last executing test programs: 3m37.461816693s ago: executing program 0 (id=1224): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0xfffffe9b) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) socket$inet6(0xa, 0x5, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x48080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xfffffffffffffffe, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, r5, 0xffffffffffffffff, 0x8000, '\x00', 0x6, 0x7, 0x80002, 0x3, {0x1, 0x80006}, {0x4000000000006, 0x45}, {0x1fffffe, 0x9}, {0x9, 0xa00}, 0x2, 0x7, 0xfff, 0xf}}}}) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x386f, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000840)={&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000900)=""/210, 0xd2}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000000c0)}], 0x8, &(0x7f0000000800)=""/25, 0x19}, 0xc74e3e6e8b2392ce) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000001300)=""/4096) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3m37.358779766s ago: executing program 0 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m37.357199221s ago: executing program 0 (id=1227): r0 = syz_open_dev$video(&(0x7f0000000040), 0x2000000000008, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x0, {0xd84, 0x6, 0x7, 0xe7}}) 3m37.281407463s ago: executing program 0 (id=1228): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {0x0, 0x0, 0x2}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x1000000000000000, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x521c, 0x1, 0x61, 0x0, 0x18) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(r3, 0x0, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x7, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000001, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xc, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0xdbf, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x200003, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0x15) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 3m37.104616963s ago: executing program 0 (id=1237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x4, 0x800000, 0x2, {0x77359400}, {0x0, 0x0, 0xfe, 0x0, 0xff, 0xfb}, 0x0, 0x2, {0x0}, 0x500000, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x44000) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@rand_addr=0x64010101, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x880000, 0x2, 0x0, 0x4, 0xe5}, [@lifetime_val={0x24, 0x9, {0x2, 0xfffffffffffffff8, 0x6, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'cbcmac(aes)\x00'}}}]}, 0x160}}, 0x24004000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001040)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{}, 0x2, 0x51, 0xff, 0x5, 0xe, 'syz0\x00', "de5dc2d3150708711d3ee2876d9c1e2bad991a362733d4b14f632c0c95c95438", "49a6c53a07602855e93ce3eb31e3f802e4cffd3e4c72a1c1eb3d4a4e1c03b0f1", [{0x9, 0xf, {0x2, 0xfffffffc}}, {0xe2, 0x29, {0x2, 0x8}}, {0x40, 0x9, {0x1, 0x8}}, {0x1c8b, 0x4, {0x3, 0xa9}}, {0x6d58, 0x91}, {0x0, 0xc, {0x0, 0x9}}, {0x7, 0xf, {0x0, 0x8000}}, {0x8, 0x5, {0x2, 0x6}}, {0x40, 0x5, {0x3, 0x2}}, {0x100, 0x3, {0x1, 0x1}}, {0x88, 0x0, {0x3, 0xb7d8}}, {0x800, 0x9, {0x1, 0xede}}, {0x0, 0x95, {0x1, 0x8}}, {0x7ff, 0x4, {0x3}}, {0x800, 0x5, {0x0, 0x10000}}, {0x1, 0x4, {0x0, 0x7}}, {0xc6, 0xd, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x2}}, {0x6, 0x2, {0x2, 0x852}}, {0x8, 0x2a92, {0x1, 0xe781}}, {0x6, 0x4, {0x3, 0x2}}, {0x1, 0x7fff, {0x1, 0x8000}}, {0x7ff, 0x8, {0x1, 0x1ff}}, {0x0, 0x2, {0x1, 0xfffffffc}}, {0x4, 0x44fa, {0x3, 0x3}}, {0x5, 0xc6, {0x3, 0x80d6}}, {0x5, 0x8, {0x3, 0x4}}, {0x2, 0x3ff, {0x0, 0x6}}, {0x5, 0x8, {0x1, 0x1}}, {0x400, 0xfff, {0x2, 0x7f}}, {0x7, 0x5, {0x0, 0x9}}, {0x3, 0x0, {0x3, 0x5}}, {0x6507, 0xff7f, {0x1, 0x4486}}, {0x6}, {0x400, 0x8, {0x0, 0x7}}, {0xdb, 0x6, {0x2, 0x323}}, {0x433, 0x3, {0x3}}, {0x9a9, 0x0, {0x2, 0x5}}, {0x1, 0x1, {0x0, 0x800}}, {0x1, 0x4, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0xbbe}, 0xb8, 0x0, 0x6, 0x5, 0x8, 'syz0\x00', "4e1462b2193c36e2c2b6f4e97832faa15f3e40bf11d0d633cb9f8f189d39f0d0", "d85378d245651b6807441c748a1d42f176dc6fefc2a6c448ff0c49086766fcec", [{0x7cc7, 0xe7be, {0x1, 0x5}}, {0xc312, 0x145, {0x3, 0x5}}, {0x4, 0x4, {0x3, 0x600}}, {0xff, 0x9, {0x3, 0x4}}, {0x9, 0x401, {0x3, 0x2}}, {0x7, 0x9, {0x3, 0x2}}, {0x2, 0x4, {0x1, 0x100}}, {0xd, 0x8911, {0x2, 0x6}}, {0xe, 0x401, {0x2, 0x4}}, {0x2, 0x8, {0x3, 0x400}}, {0x5, 0x7, {0x2, 0x7fff}}, {0x8, 0x4, {0x0, 0x4}}, {0x9, 0xa, {0x0, 0x6}}, {0x9, 0x2, {0x1, 0x100}}, {0x8, 0x80, {0x1, 0x4}}, {0x8, 0x6, {0x0, 0x4}}, {0x1285, 0x7fff, {0x3, 0x10001}}, {0xbfc9, 0x5, {0x3, 0x800}}, {0x327, 0x40, {0x0, 0x7}}, {0x1ff, 0xe, {0x0, 0x800}}, {0x1000, 0xfff, {0x0, 0x6}}, {0x1be, 0x2, {0x2, 0x8000}}, {0x400, 0x8001, {0x0, 0x2}}, {0x3, 0xcf5d, {0x1, 0x51e0}}, {0x81, 0x9f49, {0x2, 0xffffffff}}, {0x7f, 0x8, {0x0, 0xfffffff7}}, {0xfff2, 0x1, {0x3, 0x2933}}, {0x7, 0x101, {0x1, 0xfff}}, {0xf, 0x9, {0x3, 0x9}}, {0x5, 0x409, {0x7, 0x5}}, {0x81, 0x8, {0x1, 0x4}}, {0x4, 0x5, {0x0, 0x3}}, {0x1000, 0x6, {0x3, 0x1f9}}, {0x9, 0xea0e, {0x3, 0xb}}, {0x8, 0x3ccf, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x1}}, {0x0, 0x2, {0x1, 0x3}}, {0x0, 0x7, {0x2, 0xefb9}}, {0x4, 0x9, {0x1, 0x5}}, {0x3, 0x4d32, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x7, 0x68, 0x0, 0x9, 0x13, 'syz1\x00', "36c9a687c075e8dec9fbdab1f1e24a82d205798794dd071d7b22801712ffc458", "51e54160d045d9c3f24d985c2747f2884aa7384d122330ccc09451ba3d5aa985", [{0x3, 0x7ff, {0x1, 0x1}}, {0x4, 0x63d, {0x2, 0x7f}}, {0x6, 0x200, {0x1, 0x2}}, {0x6, 0x1000, {0x2233333b2a6e3a71, 0x6}}, {0x4, 0x3c, {0x1, 0x3}}, {0x5, 0x6, {0x3, 0x5}}, {0xc401, 0x1, {0x3, 0x6}}, {0xfffc, 0x4, {0x3, 0x7}}, {0x7fff, 0x5, {0x3, 0x7}}, {0x7, 0x5, {0x1, 0xb1}}, {0x4, 0x9b, {0x3, 0xf}}, {0x6ad0, 0x3, {0x3, 0x10001}}, {0xfff9, 0x7aa9, {0x2, 0x4}}, {0x62, 0x1, {0x0, 0xd}}, {0x9, 0x2d, {0x3, 0xfffffff8}}, {0x8000, 0xa, {0x2, 0x65b}}, {0x5, 0x7, {0x0, 0x7ff}}, {0xffff, 0x7, {0x2, 0x3}}, {0x7f, 0x0, {0x1}}, {0x2, 0x5a5, {0x3, 0x10000}}, {0x8, 0xd1, {0x1, 0x6}}, {0x5, 0xf69e, {0x3, 0x6}}, {0x7, 0x1, {0x3, 0x30da}}, {0xc5ab, 0x7, {0x3, 0x6}}, {0x3, 0x5, {0x2, 0x8}}, {0x1, 0x4, {0x0, 0x3}}, {0x8, 0x401, {0x0, 0x4}}, {0x8, 0x2, {0x3, 0xf64}}, {0x80, 0x18, {0x1, 0xff}}, {0x46d, 0x8, {0x2, 0xf658}}, {0xa, 0x6, {0x3, 0xcd}}, {0x0, 0x2, {0x1, 0xa}}, {0x7fff, 0xfff9, {0x3, 0x8}}, {0x2, 0x9, {0x0, 0x3}}, {0x2, 0x0, {0x0, 0x400}}, {0x6, 0x1, {0x2, 0x8000}}, {0x3, 0x9, {0x2}}, {0xa7, 0x20e, {0x2, 0x9}}, {0x6, 0x7, {0x2, 0x9}}, {0x9, 0x1, {0x0, 0x7ff}}]}}}, {{0x254, 0x1, {{0x1, 0x8000}, 0xf1, 0x9, 0xb, 0x5, 0x17, 'syz0\x00', "4d3aaf7916adb59832af27315446e5cf08f7fff6449c9c5d58cff7bf49c9b1bc", "735ddd9f0824d42d1a9bfc6fd8d173cb1444182170a5877e12d39ba12ef9e1a0", [{0xa, 0x3ff, {0x0, 0x6}}, {0xff, 0x9, {0x1, 0x800}}, {0x7744, 0x0, {0x1, 0x3}}, {0x0, 0x5, {0x2, 0x9}}, {0xfe9a, 0x4363, {0x1, 0x7f}}, {0x9, 0x1ff, {0x3, 0xfffffff0}}, {0x522, 0x1, {0x0, 0x5}}, {0x80, 0x8, {0x0, 0x1}}, {0x3, 0xbdc0, {0x1, 0x9}}, {0x6, 0x400, {0x2, 0x2}}, {0x2, 0x9, {0x1, 0xffffffff}}, {0xb769, 0x21, {0x0, 0x6}}, {0x1, 0xc, {0x3, 0x40c12b13}}, {0x0, 0x34c, {0x2}}, {0x80, 0x3, {0x0, 0x10001}}, {0xb462, 0x2, {0x1, 0x8}}, {0x7, 0x81, {0x0, 0x1}}, {0x3, 0xc21c, {0x3, 0x5}}, {0x101, 0x7, {0x1, 0x7}}, {0xb, 0x8001, {0x0, 0x6}}, {0xdc3, 0x8, {0x2, 0x8000000}}, {0x0, 0x9, {0x2, 0x2}}, {0xc, 0x4, {0x1, 0x4}}, {0xa, 0x2, {0x3, 0x3}}, {0x4000, 0x4, {0x0, 0xaea6}}, {0x7, 0x6, {0x3, 0xe}}, {0x5, 0x2, {0x2, 0x7ff}}, {0x9, 0x40, {0x1, 0x80000001}}, {0x1, 0x8, {0x0, 0x2}}, {0x6, 0x800, {0x2, 0xc}}, {0x3, 0x400, {0x2}}, {0x6, 0xd62, {0x3, 0x4}}, {0x1, 0xff, {0x0, 0x80000000}}, {0x9, 0xfff7, {0x2, 0x7}}, {0x6, 0x8, {0x0, 0x20}}, {0xe, 0xff, {0x2, 0xff}}, {0x3, 0x2575, {0x2, 0x4}}, {0x1000, 0x0, {0x0, 0x9}}, {0xe, 0x1, {0x1}}, {0x0, 0x7f, {0x2, 0xb}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002240)={0x2020}, 0xfffffee7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000800003c00"], 0x6a) r10 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000540)=[@exit_looper, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000005b533f36f297a815617801e3912813cc32d332d99dd35b3562b681bfd7325b3a6a906f5ee54beaa67160d3b9f7deda22be79458d41d4dd07f8a8a3381e35008eafdbf8b4c738b20eb1709613717dc09dbb76e48b2aa72692ba4805d563a443034c015a9357d134911cccee441240b24a6cc193fe3db01b235ec7631731bf480fa9f9aafec65eafe2a813b3b31b35ac826ea119bb58b43bac1534c1efc7cadbf3b5d56f9ca0d2933694dc59c516", @ANYRES16=r11, @ANYBLOB="020029bd7000fcdbdf250c000000e2fc0a0025037e65a22ad0067200000004000b000d000a00dc39789c7997d819100000000a000600080211000001000008003700000000000a00060008021100000100000500080003000000"], 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 3m36.771810101s ago: executing program 0 (id=1242): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000020c0)='bbr', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x4, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$sysctl(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002140)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d", 0x79}], 0x1}}], 0x2, 0x2090) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000300)="86afe6e99d5bb3fb3e2e61a127bd924cc676b42002171203554f9916475d2e778c54bf277267ff2178b5bd942b1903fbcdd3946b17a3381c86d9daf4ac74a03e33ce6b27c8e25636c7bbc50e28f632f1c4df17d933f5664bba4e01b118f5f93d123cb2555dfab24e024341ae6085cd3df110d47bb1af818a037e9760226e55b38631916d6071deee", 0x88}, {&(0x7f00000003c0)="87a94c940ba2d2", 0x7}, {&(0x7f0000000400)="5d6b91ec891bd16acaf696a70ac8f9cc728c769143a039abe897c884db5abd33baf84087f35aaa59865e008953ca87eea7fc3177708b921b6b1478e04d5dad8487564a9a795f9e9a40c6eab684acc32af02bd7a30fab200d1710170bdf58cec43010dc63bfddc74b419c8df6ca99b8082fe3a45b76366759ec933b8146aae5569e729d5a29c24f7628f8223ae7c19e3df5dab4ab0c01a4f556c4d0b1562bb30d97342034", 0xa4}, {&(0x7f0000001740)="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", 0x42f}], 0x4}, 0x20004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0xd, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0xffffffff) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000002100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 3m36.682011638s ago: executing program 32 (id=1242): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000020c0)='bbr', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x4, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$sysctl(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002140)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d", 0x79}], 0x1}}], 0x2, 0x2090) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000300)="86afe6e99d5bb3fb3e2e61a127bd924cc676b42002171203554f9916475d2e778c54bf277267ff2178b5bd942b1903fbcdd3946b17a3381c86d9daf4ac74a03e33ce6b27c8e25636c7bbc50e28f632f1c4df17d933f5664bba4e01b118f5f93d123cb2555dfab24e024341ae6085cd3df110d47bb1af818a037e9760226e55b38631916d6071deee", 0x88}, {&(0x7f00000003c0)="87a94c940ba2d2", 0x7}, {&(0x7f0000000400)="5d6b91ec891bd16acaf696a70ac8f9cc728c769143a039abe897c884db5abd33baf84087f35aaa59865e008953ca87eea7fc3177708b921b6b1478e04d5dad8487564a9a795f9e9a40c6eab684acc32af02bd7a30fab200d1710170bdf58cec43010dc63bfddc74b419c8df6ca99b8082fe3a45b76366759ec933b8146aae5569e729d5a29c24f7628f8223ae7c19e3df5dab4ab0c01a4f556c4d0b1562bb30d97342034", 0xa4}, {&(0x7f0000001740)="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", 0x42f}], 0x4}, 0x20004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0xd, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0xffffffff) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000002100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 3m26.352052506s ago: executing program 4 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) (rerun: 64) copy_file_range(r2, 0x0, r2, 0x0, 0x7, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}}, 0x0) (rerun: 32) 3m26.150125573s ago: executing program 4 (id=1405): r0 = socket(0x23, 0x800, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m26.108037849s ago: executing program 4 (id=1408): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./lower\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz ,ecryptfs_fnek_sig=syz ,ecryptfs_cipher=aes\xbbG,ecryptfs_key_bytes=1') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x28) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000100)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r4, &(0x7f0000000040)='\x00', 0xc0180, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x6]}, {0x6, 0x1, 0x7, 0x7ff}}, 0x3ff, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) ioctl(r2, 0xc0184d03, &(0x7f0000000040)) 3m26.032116412s ago: executing program 4 (id=1410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0xf) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000002a40)={0x48, 0x4, 0x0, 0x0, 0x181, &(0x7f0000001a40)="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", 0x5}) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000001000000001, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}, {0xffff, 0x0, 0x0, 0x34341acf, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x10}, {0x0, 0xfddf, 0x0, 0x8000000}, {0x1ff, 0x7, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x140, 0x0, 0xbcc}, {0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4000}, {0x0, 0x0, 0x4, 0x0, 0x20, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xde5}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x1, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800005}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x28e, 0x0, 0x5, 0x2}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x6, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001}, {}, {0x400000, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xffffffff, 0x0, 0x3ff, 0x40000000, 0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x7}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {0x6}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x8000, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffd, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80, 0xfffffffe, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {0x2, 0x3}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x9}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x8, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x2, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, {0x0, 0x0, 0x3ff}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x1, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x3, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x8, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x2}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9f"}}}}}, 0x0) fsopen(&(0x7f0000000100)='jfs\x00', 0x1) 3m25.965524457s ago: executing program 4 (id=1414): openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc5, &(0x7f0000000500)=""/197, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=0x0, 0x1d, 0x1, 0x941, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x0, r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f00000006c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x47}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="01"], 0x40) ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000742000/0x2000)=nil, 0x2000}, 0x4, 0x2}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r6, 0x0, 0xfffffe3a) 3m25.776515336s ago: executing program 4 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000022100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 3m10.849266114s ago: executing program 33 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000022100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1m39.211553598s ago: executing program 3 (id=2788): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="07000000010001", 0x7) (fail_nth: 6) 1m39.211340213s ago: executing program 3 (id=2789): chroot(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r0 = syz_ublk_setup_io_uring(0x600e, &(0x7f0000000300)={0x0, 0x169d, 0x400, 0x1, 0x24f}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1007, 0x1000001, 0x13, r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='file0', 0x5) 1m39.061416506s ago: executing program 3 (id=2791): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000246, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000ffe00001420000100", @ANYRES32=r1], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 1m39.061252527s ago: executing program 3 (id=2792): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x1, "f83bebf4566ce90b76620000e7ffffff0000fffffffffaffffff0000e9feff00", 0x34324142}) 1m38.988832413s ago: executing program 3 (id=2793): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000002600)=[0xee01, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4211, r4, 0x406, 0x0) getresuid(&(0x7f0000002640), &(0x7f0000002680)=0x0, &(0x7f00000026c0)) stat(&(0x7f0000002700)='./sys\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() syz_clone3(&(0x7f0000002a40)={0x110210100, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840)=0x0, {0xc}, &(0x7f0000002880)=""/69, 0x45, &(0x7f0000002900)=""/195, &(0x7f0000002a00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000002c00)='./sys/devices/system/node/node0/reclaim\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d636a5baa2be9b4fabd33c88e458c9ecf7c091746ab7b28073ae2cc98daaa849d4522e460ba5bd56813d7ff152c0c54f4983006a66fa595cff8497acd4c45a59c389f8d955ca5090caa020d10d883c2520ddca3f76aaf48bfaaf381a5d7723ad1bb9c1153e35c9a735df5e526f3c862a715ee1c7b7300d8d6b54cb0713b565b05c4938bcbb36bdbfaed9b9a5076cbd091942040a5319f6846326d261e05944853ba380edaac870807bd90313b325778050d4f7c5cc2c08b6c2f6481662be296e6c4fbb4ae81ad0fa6b23e7183011fd3648be1e3ee7328b87e5655339c11a96", 0xdf}, {&(0x7f0000000440)="50ccd72ec08f360e1d9b240ed884bae737dab28ecb6fc91d6cda90a9cf284f3f703aa1b84601854672a0de75696fd6ab17e8573e7413ace1481b70ea2f3fd2e53288f4e409af6835f4851fac9a9f3a8bae2645b9dd7c82ec9436160965ffbb7271f6fcb5cfef5488c14e1661a361ad1dd1e78465a83706756e9e1d9291c12212e4823f9bace6522d546736333d2b201e02b302aa06e59d95177c0b35ff005fd33b140c5f86bc2432696ac0d1de9e04945ec1c7aa6d4e131e6155c9c55664a10ba8059caafa9640d5", 0xc8}, {&(0x7f0000000540)="69e7d2b3b37285524aed60bb7b6fb8e43b7fbb8200ae7714fbb9c482", 0x1c}, {&(0x7f0000000580)="965e49fd", 0x4}], 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="12fb001e6e3bcca712978d6857fc8c5a0066c4"], 0x80, 0x40}}, {{&(0x7f0000000740)=@file={0x1, './sys\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f00000007c0)="784b3c693a2622993867ad9ddd869ea2a2c3aba77834a9d710229643a6c328ff78d7", 0x22}, {&(0x7f00000010c0)="507210580539d887ef78d1c5cb5891a04388c3f840e9f4ea020bcce755e9eaeac296a3a00d8a0d7ed76290aacb0d68d192195acd4af941c5d1d9a432270a3128f421f930a49ef61981cd1dbcc88ed522e4cbe2b365327c8a70639a411ab01ad22f671e975e6992d93dbdc51eb72af297fbc2d31d61eddbba0453d3df0089669ca7c83ca33cea2941236de569c97d61eacb4ad783d613d5545cc8077133addf9432da78e65816611b33c15ed55f565a5debc0f512dcc59e4e92e503407c17b05852fcbe23c9e0b8552d36856d36829911e41ec8a0a349bae60635e2044a7f63d33e8417f42e5d65a0735080f2ae6c052dd908d19d7e24e3cc5b05b39424647a6511516293e19acaca976cc732a76d667d94a4600793e8f72882ce28a958fbe6dd0c138ce9610b0a95ba0ca9de1cb8643af53b6cfa31db36f7578029e55d094198433747e4e07c7752aa64b9894227ac897c957ad354f250dc90e06d82c6717632578c91433e42b24c244cf2e25af67b4f78217a964769a69a26e2518985704c3ef2907934669b7feb62f4f49e049bbe757d62c08f50947df8cbfbc112265dc0a88f1887995c367eb30bcfb074d4cf7de4c8334d813ca819c74ca35f42c5956f943cbffe5c13911dce46330befa5cecb06e402f873913837eff1818ab017b22c9b6808b00173f364446c784331804c50b768d1caf63ce164ccf515b9bed9cdfad73ffce4a9c1f32e47379e7049b2a2375eebc4432af771f782158a044f23d11965c5e3bfdf38facaf3cb88ee721eb87e44f7027d4d593e86d2f3dd84f51a85f28b5c8f74d4a8cfb8bc95f923ed90058176421a476a7b24233b7ba9dc9051cd5ffdfc8ded800c2d793f5462a639da5811baba1b84d12c332cb558f03448cc44e03de61bc1882054e77efdb78c1c97ed41df574c5dc32ea76051c407261ca836c4b2977793652d46adffc6e9b789a1fb80a47372cceccbd9c0ef16a611cb25eea2ad4be6cbabebce82568512c1176db82c6b5610dd604aee4c22221a120b780b6b73ce20a6345eba7a5a5cd6ea542d789cf7e5408b86144847c00d74ea77df5fe08391e0b8230c9dfd988e54ea1815332ae698350ec06e5f41c02c3bdfed6162fa8a5aa9e80d0bafc624b99bf83ad2bde3fd848e836228f2e1d129ad8d39f2818bbcc90ef6acaabedef92274d033611fb3cc942d2cf2f88b9c14c2498d48510a6b92c7a4ae280446eebba742dc84feb84af4a15d9481680455fc0e7d0bfe34c1351dcd4604e6dd36c8e7c102cf5001317ed6785215f363574c3fff269cea25d88685169f313e40a5fa0bb57e91694455c04048114ae7577e233edf346c7efb172dd73105b50a2e7e25e53c08886bc1a03e1acec67c13149269a838d69c4787baf61ffbd04443fccadaaf1616b817a73681e8d58faff6c8dbb346551ee910b1ee202c106dd9e8bd93fb5390bee8be465d43a9b7df62f4cb2665493bee97b0ae85c867a6979121528c2e87f4372a84bb2d69de8c521d7946429fb8a5434b0fedfe594b06348ff6568c374d4a6ddf0d864339f48d9305328d0f8bd40edc33a9005cf7f2c879d7ede526d2d4b333933fea896856570bcfa69afcc90445ab920055181d10d7613ccc7c33f72084fdf029b6b2062d204b945d256308bbc446f7e9d6f3bcdb66ec26bec31c13e23822132cefa64fc8a05d09ac6263e075b4910fe236a353bdcd35925714d0bd78a0856d46d60cd2e8f2b6d7e23d5b337ed6705155b0a2dd2535904e9d68fc116660c5f33335c9994e6b599472ea5d1b9eb63d32614e6be9185f68f4dc3d76da7a300ca88a0c3193949fdd5aa4c17d8212f9a18a0dade90a8f8f828a4ec34d7dea5cfd060469dbf01e7783f7dc109eae50a10743a29026a038ff32877b34c09cfc8e8f9779878af63f8b92bba43f9e4d45c134e4be6c66c6cad546b711d08aa71928f9f448dc2b428f27d639454d27e7ff0f9220f4a2e513c3003f18da556020829f3de664be3916a29e5bc465bf5d0520ce1136e3ab416fcf3b16f73e1b035c2b309579580989c0510992df1f495f30d62bc66a65375a39166d4e860ef3511e87b890160d9b8198f51a61b6fb5b6acdccf5ac84a1080c2aa02ff69db4190643f480a5c152862f7855774b83b1f4b43b108cfcaf180cbb4fafed9c97d418e468d01c47a676b70eab312aaa504b5a60b5baae9c8ba3a23a09c59955e88922e762be1b820d4badec03d9550c959fe02cf6b5c1f8448ebf5ffaebefbcc6f3a6ea4dc5675a1eead9110e76c7af295057e807f11a78a04968a8b707ac647a78373bf1dd04aaf22b1cb00f7da9373a823835d4e308c0a9a3cea493e926b9f88cd27cafdb363a16db210cc4a0151eb95f1cf518c5c5eb4dd46317841cd72d511bf2f7aa4f8ead1ebc26e436fc634049844da6d76b07633e7ab5017c88cae080c5461c33e309be0655eea0b091213cf4200abc5664334b906c26b9917056572e322e528a51cae6d63a540e3a4aebc353c21721c2083b778f9846420bde429e0946cd08967432a0299ebf5b84ef0df649fa37f95a1c622b2add1a0acc7967bc01651c18d855401ce262b07422fc7c703726e45665382e6cd7bded8b113869a3aafd9bf192567bb42c795758ad6544832fb150c28904029abb6c56c32a6edfbc8b66c7326237fec302ac7bfb3d56e407093bf6ba4deb7e8eb8a014263f9f003486fdd0b51f30e00ec4127ebec30b6c1e95082b81cd50e279dda701c244c3d39d99ed20b9f1a7555d64d55e5a5610ae92d291b93f3d6c83726c8b23edaf0b431a52190ff5c00064fcac1ba6f890a45e0426ceec2d1b437629b3a83a0163b1d03a164a812a3ef6a11aaf4ea53c5b2fcc1bbcee8f3373596301c9817cc3dd7561e2026fc5734cf29db4d098220694147122bd53a6fedec23b9d0660f9f972f13d94053c4b568112ad7839c55eb3ffe6db1db75ccfe9e5ce01c4beea6fda1451f31925502c284be6def0be5ded66e18884ed549eb2d7021f532acd3835a7089b02dc584895b993a54ca911727b02f454193008e6c77ced11d38a66a5e785c1d6abcc902c235878696e8bda668c170094ac96d3672ac76be029259c837278aab3c833123cf3794734aa0164b6b810390b72fceef1d627aa0c20f6a6cd7d15610275290b09ccab1d4116769d883b336a59427d9d8b4fe3d8c8c00d9f7ac03ae1b75d5791f94a9b09527d8d04d5b4fea279cf8a99333f9af004e1efee13652959325d1d36aee53a83010682bef066b2c041b6aa6750169ddf5455db2f859a9e8e5ff5f1e80370dae2e78141f2f400aa8a932d31b50ff9a2bab55d3ee5607fef24563d0950e6af593bafb5d7ff12f9a925001547dc3c72ee30865d6d8804a0f84424278d3422a7484c34c07dc98d94ba9615924bd68f41f0d5f5d177862b7d477b5c111b9524ff9fd22e2db6ec161a09813d47e3f375838891a7d54649c8f19d506a3856936f59bd1de695559ff4dc20deef37f7e463ff7c7d49ce666eba79e37f19c8fe63b524385ea9cf22a321c9ba6c450a7e6501c31a979bd0ce17b2af7ad36a8dc97b6d406e14b9d785201d3983454dd6f35fbc7a17ecebcc5a340698f9c275166978b9ec3142466146c44c6dbb3a08c52faef0ee22a60674730de1dd16bd035b09c47645d79e435001f6d57d2a42ed641bc0d5318b1d581134e92df6645b5bce447c363a38985ccf0d8c8a9cda1ff071faf8e01a23b29fb07f597bd6d61f86e217b7a2b0bfe0cd3b2e06aa0b350cb646e4e1da20860b87d2c6ddc28606abd3aa978822e6c302836e0b3ce5df7c2e567ac977640ee46ed4f2eba15bf02e5b75576c341f9dce6e6f9794a4362ed226d4588df546465bdd7110628ed49be4bbe0cb8f3f7a1c9222caf3dfd9e9bc6e389949d0e42a321149323336c88aa68a9117129aab885a3c830527ab34a3c9b00f7f016130a634ab4f3dde73099296e3370e80e8305335c14c97ec3011ed17d1053472055a4ee1973e623d08134262cebeaf31d1397b9b0b64bd7d12fc4815486f0081f894135a1ea05e51ef7cb60f5fe2a044f5140b713add9be5150a9e2b98dd2ae56878bbd12b3c7a4bbd20f2b4f50c7d0ea7a8dd1a9d25b9216e6fc02e9617d6314a68cd3f8f1336a96ab4a048999402a82ee851b4026e8cc8c4bbde6d109ad9055fa781c5a17860c1536bbcd404d26c60cab027be4a9423acf2fd9a05162f71bc33a8a60ece55ccdc1f99452f73f64d628caf9c8f93909eeed9f0228e31fa4d2ca21f816af288f3417a0b563137ca49b4def5e4ca043f76e91f4ce29428c7d8fb060f2f11ebe4594c717426411a1a47d695d089635291e5937d68e5b375d36e05654b2fcfb30b1bfd5aeb8ad097ebcd32d5ba7e8640410d85e029dcfcce14c82e96d3fd9532a7358b94c4acc2e9b3fdc9fd66d5826ed777e3710db53a55acb894a4b18f225d25aaf51a1ca298ee0ef4935d2265ed13729ec1100a8eaeeefdd2adbd989700c1a4992d2e504dd6eb9a73e0f6c0ada4ddd26438a04032cb8b86f91d680319dcd25b7fc1b2f1b243c86c681e8196e2b95efd476e4ede0796f4f4446658abca4a71e945a2056dd371249c118873d55966ef9c91fbe2caa47a3b293d324367d0239a1a6265cc9c76283a05a4e5b4c505446d75f6ff7e5febd25f8e45132b4303c939d832618a7b3d10f09d1e452f25adfd7f5a7cedf0a8a3f868ee72d4cbdb17e541c4a148215203ca6e569ffd45df68c2f17dfffad644a7f90830349d1700ec90d07274434d6bd0678ee62763d91e2d3a1838cfe0c0388e5cd269b45ffaa39b80d2acb5ebed04a49972632da0c5f7e7516ff512da070734749d2280f9eeab03fd2b75afa6d4526d5c6d9d2fa3e63833a2647e22ab2976669545ec1c6c740a1bcb453c2453b4575091ad2ccaee32737454ba6d4195cb511d4a20f351d1963d670ef6d849058e4092fda37103ec0e35c568702b0ab312c69b6a89face5bf04114e9792545fbaf82123e0f3ed16c1b941cd39126e32620ab0987c2140b048c368aa6bcce374a6b3a34efa5cbee0fc353014e5d5c84245f25805340615a52eed6347b534c379c8735d716efb650fe84686aaa75dfb27b3843e135c4bc82411cc6495a4ae5be79062d75dfc452e41392fbcbf1cf465b94902f00f82f67e12d72092f191e71844054e679a876193f49308407ee12b83f3353d2b71a6ce06992ecf4c69a5d8af26dc591d8cb5f6a5556b46d32433e39fb90cfb14f3c7135cbc577e4ce6649990ab770d5394f4943b519d24a8d89a3bc2096616a92a53e66c06fa0c296d27a64635bb26ee90b581587aff3fc2b7b80949959101def80fb751fc084a536860d0a5838045f9c8705fcdac51c9ee6f2bcde5de63ce14d9ec4085b3a703571ee2e11e89518d2eed2f42b328d9a6fefe9a4043c852872d028e4e93147bb8d9e7237a2fe8a913397a5f051eace27473c2317e44719662bb013402de89466558b04c5d7447f18af6b1b3a69a13707210ab7d040e53dd9f1ffd56e0965105696c404c901a8e610ce40f0964eac11532006af749a5f75e8f7dfe297e8ee0a24476949b2b4006185579c26700bddae7254b6b8175c85c9b16d8be1fb94076c56a1fd02b6b27d48fba018dd229899a5e4a41ee69e1979caeffe310bb8fda2b0bd6ecb603658a70d9a060304096b078666871305c78c3f6a63e6e2862ed90f755af7f956f1303a6eab7d7a5c1e2a1906f9b7489a052fb582af6af5e27321694fcf376a2b2fe031123d8c73fbca8ff7", 0x1000}, {&(0x7f00000020c0)="892c5c70a6b4e6361d0fc645fcc9ca027de5c1ee09cbc6bb70749ae7d5407d80f60e9e415610502d9e209fbfaddb103c30b6485de0f79c7969bf511299042882281d2ba8fe652a22372e30456d2e6d92c8c785078b50770de1a5a15d18286358e422604d25070b90228051f0a09be7879b5afcab37e6abc00ecf98e8e773738ff2de28652f39a4668c61e2f34dfa75bbae019ed6d68bf6274d4f34e0a89a682292cc4912470e77fb98484404c60bae14be3d582359ceb169a7a825f747d234c55cdd18768bfbe052206fe472fef37b2d21708fbafa05fc3cb242f1832fc4e28d3b3790ecc0", 0xe5}, {&(0x7f00000021c0)="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", 0xfa}, {&(0x7f00000022c0)="ab72871eaed6f9f08665e08ff1ea0d34bcaa39d8dc842b8fd43509aebcabaddad6258af4723bc8d9f8aa65bdf866905c109980d43b1c6811651f63497f90d02a2f3f0557704f34c34fe7bf4c6e2db4c9f39762115a9603bfa1102e4d0c33ce7829c465ce27c586c95402e4225ecdc6b882a94ce5e2bebf3bfaefc3c6cdc7d5c7254d5527", 0x84}, {&(0x7f0000002380)="2d9d0a1a423d5bd48c526f33bdd0ad63142154ad11695d1b7027e5d9c3d5d28016cf0413d9f2111f3b62167c1b24619685a4d0f11dbf60b4d20f6a203eb30d39b298e7e447f886cdd38bbc5e9c9e1871c354571450", 0x55}, {&(0x7f0000002400)="f904e8fe383d20368cfca0c810c0de0f9e4403d561e326798776fa0d7c3675c1527b78dfde5b84c8bc962cf6338310a3a07bd3bfd6528e7e9359a8f8acd803311bacb843811de04b373ee8f44706e0057c8c40cc32196a829b0dbd0742d66ef28b3c63b9f0b9ad1b5c8d9241d4d9398bd6266bf14748f37ef8a6dd23f7dd5aeebee9ee514ea3448694aa692ec0811c1af5d1127ea3f45000c263b1c3f10aad43593452dbfd476ebd568b3ea6c7578c932eeaf58fcc4c086645f3938817bc98a3ee7507ab9fa78956bdfad55cb02a60d875e014997de14f574a90c633016d98563c154d2daae3d1aea0bf3f41484cd39ecb0a275e", 0xf4}], 0x7, &(0x7f0000002cc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x4000}}, {{&(0x7f0000002d80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000002e00)="1cb267d139cf5f8719c8ae3a12fa9bbf173af57776ea0cb7838d57404a7a2398140da63709144027349860d30f0a49d12c6454a3775e09b58ec066728a3ad13ac2af1c011831da451f366bd3891d82b025beb154098c0665b97217323f0203cd1372aa3a5d830e75206b1301df4c54b5a684af65a2d2886aed75a278bd04117d685707f5540f889350009061f8758152a7ad39a38b0f21061221b77039fba7989d84759d6ff91c56f50a869116c9d99b1802cd39d49306457134106eeff7acda74434da7dcf38d73", 0xc8}, {&(0x7f0000002f00)="3e04f6dd2ec222ef446370ae9cb608d0856ba4eae0b8ae34d7922e457d0444b639de4018132813aee1e3b4aaaa8f10ae57b507f223e36bd961e5b7a7bbb6f35848f3d113b65818e6d982e32863d9f07e96cae4dc53d800df4b70a568923a079e1f4bcfc5ee3fd2dcc8778d9983cc2671f1aacef1020911d5153c2e29c443f1cdce07dba056c5a2b6a9eb55de6029c528c0b892b0759545a2965891ae0ad94f79ea785d055acdb2153b347dde1d10d301f2c6be115984aa532f22b8bf5d73529451a2701bb0cccc595c7d32797883f4d18ddab4695f1bd78c9208feae3ed42f1ee68251b0f6f61a79c0003d371102aabc1f36221aed6731935c481db2b5", 0xfd}, {&(0x7f0000003000)}, {&(0x7f0000003040)="87eded7d3fef2f7128ddda6a8c00ec0c5813db88437ca767412f2df785f1c3d7f9e2c1c107d6cb85718a9dc713bea301f573adb4cfe266e5057ebfb737c3842de34494bf5aad96eb49a48771dfb19626c74666", 0x53}, {&(0x7f00000030c0)="72f51caab8152772db6f09827f0a82c56ef80eeee542d1a6975b5b4f9733cb1904a83d2eda", 0x25}, {&(0x7f0000003100)="9e0edccef7feebfd839e91821c1796ea6df1a3bd092d74ef784bdcf728d8ff3bba5352c7b08bbd1980644832983090c3649cf61a6774ea1e5074a413b671a610fd10903ebed94ecb8d2b6d4e1ed9c41f8c73aadd60e8cd728e587798aeefc85bab5d658e1dcd2b951f0e6367b0ec625ee9851ec468a054d6430eb2577c15ac9b6c8ad8c0711797352ed1879f2b43dd7f9190d1ef45f57393ffb80579dd6acb85766e5f00c1142ccf8bc96d5350e468bfed6b6f9666365e77d0e7db679424592a887d9c0e767beda3756c2b77b3d02526ba", 0xd1}, {&(0x7f0000003200)="88e16737a0235e9de884b0e4a773558a68558f6e962191d3b2889a9217c54fc130b4e114f4b37512339c7cafe7af6e83624515aeceaf52cd3e88264cd89131c03ad15fd0b52a594776746089bc81a8fcd5f007f6d2a0afb6", 0x58}, {&(0x7f0000003280)="ca2097a72bc78fd62dbee8f7823a3750dc932a8a35ec443c61ace9f8703a276351dfee12994f94ee8af9b6efb13feca8cbfa2cca707f1691b9c76cb8a15ed7af80ed5bd2fbd4c0638327ce193cb62ad6dabbeedfec777edc8953212bc32b7e08725a7de45d6bc546b9eeed2ffaf1", 0x6e}], 0x8, &(0x7f0000003380), 0x0, 0x4001}}, {{&(0x7f00000033c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003440)="41836fcbea109e", 0x7}, {&(0x7f0000003480)="e0f65eb407f9dd115143904ca36b044009d736c02722ccdc755da47a411ef6d5c7d197a9c800390774859df000863012acd137d5d750bfca387a5e6a10a81082388bad99653e13da465a1fb0dc231c3732277b94d42d1284764bab79bcd5c580957ef5bbfecfe1b85526f6b083c70e48e01579ebef4a67cb0f194a3a291926354a544525cdd7ddc50bdde837ee792169b85d410aea18d23fd0f80160bcbd0a973a9171298a390bc9d6d616bd9eead39df3", 0xb1}, {&(0x7f0000003540)="a464e079", 0x4}, {&(0x7f0000003580)="d44023828691d9e4e86f00b26d47ee3a77b2084760619d2cfef835e234d18f0582eabba336ba90d3e45c3c4dd4b6df21f39a89a1858911df483d11df78360ba4049e6feb4803e3c64330a1b72ee5ceb4702e62ca0506b63a6c675e75f3bdedb01b2563dc1bd73f050848", 0x6a}, {&(0x7f0000003600)="b9f4ee354b3164eb485bd04faf41dea4", 0x10}, {&(0x7f0000003640)="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", 0xfc}, {&(0x7f0000003740)="e49b76e8ed033c3821498038af8e9c7a32dcdacad895eb7448970885ae116f1e07052c3f58ee3e3f64638e52de247bc5bd8609522aa36e5b96", 0x39}], 0x7, 0x0, 0x0, 0x8000}}], 0x4, 0x44) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008003100bf84a07e"], 0x28}], 0x1}, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r11, &(0x7f0000000b00)='100005}', 0x7) mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00') r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r12, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1m38.154659669s ago: executing program 3 (id=2799): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x31, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x65, 0x66, 0x36, 0x36]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x30, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x62, 0x32, 0x30, 0x30, 0x64, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 1m22.882780223s ago: executing program 34 (id=2799): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x31, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x65, 0x66, 0x36, 0x36]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x30, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x62, 0x32, 0x30, 0x30, 0x64, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 8.741118864s ago: executing program 5 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x3f00}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.740913985s ago: executing program 5 (id=3830): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 8.688679539s ago: executing program 5 (id=3831): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='h', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d66736361636865"]) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 6.43073506s ago: executing program 6 (id=3848): socket$inet(0x2, 0x1, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000200)=""/151, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000005002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 6.430260862s ago: executing program 6 (id=3849): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1e0006000104010000476baf00000000000000020000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x40}}, 0x14}}, 0x4000000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x107200) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x4, @mcast2}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x4, @mcast2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f00000000c0)=0x8) r6 = socket(0x25, 0x80000, 0x1) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) read$FUSE(r12, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4000004, 0x695c, 0x0, 0x10000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc79}, 0x80) (async) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc79}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r13, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe9e, 0x10, 0x0, 0xfffffffffffffce4}, 0x94) (async) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe9e, 0x10, 0x0, 0xfffffffffffffce4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r14, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.000756685s ago: executing program 6 (id=3855): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000004c0)={0x1, 0x100, 0x6, 0x0, 0x6, 0xa500}) 5.318030473s ago: executing program 1 (id=3860): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0xf1, 0x55}, 0x0) shutdown(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5.316402462s ago: executing program 1 (id=3861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001080)="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", 0x216}], 0x1}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000300a60c6b63851e0f982f"], 0xfce) 5.159721593s ago: executing program 1 (id=3862): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000880)='r:s/p ./file0:0\f%', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0xffffffffffffff33, 0x17, 0x1, {0xd, './dev/ttyUSB0'}}, 0x16) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) (async) write(r0, &(0x7f0000000880)='r:s/p ./file0:0\f%', 0x11) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0xffffffffffffff33, 0x17, 0x1, {0xd, './dev/ttyUSB0'}}, 0x16) (async) 2.840549386s ago: executing program 6 (id=3868): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/dlm-control\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(r2, &(0x7f00000000c0)='./dev\x00', 0x80) write(r1, &(0x7f0000000000)="060000002000000002100000070100000000000000000000646c6d3100000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000001", 0x69) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.751030246s ago: executing program 6 (id=3869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000010000700001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 2.481078138s ago: executing program 6 (id=3870): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf7, 0x0, &(0x7f0000000280)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40845}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x900, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.374632605s ago: executing program 35 (id=3870): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf7, 0x0, &(0x7f0000000280)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40845}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x900, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.987028858s ago: executing program 1 (id=3873): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x14}, "00000000000000006000a359"}}}}}}}, 0x0) 1.986633997s ago: executing program 1 (id=3874): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000300)="580000001400add427323b472545b45602117fffffff81004e230e227f000003925aa80020007b00090080007f000001e8bf09c56b4f9e4a6b6497f1d409000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00", 0xfdef}], 0x1) 1.920728027s ago: executing program 1 (id=3876): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0xa, 0x62080) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000004c0)={0x1, 0x100, 0x6, 0x0, 0x6, 0xa500}) 1.140316193s ago: executing program 2 (id=3883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af80200000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x37, 0x107, 0xfffffffe, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60044840}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x6c, 0x1d, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x0, r3, 0x10, 0x9, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0x2, 0x4, 0x8}}, @NDA_MASTER={0x8, 0x9, 0xffff}, @NDA_VNI={0x8, 0x7, 0x6}, @NDA_VNI={0x8, 0x7, 0x35400000}, @NDA_CACHEINFO={0x14, 0x3, {0x7, 0x6, 0x3, 0x1}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_PROBES={0x8, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280)='($[)\x00', 0x30000, &(0x7f00000002c0)={@align=0x7, {0x9, 0x69b, 0x35, 0x3a4e1e63}}, 0x3c7f52c4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x8}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xa0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x10000001}]}, 0xa0}}, 0x24000000) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xa0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x10000001}]}, 0xa0}}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.14006815s ago: executing program 2 (id=3884): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000000"], 0x110) 689.599628ms ago: executing program 2 (id=3885): ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000880)={&(0x7f0000000440)={{@any, 0x223}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x606}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 510.935803ms ago: executing program 2 (id=3886): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0xc00, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@directio}, {@privport}, {@debug}]}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) (async) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) preadv(r6, &(0x7f00000031c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x9, 0x101) fchdir(r0) mount(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', 0x0, 0x1000, 0x0) (async) mount(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', 0x0, 0x1000, 0x0) 303.300736ms ago: executing program 5 (id=3887): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 303.148859ms ago: executing program 2 (id=3888): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000180108803000008024000100000000000000000000000000000000000000000000000000000000000000000006000500ff0f000050000080200004000a004e200000000aff0200000000000000000000000000015d0000000800030005000000240001"], 0x140}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 160.792ms ago: executing program 2 (id=3889): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0x5016, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xa0100) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000100)={0x0, 0x0}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000012c0)={[0x60000000004, 0x7, 0x1, 0x0, 0xc3d, 0x0, 0x2004cb, 0x5, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x3], 0x3332d000, 0x50287}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000180)='./config\x00', 0x1fe) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/49, 0x31, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='file0', 0x5) 132.287569ms ago: executing program 5 (id=3890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 0s ago: executing program 5 (id=3891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a001c14000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): 359.618699][T17450] ksys_read+0x12a/0x250 [ 359.618720][T17450] ? __pfx_ksys_read+0x10/0x10 [ 359.618748][T17450] do_syscall_64+0x123/0x790 [ 359.618771][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.618790][T17450] RIP: 0033:0x7fcc9615e98e [ 359.618805][T17450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.618823][T17450] RSP: 002b:00007fcc943f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.618841][T17450] RAX: ffffffffffffffda RBX: 00007fcc943f66c0 RCX: 00007fcc9615e98e [ 359.618854][T17450] RDX: 000000000000000f RSI: 00007fcc943f60a0 RDI: 0000000000000004 [ 359.618866][T17450] RBP: 00007fcc943f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.618877][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.618888][T17450] R13: 00007fcc96426038 R14: 00007fcc96425fa0 R15: 00007ffe2ab985a8 [ 359.618915][T17450] [ 359.812113][T17472] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 359.872963][T17474] FAULT_INJECTION: forcing a failure. [ 359.872963][T17474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.872997][T17474] CPU: 3 UID: 0 PID: 17474 Comm: syz.2.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.873022][T17474] Tainted: [L]=SOFTLOCKUP [ 359.873028][T17474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.873039][T17474] Call Trace: [ 359.873046][T17474] [ 359.873054][T17474] dump_stack_lvl+0x100/0x190 [ 359.873085][T17474] should_fail_ex.cold+0x5/0xa [ 359.873130][T17474] _copy_from_iter+0x1f4/0x1690 [ 359.873157][T17474] ? __asan_memset+0x23/0x50 [ 359.873179][T17474] ? __pfx__copy_from_iter+0x10/0x10 [ 359.873201][T17474] ? __pfx___alloc_skb+0x10/0x10 [ 359.873236][T17474] netlink_sendmsg+0x808/0xda0 [ 359.873266][T17474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.873318][T17474] ? selinux_socket_sendmsg+0x198/0x2f0 [ 359.873340][T17474] ____sys_sendmsg+0xa4d/0xbe0 [ 359.873354][T17474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.873374][T17474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.873393][T17474] ? lock_acquire+0x1d1/0x380 [ 359.873410][T17474] ? get_pid_task+0x2a/0x250 [ 359.873432][T17474] ___sys_sendmsg+0x190/0x1e0 [ 359.873449][T17474] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.873466][T17474] ? get_pid_task+0x106/0x250 [ 359.873493][T17474] ? find_held_lock+0x2b/0x80 [ 359.873526][T17474] __sys_sendmsg+0x160/0x210 [ 359.873547][T17474] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.873578][T17474] do_syscall_64+0x123/0x790 [ 359.873595][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.873610][T17474] RIP: 0033:0x7faf2919e159 [ 359.873623][T17474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.873636][T17474] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.873652][T17474] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 359.873662][T17474] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000004 [ 359.873671][T17474] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 359.873685][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.873693][T17474] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 359.873713][T17474] [ 360.012339][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 360.144194][T17494] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 360.436982][ T5842] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 360.587597][ T5842] usb 11-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 360.588538][ T5842] usb 11-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 360.588590][ T5842] usb 11-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.588611][ T5842] usb 11-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 360.588629][ T5842] usb 11-1: config 0 interface 0 has no altsetting 0 [ 360.588652][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.592623][ T5842] usb 11-1: config 0 descriptor?? [ 360.599315][T17506] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3635'. [ 360.709873][T17509] overlayfs: maximum fs stacking depth exceeded [ 360.805978][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.806336][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.840737][T17520] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 360.956966][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 360.957115][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 361.011537][ T5842] hid_parser_main: 4 callbacks suppressed [ 361.011563][ T5842] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 361.011583][ T5842] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 361.011600][ T5842] saitek 0003:0738:1709.0011: unbalanced collection at end of report description [ 361.012103][ T5842] saitek 0003:0738:1709.0011: parse failed [ 361.012168][ T5842] saitek 0003:0738:1709.0011: probe with driver saitek failed with error -22 [ 361.037108][ T35] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 361.197329][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 361.197883][ T35] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 361.198852][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.198878][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.198898][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 361.198931][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.201188][ T35] usb 6-1: config 0 descriptor?? [ 361.206701][T17541] mass_storage.0/lun.0: unable to open backing file: fi [ 361.260519][T17543] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.441066][T17515] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3639'. [ 361.441269][T17516] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3639'. [ 361.652294][T17552] Invalid logical block size (-285212673) [ 361.734733][T17554] input: @ as /devices/virtual/input/input96 [ 361.909005][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 361.909063][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 361.911652][ T35] usb 6-1: USB disconnect, device number 36 [ 362.117573][T17561] netlink: 'syz.5.3654': attribute type 1 has an invalid length. [ 362.139574][T17561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.141794][T17561] bond5: (slave bond6): making interface the new active one [ 362.144400][T17561] bond5: (slave bond6): Enslaving as an active interface with an up link [ 362.202542][T17565] FAULT_INJECTION: forcing a failure. [ 362.202542][T17565] name failslab, interval 1, probability 0, space 0, times 0 [ 362.202572][T17565] CPU: 3 UID: 0 PID: 17565 Comm: syz.5.3655 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.202595][T17565] Tainted: [L]=SOFTLOCKUP [ 362.202602][T17565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.202611][T17565] Call Trace: [ 362.202618][T17565] [ 362.202624][T17565] dump_stack_lvl+0x100/0x190 [ 362.202653][T17565] should_fail_ex.cold+0x5/0xa [ 362.202677][T17565] should_failslab+0xc2/0x120 [ 362.202722][T17565] kmem_cache_alloc_noprof+0x92/0x6a0 [ 362.202744][T17565] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 362.202773][T17565] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 362.202803][T17565] mmu_topup_memory_caches+0x25/0x170 [ 362.202824][T17565] kvm_mmu_load+0xe8/0x2580 [ 362.202841][T17565] ? apic_has_interrupt_for_ppr+0xb4/0x210 [ 362.202862][T17565] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 362.202886][T17565] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 362.202913][T17565] ? __pfx_kvm_mmu_load+0x10/0x10 [ 362.202932][T17565] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 362.202950][T17565] ? kvm_check_and_inject_events+0x896/0x1050 [ 362.202984][T17565] vcpu_run+0x419f/0x61a0 [ 362.203004][T17565] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 362.203036][T17565] ? __pfx_vcpu_run+0x10/0x10 [ 362.203059][T17565] ? lock_acquire+0x1d1/0x380 [ 362.203077][T17565] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 362.203100][T17565] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 362.203122][T17565] ? __local_bh_enable_ip+0xa5/0x120 [ 362.203144][T17565] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 362.203163][T17565] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 362.203189][T17565] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 362.203209][T17565] ? lock_acquire+0x1d1/0x380 [ 362.203228][T17565] ? do_raw_write_lock+0x11e/0x260 [ 362.203249][T17565] ? find_held_lock+0x2b/0x80 [ 362.203272][T17565] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 362.203293][T17565] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 362.203320][T17565] kvm_vcpu_ioctl+0x730/0x1700 [ 362.203343][T17565] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 362.203367][T17565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.203389][T17565] ? do_vfs_ioctl+0x226/0x13e0 [ 362.203408][T17565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.203424][T17565] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 362.203473][T17565] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 362.203498][T17565] ? __fget_files+0x34/0x3d0 [ 362.203529][T17565] ? selinux_file_ioctl+0x13b/0x290 [ 362.203548][T17565] ? selinux_file_ioctl+0xb6/0x290 [ 362.203569][T17565] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 362.203593][T17565] __x64_sys_ioctl+0x18e/0x210 [ 362.203613][T17565] do_syscall_64+0x123/0x790 [ 362.203633][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.203651][T17565] RIP: 0033:0x7fcc9619e159 [ 362.203665][T17565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.203686][T17565] RSP: 002b:00007fcc943f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.203703][T17565] RAX: ffffffffffffffda RBX: 00007fcc96425fa0 RCX: 00007fcc9619e159 [ 362.203714][T17565] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 362.203725][T17565] RBP: 00007fcc943f6090 R08: 0000000000000000 R09: 0000000000000000 [ 362.203735][T17565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.203745][T17565] R13: 00007fcc96426038 R14: 00007fcc96425fa0 R15: 00007ffe2ab985a8 [ 362.203769][T17565] [ 362.383656][T17568] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 362.461749][T17573] mass_storage.0/lun.0: unable to open backing file: fi [ 362.461774][T17573] FAULT_INJECTION: forcing a failure. [ 362.461774][T17573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.461798][T17573] CPU: 3 UID: 0 PID: 17573 Comm: syz.1.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.461822][T17573] Tainted: [L]=SOFTLOCKUP [ 362.461829][T17573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.461838][T17573] Call Trace: [ 362.461845][T17573] [ 362.461852][T17573] dump_stack_lvl+0x100/0x190 [ 362.461882][T17573] should_fail_ex.cold+0x5/0xa [ 362.461906][T17573] _copy_to_user+0x32/0xd0 [ 362.461929][T17573] simple_read_from_buffer+0xcb/0x170 [ 362.461957][T17573] proc_fail_nth_read+0x1af/0x230 [ 362.461982][T17573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.462007][T17573] ? rw_verify_area+0xce/0x6d0 [ 362.462026][T17573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.462051][T17573] vfs_read+0x1e4/0xb40 [ 362.462072][T17573] ? lock_acquire+0x1d1/0x380 [ 362.462094][T17573] ? __fget_files+0x34/0x3d0 [ 362.462118][T17573] ? __pfx_vfs_read+0x10/0x10 [ 362.462136][T17573] ? find_held_lock+0x2b/0x80 [ 362.462162][T17573] ? __fget_files+0x215/0x3d0 [ 362.462190][T17573] ? __fget_files+0x21f/0x3d0 [ 362.462222][T17573] ksys_read+0x12a/0x250 [ 362.462242][T17573] ? __pfx_ksys_read+0x10/0x10 [ 362.462271][T17573] do_syscall_64+0x123/0x790 [ 362.462294][T17573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.462313][T17573] RIP: 0033:0x7f0e1415e98e [ 362.462329][T17573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.462345][T17573] RSP: 002b:00007f0e14ffbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.462365][T17573] RAX: ffffffffffffffda RBX: 00007f0e14ffc6c0 RCX: 00007f0e1415e98e [ 362.462377][T17573] RDX: 000000000000000f RSI: 00007f0e14ffc0a0 RDI: 0000000000000004 [ 362.462388][T17573] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 362.462400][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.462411][T17573] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 362.462437][T17573] [ 362.529885][T17577] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 362.725841][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 362.730073][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3664'. [ 362.845563][T17605] FAULT_INJECTION: forcing a failure. [ 362.845563][T17605] name failslab, interval 1, probability 0, space 0, times 0 [ 362.845597][T17605] CPU: 3 UID: 0 PID: 17605 Comm: syz.2.3668 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.845621][T17605] Tainted: [L]=SOFTLOCKUP [ 362.845628][T17605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.845638][T17605] Call Trace: [ 362.845645][T17605] [ 362.845653][T17605] dump_stack_lvl+0x100/0x190 [ 362.845686][T17605] should_fail_ex.cold+0x5/0xa [ 362.845712][T17605] should_failslab+0xc2/0x120 [ 362.845739][T17605] __kmalloc_cache_node_noprof+0x94/0x720 [ 362.845766][T17605] ? blk_mq_init_tags+0x8c/0x300 [ 362.845801][T17605] blk_mq_init_tags+0x8c/0x300 [ 362.845832][T17605] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 362.845871][T17605] blk_mq_alloc_sched_tags+0x1de/0x350 [ 362.845901][T17605] blk_mq_alloc_sched_res+0x8e/0x250 [ 362.845928][T17605] elevator_change+0x136/0x530 [ 362.845955][T17605] elv_iosched_store+0x3be/0x460 [ 362.845979][T17605] ? __pfx_elv_iosched_store+0x10/0x10 [ 362.846009][T17605] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 362.846034][T17605] ? __pfx_elv_iosched_store+0x10/0x10 [ 362.846057][T17605] queue_attr_store+0x25f/0x2f0 [ 362.846088][T17605] ? __pfx_queue_attr_store+0x10/0x10 [ 362.846118][T17605] ? __lock_acquire+0x5c0/0x1f40 [ 362.846149][T17605] ? lock_acquire+0x1d1/0x380 [ 362.846170][T17605] ? sysfs_file_kobj+0x21/0x290 [ 362.846194][T17605] ? find_held_lock+0x2b/0x80 [ 362.846221][T17605] ? sysfs_file_kobj+0xe4/0x290 [ 362.846244][T17605] ? sysfs_file_kobj+0xe4/0x290 [ 362.846271][T17605] ? __pfx_queue_attr_store+0x10/0x10 [ 362.846301][T17605] sysfs_kf_write+0xf2/0x150 [ 362.846327][T17605] kernfs_fop_write_iter+0x3e0/0x5f0 [ 362.846348][T17605] ? __pfx_sysfs_kf_write+0x10/0x10 [ 362.846375][T17605] vfs_write+0x6af/0x1050 [ 362.846399][T17605] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 362.846423][T17605] ? __pfx_vfs_write+0x10/0x10 [ 362.846444][T17605] ? find_held_lock+0x2b/0x80 [ 362.846489][T17605] ksys_write+0x12a/0x250 [ 362.846510][T17605] ? __pfx_ksys_write+0x10/0x10 [ 362.846545][T17605] do_syscall_64+0x123/0x790 [ 362.846569][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.846589][T17605] RIP: 0033:0x7faf2919e159 [ 362.846606][T17605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.846624][T17605] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.846643][T17605] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 362.846656][T17605] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 362.846668][T17605] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 362.846679][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.846690][T17605] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 362.846718][T17605] [ 362.958505][T17609] FAULT_INJECTION: forcing a failure. [ 362.958505][T17609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.958526][T17609] CPU: 0 UID: 0 PID: 17609 Comm: syz.1.3670 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.958541][T17609] Tainted: [L]=SOFTLOCKUP [ 362.958546][T17609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.958552][T17609] Call Trace: [ 362.958557][T17609] [ 362.958562][T17609] dump_stack_lvl+0x100/0x190 [ 362.958582][T17609] should_fail_ex.cold+0x5/0xa [ 362.958597][T17609] ? prepare_alloc_pages+0x16d/0x5b0 [ 362.958614][T17609] should_fail_alloc_page+0xeb/0x140 [ 362.958631][T17609] prepare_alloc_pages+0x1f0/0x5b0 [ 362.958650][T17609] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 362.958666][T17609] ? lock_acquire+0x1d1/0x380 [ 362.958685][T17609] ? is_bpf_text_address+0x25/0x1a0 [ 362.958702][T17609] ? find_held_lock+0x2b/0x80 [ 362.958718][T17609] ? is_bpf_text_address+0x8a/0x1a0 [ 362.958734][T17609] ? is_bpf_text_address+0x8a/0x1a0 [ 362.958750][T17609] ? bpf_ksym_find+0x128/0x1c0 [ 362.958761][T17609] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 362.958774][T17609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.958786][T17609] ? is_bpf_text_address+0x94/0x1a0 [ 362.958803][T17609] ? __kernel_text_address+0xd/0x30 [ 362.958814][T17609] ? unwind_get_return_address+0x59/0xa0 [ 362.958830][T17609] ? arch_stack_walk+0xa6/0xf0 [ 362.958852][T17609] ? __pfx_stack_trace_save+0x10/0x10 [ 362.958863][T17609] ? stack_depot_save_flags+0x27/0x9f0 [ 362.958880][T17609] ? lock_acquire+0x1d1/0x380 [ 362.958893][T17609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.958909][T17609] ? policy_nodemask+0xed/0x4f0 [ 362.958926][T17609] alloc_pages_mpol+0x201/0x550 [ 362.958944][T17609] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.958964][T17609] alloc_pages_noprof+0x1a/0x160 [ 362.958975][T17609] get_free_pages_noprof+0x10/0xb0 [ 362.958990][T17609] __kasan_populate_vmalloc+0xa0/0x210 [ 362.959007][T17609] alloc_vmap_area+0x95d/0x2bb0 [ 362.959026][T17609] ? kasan_save_track+0x14/0x30 [ 362.959040][T17609] ? __kasan_kmalloc+0xaa/0xb0 [ 362.959054][T17609] ? __pfx_alloc_vmap_area+0x10/0x10 [ 362.959069][T17609] ? __get_vm_area_node+0x124/0x350 [ 362.959086][T17609] __get_vm_area_node+0x1ed/0x350 [ 362.959104][T17609] __vmalloc_node_range_noprof+0x268/0x1420 [ 362.959122][T17609] ? vhost_task_create+0x1db/0x370 [ 362.959132][T17609] ? lock_acquire+0x1d1/0x380 [ 362.959149][T17609] ? vhost_task_create+0x1db/0x370 [ 362.959160][T17609] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 362.959174][T17609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.959192][T17609] ? rcu_is_watching+0x13/0xc0 [ 362.959208][T17609] ? trace_kmem_cache_alloc+0xdd/0x100 [ 362.959225][T17609] ? vhost_task_create+0x1db/0x370 [ 362.959235][T17609] __vmalloc_node_noprof+0xad/0xf0 [ 362.959251][T17609] ? vhost_task_create+0x1db/0x370 [ 362.959263][T17609] copy_process+0x803/0x8380 [ 362.959284][T17609] ? __pfx_copy_process+0x10/0x10 [ 362.959297][T17609] ? kasan_save_track+0x14/0x30 [ 362.959311][T17609] ? __kasan_kmalloc+0xaa/0xb0 [ 362.959325][T17609] ? lockdep_init_map_type+0x5c/0x250 [ 362.959340][T17609] ? lockdep_init_map_type+0x5c/0x250 [ 362.959354][T17609] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 362.959372][T17609] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 362.959388][T17609] vhost_task_create+0x1db/0x370 [ 362.959399][T17609] ? __pfx_vhost_task_create+0x10/0x10 [ 362.959409][T17609] ? __lock_acquire+0x5c0/0x1f40 [ 362.959449][T17609] ? __pfx_vhost_task_fn+0x10/0x10 [ 362.959463][T17609] ? register_lock_class+0x3f/0x7b0 [ 362.959476][T17609] ? rcu_is_watching+0x13/0xc0 [ 362.959492][T17609] ? trace_contention_end+0x126/0x160 [ 362.959509][T17609] kvm_mmu_post_init_vm+0x1b3/0x360 [ 362.959524][T17609] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 362.959540][T17609] ? __pfx___mutex_lock+0x10/0x10 [ 362.959554][T17609] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 362.959568][T17609] ? lock_acquire+0x1d1/0x380 [ 362.959581][T17609] ? do_raw_write_lock+0x11e/0x260 [ 362.959597][T17609] ? find_held_lock+0x2b/0x80 [ 362.959614][T17609] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 362.959629][T17609] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 362.959648][T17609] kvm_vcpu_ioctl+0x730/0x1700 [ 362.959665][T17609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 362.959685][T17609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.959700][T17609] ? do_vfs_ioctl+0x226/0x13e0 [ 362.959714][T17609] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.959725][T17609] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 362.959743][T17609] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 362.959760][T17609] ? __fget_files+0x34/0x3d0 [ 362.959781][T17609] ? selinux_file_ioctl+0x13b/0x290 [ 362.959794][T17609] ? selinux_file_ioctl+0xb6/0x290 [ 362.959810][T17609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 362.959826][T17609] __x64_sys_ioctl+0x18e/0x210 [ 362.959840][T17609] do_syscall_64+0x123/0x790 [ 362.959853][T17609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.959865][T17609] RIP: 0033:0x7f0e1419e159 [ 362.959875][T17609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.959886][T17609] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.959898][T17609] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 362.959905][T17609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 362.959912][T17609] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 362.959919][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.959925][T17609] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 362.959940][T17609] [ 362.983941][T17613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.007238][T11295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.026927][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.026969][ C3] bridge0: topology change detected, propagating [ 363.027085][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.027094][ C3] bridge0: topology change detected, propagating [ 363.205488][ T851] usb 11-1: USB disconnect, device number 13 [ 363.224267][T17615] FAULT_INJECTION: forcing a failure. [ 363.224267][T17615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.224290][T17615] CPU: 2 UID: 0 PID: 17615 Comm: syz.1.3674 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.224305][T17615] Tainted: [L]=SOFTLOCKUP [ 363.224310][T17615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.224316][T17615] Call Trace: [ 363.224320][T17615] [ 363.224325][T17615] dump_stack_lvl+0x100/0x190 [ 363.224346][T17615] should_fail_ex.cold+0x5/0xa [ 363.224363][T17615] _copy_from_user+0x2e/0xd0 [ 363.224378][T17615] generic_map_update_batch+0x4b8/0x860 [ 363.224394][T17615] ? __pfx_generic_map_update_batch+0x10/0x10 [ 363.224409][T17615] ? __pfx_generic_map_update_batch+0x10/0x10 [ 363.224421][T17615] bpf_map_do_batch+0x66f/0x6d0 [ 363.224439][T17615] __sys_bpf+0x4ce/0x4a30 [ 363.224454][T17615] ? __pfx___sys_bpf+0x10/0x10 [ 363.224466][T17615] ? find_held_lock+0x2b/0x80 [ 363.224484][T17615] ? get_pid_task+0xfc/0x250 [ 363.224501][T17615] ? get_pid_task+0xfc/0x250 [ 363.224521][T17615] ? find_held_lock+0x2b/0x80 [ 363.224541][T17615] ? rcu_read_lock_any_held+0x6a/0x90 [ 363.224559][T17615] ? find_held_lock+0x2b/0x80 [ 363.224575][T17615] ? ksys_write+0x190/0x250 [ 363.224591][T17615] ? ksys_write+0x190/0x250 [ 363.224608][T17615] ? lock_acquire+0x1d1/0x380 [ 363.224639][T17615] ? fput+0x7c/0x100 [ 363.224655][T17615] ? ksys_write+0x1ac/0x250 [ 363.224675][T17615] ? __x64_sys_bpf+0xce/0x140 [ 363.224691][T17615] __x64_sys_bpf+0xce/0x140 [ 363.224710][T17615] ? do_syscall_64+0xae/0x790 [ 363.224730][T17615] do_syscall_64+0x123/0x790 [ 363.224746][T17615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.224758][T17615] RIP: 0033:0x7f0e1419e159 [ 363.224768][T17615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.224779][T17615] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.224791][T17615] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 363.224798][T17615] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 363.224805][T17615] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 363.224812][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.224819][T17615] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 363.224833][T17615] [ 363.425584][T17634] syz_tun: entered allmulticast mode [ 363.474942][T17636] jffs2: notice: (17636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 363.496379][T17636] netlink: zone id is out of range [ 363.496539][T17636] netlink: zone id is out of range [ 363.497916][T17636] netlink: zone id is out of range [ 363.647713][ T215] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 363.807498][ T215] usb 7-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 363.808471][ T215] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 363.808535][ T215] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.808560][ T215] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 363.808589][ T215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.808616][ T215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.811275][ T215] usb 7-1: config 0 descriptor?? [ 364.221839][ T215] saitek 0003:0738:1709.0012: unknown main item tag 0x0 [ 364.221858][ T215] saitek 0003:0738:1709.0012: unknown main item tag 0x0 [ 364.221871][ T215] saitek 0003:0738:1709.0012: unbalanced collection at end of report description [ 364.222178][ T215] saitek 0003:0738:1709.0012: parse failed [ 364.222218][ T215] saitek 0003:0738:1709.0012: probe with driver saitek failed with error -22 [ 364.366605][ T43] kauditd_printk_skb: 209 callbacks suppressed [ 364.366627][ T43] audit: type=1400 audit(1790538116.885:63222): avc: denied { unmount } for pid=14336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 364.393865][ T43] audit: type=1400 audit(1790538116.915:63223): avc: denied { module_request } for pid=17652 comm="syz.1.3688" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 364.422873][ T43] audit: type=1400 audit(1790538116.945:63224): avc: denied { sys_module } for pid=17652 comm="syz.1.3688" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 364.490067][ T43] audit: type=1400 audit(1790538117.015:63225): avc: denied { create } for pid=17657 comm="syz.1.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.492986][ T43] audit: type=1400 audit(1790538117.015:63226): avc: denied { write } for pid=17657 comm="syz.1.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.493509][ T43] audit: type=1400 audit(1790538117.015:63227): avc: denied { read } for pid=17657 comm="syz.1.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.536194][ T43] audit: type=1400 audit(1790538117.055:63228): avc: denied { create } for pid=17659 comm="syz.1.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.539657][ T43] audit: type=1400 audit(1790538117.065:63229): avc: denied { connect } for pid=17659 comm="syz.1.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.543042][ T43] audit: type=1400 audit(1790538117.065:63230): avc: denied { name_bind } for pid=17659 comm="syz.1.3691" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 364.543502][T17660] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 364.570111][ T43] audit: type=1400 audit(1790538117.095:63231): avc: denied { mount } for pid=17661 comm="syz.5.3690" name="/" dev="hugetlbfs" ino=71507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 364.665907][T17668] No source specified [ 364.836494][T17674] UBIFS error (pid: 17674): cannot open "ubi0_0", error -19 [ 365.244547][T17699] caller generic_access_phys+0x130/0x4d0 mapping multiple BARs [ 365.263822][T17699] mass_storage.0/lun.0: file too small: file0 [ 365.354266][T17704] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 365.398748][T17717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3706'. [ 365.453442][T17711] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 365.458533][T17711] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3706'. [ 365.702105][T17735] kAFS: No cell specified [ 365.935113][T17754] FAULT_INJECTION: forcing a failure. [ 365.935113][T17754] name failslab, interval 1, probability 0, space 0, times 0 [ 365.935136][T17754] CPU: 1 UID: 0 PID: 17754 Comm: syz.6.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.935165][T17754] Tainted: [L]=SOFTLOCKUP [ 365.935169][T17754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.935176][T17754] Call Trace: [ 365.935181][T17754] [ 365.935186][T17754] dump_stack_lvl+0x100/0x190 [ 365.935214][T17754] should_fail_ex.cold+0x5/0xa [ 365.935230][T17754] should_failslab+0xc2/0x120 [ 365.935249][T17754] kmem_cache_alloc_noprof+0x92/0x6a0 [ 365.935264][T17754] ? __kernfs_new_node+0xd2/0xa10 [ 365.935278][T17754] __kernfs_new_node+0xd2/0xa10 [ 365.935288][T17754] ? kernfs_add_one+0x611/0xaa0 [ 365.935302][T17754] ? __pfx___kernfs_new_node+0x10/0x10 [ 365.935314][T17754] ? lock_acquire+0x1d1/0x380 [ 365.935327][T17754] ? kernfs_root+0x23/0x2a0 [ 365.935344][T17754] ? find_held_lock+0x2b/0x80 [ 365.935360][T17754] ? kernfs_root+0xee/0x2a0 [ 365.935376][T17754] ? kernfs_root+0xee/0x2a0 [ 365.935396][T17754] kernfs_create_dir_ns+0xa6/0x2b0 [ 365.935428][T17754] internal_create_group+0x36f/0xfb0 [ 365.935453][T17754] ? __pfx_internal_create_group+0x10/0x10 [ 365.935472][T17754] ? kernfs_create_link+0x1bd/0x240 [ 365.935489][T17754] internal_create_groups+0x9d/0x150 [ 365.935508][T17754] device_add+0x77a/0x1970 [ 365.935527][T17754] ? __pfx_device_add+0x10/0x10 [ 365.935551][T17754] input_register_device+0x7d2/0xe00 [ 365.935577][T17754] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 365.935592][T17754] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 365.935604][T17754] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 365.935621][T17754] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 365.935636][T17754] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 365.935653][T17754] ? __fget_files+0x34/0x3d0 [ 365.935674][T17754] ? selinux_file_ioctl+0x13b/0x290 [ 365.935687][T17754] ? selinux_file_ioctl+0xb6/0x290 [ 365.935702][T17754] ? __pfx_uinput_ioctl+0x10/0x10 [ 365.935717][T17754] __x64_sys_ioctl+0x18e/0x210 [ 365.935731][T17754] do_syscall_64+0x123/0x790 [ 365.935756][T17754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.935773][T17754] RIP: 0033:0x7ff94a59e159 [ 365.935791][T17754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.935806][T17754] RSP: 002b:00007ff94b4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.935826][T17754] RAX: ffffffffffffffda RBX: 00007ff94a825fa0 RCX: 00007ff94a59e159 [ 365.935837][T17754] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 365.935845][T17754] RBP: 00007ff94b4d9090 R08: 0000000000000000 R09: 0000000000000000 [ 365.935852][T17754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.935859][T17754] R13: 00007ff94a826038 R14: 00007ff94a825fa0 R15: 00007ffc88a15498 [ 365.935874][T17754] [ 366.144471][T17763] mass_storage.0/lun.0: unable to open backing file: fi [ 366.209626][T17765] Invalid logical block size (-167772161) [ 366.250131][T17771] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 366.252848][T17772] netlink: 'syz.1.3721': attribute type 1 has an invalid length. [ 366.276621][T17772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.279179][T17772] bond6: (slave bond7): making interface the new active one [ 366.280832][T17772] bond6: (slave bond7): Enslaving as an active interface with an up link [ 366.313730][T17771] input: @ as /devices/virtual/input/input98 [ 366.416161][ T215] usb 7-1: USB disconnect, device number 20 [ 366.443671][T17787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 366.469684][T17790] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 366.483290][T17790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.650847][T17762] Set syz1 is full, maxelem 65536 reached [ 366.741644][T17806] tipc: Started in network mode [ 366.741671][T17806] tipc: Node identity 1ee36d87a543, cluster identity 4711 [ 366.741875][T17806] tipc: Enabled bearer , priority 0 [ 366.810275][T17818] FAULT_INJECTION: forcing a failure. [ 366.810275][T17818] name failslab, interval 1, probability 0, space 0, times 0 [ 366.810299][T17818] CPU: 2 UID: 0 PID: 17818 Comm: syz.2.3738 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.810314][T17818] Tainted: [L]=SOFTLOCKUP [ 366.810318][T17818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.810325][T17818] Call Trace: [ 366.810330][T17818] [ 366.810335][T17818] dump_stack_lvl+0x100/0x190 [ 366.810357][T17818] should_fail_ex.cold+0x5/0xa [ 366.810374][T17818] should_failslab+0xc2/0x120 [ 366.810391][T17818] __kmalloc_cache_node_noprof+0x94/0x720 [ 366.810407][T17818] ? sbitmap_queue_init_node+0x291/0x4a0 [ 366.810425][T17818] sbitmap_queue_init_node+0x291/0x4a0 [ 366.810440][T17818] kyber_alloc_sched_data+0x30f/0x7b0 [ 366.810459][T17818] ? __pfx_kyber_alloc_sched_data+0x10/0x10 [ 366.810475][T17818] blk_mq_alloc_sched_res+0x105/0x250 [ 366.810513][T17818] elevator_change+0x136/0x530 [ 366.810530][T17818] elv_iosched_store+0x3be/0x460 [ 366.810544][T17818] ? __pfx_elv_iosched_store+0x10/0x10 [ 366.810564][T17818] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 366.810581][T17818] ? __pfx_elv_iosched_store+0x10/0x10 [ 366.810595][T17818] queue_attr_store+0x25f/0x2f0 [ 366.810616][T17818] ? __pfx_queue_attr_store+0x10/0x10 [ 366.810640][T17818] ? __lock_acquire+0x5c0/0x1f40 [ 366.810666][T17818] ? lock_acquire+0x1d1/0x380 [ 366.810684][T17818] ? sysfs_file_kobj+0x21/0x290 [ 366.810699][T17818] ? find_held_lock+0x2b/0x80 [ 366.810717][T17818] ? sysfs_file_kobj+0xe4/0x290 [ 366.810733][T17818] ? sysfs_file_kobj+0xe4/0x290 [ 366.810751][T17818] ? __pfx_queue_attr_store+0x10/0x10 [ 366.810769][T17818] sysfs_kf_write+0xf2/0x150 [ 366.810787][T17818] kernfs_fop_write_iter+0x3e0/0x5f0 [ 366.810800][T17818] ? __pfx_sysfs_kf_write+0x10/0x10 [ 366.810819][T17818] vfs_write+0x6af/0x1050 [ 366.810833][T17818] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 366.810847][T17818] ? __pfx_vfs_write+0x10/0x10 [ 366.810859][T17818] ? find_held_lock+0x2b/0x80 [ 366.810885][T17818] ksys_write+0x12a/0x250 [ 366.810898][T17818] ? __pfx_ksys_write+0x10/0x10 [ 366.810915][T17818] do_syscall_64+0x123/0x790 [ 366.810929][T17818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.810941][T17818] RIP: 0033:0x7faf2919e159 [ 366.810957][T17818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.810969][T17818] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.810982][T17818] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 366.810990][T17818] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 366.810998][T17818] RBP: 00007faf2923506b R08: 0000000000000000 R09: 0000000000000000 [ 366.811006][T17818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.811013][T17818] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 366.811030][T17818] [ 366.829301][T17822] netlink: 'syz.1.3739': attribute type 9 has an invalid length. [ 366.892034][T17820] FAULT_INJECTION: forcing a failure. [ 366.892034][T17820] name failslab, interval 1, probability 0, space 0, times 0 [ 366.892058][T17820] CPU: 1 UID: 0 PID: 17820 Comm: syz.5.3740 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.892080][T17820] Tainted: [L]=SOFTLOCKUP [ 366.892084][T17820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.892092][T17820] Call Trace: [ 366.892097][T17820] [ 366.892102][T17820] dump_stack_lvl+0x100/0x190 [ 366.892122][T17820] should_fail_ex.cold+0x5/0xa [ 366.892140][T17820] should_failslab+0xc2/0x120 [ 366.892157][T17820] kmem_cache_alloc_noprof+0x92/0x6a0 [ 366.892172][T17820] ? __kernfs_new_node+0xd2/0xa10 [ 366.892186][T17820] __kernfs_new_node+0xd2/0xa10 [ 366.892198][T17820] ? __pfx___kernfs_new_node+0x10/0x10 [ 366.892211][T17820] ? lock_acquire+0x1d1/0x380 [ 366.892224][T17820] ? kernfs_root+0x23/0x2a0 [ 366.892240][T17820] ? find_held_lock+0x2b/0x80 [ 366.892256][T17820] ? kernfs_root+0xee/0x2a0 [ 366.892271][T17820] ? kernfs_root+0xee/0x2a0 [ 366.892291][T17820] kernfs_new_node+0x117/0x150 [ 366.892306][T17820] __kernfs_create_file+0x53/0x350 [ 366.892321][T17820] sysfs_add_file_mode_ns+0x207/0x3c0 [ 366.892341][T17820] sysfs_create_file_ns+0x145/0x1e0 [ 366.892356][T17820] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 366.892374][T17820] ? kernfs_put+0x3f/0x60 [ 366.892384][T17820] ? sysfs_do_create_link_sd+0xbb/0x140 [ 366.892402][T17820] device_create_file+0xf2/0x1d0 [ 366.892415][T17820] device_add+0x92c/0x1970 [ 366.892433][T17820] ? __pfx_device_add+0x10/0x10 [ 366.892450][T17820] ? kobject_get+0xbb/0x150 [ 366.892463][T17820] ? __pfx_software_node_get+0x10/0x10 [ 366.892476][T17820] ? software_node_get+0x68/0x90 [ 366.892493][T17820] ? fwnode_handle_get+0x97/0xd0 [ 366.892517][T17820] iommu_mock_device_add+0x7c/0xb0 [ 366.892544][T17820] iommufd_test+0x3038/0x6600 [ 366.892564][T17820] ? __lock_acquire+0x5c0/0x1f40 [ 366.892584][T17820] ? __lock_acquire+0x5c0/0x1f40 [ 366.892603][T17820] ? __pfx_iommufd_test+0x10/0x10 [ 366.892624][T17820] ? tomoyo_path_number_perm+0x188/0x580 [ 366.892646][T17820] ? lock_acquire+0x1d1/0x380 [ 366.892666][T17820] ? __might_fault+0xc5/0x140 [ 366.892684][T17820] ? find_held_lock+0x2b/0x80 [ 366.892708][T17820] ? __might_fault+0xc5/0x140 [ 366.892725][T17820] iommufd_fops_ioctl+0x358/0x520 [ 366.892742][T17820] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 366.892756][T17820] ? __fget_files+0x34/0x3d0 [ 366.892777][T17820] ? selinux_file_ioctl+0x13b/0x290 [ 366.892791][T17820] ? selinux_file_ioctl+0xb6/0x290 [ 366.892805][T17820] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 366.892821][T17820] __x64_sys_ioctl+0x18e/0x210 [ 366.892835][T17820] do_syscall_64+0x123/0x790 [ 366.892848][T17820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.892860][T17820] RIP: 0033:0x7fcc9619e159 [ 366.892870][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.892880][T17820] RSP: 002b:00007fcc943f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.892891][T17820] RAX: ffffffffffffffda RBX: 00007fcc96425fa0 RCX: 00007fcc9619e159 [ 366.892898][T17820] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 366.892905][T17820] RBP: 00007fcc9623506b R08: 0000000000000000 R09: 0000000000000000 [ 366.892911][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.892919][T17820] R13: 00007fcc96426038 R14: 00007fcc96425fa0 R15: 00007ffe2ab985a8 [ 366.892935][T17820] [ 367.070381][T11295] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 367.247547][T11295] usb 11-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 367.249147][T11295] usb 11-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 367.249178][T11295] usb 11-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.249200][T11295] usb 11-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 367.249222][T11295] usb 11-1: config 0 interface 0 has no altsetting 0 [ 367.249247][T11295] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.251672][T11295] usb 11-1: config 0 descriptor?? [ 367.590148][T17853] infiniband syz0: set active [ 367.590167][T17853] infiniband syz0: added veth1_to_bridge [ 367.595286][T17853] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 367.599493][T17853] infiniband syz0: Couldn't open port 1 [ 367.599677][T17853] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 367.599704][T17853] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 367.599739][T17853] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 367.623125][T17853] RDS/IB: syz0: added [ 367.623735][T17853] smc: adding ib device syz0 with port count 1 [ 367.623856][T17853] smc: ib device syz0 port 1 has no pnetid [ 367.658808][T11295] saitek 0003:0738:1709.0013: unknown main item tag 0x0 [ 367.658862][T11295] saitek 0003:0738:1709.0013: unbalanced collection at end of report description [ 367.659163][T11295] saitek 0003:0738:1709.0013: parse failed [ 367.659203][T11295] saitek 0003:0738:1709.0013: probe with driver saitek failed with error -22 [ 367.778748][T17857] FAULT_INJECTION: forcing a failure. [ 367.778748][T17857] name failslab, interval 1, probability 0, space 0, times 0 [ 367.778770][T17857] CPU: 0 UID: 0 PID: 17857 Comm: syz.1.3751 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.778786][T17857] Tainted: [L]=SOFTLOCKUP [ 367.778790][T17857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.778797][T17857] Call Trace: [ 367.778801][T17857] [ 367.778806][T17857] dump_stack_lvl+0x100/0x190 [ 367.778827][T17857] should_fail_ex.cold+0x5/0xa [ 367.778844][T17857] should_failslab+0xc2/0x120 [ 367.778860][T17857] __kvmalloc_node_noprof+0x113/0x9b0 [ 367.778876][T17857] ? sbitmap_init_node+0x1cc/0x720 [ 367.778891][T17857] sbitmap_init_node+0x1cc/0x720 [ 367.778904][T17857] ? __kmalloc_cache_node_noprof+0x271/0x720 [ 367.778921][T17857] sbitmap_queue_init_node+0x40/0x4a0 [ 367.778936][T17857] blk_mq_init_tags+0x184/0x300 [ 367.778955][T17857] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 367.778978][T17857] blk_mq_alloc_sched_tags+0x1de/0x350 [ 367.778997][T17857] blk_mq_alloc_sched_res+0x8e/0x250 [ 367.779014][T17857] elevator_change+0x136/0x530 [ 367.779029][T17857] elv_iosched_store+0x3be/0x460 [ 367.779043][T17857] ? __pfx_elv_iosched_store+0x10/0x10 [ 367.779061][T17857] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 367.779077][T17857] ? __pfx_elv_iosched_store+0x10/0x10 [ 367.779091][T17857] queue_attr_store+0x25f/0x2f0 [ 367.779126][T17857] ? __pfx_queue_attr_store+0x10/0x10 [ 367.779146][T17857] ? __lock_acquire+0x5c0/0x1f40 [ 367.779164][T17857] ? lock_acquire+0x1d1/0x380 [ 367.779176][T17857] ? sysfs_file_kobj+0x21/0x290 [ 367.779192][T17857] ? find_held_lock+0x2b/0x80 [ 367.779208][T17857] ? sysfs_file_kobj+0xe4/0x290 [ 367.779222][T17857] ? sysfs_file_kobj+0xe4/0x290 [ 367.779238][T17857] ? __pfx_queue_attr_store+0x10/0x10 [ 367.779257][T17857] sysfs_kf_write+0xf2/0x150 [ 367.779273][T17857] kernfs_fop_write_iter+0x3e0/0x5f0 [ 367.779286][T17857] ? __pfx_sysfs_kf_write+0x10/0x10 [ 367.779303][T17857] vfs_write+0x6af/0x1050 [ 367.779316][T17857] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 367.779331][T17857] ? __pfx_vfs_write+0x10/0x10 [ 367.779343][T17857] ? find_held_lock+0x2b/0x80 [ 367.779369][T17857] ksys_write+0x12a/0x250 [ 367.779382][T17857] ? __pfx_ksys_write+0x10/0x10 [ 367.779420][T17857] do_syscall_64+0x123/0x790 [ 367.779443][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.779460][T17857] RIP: 0033:0x7f0e1419e159 [ 367.779475][T17857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.779493][T17857] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.779505][T17857] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 367.779512][T17857] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 367.779519][T17857] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 367.779526][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.779533][T17857] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 367.779548][T17857] [ 367.810071][T17859] openvswitch: netlink: Message has 56 unknown bytes. [ 367.851061][T17861] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 367.861460][ T851] tipc: Node number set to 3147853191 [ 367.889457][T17863] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 367.964101][ T5878] usb 10-1: USB disconnect, device number 20 [ 368.018862][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.027276][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.032619][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.046115][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.049545][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.100007][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.101499][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.101951][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.103580][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.103954][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.122588][T16491] bridge0: port 3(syz_tun) entered disabled state [ 368.151749][T16491] syz_tun (unregistering): left allmulticast mode [ 368.151773][T16491] syz_tun (unregistering): left promiscuous mode [ 368.151858][T16491] bridge0: port 3(syz_tun) entered disabled state [ 368.436968][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 368.436983][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 368.614260][T17865] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.614342][T17865] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.614400][T17865] bridge_slave_0: entered allmulticast mode [ 368.615152][T17865] bridge_slave_0: entered promiscuous mode [ 368.626174][T17865] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.626248][T17865] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.626306][T17865] bridge_slave_1: entered allmulticast mode [ 368.633794][T17865] bridge_slave_1: entered promiscuous mode [ 368.661874][T17865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.666633][T17865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.695901][T17865] team0: Port device team_slave_0 added [ 368.698485][T17865] team0: Port device team_slave_1 added [ 368.725381][T17865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.725397][T17865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.725416][T17865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.726590][T17865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.726603][T17865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.726624][T17865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.770383][T17865] hsr_slave_0: entered promiscuous mode [ 368.771210][T17865] hsr_slave_1: entered promiscuous mode [ 368.771833][T17865] debugfs: 'hsr0' already exists in 'hsr' [ 368.771853][T17865] Cannot create hsr debugfs directory [ 369.005413][T17865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.005449][T17865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.089694][T17897] FAULT_INJECTION: forcing a failure. [ 369.089694][T17897] name failslab, interval 1, probability 0, space 0, times 0 [ 369.089728][T17897] CPU: 3 UID: 0 PID: 17897 Comm: syz.2.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.089755][T17897] Tainted: [L]=SOFTLOCKUP [ 369.089764][T17897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.089776][T17897] Call Trace: [ 369.089784][T17897] [ 369.089793][T17897] dump_stack_lvl+0x100/0x190 [ 369.089826][T17897] should_fail_ex.cold+0x5/0xa [ 369.089855][T17897] should_failslab+0xc2/0x120 [ 369.089898][T17897] __kvmalloc_node_noprof+0x113/0x9b0 [ 369.089927][T17897] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 369.089962][T17897] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 369.089997][T17897] mmu_topup_memory_caches+0x25/0x170 [ 369.090022][T17897] kvm_mmu_load+0xe8/0x2580 [ 369.090046][T17897] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 369.090076][T17897] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 369.090107][T17897] ? __pfx_kvm_mmu_load+0x10/0x10 [ 369.090130][T17897] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 369.090152][T17897] ? kvm_check_and_inject_events+0x896/0x1050 [ 369.090179][T17897] vcpu_run+0x419f/0x61a0 [ 369.090203][T17897] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 369.090241][T17897] ? __pfx_vcpu_run+0x10/0x10 [ 369.090269][T17897] ? lock_acquire+0x1d1/0x380 [ 369.090292][T17897] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 369.090319][T17897] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 369.090346][T17897] ? __local_bh_enable_ip+0xa5/0x120 [ 369.090372][T17897] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 369.090397][T17897] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 369.090428][T17897] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 369.090452][T17897] ? lock_acquire+0x1d1/0x380 [ 369.090474][T17897] ? do_raw_write_lock+0x11e/0x260 [ 369.090499][T17897] ? find_held_lock+0x2b/0x80 [ 369.090528][T17897] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 369.090554][T17897] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 369.090586][T17897] kvm_vcpu_ioctl+0x730/0x1700 [ 369.090620][T17897] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.090647][T17897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.090674][T17897] ? do_vfs_ioctl+0x226/0x13e0 [ 369.090698][T17897] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 369.090718][T17897] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 369.090746][T17897] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 369.090775][T17897] ? __fget_files+0x34/0x3d0 [ 369.090813][T17897] ? selinux_file_ioctl+0x13b/0x290 [ 369.090835][T17897] ? selinux_file_ioctl+0xb6/0x290 [ 369.090860][T17897] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.090885][T17897] __x64_sys_ioctl+0x18e/0x210 [ 369.090906][T17897] do_syscall_64+0x123/0x790 [ 369.090931][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.090951][T17897] RIP: 0033:0x7faf2919e159 [ 369.090969][T17897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.090987][T17897] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.091008][T17897] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 369.091022][T17897] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 369.091033][T17897] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 369.091045][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.091057][T17897] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 369.091084][T17897] [ 369.153429][T17865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.153464][T17865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.202358][T17900] FAULT_INJECTION: forcing a failure. [ 369.202358][T17900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.202380][T17900] CPU: 1 UID: 0 PID: 17900 Comm: syz.2.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.202395][T17900] Tainted: [L]=SOFTLOCKUP [ 369.202399][T17900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.202405][T17900] Call Trace: [ 369.202409][T17900] [ 369.202414][T17900] dump_stack_lvl+0x100/0x190 [ 369.202438][T17900] should_fail_ex.cold+0x5/0xa [ 369.202461][T17900] _copy_from_user+0x2e/0xd0 [ 369.202488][T17900] generic_map_update_batch+0x51d/0x860 [ 369.202516][T17900] ? __pfx_generic_map_update_batch+0x10/0x10 [ 369.202536][T17900] ? __pfx_generic_map_update_batch+0x10/0x10 [ 369.202548][T17900] bpf_map_do_batch+0x66f/0x6d0 [ 369.202565][T17900] __sys_bpf+0x4ce/0x4a30 [ 369.202580][T17900] ? __pfx___sys_bpf+0x10/0x10 [ 369.202592][T17900] ? find_held_lock+0x2b/0x80 [ 369.202609][T17900] ? get_pid_task+0xfc/0x250 [ 369.202624][T17900] ? get_pid_task+0xfc/0x250 [ 369.202643][T17900] ? find_held_lock+0x2b/0x80 [ 369.202663][T17900] ? rcu_read_lock_any_held+0x6a/0x90 [ 369.202681][T17900] ? find_held_lock+0x2b/0x80 [ 369.202697][T17900] ? ksys_write+0x190/0x250 [ 369.202709][T17900] ? ksys_write+0x190/0x250 [ 369.202721][T17900] ? lock_acquire+0x1d1/0x380 [ 369.202743][T17900] ? fput+0x7c/0x100 [ 369.202758][T17900] ? ksys_write+0x1ac/0x250 [ 369.202772][T17900] ? __x64_sys_bpf+0xce/0x140 [ 369.202784][T17900] __x64_sys_bpf+0xce/0x140 [ 369.202796][T17900] ? do_syscall_64+0xae/0x790 [ 369.202809][T17900] do_syscall_64+0x123/0x790 [ 369.202822][T17900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.202833][T17900] RIP: 0033:0x7faf2919e159 [ 369.202843][T17900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.202854][T17900] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.202867][T17900] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 369.202874][T17900] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 369.202881][T17900] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 369.202887][T17900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.202894][T17900] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 369.202908][T17900] [ 369.263514][T17865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.263547][T17865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.352222][T17865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.352243][T17865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.384394][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'. [ 369.442359][ T43] kauditd_printk_skb: 221 callbacks suppressed [ 369.442371][ T43] audit: type=1400 audit(1790538121.965:63453): avc: denied { read } for pid=17910 comm="syz.2.3764" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 369.442644][ T43] audit: type=1400 audit(1790538121.965:63454): avc: denied { open } for pid=17910 comm="syz.2.3764" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 369.443195][ T43] audit: type=1400 audit(1790538121.965:63455): avc: denied { create } for pid=17910 comm="syz.2.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.443449][ T43] audit: type=1400 audit(1790538121.965:63456): avc: denied { write } for pid=17910 comm="syz.2.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.443892][ T43] audit: type=1400 audit(1790538121.965:63457): avc: denied { read } for pid=17910 comm="syz.2.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.444921][ T43] audit: type=1400 audit(1790538121.965:63458): avc: denied { ioctl } for pid=17910 comm="syz.2.3764" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 369.525323][T17913] syzkaller0: entered promiscuous mode [ 369.525340][T17913] syzkaller0: entered allmulticast mode [ 369.532343][ T43] audit: type=1400 audit(1790538122.055:63459): avc: denied { create } for pid=17912 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.533524][ T43] audit: type=1400 audit(1790538122.055:63460): avc: denied { ioctl } for pid=17912 comm="syz.1.3765" path="socket:[75814]" dev="sockfs" ino=75814 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.534266][ T43] audit: type=1400 audit(1790538122.055:63461): avc: denied { write } for pid=17912 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.571831][T17916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17916 comm=syz.2.3766 [ 369.572554][ T43] audit: type=1400 audit(1790538122.105:63462): avc: denied { create } for pid=17914 comm="syz.2.3766" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 369.617231][T17865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.620748][T17865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.621220][T17865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.622941][T17865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.623438][T17865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.625649][T17865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.626083][T17865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.642599][T17865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.701658][T17865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.709787][T17865] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.712751][T16869] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.712798][T16869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.716083][T16869] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.716127][T16869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.763372][ T851] usb 11-1: USB disconnect, device number 14 [ 369.803141][T17930] fuse: Bad value for 'fd' [ 370.011622][T17865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.169085][T17957] misc userio: Begin command sent, but we're already running [ 370.189149][T17865] veth0_vlan: entered promiscuous mode [ 370.192883][T17865] veth1_vlan: entered promiscuous mode [ 370.206426][T17865] veth0_macvtap: entered promiscuous mode [ 370.211263][T17865] veth1_macvtap: entered promiscuous mode [ 370.218040][T17865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.221290][T17865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.226252][ T9010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.226345][ T9010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.226423][ T9010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.226452][ T9010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.230890][ T5734] Bluetooth: hci0: command tx timeout [ 370.322303][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.322322][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.335359][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.335378][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.377868][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.461740][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 370.555705][T17978] FAULT_INJECTION: forcing a failure. [ 370.555705][T17978] name failslab, interval 1, probability 0, space 0, times 0 [ 370.555739][T17978] CPU: 1 UID: 0 PID: 17978 Comm: syz.2.3779 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.555765][T17978] Tainted: [L]=SOFTLOCKUP [ 370.555772][T17978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.555784][T17978] Call Trace: [ 370.555791][T17978] [ 370.555799][T17978] dump_stack_lvl+0x100/0x190 [ 370.555831][T17978] should_fail_ex.cold+0x5/0xa [ 370.555871][T17978] should_failslab+0xc2/0x120 [ 370.555893][T17978] kmem_cache_alloc_noprof+0x92/0x6a0 [ 370.555911][T17978] ? __kernfs_new_node+0xd2/0xa10 [ 370.555930][T17978] __kernfs_new_node+0xd2/0xa10 [ 370.555943][T17978] ? kernfs_add_one+0x611/0xaa0 [ 370.555965][T17978] ? __pfx___kernfs_new_node+0x10/0x10 [ 370.555986][T17978] ? lock_acquire+0x1d1/0x380 [ 370.556007][T17978] ? kernfs_root+0x23/0x2a0 [ 370.556034][T17978] ? find_held_lock+0x2b/0x80 [ 370.556061][T17978] ? kernfs_root+0xee/0x2a0 [ 370.556085][T17978] ? kernfs_root+0xee/0x2a0 [ 370.556117][T17978] kernfs_create_dir_ns+0xa6/0x2b0 [ 370.556147][T17978] internal_create_group+0x36f/0xfb0 [ 370.556182][T17978] ? __pfx_internal_create_group+0x10/0x10 [ 370.556215][T17978] ? kernfs_create_link+0x1bd/0x240 [ 370.556242][T17978] internal_create_groups+0x9d/0x150 [ 370.556272][T17978] device_add+0x77a/0x1970 [ 370.556304][T17978] ? __pfx_device_add+0x10/0x10 [ 370.556340][T17978] input_register_device+0x7d2/0xe00 [ 370.556375][T17978] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 370.556399][T17978] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 370.556419][T17978] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 370.556445][T17978] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 370.556469][T17978] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 370.556497][T17978] ? __fget_files+0x34/0x3d0 [ 370.556534][T17978] ? selinux_file_ioctl+0x13b/0x290 [ 370.556555][T17978] ? selinux_file_ioctl+0xb6/0x290 [ 370.556581][T17978] ? __pfx_uinput_ioctl+0x10/0x10 [ 370.556604][T17978] __x64_sys_ioctl+0x18e/0x210 [ 370.556627][T17978] do_syscall_64+0x123/0x790 [ 370.556650][T17978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.556670][T17978] RIP: 0033:0x7faf2919e159 [ 370.556686][T17978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.556703][T17978] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.556722][T17978] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 370.556735][T17978] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 370.556746][T17978] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 370.556758][T17978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.556769][T17978] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 370.556797][T17978] [ 370.684959][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3782'. [ 370.684982][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3782'. [ 370.733866][T17986] xt_hashlimit: size too large, truncated to 1048576 [ 370.859165][T17993] input: @ as /devices/virtual/input/input101 [ 370.884237][T17991] mass_storage.0/lun.0: unable to open backing file: fi [ 371.184939][T18018] netlink: 'syz.6.3790': attribute type 1 has an invalid length. [ 371.194623][T18018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.448084][T18033] macvtap1: entered allmulticast mode [ 371.448099][T18033] bond0: entered allmulticast mode [ 371.448108][T18033] bond_slave_0: entered allmulticast mode [ 371.448118][T18033] bond_slave_1: entered allmulticast mode [ 371.448284][T18033] bond_slave_0: entered promiscuous mode [ 371.448311][T18033] bond_slave_1: entered promiscuous mode [ 371.449306][T18033] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 371.450961][T18033] bond0: left allmulticast mode [ 371.450974][T18033] bond_slave_0: left allmulticast mode [ 371.450983][T18033] bond_slave_1: left allmulticast mode [ 371.495207][ T5821] bond_slave_0: left promiscuous mode [ 371.495226][ T5821] bond_slave_1: left promiscuous mode [ 371.606491][T18048] Bluetooth: MGMT ver 1.23 [ 371.674237][T18056] FAULT_INJECTION: forcing a failure. [ 371.674237][T18056] name fail_futex, interval 1, probability 0, space 0, times 0 [ 371.674262][T18056] CPU: 1 UID: 0 PID: 18056 Comm: syz.2.3806 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.674279][T18056] Tainted: [L]=SOFTLOCKUP [ 371.674284][T18056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.674291][T18056] Call Trace: [ 371.674296][T18056] [ 371.674301][T18056] dump_stack_lvl+0x100/0x190 [ 371.674323][T18056] should_fail_ex.cold+0x5/0xa [ 371.674340][T18056] get_futex_key+0x1d0/0x14f0 [ 371.674360][T18056] ? __pfx_get_futex_key+0x10/0x10 [ 371.674381][T18056] futex_wait_setup+0x91/0x540 [ 371.674397][T18056] __futex_wait+0x19f/0x300 [ 371.674409][T18056] ? __pfx___futex_wait+0x10/0x10 [ 371.674420][T18056] ? __pfx_try_to_wake_up+0x10/0x10 [ 371.674432][T18056] ? futex_hash+0x311/0x400 [ 371.674451][T18056] ? __pfx_futex_wake_mark+0x10/0x10 [ 371.674466][T18056] ? find_held_lock+0x2b/0x80 [ 371.674483][T18056] ? futex_wake+0x4ea/0x5e0 [ 371.674497][T18056] futex_wait+0xe6/0x370 [ 371.674509][T18056] ? __pfx_futex_wait+0x10/0x10 [ 371.674524][T18056] ? vfs_write+0x914/0x1050 [ 371.674535][T18056] ? vfs_write+0x15d/0x1050 [ 371.674550][T18056] do_futex+0x265/0x440 [ 371.674566][T18056] ? __pfx_do_futex+0x10/0x10 [ 371.674585][T18056] __x64_sys_futex+0x34f/0x4d0 [ 371.674602][T18056] ? fput+0x7c/0x100 [ 371.674617][T18056] ? __pfx___x64_sys_futex+0x10/0x10 [ 371.674632][T18056] ? ksys_write+0x1ac/0x250 [ 371.674644][T18056] ? __pfx_ksys_write+0x10/0x10 [ 371.674660][T18056] do_syscall_64+0x123/0x790 [ 371.674674][T18056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.674686][T18056] RIP: 0033:0x7faf2919e159 [ 371.674695][T18056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.674706][T18056] RSP: 002b:00007faf2a0500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 371.674718][T18056] RAX: ffffffffffffffda RBX: 00007faf29425fa8 RCX: 00007faf2919e159 [ 371.674725][T18056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf29425fa8 [ 371.674732][T18056] RBP: 00007faf29425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 371.674738][T18056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.674745][T18056] R13: 00007faf29426038 R14: 00007ffcef7c06c0 R15: 00007ffcef7c07a8 [ 371.674759][T18056] [ 371.687664][T18054] FAULT_INJECTION: forcing a failure. [ 371.687664][T18054] name failslab, interval 1, probability 0, space 0, times 0 [ 371.687688][T18054] CPU: 2 UID: 0 PID: 18054 Comm: syz.1.3805 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.687705][T18054] Tainted: [L]=SOFTLOCKUP [ 371.687710][T18054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.687718][T18054] Call Trace: [ 371.687722][T18054] [ 371.687727][T18054] dump_stack_lvl+0x100/0x190 [ 371.687753][T18054] should_fail_ex.cold+0x5/0xa [ 371.687771][T18054] should_failslab+0xc2/0x120 [ 371.687788][T18054] kmem_cache_alloc_noprof+0x92/0x6a0 [ 371.687803][T18054] ? __kernfs_new_node+0xd2/0xa10 [ 371.687818][T18054] __kernfs_new_node+0xd2/0xa10 [ 371.687830][T18054] ? __pfx___kernfs_new_node+0x10/0x10 [ 371.687843][T18054] ? lock_acquire+0x1d1/0x380 [ 371.687856][T18054] ? kernfs_root+0x23/0x2a0 [ 371.687872][T18054] ? find_held_lock+0x2b/0x80 [ 371.687891][T18054] ? kernfs_root+0xee/0x2a0 [ 371.687907][T18054] ? kernfs_root+0xee/0x2a0 [ 371.687928][T18054] kernfs_new_node+0x117/0x150 [ 371.687942][T18054] kernfs_create_link+0xcc/0x240 [ 371.687958][T18054] sysfs_do_create_link_sd+0x90/0x140 [ 371.687975][T18054] sysfs_create_link+0x61/0xc0 [ 371.687994][T18054] software_node_notify+0x182/0x270 [ 371.688016][T18054] device_add+0x2bc/0x1970 [ 371.688036][T18054] ? __pfx_device_add+0x10/0x10 [ 371.688055][T18054] ? kobject_get+0xbb/0x150 [ 371.688070][T18054] ? __pfx_software_node_get+0x10/0x10 [ 371.688083][T18054] ? software_node_get+0x68/0x90 [ 371.688095][T18054] ? fwnode_handle_get+0x97/0xd0 [ 371.688115][T18054] iommu_mock_device_add+0x7c/0xb0 [ 371.688133][T18054] iommufd_test+0x3038/0x6600 [ 371.688150][T18054] ? __lock_acquire+0x5c0/0x1f40 [ 371.688164][T18054] ? __lock_acquire+0x5c0/0x1f40 [ 371.688178][T18054] ? __pfx_iommufd_test+0x10/0x10 [ 371.688192][T18054] ? tomoyo_path_number_perm+0x188/0x580 [ 371.688208][T18054] ? lock_acquire+0x1d1/0x380 [ 371.688220][T18054] ? __might_fault+0xc5/0x140 [ 371.688232][T18054] ? find_held_lock+0x2b/0x80 [ 371.688250][T18054] ? __might_fault+0xc5/0x140 [ 371.688266][T18054] iommufd_fops_ioctl+0x358/0x520 [ 371.688283][T18054] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 371.688298][T18054] ? __fget_files+0x34/0x3d0 [ 371.688319][T18054] ? selinux_file_ioctl+0x13b/0x290 [ 371.688332][T18054] ? selinux_file_ioctl+0xb6/0x290 [ 371.688347][T18054] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 371.688364][T18054] __x64_sys_ioctl+0x18e/0x210 [ 371.688377][T18054] do_syscall_64+0x123/0x790 [ 371.688390][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.688402][T18054] RIP: 0033:0x7f0e1419e159 [ 371.688412][T18054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.688423][T18054] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.688435][T18054] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 371.688442][T18054] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 371.688449][T18054] RBP: 00007f0e1423506b R08: 0000000000000000 R09: 0000000000000000 [ 371.688456][T18054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.688462][T18054] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 371.688477][T18054] [ 371.688903][T18054] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 371.797455][ T5508] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 371.799161][T18049] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 371.871258][T18067] FAULT_INJECTION: forcing a failure. [ 371.871258][T18067] name failslab, interval 1, probability 0, space 0, times 0 [ 371.871279][T18067] CPU: 2 UID: 0 PID: 18067 Comm: syz.1.3809 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.871294][T18067] Tainted: [L]=SOFTLOCKUP [ 371.871298][T18067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.871305][T18067] Call Trace: [ 371.871309][T18067] [ 371.871314][T18067] dump_stack_lvl+0x100/0x190 [ 371.871335][T18067] should_fail_ex.cold+0x5/0xa [ 371.871352][T18067] should_failslab+0xc2/0x120 [ 371.871369][T18067] __kmalloc_cache_node_noprof+0x94/0x720 [ 371.871407][T18067] ? sbitmap_queue_init_node+0x291/0x4a0 [ 371.871424][T18067] sbitmap_queue_init_node+0x291/0x4a0 [ 371.871439][T18067] blk_mq_init_tags+0x184/0x300 [ 371.871458][T18067] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 371.871481][T18067] blk_mq_alloc_sched_tags+0x1de/0x350 [ 371.871499][T18067] blk_mq_alloc_sched_res+0x8e/0x250 [ 371.871514][T18067] elevator_change+0x136/0x530 [ 371.871530][T18067] elv_iosched_store+0x3be/0x460 [ 371.871544][T18067] ? __pfx_elv_iosched_store+0x10/0x10 [ 371.871562][T18067] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 371.871578][T18067] ? __pfx_elv_iosched_store+0x10/0x10 [ 371.871591][T18067] queue_attr_store+0x25f/0x2f0 [ 371.871610][T18067] ? __pfx_queue_attr_store+0x10/0x10 [ 371.871628][T18067] ? __lock_acquire+0x5c0/0x1f40 [ 371.871646][T18067] ? lock_acquire+0x1d1/0x380 [ 371.871658][T18067] ? sysfs_file_kobj+0x21/0x290 [ 371.871673][T18067] ? find_held_lock+0x2b/0x80 [ 371.871690][T18067] ? sysfs_file_kobj+0xe4/0x290 [ 371.871704][T18067] ? sysfs_file_kobj+0xe4/0x290 [ 371.871721][T18067] ? __pfx_queue_attr_store+0x10/0x10 [ 371.871739][T18067] sysfs_kf_write+0xf2/0x150 [ 371.871755][T18067] kernfs_fop_write_iter+0x3e0/0x5f0 [ 371.871768][T18067] ? __pfx_sysfs_kf_write+0x10/0x10 [ 371.871784][T18067] vfs_write+0x6af/0x1050 [ 371.871798][T18067] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 371.871813][T18067] ? __pfx_vfs_write+0x10/0x10 [ 371.871824][T18067] ? find_held_lock+0x2b/0x80 [ 371.871851][T18067] ksys_write+0x12a/0x250 [ 371.871863][T18067] ? __pfx_ksys_write+0x10/0x10 [ 371.871881][T18067] do_syscall_64+0x123/0x790 [ 371.871894][T18067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.871906][T18067] RIP: 0033:0x7f0e1419e159 [ 371.871916][T18067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.871927][T18067] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.871938][T18067] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 371.871946][T18067] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 371.871952][T18067] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 371.871959][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.871965][T18067] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 371.871981][T18067] [ 371.901673][T18070] openvswitch: netlink: Message has 56 unknown bytes. [ 372.307560][ T5734] Bluetooth: hci0: command tx timeout [ 372.421178][T11295] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 372.481348][T18050] ima: policy update completed [ 374.387331][ T5734] Bluetooth: hci0: command tx timeout [ 375.706448][ T43] kauditd_printk_skb: 178 callbacks suppressed [ 375.706468][ T43] audit: type=1400 audit(1790538128.225:63641): avc: denied { write } for pid=18102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.765932][ T43] audit: type=1400 audit(1790538128.285:63642): avc: denied { write } for pid=18105 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.467228][ T5734] Bluetooth: hci0: command tx timeout [ 378.313105][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.894815][ T43] audit: type=1400 audit(1790538131.415:63643): avc: denied { write } for pid=18107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.954853][ T43] audit: type=1400 audit(1790538131.475:63644): avc: denied { write } for pid=18110 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.278960][ T43] audit: type=1400 audit(1790538134.805:63645): avc: denied { mount } for pid=18115 comm="syz.6.3814" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 382.280003][ T43] audit: type=1400 audit(1790538134.805:63646): avc: denied { mount } for pid=18119 comm="syz.1.3812" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 382.280471][ T43] audit: type=1400 audit(1790538134.805:63647): avc: denied { search } for pid=18119 comm="syz.1.3812" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 382.283759][ T43] audit: type=1400 audit(1790538134.805:63648): avc: denied { write } for pid=18119 comm="syz.1.3812" name="set_event" dev="tracefs" ino=6151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 382.283831][ T43] audit: type=1400 audit(1790538134.805:63649): avc: denied { open } for pid=18119 comm="syz.1.3812" path="/308/tracing/set_event" dev="tracefs" ino=6151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 382.284638][ T43] audit: type=1400 audit(1790538134.805:63650): avc: denied { read } for pid=18119 comm="syz.1.3812" path="/308/tracing/set_event" dev="tracefs" ino=6151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 382.306492][ T43] audit: type=1800 audit(1790538134.825:63651): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5100 res=0 errno=0 [ 382.323541][ T43] audit: type=1400 audit(1790538134.845:63652): avc: denied { unmount } for pid=15554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 382.337661][ T43] audit: type=1400 audit(1790538134.865:63653): avc: denied { ioctl } for pid=18119 comm="syz.1.3812" path="/308/tracing/set_event" dev="tracefs" ino=6151 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 382.342402][ T43] audit: type=1400 audit(1790538134.865:63654): avc: denied { create } for pid=18124 comm="syz.2.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 382.346147][T18126] FAULT_INJECTION: forcing a failure. [ 382.346147][T18126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.346169][T18126] CPU: 2 UID: 0 PID: 18126 Comm: syz.2.3815 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.346185][T18126] Tainted: [L]=SOFTLOCKUP [ 382.346189][T18126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.346213][T18126] Call Trace: [ 382.346219][T18126] [ 382.346224][T18126] dump_stack_lvl+0x100/0x190 [ 382.346245][T18126] should_fail_ex.cold+0x5/0xa [ 382.346261][T18126] _copy_from_iter+0x1f4/0x1690 [ 382.346279][T18126] ? __pfx__copy_from_iter+0x10/0x10 [ 382.346294][T18126] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 382.346312][T18126] ? lock_acquire+0x1d1/0x380 [ 382.346327][T18126] copy_page_from_iter+0x238/0x300 [ 382.346343][T18126] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 382.346364][T18126] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 382.346382][T18126] ? lock_acquire+0x1d1/0x380 [ 382.346394][T18126] ? avc_has_perm_noaudit+0x56/0x470 [ 382.346412][T18126] ? find_held_lock+0x2b/0x80 [ 382.346437][T18126] tun_get_user+0x1674/0x3cc0 [ 382.346461][T18126] ? __lock_acquire+0x5c0/0x1f40 [ 382.346474][T18126] ? __pfx_tun_get_user+0x10/0x10 [ 382.346489][T18126] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 382.346511][T18126] ? find_held_lock+0x2b/0x80 [ 382.346527][T18126] ? tun_get+0x191/0x370 [ 382.346540][T18126] ? tun_get+0x191/0x370 [ 382.346557][T18126] tun_chr_write_iter+0xdc/0x200 [ 382.346573][T18126] vfs_write+0x6af/0x1050 [ 382.346586][T18126] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 382.346603][T18126] ? __pfx_vfs_write+0x10/0x10 [ 382.346615][T18126] ? find_held_lock+0x2b/0x80 [ 382.346640][T18126] ksys_write+0x12a/0x250 [ 382.346653][T18126] ? __pfx_ksys_write+0x10/0x10 [ 382.346669][T18126] do_syscall_64+0x123/0x790 [ 382.346683][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.346694][T18126] RIP: 0033:0x7faf2915e98e [ 382.346704][T18126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.346716][T18126] RSP: 002b:00007faf2a04ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.346727][T18126] RAX: ffffffffffffffda RBX: 00007faf2a0506c0 RCX: 00007faf2915e98e [ 382.346734][T18126] RDX: 000000000000004c RSI: 0000200000000300 RDI: 00000000000000c8 [ 382.346741][T18126] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 382.346747][T18126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.346754][T18126] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 382.346768][T18126] [ 382.356014][T18128] jffs2: notice: (18128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 382.453422][T18139] FAULT_INJECTION: forcing a failure. [ 382.453422][T18139] name failslab, interval 1, probability 0, space 0, times 0 [ 382.453444][T18139] CPU: 3 UID: 0 PID: 18139 Comm: syz.1.3818 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.453459][T18139] Tainted: [L]=SOFTLOCKUP [ 382.453463][T18139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.453470][T18139] Call Trace: [ 382.453474][T18139] [ 382.453479][T18139] dump_stack_lvl+0x100/0x190 [ 382.453500][T18139] should_fail_ex.cold+0x5/0xa [ 382.453520][T18139] should_failslab+0xc2/0x120 [ 382.453544][T18139] __kmalloc_noprof+0xfc/0x840 [ 382.453563][T18139] ? lsm_blob_alloc+0x68/0x90 [ 382.453594][T18139] lsm_blob_alloc+0x68/0x90 [ 382.453620][T18139] security_task_alloc+0x2a/0x260 [ 382.453646][T18139] copy_process+0x2c11/0x8380 [ 382.453682][T18139] ? __pfx_copy_process+0x10/0x10 [ 382.453695][T18139] ? kasan_save_track+0x14/0x30 [ 382.453710][T18139] ? __kasan_kmalloc+0xaa/0xb0 [ 382.453726][T18139] ? lockdep_init_map_type+0x5c/0x250 [ 382.453749][T18139] ? lockdep_init_map_type+0x5c/0x250 [ 382.453773][T18139] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 382.453802][T18139] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 382.453829][T18139] vhost_task_create+0x1db/0x370 [ 382.453849][T18139] ? __pfx_vhost_task_create+0x10/0x10 [ 382.453864][T18139] ? __lock_acquire+0x5c0/0x1f40 [ 382.453887][T18139] ? __pfx_vhost_task_fn+0x10/0x10 [ 382.453899][T18139] ? register_lock_class+0x3f/0x7b0 [ 382.453912][T18139] ? rcu_is_watching+0x13/0xc0 [ 382.453928][T18139] ? trace_contention_end+0x126/0x160 [ 382.453945][T18139] kvm_mmu_post_init_vm+0x1b3/0x360 [ 382.453960][T18139] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 382.453975][T18139] ? __pfx___mutex_lock+0x10/0x10 [ 382.453989][T18139] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 382.454003][T18139] ? lock_acquire+0x1d1/0x380 [ 382.454016][T18139] ? do_raw_write_lock+0x11e/0x260 [ 382.454032][T18139] ? find_held_lock+0x2b/0x80 [ 382.454048][T18139] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 382.454063][T18139] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 382.454087][T18139] kvm_vcpu_ioctl+0x730/0x1700 [ 382.454104][T18139] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 382.454120][T18139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.454136][T18139] ? do_vfs_ioctl+0x226/0x13e0 [ 382.454149][T18139] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 382.454160][T18139] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 382.454177][T18139] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 382.454194][T18139] ? __fget_files+0x34/0x3d0 [ 382.454215][T18139] ? selinux_file_ioctl+0x13b/0x290 [ 382.454228][T18139] ? selinux_file_ioctl+0xb6/0x290 [ 382.454243][T18139] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 382.454259][T18139] __x64_sys_ioctl+0x18e/0x210 [ 382.454298][T18139] do_syscall_64+0x123/0x790 [ 382.454313][T18139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.454325][T18139] RIP: 0033:0x7f0e1419e159 [ 382.454335][T18139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.454345][T18139] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.454357][T18139] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 382.454365][T18139] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 382.454372][T18139] RBP: 00007f0e14ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 382.454378][T18139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.454385][T18139] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 382.454400][T18139] [ 382.747044][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 382.926943][ T851] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 382.927747][ T10] usb 7-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 382.928524][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 382.928551][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.928566][ T10] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 382.928581][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 382.928597][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.930884][ T10] usb 7-1: config 0 descriptor?? [ 383.077031][ T851] usb 6-1: Using ep0 maxpacket: 8 [ 383.077585][ T851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.078401][ T851] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 383.078441][ T851] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.078465][ T851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.078487][ T851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.078506][ T851] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.078528][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.282657][ T851] usb 6-1: usb_control_msg returned -32 [ 383.282683][ T851] usbtmc 6-1:16.0: can't read capabilities [ 383.337125][ T10] saitek 0003:0738:1709.0014: unknown main item tag 0x0 [ 383.337150][ T10] saitek 0003:0738:1709.0014: unbalanced collection at end of report description [ 383.337632][ T10] saitek 0003:0738:1709.0014: parse failed [ 383.337693][ T10] saitek 0003:0738:1709.0014: probe with driver saitek failed with error -22 [ 383.614662][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805673fc00: rx timeout, send abort [ 383.615080][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805673fc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.764668][T18175] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3833'. [ 383.795557][T18180] IPv6: sit1: Disabled Multicast RS [ 383.796185][T18180] sit1: entered allmulticast mode [ 384.297658][T18198] program syz.6.3841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.378154][T18201] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3842'. [ 384.387209][T18201] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 384.390388][T18201] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3842'. [ 384.390418][T18201] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 384.660524][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3844'. [ 384.660538][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3844'. [ 385.456794][T18221] Invalid argument reading file caps for ./file0 [ 385.502924][ T215] usb 7-1: USB disconnect, device number 21 [ 385.606785][T18226] netlink: 'syz.6.3848': attribute type 32 has an invalid length. [ 385.644016][T18228] sctp: [Deprecated]: syz.6.3849 (pid 18228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.644016][T18228] Use struct sctp_sack_info instead [ 385.698979][T18232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3850'. [ 385.709159][ T1348] usb 6-1: USB disconnect, device number 37 [ 385.756592][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 385.772937][T18239] FAULT_INJECTION: forcing a failure. [ 385.772937][T18239] name failslab, interval 1, probability 0, space 0, times 0 [ 385.772966][T18239] CPU: 0 UID: 0 PID: 18239 Comm: syz.1.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.772987][T18239] Tainted: [L]=SOFTLOCKUP [ 385.772993][T18239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.773003][T18239] Call Trace: [ 385.773009][T18239] [ 385.773017][T18239] dump_stack_lvl+0x100/0x190 [ 385.773048][T18239] should_fail_ex.cold+0x5/0xa [ 385.773074][T18239] should_failslab+0xc2/0x120 [ 385.773099][T18239] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 385.773124][T18239] ? __d_alloc+0x35/0xa50 [ 385.773154][T18239] __d_alloc+0x35/0xa50 [ 385.773183][T18239] d_alloc_pseudo+0x1c/0xc0 [ 385.773205][T18239] alloc_file_pseudo+0x118/0x290 [ 385.773236][T18239] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 385.773263][T18239] ? alloc_fd+0x471/0x7a0 [ 385.773289][T18239] sock_alloc_file+0x50/0x210 [ 385.773318][T18239] __sys_socket+0x1c0/0x260 [ 385.773341][T18239] ? __pfx___sys_socket+0x10/0x10 [ 385.773369][T18239] __x64_sys_socket+0x72/0xb0 [ 385.773390][T18239] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.773411][T18239] do_syscall_64+0x123/0x790 [ 385.773444][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.773465][T18239] RIP: 0033:0x7f0e1419e159 [ 385.773480][T18239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.773500][T18239] RSP: 002b:00007f0e14ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 385.773522][T18239] RAX: ffffffffffffffda RBX: 00007f0e14425fa0 RCX: 00007f0e1419e159 [ 385.773537][T18239] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000400000000010 [ 385.773551][T18239] RBP: 00007f0e1423506b R08: 0000000000000000 R09: 0000000000000000 [ 385.773565][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.773578][T18239] R13: 00007f0e14426038 R14: 00007f0e14425fa0 R15: 00007ffe5259df58 [ 385.773609][T18239] [ 385.777430][T18237] hpfs: hpfs_map_sector(): read error [ 385.955578][T18249] FAULT_INJECTION: forcing a failure. [ 385.955578][T18249] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.955600][T18249] CPU: 1 UID: 0 PID: 18249 Comm: syz.2.3854 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.955615][T18249] Tainted: [L]=SOFTLOCKUP [ 385.955619][T18249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.955625][T18249] Call Trace: [ 385.955629][T18249] [ 385.955634][T18249] dump_stack_lvl+0x100/0x190 [ 385.955654][T18249] should_fail_ex.cold+0x5/0xa [ 385.955669][T18249] ? prepare_alloc_pages+0x16d/0x5b0 [ 385.955686][T18249] should_fail_alloc_page+0xeb/0x140 [ 385.955703][T18249] prepare_alloc_pages+0x1f0/0x5b0 [ 385.955721][T18249] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 385.955736][T18249] ? prepare_alloc_pages+0x1b1/0x5b0 [ 385.955753][T18249] ? rcu_is_watching+0x13/0xc0 [ 385.955770][T18249] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 385.955785][T18249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.955799][T18249] ? find_held_lock+0x2b/0x80 [ 385.955816][T18249] ? is_bpf_text_address+0x8a/0x1a0 [ 385.955832][T18249] ? is_bpf_text_address+0x8a/0x1a0 [ 385.955848][T18249] ? bpf_ksym_find+0x128/0x1c0 [ 385.955858][T18249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.955871][T18249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.955883][T18249] ? is_bpf_text_address+0x94/0x1a0 [ 385.955900][T18249] ? __kernel_text_address+0xd/0x30 [ 385.955920][T18249] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 385.955933][T18249] ? lock_acquire+0x1d1/0x380 [ 385.955948][T18249] ? policy_nodemask+0xed/0x4f0 [ 385.955971][T18249] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 385.955992][T18249] __kasan_populate_vmalloc+0xf0/0x210 [ 385.956009][T18249] alloc_vmap_area+0x95d/0x2bb0 [ 385.956028][T18249] ? kasan_save_track+0x14/0x30 [ 385.956042][T18249] ? __kasan_kmalloc+0xaa/0xb0 [ 385.956057][T18249] ? __pfx_alloc_vmap_area+0x10/0x10 [ 385.956072][T18249] ? __get_vm_area_node+0x124/0x350 [ 385.956089][T18249] __get_vm_area_node+0x1ed/0x350 [ 385.956115][T18249] __vmalloc_node_range_noprof+0x268/0x1420 [ 385.956139][T18249] ? vhost_task_create+0x1db/0x370 [ 385.956153][T18249] ? lock_acquire+0x1d1/0x380 [ 385.956178][T18249] ? vhost_task_create+0x1db/0x370 [ 385.956190][T18249] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 385.956203][T18249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.956222][T18249] ? rcu_is_watching+0x13/0xc0 [ 385.956238][T18249] ? trace_kmem_cache_alloc+0xdd/0x100 [ 385.956255][T18249] ? vhost_task_create+0x1db/0x370 [ 385.956265][T18249] __vmalloc_node_noprof+0xad/0xf0 [ 385.956282][T18249] ? vhost_task_create+0x1db/0x370 [ 385.956294][T18249] copy_process+0x803/0x8380 [ 385.956315][T18249] ? __pfx_copy_process+0x10/0x10 [ 385.956328][T18249] ? kasan_save_track+0x14/0x30 [ 385.956342][T18249] ? __kasan_kmalloc+0xaa/0xb0 [ 385.956356][T18249] ? lockdep_init_map_type+0x5c/0x250 [ 385.956371][T18249] ? lockdep_init_map_type+0x5c/0x250 [ 385.956385][T18249] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 385.956403][T18249] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 385.956419][T18249] vhost_task_create+0x1db/0x370 [ 385.956431][T18249] ? __pfx_vhost_task_create+0x10/0x10 [ 385.956440][T18249] ? __lock_acquire+0x5c0/0x1f40 [ 385.956457][T18249] ? __pfx_vhost_task_fn+0x10/0x10 [ 385.956469][T18249] ? register_lock_class+0x3f/0x7b0 [ 385.956482][T18249] ? rcu_is_watching+0x13/0xc0 [ 385.956498][T18249] ? trace_contention_end+0x126/0x160 [ 385.956515][T18249] kvm_mmu_post_init_vm+0x1b3/0x360 [ 385.956529][T18249] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 385.956544][T18249] ? __pfx___mutex_lock+0x10/0x10 [ 385.956559][T18249] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 385.956573][T18249] ? lock_acquire+0x1d1/0x380 [ 385.956586][T18249] ? do_raw_write_lock+0x11e/0x260 [ 385.956602][T18249] ? find_held_lock+0x2b/0x80 [ 385.956618][T18249] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 385.956633][T18249] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 385.956652][T18249] kvm_vcpu_ioctl+0x730/0x1700 [ 385.956669][T18249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.956685][T18249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.956701][T18249] ? do_vfs_ioctl+0x226/0x13e0 [ 385.956714][T18249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 385.956725][T18249] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 385.956742][T18249] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 385.956759][T18249] ? __fget_files+0x34/0x3d0 [ 385.956780][T18249] ? selinux_file_ioctl+0x13b/0x290 [ 385.956794][T18249] ? selinux_file_ioctl+0xb6/0x290 [ 385.956809][T18249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.956841][T18249] __x64_sys_ioctl+0x18e/0x210 [ 385.956857][T18249] do_syscall_64+0x123/0x790 [ 385.956871][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.956883][T18249] RIP: 0033:0x7faf2919e159 [ 385.956892][T18249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.956903][T18249] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.956915][T18249] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 385.956922][T18249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 385.956929][T18249] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 385.956935][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.956942][T18249] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 385.956960][T18249] [ 385.958543][T18249] warn_alloc: 1 callbacks suppressed [ 385.958552][T18249] syz.2.3854: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 385.958588][T18249] CPU: 1 UID: 0 PID: 18249 Comm: syz.2.3854 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.958602][T18249] Tainted: [L]=SOFTLOCKUP [ 385.958607][T18249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.958613][T18249] Call Trace: [ 385.958617][T18249] [ 385.958621][T18249] dump_stack_lvl+0x100/0x190 [ 385.958640][T18249] warn_alloc.cold+0x9e/0xb2 [ 385.958653][T18249] ? __pfx_warn_alloc+0x10/0x10 [ 385.958664][T18249] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.958677][T18249] ? __get_vm_area_node+0x2f0/0x350 [ 385.958695][T18249] ? __get_vm_area_node+0x22b/0x350 [ 385.958713][T18249] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 385.958730][T18249] ? lock_acquire+0x1d1/0x380 [ 385.958748][T18249] ? vhost_task_create+0x1db/0x370 [ 385.958759][T18249] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 385.958773][T18249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.958791][T18249] ? rcu_is_watching+0x13/0xc0 [ 385.958807][T18249] ? trace_kmem_cache_alloc+0xdd/0x100 [ 385.958824][T18249] ? vhost_task_create+0x1db/0x370 [ 385.958834][T18249] __vmalloc_node_noprof+0xad/0xf0 [ 385.958850][T18249] ? vhost_task_create+0x1db/0x370 [ 385.958862][T18249] copy_process+0x803/0x8380 [ 385.958883][T18249] ? __pfx_copy_process+0x10/0x10 [ 385.958896][T18249] ? kasan_save_track+0x14/0x30 [ 385.958909][T18249] ? __kasan_kmalloc+0xaa/0xb0 [ 385.958923][T18249] ? lockdep_init_map_type+0x5c/0x250 [ 385.958937][T18249] ? lockdep_init_map_type+0x5c/0x250 [ 385.958956][T18249] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 385.958975][T18249] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 385.958991][T18249] vhost_task_create+0x1db/0x370 [ 385.959002][T18249] ? __pfx_vhost_task_create+0x10/0x10 [ 385.959012][T18249] ? __lock_acquire+0x5c0/0x1f40 [ 385.959029][T18249] ? __pfx_vhost_task_fn+0x10/0x10 [ 385.959040][T18249] ? register_lock_class+0x3f/0x7b0 [ 385.959053][T18249] ? rcu_is_watching+0x13/0xc0 [ 385.959070][T18249] ? trace_contention_end+0x126/0x160 [ 385.959087][T18249] kvm_mmu_post_init_vm+0x1b3/0x360 [ 385.959101][T18249] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 385.959116][T18249] ? __pfx___mutex_lock+0x10/0x10 [ 385.959130][T18249] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 385.959144][T18249] ? lock_acquire+0x1d1/0x380 [ 385.959157][T18249] ? do_raw_write_lock+0x11e/0x260 [ 385.959173][T18249] ? find_held_lock+0x2b/0x80 [ 385.959189][T18249] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 385.959204][T18249] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 385.959223][T18249] kvm_vcpu_ioctl+0x730/0x1700 [ 385.959240][T18249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.959256][T18249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.959271][T18249] ? do_vfs_ioctl+0x226/0x13e0 [ 385.959284][T18249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 385.959296][T18249] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 385.959312][T18249] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 385.959373][T18249] ? __fget_files+0x34/0x3d0 [ 385.959405][T18249] ? selinux_file_ioctl+0x13b/0x290 [ 385.959419][T18249] ? selinux_file_ioctl+0xb6/0x290 [ 385.959434][T18249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.959450][T18249] __x64_sys_ioctl+0x18e/0x210 [ 385.959464][T18249] do_syscall_64+0x123/0x790 [ 385.959477][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.959488][T18249] RIP: 0033:0x7faf2919e159 [ 385.959498][T18249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.959508][T18249] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.959519][T18249] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 385.959526][T18249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 385.959532][T18249] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 385.959539][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.959545][T18249] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 385.959560][T18249] [ 385.959588][T18249] Mem-Info: [ 385.959596][T18249] active_anon:10959 inactive_anon:1387 isolated_anon:0 [ 385.959596][T18249] active_file:9065 inactive_file:20241 isolated_file:0 [ 385.959596][T18249] unevictable:1026 dirty:598 writeback:0 [ 385.959596][T18249] slab_reclaimable:8625 slab_unreclaimable:94011 [ 385.959596][T18249] mapped:24209 shmem:9176 pagetables:6128 [ 385.959596][T18249] sec_pagetables:321 bounce:0 [ 385.959596][T18249] kernel_misc_reclaimable:0 [ 385.959596][T18249] free:412008 free_pcp:9706 free_cma:0 [ 385.959622][T18249] Node 0 active_anon:42596kB inactive_anon:4332kB active_file:25392kB inactive_file:56020kB unevictable:2104kB isolated(anon):0kB isolated(file):0kB mapped:42204kB dirty:1560kB writeback:0kB shmem:34680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17088kB pagetables:14440kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 385.959650][T18249] Node 1 active_anon:1240kB inactive_anon:1216kB active_file:10868kB inactive_file:24944kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:54632kB dirty:832kB writeback:0kB shmem:2024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:288kB pagetables:10072kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 385.959676][T18249] Node 0 DMA free:12608kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:592kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.959705][T18249] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 385.959723][T18249] Node 0 DMA32 free:318432kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42596kB inactive_anon:4332kB active_file:25392kB inactive_file:55428kB unevictable:2104kB writepending:1560kB zspages:472kB present:2080628kB managed:1253140kB mlocked:104kB bounce:0kB free_pcp:26300kB local_pcp:9492kB free_cma:0kB [ 385.961474][T18249] lowmem_reserve[]: 0 0 0 0 0 [ 385.961496][T18249] Node 1 Normal free:1316992kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1240kB inactive_anon:1216kB active_file:10868kB inactive_file:24944kB unevictable:2000kB writepending:832kB zspages:5172kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:12524kB local_pcp:6780kB free_cma:0kB [ 385.961527][T18249] lowmem_reserve[]: 0 0 0 0 0 [ 385.961544][T18249] Node 0 DMA: 14*4kB (U) 13*8kB (U) 16*16kB (U) 17*32kB (U) 16*64kB (U) 15*128kB (U) 12*256kB (U) 5*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 12608kB [ 385.961622][T18249] Node 0 DMA32: 1227*4kB (UE) 947*8kB (UME) 414*16kB (UME) 200*32kB (UE) 647*64kB (UME) 342*128kB (UME) 226*256kB (UE) 161*512kB (U) 50*1024kB (UM) 6*2048kB (UM) 1*4096kB (M) = 318564kB [ 385.961702][T18249] Node 1 Normal: 1452*4kB (UME) 1086*8kB (UME) 864*16kB (UME) 797*32kB (UME) 667*64kB (UME) 437*128kB (UME) 397*256kB (UME) 260*512kB (UM) 196*1024kB (UM) 8*2048kB (UME) 174*4096kB (UM) = 1316992kB [ 385.961783][T18249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.961792][T18249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.961800][T18249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.961808][T18249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.961816][T18249] 39564 total pagecache pages [ 385.961820][T18249] 1054 pages in swap cache [ 385.961824][T18249] Free swap = 104648kB [ 385.961828][T18249] Total swap = 124996kB [ 385.961832][T18249] 1048443 pages RAM [ 385.961836][T18249] 0 pages HighMem/MovableOnly [ 385.961839][T18249] 285848 pages reserved [ 385.961843][T18249] 0 pages cma reserved [ 386.199416][T18257] FAULT_INJECTION: forcing a failure. [ 386.199416][T18257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.199446][T18257] CPU: 0 UID: 0 PID: 18257 Comm: syz.2.3858 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.199471][T18257] Tainted: [L]=SOFTLOCKUP [ 386.199479][T18257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.199490][T18257] Call Trace: [ 386.199497][T18257] [ 386.199505][T18257] dump_stack_lvl+0x100/0x190 [ 386.199541][T18257] should_fail_ex.cold+0x5/0xa [ 386.199568][T18257] _copy_from_user+0x2e/0xd0 [ 386.199591][T18257] generic_map_update_batch+0x4b8/0x860 [ 386.199618][T18257] ? __pfx_generic_map_update_batch+0x10/0x10 [ 386.199644][T18257] ? __pfx_generic_map_update_batch+0x10/0x10 [ 386.199662][T18257] bpf_map_do_batch+0x66f/0x6d0 [ 386.199691][T18257] __sys_bpf+0x4ce/0x4a30 [ 386.199718][T18257] ? __pfx___sys_bpf+0x10/0x10 [ 386.199737][T18257] ? find_held_lock+0x2b/0x80 [ 386.199779][T18257] ? get_pid_task+0xfc/0x250 [ 386.199803][T18257] ? get_pid_task+0xfc/0x250 [ 386.199837][T18257] ? find_held_lock+0x2b/0x80 [ 386.199868][T18257] ? rcu_read_lock_any_held+0x6a/0x90 [ 386.199896][T18257] ? find_held_lock+0x2b/0x80 [ 386.199922][T18257] ? ksys_write+0x190/0x250 [ 386.199943][T18257] ? ksys_write+0x190/0x250 [ 386.199963][T18257] ? lock_acquire+0x1d1/0x380 [ 386.199997][T18257] ? fput+0x7c/0x100 [ 386.200021][T18257] ? ksys_write+0x1ac/0x250 [ 386.200042][T18257] ? __x64_sys_bpf+0xce/0x140 [ 386.200062][T18257] __x64_sys_bpf+0xce/0x140 [ 386.200085][T18257] ? do_syscall_64+0xae/0x790 [ 386.200107][T18257] do_syscall_64+0x123/0x790 [ 386.200129][T18257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.200149][T18257] RIP: 0033:0x7faf2919e159 [ 386.200164][T18257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.200181][T18257] RSP: 002b:00007faf2a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.200202][T18257] RAX: ffffffffffffffda RBX: 00007faf29425fa0 RCX: 00007faf2919e159 [ 386.200215][T18257] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 386.200224][T18257] RBP: 00007faf2a050090 R08: 0000000000000000 R09: 0000000000000000 [ 386.200237][T18257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.200248][T18257] R13: 00007faf29426038 R14: 00007faf29425fa0 R15: 00007ffcef7c07a8 [ 386.200275][T18257] [ 386.407074][T11295] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 386.517243][ T5829] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 386.578325][T11295] usb 11-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 386.579152][T11295] usb 11-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 386.579173][T11295] usb 11-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.579186][T11295] usb 11-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 386.579200][T11295] usb 11-1: config 0 interface 0 has no altsetting 0 [ 386.579216][T11295] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.581244][T11295] usb 11-1: config 0 descriptor?? [ 386.688546][ T5829] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 386.689533][ T5829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.691442][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.691463][ T5829] usb 7-1: Product: syz [ 386.691478][ T5829] usb 7-1: Manufacturer: syz [ 386.691492][ T5829] usb 7-1: SerialNumber: syz [ 386.693910][ T5829] usb 7-1: config 0 descriptor?? [ 386.698754][ T5829] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 386.698948][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 386.698998][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 386.699764][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 386.699809][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 386.699866][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 386.699917][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 386.699950][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 386.704298][ T5829] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 386.705665][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 386.705728][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 386.705782][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 386.705832][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 386.705889][ T5829] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 386.706321][T18262] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.714074][ T5829] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 386.898005][T18259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.898215][T18259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.988407][T11295] saitek 0003:0738:1709.0015: unknown main item tag 0x0 [ 386.988427][T11295] saitek 0003:0738:1709.0015: unbalanced collection at end of report description [ 386.988828][T11295] saitek 0003:0738:1709.0015: parse failed [ 386.988869][T11295] saitek 0003:0738:1709.0015: probe with driver saitek failed with error -22 [ 387.003767][ T30] usb 7-1: USB disconnect, device number 22 [ 387.010245][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 387.016411][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 387.018183][ T30] keyspan 7-1:0.0: device disconnected [ 387.097361][ T5829] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 387.248062][ T5829] usb 6-1: not running at top speed; connect to a high speed hub [ 387.248093][ T5829] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 387.249041][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.249081][ T5829] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.249103][ T5829] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 387.249143][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.254863][ T5829] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 387.262514][ T5829] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 387.265830][ T5829] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 387.265943][ T5829] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 387.270665][ T5829] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 387.289756][ T43] kauditd_printk_skb: 267 callbacks suppressed [ 387.289767][ T43] audit: type=1800 audit(1790538139.815:63922): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=269948 res=0 errno=0 [ 387.294909][ T43] audit: type=1800 audit(1790538139.815:63923): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=269921 res=0 errno=0 [ 387.454905][ T43] audit: type=1400 audit(1790538139.975:63924): avc: denied { mount } for pid=18265 comm="syz.1.3862" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 387.455524][ T43] audit: type=1400 audit(1790538139.975:63925): avc: denied { search } for pid=18265 comm="syz.1.3862" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 387.455831][ T43] audit: type=1400 audit(1790538139.975:63926): avc: denied { append } for pid=18265 comm="syz.1.3862" name="uprobe_events" dev="tracefs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 387.456123][ T43] audit: type=1400 audit(1790538139.975:63927): avc: denied { open } for pid=18265 comm="syz.1.3862" path="/314/tracing/uprobe_events" dev="tracefs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 387.456591][ T43] audit: type=1400 audit(1790538139.975:63928): avc: denied { read } for pid=18265 comm="syz.1.3862" path="/314/tracing/uprobe_events" dev="tracefs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 387.466542][T18266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.466598][ T43] audit: type=1400 audit(1790538139.985:63929): avc: denied { mounton } for pid=18265 comm="syz.1.3862" path="/314/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 387.467346][T18266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.469773][ T43] audit: type=1400 audit(1790538139.995:63930): avc: denied { mounton } for pid=18265 comm="syz.1.3862" path="/314/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 387.610714][ T43] audit: type=1400 audit(1790538140.135:63931): avc: denied { unmount } for pid=12910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 387.632779][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3863'. [ 389.165003][ T215] usb 11-1: USB disconnect, device number 15 [ 389.341569][T18289] syz_tun (unregistering): left allmulticast mode [ 389.600078][ T9010] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.600115][ T9010] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.675644][ T9010] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.675669][ T9010] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.744314][ T9010] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.744346][ T9010] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.773255][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.784893][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.793096][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.794078][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.794686][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.847367][ T9010] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.847390][ T9010] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.996474][ T851] usb 6-1: USB disconnect, device number 38 [ 390.012455][ T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 390.015467][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 390.028524][ T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 390.029233][ T851] keyspan 6-1:1.0: device disconnected [ 390.036323][T18306] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 390.124844][ T9010] bridge_slave_1: left allmulticast mode [ 390.124871][ T9010] bridge_slave_1: left promiscuous mode [ 390.125086][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.134941][ T9010] bridge_slave_0: left allmulticast mode [ 390.134957][ T9010] bridge_slave_0: left promiscuous mode [ 390.135204][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.162437][T18311] netlink: 'syz.2.3875': attribute type 9 has an invalid length. [ 390.274975][ T9010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.275290][ T9010] bond_slave_0: left allmulticast mode [ 390.276657][ T9010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.287421][ T9010] bond_slave_1: left allmulticast mode [ 390.288664][ T9010] bond0 (unregistering): Released all slaves [ 390.296081][ T9010] bond1 (unregistering): (slave veth3): Releasing active interface [ 390.297883][ T9010] bond1 (unregistering): Released all slaves [ 390.299290][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'. [ 390.300323][T18320] l2tp_ppp: sess 2/0: no socket in recv [ 390.307194][ T9010] bond2 (unregistering): Released all slaves [ 390.317734][ T9010] bond3 (unregistering): Released all slaves [ 390.328068][ T9010] bond4 (unregistering): Released all slaves [ 390.419839][ T851] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 390.597149][ T851] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 390.598597][ T851] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 390.598987][ T851] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.599004][ T851] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 390.599019][ T851] usb 6-1: config 0 interface 0 has no altsetting 0 [ 390.599036][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.605621][ T851] usb 6-1: config 0 descriptor?? [ 390.647464][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 390.803225][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.803328][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.803391][T18292] bridge_slave_0: entered allmulticast mode [ 390.818198][T18292] bridge_slave_0: entered promiscuous mode [ 390.819419][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.819463][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.819626][T18292] bridge_slave_1: entered allmulticast mode [ 390.820750][T18292] bridge_slave_1: entered promiscuous mode [ 390.865100][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.871197][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.892795][T18354] netlink: 'syz.2.3883': attribute type 4 has an invalid length. [ 390.904842][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 390.934016][ T9010] hsr_slave_0: left promiscuous mode [ 390.935169][ T9010] hsr_slave_1: left promiscuous mode [ 390.935984][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.935996][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.936811][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.936826][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.964323][ T9010] veth1_macvtap: left promiscuous mode [ 390.964348][ T9010] veth0_macvtap: left promiscuous mode [ 390.964395][ T9010] veth1_vlan: left promiscuous mode [ 390.964438][ T9010] veth0_vlan: left promiscuous mode [ 391.023940][ T851] input: HID 0738:1709 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0738:1709.0016/input/input102 [ 391.110614][ T851] saitek 0003:0738:1709.0016: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0 [ 391.209389][ T9010] team0 (unregistering): Port device team_slave_1 removed [ 391.216128][ T9010] team0 (unregistering): Port device team_slave_0 removed [ 391.282457][T18292] team0: Port device team_slave_0 added [ 391.288274][T18292] team0: Port device team_slave_1 added [ 391.322151][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.322169][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.322194][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.323972][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.323985][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.324009][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.412045][T18292] hsr_slave_0: entered promiscuous mode [ 391.413068][T18292] hsr_slave_1: entered promiscuous mode [ 391.413740][T18292] debugfs: 'hsr0' already exists in 'hsr' [ 391.413758][T18292] Cannot create hsr debugfs directory [ 391.554808][T18369] 9p: Unknown uid 00000000004294967295 [ 391.614051][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 391.643176][T18292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 391.646702][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.648550][T18292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 391.654959][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.657221][T18292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 391.661320][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.662054][T18292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 391.668212][T18292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.776688][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.805656][T18292] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.820516][T16869] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.820606][T16869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.839749][T18387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3887'. [ 391.840508][T16876] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.840594][T16876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.870794][T18387] l2tp_ppp: sess 2/0: no socket in recv [ 391.902485][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 391.907054][ T5089] Bluetooth: hci3: command tx timeout [ 392.060748][T18398] [ 392.061925][T18398] ====================================================== [ 392.065072][T18398] WARNING: possible circular locking dependency detected [ 392.068169][T18398] syzkaller #0 Tainted: G L [ 392.070979][T18398] ------------------------------------------------------ [ 392.074070][T18398] syz.2.3889/18398 is trying to acquire lock: [ 392.076770][T18398] ffff88803e820280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 392.081024][T18398] [ 392.081024][T18398] but task is already holding lock: [ 392.084343][T18398] ffff8880393d90e0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 392.089075][T18398] [ 392.089075][T18398] which lock already depends on the new lock. [ 392.089075][T18398] [ 392.093678][T18398] [ 392.093678][T18398] the existing dependency chain (in reverse order) is: [ 392.097688][T18398] [ 392.097688][T18398] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: SYZFAIL: failed to recv rpc [ 392.101655][T18398] lock_acquire+0x1d1/0x380 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 392.104060][T18398] __mutex_lock+0x1a4/0x1bd0 [ 392.106414][T18398] process_measurement+0x5ab/0x2350 [ 392.108984][T18398] ima_file_check+0xc3/0x110 [ 392.111275][T18398] security_file_post_open+0xc4/0x210 [ 392.113941][T18398] path_openat+0x5cd/0x2440 [ 392.116250][T18398] do_file_open+0x20e/0x430 [ 392.118516][T18398] do_sys_openat2+0x10f/0x1e0 [ 392.120866][T18398] __x64_sys_openat+0x12d/0x210 [ 392.123333][T18398] do_syscall_64+0x123/0x790 [ 392.125672][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.128541][T18398] [ 392.128541][T18398] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 392.131982][T18398] lock_acquire+0x1d1/0x380 [ 392.134289][T18398] mnt_want_write+0x6f/0x420 [ 392.136617][T18398] lookup_open+0x150/0x1990 [ 392.138891][T18398] path_openat+0xa2c/0x2440 [ 392.141175][T18398] do_file_open+0x20e/0x430 [ 392.143461][T18398] file_open_name+0x1c3/0x3e0 [ 392.145830][T18398] filp_open+0x2e/0x50 [ 392.148005][T18398] fsg_lun_open+0x6b/0x7b0 [ 392.150236][T18398] fsg_store_file+0x1e7/0x450 [ 392.152578][T18398] configfs_write_iter+0x302/0x4e0 [ 392.155069][T18398] vfs_write+0x6af/0x1050 [ 392.157267][T18398] ksys_write+0x12a/0x250 [ 392.159467][T18398] do_syscall_64+0x123/0x790 [ 392.161756][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.164621][T18398] [ 392.164621][T18398] -> #2 (&common->filesem){+.+.}-{4:4}: [ 392.168083][T18398] lock_acquire+0x1d1/0x380 [ 392.170338][T18398] down_write+0x8b/0x1f0 [ 392.172515][T18398] fsg_store_file+0x193/0x450 [ 392.174870][T18398] configfs_write_iter+0x302/0x4e0 [ 392.177423][T18398] vfs_write+0x6af/0x1050 [ 392.179616][T18398] ksys_write+0x12a/0x250 [ 392.181788][T18398] do_syscall_64+0x123/0x790 [ 392.184097][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.186976][T18398] [ 392.186976][T18398] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 392.190241][T18398] lock_acquire+0x1d1/0x380 [ 392.192517][T18398] down_read+0x99/0x4c0 [ 392.194644][T18398] configfs_write_iter+0x218/0x4e0 [ 392.197211][T18398] vfs_write+0x6af/0x1050 [ 392.199403][T18398] ksys_write+0x12a/0x250 [ 392.201608][T18398] do_syscall_64+0x123/0x790 [ 392.203944][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.206835][T18398] [ 392.206835][T18398] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 392.210228][T18398] check_prev_add+0xeb/0xe60 [ 392.212533][T18398] __lock_acquire+0x1528/0x1f40 [ 392.214945][T18398] lock_acquire+0x1d1/0x380 [ 392.217205][T18398] __mutex_lock+0x1a4/0x1bd0 [ 392.219516][T18398] configfs_read_iter+0x79/0x6f0 [ 392.221951][T18398] __kernel_read+0x397/0xad0 [ 392.224279][T18398] integrity_kernel_read+0x7e/0xb0 [ 392.227141][T18398] ima_calc_file_hash_tfm+0x25e/0x350 [ 392.229907][T18398] ima_calc_file_hash+0x1e3/0x380 [ 392.232424][T18398] ima_collect_measurement+0x94f/0xb30 [ 392.235275][T18398] process_measurement+0xdfe/0x2350 [ 392.238140][T18398] ima_file_check+0xc3/0x110 [ 392.240690][T18398] security_file_post_open+0xc4/0x210 [ 392.243582][T18398] path_openat+0x5cd/0x2440 [ 392.246052][T18398] do_file_open+0x20e/0x430 [ 392.248335][T18398] do_sys_openat2+0x10f/0x1e0 [ 392.250693][T18398] __x64_sys_openat+0x12d/0x210 [ 392.253159][T18398] do_syscall_64+0x123/0x790 [ 392.255500][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.258359][T18398] [ 392.258359][T18398] other info that might help us debug this: [ 392.258359][T18398] [ 392.262874][T18398] Chain exists of: [ 392.262874][T18398] &buffer->mutex --> sb_writers#6 --> &ima_iint_mutex_key[depth] [ 392.262874][T18398] [ 392.268879][T18398] Possible unsafe locking scenario: [ 392.268879][T18398] [ 392.272172][T18398] CPU0 CPU1 [ 392.274556][T18398] ---- ---- [ 392.276983][T18398] lock(&ima_iint_mutex_key[depth]); [ 392.279389][T18398] lock(sb_writers#6); [ 392.282466][T18398] lock(&ima_iint_mutex_key[depth]); [ 392.286019][T18398] lock(&buffer->mutex); [ 392.287990][T18398] [ 392.287990][T18398] *** DEADLOCK *** [ 392.287990][T18398] [ 392.291551][T18398] locks held by syz.2.3889/18398: 1, last CPU#0: [ 392.294365][T18398] #0: ffff8880393d90e0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 392.299255][T18398] [ 392.299255][T18398] stack backtrace: [ 392.301887][T18398] CPU: 0 UID: 0 PID: 18398 Comm: syz.2.3889 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.306534][T18398] Tainted: [L]=SOFTLOCKUP [ 392.308479][T18398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.312924][T18398] Call Trace: [ 392.314434][T18398] [ 392.315764][T18398] dump_stack_lvl+0x100/0x190 [ 392.317901][T18398] print_circular_bug.cold+0x178/0x1be [ 392.320349][T18398] check_noncircular+0x146/0x160 [ 392.322576][T18398] check_prev_add+0xeb/0xe60 [ 392.324683][T18398] __lock_acquire+0x1528/0x1f40 [ 392.326885][T18398] ? is_bpf_text_address+0x8a/0x1a0 [ 392.329241][T18398] lock_acquire+0x1d1/0x380 [ 392.331310][T18398] ? configfs_read_iter+0x79/0x6f0 [ 392.333612][T18398] ? __pfx___might_resched+0x10/0x10 [ 392.336001][T18398] ? arch_stack_walk+0xa6/0xf0 [ 392.338155][T18398] __mutex_lock+0x1a4/0x1bd0 [ 392.340239][T18398] ? configfs_read_iter+0x79/0x6f0 [ 392.342522][T18398] ? configfs_read_iter+0x79/0x6f0 [ 392.344829][T18398] ? stack_trace_save+0x8e/0xc0 [ 392.347001][T18398] ? __pfx___mutex_lock+0x10/0x10 [ 392.349260][T18398] ? stack_depot_save_flags+0x27/0x9f0 [ 392.351690][T18398] ? __kasan_kmalloc+0xaa/0xb0 [ 392.353834][T18398] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 392.356331][T18398] ? ima_calc_file_hash_tfm+0x236/0x350 [ 392.358793][T18398] ? ima_calc_file_hash+0x1e3/0x380 [ 392.361139][T18398] ? ima_collect_measurement+0x94f/0xb30 [ 392.363674][T18398] ? process_measurement+0xdfe/0x2350 [ 392.366094][T18398] ? ima_file_check+0xc3/0x110 [ 392.368254][T18398] ? security_file_post_open+0xc4/0x210 [ 392.370742][T18398] ? configfs_read_iter+0x79/0x6f0 [ 392.373029][T18398] configfs_read_iter+0x79/0x6f0 [ 392.375234][T18398] __kernel_read+0x397/0xad0 [ 392.377331][T18398] ? __pfx___kernel_read+0x10/0x10 [ 392.379625][T18398] integrity_kernel_read+0x7e/0xb0 [ 392.381922][T18398] ? __pfx_integrity_kernel_read+0x10/0x10 [ 392.384707][T18398] ? ima_calc_file_hash_tfm+0x236/0x350 [ 392.387198][T18398] ima_calc_file_hash_tfm+0x25e/0x350 [ 392.389624][T18398] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 392.392277][T18398] ? filter_irq_stacks+0x20/0x90 [ 392.394484][T18398] ? look_up_lock_class+0x55/0x120 [ 392.396774][T18398] ? ima_alloc_tfm+0x21a/0x2e0 [ 392.398916][T18398] ima_calc_file_hash+0x1e3/0x380 [ 392.401187][T18398] ima_collect_measurement+0x94f/0xb30 [ 392.403664][T18398] ? __pfx_ima_collect_measurement+0x10/0x10 [ 392.406359][T18398] ? process_measurement+0x5ab/0x2350 [ 392.408882][T18398] ? is_bad_inode+0xd/0x40 [ 392.410907][T18398] ? xattr_resolve_name+0x27d/0x3f0 [ 392.413358][T18398] ? vfs_getxattr_alloc+0xec/0x350 [ 392.415778][T18398] ? ima_get_hash_algo+0x241/0x400 [ 392.418175][T18398] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 392.420873][T18398] ? process_measurement+0xdfe/0x2350 [ 392.423326][T18398] process_measurement+0xdfe/0x2350 [ 392.425720][T18398] ? __pfx_process_measurement+0x10/0x10 [ 392.428228][T18398] ? lock_acquire+0x1d1/0x380 [ 392.430420][T18398] ? __configfs_open_file+0x6ca/0x9c0 [ 392.433016][T18398] ima_file_check+0xc3/0x110 [ 392.435272][T18398] ? __pfx_ima_file_check+0x10/0x10 [ 392.437642][T18398] security_file_post_open+0xc4/0x210 [ 392.440096][T18398] path_openat+0x5cd/0x2440 [ 392.442158][T18398] ? __pfx_path_openat+0x10/0x10 [ 392.444435][T18398] do_file_open+0x20e/0x430 [ 392.446553][T18398] ? __pfx_do_file_open+0x10/0x10 [ 392.448854][T18398] ? _raw_spin_unlock+0x28/0x50 [ 392.451041][T18398] ? alloc_fd+0x471/0x7a0 [ 392.453000][T18398] do_sys_openat2+0x10f/0x1e0 [ 392.455147][T18398] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.457655][T18398] __x64_sys_openat+0x12d/0x210 [ 392.460032][T18398] ? __pfx___x64_sys_openat+0x10/0x10 [ 392.463016][T18398] do_syscall_64+0x123/0x790 [ 392.465199][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.467954][T18398] RIP: 0033:0x7faf2919e159 [ 392.470062][T18398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.478934][T18398] RSP: 002b:00007faf2a02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.482654][T18398] RAX: ffffffffffffffda RBX: 00007faf29426090 RCX: 00007faf2919e159 [ 392.486249][T18398] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 392.489777][T18398] RBP: 00007faf2923506b R08: 0000000000000000 R09: 0000000000000000 [ 392.493306][T18398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.496860][T18398] R13: 00007faf29426128 R14: 00007faf29426090 R15: 00007ffcef7c07a8 [ 392.500527][T18398] [ 392.521423][ T43] kauditd_printk_skb: 246 callbacks suppressed [ 392.521440][ T43] audit: type=1800 audit(1790538145.045:64178): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 392.521846][ T43] audit: type=1400 audit(1790538145.045:64179): avc: denied { module_request } for pid=18292 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 392.548751][ T43] audit: type=1800 audit(1790538145.065:64180): pid=18398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3889" name="file" dev="configfs" ino=74598 res=0 errno=0 [ 392.612090][ T35] usb 6-1: USB disconnect, device number 39 [ 392.832899][T17393] bridge0: port 3(syz_tun) entered disabled state [ 392.851961][T17393] syz_tun (unregistering): left allmulticast mode [ 392.851986][T17393] syz_tun (unregistering): left promiscuous mode [ 392.852048][T17393] bridge0: port 3(syz_tun) entered disabled state [ 392.866216][T18389] syz_tun (unregistering): left allmulticast mode [ 393.086394][ T9010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.172662][ T9010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.290343][ T9010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.380582][ T9010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.445226][ T43] audit: type=1800 audit(1790538145.965:64181): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283639 res=0 errno=0 [ 393.446789][ T43] audit: type=1800 audit(1790538145.965:64182): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=283644 res=0 errno=0 [ 393.446816][ T43] audit: type=1800 audit(1790538145.965:64183): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=283648 res=0 errno=0 [ 393.447471][ T43] audit: type=1800 audit(1790538145.965:64184): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=283647 res=0 errno=0 [ 393.447665][ T43] audit: type=1800 audit(1790538145.975:64185): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=283650 res=0 errno=0 [ 393.448486][ T43] audit: type=1400 audit(1790538145.975:64186): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 393.452598][ T43] audit: type=1800 audit(1790538145.975:64187): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283725 res=0 errno=0 [ 393.489756][ T9010] bridge_slave_1: left allmulticast mode [ 393.489777][ T9010] bridge_slave_1: left promiscuous mode [ 393.489934][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.498936][ T9010] bridge_slave_0: left allmulticast mode [ 393.498960][ T9010] bridge_slave_0: left promiscuous mode [ 393.499074][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.535857][ T9010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.540960][ T9010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.541630][ T9010] bond0 (unregistering): Released all slaves [ 393.633098][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 393.716683][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 393.810632][ T9010] hsr_slave_0: left promiscuous mode [ 393.812306][ T9010] hsr_slave_1: left promiscuous mode [ 393.812726][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.812741][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.813069][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.813078][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.815016][ T9010] veth1_macvtap: left promiscuous mode [ 393.815033][ T9010] veth0_macvtap: left promiscuous mode [ 393.815067][ T9010] veth1_vlan: left promiscuous mode [ 393.815087][ T9010] veth0_vlan: left promiscuous mode [ 393.889141][ T9010] team0 (unregistering): Port device team_slave_1 removed [ 393.892868][ T9010] team0 (unregistering): Port device team_slave_0 removed [ 393.922696][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 394.005593][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 394.838684][ T9010] bridge_slave_1: left allmulticast mode [ 394.838707][ T9010] bridge_slave_1: left promiscuous mode [ 394.838840][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.840261][ T9010] bridge_slave_0: left allmulticast mode [ 394.840279][ T9010] bridge_slave_0: left promiscuous mode [ 394.840381][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.870919][ T9010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.872243][ T9010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.872868][ T9010] bond0 (unregistering): Released all slaves [ 394.969758][ T5443] 8021q: adding VLAN 0 to HW filter on device eth18 [ 395.006377][ T9010] hsr_slave_0: left promiscuous mode [ 395.006629][ T9010] hsr_slave_1: left promiscuous mode [ 395.007810][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.009847][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.062578][ T9010] team0 (unregistering): Port device team_slave_1 removed [ 395.064520][ T9010] team0 (unregistering): Port device team_slave_0 removed [ 395.090423][ T5443] 8021q: adding VLAN 0 to HW filter on device eth19 [ 395.222308][ T5443] 8021q: adding VLAN 0 to HW filter on device eth20 [ 395.331635][ T5443] 8021q: adding VLAN 0 to HW filter on device eth21