d9345006988087b65a527af91a87362be782c462df806bfba4840cc3eff10bad97489fa2ede4aa1685741fd54872a1ce53a3bbb7fede804843657a7ce7310535c5e030be281e47a41047891b3edc14b6584b7dc25ee4c5b063c922cd926f4512999c44714feb202f3ed7102c067d750494f234c3cb72057c492e1c14a078cc936240eeb07f8696c35c0bc54012e64ab51ee4ef7a25e358c52021ff631bc5b314a0abe9a9a266d658f0", 0xce}, {&(0x7f0000001100)="4cc661735d3f78f8febdc83617ed9afc27449cbee3a52fab1e5e0f4896c67d1a42c4c3a94773c5e0150c8d79a9db897f32011f2544602e4b19883d4304a5f69c0b04", 0x42}, {&(0x7f0000001180)}], 0x7, &(0x7f0000001240)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x15, 0x0, 0x4, [0x94b3, 0xe78]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x28}}], 0x68}, 0x4001) (async, rerun: 32) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000001300)) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000001580)={0x4bec3ffe, 0x2, 0x80000001, 0x1000, &(0x7f0000001500)=[{}, {}]}) 566.839463ms ago: executing program 4 (id=5174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 519.094437ms ago: executing program 4 (id=5175): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)="ffffffff0000000089") socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 387.297596ms ago: executing program 5 (id=5176): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 139.267023ms ago: executing program 4 (id=5177): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 82.093225ms ago: executing program 2 (id=5178): lremovexattr(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='syst']) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) read$eventfd(r4, 0x0, 0x0) r5 = syz_pidfd_open(r3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') process_madvise(r5, 0x0, 0x0, 0x66, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r6 = fanotify_init(0xf00, 0x0) r7 = fanotify_init(0x10, 0x101000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x455, 0x8000008, r8, 0x0) fanotify_mark(r6, 0x7e, 0x800103a, r8, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4020, 0x3234564e, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x0, 0x1}, {0xa8}, {0x3, 0x2000}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r10, 0x8c630000) 0s ago: executing program 4 (id=5179): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633", @ANYRES8=r3], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0x5, &(0x7f0000000000)={0x1, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f004, 0x3}) sendmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="6d17aa421262d4514f36542dd42f623518d197dd6424b3b35444f6a33b0a3c561c7a266602707194db9e6fd475a23ff7ae044a08940be7eb926f719cfecd18720c157c3ff23f43e8a43fd6f38a78cc64915151035f143040af2a4876c9cdf935a55bb83d1a9014a9f655ce363fb9b5a4ccc1995489c4a79882115d6ea431fa3e5e6ec0e46b865897691d30c923e306b83ffba9418a", 0x95}, {&(0x7f0000000440)="d47d9e891019714a92a9fa54838795cf1cb250348a74cd6a2c10cd464534bfc3d9d5427c84490339acca6fedb4d972a5988f32abfe112abff321cd76aa57eeea74565b48f41cab32b4ff388b25a92030bf8d2bb46f8d5d0fbdb881a9b984292e10cbff671efdc18212fcb481d13c3cb150428ad189fd1959a410f0bfff3294f76e8349d63af280ff34f5", 0x8a}], 0x2, &(0x7f00000006c0)=[{0x1010, 0x119, 0x8, "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"}, {0x18, 0x119, 0x2, "9882ce"}, {0xb8, 0x10a, 0x6, "7407c5d0adf0d99fd791c54a378cd00386d48c2f2fdb6208aecd813d5df0355e104100d03685a277027773b3a7ab1b571847b4de8db83a72971528fbe62a624c2a1b883b73f1ef36ec05521f523353bac0443e8be4cbd204294a9cef1db271bff6be34e0cef299a9f7a9e782c09629844ab391b12a8fcb9b66bc175afeb85852dbcdbc7629c9885fbee17dee3b99912833cbbc0aa0ec58f1bfce8459a1b7c151f8fa169f4f29"}, {0x78, 0x10d, 0x212, "01a8a7767bc6eac18ebfe3c8323d89dc5bdfe99d5831890afa225b308321b5b99bcf19553a3007c355fb13a4afe0eafafdcf60393e47374740d7441c10ef0e58fad205d442fea97f4a1847690d2476c3939c827606de97cab900e3293d66d75a01038f"}], 0x1158}}, {{&(0x7f0000001840)=@llc={0x1a, 0x3, 0x6, 0x7, 0xee, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000018c0)="c903e1020a77b90064c1e4108f8e531673c3de9d79d710a82bc94fc4037324bba3c3c889ee5b6494649800678c1dea8402f629ecec1369ee747b1581e96da13544541dc17785", 0x46}, {&(0x7f0000001940)="79cf175934af457bd9c3766cfd806bf872a681bce8e83207dfbe8e54245d51683402fcca0d4ccb136ddc05c0dbc919e785d54b8d3848e6c2778f8381653912201d6fcd2609d71445239d05a86d37941748b8957da10c8d66c8f047fcb2fb7fb3ce802b6c0944de91d3b8412f3f9ded7bbcdc47fbbbeb4706bf4bb7c3a0646616df6969c0734b8cd8309b8766b68497aab9e32699411f2cb1ff84eb9d593f6b61918391", 0xa3}, {&(0x7f0000001a00)="65b1947e297d39c1c603ff7cbd0549a381d2c233834eb21468e1292fc4ccec63960343a5cd090d0f3bcf11e475d93cd457f2f66953a43ea8bd9904682755c9bd5b4874c74f5e7a8a936fc7a1af350d5b47753755392dede49f7316f318f95d2149e15fac35092c64d286ddeb672c8230966fde26ed92f439f35de8a892860e073a655b9a7ed393b0411d3a382b4766fd6a7e842cd2c3f4bb970c", 0x9a}, {&(0x7f0000001ac0)="f475bb087cebfcd937121663a2ebb9d58a3d64d6cd9e7579d365e4605e9fa77677fb8f4827f7f02313b9bc9c6b0cc040faf063e6965324b13c46dfed17b62118eb830c2ec12523233426a20c0d8d5a305381020b70a162d81043126481471114b0a43b4288e182a6a156f40e84b7ccb39927a3957855435e14783691273c3dc4f44c897ac5eed32291a6ace66db56b2d6d4b367cdd6c50ca43cda0abbe4617c30ca4f6d43a1b33d02aff40ab4c2de0a08cd14850f548830d57d61d2444aaeb5d84384c86d6047e09a40ce0aa79", 0xcd}, {&(0x7f0000001bc0)="317ea3eb4dc362b6adc22cc8946aed7af57f99a3594e7ba0c5a39d64bdadacac06abcaabfd2de488da372714d91da2c54931eaff60a77019e62ce230132202183b96ab005d9aac735f7ce0b9dc7103120a3983e0af9015e27653d1ddd20420635f5f2d9628e5854448710a24d06e088a4e47bc76537258e48c055fc673ec01ae513469cea550a9a4886d38c3297d5b81392b96472e0da60b4647d729ac39dd8fb6bd31a10a79297f599cd6a7dd04e338bd", 0xb1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001d00)="9eb165b24d0484387fe0948f3a11a696c3f50dc3c5d61e2ca1b9d80fad79f4b780c8654b65a16cb0052cd1a7d3bf07d1296a6aa13dcfbe43ee2636f9e473710047189d2023c168f1a727b91e490987cdbbb874c2d4a83a929d9514a72ef3906cc4bcfefcd978dfc7b7cad78b9ac2a120de6d61", 0x73}, {&(0x7f0000001d80)="d40275c307131fc57d420364ca97db7accd7d2a4796037b5e19e07cacc5646063bfb765cdf8c", 0x26}, {&(0x7f0000001dc0)="b6a0c34e6697c8d92f953acff3bed67da8d7b0472ec57b97a772669a92f1c36459d7f8b2275f089950f04bb13afa80451cd9489d6c47a2baf5240d3de6b9a22ae0b79fd1daafe253e5bf9e0163e6a4867a712ba836c953b0548a45055899fa9d3d38153842b39e45dd2920c49c888ee2d3b97d9f7c696e1d70bb8b0f55b55e34dabc65011b50200772ada3c548b0105204fa922de69376b61d55406e59895666a8281e78ee580983576b91bcae4e28d286787eaac45d60855d3e30a27f0d1c2c1973679fe27840d6a7ded412f2137fbd", 0xd0}, {&(0x7f0000001ec0)="68bc42f13bec6cad9e12a7ce93cc1f1e18ad6549c761d3bd14fc5ca3d3d41820890f42c7d8500f1f2b4f64b6bf85aae77546cb0cb86d7a1a482c4fc2c17d78cd8be2d18443cfaf2ede29413a76434b751405dc71289d523d1298c0d54c3e90ff0d8c4501", 0x64}, {&(0x7f0000001f40)="db4a12e16a9a2b49bb78b18f4abbf68ccf0d9b806615895d9859ae4cb2f55d1f427eb1f3fb86fdce42087b3ae9b70fb4b8dc2e3e1f3ee5ae433a09b0bc289325e596180fe1736fd9194412696a1d6fa4255ab5a65f03bd47f5292b98aca1409e44ebf356561b994cd2bbd92070066dda86e278d3b3d6bf44fec656f33b41403572c7", 0x82}], 0x5, &(0x7f0000002080)=[{0x18, 0x103, 0x7, "3dd2c0dd"}, {0xa8, 0x1, 0x4, "6c7761b7e3bf6b08373d9d9fb0cd5eafa240183d5572d2ae9fbd368ac0557d248db5880ab7f970cda31aedb541acd0aab88077c93d7459ec837a3e1faa49ee059f56028fc1761fe02e853a77c9655bb14bfb9987b979ece25a55b0acac7d2bb0749d615950325d3d184fa35b97e80611d9a088fb3c82c8c309a1f61612bfb8ca4531536b5b6da6501cb54cabfff07725e28a98ef353d88"}, {0xa8, 0x113, 0x4, "29764f4acef1a37816de606b99124a0d19ded720919855fe4cb777868cb42460417ce20b1457d03fba5c19cfd80eeb9260de9fa7d198dcd18dc4f408842dd1c590b3e0df7c7370f00fd47d407af439196a61fa0e4fb4c2b856efd65a9966e65155904c27763bc58e6f55109c7c85c00a1a1b26ff93cfbd0c32cfca86434415ccf7818797dec93856c7dbae79185f017bf9"}, {0xf8, 0x114, 0x8, "de012289c5ad7d2b1581d5f6ddb568eaa2330b56969db7a9389961477fae7a73c95a12c7f212485b7656acd5301130702c6ad9afdf62e8c0b44aa0388749b3896b5cdecb7037c04c9b98ab3067cd9582d88ed075baf491b877187677feb4efd3c21a4d3f1f70e36689e70ba43de20815ebedb09bdf2d8ff529e902fc33804708302815d66f1aec108a7e8c7a6c5a9c52b6c71c8b0349b2a25d519acd1eda9fd0cc6f436ee4e17a488f0e1d9bb2569e520e87f0371dcc3f50f8121e312731926f33e8c4048355f67aeb02cdd53e82d5657e3b35282700a85e061a55eaeb5658048ba4"}], 0x260}}, {{&(0x7f0000002300)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002380)="056d54a042b16b0e6a98ebbeb48bfac88e4381a75a45c871f7d8ff447413770d43babaf63c0f340ed5eddd2e1a52079a7092bbf9d7b6f5ffaa6b0fe73ce505331fd83654a89a52136fc77a784affe6b1d93b84675fdab2fd29a48dbb0288d233b44be36ac73a4f0d11b88b5eec080c4c3eea81c0b68d1972f00459d254659b804046feb4bcd23db7bb4549bc8d8663add4f4c27480b68a32abb2c505d5765e1af0e0", 0xa2}, {&(0x7f0000002440)="6d586cf724dc9722a74851a63e416d8de2a1d89ad90c717d88b4419a6616000e58c9935effc113c834ffbea8993b4437ab167089ab732f74e909f5c09de865c5d1d986ff599e15f8dfee34574921bb87df4805d8b232bb791b4c0d10d27979db36875de073da82aecc19061cf9a66d0ba3ac7a5e1f5ba414a3625562f529d2fceb92efe8329d8db4c9241489c97ac410583534a2a4abe960ea1d8eddb5a888f059", 0xa1}, {&(0x7f0000002500)="73a465ae18937e4c7ed9b24defdf0b19910ace95e3966051e7918c5d10f4fa49ba2992b1e466d4563e1091e8f250d1e2089540c7d6ab405894811f7860c6b2d33884084cc82ef692073911fc1848946490755becfdb3ce8683d3245d406ad5d2e33a0eb95ee2baf8bb5117dced08f117288baa2ca580d7221bf936ff4659ba4e11d8c061504acf8fd98586e475e2b09f023da31cde20ec6f437868d32cd4007386def4777c1a310b960d0251d65b571279c6f9b24b95b651e24d6a6d2a3d99a0a6d10d5a49e7bb517fb75bf324c5967a7b25302101dba0f7531772ac5c9c", 0xde}, {&(0x7f0000002600)="478c3783d74b1a67797fc977d694bdbd71206319485f49b2f07b6c6e5f508a8d9002426576c23591002a2f6ebd3df770129c0174ba99eba01f1c63b8fe4aa4054fbe5a90ac25a3d28eecd22582ecd348ff9ea629f2aa8e10344da11c0025bfbf36b093cf701bd2138e58d66e5f701ee31fc1ed51fc4dcec85be1ab4e2bb75bdf09c05ad2af8c0a0beb33ff0f3e9379", 0x8f}, {&(0x7f00000026c0)="968b929606dc2618522cfb1aa9a28778b238f1bec2a4dcb0c418b94abfa8e32c26fcd08a168e8e4258212c9df5e8beca29808bf4e032b7f91f5e5e7f", 0x3c}, {&(0x7f0000002700)="b46bd5970a12ebb2af6faa42537bef10e8a1fa9d3cf4924fdb4d0f02d772ac184e950f8b8121677fc5b3bdb824963c8fed6521bf843932974e1ec3cd26690bbebb76407997e802cc3e50a2fdd5ed5cd26a00524e9fa96a6d785bb4743803bc48091d8f728694ae0bdb61b7cb9db1d2f2c1691a7ad692910e2bc010325c69ffa96362bde60e1acda58ad864", 0x8b}, {&(0x7f00000027c0)="71d6b468ca3d7c7309d545a5d651a3ca6aa9969ab05d4ed17b9b7eb113fb", 0x1e}, {&(0x7f0000002800)="49cdd981d048cca87aa9d18a59444965ae9fa3f03300739b984943f309874ea3f25020fd60e9d5166e0e0aa2fddd223fe34e4e5d79495343c355108acb8d8243b030f455f363924f9f8a5aa1b6902e6b44abc7dc4f1278b456143a8a343163ec4744124d9090c663038f9c789b5a7b079a3d8e21d2bf58eec84e21a6c951e94a6d799fdfdf1b5ba7ed633b966e5726d3dfaccc850d2fc7b29b6b7bf2c340ac480035379072842ef6051e14acfa104fb45685b595089f82f6d5dba2984d14ded4c9a3", 0xc2}], 0x8, &(0x7f0000002980)=[{0x18, 0x6, 0x80, "14c245"}, {0xe0, 0x107, 0x7, "ecb08ce1e739080076934c6e02aef9d328909139cdb12a862f648442b40427db305a6decfb117393e0d1a5cbec6f51f2adf65f4a42941abbe9ebc4de62cfd5fd499824082f5016d7d202886a6ec6dfdcd04d42997a13a7eefa0a630f2b0bc8bd9d59f0761ebf794c5de19c99c36ffae970a1059d82f0a3c12bee304bd885591170382c9e7e7769591d63e75623781dad920128ded0a5e4966cec7b56bb989245fd037f4c757fdf9464349e8d67dbf189f9cd7693766f6af5a9e9e9468567336440e59e082c577aee617fab"}, {0x20, 0x10c, 0x4, "cf9b8470e0a574c8570075"}, {0xe8, 0x10d, 0x7, "d222eaa56fc0c1f7235fb3de876d2b8512bdbcb84be382a9c4683582c9f4a5c1f8227e548238d6ab6c022160d1f10242d29d110084e72ffbfa918b1c50d4f09ddce0f6293c2a9879648a7b6e970842ebad0782b80d02c5a0b8c865bd6bac4df71684ee952c3efdf3fb86c6155e31a5788d60cf8431fe4da602aa63b78f1af8cf4f09e67cae922747ef8a277c0e4bc7f85f4eadbfaddeacb96fde1f52396f69a69702d632caa2771ed7cf8fb277dcf5b5ac2b492d006c51845249db308eb9acdbfb85f8b975b585e051cdaaefc932d8288a"}, {0xf8, 0x0, 0x1, "69d2fc45497443e73cf862cf849166e57c69f2a3b894e645fe0cd562c17c0fb89b5f61e7736f42ed64b17c7c999d2b1852132aebfb20f4c9b4f6580a2e70c23e92f9e21419e94d542a0f71b7615690ee43b291a6402d731441952f81d7e1a39393e5ffe70760e74a0b10d49b8580b02793bbd3cbc6787e78443e1bff621cb790c6329e544ceaad2ed0fe27d9c8b47b0d202f955651b29de0bd6018ef89d4e2c0ce16d5c4f1e78f0ec8575a8edfe0cf5b8d3ebe7f7d11040e0d58deec9434eb9b9a0fee1c6dc44cbdffb25bd50b04b173390d225a2d84f9d1ab30143a9c26071fa5894ade7d1f1bf2"}], 0x2f8}}, {{&(0x7f0000002c80)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002d00)="c92ada7fa9af7ffbe613aaf7e7775f8a8888cfba3def2681c2e732a988a2ccfd5f6fb5888e5057556a83e76931131052fbf74d87b80e667e42ec722e1756e08c7c293e4b811034387d0003fa91eea59de86223e804ff1322c1cf9517335e24660aa66579b381d19d31e9fed714d4574e7331f263f537c45b8cf64392c01817978ff88f93b0875689716becac622f5b5b5d082d4b38f057511faf5a33a252d9ca744704ca0277fb8ed4696edfe65b1a70b1738efeea2d073622ec1d7ed62ec26bddefa023285778bc3e8184ec9e18571419d1a43f539d5bfe007fec9c6f021f73c26f0dccf0c89284b167d294fb94a482786b7f93e2c58673cbb2c2552aca3c02b758e55fcffd222ad57b7d4356dea74ae8c2e450342f8fd1c99102742abf9fe9399fba372e0a9923ecab5105a5cdec404147abadea5ed4e8bb4fff515bd5cba43841f5595c1bcfe38dfb88d290fec94fce698df0c7feaad263955316247de9c691b1171a410f2e83e500618efa48770db35ed075eb6be3272d202cb068ba1585c288738792760ea5ff20892991a820787ed904a0674c0dd63999ffa8802df5d4dad64d6b6637527408af768dd1f79ec377a21703f2db40b009e2899e743daccd0e9230ef16dab7dc18e3bb33549b20aafbecb8f77eb736588c9a0fc3ab1d95691827dffc1e40328fe99c1afb8a8c6fe3bf806ebf28c6d3963624a0dfb755c2297c4a17b0a81d61ad7aeb584ba009485c1ea981ef30899140f732ff9ccb1aef927179835a6443a4e74157b53e9a3e34613759b1d71043dde1a348377c039043828e0a88f916855af7f8999ed4d8b161da5c97a4a1f734a66f2f4298ba9ede61937aa9e9379f47fa91e50e8d3a8d8407714e606c540a6791f16b17a9ea31c645d67d69e65fc642c04eaa14895ec3780d117d0f0f2b96f9f45091724fa17f72349ca1bd2486b19c858ad73d93909625cade37fdbe516b795913439dc6aaebf55da969dd1bcb85c378719907b99d73cc8c20fe01f52526da3644d25c757c4c6b33afa38b80687fd440a8c4784771f30778f371467217ec7691523f44cfbd4d6356e32ac44a70362354a7ffa503873ad1c6749c0a4802deaf53849a986a2e7a6375254cbecdaa46a945d0c27c1f9db4232f086416b8d7f8bf41a4662df32540b9b1f6d04425a29fa2c88e4975dd3311a812bced0d9e6bbf9df925a9baeec99f15b4183241f6739f1a5e7cebad85ef99452949565ef91e662f18c322e882b8fa2d6d411109989a5fa48a7e9cbc1c4eb71d07871e2917d1bd9a2a7c9da966e5348f1d455272696c4666dc824c1a44df9f49c103062fadec845b6ee8202a54b80d7feb5b8f4e18ff6199fd3e14a52bc0f2620311073a53063668eaa592c6b7215888524ea97189889c358036645c8507246ce4b189a72be8b58daa7a41c320c79ee9db52c9beb1d94e3fea9901b5d1a1b4ec27ce8642c83d4c77d45d89894378c4e79ed507ccfa5fdd968c6c6756ccbeca9a0d711204b64b617d01d26ad13fcaba4a8c472f4312d6172b4e2a4080297eb1b09d71763f034e687338feb3e9559488d3d18e0605be4788214b731101058ed2e772d2c2b43027fd305b56afea4a500a88d89bc2dab95d610b165a1bd8271cf62e8ea59ac3e0a8de3d862dc6d43820defb9f9592a6222d57179222163c7e3e97956979dcf71460a1edd60cc4e4d5e3be01dd3cacf0664d337eed54f7ae65e23c15f139bcfca32266f38a6956bd905c873839817aee9a1948f7b694ba1b257b9a659acf5db99c1f81918611a9b4fd05795909856eae2ddc843a1882b8d454b7ec69c7135087101c53a8532e36c85fbc97129591aba10d4e00c4e86e654327b64550089cd6fcf2213913da5ec8ddd2182afd4ab0fc926d351fa225c54ab24233d2333dfe8da25bfe4da87d8e6f103e76e20894c836c1b03a72bd1a38a4b67190654f486d994e089cf6dba5e50c7b307ff1480dbe918f5e77d043001dd2ce87ff7339913db17ab1b11da2b07d880ffe67d6a7255fe9c0657f4ba6cbcfa3a3074ac8f1b78da33111e2cb503d3bdc04051d534cad9cbbd36bb47b0069c1b949d36e29e74a339ba60ecd7c4c420f3d7966600faa570242559603c6f1712725720c477a8fbf57aa91bf57b47374543d2001590ab8abed41c626e2865e14d22cee939d4e3b5c10b51c9ab238f32339ad0c8c6236d8c45661688672b650e667d46289521f9b239cccffa843b6ea697a341d65803f979eb10e5f858f56ba4a3fba4ee5f7850eafd357277a22c3ca1d66896b7ae11cae8506bd3f7ba93e37427e4340b2f26309d61a0afefefcb1461aa4c1e72f357704254f3a93ade53383480d3cd83afb1afeb91fc247dbc0f5d2156bef129942490080c181c351c9dc6bcdf0feb18db01874199c9fed0ecef283a57eb9f837901e997fbd936278990316c44e3de293d705c51e7050ecfa68e4d65619ab039addf702820d0e540470d893a75ee864965c8e9d4ff1c623fd75404c1f37fb5e93ea431a2551feccbf166f46958a90bc5e98ee743188e45627c7cf5c6bd8b601d1529e2b7709001b69ce3025471ae712eec97728118153058bed6541b93c2464bf108a581c9e8a6618f03b6d7f24965a9800e6da66fc6aaa7f0721dccbf3f3b8545e508f931d818504ff5ddb4dd53bdd22664ae3c1d68ecd5cce5191667946a3fd4904f89b82bc174dfec19ab480e8e99e75857fa1fc4c2db4e7f90de110eb0ff164f964afb5b2307dfb621a975f1e32456b7587ff0e63dcc29e7159f93c013c286fb8ad3c4f5d4f27808b0dbc49352a889de06607180c9bff6f75a9fcd0ca6d6285201384afffaf63cbabe5f428e733030e16893f3387bf06211288112f6de6cc6d04b4fd38b22ca2481b0c1bc2db03a85bdcfaa8c9820faf8b67ad81728e95dab2e49c10ed5b4f0aa2c7391d24228a6ffa3ae95f13b00fe9e61b733585944d72fd73ce2b54d6e90951dfd668dfaf30ac39a049afc6304abecd64afc2bd4497b3a3b891c7a8c2908d056535aef7e18755a29aada049391c383df28014fae1c73f583e0f3a233f1540121f38f83adbcff51ce428956782645b03e92b15e99d4d69de0c2430af5cd1bd0ba1434d9c5fd0067772a83707dd2d5240c67f8121ca98136119fb8dbc4edf8600d6b4d83d7db32f8b798fc8464e5c4cd9c7a6b27e31655fffa205b642acb98132f2bdb639a904697c84d93347f7db70589dc151e33a81764c0e974ac0f7d989e28de0790fe0fa96e4e11d509c26c1fb95ccc18ad4ba1393c6f55bb83b2bfaa9b2a12bfcbf55226ddf78030c61d956b8ef791d52c928bc6767fcbcf66e67b480c279c2d11ee92ba9019bc2c0f177d45e499efe0e643e431bef53c69aad93f0612d13f9395379a330a217ea19acffea585d62d00e65f9b2d9f3ce12b7a164a3ea69633a9bfc0dcf90b68150908d28ca02a554d9751d9f9ae07f7501c720cd9b559671684fac43354d4fb873209b5adbd9dee76d364154b32e560706c6b98de22caf1c1454bcfeedfe5e45dbd21b89aaaed8913c2d1ee07bfd33841412845e9b5b0d737b279a67cfdae57f4301027061a07a40d4cea1489b6862e1338fe57774d7d27335206f157fedebd30ea6ae9db978fa3c871d7b4c086a4f921e6daeeb4d4187a3880bc0fe42b0732dfd74c4d72b691e5c9efcc62cb7a78ef2fdb30c103d2164d56e453afd2bcb7ef03bf07d2e6dd5934b8bf13e04b698aeb598fb731d1a1c7a55bac0e967e69ef7eafb901dbd427bc8db956cc8e95356143e28d774fc098d1f9680f530ef69ad13dc2e2567b04e8906dc99bf2f4980cd0485aca46777311ce17cbcb8254d4bd481c825c7f76a8b68ba4633259443f6d905e07f1ce32ce7e13f14966518c8aa56c903a74fffd5c5201e30310e36843d463d6d7ffe1130cabdcd118a7709eed598e15c197b94e9ba9f44388865c4e8d0ade709b0f25dd42d6c42bd8d702e724e13da0a183a6d12c9b49d52f456eb0729e107e761caf48d24b94eaf14c49a2e7b94e3de5a65bc0a3827082d55063c255e425279e33f217e585d5bdc12d7a6cb95342b682644aae78095bf25275280bb7378da153bfce757b7506273c59bd2399b9b7acc0535213418afe93ce08f7bfcfbad9453a237bb1766f51df3d754c1ea5632cf184a89b1cbb4f9063de9491eed57d0a9d0d29c8d1b311003c8adb7a95af38169c6469e1c3bd67bbbe08a20f768693b284763d25be8cbb97bb37f879e387498f1effa2c1bcd8444431022fb5ecaa29d25dbbb48b4a2c02e8358cb2d1c0515f4c78efe0d27dc336f11a787a717a4cf550de32339492f3f5110ad8835a8fa351f655b2a4c4c39ad0c54aff4cec5e1a0a51ae1d0d2c74f3e79d1b1a7b155d9068726e2b97d549e3bfd4b8bdc33a5162baf18f8f1dec35766459a8455f06e0c0043c1967ae6af821fd29d2faab4204134f8155ef70bbb1ebe5309f546966800a85f4ce8bce99aa1cfb28de99040e7dba4eb2d9839b4216f75a0537247a08ebdad6fdb91c8670ee6808551bbef9e817992e525cccb579aeeec18cf758323474ab8d5c1e5c150cafbf1c45b8ebaecbc5ff2a13702c1b9bc365850d175a07488dd07612524d780909e63939410204770f28f89d719c76f28245aa4dbc40553eac777b67a530022f9022cc60a1c17fa769cd319797333658559f815ecce60acf46378501e32aa1ba4d597f99744d21c789fd33b00e5770d78341bec21ea140c976f386aa9c130d0a88c6f5caa02c0de36921f44f5a6e0cbae1e5c090ed503e6227bae0d0c317385c87ef7ab7e23e919d83eb9e74d7288d8baddef61902ba0d8266e550f022e99641e85d35ca6fe4c329e91e1af46adb2b077bf5a1e61a2ae2b6f636f88ca87fdf5be59967ecda97884c5ec0000e8bfd0e9e56744dc616493956917adbe4d4b10753f1b84ac3df6c703dfbac292ebfce2a8a8814b543720298c2558fa6d6e3d37e2edd5e6418cb2041b70838b9bb4c85b9398f79380876b64e132c7255ea122a3783adc1e61e1c40e2441419721864df08d3e2a122f8fb8d4c1556a1e3cdfc0124fa05bd4b4f576ee57155e9ea09781050603708e13ad17cb7154ed38c42bfb1192dbfc795ffc44e572d73a0d5d45640ae47368bbf3b5752fdce44b86e6d2f3b408a7e18d6eb0967c1a8af1d0bcf02f6bbdb508cf0758065892130e5e1f4277bed51168e9431085fa66bac7146ff0d30060b45cfea40e4eafa10ba5190892002a064fb2bca6a93ed553419a138880bb66c14d259f31032399e790c630c19663a5806c043ae10c0c19b3d79e0fc31c4457cc94fd6f8da1848d2f0388190e7aa7e57d4a7734d93dc8611167c9432705a8f1585263753ab3d45293d91ef2662d7c2f6a7a197ce53c7709e55bc5ac4a2b6d793e6627f5edd664e8556ef9175906489ebb892fee6ebd49a49020480c553ea179ce86f9aca62995eb76341dbfc4c56f0295a467032323cd5e3c63e47610def26a3ab736a054230297d03a4ff087b1468603e79f2fc510cd70a678b765005a06593961a0f6793c1043717d0241eeee9b4b10924c01674c2b23d132e6495f05ba85360a2d550b2e259291d6f231bd3120a3a8ed24b9a9a7ce2ce5332aea0eaf73ccd824acbccb7bac24f8cef0a81fbaf4402e3f44d01e55ec3c72254aad7e341e3b605d5c66ca0cade440222cad12f2b6a97551675a158bedb62cc1e53860bc2d575c3ca496957bebf3d075d7510daf029db0b1e8e143e32c58187fd91eda25fe6615d1", 0x1000}, {&(0x7f0000003d00)="4acf0c73fc0883f9963ce2b859ebd333e49e68c70f308c0355e9f1463dd583268fe7d5cae81bb57a93768466a36d3a38582eb15bfac0b9748c20029a8c38e78b8f88af910388421832816ba517d59782183126d912d27077d5a1d4c52efacebe7ee48ec51197f445c16c55fa943654ecf02b6758cf1ba3d970f4a14f80205fae7e189d78bf6baa745a174c6133838c514f149869cbe35077213b051611a8176f1ed7ab1131ba11bc02637b74bab21a6c61f7c6aee99fac994f25b1f5360f4c2824ae7f4f818469f0f6f2f44dc847a0765006139f08369c9de5f2165ed250", 0xde}, {&(0x7f0000003e00)="3b8ec1d1daedca61e633a70ff84a3fd3513f356a895fd2c815c3ebd55119e4667d13e8deb09bb43dcb7ed31a0ba002ea6382e4110ccc9f3eee0877b6c87874b772cd6c4f293f07aa3b663bbe71aec1eef0f83d932c43ba2285ced6ca18a7ee0dabc18b79", 0x64}, {&(0x7f0000003e80)="f0bc8b7db3091d2302996e0a56afd36e85acbfd2cc0cc36ee6018695d32a2b77bf735c5df51c688c072274ae0d1ded33e63a3adcf340dc7e81dba29c768fe06848728a46b68444837cdd54015c357b8967c5510397d3d7af54e7e5d2b8bc6b01bda83fecb6406e273c8e7d23c896bb6bc35c9ddc15b12b577da46944b02a8d9b349b364342387699544880b136cae36faa7b28fe7a1d53ce9ce298e9923af3cdbe899b03828cf9b3379121c2ecbbe99d3d2ebf5753cbc4c6ecf7490d2613a81ac609440330a56f6fd1a2ef39328c2ecfd3792bdc2f80d6acafcfa4a411bf1ebe56e76359df10", 0xe6}], 0x4, &(0x7f0000003fc0)=[{0xf0, 0x10f, 0x10, "540629ade1c06e15e539f2bcc03580beab5b8a1a65c4416498c74ce457d15d3ba8e768f20f0c6b13d9a96aaa676519bd9f3fa80c4fc896c55f2d8160b0b999327943f873ddec5dc9c29880a96aa1de492e7934ad33379c5c2f036c894b0c177e9d0fd30b2c6f578a9f4ead0ad26a68d92e56f0e07bc0f7a4293340a3916e6de684ffec0cca538fbbbcdb7cd8185632126a9d1c82e4fd39605403fd90d6eab664a2e7f5b1f1c03f1ce13f3e86f7dc5b82066fa2e3344b64cde2b11509c4a0adac9afb178ae2a2527dfd78ec01b8a27a096d3826beb3a532acd3acf83f78ff7b"}, {0x80, 0x0, 0x1, "bd9c7d24c1c7c6f324cff727b3c26eacdbad5c03b16c4536aaeb794340f12f70693f52ece267a9a89b2a94da7ae4172bf775b8020880ac0bd2d890c1072d4ea2f1004c0517632aec69dbaad2cc75f31e77df79e758b2df1ce23614f71ad9bbbcc6eb770be03a31e86c1b80"}], 0x170}}], 0x5, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) r10 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) kernel console output (not intermixed with test programs): 0379] netlink: 'syz.4.4507': attribute type 1 has an invalid length. [ 556.147069][T20379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.233829][T20388] x_tables: duplicate underflow at hook 1 [ 556.318627][T20392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4513'. [ 556.576399][ C1] ipvlan_process_outbound: 2 callbacks suppressed [ 556.667923][T20411] netlink: 'syz.4.4518': attribute type 2 has an invalid length. [ 556.811735][T20423] FAULT_INJECTION: forcing a failure. [ 556.811735][T20423] name failslab, interval 1, probability 0, space 0, times 0 [ 556.811762][T20423] CPU: 1 UID: 0 PID: 20423 Comm: syz.6.4523 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.811787][T20423] Tainted: [L]=SOFTLOCKUP [ 556.811794][T20423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.811805][T20423] Call Trace: [ 556.811812][T20423] [ 556.811820][T20423] dump_stack_lvl+0x100/0x190 [ 556.811859][T20423] should_fail_ex.cold+0x5/0xa [ 556.811887][T20423] should_failslab+0xc2/0x120 [ 556.811913][T20423] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 556.811935][T20423] ? __alloc_skb+0x5b7/0x710 [ 556.811958][T20423] ? __alloc_skb+0x140/0x710 [ 556.811986][T20423] __alloc_skb+0x140/0x710 [ 556.812007][T20423] ? __alloc_skb+0x5b7/0x710 [ 556.812029][T20423] ? __pfx___alloc_skb+0x10/0x10 [ 556.812059][T20423] netlink_alloc_large_skb+0x69/0x150 [ 556.812084][T20423] netlink_sendmsg+0x680/0xda0 [ 556.812112][T20423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.812137][T20423] ? selinux_socket_sendmsg+0x198/0x2f0 [ 556.812165][T20423] ____sys_sendmsg+0xa4d/0xbe0 [ 556.812182][T20423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.812208][T20423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.812232][T20423] ? lock_acquire+0x1d1/0x380 [ 556.812252][T20423] ? get_pid_task+0x2a/0x250 [ 556.812281][T20423] ___sys_sendmsg+0x190/0x1e0 [ 556.812302][T20423] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.812322][T20423] ? get_pid_task+0x106/0x250 [ 556.812356][T20423] ? find_held_lock+0x2b/0x80 [ 556.812398][T20423] __sys_sendmsg+0x160/0x210 [ 556.812423][T20423] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.812461][T20423] do_syscall_64+0x123/0x790 [ 556.812483][T20423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.812502][T20423] RIP: 0033:0x7f1e5299e159 [ 556.812518][T20423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.812536][T20423] RSP: 002b:00007f1e53863028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.812555][T20423] RAX: ffffffffffffffda RBX: 00007f1e52c25fa0 RCX: 00007f1e5299e159 [ 556.812568][T20423] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 556.812579][T20423] RBP: 00007f1e53863090 R08: 0000000000000000 R09: 0000000000000000 [ 556.812590][T20423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.812602][T20423] R13: 00007f1e52c26038 R14: 00007f1e52c25fa0 R15: 00007ffe305064f8 [ 556.812628][T20423] [ 556.982614][T20433] random: crng reseeded on system resumption [ 557.271362][T20441] netlink: 'syz.6.4531': attribute type 15 has an invalid length. [ 557.399846][T20444] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 557.401416][T20445] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 557.432282][T20448] Cannot find add_set index 0 as target [ 557.851670][T20472] netlink: 'syz.6.4542': attribute type 2 has an invalid length. [ 557.866973][T20476] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 557.931570][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 558.834039][T20495] MINIX-fs: blocksize too small for device [ 558.873772][T20504] ubi0: attaching mtd0 [ 558.892162][T20504] ubi0: scanning is finished [ 558.892216][T20504] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 559.103342][T20504] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 559.137387][T20510] __nla_validate_parse: 12 callbacks suppressed [ 559.137398][T20510] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4554'. [ 559.230097][T20513] netlink: 'syz.5.4554': attribute type 2 has an invalid length. [ 559.271909][T20519] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4557'. [ 559.376023][T20523] NILFS (loop2): device size too small [ 559.395513][T20528] FAULT_INJECTION: forcing a failure. [ 559.395513][T20528] name failslab, interval 1, probability 0, space 0, times 0 [ 559.395559][T20528] CPU: 0 UID: 0 PID: 20528 Comm: syz.6.4561 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.395584][T20528] Tainted: [L]=SOFTLOCKUP [ 559.395592][T20528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.395603][T20528] Call Trace: [ 559.395610][T20528] [ 559.395618][T20528] dump_stack_lvl+0x100/0x190 [ 559.395650][T20528] should_fail_ex.cold+0x5/0xa [ 559.395678][T20528] should_failslab+0xc2/0x120 [ 559.395705][T20528] __kmalloc_noprof+0xfc/0x840 [ 559.395726][T20528] ? tomoyo_encode2+0xfb/0x3c0 [ 559.395756][T20528] tomoyo_encode2+0xfb/0x3c0 [ 559.395784][T20528] tomoyo_encode+0x29/0x50 [ 559.395807][T20528] tomoyo_realpath_from_path+0x18c/0x690 [ 559.395842][T20528] tomoyo_path_number_perm+0x23c/0x580 [ 559.395864][T20528] ? tomoyo_path_number_perm+0x22e/0x580 [ 559.395886][T20528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 559.395918][T20528] ? __lock_acquire+0x5c0/0x1f40 [ 559.395951][T20528] ? __fget_files+0x34/0x3d0 [ 559.395976][T20528] ? find_held_lock+0x2b/0x80 [ 559.396003][T20528] ? hook_file_ioctl_common+0x140/0x440 [ 559.396036][T20528] ? __fget_files+0x21f/0x3d0 [ 559.396064][T20528] security_file_ioctl+0xd3/0x230 [ 559.396088][T20528] __x64_sys_ioctl+0xb7/0x210 [ 559.396110][T20528] do_syscall_64+0x123/0x790 [ 559.396131][T20528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.396169][T20528] RIP: 0033:0x7f1e5299e159 [ 559.396186][T20528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.396204][T20528] RSP: 002b:00007f1e53863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.396224][T20528] RAX: ffffffffffffffda RBX: 00007f1e52c25fa0 RCX: 00007f1e5299e159 [ 559.396237][T20528] RDX: 00002000000021c0 RSI: 00000000c08c5336 RDI: 0000000000000003 [ 559.396250][T20528] RBP: 00007f1e53863090 R08: 0000000000000000 R09: 0000000000000000 [ 559.396261][T20528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.396273][T20528] R13: 00007f1e52c26038 R14: 00007f1e52c25fa0 R15: 00007ffe305064f8 [ 559.396301][T20528] [ 559.396869][T20528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.479266][T20535] FAULT_INJECTION: forcing a failure. [ 559.479266][T20535] name failslab, interval 1, probability 0, space 0, times 0 [ 559.479293][T20535] CPU: 3 UID: 0 PID: 20535 Comm: syz.2.4564 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.479317][T20535] Tainted: [L]=SOFTLOCKUP [ 559.479330][T20535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.479341][T20535] Call Trace: [ 559.479348][T20535] [ 559.479355][T20535] dump_stack_lvl+0x100/0x190 [ 559.479385][T20535] should_fail_ex.cold+0x5/0xa [ 559.479410][T20535] should_failslab+0xc2/0x120 [ 559.479434][T20535] kmem_cache_alloc_noprof+0x92/0x6a0 [ 559.479455][T20535] ? d_instantiate+0x8a/0xb0 [ 559.479480][T20535] ? alloc_empty_file+0x5b/0x1c0 [ 559.479509][T20535] alloc_empty_file+0x5b/0x1c0 [ 559.479533][T20535] alloc_file_pseudo+0x183/0x290 [ 559.479559][T20535] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 559.479585][T20535] ? _raw_spin_unlock+0x28/0x50 [ 559.479608][T20535] ? alloc_fd+0x471/0x7a0 [ 559.479633][T20535] __anon_inode_getfile+0xe8/0x280 [ 559.479655][T20535] __anon_inode_getfd+0x5c/0xe0 [ 559.479677][T20535] map_create+0x19e1/0x30d0 [ 559.479703][T20535] ? find_held_lock+0x2b/0x80 [ 559.479737][T20535] ? __pfx_map_create+0x10/0x10 [ 559.479762][T20535] ? avc_has_perm+0x135/0x1e0 [ 559.479789][T20535] ? __might_fault+0xc5/0x140 [ 559.479816][T20535] ? __might_fault+0xc5/0x140 [ 559.479847][T20535] ? selinux_bpf+0xfb/0x150 [ 559.479866][T20535] __sys_bpf+0x12a0/0x4a30 [ 559.479891][T20535] ? __pfx___sys_bpf+0x10/0x10 [ 559.479908][T20535] ? find_held_lock+0x2b/0x80 [ 559.479931][T20535] ? get_pid_task+0xfc/0x250 [ 559.479954][T20535] ? get_pid_task+0xfc/0x250 [ 559.479985][T20535] ? find_held_lock+0x2b/0x80 [ 559.480032][T20535] ? rcu_read_lock_any_held+0x6a/0x90 [ 559.480059][T20535] ? find_held_lock+0x2b/0x80 [ 559.480082][T20535] ? ksys_write+0x190/0x250 [ 559.480099][T20535] ? ksys_write+0x190/0x250 [ 559.480118][T20535] ? lock_acquire+0x1d1/0x380 [ 559.480152][T20535] ? fput+0x7c/0x100 [ 559.480175][T20535] ? ksys_write+0x1ac/0x250 [ 559.480196][T20535] ? __x64_sys_bpf+0xce/0x140 [ 559.480212][T20535] __x64_sys_bpf+0xce/0x140 [ 559.480231][T20535] ? do_syscall_64+0xae/0x790 [ 559.480248][T20535] do_syscall_64+0x123/0x790 [ 559.480267][T20535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.480285][T20535] RIP: 0033:0x7fa123d9e159 [ 559.480300][T20535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.480317][T20535] RSP: 002b:00007fa124c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.480339][T20535] RAX: ffffffffffffffda RBX: 00007fa124025fa0 RCX: 00007fa123d9e159 [ 559.480351][T20535] RDX: 000000000000005f RSI: 0000200000000080 RDI: 0000000000000000 [ 559.480362][T20535] RBP: 00007fa124c87090 R08: 0000000000000000 R09: 0000000000000000 [ 559.480372][T20535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.480382][T20535] R13: 00007fa124026038 R14: 00007fa124025fa0 R15: 00007fffcce44a38 [ 559.480407][T20535] [ 559.662396][T20542] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4566'. [ 559.697245][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.728936][ T43] kauditd_printk_skb: 269 callbacks suppressed [ 559.728947][ T43] audit: type=1400 audit(1790390755.891:14502): avc: denied { create } for pid=20543 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 559.729587][ T43] audit: type=1400 audit(1790390755.891:14503): avc: denied { write } for pid=20543 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 559.729634][T20544] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4567'. [ 559.729649][T20544] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4567'. [ 559.729660][T20544] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 559.731746][ T43] audit: type=1400 audit(1790390755.891:14504): avc: denied { allowed } for pid=20543 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 559.732697][ T43] audit: type=1400 audit(1790390755.891:14505): avc: denied { create } for pid=20543 comm="syz.4.4567" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 559.733052][ T43] audit: type=1400 audit(1790390755.891:14506): avc: denied { map } for pid=20543 comm="syz.4.4567" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=125384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 559.733323][ T43] audit: type=1400 audit(1790390755.891:14507): avc: denied { read write } for pid=20543 comm="syz.4.4567" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=125384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 559.745338][ T43] audit: type=1400 audit(1790390755.901:14508): avc: denied { read write } for pid=20543 comm="syz.4.4567" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 559.745370][ T43] audit: type=1400 audit(1790390755.901:14509): avc: denied { open } for pid=20543 comm="syz.4.4567" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 559.745396][ T43] audit: type=1400 audit(1790390755.901:14510): avc: denied { ioctl } for pid=20543 comm="syz.4.4567" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 559.796728][ T43] audit: type=1400 audit(1790390755.951:14511): avc: denied { read } for pid=20543 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.797243][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 560.106236][ C1] net_ratelimit: 1133 callbacks suppressed [ 560.204866][T20558] dlm: non-version read from control device 8192 [ 560.455717][T20564] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4575'. [ 560.717769][T20576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 560.718894][T20576] FAULT_INJECTION: forcing a failure. [ 560.718894][T20576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.718921][T20576] CPU: 1 UID: 0 PID: 20576 Comm: syz.2.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.718945][T20576] Tainted: [L]=SOFTLOCKUP [ 560.718952][T20576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.718963][T20576] Call Trace: [ 560.718970][T20576] [ 560.718977][T20576] dump_stack_lvl+0x100/0x190 [ 560.719007][T20576] should_fail_ex.cold+0x5/0xa [ 560.719028][T20576] ? prepare_alloc_pages+0x16d/0x5b0 [ 560.719058][T20576] should_fail_alloc_page+0xeb/0x140 [ 560.719083][T20576] prepare_alloc_pages+0x1f0/0x5b0 [ 560.719110][T20576] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 560.719133][T20576] ? prepare_alloc_pages+0x1d1/0x5b0 [ 560.719158][T20576] ? rcu_is_watching+0x13/0xc0 [ 560.719182][T20576] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 560.719204][T20576] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 560.719224][T20576] ? find_held_lock+0x2b/0x80 [ 560.719248][T20576] ? is_bpf_text_address+0x8a/0x1a0 [ 560.719271][T20576] ? is_bpf_text_address+0x8a/0x1a0 [ 560.719293][T20576] ? bpf_ksym_find+0x128/0x1c0 [ 560.719336][T20576] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 560.719356][T20576] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 560.719374][T20576] ? is_bpf_text_address+0x94/0x1a0 [ 560.719398][T20576] ? __kernel_text_address+0xd/0x30 [ 560.719442][T20576] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 560.719460][T20576] ? lock_acquire+0x1d1/0x380 [ 560.719483][T20576] ? policy_nodemask+0xed/0x4f0 [ 560.719509][T20576] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 560.719541][T20576] __kasan_populate_vmalloc+0xf0/0x210 [ 560.719567][T20576] alloc_vmap_area+0x95d/0x2bb0 [ 560.719595][T20576] ? kasan_save_track+0x14/0x30 [ 560.719615][T20576] ? __kasan_kmalloc+0xaa/0xb0 [ 560.719635][T20576] ? __pfx_alloc_vmap_area+0x10/0x10 [ 560.719658][T20576] ? __get_vm_area_node+0x124/0x350 [ 560.719683][T20576] __get_vm_area_node+0x1ed/0x350 [ 560.719710][T20576] __vmalloc_node_range_noprof+0x268/0x1420 [ 560.719734][T20576] ? vhost_task_create+0x1db/0x370 [ 560.719750][T20576] ? lock_acquire+0x1d1/0x380 [ 560.719768][T20576] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 560.719787][T20576] ? find_held_lock+0x2b/0x80 [ 560.719818][T20576] ? rcu_read_unlock+0x17/0x60 [ 560.719834][T20576] ? vhost_task_create+0x1db/0x370 [ 560.719852][T20576] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 560.719882][T20576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 560.719909][T20576] ? rcu_is_watching+0x13/0xc0 [ 560.719931][T20576] ? trace_kmem_cache_alloc+0xdd/0x100 [ 560.719959][T20576] ? vhost_task_create+0x1db/0x370 [ 560.719974][T20576] __vmalloc_node_noprof+0xad/0xf0 [ 560.719998][T20576] ? vhost_task_create+0x1db/0x370 [ 560.720018][T20576] copy_process+0x803/0x8370 [ 560.720051][T20576] ? __pfx_copy_process+0x10/0x10 [ 560.720070][T20576] ? kasan_save_track+0x14/0x30 [ 560.720090][T20576] ? __kasan_kmalloc+0xaa/0xb0 [ 560.720112][T20576] ? lockdep_init_map_type+0x5c/0x250 [ 560.720132][T20576] ? lockdep_init_map_type+0x5c/0x250 [ 560.720153][T20576] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 560.720180][T20576] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 560.720204][T20576] vhost_task_create+0x1db/0x370 [ 560.720221][T20576] ? __pfx_vhost_task_create+0x10/0x10 [ 560.720246][T20576] ? __pfx_vhost_task_fn+0x10/0x10 [ 560.720264][T20576] ? register_lock_class+0x3f/0x7b0 [ 560.720283][T20576] ? rcu_is_watching+0x13/0xc0 [ 560.720305][T20576] ? trace_contention_end+0x126/0x160 [ 560.720331][T20576] kvm_mmu_post_init_vm+0x1b3/0x360 [ 560.720353][T20576] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 560.720377][T20576] ? __pfx___mutex_lock+0x10/0x10 [ 560.720394][T20576] ? kasan_quarantine_put+0x104/0x240 [ 560.720417][T20576] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 560.720438][T20576] ? lock_acquire+0x1d1/0x380 [ 560.720457][T20576] ? do_raw_write_lock+0x11e/0x260 [ 560.720479][T20576] ? find_held_lock+0x2b/0x80 [ 560.720502][T20576] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 560.720525][T20576] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 560.720554][T20576] kvm_vcpu_ioctl+0x730/0x1700 [ 560.720580][T20576] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 560.720605][T20576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.720628][T20576] ? do_vfs_ioctl+0x226/0x13e0 [ 560.720647][T20576] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 560.720664][T20576] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 560.720690][T20576] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 560.720715][T20576] ? __fget_files+0x34/0x3d0 [ 560.720747][T20576] ? selinux_file_ioctl+0x13b/0x290 [ 560.720766][T20576] ? selinux_file_ioctl+0xb6/0x290 [ 560.720789][T20576] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 560.720818][T20576] __x64_sys_ioctl+0x18e/0x210 [ 560.720839][T20576] do_syscall_64+0x123/0x790 [ 560.720858][T20576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.720876][T20576] RIP: 0033:0x7fa123d9e159 [ 560.720892][T20576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.720908][T20576] RSP: 002b:00007fa124c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.720926][T20576] RAX: ffffffffffffffda RBX: 00007fa124025fa0 RCX: 00007fa123d9e159 [ 560.720937][T20576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 560.720948][T20576] RBP: 00007fa124c87090 R08: 0000000000000000 R09: 0000000000000000 [ 560.720959][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.720969][T20576] R13: 00007fa124026038 R14: 00007fa124025fa0 R15: 00007fffcce44a38 [ 560.720993][T20576] [ 560.721156][T20576] syz.2.4581: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 560.721208][T20576] CPU: 1 UID: 0 PID: 20576 Comm: syz.2.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.721231][T20576] Tainted: [L]=SOFTLOCKUP [ 560.721238][T20576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.721248][T20576] Call Trace: [ 560.721254][T20576] [ 560.721261][T20576] dump_stack_lvl+0x100/0x190 [ 560.721287][T20576] warn_alloc.cold+0x9e/0xb2 [ 560.721308][T20576] ? __pfx_warn_alloc+0x10/0x10 [ 560.721325][T20576] ? lockdep_hardirqs_on+0x7d/0x110 [ 560.721353][T20576] ? __get_vm_area_node+0x2f0/0x350 [ 560.721381][T20576] ? __get_vm_area_node+0x22b/0x350 [ 560.721407][T20576] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 560.721431][T20576] ? lock_acquire+0x1d1/0x380 [ 560.721449][T20576] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 560.721468][T20576] ? find_held_lock+0x2b/0x80 [ 560.721492][T20576] ? rcu_read_unlock+0x17/0x60 [ 560.721510][T20576] ? vhost_task_create+0x1db/0x370 [ 560.721527][T20576] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 560.721556][T20576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 560.721583][T20576] ? rcu_is_watching+0x13/0xc0 [ 560.721606][T20576] ? trace_kmem_cache_alloc+0xdd/0x100 [ 560.721631][T20576] ? vhost_task_create+0x1db/0x370 [ 560.721647][T20576] __vmalloc_node_noprof+0xad/0xf0 [ 560.721670][T20576] ? vhost_task_create+0x1db/0x370 [ 560.721689][T20576] copy_process+0x803/0x8370 [ 560.721722][T20576] ? __pfx_copy_process+0x10/0x10 [ 560.721743][T20576] ? kasan_save_track+0x14/0x30 [ 560.721763][T20576] ? __kasan_kmalloc+0xaa/0xb0 [ 560.721783][T20576] ? lockdep_init_map_type+0x5c/0x250 [ 560.721805][T20576] ? lockdep_init_map_type+0x5c/0x250 [ 560.721831][T20576] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 560.721859][T20576] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 560.721883][T20576] vhost_task_create+0x1db/0x370 [ 560.721900][T20576] ? __pfx_vhost_task_create+0x10/0x10 [ 560.721924][T20576] ? __pfx_vhost_task_fn+0x10/0x10 [ 560.721943][T20576] ? register_lock_class+0x3f/0x7b0 [ 560.721962][T20576] ? rcu_is_watching+0x13/0xc0 [ 560.721984][T20576] ? trace_contention_end+0x126/0x160 [ 560.722009][T20576] kvm_mmu_post_init_vm+0x1b3/0x360 [ 560.722032][T20576] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 560.722054][T20576] ? __pfx___mutex_lock+0x10/0x10 [ 560.722064][T20576] ? kasan_quarantine_put+0x104/0x240 [ 560.722079][T20576] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 560.722093][T20576] ? lock_acquire+0x1d1/0x380 [ 560.722106][T20576] ? do_raw_write_lock+0x11e/0x260 [ 560.722120][T20576] ? find_held_lock+0x2b/0x80 [ 560.722136][T20576] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 560.722151][T20576] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 560.722170][T20576] kvm_vcpu_ioctl+0x730/0x1700 [ 560.722187][T20576] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 560.722203][T20576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.722218][T20576] ? do_vfs_ioctl+0x226/0x13e0 [ 560.722230][T20576] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 560.722241][T20576] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 560.722257][T20576] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 560.722274][T20576] ? __fget_files+0x34/0x3d0 [ 560.722305][T20576] ? selinux_file_ioctl+0x13b/0x290 [ 560.722320][T20576] ? selinux_file_ioctl+0xb6/0x290 [ 560.722335][T20576] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 560.722351][T20576] __x64_sys_ioctl+0x18e/0x210 [ 560.722365][T20576] do_syscall_64+0x123/0x790 [ 560.722377][T20576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.722388][T20576] RIP: 0033:0x7fa123d9e159 [ 560.722398][T20576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.722409][T20576] RSP: 002b:00007fa124c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.722420][T20576] RAX: ffffffffffffffda RBX: 00007fa124025fa0 RCX: 00007fa123d9e159 [ 560.722427][T20576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 560.722434][T20576] RBP: 00007fa124c87090 R08: 0000000000000000 R09: 0000000000000000 [ 560.722440][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.722447][T20576] R13: 00007fa124026038 R14: 00007fa124025fa0 R15: 00007fffcce44a38 [ 560.722462][T20576] [ 560.722467][T20576] Mem-Info: [ 560.722472][T20576] active_anon:14 inactive_anon:11451 isolated_anon:0 [ 560.722472][T20576] active_file:21131 inactive_file:19888 isolated_file:0 [ 560.722472][T20576] unevictable:2024 dirty:638 writeback:0 [ 560.722472][T20576] slab_reclaimable:8500 slab_unreclaimable:76982 [ 560.722472][T20576] mapped:26235 shmem:2611 pagetables:2302 [ 560.722472][T20576] sec_pagetables:317 bounce:0 [ 560.722472][T20576] kernel_misc_reclaimable:0 [ 560.722472][T20576] free:425544 free_pcp:9317 free_cma:0 [ 560.722499][T20576] Node 0 active_anon:56kB inactive_anon:45736kB active_file:84236kB inactive_file:79552kB unevictable:6096kB isolated(anon):0kB isolated(file):0kB mapped:76132kB dirty:2552kB writeback:0kB shmem:8440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16480kB pagetables:8932kB sec_pagetables:1268kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.722527][T20576] Node 1 active_anon:0kB inactive_anon:68kB active_file:288kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28808kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.722553][T20576] Node 0 DMA free:14212kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 560.722582][T20576] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 560.722602][T20576] Node 0 DMA32 free:173220kB boost:24576kB min:51932kB low:58768kB high:65604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:56kB inactive_anon:45732kB active_file:84236kB inactive_file:79552kB unevictable:6096kB writepending:2552kB zspages:0kB present:2080628kB managed:1253160kB mlocked:0kB bounce:0kB free_pcp:35112kB local_pcp:11188kB free_cma:0kB [ 560.722632][T20576] lowmem_reserve[]: 0 0 0 0 0 [ 560.722651][T20576] Node 1 Normal free:1514744kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:68kB active_file:288kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:2128kB local_pcp:304kB free_cma:0kB [ 560.722680][T20576] lowmem_reserve[]: 0 0 0 0 0 [ 560.722702][T20576] Node 0 DMA: 61*4kB (U) 48*8kB (U) 37*16kB (U) 22*32kB (U) 16*64kB (U) 10*128kB (U) 7*256kB (U) 4*512kB (U) 0*1024kB 3*2048kB (U) 0*4096kB = 14212kB [ 560.722834][T20576] Node 0 DMA32: 1787*4kB (UM) 751*8kB (UME) 824*16kB (UME) 886*32kB (UME) 213*64kB (UME) 74*128kB (UME) 51*256kB (UM) 45*512kB (UM) 40*1024kB (UM) 9*2048kB (UM) 0*4096kB = 173284kB [ 560.722921][T20576] Node 1 Normal: 250*4kB (UM) 190*8kB (UM) 98*16kB (UM) 204*32kB (UM) 144*64kB (UM) 93*128kB (UM) 35*256kB (UM) 13*512kB (UM) 7*1024kB (UM) 9*2048kB (UM) 352*4096kB (U) = 1514744kB [ 560.723006][T20576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.723015][T20576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.723024][T20576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.723032][T20576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.723040][T20576] 43627 total pagecache pages [ 560.723045][T20576] 1 pages in swap cache [ 560.723049][T20576] Free swap = 124960kB [ 560.723053][T20576] Total swap = 124996kB [ 560.723057][T20576] 1048443 pages RAM [ 560.723061][T20576] 0 pages HighMem/MovableOnly [ 560.723065][T20576] 285843 pages reserved [ 560.723069][T20576] 0 pages cma reserved [ 560.926393][T20586] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4584'. [ 561.003149][T20590] FAULT_INJECTION: forcing a failure. [ 561.003149][T20590] name failslab, interval 1, probability 0, space 0, times 0 [ 561.003177][T20590] CPU: 3 UID: 0 PID: 20590 Comm: syz.5.4586 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.003203][T20590] Tainted: [L]=SOFTLOCKUP [ 561.003210][T20590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.003222][T20590] Call Trace: [ 561.003229][T20590] [ 561.003236][T20590] dump_stack_lvl+0x100/0x190 [ 561.003268][T20590] should_fail_ex.cold+0x5/0xa [ 561.003297][T20590] ? __netlink_lookup+0x652/0x900 [ 561.003324][T20590] should_failslab+0xc2/0x120 [ 561.003349][T20590] kmem_cache_alloc_noprof+0x92/0x6a0 [ 561.003374][T20590] ? skb_clone+0x190/0x400 [ 561.003403][T20590] skb_clone+0x190/0x400 [ 561.003428][T20590] netlink_deliver_tap+0xaed/0xcc0 [ 561.003454][T20590] netlink_unicast+0x62b/0x850 [ 561.003481][T20590] ? __pfx_netlink_unicast+0x10/0x10 [ 561.003503][T20590] ? __pfx_sock_has_perm+0x10/0x10 [ 561.003529][T20590] netlink_sendmsg+0x8b0/0xda0 [ 561.003556][T20590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.003582][T20590] ? selinux_socket_sendmsg+0x198/0x2f0 [ 561.003608][T20590] ____sys_sendmsg+0xa4d/0xbe0 [ 561.003626][T20590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.003651][T20590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.003676][T20590] ? lock_acquire+0x1d1/0x380 [ 561.003698][T20590] ? get_pid_task+0x2a/0x250 [ 561.003726][T20590] ___sys_sendmsg+0x190/0x1e0 [ 561.003747][T20590] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.003767][T20590] ? get_pid_task+0x106/0x250 [ 561.003801][T20590] ? find_held_lock+0x2b/0x80 [ 561.003842][T20590] __sys_sendmsg+0x160/0x210 [ 561.003866][T20590] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.003904][T20590] do_syscall_64+0x123/0x790 [ 561.003924][T20590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.003944][T20590] RIP: 0033:0x7f8584d9e159 [ 561.003959][T20590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.003977][T20590] RSP: 002b:00007f8585cce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.003996][T20590] RAX: ffffffffffffffda RBX: 00007f8585025fa0 RCX: 00007f8584d9e159 [ 561.004008][T20590] RDX: 0000000000044000 RSI: 0000200000000180 RDI: 0000000000000003 [ 561.004020][T20590] RBP: 00007f8585cce090 R08: 0000000000000000 R09: 0000000000000000 [ 561.004031][T20590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.004042][T20590] R13: 00007f8585026038 R14: 00007f8585025fa0 R15: 00007ffdc5aef6e8 [ 561.004068][T20590] [ 561.142436][T20601] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4591'. [ 561.252874][T20604] netlink: 'syz.4.4591': attribute type 2 has an invalid length. [ 561.271285][T20607] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4593'. [ 561.271303][T20607] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4593'. [ 561.273544][ T5731] Bluetooth: hci3: ISO packet for unknown connection handle 1038 [ 561.463897][T20617] bridge0: port 1(netdevsim0) entered blocking state [ 561.467501][T20617] bridge0: port 1(netdevsim0) entered disabled state [ 561.467695][T20617] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 561.479255][T20617] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 561.480169][T20617] bridge0: port 1(netdevsim0) entered blocking state [ 561.480234][T20617] bridge0: port 1(netdevsim0) entered forwarding state [ 561.659841][T20630] ubi0: attaching mtd0 [ 561.679012][T20630] ubi0: scanning is finished [ 561.679156][T20630] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 561.768300][T20630] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 562.522126][T20660] IPVS: length: 27 != 8 [ 562.579530][T20661] netlink: 'syz.4.4612': attribute type 2 has an invalid length. [ 562.650486][T20665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 562.736396][T17676] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 562.876377][T17676] usb 7-1: device descriptor read/64, error -71 [ 562.909993][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910021][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.126251][T17676] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 563.263108][T20678] ubi0: attaching mtd0 [ 563.266278][T17676] usb 7-1: device descriptor read/64, error -71 [ 563.268162][T20678] ubi0: scanning is finished [ 563.268198][T20678] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 563.386851][T17676] usb usb7-port1: attempt power cycle [ 563.504435][T20678] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 563.726496][T17676] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 563.746948][T17676] usb 7-1: device descriptor read/8, error -71 [ 564.006321][T17676] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 564.027311][T17676] usb 7-1: device descriptor read/8, error -71 [ 564.061058][T20706] netlink: 'syz.6.4630': attribute type 30 has an invalid length. [ 564.061713][T20706] netlink: 'syz.6.4630': attribute type 30 has an invalid length. [ 564.064790][T20707] netlink: 'syz.6.4630': attribute type 30 has an invalid length. [ 564.065207][T20707] netlink: 'syz.6.4630': attribute type 30 has an invalid length. [ 564.147046][T17676] usb usb7-port1: unable to enumerate USB device [ 564.246012][T20719] __nla_validate_parse: 18 callbacks suppressed [ 564.246022][T20719] netlink: 67 bytes leftover after parsing attributes in process `syz.6.4633'. [ 564.270297][T20720] FAULT_INJECTION: forcing a failure. [ 564.270297][T20720] name failslab, interval 1, probability 0, space 0, times 0 [ 564.270322][T20720] CPU: 0 UID: 0 PID: 20720 Comm: syz.4.4634 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.270347][T20720] Tainted: [L]=SOFTLOCKUP [ 564.270355][T20720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 564.270366][T20720] Call Trace: [ 564.270373][T20720] [ 564.270381][T20720] dump_stack_lvl+0x100/0x190 [ 564.270409][T20720] should_fail_ex.cold+0x5/0xa [ 564.270436][T20720] should_failslab+0xc2/0x120 [ 564.270459][T20720] __kmalloc_noprof+0xfc/0x840 [ 564.270479][T20720] ? rcu_is_watching+0x13/0xc0 [ 564.270504][T20720] ? tomoyo_realpath_from_path+0xb6/0x690 [ 564.270531][T20720] tomoyo_realpath_from_path+0xb6/0x690 [ 564.270560][T20720] tomoyo_path_number_perm+0x23c/0x580 [ 564.270580][T20720] ? tomoyo_path_number_perm+0x22e/0x580 [ 564.270602][T20720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 564.270632][T20720] ? __lock_acquire+0x5c0/0x1f40 [ 564.270661][T20720] ? __fget_files+0x34/0x3d0 [ 564.270686][T20720] ? find_held_lock+0x2b/0x80 [ 564.270711][T20720] ? hook_file_ioctl_common+0x140/0x440 [ 564.270771][T20720] ? __fget_files+0x21f/0x3d0 [ 564.270798][T20720] security_file_ioctl+0xd3/0x230 [ 564.270820][T20720] __x64_sys_ioctl+0xb7/0x210 [ 564.270839][T20720] do_syscall_64+0x123/0x790 [ 564.270858][T20720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.270876][T20720] RIP: 0033:0x7f5a8bf9e159 [ 564.270890][T20720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.270907][T20720] RSP: 002b:00007f5a8ce0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.270925][T20720] RAX: ffffffffffffffda RBX: 00007f5a8c225fa0 RCX: 00007f5a8bf9e159 [ 564.270938][T20720] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 564.270956][T20720] RBP: 00007f5a8ce0c090 R08: 0000000000000000 R09: 0000000000000000 [ 564.270968][T20720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.270980][T20720] R13: 00007f5a8c226038 R14: 00007f5a8c225fa0 R15: 00007ffe2992ef58 [ 564.271006][T20720] [ 564.271013][T20720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 564.581689][T20734] ubi0: attaching mtd0 [ 564.607691][T20734] ubi0: scanning is finished [ 564.607780][T20734] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 564.718829][T20734] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 564.742519][ T43] kauditd_printk_skb: 246 callbacks suppressed [ 564.742537][ T43] audit: type=1400 audit(1790390760.901:14758): avc: denied { create } for pid=20743 comm="syz.4.4642" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 564.808264][ T43] audit: type=1400 audit(1790390760.971:14759): avc: denied { unmount } for pid=18237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 564.832816][ T43] audit: type=1400 audit(1790390760.991:14760): avc: denied { write } for pid=20746 comm="syz.6.4643" name="udmabuf" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 564.964076][ T43] audit: type=1400 audit(1790390761.121:14761): avc: denied { create } for pid=20749 comm="syz.6.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 564.965676][ T43] audit: type=1400 audit(1790390761.121:14762): avc: denied { ioctl } for pid=20749 comm="syz.6.4644" path="socket:[127172]" dev="sockfs" ino=127172 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 564.973336][ T43] audit: type=1400 audit(1790390761.131:14763): avc: denied { accept } for pid=20749 comm="syz.6.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 564.973826][ T43] audit: type=1400 audit(1790390761.131:14764): avc: denied { setopt } for pid=20749 comm="syz.6.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 565.114141][ T43] audit: type=1400 audit(1790390761.271:14765): avc: denied { create } for pid=20751 comm="syz.6.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.114769][ T43] audit: type=1400 audit(1790390761.271:14766): avc: denied { bind } for pid=20751 comm="syz.6.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.115108][ T43] audit: type=1400 audit(1790390761.271:14767): avc: denied { listen } for pid=20751 comm="syz.6.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.296262][ C1] net_ratelimit: 147 callbacks suppressed [ 565.427765][T20760] netlink: 67 bytes leftover after parsing attributes in process `syz.5.4648'. [ 565.536705][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 565.647964][T20773] NILFS (loop2): device size too small [ 565.832904][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4658'. [ 565.879206][T20790] ubi0: attaching mtd0 [ 565.890928][T20790] ubi0: scanning is finished [ 565.890976][T20790] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 565.960498][T20794] __vm_enough_memory: pid: 20794, comm: syz.5.4658, bytes: 11727541862400 not enough memory for the allocation [ 565.961152][T20794] __vm_enough_memory: pid: 20794, comm: syz.5.4658, bytes: 11727541862400 not enough memory for the allocation [ 566.008149][T20795] FAULT_INJECTION: forcing a failure. [ 566.008149][T20795] name failslab, interval 1, probability 0, space 0, times 0 [ 566.008181][T20795] CPU: 2 UID: 0 PID: 20795 Comm: syz.2.4659 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.008204][T20795] Tainted: [L]=SOFTLOCKUP [ 566.008211][T20795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.008221][T20795] Call Trace: [ 566.008228][T20795] [ 566.008236][T20795] dump_stack_lvl+0x100/0x190 [ 566.008266][T20795] should_fail_ex.cold+0x5/0xa [ 566.008304][T20795] should_failslab+0xc2/0x120 [ 566.008320][T20795] kmem_cache_alloc_noprof+0x92/0x6a0 [ 566.008333][T20795] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 566.008354][T20795] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 566.008377][T20795] mmu_topup_memory_caches+0x25/0x170 [ 566.008394][T20795] kvm_mmu_load+0xe8/0x2580 [ 566.008407][T20795] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 566.008425][T20795] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 566.008446][T20795] ? __pfx_kvm_mmu_load+0x10/0x10 [ 566.008458][T20795] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 566.008471][T20795] ? kvm_check_and_inject_events+0x896/0x1050 [ 566.008488][T20795] vcpu_run+0x395d/0x5e80 [ 566.008502][T20795] ? mark_held_locks+0x40/0x70 [ 566.008520][T20795] ? __pfx_vcpu_run+0x10/0x10 [ 566.008536][T20795] ? lock_acquire+0x1d1/0x380 [ 566.008548][T20795] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 566.008564][T20795] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 566.008581][T20795] ? __local_bh_enable_ip+0xa5/0x120 [ 566.008596][T20795] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 566.008614][T20795] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 566.008641][T20795] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 566.008663][T20795] ? lock_acquire+0x1d1/0x380 [ 566.008683][T20795] ? do_raw_write_lock+0x11e/0x260 [ 566.008705][T20795] ? find_held_lock+0x2b/0x80 [ 566.008729][T20795] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 566.008752][T20795] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 566.008782][T20795] kvm_vcpu_ioctl+0x730/0x1700 [ 566.008807][T20795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 566.008832][T20795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.008855][T20795] ? do_vfs_ioctl+0x226/0x13e0 [ 566.008875][T20795] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 566.008891][T20795] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 566.008917][T20795] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 566.008949][T20795] ? __fget_files+0x34/0x3d0 [ 566.008982][T20795] ? selinux_file_ioctl+0x13b/0x290 [ 566.009001][T20795] ? selinux_file_ioctl+0xb6/0x290 [ 566.009023][T20795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 566.009048][T20795] __x64_sys_ioctl+0x18e/0x210 [ 566.009069][T20795] do_syscall_64+0x123/0x790 [ 566.009088][T20795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.009107][T20795] RIP: 0033:0x7fa123d9e159 [ 566.009123][T20795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.009140][T20795] RSP: 002b:00007fa124c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.009158][T20795] RAX: ffffffffffffffda RBX: 00007fa124026090 RCX: 00007fa123d9e159 [ 566.009170][T20795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 566.009181][T20795] RBP: 00007fa124c66090 R08: 0000000000000000 R09: 0000000000000000 [ 566.009192][T20795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.009203][T20795] R13: 00007fa124026128 R14: 00007fa124026090 R15: 00007fffcce44a38 [ 566.009229][T20795] [ 566.058410][T20790] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 566.260299][T20802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4662'. [ 566.260320][T20802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4662'. [ 566.260332][T20802] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 566.328420][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 566.891897][T20826] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4669'. [ 567.038211][T20832] netlink: 'syz.5.4672': attribute type 1 has an invalid length. [ 567.295561][T20851] ubi0: attaching mtd0 [ 567.298107][T20850] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4678'. [ 567.303384][T20851] ubi0: scanning is finished [ 567.303417][T20851] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 567.392143][T20853] dlm: non-version read from control device 8192 [ 567.458099][T20851] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 567.669681][T20860] TCP: TCP_TX_DELAY enabled [ 567.785161][T20866] syzkaller0: entered promiscuous mode [ 567.785177][T20866] syzkaller0: entered allmulticast mode [ 567.849882][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4686'. [ 567.850244][T20868] netlink: 'syz.6.4686': attribute type 11 has an invalid length. [ 567.952447][T20871] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4687'. [ 568.045857][T20878] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 568.055307][T20879] overlayfs: failed to resolve './file1': -2 [ 568.060568][T20879] CacheFiles: Failed to register: -95 [ 568.119668][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 568.155284][T20893] Cannot find set identified by id 0 to match [ 568.158657][T20894] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 568.290860][T20901] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 568.291576][T20901] FAULT_INJECTION: forcing a failure. [ 568.291576][T20901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.291604][T20901] CPU: 3 UID: 0 PID: 20901 Comm: syz.6.4699 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.291629][T20901] Tainted: [L]=SOFTLOCKUP [ 568.291637][T20901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 568.291647][T20901] Call Trace: [ 568.291654][T20901] [ 568.291661][T20901] dump_stack_lvl+0x100/0x190 [ 568.291703][T20901] should_fail_ex.cold+0x5/0xa [ 568.291729][T20901] _copy_to_user+0x32/0xd0 [ 568.291758][T20901] simple_read_from_buffer+0xcb/0x170 [ 568.291785][T20901] proc_fail_nth_read+0x1af/0x230 [ 568.291810][T20901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.291834][T20901] ? rw_verify_area+0xce/0x6d0 [ 568.291866][T20901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.291887][T20901] vfs_read+0x1e4/0xb40 [ 568.291922][T20901] ? lock_acquire+0x1d1/0x380 [ 568.291942][T20901] ? __fget_files+0x34/0x3d0 [ 568.291965][T20901] ? __pfx_vfs_read+0x10/0x10 [ 568.291983][T20901] ? find_held_lock+0x2b/0x80 [ 568.292009][T20901] ? __fget_files+0x215/0x3d0 [ 568.292037][T20901] ? __fget_files+0x21f/0x3d0 [ 568.292067][T20901] ksys_read+0x12a/0x250 [ 568.292086][T20901] ? __pfx_ksys_read+0x10/0x10 [ 568.292113][T20901] do_syscall_64+0x123/0x790 [ 568.292139][T20901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.292156][T20901] RIP: 0033:0x7f1e5295e98e [ 568.292170][T20901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 568.292185][T20901] RSP: 002b:00007f1e53862fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.292203][T20901] RAX: ffffffffffffffda RBX: 00007f1e538636c0 RCX: 00007f1e5295e98e [ 568.292215][T20901] RDX: 000000000000000f RSI: 00007f1e538630a0 RDI: 0000000000000007 [ 568.292226][T20901] RBP: 00007f1e53863090 R08: 0000000000000000 R09: 0000000000000000 [ 568.292236][T20901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.292247][T20901] R13: 00007f1e52c26038 R14: 00007f1e52c25fa0 R15: 00007ffe305064f8 [ 568.292274][T20901] [ 568.456250][ T5876] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 568.480180][T20905] ubi0: attaching mtd0 [ 568.497911][T20905] ubi0: scanning is finished [ 568.498184][T20905] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 568.586233][ T5876] usb 10-1: device descriptor read/64, error -71 [ 568.826325][ T5876] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 568.908262][T20905] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 568.976247][ T5876] usb 10-1: device descriptor read/64, error -71 [ 569.098684][ T5876] usb usb10-port1: attempt power cycle [ 569.362620][T20924] __nla_validate_parse: 4 callbacks suppressed [ 569.362637][T20924] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4707'. [ 569.447684][ T5876] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 569.469948][ T5876] usb 10-1: device descriptor read/8, error -71 [ 569.706421][ T5876] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 569.727019][ T5876] usb 10-1: device descriptor read/8, error -71 [ 569.780090][ T43] kauditd_printk_skb: 192 callbacks suppressed [ 569.780099][ T43] audit: type=1400 audit(1790390765.941:14960): avc: denied { mount } for pid=20934 comm="syz.4.4712" name="/" dev="gadgetfs" ino=8474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 569.781482][ T43] audit: type=1400 audit(1790390765.941:14961): avc: denied { shutdown } for pid=20934 comm="syz.4.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.781883][ T43] audit: type=1400 audit(1790390765.941:14962): avc: denied { connect } for pid=20934 comm="syz.4.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.783981][ T43] audit: type=1400 audit(1790390765.941:14963): avc: denied { name_connect } for pid=20934 comm="syz.4.4712" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 569.785513][ T43] audit: type=1400 audit(1790390765.941:14964): avc: denied { setopt } for pid=20934 comm="syz.4.4712" lport=49342 faddr=::ffff:172.30.0.5 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.788704][ T43] audit: type=1400 audit(1790390765.951:14965): avc: denied { execmem } for pid=20934 comm="syz.4.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 569.789142][ T43] audit: type=1400 audit(1790390765.951:14966): avc: denied { mmap_zero } for pid=20934 comm="syz.4.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 569.796945][T20937] gadgetfs: bound to dummy_udc driver [ 569.846440][ T5876] usb usb10-port1: unable to enumerate USB device [ 570.014514][ T43] audit: type=1400 audit(1790390766.171:14967): avc: denied { read } for pid=20938 comm="syz.2.4713" name="v4l-subdev0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 570.014853][ T43] audit: type=1400 audit(1790390766.171:14968): avc: denied { open } for pid=20938 comm="syz.2.4713" path="/dev/v4l-subdev0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 570.017782][ T43] audit: type=1400 audit(1790390766.181:14969): avc: denied { create } for pid=20938 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 570.046476][ T851] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 570.046837][ C0] gadgetfs: connected [ 570.047022][ T851] gadgetfs: disconnected [ 570.120353][T20941] netlink: 'syz.2.4713': attribute type 10 has an invalid length. [ 570.177716][T20939] binder_alloc: binder_alloc_mmap_handler: 20938 200000ffe000-200001000000 already mapped failed -16 [ 570.207124][ C0] gadgetfs: connected [ 570.210082][ T851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 570.210497][ T851] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 570.210548][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.222092][ C0] gadgetfs: configuration #1 [ 570.328251][T20946] netlink: 'syz.2.4715': attribute type 1 has an invalid length. [ 570.349982][T20949] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4716'. [ 570.360280][T20946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.377734][T20946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20946 comm=syz.2.4715 [ 570.377818][T20946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=20946 comm=syz.2.4715 [ 570.377838][T20946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20946 comm=syz.2.4715 [ 570.386383][T20946] macvlan2: entered promiscuous mode [ 570.386392][T20946] macvlan2: entered allmulticast mode [ 570.411025][T20946] bond4: (slave ip6gretap1): making interface the new active one [ 570.411776][T20946] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 570.496260][ C1] net_ratelimit: 125 callbacks suppressed [ 570.539034][T20934] gadgetfs: suspended from state 3 [ 570.539203][T20934] gadgetfs: disconnected [ 570.539347][ T851] usb 5-1: can't set config #1, error -71 [ 570.548057][ T851] usb 5-1: USB disconnect, device number 6 [ 570.581980][T20952] kvm: pic: non byte write [ 570.643777][T20965] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4722'. [ 570.683221][T20966] batman_adv: batadv0: Adding interface: macvtap0 [ 570.683232][T20966] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.683434][T20966] batman_adv: batadv0: Interface activated: macvtap0 [ 571.031434][T20988] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4725'. [ 571.150871][T20997] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4727'. [ 571.252566][T21004] jffs2: notice: (21004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 571.472178][T21020] gadgetfs: bound to dummy_udc driver [ 571.495295][T21022] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4734'. [ 571.693784][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4736'. [ 571.693797][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4736'. [ 571.726241][ T2094] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 571.726445][ C3] gadgetfs: connected [ 571.726685][ T2094] gadgetfs: disconnected [ 571.753478][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4739'. [ 571.785170][T21035] FAULT_INJECTION: forcing a failure. [ 571.785170][T21035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.785191][T21035] CPU: 2 UID: 0 PID: 21035 Comm: syz.4.4740 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.785207][T21035] Tainted: [L]=SOFTLOCKUP [ 571.785212][T21035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 571.785219][T21035] Call Trace: [ 571.785223][T21035] [ 571.785234][T21035] dump_stack_lvl+0x100/0x190 [ 571.785255][T21035] should_fail_ex.cold+0x5/0xa [ 571.785271][T21035] _copy_from_user+0x2e/0xd0 [ 571.785290][T21035] copy_msghdr_from_user+0x9f/0x4c0 [ 571.785304][T21035] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 571.785318][T21035] ? _kstrtoull+0x144/0x200 [ 571.785333][T21035] ? __pfx__kstrtoull+0x10/0x10 [ 571.785351][T21035] ___sys_sendmsg+0x106/0x1e0 [ 571.785364][T21035] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.785381][T21035] ? __fget_files+0x34/0x3d0 [ 571.785408][T21035] __sys_sendmmsg+0x20c/0x440 [ 571.785432][T21035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 571.785452][T21035] ? ksys_write+0x190/0x250 [ 571.785490][T21035] ? fput+0x7c/0x100 [ 571.785514][T21035] ? ksys_write+0x1ac/0x250 [ 571.785533][T21035] ? __pfx_ksys_write+0x10/0x10 [ 571.785553][T21035] __x64_sys_sendmmsg+0x9c/0x100 [ 571.785572][T21035] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.785595][T21035] do_syscall_64+0x123/0x790 [ 571.785610][T21035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.785625][T21035] RIP: 0033:0x7f5a8bf9e159 [ 571.785638][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.785672][T21035] RSP: 002b:00007f5a8ce0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 571.785687][T21035] RAX: ffffffffffffffda RBX: 00007f5a8c225fa0 RCX: 00007f5a8bf9e159 [ 571.785697][T21035] RDX: 0000000000000001 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 571.785706][T21035] RBP: 00007f5a8ce0c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.785714][T21035] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 571.785723][T21035] R13: 00007f5a8c226038 R14: 00007f5a8c225fa0 R15: 00007ffe2992ef58 [ 571.785744][T21035] [ 571.807055][T21036] syz.5.4739: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 571.807127][T21036] CPU: 2 UID: 0 PID: 21036 Comm: syz.5.4739 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.807142][T21036] Tainted: [L]=SOFTLOCKUP [ 571.807147][T21036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 571.807154][T21036] Call Trace: [ 571.807158][T21036] [ 571.807163][T21036] dump_stack_lvl+0x100/0x190 [ 571.807185][T21036] warn_alloc.cold+0x9e/0xb2 [ 571.807198][T21036] ? __pfx_warn_alloc+0x10/0x10 [ 571.807209][T21036] ? __kasan_kmalloc+0xaa/0xb0 [ 571.807223][T21036] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 571.807249][T21036] ? xskq_create+0x52/0x290 [ 571.807265][T21036] ? do_sock_setsockopt+0xf3/0x1d0 [ 571.807285][T21036] ? do_syscall_64+0x123/0x790 [ 571.807296][T21036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.807314][T21036] ? xsk_setsockopt+0x56f/0xab0 [ 571.807330][T21036] __vmalloc_node_range_noprof+0x123b/0x1420 [ 571.807354][T21036] ? xsk_setsockopt+0x56f/0xab0 [ 571.807373][T21036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.807389][T21036] ? kasan_save_track+0x14/0x30 [ 571.807403][T21036] ? __kasan_kmalloc+0xaa/0xb0 [ 571.807417][T21036] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 571.807436][T21036] ? xskq_create+0x52/0x290 [ 571.807453][T21036] ? xsk_setsockopt+0x56f/0xab0 [ 571.807469][T21036] xskq_create+0x18f/0x290 [ 571.807484][T21036] ? xsk_setsockopt+0x56f/0xab0 [ 571.807501][T21036] xsk_setsockopt+0x56f/0xab0 [ 571.807516][T21036] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.807531][T21036] ? find_held_lock+0x2b/0x80 [ 571.807547][T21036] ? __fget_files+0x215/0x3d0 [ 571.807564][T21036] ? selinux_socket_setsockopt+0x6a/0x80 [ 571.807578][T21036] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.807594][T21036] do_sock_setsockopt+0xf3/0x1d0 [ 571.807612][T21036] __sys_setsockopt+0x195/0x220 [ 571.807631][T21036] __x64_sys_setsockopt+0xbd/0x160 [ 571.807645][T21036] ? do_syscall_64+0xae/0x790 [ 571.807655][T21036] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.807673][T21036] do_syscall_64+0x123/0x790 [ 571.807685][T21036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.807697][T21036] RIP: 0033:0x7f8584d9e159 [ 571.807708][T21036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.807720][T21036] RSP: 002b:00007f8585cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.807731][T21036] RAX: ffffffffffffffda RBX: 00007f8585026090 RCX: 00007f8584d9e159 [ 571.807742][T21036] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 571.807749][T21036] RBP: 00007f8584e3506b R08: 0000000000000004 R09: 0000000000000000 [ 571.807756][T21036] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.807763][T21036] R13: 00007f8585026128 R14: 00007f8585026090 R15: 00007ffdc5aef6e8 [ 571.807778][T21036] [ 571.807783][T21036] Mem-Info: [ 571.807789][T21036] active_anon:25 inactive_anon:15372 isolated_anon:0 [ 571.807789][T21036] active_file:22260 inactive_file:18765 isolated_file:0 [ 571.807789][T21036] unevictable:2024 dirty:630 writeback:0 [ 571.807789][T21036] slab_reclaimable:8508 slab_unreclaimable:76855 [ 571.807789][T21036] mapped:29206 shmem:6457 pagetables:2279 [ 571.807789][T21036] sec_pagetables:320 bounce:0 [ 571.807789][T21036] kernel_misc_reclaimable:0 [ 571.807789][T21036] free:418088 free_pcp:12165 free_cma:0 [ 571.807816][T21036] Node 0 active_anon:100kB inactive_anon:61420kB active_file:88752kB inactive_file:75060kB unevictable:6096kB isolated(anon):0kB isolated(file):0kB mapped:88032kB dirty:2520kB writeback:0kB shmem:23824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16672kB pagetables:8840kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.807845][T21036] Node 1 active_anon:0kB inactive_anon:68kB active_file:288kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28792kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.807873][T21036] Node 0 DMA free:14212kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 571.807907][T21036] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 571.807928][T21036] Node 0 DMA32 free:144912kB boost:4096kB min:31452kB low:38288kB high:45124kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100kB inactive_anon:61416kB active_file:88752kB inactive_file:75060kB unevictable:6096kB writepending:2520kB zspages:0kB present:2080628kB managed:1253160kB mlocked:0kB bounce:0kB free_pcp:45000kB local_pcp:4164kB free_cma:0kB [ 571.807962][T21036] lowmem_reserve[]: 0 0 0 0 0 [ 571.807982][T21036] Node 1 Normal free:1513228kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:68kB active_file:288kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3612kB local_pcp:1260kB free_cma:0kB [ 571.808078][T21036] lowmem_reserve[]: 0 0 0 0 0 [ 571.808109][T21036] Node 0 DMA: 61*4kB (U) 48*8kB (U) 37*16kB (U) 22*32kB (U) 16*64kB (U) 10*128kB (U) 7*256kB (U) 4*512kB (U) 0*1024kB 3*2048kB (U) 0*4096kB = 14212kB [ 571.808244][T21036] Node 0 DMA32: 286*4kB (UME) 549*8kB (UME) 741*16kB (UE) 838*32kB (UE) 190*64kB (UME) 39*128kB (UME) 40*256kB (UM) 41*512kB (UM) 33*1024kB (UM) 7*2048kB (M) 1*4096kB (U) = 144816kB [ 571.808406][T21036] Node 1 Normal: 146*4kB (UM) 167*8kB (U) 87*16kB (UM) 189*32kB (UM) 140*64kB (UM) 93*128kB (UM) 35*256kB (UM) 13*512kB (UM) 7*1024kB (UM) 9*2048kB (UM) 352*4096kB (U) = 1513232kB [ 571.808526][T21036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.808535][T21036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.808544][T21036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.808552][T21036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.808561][T21036] 47510 total pagecache pages [ 571.808565][T21036] 1 pages in swap cache [ 571.808569][T21036] Free swap = 124960kB [ 571.808574][T21036] Total swap = 124996kB [ 571.808578][T21036] 1048443 pages RAM [ 571.808582][T21036] 0 pages HighMem/MovableOnly [ 571.808586][T21036] 285843 pages reserved [ 571.808590][T21036] 0 pages cma reserved [ 571.814187][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4739'. [ 571.886496][ C3] gadgetfs: connected [ 571.887405][ T2094] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 571.888069][ T2094] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 571.888101][ T2094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.893504][ C3] gadgetfs: configuration #1 [ 572.255945][T21012] gadgetfs: suspended from state 3 [ 572.256072][T21012] gadgetfs: disconnected [ 572.258014][ T2094] usb 5-1: can't set config #1, error -71 [ 572.288020][ T2094] usb 5-1: USB disconnect, device number 7 [ 572.413000][ T5876] kernel write not supported for file bpf-map (pid: 5876 comm: kworker/1:5) [ 572.468569][T21059] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 572.487368][T21064] key id 000004d2 not found [ 572.533937][T21066] NILFS (loop2): device size too small [ 572.736371][ T5876] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 572.906238][ T5876] usb 10-1: Using ep0 maxpacket: 8 [ 572.906795][ T5876] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 572.907632][ T5876] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 572.907646][ T5876] usb 10-1: config 0 has no interface number 0 [ 572.907665][ T5876] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.907677][ T5876] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 572.907691][ T5876] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 572.907703][ T5876] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 572.907716][ T5876] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.915115][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.915131][ T5876] usb 10-1: Product: syz [ 572.915144][ T5876] usb 10-1: Manufacturer: syz [ 572.915156][ T5876] usb 10-1: SerialNumber: syz [ 572.920130][ T5876] usb 10-1: config 0 descriptor?? [ 572.975432][T21092] gadgetfs: bound to dummy_udc driver [ 573.125476][ T5876] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 573.236325][ T50] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 573.236578][ C1] gadgetfs: connected [ 573.238340][ T50] gadgetfs: disconnected [ 573.340927][ T5876] usb 10-1: USB disconnect, device number 7 [ 573.396734][ C1] gadgetfs: connected [ 573.402676][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 573.403111][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 573.403165][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.406084][ C1] gadgetfs: configuration #1 [ 573.727053][T21089] gadgetfs: suspended from state 3 [ 573.727236][T21089] gadgetfs: disconnected [ 573.727320][ T50] usb 5-1: can't set config #1, error -71 [ 573.732570][ T50] usb 5-1: USB disconnect, device number 8 [ 573.904774][T21104] NILFS (loop2): device size too small [ 573.971018][T21115] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 573.973630][T21116] tipc: Started in network mode [ 573.973645][T21116] tipc: Node identity 1000001, cluster identity 4369 [ 573.973656][T21116] tipc: Node number set to 16777217 [ 573.974117][T21116] tipc: Cannot configure node identity twice [ 573.975562][T21116] tipc: New replicast peer: 127.0.0.1 [ 573.981697][T21116] tipc: Enabled bearer , priority 10 [ 574.103122][T21121] ubi0: attaching mtd0 [ 574.113285][T21121] ubi0: scanning is finished [ 574.113343][T21121] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 574.356033][T21121] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 574.455814][T21139] __nla_validate_parse: 6 callbacks suppressed [ 574.455828][T21139] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4773'. [ 574.455841][T21139] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4773'. [ 574.455859][T21139] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 574.484787][T21140] gadgetfs: bound to dummy_udc driver [ 574.503155][T21142] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 574.535106][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 574.736324][ T1477] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 574.736576][ C2] gadgetfs: connected [ 574.736778][ T1477] gadgetfs: disconnected [ 574.828098][ T43] kauditd_printk_skb: 277 callbacks suppressed [ 574.828113][ T43] audit: type=1400 audit(1790390771.987:15247): avc: denied { read write } for pid=21153 comm="syz.5.4782" name="video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 574.830852][ T43] audit: type=1400 audit(1790390771.987:15248): avc: denied { open } for pid=21153 comm="syz.5.4782" path="/dev/video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 574.830900][ T43] audit: type=1400 audit(1790390771.987:15249): avc: denied { create } for pid=21154 comm="syz.2.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 574.830937][ T43] audit: type=1400 audit(1790390771.987:15250): avc: denied { ioctl } for pid=21153 comm="syz.5.4782" path="/dev/video36" dev="devtmpfs" ino=1064 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 574.840188][ T43] audit: type=1400 audit(1790390771.987:15251): avc: denied { read } for pid=21153 comm="syz.5.4782" dev="nsfs" ino=4026533018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 574.840236][ T43] audit: type=1400 audit(1790390771.987:15252): avc: denied { open } for pid=21153 comm="syz.5.4782" path="net:[4026533018]" dev="nsfs" ino=4026533018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 574.840274][ T43] audit: type=1400 audit(1790390771.987:15253): avc: denied { create } for pid=21153 comm="syz.5.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.840310][ T43] audit: type=1400 audit(1790390771.987:15254): avc: denied { write } for pid=21154 comm="syz.2.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 574.840347][ T43] audit: type=1400 audit(1790390771.987:15255): avc: denied { nlmsg_write } for pid=21154 comm="syz.2.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 574.849973][ T43] audit: type=1400 audit(1790390771.997:15256): avc: denied { mount } for pid=21153 comm="syz.5.4782" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 574.889356][T21159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4784'. [ 574.896956][ C2] gadgetfs: connected [ 574.898165][ T1477] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 574.898568][ T1477] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 574.898625][ T1477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.901799][ C2] gadgetfs: configuration #1 [ 575.215146][T21131] gadgetfs: suspended from state 3 [ 575.215607][ T1477] usb 5-1: can't set config #1, error -71 [ 575.218177][T21131] gadgetfs: disconnected [ 575.221704][ T1477] usb 5-1: USB disconnect, device number 9 [ 575.517166][T21175] netlink: 'syz.5.4791': attribute type 178 has an invalid length. [ 575.517456][T21175] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 575.617404][T21178] ubi0: attaching mtd0 [ 575.626896][T21178] ubi0: scanning is finished [ 575.632043][T21178] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 575.696214][ C2] net_ratelimit: 139 callbacks suppressed [ 575.737735][T21178] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 576.155083][T21193] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm ata_id: iget: checksum invalid [ 576.201063][T21197] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm scsi_id: iget: checksum invalid [ 576.242714][T21198] gadgetfs: bound to dummy_udc driver [ 576.476446][T11998] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 576.476646][ C3] gadgetfs: connected [ 576.476779][T11998] gadgetfs: disconnected [ 576.626465][ C3] gadgetfs: connected [ 576.627644][T11998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 576.627944][T11998] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 576.627977][T11998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.631399][ C3] gadgetfs: configuration #1 [ 576.765835][T21224] ubi0: attaching mtd0 [ 576.775113][T21224] ubi0: scanning is finished [ 576.775143][T21224] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 576.859808][T21226] loop7: detected capacity change from 0 to 7 [ 576.888615][T21224] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 576.912041][ T31] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912061][ T31] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912320][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912388][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912431][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912446][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912467][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912481][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912550][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912566][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912594][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912609][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912630][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912643][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912700][T21226] ldm_validate_partition_table(): Disk read failed. [ 576.912721][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912734][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912755][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912768][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912789][T21226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.912803][T21226] Buffer I/O error on dev loop7, logical block 0, async page read [ 576.912874][T21226] Dev loop7: unable to read RDB block 0 [ 576.912933][T21226] loop7: unable to read partition table [ 576.913083][T21226] loop7: partition table beyond EOD, truncated [ 576.913107][T21226] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 576.973782][T21194] gadgetfs: suspended from state 3 [ 576.973840][T21194] gadgetfs: disconnected [ 576.974209][T11998] usb 5-1: can't set config #1, error -71 [ 576.988729][T11998] usb 5-1: USB disconnect, device number 10 [ 577.124339][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4808'. [ 577.124385][T21231] IPv6: Can't replace route, no match found [ 577.173187][T21240] netlink: 'syz.4.4812': attribute type 9 has an invalid length. [ 577.173204][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4812'. [ 577.594001][T21269] gadgetfs: bound to dummy_udc driver [ 577.705199][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4824'. [ 577.705222][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4824'. [ 577.777618][T21280] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 577.826727][T17676] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 577.827431][ C0] gadgetfs: connected [ 577.827784][T17676] gadgetfs: disconnected [ 577.830215][T21283] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4826'. [ 577.830235][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4826'. [ 577.977036][ C0] gadgetfs: connected [ 577.978197][T17676] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 577.978565][T17676] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 577.978615][T17676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.982495][ C0] gadgetfs: configuration #1 [ 578.302601][T21291] ubi0: attaching mtd0 [ 578.312914][T21291] ubi0: scanning is finished [ 578.312993][T21291] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 578.332141][T21262] gadgetfs: suspended from state 3 [ 578.332353][T21262] gadgetfs: disconnected [ 578.332957][T17676] usb 5-1: can't set config #1, error -71 [ 578.343435][T17676] usb 5-1: USB disconnect, device number 11 [ 578.471775][T21291] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 578.472020][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 578.563508][T21302] comedi comedi4: bad chanlist[1]=0x0000000c chan=12 range length=2 [ 578.663887][T21305] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm ata_id: iget: checksum invalid [ 578.682757][T21307] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 578.698620][T21308] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm scsi_id: iget: checksum invalid [ 578.758957][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 578.769449][T21311] FAULT_INJECTION: forcing a failure. [ 578.769449][T21311] name failslab, interval 1, probability 0, space 0, times 0 [ 578.776319][T21311] CPU: 3 UID: 0 PID: 21311 Comm: syz.5.4835 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.776348][T21311] Tainted: [L]=SOFTLOCKUP [ 578.776355][T21311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.776366][T21311] Call Trace: [ 578.776373][T21311] [ 578.776381][T21311] dump_stack_lvl+0x100/0x190 [ 578.776412][T21311] should_fail_ex.cold+0x5/0xa [ 578.776435][T21311] should_failslab+0xc2/0x120 [ 578.776470][T21311] __kmalloc_noprof+0xfc/0x840 [ 578.776489][T21311] ? rcu_is_watching+0x13/0xc0 [ 578.776514][T21311] ? tomoyo_realpath_from_path+0xb6/0x690 [ 578.776544][T21311] tomoyo_realpath_from_path+0xb6/0x690 [ 578.776575][T21311] tomoyo_path_number_perm+0x23c/0x580 [ 578.776595][T21311] ? tomoyo_path_number_perm+0x22e/0x580 [ 578.776617][T21311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.776649][T21311] ? __lock_acquire+0x5c0/0x1f40 [ 578.776682][T21311] ? __fget_files+0x34/0x3d0 [ 578.776706][T21311] ? find_held_lock+0x2b/0x80 [ 578.776732][T21311] ? hook_file_ioctl_common+0x140/0x440 [ 578.776765][T21311] ? __fget_files+0x21f/0x3d0 [ 578.776793][T21311] security_file_ioctl+0xd3/0x230 [ 578.776816][T21311] __x64_sys_ioctl+0xb7/0x210 [ 578.776839][T21311] do_syscall_64+0x123/0x790 [ 578.776866][T21311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.776887][T21311] RIP: 0033:0x7f8584d9e159 [ 578.776903][T21311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.776922][T21311] RSP: 002b:00007f8585cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.776942][T21311] RAX: ffffffffffffffda RBX: 00007f8585025fa0 RCX: 00007f8584d9e159 [ 578.776955][T21311] RDX: 0000200000000440 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 578.776968][T21311] RBP: 00007f8585cce090 R08: 0000000000000000 R09: 0000000000000000 [ 578.776980][T21311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.776991][T21311] R13: 00007f8585026038 R14: 00007f8585025fa0 R15: 00007ffdc5aef6e8 [ 578.777016][T21311] [ 578.777024][T21311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.734133][T21349] ubi0: attaching mtd0 [ 579.743935][T21349] ubi0: scanning is finished [ 579.743965][T21349] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 579.809234][T21349] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 579.998970][ T43] kauditd_printk_skb: 228 callbacks suppressed [ 579.998984][ T43] audit: type=1400 audit(1790390777.157:15485): avc: denied { create } for pid=21353 comm="syz.5.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.003645][ T43] audit: type=1400 audit(1790390777.157:15486): avc: denied { write } for pid=21353 comm="syz.5.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.004455][ T43] audit: type=1400 audit(1790390777.157:15487): avc: denied { read } for pid=21353 comm="syz.5.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.006113][ T43] audit: type=1400 audit(1790390777.157:15488): avc: denied { setopt } for pid=21353 comm="syz.5.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 580.007994][ T43] audit: type=1400 audit(1790390777.167:15489): avc: denied { ioctl } for pid=21353 comm="syz.5.4849" path="socket:[129707]" dev="sockfs" ino=129707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 580.008102][ T43] audit: type=1400 audit(1790390777.167:15490): avc: denied { write } for pid=21353 comm="syz.5.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 580.111330][ T43] audit: type=1400 audit(1790390777.267:15491): avc: denied { write } for pid=21357 comm="syz.5.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.118911][ T43] audit: type=1400 audit(1790390777.267:15492): avc: denied { read } for pid=21357 comm="syz.5.4851" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 580.118958][ T43] audit: type=1400 audit(1790390777.267:15493): avc: denied { open } for pid=21357 comm="syz.5.4851" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 580.118998][ T43] audit: type=1400 audit(1790390777.277:15494): avc: denied { ioctl } for pid=21357 comm="syz.5.4851" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 580.358693][T21375] __nla_validate_parse: 2 callbacks suppressed [ 580.358707][T21375] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4858'. [ 580.358719][T21375] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4858'. [ 580.358730][T21375] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 580.463121][T21377] tipc: Enabled bearer , priority 0 [ 580.464528][T21377] syzkaller0: MTU too low for tipc bearer [ 580.464537][T21377] tipc: Disabling bearer [ 580.525582][T21381] netlink: 'syz.4.4861': attribute type 1 has an invalid length. [ 580.555636][T21370] smpboot: CPU 1 is now offline [ 580.629969][T21381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.681994][T21382] macvlan2: entered promiscuous mode [ 580.682004][T21382] macvlan2: entered allmulticast mode [ 580.743500][T21370] smpboot: CPU 3 is now offline [ 580.748144][ T1162] net_ratelimit: 89 callbacks suppressed [ 580.805708][T21381] bond3: (slave ip6gretap1): making interface the new active one [ 580.819934][T21381] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 581.144409][T21400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.144595][T21400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.266852][T21402] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.267246][T21402] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.396924][T21409] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.397329][T21409] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 581.474825][T21411] ubi0: attaching mtd0 [ 581.515469][T21411] ubi0: scanning is finished [ 581.515552][T21411] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 581.660044][T21411] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 581.849227][ T5731] Bluetooth: min 0 < 6 [ 581.940893][T21426] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4874'. [ 581.940905][T21426] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4874'. [ 581.940972][T21426] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 582.178905][T21434] NILFS (loop2): device size too small [ 582.245418][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4879'. [ 582.492112][T21444] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 582.661005][T21449] vlan0: left promiscuous mode [ 582.664928][T21449] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4885'. [ 583.094141][T21472] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4891'. [ 583.094154][T21472] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4891'. [ 583.094162][T21472] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 583.115005][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 583.391564][T21475] device-mapper: ioctl: Invalid ioctl structure: name m@", dev f800 [ 583.432506][ T5731] Bluetooth: min 0 < 6 [ 583.812216][T21494] NILFS (loop2): device size too small [ 583.856758][ T5731] Bluetooth: hci3: command tx timeout [ 584.017013][ C0] tipc: RX(1000001): key[1] is activated [ 584.185381][T21511] comedi comedi4: bad chanlist[1]=0x0000000c chan=12 range length=2 [ 584.284956][T21518] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4909'. [ 584.284975][T21518] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4909'. [ 584.284988][T21518] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 584.361983][T21519] program syz.2.4908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.010128][ T43] kauditd_printk_skb: 221 callbacks suppressed [ 585.010140][ T43] audit: type=1400 audit(1790390782.167:15716): avc: denied { read write } for pid=21522 comm="syz.5.4911" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 585.010519][ T43] audit: type=1400 audit(1790390782.167:15717): avc: denied { open } for pid=21522 comm="syz.5.4911" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 585.014423][ T43] audit: type=1400 audit(1790390782.167:15718): avc: denied { create } for pid=21522 comm="syz.5.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 585.015960][ T43] audit: type=1400 audit(1790390782.167:15719): avc: denied { bind } for pid=21522 comm="syz.5.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 585.031032][ T43] audit: type=1400 audit(1790390782.167:15720): avc: denied { name_bind } for pid=21522 comm="syz.5.4911" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 585.031074][ T43] audit: type=1400 audit(1790390782.187:15721): avc: denied { node_bind } for pid=21522 comm="syz.5.4911" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 585.089028][ T43] audit: type=1400 audit(1790390782.237:15722): avc: denied { write } for pid=21522 comm="syz.5.4911" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 585.089092][ T43] audit: type=1400 audit(1790390782.237:15723): avc: denied { connect } for pid=21522 comm="syz.5.4911" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 585.116094][ T43] audit: type=1400 audit(1790390782.267:15724): avc: denied { create } for pid=21526 comm="syz.4.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 585.133694][ T43] audit: type=1400 audit(1790390782.287:15725): avc: denied { write } for pid=21526 comm="syz.4.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 585.315350][T21537] jffs2: notice: (21537) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 585.429170][T21544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4919'. [ 585.429205][T21544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4919'. [ 585.429215][T21544] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 585.451786][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 585.936249][ C0] net_ratelimit: 126 callbacks suppressed [ 586.194704][T21562] xt_policy: output policy not valid in PREROUTING and INPUT [ 586.226505][ T5731] Bluetooth: min 0 < 6 [ 586.459331][T21578] NILFS (loop2): device size too small [ 586.544173][T21582] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4932'. [ 586.544195][T21582] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4932'. [ 586.544208][T21582] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 586.568013][T21584] jffs2: notice: (21584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 587.214238][T21613] ubi0: attaching mtd0 [ 587.299483][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 587.301605][T21613] ubi0: scanning is finished [ 587.303129][T21613] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 587.409416][T21624] jffs2: notice: (21624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 587.443970][T21613] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 587.557138][T21629] jffs2: notice: (21629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 587.692231][T21636] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4951'. [ 587.692246][T21636] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4951'. [ 587.692253][T21636] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 587.701217][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 588.004914][T21644] jffs2: notice: (21644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 588.125822][T21651] jffs2: notice: (21651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 588.155942][T21653] key id 000004d2 not found [ 588.256323][ T5731] Bluetooth: hci3: command tx timeout [ 588.396414][ T25] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 588.486583][T21668] ubi0: attaching mtd0 [ 588.494407][T21668] ubi0: scanning is finished [ 588.494459][T21668] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 588.515030][T21670] jffs2: notice: (21670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 588.557061][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 588.559366][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 588.560516][ T25] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 588.560530][ T25] usb 7-1: config 0 has no interface number 0 [ 588.560550][ T25] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.560562][ T25] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 588.560578][ T25] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 588.560592][ T25] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 588.560607][ T25] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.563244][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.563256][ T25] usb 7-1: Product: syz [ 588.563265][ T25] usb 7-1: Manufacturer: syz [ 588.563273][ T25] usb 7-1: SerialNumber: syz [ 588.643143][ T25] usb 7-1: config 0 descriptor?? [ 588.647957][T21668] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 588.724807][T21676] jffs2: notice: (21676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 588.810267][T21679] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4968'. [ 588.810280][T21679] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4968'. [ 588.810287][T21679] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 588.811092][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 588.856872][ T25] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 589.065340][T17676] usb 7-1: USB disconnect, device number 40 [ 589.348942][T21698] jffs2: notice: (21698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 589.587365][T21716] ubi0: attaching mtd0 [ 589.644651][T21716] ubi0: scanning is finished [ 589.644702][T21716] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 589.763851][T21716] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 589.844695][T21722] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4986'. [ 589.844712][T21722] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4986'. [ 589.844723][T21722] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 589.907370][T21719] gadgetfs: bound to dummy_udc driver [ 590.139226][T21727] jffs2: notice: (21727) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 590.146379][ T851] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 590.146679][ C0] gadgetfs: connected [ 590.148014][ T851] gadgetfs: disconnected [ 590.215338][ T43] kauditd_printk_skb: 171 callbacks suppressed [ 590.215345][ T43] audit: type=1400 audit(1790390787.367:15897): avc: denied { bind } for pid=21729 comm="syz.5.4989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 590.215772][ T43] audit: type=1400 audit(1790390787.367:15898): avc: denied { write } for pid=21729 comm="syz.5.4989" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 590.240323][ T43] audit: type=1400 audit(1790390787.397:15899): avc: denied { unmount } for pid=14407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 590.279419][T21732] jffs2: notice: (21732) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 590.438888][ T43] audit: type=1400 audit(1790390787.597:15900): avc: denied { mount } for pid=21743 comm="syz.4.4995" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 590.440941][ T43] audit: type=1400 audit(1790390787.597:15901): avc: denied { read append } for pid=21743 comm="syz.4.4995" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.441120][ T43] audit: type=1400 audit(1790390787.597:15902): avc: denied { open } for pid=21743 comm="syz.4.4995" path="/431/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.454686][ T43] audit: type=1400 audit(1790390787.607:15903): avc: denied { write } for pid=14407 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.454729][ T43] audit: type=1400 audit(1790390787.607:15904): avc: denied { ioctl } for pid=14407 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.488182][ T43] audit: type=1400 audit(1790390787.637:15905): avc: denied { read } for pid=21747 comm="syz.2.4997" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 590.488215][ T43] audit: type=1400 audit(1790390787.637:15906): avc: denied { open } for pid=21747 comm="syz.2.4997" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 590.525710][T21750] jffs2: notice: (21750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 590.699706][T21759] jffs2: notice: (21759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 590.881268][T21765] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm ata_id: iget: checksum invalid [ 590.910410][T21766] kvm: pic: non byte write [ 590.921958][T21769] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1692: comm scsi_id: iget: checksum invalid [ 590.940439][T21770] ubi0: attaching mtd0 [ 590.968297][T21770] ubi0: scanning is finished [ 590.968349][T21770] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 591.056640][ C0] net_ratelimit: 119 callbacks suppressed [ 591.088574][T21770] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 591.319634][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 591.478492][T21781] jffs2: notice: (21781) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 591.590725][T21786] jffs2: notice: (21786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 592.140381][T21800] loop0: detected capacity change from 0 to 4096 [ 592.215368][T21800] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 592.215393][T21800] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 592.215442][T21800] loop0: [ 592.481931][T21811] gadgetfs: bound to dummy_udc driver [ 592.608282][T21813] netlink: 'syz.5.5021': attribute type 1 has an invalid length. [ 592.709896][ T5731] Bluetooth: hci2: adv larger than maximum supported [ 592.709906][ T5731] Bluetooth: hci2: Malformed LE Event: 0x0d [ 592.720309][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 592.723047][ C0] gadgetfs: connected [ 592.728223][ T9] gadgetfs: disconnected [ 592.876532][ C0] gadgetfs: connected [ 592.879371][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 592.879752][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 592.879809][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.927551][ C0] gadgetfs: configuration #1 [ 592.941857][T21821] ubi0: attaching mtd0 [ 592.969229][T21821] ubi0: scanning is finished [ 592.969259][T21821] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 593.037951][T21821] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 593.225769][T21806] gadgetfs: suspended from state 3 [ 593.226059][ T9] usb 5-1: can't set config #1, error -71 [ 593.230095][T21806] gadgetfs: disconnected [ 593.239090][ T9] usb 5-1: USB disconnect, device number 13 [ 593.380446][T21829] jffs2: notice: (21829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 593.581676][T21839] netlink: 'syz.5.5032': attribute type 1 has an invalid length. [ 593.861936][T21841] kvm: pic: non byte write [ 593.905717][T21849] gadgetfs: bound to dummy_udc driver [ 594.166317][ T5877] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 594.166521][ C2] gadgetfs: connected [ 594.166667][ T5877] gadgetfs: disconnected [ 594.265668][T21857] jffs2: notice: (21857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 594.326504][ C2] gadgetfs: connected [ 594.327628][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 594.327983][ T5877] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 594.328031][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.351444][ C2] gadgetfs: configuration #1 [ 594.487922][T21867] ubi0: attaching mtd0 [ 594.499446][T21867] ubi0: scanning is finished [ 594.499475][T21867] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 594.618937][T21845] gadgetfs: suspended from state 3 [ 594.619230][T21845] gadgetfs: disconnected [ 594.620969][ T5877] usb 5-1: can't set config #1, error -71 [ 594.628332][ T5877] usb 5-1: USB disconnect, device number 14 [ 594.648684][T21867] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 595.078252][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.092789][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.100228][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.101368][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.102175][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.227863][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 595.227882][ T43] audit: type=1400 audit(1790390792.397:15968): avc: denied { ioctl } for pid=18237 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 595.288681][ T43] audit: type=1400 audit(1790390792.447:15969): avc: denied { read } for pid=21883 comm="syz.6.5049" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 595.307515][ T43] audit: type=1400 audit(1790390792.447:15970): avc: denied { open } for pid=21883 comm="syz.6.5049" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 595.433432][ T43] audit: type=1400 audit(1790390792.587:15971): avc: denied { prog_load } for pid=21887 comm="syz.5.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 595.445958][ T43] audit: type=1400 audit(1790390792.597:15972): avc: denied { bpf } for pid=21887 comm="syz.5.5050" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.446018][ T43] audit: type=1400 audit(1790390792.597:15973): avc: denied { perfmon } for pid=21887 comm="syz.5.5050" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.455394][ T43] audit: type=1400 audit(1790390792.607:15974): avc: denied { prog_run } for pid=21887 comm="syz.5.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 595.492549][ T43] audit: type=1400 audit(1790390792.647:15975): avc: denied { module_request } for pid=21878 comm="syz-executor" kmod="rose2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 595.508779][ T43] audit: type=1400 audit(1790390792.667:15976): avc: denied { node_bind } for pid=21887 comm="syz.5.5050" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 595.635596][ T43] audit: type=1400 audit(1790390792.787:15977): avc: denied { map_create } for pid=21893 comm="syz.4.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 595.844754][T21903] gadgetfs: bound to dummy_udc driver [ 596.096842][ T25] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 596.097101][ C2] gadgetfs: connected [ 596.097317][ T25] gadgetfs: disconnected [ 596.114094][ T5084] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 596.130868][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.159628][T21909] ubi0: attaching mtd0 [ 596.179394][ T1162] net_ratelimit: 129 callbacks suppressed [ 596.184243][T21909] ubi0: scanning is finished [ 596.184290][T21909] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 596.246776][ C2] gadgetfs: connected [ 596.249581][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 596.249947][ T25] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 596.249999][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.265736][ C2] gadgetfs: configuration #1 [ 596.348074][T21909] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 596.376124][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.522769][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.609306][T21898] gadgetfs: suspended from state 3 [ 596.609583][ T25] usb 5-1: can't set config #1, error -71 [ 596.611831][T21898] gadgetfs: disconnected [ 596.650069][ T25] usb 5-1: USB disconnect, device number 15 [ 596.795700][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.955294][T21925] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5063'. [ 597.133980][T21878] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.134022][T21878] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.134100][T21878] bridge_slave_0: entered allmulticast mode [ 597.145984][T21878] bridge_slave_0: entered promiscuous mode [ 597.153380][T21878] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.153443][T21878] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.153528][T21878] bridge_slave_1: entered allmulticast mode [ 597.160663][T21937] netlink: 'syz.6.5063': attribute type 2 has an invalid length. [ 597.168450][T21878] bridge_slave_1: entered promiscuous mode [ 597.216271][ T5084] Bluetooth: hci4: command tx timeout [ 597.285292][T21878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.289566][T21878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.399814][T21878] team0: Port device team_slave_0 added [ 597.413511][T21878] team0: Port device team_slave_1 added [ 597.500269][ T13] tipc: Resetting bearer [ 597.576473][ T13] tipc: Disabling bearer [ 597.604351][ T13] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 597.666968][ T13] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 597.705457][T21941] jffs2: notice: (21941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 597.829866][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5069'. [ 597.918525][ T13] bond0 (unregistering): Released all slaves [ 597.956916][ T13] bond1 (unregistering): Released all slaves [ 598.077544][ T13] bond2 (unregistering): Released all slaves [ 598.103182][ T13] bond3 (unregistering): Released all slaves [ 598.138437][ T13] bond4 (unregistering): Released all slaves [ 598.168639][T21878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.168645][T21878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.168659][T21878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.281612][T21878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.281622][T21878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.281642][T21878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.310242][ T13] tipc: Disabling bearer [ 598.310307][ T13] tipc: Left network mode [ 598.344972][ T13] IPVS: stopping master sync thread 21142 ... [ 598.725846][T21878] hsr_slave_0: entered promiscuous mode [ 598.729651][T21878] hsr_slave_1: entered promiscuous mode [ 598.730103][T21878] debugfs: 'hsr0' already exists in 'hsr' [ 598.730113][T21878] Cannot create hsr debugfs directory [ 598.965042][T21964] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5077'. [ 599.010023][T21965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 599.010284][T21965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 599.052117][T21968] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 599.052316][T21968] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 599.070092][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 599.070102][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 599.118528][T21971] netlink: 'syz.5.5077': attribute type 2 has an invalid length. [ 599.305085][ T5731] Bluetooth: hci4: command tx timeout [ 599.546531][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'. [ 599.721707][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 599.982853][T21989] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 599.983100][T21989] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 600.123987][T21992] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 600.124332][T21992] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 600.163474][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 600.253847][T21998] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 600.261807][T21998] EXT4-fs error (device sda1): ext4_lookup:1787: inode #268: comm dhcpcd-run-hook: iget: checksum invalid [ 600.284956][ T43] kauditd_printk_skb: 132 callbacks suppressed [ 600.284968][ T43] audit: type=1400 audit(1790390797.447:16110): avc: denied { mounton } for pid=21993 comm="syz.5.5084" path="/212/gadget" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 600.284994][ T43] audit: type=1400 audit(1790390797.447:16111): avc: denied { mount } for pid=21993 comm="syz.5.5084" name="/" dev="gadgetfs" ino=8474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 600.768117][ T43] audit: type=1400 audit(1790390797.927:16112): avc: denied { create } for pid=22006 comm="syz.4.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.775428][ T43] audit: type=1400 audit(1790390797.927:16113): avc: denied { setopt } for pid=22006 comm="syz.4.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.775812][ T43] audit: type=1400 audit(1790390797.927:16114): avc: denied { bind } for pid=22006 comm="syz.4.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.810098][ T43] audit: type=1400 audit(1790390797.967:16115): avc: denied { write } for pid=22006 comm="syz.4.5090" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.816480][ T5731] Bluetooth: hci2: command 0x0406 tx timeout [ 600.839808][ T43] audit: type=1400 audit(1790390797.997:16116): avc: denied { map_create } for pid=22008 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.840047][ T43] audit: type=1400 audit(1790390797.997:16117): avc: denied { map_read map_write } for pid=22008 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.841220][ T43] audit: type=1400 audit(1790390797.997:16118): avc: denied { prog_load } for pid=22008 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.848196][ T43] audit: type=1400 audit(1790390798.017:16119): avc: denied { prog_run } for pid=22008 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.890019][T22009] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5091'. [ 601.076716][T22009] netlink: 'syz.6.5091': attribute type 2 has an invalid length. [ 601.235667][T22018] ubi0: attaching mtd0 [ 601.273086][T22018] ubi0: scanning is finished [ 601.273136][T22018] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 601.284925][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5093'. [ 601.360781][T21878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 601.369759][T22018] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 601.376343][ T5084] Bluetooth: hci4: command tx timeout [ 601.392559][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.394605][T21878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 601.418389][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.420175][T21878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 601.440383][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.441394][T21878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 601.478426][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.536323][ C0] net_ratelimit: 84 callbacks suppressed [ 601.638331][T21878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.663115][T21878] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.675424][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.675511][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.690701][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.690784][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.321832][T21878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.452888][T21878] veth0_vlan: entered promiscuous mode [ 602.472890][T21878] veth1_vlan: entered promiscuous mode [ 602.561784][T21878] veth0_macvtap: entered promiscuous mode [ 602.572122][T21878] veth1_macvtap: entered promiscuous mode [ 602.611749][T21878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.629257][T21878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.645911][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.645949][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.645975][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.645994][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.785020][T22057] IPVS: length: 18 != 8 [ 602.880928][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5105'. [ 602.895662][T19559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.895677][T19559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.960487][T19559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.960498][T19559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.103652][T22073] jffs2: notice: (22073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 603.456555][ T5084] Bluetooth: hci4: command tx timeout [ 604.063622][T22106] FAULT_INJECTION: forcing a failure. [ 604.063622][T22106] name fail_futex, interval 1, probability 0, space 0, times 0 [ 604.063653][T22106] CPU: 2 UID: 0 PID: 22106 Comm: syz.2.5119 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.063679][T22106] Tainted: [L]=SOFTLOCKUP [ 604.063686][T22106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.063698][T22106] Call Trace: [ 604.063705][T22106] [ 604.063713][T22106] dump_stack_lvl+0x100/0x190 [ 604.063748][T22106] should_fail_ex.cold+0x5/0xa [ 604.063778][T22106] get_futex_key+0x1d0/0x14f0 [ 604.063807][T22106] ? __pfx_get_futex_key+0x10/0x10 [ 604.063832][T22106] ? copy_pid_ns+0xae9/0x10a0 [ 604.063857][T22106] ? find_held_lock+0x2b/0x80 [ 604.063887][T22106] ? find_held_lock+0x2b/0x80 [ 604.063915][T22106] ? look_up_lock_class+0x64/0x120 [ 604.063950][T22106] futex_wake+0xf4/0x5e0 [ 604.063972][T22106] ? __pfx_futex_wake+0x10/0x10 [ 604.063993][T22106] ? __pfx_perf_event_namespaces+0x10/0x10 [ 604.064028][T22106] do_futex+0x2b2/0x440 [ 604.064055][T22106] ? __pfx_do_futex+0x10/0x10 [ 604.064084][T22106] ? do_raw_spin_unlock+0x145/0x1e0 [ 604.064113][T22106] __x64_sys_futex+0x34f/0x4d0 [ 604.064143][T22106] ? __pfx___x64_sys_futex+0x10/0x10 [ 604.064180][T22106] do_syscall_64+0x123/0x790 [ 604.064201][T22106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.064229][T22106] RIP: 0033:0x7ffb6799e159 [ 604.064245][T22106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.064265][T22106] RSP: 002b:00007ffb688840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 604.064286][T22106] RAX: ffffffffffffffda RBX: 00007ffb67c25fa8 RCX: 00007ffb6799e159 [ 604.064300][T22106] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb67c25fac [ 604.064314][T22106] RBP: 00007ffb67c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 604.064326][T22106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.064339][T22106] R13: 00007ffb67c26038 R14: 00007fff635e9e30 R15: 00007fff635e9f18 [ 604.064366][T22106] [ 604.083678][T22108] jffs2: notice: (22108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. ** 786 printk messages dropped ** ** 93 printk messages dropped ** ** 107 printk messages dropped ** ** 177 printk messages dropped ** ** 129 printk messages dropped ** [ 604.593332][T22132] jffs2: notice: (22132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 604.935985][T22140] netlink: 'syz.6.5134': attribute type 11 has an invalid length. [ 604.935999][T22140] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5134'. [ 605.246426][T22147] ubi0: attaching mtd0 [ 605.277407][T22147] ubi0: scanning is finished [ 605.277436][T22147] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 605.398290][T22147] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 605.589631][T22153] NILFS (loop2): device size too small [ 605.625616][T22158] jffs2: notice: (22158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 605.862024][ T5084] Bluetooth: min 0 < 6 [ 605.868662][ T43] kauditd_printk_skb: 150 callbacks suppressed [ 605.868671][ T43] audit: type=1400 audit(1790390803.027:16270): avc: denied { create } for pid=22166 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.895781][ T43] audit: type=1400 audit(1790390803.047:16271): avc: denied { write } for pid=22166 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.895807][ T43] audit: type=1400 audit(1790390803.047:16272): avc: denied { read } for pid=22166 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.913747][ T43] audit: type=1400 audit(1790390803.067:16273): avc: denied { map_read map_write } for pid=22166 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 605.992874][ T43] audit: type=1400 audit(1790390803.147:16274): avc: denied { create } for pid=22166 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.007438][ T43] audit: type=1400 audit(1790390803.167:16275): avc: denied { connect } for pid=22166 comm="syz.5.5144" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.014579][ T43] audit: type=1400 audit(1790390803.167:16276): avc: denied { ioctl } for pid=22166 comm="syz.5.5144" path="socket:[136048]" dev="sockfs" ino=136048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 606.033827][ T43] audit: type=1400 audit(1790390803.187:16277): avc: denied { create } for pid=22160 comm="syz.4.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 606.042295][ T43] audit: type=1400 audit(1790390803.197:16278): avc: denied { bind } for pid=22160 comm="syz.4.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 606.042520][ T43] audit: type=1400 audit(1790390803.197:16279): avc: denied { name_bind } for pid=22160 comm="syz.4.5141" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 606.655345][T22174] ubi0: attaching mtd0 [ 606.678072][T22174] ubi0: scanning is finished [ 606.678128][T22174] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 606.737013][T22032] net_ratelimit: 402 callbacks suppressed [ 606.975180][T22181] jffs2: notice: (22181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 607.369529][T22174] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 607.917151][T22211] jffs2: notice: (22211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 607.936882][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 607.968768][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 608.037680][T22217] ubi0: attaching mtd0 [ 608.075526][T22217] ubi0: scanning is finished [ 608.075556][T22217] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 608.171103][T22217] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 608.487979][T22241] jffs2: notice: (22241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 608.860500][T22228] Console: switching to colour dummy device 80x25 [ 608.922939][T22259] ubi0: attaching mtd0 [ 608.991103][ T5084] Bluetooth: min 0 < 6 [ 609.033032][T22259] ubi0: scanning is finished [ 609.033060][T22259] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 609.173559][T22259] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 609.220714][T22230] syz.2.5167 (22230): drop_caches: 1 [ 609.361378][T22266] NILFS (loop2): device size too small [ 609.464767][T22228] ------------[ cut here ]------------ [ 609.464781][T22228] Memory manager not clean during takedown. [ 609.464789][T22228] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#2: syz.6.5166/22228 [ 609.473600][T22228] Modules linked in: [ 609.475758][T22228] CPU: 2 UID: 0 PID: 22228 Comm: syz.6.5166 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.475910][T22269] FAULT_INJECTION: forcing a failure. [ 609.475910][T22269] name failslab, interval 1, probability 0, space 0, times 0 [ 609.475939][T22269] CPU: 0 UID: 0 PID: 22269 Comm: syz.4.5179 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.475959][T22269] Tainted: [L]=SOFTLOCKUP [ 609.475964][T22269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.475973][T22269] Call Trace: [ 609.475978][T22269] [ 609.475983][T22269] dump_stack_lvl+0x100/0x190 [ 609.476015][T22269] should_fail_ex.cold+0x5/0xa [ 609.476043][T22269] should_failslab+0xc2/0x120 [ 609.476065][T22269] __kmalloc_cache_noprof+0x91/0x6d0 [ 609.476088][T22269] ? pty_common_install+0x10e/0xb30 [ 609.476114][T22269] pty_common_install+0x10e/0xb30 [ 609.476162][T22269] ? __pfx_pty_unix98_install+0x10/0x10 [ 609.476181][T22269] tty_init_dev.part.0+0x9e/0x470 [ 609.476211][T22269] tty_init_dev+0x60/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 609.476244][T22269] ? __pfx_ptmx_open+0x10/0x10 [ 609.476261][T22269] ptmx_open+0x128/0x360 [ 609.476282][T22269] ? __pfx_ptmx_open+0x10/0x10 [ 609.476298][T22269] chrdev_open+0x234/0x6a0 [ 609.476323][T22269] ? __pfx_chrdev_open+0x10/0x10 [ 609.476348][T22269] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 609.476383][T22269] do_dentry_open+0x6ab/0x14d0 [ 609.476398][T22269] ? __pfx_chrdev_open+0x10/0x10 [ 609.476427][T22269] vfs_open+0x82/0x3f0 [ 609.476456][T22269] path_openat+0x19fa/0x2440 [ 609.476484][T22269] ? __pfx_path_openat+0x10/0x10 [ 609.476512][T22269] do_file_open+0x20e/0x430 [ 609.476536][T22269] ? __pfx_do_file_open+0x10/0x10 [ 609.476580][T22269] ? _raw_spin_unlock+0x28/0x50 [ 609.476606][T22269] ? alloc_fd+0x471/0x7a0 [ 609.476632][T22269] do_sys_openat2+0x10f/0x1e0 [ 609.476657][T22269] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.476694][T22269] __x64_sys_openat+0x12d/0x210 [ 609.476721][T22269] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.476753][T22269] do_syscall_64+0x123/0x790 [ 609.476774][T22269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.476794][T22269] RIP: 0033:0x7f5a8bf9e159 [ 609.476811][T22269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.476827][T22269] RSP: 002b:00007f5a8ce0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.476842][T22269] RAX: ffffffffffffffda RBX: 00007f5a8c225fa0 RCX: 00007f5a8bf9e159 [ 609.476856][T22269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 609.476869][T22269] RBP: 00007f5a8c03506b R08: 0000000000000000 R09: 0000000000000000 [ 609.476881][T22269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.476891][T22269] R13: 00007f5a8c226038 R14: 00007f5a8c225fa0 R15: 00007ffe2992ef58 [ 609.476918][T22269] [ 609.592724][T22228] Tainted: [L]=SOFTLOCKUP [ 609.594528][T22228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.598989][T22228] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 609.601283][T22228] Code: 8b 43 38 48 39 c5 75 16 e8 6b 0f 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 ca 63 01 06 e8 55 0f 38 fc 48 8d 3d ee 98 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 b4 65 8e 48 ba 00 00 00 00 00 fc ff df [ 609.609330][T22228] RSP: 0018:ffffc90005d1f798 EFLAGS: 00010287 [ 609.611812][T22228] RAX: 000000000004cd78 RBX: ffff888027c4d068 RCX: ffffc9002f26f000 [ 609.615084][T22228] RDX: 0000000000080000 RSI: ffffffff85d4235b RDI: ffffffff9150bc50 [ 609.618391][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 609.621657][T22228] RBP: ffff888027c4d0a0 R08: 0000000000000007 R09: 0000000000000000 [ 609.624852][T22228] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888027972a00 [ 609.628367][T22228] R13: ffff888027972a18 R14: ffffffff85d2f5a0 R15: 0000000000000000 [ 609.631528][T22228] FS: 00007f1e538636c0(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000 [ 609.635114][T22228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.637791][T22228] CR2: 00007f5a8cdeaff8 CR3: 000000005ac52000 CR4: 0000000000352ef0 [ 609.640949][T22228] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 609.644120][T22228] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 609.647342][T22228] Call Trace: [ 609.648721][T22228] [ 609.649929][T22228] ? __pfx_drm_gem_init_release+0x10/0x10 [ 609.652268][T22228] drm_managed_release+0x1bb/0x540 [ 609.654383][T22228] ? __pfx_virtio_gpu_release+0x10/0x10 [ 609.656739][T22228] drm_dev_put.part.0+0xca/0x140 [ 609.658794][T22228] drm_dev_put+0x1f/0x30 [ 609.660638][T22228] virtio_dev_remove+0xb8/0x170 [ 609.662682][T22228] ? __pfx_virtio_dev_remove+0x10/0x10 [ 609.664942][T22228] device_remove+0xcb/0x180 [ 609.666857][T22228] device_release_driver_internal+0x44e/0x620 [ 609.669349][T22228] bus_remove_device+0x2bc/0x560 [ 609.671381][T22228] ? __pfx_bus_remove_device+0x10/0x10 [ 609.673642][T22228] ? __pfx_device_remove_attrs+0x10/0x10 [ 609.675958][T22228] device_del+0x376/0x9b0 [ 609.677842][T22228] ? __pfx_device_del+0x10/0x10 [ 609.679914][T22228] ? __pfx___might_resched+0x10/0x10 [ 609.681843][ T5875] usb 9-1: USB disconnect, device number 10 [ 609.684656][T22228] device_unregister+0x1d/0xe0 [ 609.686711][T22228] unregister_virtio_device+0x39/0x60 [ 609.688880][T22228] virtio_pci_remove+0x7c/0x110 [ 609.690977][T22228] pci_device_remove+0xb2/0x1d0 [ 609.692925][T22228] ? __pfx_pci_device_remove+0x10/0x10 [ 609.695179][T22228] device_remove+0xcb/0x180 [ 609.697233][T22228] device_release_driver_internal+0x44e/0x620 [ 609.699748][T22228] pci_stop_bus_device+0x120/0x160 [ 609.701768][T22228] pci_stop_and_remove_bus_device+0x58/0xa0 [ 609.704201][T22228] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 609.706905][T22228] remove_store+0x123/0x140 [ 609.708606][T22228] ? __pfx_remove_store+0x10/0x10 [ 609.710658][T22228] ? find_held_lock+0x2b/0x80 [ 609.712555][T22228] ? sysfs_file_kobj+0xe4/0x290 [ 609.714631][T22228] ? sysfs_file_kobj+0xe4/0x290 [ 609.716677][T22228] ? __pfx_remove_store+0x10/0x10 [ 609.718737][T22228] dev_attr_store+0x58/0x80 [ 609.720587][T22228] ? __pfx_dev_attr_store+0x10/0x10 [ 609.722665][T22228] sysfs_kf_write+0xf2/0x150 [ 609.724965][T22228] kernfs_fop_write_iter+0x3e0/0x5f0 [ 609.727560][T22228] ? __pfx_sysfs_kf_write+0x10/0x10 [ 609.729628][T22228] vfs_write+0x6af/0x1050 [ 609.731377][T22228] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 609.733698][T22228] ? __pfx_vfs_write+0x10/0x10 [ 609.738222][T22228] ? find_held_lock+0x2b/0x80 [ 609.740147][T22228] ksys_write+0x12a/0x250 [ 609.741884][T22228] ? __pfx_ksys_write+0x10/0x10 [ 609.743826][T22228] do_syscall_64+0x123/0x790 [ 609.745788][T22228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.748270][T22228] RIP: 0033:0x7f1e5299e159 [ 609.750051][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.757792][T22228] RSP: 002b:00007f1e53863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.761170][T22228] RAX: ffffffffffffffda RBX: 00007f1e52c25fa0 RCX: 00007f1e5299e159 [ 609.764292][T22228] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 609.767494][T22228] RBP: 00007f1e52a3506b R08: 0000000000000000 R09: 0000000000000000 [ 609.770588][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.773684][T22228] R13: 00007f1e52c26038 R14: 00007f1e52c25fa0 R15: 00007ffe305064f8 [ 609.777024][T22228] [ 609.778309][T22228] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.781150][T22228] CPU: 2 UID: 0 PID: 22228 Comm: syz.6.5166 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.785427][T22228] Tainted: [L]=SOFTLOCKUP [ 609.787143][T22228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.791062][T22228] Call Trace: [ 609.792413][T22228] [ 609.793618][T22228] dump_stack_lvl+0x100/0x190 [ 609.795500][T22228] vpanic+0x553/0x970 [ 609.797112][T22228] ? __pfx_vpanic+0x10/0x10 [ 609.798945][T22228] panic+0xd1/0xe0 [ 609.800456][T22228] ? __pfx_panic+0x10/0x10 [ 609.802224][T22228] check_panic_on_warn.cold+0x19/0x34 [ 609.804352][T22228] ? drm_mm_takedown+0x62/0x280 [ 609.806372][T22228] __warn.cold+0x191/0x318 [ 609.808215][T22228] __report_bug+0x30f/0x440 [ 609.810076][T22228] ? drm_mm_takedown+0x62/0x280 [ 609.812098][T22228] ? __pfx___report_bug+0x10/0x10 [ 609.814151][T22228] ? device_remove+0xcb/0x180 [ 609.816066][T22228] ? device_release_driver_internal+0x44e/0x620 [ 609.818589][T22228] ? pci_stop_bus_device+0x120/0x160 [ 609.820683][T22228] ? drm_mm_takedown+0x5b/0x280 [ 609.822703][T22228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.825136][T22228] report_bug_entry+0xe2/0x290 [ 609.827122][T22228] ? drm_mm_takedown+0x62/0x280 [ 609.829091][T22228] handle_bug+0x1cd/0x2a0 [ 609.830873][T22228] exc_invalid_op+0x17/0x50 [ 609.832681][T22228] asm_exc_invalid_op+0x1a/0x20 [ 609.834664][T22228] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 609.836867][T22228] Code: 8b 43 38 48 39 c5 75 16 e8 6b 0f 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 ca 63 01 06 e8 55 0f 38 fc 48 8d 3d ee 98 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 b4 65 8e 48 ba 00 00 00 00 00 fc ff df [ 609.844421][T22228] RSP: 0018:ffffc90005d1f798 EFLAGS: 00010287 [ 609.846889][T22228] RAX: 000000000004cd78 RBX: ffff888027c4d068 RCX: ffffc9002f26f000 [ 609.850051][T22228] RDX: 0000000000080000 RSI: ffffffff85d4235b RDI: ffffffff9150bc50 [ 609.853153][T22228] RBP: ffff888027c4d0a0 R08: 0000000000000007 R09: 0000000000000000 [ 609.856317][T22228] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888027972a00 [ 609.859409][T22228] R13: ffff888027972a18 R14: ffffffff85d2f5a0 R15: 0000000000000000 [ 609.862526][T22228] ? __pfx_drm_gem_init_release+0x10/0x10 [ 609.864818][T22228] ? drm_mm_takedown+0x5b/0x280 [ 609.866789][T22228] ? drm_mm_takedown+0x5b/0x280 [ 609.868765][T22228] ? __pfx_drm_gem_init_release+0x10/0x10 [ 609.871004][T22228] drm_managed_release+0x1bb/0x540 [ 609.873075][T22228] ? __pfx_virtio_gpu_release+0x10/0x10 [ 609.875291][T22228] drm_dev_put.part.0+0xca/0x140 [ 609.877260][T22228] drm_dev_put+0x1f/0x30 [ 609.878971][T22228] virtio_dev_remove+0xb8/0x170 [ 609.880922][T22228] ? __pfx_virtio_dev_remove+0x10/0x10 [ 609.883146][T22228] device_remove+0xcb/0x180 [ 609.885011][T22228] device_release_driver_internal+0x44e/0x620 [ 609.887442][T22228] bus_remove_device+0x2bc/0x560 [ 609.889473][T22228] ? __pfx_bus_remove_device+0x10/0x10 [ 609.891633][T22228] ? __pfx_device_remove_attrs+0x10/0x10 [ 609.893884][T22228] device_del+0x376/0x9b0 [ 609.895616][T22228] ? __pfx_device_del+0x10/0x10 [ 609.897572][T22228] ? __pfx___might_resched+0x10/0x10 [ 609.899669][T22228] device_unregister+0x1d/0xe0 [ 609.901568][T22228] unregister_virtio_device+0x39/0x60 [ 609.903790][T22228] virtio_pci_remove+0x7c/0x110 [ 609.905737][T22228] pci_device_remove+0xb2/0x1d0 [ 609.907714][T22228] ? __pfx_pci_device_remove+0x10/0x10 [ 609.909809][T22228] device_remove+0xcb/0x180 [ 609.911647][T22228] device_release_driver_internal+0x44e/0x620 [ 609.914054][T22228] pci_stop_bus_device+0x120/0x160 [ 609.916123][T22228] pci_stop_and_remove_bus_device+0x58/0xa0 [ 609.918488][T22228] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 609.921055][T22228] remove_store+0x123/0x140 [ 609.922937][T22228] ? __pfx_remove_store+0x10/0x10 [ 609.924983][T22228] ? find_held_lock+0x2b/0x80 [ 609.926886][T22228] ? sysfs_file_kobj+0xe4/0x290 [ 609.928810][T22228] ? sysfs_file_kobj+0xe4/0x290 [ 609.930782][T22228] ? __pfx_remove_store+0x10/0x10 [ 609.932772][T22228] dev_attr_store+0x58/0x80 [ 609.934563][T22228] ? __pfx_dev_attr_store+0x10/0x10 [ 609.936626][T22228] sysfs_kf_write+0xf2/0x150 [ 609.938435][T22228] kernfs_fop_write_iter+0x3e0/0x5f0 [ 609.940542][T22228] ? __pfx_sysfs_kf_write+0x10/0x10 [ 609.942639][T22228] vfs_write+0x6af/0x1050 [ 609.944412][T22228] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 609.946770][T22228] ? __pfx_vfs_write+0x10/0x10 [ 609.948661][T22228] ? find_held_lock+0x2b/0x80 [ 609.950585][T22228] ksys_write+0x12a/0x250 [ 609.952320][T22228] ? __pfx_ksys_write+0x10/0x10 [ 609.954283][T22228] do_syscall_64+0x123/0x790 [ 609.956137][T22228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.958506][T22228] RIP: 0033:0x7f1e5299e159 [ 609.960338][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.967819][T22228] RSP: 002b:00007f1e53863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.971165][T22228] RAX: ffffffffffffffda RBX: 00007f1e52c25fa0 RCX: 00007f1e5299e159 [ 609.974294][T22228] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 609.977328][T22228] RBP: 00007f1e52a3506b R08: 0000000000000000 R09: 0000000000000000 [ 609.980397][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.983531][T22228] R13: 00007f1e52c26038 R14: 00007f1e52c25fa0 R15: 00007ffe305064f8 [ 609.986661][T22228] [ 609.988646][T22228] Kernel Offset: disabled [ 609.990383][T22228] Rebooting in 86400 seconds..