last executing test programs: 59.388814001s ago: executing program 0 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x0) 59.320525344s ago: executing program 0 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000005c0)={0x5, &(0x7f00000001c0)=""/13, &(0x7f0000000540)=[{0xffff, 0xb2, 0x6, &(0x7f0000000340)=""/178}, {0x40, 0x23, 0x5, &(0x7f0000000400)=""/35}, {0x8, 0x13, 0x7f, &(0x7f0000000440)=""/19}, {0x9, 0x11, 0x80000000, &(0x7f0000000480)=""/17}, {0x0, 0x63, 0x40000000, &(0x7f00000004c0)=""/99}]}) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x5, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0xa, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0xa, 0x2, 0xf, 0x6, 0x7, 0x1, 0x8, 0x4, 0xe, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x480dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x81, 0x50, 0x7f, 0x200}, {0x6, 0xf, 0x8, 0x6}, {0x100, 0x9, 0x8, 0x2}, {0x2, 0xb, 0x63, 0x2}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)) close(r12) (async) close(r12) r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(r13, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 59.020273759s ago: executing program 0 (id=531): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r1], 0x0, 0x1}) 59.019981374s ago: executing program 0 (id=533): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x3, [0x3, 0x706, 0x9, 0xe, 0x66, 0x10, 0x0, 0x4, 0x34dd, 0x7, 0xd, 0x1, 0xa6, 0x8, 0x4, 0xfff, 0x1, 0x8, 0xfc01, 0x3, 0x400, 0x5, 0x3, 0x8, 0x1, 0x1, 0x3, 0x9, 0x6, 0xcc, 0x3, 0x0, 0x1, 0x7f, 0x80, 0x465, 0xff, 0xfff7, 0x0, 0x5, 0x5, 0x4, 0x1ff, 0x1, 0xbf55, 0x5, 0xb7, 0x6], 0x84}}) 58.976746402s ago: executing program 0 (id=535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x11}, 0x94) 58.969730486s ago: executing program 0 (id=536): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) 42.29764804s ago: executing program 32 (id=536): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) 2.565949907s ago: executing program 3 (id=1209): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00200400740900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300230a28", @ANYRES32=0x0, @ANYBLOB="20a40300000000001400350076657468305f6d6163767461700000001800168014000180"], 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, "1f00", "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) 2.33406219s ago: executing program 4 (id=1212): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) ioctl$MTDFILEMODE(r0, 0x4d13, 0x2) 2.266046642s ago: executing program 4 (id=1214): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 25) 2.070065092s ago: executing program 4 (id=1216): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/device:00/uevent\x00', 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x104, 0x6, 0x4, 0xc06ac84, 0xc, 0x0, 0x0, 0x2, 0x3857}}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000000c0)=[@in_dx={0x69, 0x20, {0x175d, 0x4}}, @in_dx={0x69, 0x20, {0xe302, 0x1}}], 0x40}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_TDX_GET_CPUID(r2, 0xc008aeba, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000000340)={0x1, 0x0, [{0x0, 0x6, 0x7, 0xffffffff, 0x1000, 0x0, 0x400}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x8, 0x5, 0x22, @loopback, @private0, 0x10, 0x80, 0xe2, 0x656}}) sendmsg$nl_route_sched(r0, &(0x7f0000004fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004f80)={&(0x7f0000001600)=@newchain={0x3954, 0x64, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {0x3, 0x3}, {0xa, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x99, 0xa1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_basic={{0xa}, {0x38e4, 0x2, [@TCA_BASIC_ACT={0x36c0, 0x3, [@m_ct={0xe8, 0x1f, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x1, 0xffffffffffffffff, 0xa5, 0x9}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x36}}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x1000}]}, {0x52, 0x6, "ce6041ded5f15faaf14f597be8a5877dd428f4c317c0b97d55baf235f92596b0f2df6c1d7d7a61ed3ff0e6a3b3e731b9d3fa7d5dca23f5a0150e94f116bafb48b6692b34ec4efeadee066338c371"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x21b0, 0x2, 0x0, 0x0, {{0x7}, {0x1188, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0xfc, 0x6, {0x81, 'raw\x00', 0x5, 0x0, "fac38dd9c2b31ae2b1ab4b5be050bb210b5c1197b3ee7662e3989a2cc3cb6ae88b8b959c17fb30ec4eb25b6a2df6b740a329d5a801e1a85decc4f494f974832435a7f96e7fcc89b4ff0c1345a392c681e722c4e6326878e7e7154f2b13a45f12149ca787ead03664cd22fcc93dd742981baf8fcfacedcc879db3b6becbdbd6c09e79ebdb953837beeb1e6f3a934e5da7a603cdd6be98c56608af141631fc63683c766054899ae252117bf0d1100c439fdbe0852fda7935b52a44167a846c931cc29a93670bfb1edf6444785284bce6063e42"}}, @TCA_IPT_TARG={0x3c, 0x6, {0x8, 'security\x00', 0xc, 0x1f7, "1c010230bf5636426be1f88e3ced24b2a69a"}}, @TCA_IPT_TARG={0x102a, 0x6, {0xd108, 'raw\x00', 0x7, 0x0, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_INDEX={0x8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xe4, 0xd, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x1, 0x100, 0xd}, 0x76}}]}, {0x9c, 0x6, "950c8af22c833432698261fbf2cae8c4505455e538bdf11676d0accf65dbb78c65a6c46554ef893b0ac5c72a935fe95c109bcde0b9a3b1ad655f51c1047899ee6ad19b420a03f1571d0b3949737773f66a36c8cec12a0521981dba69a7481587b45e0f2b1e457f5132c86d3ffd3130e6fd534d513de614865d985e1b1331407c27bc16980eef604ef34ae525beed985340d69df443def4f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1140, 0x5, 0x0, 0x0, {{0x7}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x10b, 0x6, {0x4, 'raw\x00', 0x5, 0x9, "532c174c2361bc8b880636e8dc3d65bd33ec1c89d7725a22e5aac8d2b217cc67d299c17895c0425f2dcae480255655af30060c7ca20876f05d357de27753557885b38e87a2fd6f4c1bf4ffe54f2ee4858480be239fb9714eaed06e7580dcb04a2a53e2b236fd11139b5c4e65370dcdce0ab81a06d06beb76442eb95a911e4d6284cc4994a40087239de66a5ba8f62a0c0668ce0f05fc1c741eac0118df730c0aef1db88a6d26e49189310ca0ee30337003de13cdd76c42a3e3b79bba1b7af120c643b387fea8e0f109ac10b289efe4d466c87ad4c04d5399821e95d0c980fd966f"}}]}, {0x1004, 0x6, "57b69b5e5b2dbad0389e969482460f3691cd1ce5efeada8644237301ed615cc92731b372aca4a72ad5cd1ee4f2cf3ca1d55c906a372268fdad48cf0f1848f483ead225f6522f3b1f4a4f34d9bc6bac019a3975d9f160833318c46600bd5c3b771a1b892c8d8bb549c5eb3842fb846b4f4d3a5efdc8924a6f3664746f883a02b3a92b6049d0ebeccf7dfcd00a0de52ef4f7dbe6fa4397c0fb8eec4c6f53cce6690f167eaae674339b42be600a74ad5688799ef7c14ebb8f61f5f20a19cbc346077e965e287a41edc393cf65f0cc77a69602cbfb0abfcc757a06cf6aebe3a68b165a2b92245242c0e1f148d41f1c634a9951c19867e7fe10f2ac47cc0688bb9296b44f7bcd1cce4ed356397eb18b9331cf949732c21a71c5c8bf99ed8adf676cce2329215dbc8dde1e653917a0b28a192a802274849c7876d5fbfc412c8f18c60fb1abfb906ce2929512f7f4c83f91a6f9f7394ce5db2addd1ccf00515272ebc91489dbd7512760fa9d85ea6281d7d185b894d94a5b46fdee260110e9afe870c718535179c6285c6378bbf3be7c9aa1fac7c7bdd781637be8691f591904d6c12f9d978003d4ff2c7c7070a8f55e5442a1ce7f18dd1005ff9e62ac9605d7ac0c84b885eed25a6d44010201891c38a19721776f3163bd8c56b40a545056301e01302e5670208d88dd72e940ca0d6d65aeab9cfb5bdb172b5c78c2b85ecd4a63f003103ac6a8e91f40579c1bc4dc823fcd93f98cc2eefda26bd6c8be1a7a4951d1d63dc348663f68b74a4db8d7159cc824b246add449b4fdd5421d1ec37c080a493c63b32ac636970df3e50d0bd8f80299be5a481747b8d0251b78d66ea2addfbf4fdaf9397a71295fb16706385885c37644e5f6583ad60edfd54cd4b60938a7a46408c3cc0404a5b9ab3af7ff601693b28e1cd169f4fbeca83737f5ace532fbe2e0a7ea27230a7515708d6c5ce4efcfa6dad324f52f29ed226e08b6d0a4cb221bb4437701d1b5cb5a8bfd2620c5ce1e5101586e65bb6b8f043767494881afd8dcd1b42d73ce726c595e83d7650134830d40addcb61469f9889651ae17bf4a2bdc4f9d04d60a326a550094b8b906181fdc779cffb6eb84a2156fa6bccd5188c690358d5f7f4a930c8ea513cf1d1741c3cb31f2ed73f452f6c057b73467854ff5798a64ffc0297de0fbf456aa60b5323cb3de487d39993627a628c861dd6454a13bf4f34204f914adcd6a7f10b1776bd0fcb8895e156b219d85ebab05ded64f0c806887780c2403b3e0b628de5ec131da4a4c66301c15cb9c13195b0f0ab8519304ada8dc9a60c31515f966b74220ee5d5b72543cb874d5b852323f9dcdbf67cb88bb64af0c56468ae7cfe3e329628caca7c4492cc16d28a3a9708d1e0fd0ae3ee57954a9d83bd3b7e27ce35af7c52c41d394a97204f521ee44c26ddce069d805b29ae83de09b139675f9070a9366138ccd9abea5d1f61021f8c7bd3abe90b214a494fd8bd20148c8a317613fd906032ff807a4bec32cc6f9b088f964254d3542f3e998631df17d3069a9a88141c4fafe911685c0cae744ca59ceacb567bb29323fc4191f1622b8867f32448d3e6fa412452581b630f2ab80849618998b0ad93da72a7bd1b444c3d8e7c394722b7bae73bed7066bc1c111d905fdc4fc5a56db7b16adff90f642bcc99ff82656d7f2baeb415ee5c0245340f8208ecfc559e000ad9d366b9db739ae3569c94867f64372ee107ea1bce9e255165024a4a9fc620a3100b0981520c602d24ee4788c7e266460cd025ace9ed4188bff1a7280403ab10f227b8ec0951f7a476ed22ecac1c0297ed085bfdd5d0a7845f47ebfe7bf6e883f311111b07797c17abdf5ededf07cbf0325fcf363373d804cf00a60b9b178ded001ac35187d3589204834505e6559d03283a1c64e8787eaf5c6cb47b0408bf0d73e3e1b6bdb0d4199dafe7765cb8fcb05a9dcc3c00aaac4cde615ef01eec7363457c274f0f0c3ff2a25985535a0cccea47faa17efd6174b94309f080c077b7117fe23c6d6853fa21ddd6ca825b19c938f495f2b393a3c6a52f2686a03cb3ca3e6e034a0fac948f10e52af9f814cc5c0fd66269480f8d8c7341114df174e45400346a7e6bdd0ed9635dc7902f36b2e4c547d76e0a43afc6215fba9f37344dfb9790e65dee53f61e93e8555c1c4b13e981c8186a837457ac7dc899e6fec7a399bb23a4534cc33a3956005e861d94a4c0b30038a4dd31d904b7aeb4b03fdbeaeab948c7a96db9f1af562c9e365687eddbab274ab2e4a1daf23dde2a60140c83d5f82dd7bdfa6e99b1e50fecdc5eb165408ce71ecd3fd51eb3f4a61883926067da47f9aa76895c1437377d55755b807f1f72e4bfc71482dc7cdbfb32efc7a82e60fc28e180d25e14347a53dd91059c1026a123e83e491bdca0a0bdc7a221fd0daced353527e415be2b2e98546e598637f4ee91c61ead1fd64c975947b391a9c26037827e1f848d5ccb1bf07b596fa92ecb8feda5d03b87ef2b69c33a1756d5a369952f27d17e6f6e7b5f21e2200db760fbafad7e4360338705a09bd552b2bb4b1ec2552ed246f60f3a031a5c206562ffd17ac20ebf21eae88c9e584ba925e4b547d1be09baf6ea920729a6f53c78214130f68a6d74935afb7a6f48d3c63b5933feced2df36bc35987e682a00170d300e1bc30189d593cb161d112dfaea58549ae9349df83ad5b852355ed304f6629a2b580ca6c9e1aafd35190738246110720e6d1f8da8114fe7da6f805e4138d61c453289364445684adcc490e70858950d5b1d9984049efbfaf0f63d4fa53efed9fabd068a0171278ec10a0a8ff6448d46f99b3a6ab9162eb95fc9eff1df9a0e9e76aca83123fc1ce501160e24e1fb1ae7603f4b722a12398f811008408dbd726f9edc5d2b21da64213613ab86a7825dc0819e6ab2f78eeff4c298eacb95ce667e175bf425be77e2d483837b14674e944ab7ff06e441799c2fc44be966e97ae0d7c87a8fa92d14fda5b1b467e3452d70c51cd9c0dde85bc78a788e62c4a5f0114f43b4c6e63d63ab13e216460211ffdeb0caca3f6754d598cd046c1e6fb3187ffc154de96c42d66cafbc09e4128444d14d85e5a0d350379a9bad8c45a56e7ae8fe4db9946a408db22ada184dabbf55455af23e5f60f33fb402fcc2d37dc4660afb4ee804b85144741aade49d55d2389e66b342b7b1008acd3cc5f888600551c50d656c80f932cd980b363ac422e0a6433cfe72d589b2f55a31197c69ebb6e6982a0d016333b0732e162f22ced0e2aebb7f1b8b11925306ef234d64acfff4010994b56f3031d1a4adc6415af2327f277729df4fdd734442043e9f9e73f66ed7f7c21547ecabb57c018c5b2e0f237d3f4f84405da9b67aab846b2111d6490453e4d0c1cc863f21488e4f8f1929371657ab5d6d0509f5b9835aba4de530a3227762dd82448c4d2675bf8059a3c56919d8fc3443e70cf32738c0feb7e5afda4ffc66137e7c6f0e48e49296151cd4196caad41cfd1c8c74a0fcc34ba842434ec3cd865375b63fe836860bca1f0defce681cbba5e48386fdf327fcc6500cb7a14c35d2cabfbfe88192aa880355cd30acc116c4d37a85fa280b82b5737ab798055bb7c3896f88a81acf1b4037f5aa6372444cf4f448a78567d2ac6d1e0c6d71730fe087b63d221612037a94b12d58f4a2448248032fefdae947005e0c8f304bd1cd8dc5eed58781006f61280555aec355f188bf580260b917bdee0c829c646e9ce0efaeee609d89cb91dfcdba7fcd977ecc6113656f2b7f7dce103d51e879e5bf057dd6c3b8622ac76c9b57dd3dc8fa98f1b7c119dd8829cdc6c3a584cc4209afe4f9afc5afd2903a0824de72b31ec9f508bfc183ec3f5a5769106e0a2478e17a0a7df917d1c303c9d84c0fa561ef44544da17d501db41d93bdce5410373e7da2e7e718d0f2cef0c8d35fd6b9cf341f3be61d8358af609339b82d46358f9b729f27aa14128d0fef3ab6beac8f8cc862585ba011b6c7cee89c59831d3dfac92727d84f4843dc4d60d7ab46c61b02a9c344acae473af8f5d3179dd1b65aaab6b9f9f4098fae6fafe90db6e00c944653522c7810cac360ab1033f6ca934282be9a793c89b3cc5a6594698aeb043ca56b34504b9b6fca797130dcd181021b1e2ccc8b80d5f5c8d59f5c50217bd77eabdaac64e67ca7b61295d56f0a71daf77cb1bf6870e979d660ca33df4ac75000b2db6686ee347df02358890be68c90ff838968cd48ec90824f737e7ba0f85ffd244eaff8d2b5da671cdab8bc4d33065c8b929367cbaf7fff95aa0244097d4fadb3fca8967be31c5cb7ffc11700945e8d9e7f0f6e374c3101d41e6edb1d4ac35c5163b4de49fbc6112e19849036790955d2cf162525e2f4866c06b61f23654e3d4ae9988f4394f42dc7624b53fea80c1628ba4b0f7a7f7807fae07666c226d40c27db637a0fb8dd0a336ad8f4906b54864bdf59aee33b99394c09c5df4e370289ece531dec6307efb74e0cd6615f80a11aa16df4431d251adec8f8433576632307312cf110ec8d824b7af88a4517f8766aef6ac79f2ab6b7d3d949545d133772fa53f07b1f12f417c3719e1f0cd574aed64207747769d22dd8eac241aebb34610cc1a07352e5b52ffaecef04c8cdd4947770a0db475a87993c947a22557a5104425862a841e8dc85d87bf78c808ae011bf0bcab8c8f2ba8cb2f483ac93cdf0611ac6774172df9d01e402e76d8eb8c55e7d432ddbe5c431297d531e35ddc451e6b45162364c7a332123b899a74ed7775867bc78c7f775c64e7fbb72a1fb3d561dc4b47f5322dfdd727678d192e93085b63a79a7b8a2523ca6b1922a48eb23dfae04fae38b54ef4f2600834a61f636c74fc53140d0a2e0e745a49d5b779acdc140cba6d5b8bf2780d49a2bfa722050ec1dde72c0bc31b9d7648d4a1bd3f855d14ceba01222489bd6fcc284ec78c0f6575f9ed40b9433ba4fc9ce2cc836cdcd193ef589971c2e2e5679c4fbe88f69beece653c99a6880a2424279f0b1f12c8635bf522236ef3311c5f8c289fb7ad96319c8df6e5ee9b6e98642927ba9ec39058aeb4f656439ac00c1bcb23b8532056ccde899b1535bc04bd7c1f91bfa916d04b897a36842ab07437aa2f728dee3090e3a2aafdd97eef1347a2c8bc3dcea3f13c252883245d086393b91ce7bdcf2ab31162005b5ab52d7f5efeab46d56837795665adc75c78c586ec35f9859eb3db07bc92cdaf65d45d97427b5e67be54ca84b2a9bee5eba4519e223b3bbc9428b622b9f33dc7067dd60a6a80072a18266948da1ae9b84ba71b7cf8a8a9b2ac954daad9e45fae13af056022f6bbd5ed2e16c312ee62df1f1e8074b9a0707caf329965e6e23d0637dda2953492532cd4f2e05cce1e42780babb450e348dcd727b0709250ca0aebce9c609f9d9a9c20bee489e00d6042cdfd96e0cab0149c4309ab6b1adb4513d56d9eb938e3e9aa7848d33fd49ddcaba4a34a631856bd2bee820c36f31a9201844339a058edca747715b245d5a027c830285e9c7cdca52a883406d652f35715e52fb0ed330c5ee86421860b0aba230e68d072e3274f7d3fdabcae54c3ce3e3ae0a51bd50898840a2a68fb8f202628d8e3d3c99c00ca54b7e802334142fa382586726b1bae020a36f3e6b4dc8b83953e84bc39abd3e292e7954447b971a43dc18334d6cd3f4764c1cc573a488aa5ba330ee6c9fefa5283fff07c0c9182370e4176ec294d8ee813ea453429df7579f39dab62c3cf1ba37e3413d3f6f7ee1e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x200, 0x7, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x1, 0x2, 0x8000}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x10000, 0x1, 0x4, 0xee}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x477, 0x6, 0x7}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffffff, 0x2, 0xe8, 0x9}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x4, 0xb}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8ab9, 0x6, 0x91, 0x40}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffe, 0xffffffffffffffff, 0x6}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x70, 0x8, 0x0, 0xd, 0x101}, 0x12}}]}, {0xf4, 0x6, "ff7b38d0195584e67e2724635afa83c153d608575499b1f8b8a456d7b4fb1b44fe8e7c487d48d69092127373147dbc0be20255e3f950ca75f7157ab495e8626e01a5cd5fcf5d900abac798324eccb8f8abae7dd6263f0d4b5e6e2c9a8c004e10fe40b989cd1a46fb8df818d67d08ebfad1aeda0d4f83127acd1b2211fcecc10b1e1208871168946b523f8f4e1131ab39d101f53e7f6b515b0f53682df6563d627e442a952c99edf186898c7c527c669736ecca790117b6334a76cf2ea73b77ddd30cb0cc833fed95f4aee30fca8b9927e4dd9223bc3d36045b6bb7c9e515b261ba0ea6cc13babbbcaa8145151e2fd296"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_ACT={0x214, 0x3, [@m_xt={0x108, 0x1e, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x85, 0x6, "a1d51c615109e425b87cceda338ec389e14bbb066a24df5416a7e773bfef636966f6c93a6ed094d5e05ab8391f12dc3221bf55b2413e93bbf9c024ea31b46ccafdb28ff13b5358a50466d0208a4e81c0b6779510ed67eaf18dd7c3d03c01c8ddb4bd351884eae682163853a8b8003f62e7bda6214f931504f0af389b60e166e553"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x108, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x34}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x58}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8ef}]}, {0xb4, 0x6, "ca578009f384b44393d98810a0a88c90e5806f2688efad10e74aacb242b295812abc33a522719df7f2cb320afc59fba140ece94c03b770a26a3512c66bc1bb907a322775ebad9455d37d1ea1587b9e082b42d351062f0d3de0f514b6c1adf6035a663369d25a994f328e8cf34f1f86d4251aa72e8223dca47bc9e8b045b4dbfd4363e358121ca339a1b8b640f9ebb4d8ed1ddc8b2edb6eb82396318f41f2a26c7d70a8e3bd4a6140e14b94759e64f0a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5c}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3c}}]}, 0x3954}, 0x1, 0x0, 0x0, 0x801}, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa06ac0100000008060001080006040002"], 0x0) 1.735686444s ago: executing program 4 (id=1219): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x80000a, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x8000000, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x1000003, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1.658045029s ago: executing program 3 (id=1222): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) ioctl$MTDFILEMODE(r0, 0x4d13, 0x2) 1.637401575s ago: executing program 3 (id=1225): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x84}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'xxhash64-generic\x00'}}, 0xffffffffffffffff, &(0x7f0000000100)=""/132) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0xc0000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x14, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c, 0xf4}) 1.088725198s ago: executing program 2 (id=1241): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r2, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='htcp\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r3, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 1.023761539s ago: executing program 2 (id=1252): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xe) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='5', 0x1}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x77}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x2) write(r4, &(0x7f00000003c0)='\\x0100 \\0', 0x9) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) 889.747805ms ago: executing program 3 (id=1245): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x1f00, 0x0, 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x0, 'syz1\x00'}) 888.064104ms ago: executing program 2 (id=1255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xe980fb0c11e43c4f}, 0x20004000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0400010d20"], 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000001200)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4077, 0xfed}], 0x1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 823.857926ms ago: executing program 3 (id=1246): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x49c3c0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000009c0)={0x2, 0x0, 0x10, 0xc, 0x1fa, &(0x7f00000005c0)="4b0d8db82e2a6b550b1765312b31a009b9b26e7269d17d12e33eef1858381186c43c0779a893751fc4786c114d3566312592e2aa3f5e590d2d7bde9a3df1c0b67ab54a46c80eca08ca0406bccd0bd341d892d0c2cf757969d1b58f2a7f2ea0321107b981b346b68aa7c0a4ff218f54bd34bbeec18cb65df446b2f732061238f01bdaca375e936d66650339dca1848c620583578af56954c6676ecdab4fcad9ee49459b7d80e9d149b45129c104b6ed85b3ed7c2310b1452b7b1279cba410eb8d9baa5251dc4207a3a0096a73ddb3efa59bcecf761788d55117a1c2d2382e3bfe470110fe030aced0b9f7f31dc972a0fdd69c1c0b5189b6eeac5bc87c31918dd0ae7f8bb93b4bb4cd4185d1bdf0941a2bfe561d13f6eb4cb902fc4444418d05d4a54b7d19073230272fe6ba8c77a8fd4bff8c01ac640d8b8bc55b844430f83cbfb8a347f4e3e421d80f2e28531dc7fe71385dd3545b125e9b35978847a867c3cf55c2af2c151c8bdbc07027dc050cf5641914a4675b0cbd7d408857f595194a24db87b624588357cb71ccdca96592deec859c06d5b7ab108670a7b1af99327eb7a9651dee13590e851972906f3a6c19c0163d4d07844c9b94fc52c4c443f7e824838f4386a878c6291176eb903226475b33b5f9484783c9ad2aa3ebf9a9c544ae0c7bdc7836dfb7e3c9f8d9273b9bc112f9ad85475942b66487ec55691abb19cf5972d4c75aae63e44b6384caf0d019399d01fc699b10cca304e46884249532281845dc965deb43783d03c32b1726ec5ee978549efad08ceec8d602c4249fa0f08b54dc9d5fd6db4810b3d5a6229f9bf69be26e0b5adc4a174c71bc322ca068497fc615017ec7676ab39bc9b37848717d82c33518fd932f6f1ab0897f151693baa1208d4cfad02b81f6ac99a52afc4a70b6be31f583b19185474f66199a264959a2d0e2cfe482b4da8a76637fba6d74574a7927ed638cc3e03ba89d0f9ddb9f2ac7cfbe014e3ad64355a052e65498b41ce07251cf3c056d0ddb09a8f2a36b166236feec58dcb5ea2eb0637f8c7e35274a316405d2e28aa61f5297a328f114890b58942a05302b8c6bb6b0ad5a200741cdbdd696e479a0d9def6c42f28dadc5db4e4f053d9aba3b46cad6e574538143acef6e7bbf31f323c5a19ffd6fc5a52253360fa7657a9c9a146e5bcf3cc37c59c778da7602d2616c488a3d92f0637b06f4a76269baa570fa98c9c1e2eacc647cc66a09cda0beccb806967f8df0a407e1c16c8ffdd3c4a2dbb5e55d53c012712619246a3cdf259855cf0dd7af1c99e67bb0313feb214daa48aa1b370a284e0989881b675243ee1431ee97212bd0be67e3cc919f9a63d0aee6883516285a21c9340b83f6b361a0d0bb816cbac95e7ff9ebd90a39796a95394d1ded9b8b20e8482589cff3dd4a404ec3b5ad6621219bffdecd0"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 729.759156ms ago: executing program 2 (id=1247): syz_open_dev$video4linux(&(0x7f00000001c0), 0x7, 0x61c1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) fchmod(r8, 0x98) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x9, 0x1, 0x11, 0x5, 0x4, 0x37, 0x101, 0x48, 0x8000006, 0x100000001, 0xa, 0x6, 0x7, 0x5, 0x20000000400eee0], 0x8000000, 0x2014}) sched_setscheduler(0x0, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000004000000020000000061198800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0xdb, 0x40, '\x00', 0xb}, {0xff, 0x4, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}}) 729.44185ms ago: executing program 3 (id=1248): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) mount$afs(&(0x7f0000000180)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) landlock_restrict_self(0xffffffffffffffff, 0xc) 300.262175ms ago: executing program 1 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xf5) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdir(&(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x40) write(r0, &(0x7f0000000000)='7', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0xfffd, [0x92e, 0x746ffec1], 0x4}, 0x10) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x10000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x18c, r5, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_IE={0x13c, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x4b}, 0x4, 0xd, @broadcast, 0x81, 0x100, 0x101}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @measure_req={0x26, 0xdb, {0x7, 0x6, 0xff, "6f2cad0bf03100216c1be614a82b33734bc21d55a70bb15a7423e20e9ae9344834571db23bde9df716dab7c065af74c5804bee5614efb5869bccb36dfee53222a550b466c8aa141b0999a0698c859108d92964b088e2dbd7b6440c35bf1e980410082e839f94eb6a6271b259b4a3c67ca2df1ca7ddfb941f484bb560fb32197cae1f95f63eef9cd88a976cace08b9f88b93bac338959b90b7a97dd3d68dd90205c8b89310151c200db9cea48cbcf2a9da71fa943f106ba69a171d61ee7f7927a387a5efcc3f9b69abdc1a8af40a6776d8d6bbb65f149f004"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @peer_mgmt={0x75, 0x8, {0x0, 0x80, @val=0x2ea8, @val=0x1e, @void}}, @rann={0x7e, 0x15, {{0x1, 0x29}, 0xb7, 0x5, @broadcast, 0xbc4, 0x3, 0xce1}}, @supported_rates={0x1, 0x4, [{0x12, 0x1}, {0x9}, {0x4}, {0x6c}]}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x6, 0x2, @device_b, 0x1, 0xffffffff, 0x6}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffffd}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xc6}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8}, 0x4090) 266.780951ms ago: executing program 4 (id=1253): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MTDFILEMODE(r0, 0x4d13, 0x2) 266.290419ms ago: executing program 1 (id=1254): socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$packet(0x11, 0x2, 0x300) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 188.396372ms ago: executing program 4 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @private=0xa010102}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x4, 0x5, 0xf}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) socket$inet_sctp(0x2, 0x5, 0x84) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffff1, 0x9, 0x9, 0x4, 0x7, 0x8, 0x4, 0x7, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff, 0x101, 0x1000, 0x2, 0x6, 0x1, 0xfffffff6, 0x2, 0x1000, 0x80000001, 0x8418, 0x0, 0x173, 0x6, 0x9, 0x8001, 0x80000001, 0x5, 0x0, 0x26d, 0x0, 0x8, 0x8000, 0x2, 0x58c, 0x9, 0x401, 0x4, 0x300000, 0x0, 0x7, 0x6f, 0x2, 0x9, 0x100, 0x2, 0x5, 0xdaa, 0x3, 0x1, 0x7, 0x3, 0xe48d, 0x7, 0x100, 0x0, 0x5cba063c, 0x40, 0x7, 0x200, 0x7, 0x40, 0x5, 0xfff, 0x80000001, 0x0, 0x80, 0x9, 0x0, 0xf389, 0x5, 0x9, 0xe, 0x8, 0x6, 0x6, 0x7fff, 0x6, 0x4, 0x3, 0x8, 0xfffffffb, 0x3, 0x8, 0xab, 0x2, 0x7f, 0x98f6, 0xd066, 0x101, 0x8, 0xfffffff2, 0x10, 0x0, 0x6, 0x86bf, 0xb56, 0x80000000, 0x7fffffff, 0x7, 0x2, 0x1000, 0x5, 0x2, 0x4, 0x80000001, 0x18, 0x9, 0x4, 0xffff, 0x7fff, 0x9, 0x9277, 0x5c, 0x5, 0xa29, 0x10001, 0x9, 0xdd15, 0x400, 0x1, 0x4b14, 0x80000001, 0xffffffff, 0x5]}}) ppoll(&(0x7f0000000000)=[{r5, 0x4236}, {r6, 0x20}, {r6, 0x60}, {r0, 0x2400}], 0x4, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000050000000900010073797a30000000001400000011000100000000f8007b49faf4a106f4ac00000000000000000a"], 0x48}}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 166.352499ms ago: executing program 2 (id=1257): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x91291185c79d9591, 0x43, 0x6, 0xfffffffc, 0x3c, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8, 0x20, 0x8, 0x9}}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x2) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x1c) r6 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) write$selinux_load(0xffffffffffffffff, 0x0, 0x2100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x40000, 0x0) write(r7, &(0x7f00000003c0)='1', 0x1) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x100, 0x0) write(r9, &(0x7f0000000340)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00004ee58ceb64e0ab01b4c4184da8a70007058102000200120100020000004034127856000100000001a555cb0572a399fa60eec6", 0x61) getsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) fcntl$F_SET_RW_HINT(r10, 0x40c, &(0x7f0000000000)=0x4) ioctl$DVB_DEMUX_DMX_START(r10, 0x6f29) 65.846667ms ago: executing program 1 (id=1258): setns(0xc9, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="8517d18188ba", 0x0, 0x8, 0x2, 0x1, 0x0}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) lseek(r2, 0x9, 0x1) getdents64(r2, &(0x7f0000000000)=""/256, 0x100) r3 = socket$netlink(0x10, 0x3, 0x12) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425fb408ca883afe2d241bcdf1e42224cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x50}], 0x1) 65.560223ms ago: executing program 1 (id=1259): socket$inet(0xa, 0x801, 0x84) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 16) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 413.793µs ago: executing program 2 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)) 295.078µs ago: executing program 1 (id=1261): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) ioctl(r0, 0x7, &(0x7f0000000000)="1b870ba0bf938991f540160f4e8aba6dfb69f91c375e1a6e7ee25f988921086172bda6bd03787cccf06b268865e9d5efb2c131bd92433eed7e3b53557806fffb407fa3ddafff0265ad2925886ef1836bb758d02801b82bed40f92a3c958285c5c90ba47b7f0684802bb6c9") 0s ago: executing program 1 (id=1262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @multicast1, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) kernel console output (not intermixed with test programs): T43] audit: type=1400 audit(105.638:630): avc: denied { mounton } for pid=7920 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 105.794440][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.353436][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.394399][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.402349][ T5743] Bluetooth: hci0: command tx timeout [ 107.684258][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 107.713813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.955881][ T8037] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.014473][ T8041] tipc: New replicast peer: 172.20.20.187 [ 108.026542][ T8041] tipc: Enabled bearer , priority 10 [ 108.031953][ T8044] tipc: Enabling of bearer rejected, already enabled [ 108.049854][ T8037] md/raid10:md0: not clean -- starting background reconstruction [ 108.049866][ T8037] md/raid10:md0: active with 1 out of 2 devices [ 108.050534][ T8037] md0: detected capacity change from 0 to 2048 [ 108.068471][ T8050] md: resync of RAID array md0 [ 108.110009][ T8050] md: md0: resync done. [ 108.220118][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 108.220131][ T43] audit: type=1326 audit(108.148:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.3.688" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08af9e159 code=0x0 [ 108.261997][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 108.340608][ T43] audit: type=1400 audit(108.268:635): avc: denied { ioctl } for pid=8054 comm="syz.3.688" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.440275][ T8070] syzkaller0: create flow: hash 3675811487 index 1 [ 108.444876][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.471941][ T8070] syzkaller0: delete flow: hash 3675811487 index 1 [ 108.555035][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 108.832907][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.473531][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.476459][ T5743] Bluetooth: hci0: command tx timeout [ 109.719212][ T2397] tipc: Node number set to 2130706433 [ 109.824634][ T8101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.832064][ T8103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.874433][ T8101] md: couldn't update array info. -22 [ 109.943328][ T8103] md: couldn't update array info. -22 [ 109.984210][ T8101] md: could not open device unknown-block(1,1). [ 109.984269][ T8101] md: md_import_device returned -16 [ 109.984377][ T8109] md: could not open device unknown-block(1,1). [ 109.984406][ T8109] md: md_import_device returned -16 [ 110.022370][ T5797] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.099261][ T43] audit: type=1326 audit(110.028:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.4.710" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c59e159 code=0x0 [ 110.137103][ T8123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.137124][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 110.137135][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 110.183896][ T5797] usb 8-1: Using ep0 maxpacket: 8 [ 110.184427][ T5797] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.185885][ T5797] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.185904][ T5797] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.185938][ T5797] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 110.185960][ T5797] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 110.185991][ T5797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.205026][ T5797] hub 8-1:1.0: bad descriptor, ignoring hub [ 110.205047][ T5797] hub 8-1:1.0: probe with driver hub failed with error -5 [ 110.205480][ T5797] cdc_wdm 8-1:1.0: skipping garbage [ 110.205492][ T5797] cdc_wdm 8-1:1.0: skipping garbage [ 110.243512][ T5797] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 110.243524][ T5797] cdc_wdm 8-1:1.0: Unknown control protocol [ 110.275011][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.340656][ T8136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.414573][ T8136] md: couldn't update array info. -22 [ 110.453045][ T8142] md: could not open device unknown-block(1,1). [ 110.453102][ T8142] md: md_import_device returned -16 [ 110.524183][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.524953][ T8148] ipt_rpfilter: unknown options [ 110.594314][ T5807] syzkaller0: tun_net_xmit 76 [ 110.594586][ T8151] syzkaller0: create flow: hash 3675811487 index 1 [ 110.595591][ T5807] syzkaller0: tun_net_xmit 48 [ 110.612498][ T2397] syzkaller0: tun_net_xmit 76 [ 110.625151][ T8150] syzkaller0: delete flow: hash 3675811487 index 1 [ 111.556610][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.567749][ T5743] Bluetooth: hci0: command tx timeout [ 111.857490][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 111.883653][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.908748][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 111.915556][ T43] audit: type=1400 audit(111.848:637): avc: denied { write } for pid=8174 comm="syz.4.733" path="socket:[24940]" dev="sockfs" ino=24940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.929463][ T8176] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 112.087757][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 112.090019][ T8191] kvm: user requested TSC rate below hardware speed [ 112.298220][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 112.592547][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.635312][ T13] syzkaller0: tun_net_xmit 76 [ 112.638283][ T13] syzkaller0: tun_net_xmit 48 [ 112.977309][ T8223] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 113.633443][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.725363][ T8095] cdc_wdm 8-1:1.0: Error autopm - -16 [ 113.728389][ T62] usb 8-1: USB disconnect, device number 10 [ 113.792325][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 113.936951][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.937131][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.990377][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 114.272384][ T5876] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 114.422376][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 114.423687][ T5876] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.424766][ T5876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.424783][ T5876] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.424816][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 114.424838][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 114.424871][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.434993][ T5876] hub 8-1:1.0: bad descriptor, ignoring hub [ 114.435015][ T5876] hub 8-1:1.0: probe with driver hub failed with error -5 [ 114.435403][ T5876] cdc_wdm 8-1:1.0: skipping garbage [ 114.435415][ T5876] cdc_wdm 8-1:1.0: skipping garbage [ 114.440498][ T5876] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 114.440515][ T5876] cdc_wdm 8-1:1.0: Unknown control protocol [ 114.514699][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 114.550164][ T8257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.602779][ T8257] md: couldn't update array info. -22 [ 114.612328][ C3] net_ratelimit: 9 callbacks suppressed [ 114.612362][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.659308][ T5807] syzkaller0: tun_net_xmit 76 [ 114.661152][ T5807] syzkaller0: tun_net_xmit 48 [ 114.683114][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.774306][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.843229][ T8265] kvm: user requested TSC rate below hardware speed [ 114.863334][ T5876] usb 8-1: USB disconnect, device number 11 [ 114.913014][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.104320][ T8276] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.242356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.242719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.403124][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.718102][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.916569][ T8279] syzkaller1: entered promiscuous mode [ 115.916584][ T8279] syzkaller1: entered allmulticast mode [ 115.966428][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'. [ 116.033487][ T8296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.072824][ T8296] md: couldn't update array info. -22 [ 116.077087][ T8300] syzkaller0: entered promiscuous mode [ 116.077100][ T8300] syzkaller0: entered allmulticast mode [ 116.273702][ T8323] FAULT_INJECTION: forcing a failure. [ 116.273702][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 116.273728][ T8323] CPU: 2 UID: 0 PID: 8323 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(full) [ 116.273744][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.273751][ T8323] Call Trace: [ 116.273755][ T8323] [ 116.273760][ T8323] dump_stack_lvl+0x100/0x190 [ 116.273792][ T8323] should_fail_ex.cold+0x5/0xa [ 116.273810][ T8323] should_failslab+0xc2/0x120 [ 116.273828][ T8323] __kmalloc_node_noprof+0xff/0x880 [ 116.273840][ T8323] ? __get_vm_area_node+0x1ff/0x350 [ 116.273854][ T8323] ? __get_vm_area_node+0x22b/0x350 [ 116.273867][ T8323] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 116.273884][ T8323] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 116.273905][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.273923][ T8323] ? find_held_lock+0x2b/0x80 [ 116.273938][ T8323] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.273953][ T8323] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 116.273974][ T8323] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.274007][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.274022][ T8323] __vmalloc_node_noprof+0xad/0xf0 [ 116.274038][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.274054][ T8323] __vmalloc_noprof+0xa3/0x120 [ 116.274068][ T8323] ? __pfx___vmalloc_noprof+0x10/0x10 [ 116.274084][ T8323] ? rcu_is_watching+0x13/0xc0 [ 116.274101][ T8323] ? cap_capable+0x107/0x430 [ 116.274120][ T8323] bpf_prog_alloc_no_stats+0x59/0x690 [ 116.274143][ T8323] ? security_capable+0x80/0x260 [ 116.274161][ T8323] bpf_prog_alloc+0x3b/0x200 [ 116.274174][ T8323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.274190][ T8323] bpf_prog_load+0x49e/0x2a80 [ 116.274209][ T8323] ? __pfx_bpf_prog_load+0x10/0x10 [ 116.274239][ T8323] __sys_bpf+0x1f46/0x4a30 [ 116.274255][ T8323] ? __pfx___sys_bpf+0x10/0x10 [ 116.274265][ T8323] ? find_held_lock+0x2b/0x80 [ 116.274280][ T8323] ? futex_wake+0x4ea/0x5e0 [ 116.274307][ T8323] ? rcu_read_lock_any_held+0x6a/0x90 [ 116.274323][ T8323] ? find_held_lock+0x2b/0x80 [ 116.274337][ T8323] ? ksys_write+0x190/0x250 [ 116.274348][ T8323] ? ksys_write+0x190/0x250 [ 116.274368][ T8323] ? __x64_sys_futex+0x34f/0x4d0 [ 116.274382][ T8323] ? __x64_sys_futex+0x358/0x4d0 [ 116.274397][ T8323] ? fput+0x7c/0x100 [ 116.274411][ T8323] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.274426][ T8323] ? ksys_write+0x1ac/0x250 [ 116.274438][ T8323] ? __x64_sys_bpf+0xce/0x140 [ 116.274449][ T8323] __x64_sys_bpf+0xce/0x140 [ 116.274460][ T8323] ? do_syscall_64+0xae/0x790 [ 116.274481][ T8323] do_syscall_64+0x123/0x790 [ 116.274497][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.274510][ T8323] RIP: 0033:0x7f76d0b9e159 [ 116.274522][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.274533][ T8323] RSP: 002b:00007f76d1ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.274545][ T8323] RAX: ffffffffffffffda RBX: 00007f76d0e25fa0 RCX: 00007f76d0b9e159 [ 116.274553][ T8323] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 116.274560][ T8323] RBP: 00007f76d0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 116.274566][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.274573][ T8323] R13: 00007f76d0e26038 R14: 00007f76d0e25fa0 R15: 00007fff10e3ecc8 [ 116.274589][ T8323] [ 116.274676][ T8323] syz.2.786: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.274717][ T8323] CPU: 2 UID: 0 PID: 8323 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(full) [ 116.274731][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.274739][ T8323] Call Trace: [ 116.274743][ T8323] [ 116.274748][ T8323] dump_stack_lvl+0x100/0x190 [ 116.274767][ T8323] warn_alloc.cold+0x9e/0xb2 [ 116.274780][ T8323] ? __pfx_warn_alloc+0x10/0x10 [ 116.274799][ T8323] ? dump_stack_lvl+0x17c/0x190 [ 116.274816][ T8323] ? rcu_is_watching+0x13/0xc0 [ 116.274832][ T8323] ? __kasan_kmalloc+0x8a/0xb0 [ 116.274846][ T8323] ? __kmalloc_node_noprof+0x360/0x880 [ 116.274857][ T8323] ? __get_vm_area_node+0x1ff/0x350 [ 116.274871][ T8323] ? __get_vm_area_node+0x22b/0x350 [ 116.274883][ T8323] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 116.274901][ T8323] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 116.274921][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.274949][ T8323] ? find_held_lock+0x2b/0x80 [ 116.274964][ T8323] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.274979][ T8323] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 116.274997][ T8323] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.275014][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.275043][ T8323] __vmalloc_node_noprof+0xad/0xf0 [ 116.275059][ T8323] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 116.275075][ T8323] __vmalloc_noprof+0xa3/0x120 [ 116.275089][ T8323] ? __pfx___vmalloc_noprof+0x10/0x10 [ 116.275105][ T8323] ? rcu_is_watching+0x13/0xc0 [ 116.275119][ T8323] ? cap_capable+0x107/0x430 [ 116.275148][ T8323] bpf_prog_alloc_no_stats+0x59/0x690 [ 116.275162][ T8323] ? security_capable+0x80/0x260 [ 116.275181][ T8323] bpf_prog_alloc+0x3b/0x200 [ 116.275194][ T8323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.275209][ T8323] bpf_prog_load+0x49e/0x2a80 [ 116.275228][ T8323] ? __pfx_bpf_prog_load+0x10/0x10 [ 116.275256][ T8323] __sys_bpf+0x1f46/0x4a30 [ 116.275272][ T8323] ? __pfx___sys_bpf+0x10/0x10 [ 116.275282][ T8323] ? find_held_lock+0x2b/0x80 [ 116.275296][ T8323] ? futex_wake+0x4ea/0x5e0 [ 116.275323][ T8323] ? rcu_read_lock_any_held+0x6a/0x90 [ 116.275339][ T8323] ? find_held_lock+0x2b/0x80 [ 116.275353][ T8323] ? ksys_write+0x190/0x250 [ 116.275364][ T8323] ? ksys_write+0x190/0x250 [ 116.275384][ T8323] ? __x64_sys_futex+0x34f/0x4d0 [ 116.275398][ T8323] ? __x64_sys_futex+0x358/0x4d0 [ 116.275438][ T8323] ? fput+0x7c/0x100 [ 116.275454][ T8323] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.275469][ T8323] ? ksys_write+0x1ac/0x250 [ 116.275484][ T8323] ? __x64_sys_bpf+0xce/0x140 [ 116.275496][ T8323] __x64_sys_bpf+0xce/0x140 [ 116.275508][ T8323] ? do_syscall_64+0xae/0x790 [ 116.275526][ T8323] do_syscall_64+0x123/0x790 [ 116.275542][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.275554][ T8323] RIP: 0033:0x7f76d0b9e159 [ 116.275563][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.275574][ T8323] RSP: 002b:00007f76d1ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.275585][ T8323] RAX: ffffffffffffffda RBX: 00007f76d0e25fa0 RCX: 00007f76d0b9e159 [ 116.275592][ T8323] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 116.275598][ T8323] RBP: 00007f76d0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 116.275605][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.275611][ T8323] R13: 00007f76d0e26038 R14: 00007f76d0e25fa0 R15: 00007fff10e3ecc8 [ 116.275626][ T8323] [ 116.275666][ T8323] Mem-Info: [ 116.275674][ T8323] active_anon:8314 inactive_anon:0 isolated_anon:0 [ 116.275674][ T8323] active_file:0 inactive_file:66251 isolated_file:0 [ 116.275674][ T8323] unevictable:1000 dirty:378 writeback:0 [ 116.275674][ T8323] slab_reclaimable:8747 slab_unreclaimable:72400 [ 116.275674][ T8323] mapped:30610 shmem:1556 pagetables:1645 [ 116.275674][ T8323] sec_pagetables:296 bounce:0 [ 116.275674][ T8323] kernel_misc_reclaimable:0 [ 116.275674][ T8323] free:433057 free_pcp:8597 free_cma:0 [ 116.275703][ T8323] Node 0 active_anon:33248kB inactive_anon:0kB active_file:0kB inactive_file:264724kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:118268kB dirty:1484kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15328kB pagetables:6328kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 116.275735][ T8323] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4172kB dirty:28kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 116.275765][ T8323] Node 0 DMA free:7152kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.275798][ T8323] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 116.275819][ T8323] Node 0 DMA32 free:83780kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33248kB inactive_anon:0kB active_file:0kB inactive_file:264724kB unevictable:2000kB writepending:1484kB zspages:0kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:34388kB local_pcp:8488kB free_cma:0kB [ 116.275853][ T8323] lowmem_reserve[]: 0 0 0 0 0 [ 116.275873][ T8323] Node 1 Normal free:1641296kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:2000kB writepending:28kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.275904][ T8323] lowmem_reserve[]: 0 0 0 0 0 [ 116.275922][ T8323] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 7152kB [ 116.276000][ T8323] Node 0 DMA32: 794*4kB (UME) 359*8kB (UME) 240*16kB (UME) 263*32kB (UME) 95*64kB (UME) 54*128kB (UME) 19*256kB (UME) 35*512kB (UME) 13*1024kB (UM) 4*2048kB (UM) 2*4096kB (U) = 83776kB [ 116.276085][ T8323] Node 1 Normal: 6*4kB (M) 29*8kB (UM) 23*16kB (UME) 53*32kB (UME) 47*64kB (UME) 29*128kB (UME) 24*256kB (UME) 18*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 391*4096kB (UM) = 1641296kB [ 116.276187][ T8323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.276197][ T8323] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.276206][ T8323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.276215][ T8323] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.276224][ T8323] 67803 total pagecache pages [ 116.276228][ T8323] 0 pages in swap cache [ 116.276232][ T8323] Free swap = 124996kB [ 116.276236][ T8323] Total swap = 124996kB [ 116.276241][ T8323] 1048443 pages RAM [ 116.276244][ T8323] 0 pages HighMem/MovableOnly [ 116.276248][ T8323] 285812 pages reserved [ 116.276252][ T8323] 0 pages cma reserved [ 116.284796][ T8321] kvm: user requested TSC rate below hardware speed [ 116.414765][ T8331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.461607][ T13] syzkaller0: tun_net_xmit 76 [ 116.461772][ T13] syzkaller0: tun_net_xmit 48 [ 116.762755][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.777347][ T8337] netlink: 'syz.4.792': attribute type 12 has an invalid length. [ 117.793552][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.868833][ T43] audit: type=1400 audit(117.798:638): avc: denied { shutdown } for pid=8350 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.873315][ T8352] nftables ruleset with unbound set [ 117.890777][ T43] audit: type=1400 audit(117.818:639): avc: denied { getopt } for pid=8350 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.891141][ T43] audit: type=1400 audit(117.818:640): avc: denied { setopt } for pid=8350 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.899214][ T43] audit: type=1400 audit(117.828:641): avc: denied { connect } for pid=8349 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.913977][ T43] audit: type=1400 audit(117.848:642): avc: denied { read } for pid=8354 comm="syz.3.798" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.914345][ T43] audit: type=1400 audit(117.848:643): avc: denied { open } for pid=8354 comm="syz.3.798" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.966407][ T8359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.026960][ T43] audit: type=1400 audit(117.958:644): avc: denied { watch } for pid=8362 comm="syz.2.802" path="/219/file1" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.033166][ T8361] kvm: user requested TSC rate below hardware speed [ 118.193611][ T5797] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 118.352662][ T5797] usb 9-1: Using ep0 maxpacket: 8 [ 118.353157][ T5797] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 118.354048][ T5797] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.354060][ T5797] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.354080][ T5797] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 118.354093][ T5797] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 118.354117][ T5797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.357053][ T5797] hub 9-1:1.0: bad descriptor, ignoring hub [ 118.357065][ T5797] hub 9-1:1.0: probe with driver hub failed with error -5 [ 118.357928][ T5797] cdc_wdm 9-1:1.0: skipping garbage [ 118.357936][ T5797] cdc_wdm 9-1:1.0: skipping garbage [ 118.362454][ T5797] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 118.362465][ T5797] cdc_wdm 9-1:1.0: Unknown control protocol [ 118.756607][ T2397] usb 9-1: USB disconnect, device number 2 [ 119.408222][ T43] audit: type=1400 audit(119.338:645): avc: denied { ioctl } for pid=8382 comm="syz.2.807" path="socket:[25424]" dev="sockfs" ino=25424 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.408405][ T8383] syzkaller0: entered promiscuous mode [ 119.408420][ T8383] syzkaller0: entered allmulticast mode [ 119.454181][ T43] audit: type=1400 audit(119.388:646): avc: denied { create } for pid=8384 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.454504][ T43] audit: type=1400 audit(119.388:647): avc: denied { connect } for pid=8384 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.573253][ T8393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.626469][ T8393] md: could not open device unknown-block(1,1). [ 119.626497][ T8393] md: md_import_device returned -16 [ 119.666314][ T8399] CIFS: Attempting to mount //127.0.0.1/share [ 119.667338][ T8399] net_ratelimit: 3 callbacks suppressed [ 119.667351][ T8399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.667769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.669258][ T8399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.681929][ T8399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.682075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.720739][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.725092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.730755][ T8402] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 119.730934][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.731726][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.741954][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.741992][ T8399] CIFS: VFS: cifs_mount failed w/return code = -112 [ 119.774389][ T8409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.874839][ T8419] vlan3: entered promiscuous mode [ 119.874856][ T8419] hsr0: entered promiscuous mode [ 119.875524][ T8419] vlan3: entered allmulticast mode [ 119.875536][ T8419] hsr0: entered allmulticast mode [ 119.875548][ T8419] hsr_slave_0: entered allmulticast mode [ 119.875556][ T8419] hsr_slave_1: entered allmulticast mode [ 119.880944][ T8422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.886112][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 119.887104][ T8419] hsr_slave_0: left promiscuous mode [ 119.889525][ T8419] hsr_slave_1: left promiscuous mode [ 119.893525][ T8422] md: could not open device unknown-block(1,1). [ 119.893550][ T8422] md: md_import_device returned -16 [ 120.148464][ T8444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.176558][ T8447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.834'. [ 120.226899][ T8444] md: could not open device unknown-block(1,1). [ 120.226928][ T8444] md: md_import_device returned -16 [ 120.286708][ T8460] FAULT_INJECTION: forcing a failure. [ 120.286708][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 120.286737][ T8460] CPU: 2 UID: 0 PID: 8460 Comm: syz.3.839 Not tainted syzkaller #0 PREEMPT(full) [ 120.286757][ T8460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.286767][ T8460] Call Trace: [ 120.286774][ T8460] [ 120.286780][ T8460] dump_stack_lvl+0x100/0x190 [ 120.286812][ T8460] should_fail_ex.cold+0x5/0xa [ 120.286837][ T8460] should_failslab+0xc2/0x120 [ 120.286861][ T8460] __kmalloc_noprof+0xfc/0x840 [ 120.286881][ T8460] ? tomoyo_encode2+0xfb/0x3c0 [ 120.286907][ T8460] tomoyo_encode2+0xfb/0x3c0 [ 120.286940][ T8460] tomoyo_encode+0x29/0x50 [ 120.286960][ T8460] tomoyo_realpath_from_path+0x18c/0x690 [ 120.286988][ T8460] tomoyo_path_number_perm+0x23c/0x580 [ 120.287007][ T8460] ? tomoyo_path_number_perm+0x22e/0x580 [ 120.287027][ T8460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.287056][ T8460] ? __lock_acquire+0x5c0/0x1f40 [ 120.287087][ T8460] ? __fget_files+0x34/0x3d0 [ 120.287111][ T8460] ? find_held_lock+0x2b/0x80 [ 120.287135][ T8460] ? hook_file_ioctl_common+0x140/0x440 [ 120.287169][ T8460] ? __fget_files+0x21f/0x3d0 [ 120.287196][ T8460] security_file_ioctl+0xd3/0x230 [ 120.287216][ T8460] __x64_sys_ioctl+0xb7/0x210 [ 120.287237][ T8460] do_syscall_64+0x123/0x790 [ 120.287264][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.287282][ T8460] RIP: 0033:0x7fa08af9e159 [ 120.287297][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.287313][ T8460] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.287331][ T8460] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 120.287343][ T8460] RDX: 0000200000000000 RSI: 00000000c040565f RDI: 0000000000000003 [ 120.287353][ T8460] RBP: 00007fa08be6b090 R08: 0000000000000000 R09: 0000000000000000 [ 120.287364][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.287374][ T8460] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 120.287435][ T8460] [ 120.287453][ T8460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.326739][ T8464] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.396459][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 120.434053][ T8474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.473867][ T8474] md: could not open device unknown-block(1,1). [ 120.473897][ T8474] md: md_import_device returned -16 [ 120.474789][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 120.642359][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 120.642884][ T62] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 120.643812][ T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.643824][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.643843][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 120.643861][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 120.643881][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.646529][ T62] hub 7-1:1.0: bad descriptor, ignoring hub [ 120.646541][ T62] hub 7-1:1.0: probe with driver hub failed with error -5 [ 120.646824][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 120.646832][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 120.647581][ T62] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 120.647594][ T62] cdc_wdm 7-1:1.0: Unknown control protocol [ 120.670819][ T8494] netlink: 'syz.1.854': attribute type 39 has an invalid length. [ 120.957018][ T2400] usb 7-1: USB disconnect, device number 7 [ 121.194546][ T8526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.242640][ T8526] md: could not open device unknown-block(1,1). [ 121.242670][ T8526] md: md_import_device returned -16 [ 121.470719][ T8536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.504058][ T2400] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 121.653034][ T2400] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 121.654166][ T2400] usb 8-1: config 65 has an invalid interface number: 3 but max is 0 [ 121.654179][ T2400] usb 8-1: config 65 has no interface number 0 [ 121.655680][ T2400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.655691][ T2400] usb 8-1: Product: syz [ 121.655699][ T2400] usb 8-1: Manufacturer: syz [ 121.655706][ T2400] usb 8-1: SerialNumber: syz [ 121.666458][ T2400] usb 8-1: 3:0 : does not exist [ 121.666474][ T2400] usb 8-1: 3:0 : does not exist [ 121.739492][ T8542] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 121.741642][ T8542] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 121.744889][ T8542] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 121.746630][ T8542] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 121.748857][ T8542] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 121.751055][ T8542] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 121.758172][ T8542] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 121.766635][ T8542] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 121.768425][ T8542] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 121.770074][ T8542] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 121.919246][ T5797] usb 8-1: USB disconnect, device number 12 [ 122.036790][ T8563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.082825][ T8563] md: could not open device unknown-block(1,1). [ 122.082855][ T8563] md: md_import_device returned -16 [ 122.202443][ T42] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 122.363206][ T42] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.364305][ T42] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.364324][ T42] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.364339][ T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.364372][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.364391][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.366038][ T42] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.366057][ T42] usb 9-1: Product: syz [ 122.366068][ T42] usb 9-1: Manufacturer: syz [ 122.371075][ T42] cdc_wdm 9-1:1.0: skipping garbage [ 122.371091][ T42] cdc_wdm 9-1:1.0: skipping garbage [ 122.374715][ T42] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 122.374730][ T42] cdc_wdm 9-1:1.0: Unknown control protocol [ 122.397519][ T5743] Bluetooth: Frame is too long (len 10, expected len 8) [ 122.397542][ T5743] Bluetooth: Wrong link type (-71) [ 122.495373][ T8576] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 122.497164][ T8576] syz_tun: entered promiscuous mode [ 122.506838][ T8576] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 122.629431][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 122.630562][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 122.631469][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 122.631484][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 122.631494][ T2400] usb 9-1: USB disconnect, device number 3 [ 122.631494][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.802393][ T2397] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 122.952372][ T2397] usb 8-1: Using ep0 maxpacket: 8 [ 122.953144][ T2397] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.954178][ T2397] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.954195][ T2397] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.954225][ T2397] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 122.954245][ T2397] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 122.954273][ T2397] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.959319][ T2397] hub 8-1:1.0: bad descriptor, ignoring hub [ 122.959402][ T2397] hub 8-1:1.0: probe with driver hub failed with error -5 [ 122.959751][ T2397] cdc_wdm 8-1:1.0: skipping garbage [ 122.959761][ T2397] cdc_wdm 8-1:1.0: skipping garbage [ 122.961644][ T2397] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 122.961658][ T2397] cdc_wdm 8-1:1.0: Unknown control protocol [ 123.046352][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 123.046389][ T43] audit: type=1400 audit(122.978:658): avc: denied { bind } for pid=8603 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.317410][ T8631] binder: BC_ACQUIRE_RESULT not supported [ 123.317429][ T8631] binder: 8630:8631 ioctl c0306201 200000000300 returned -22 [ 123.370167][ T2397] usb 8-1: USB disconnect, device number 13 [ 123.383849][ T8637] overlayfs: failed to clone upperpath [ 123.430082][ T8641] FAULT_INJECTION: forcing a failure. [ 123.430082][ T8641] name failslab, interval 1, probability 0, space 0, times 0 [ 123.430102][ T8641] CPU: 0 UID: 0 PID: 8641 Comm: syz.2.907 Not tainted syzkaller #0 PREEMPT(full) [ 123.430115][ T8641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.430121][ T8641] Call Trace: [ 123.430125][ T8641] [ 123.430130][ T8641] dump_stack_lvl+0x100/0x190 [ 123.430159][ T8641] should_fail_ex.cold+0x5/0xa [ 123.430175][ T8641] should_failslab+0xc2/0x120 [ 123.430193][ T8641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 123.430206][ T8641] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 123.430226][ T8641] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 123.430246][ T8641] mmu_topup_memory_caches+0x25/0x170 [ 123.430260][ T8641] kvm_mmu_load+0xe8/0x2580 [ 123.430273][ T8641] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 123.430290][ T8641] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 123.430309][ T8641] ? __pfx_kvm_mmu_load+0x10/0x10 [ 123.430320][ T8641] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 123.430333][ T8641] ? kvm_check_and_inject_events+0x896/0x1050 [ 123.430348][ T8641] vcpu_run+0x395d/0x5e80 [ 123.430360][ T8641] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 123.430373][ T8641] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 123.430394][ T8641] ? __pfx_vcpu_run+0x10/0x10 [ 123.430409][ T8641] ? lock_acquire+0x1d1/0x380 [ 123.430420][ T8641] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 123.430436][ T8641] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 123.430451][ T8641] ? __local_bh_enable_ip+0xa5/0x120 [ 123.430466][ T8641] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 123.430479][ T8641] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 123.430497][ T8641] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 123.430510][ T8641] ? lock_acquire+0x1d1/0x380 [ 123.430521][ T8641] ? do_raw_write_lock+0x11e/0x260 [ 123.430535][ T8641] ? find_held_lock+0x2b/0x80 [ 123.430550][ T8641] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 123.430564][ T8641] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 123.430582][ T8641] kvm_vcpu_ioctl+0x730/0x1700 [ 123.430598][ T8641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.430614][ T8641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.430628][ T8641] ? do_vfs_ioctl+0x226/0x13e0 [ 123.430640][ T8641] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.430650][ T8641] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 123.430664][ T8641] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.430679][ T8641] ? __fget_files+0x34/0x3d0 [ 123.430698][ T8641] ? selinux_file_ioctl+0x13b/0x290 [ 123.430710][ T8641] ? selinux_file_ioctl+0xb6/0x290 [ 123.430722][ T8641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.430738][ T8641] __x64_sys_ioctl+0x18e/0x210 [ 123.430750][ T8641] do_syscall_64+0x123/0x790 [ 123.430770][ T8641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.430782][ T8641] RIP: 0033:0x7f76d0b9e159 [ 123.430791][ T8641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.430802][ T8641] RSP: 002b:00007f76d1ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.430813][ T8641] RAX: ffffffffffffffda RBX: 00007f76d0e25fa0 RCX: 00007f76d0b9e159 [ 123.430820][ T8641] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.430826][ T8641] RBP: 00007f76d1ae8090 R08: 0000000000000000 R09: 0000000000000000 [ 123.430832][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.430839][ T8641] R13: 00007f76d0e26038 R14: 00007f76d0e25fa0 R15: 00007fff10e3ecc8 [ 123.430853][ T8641] [ 123.548190][ T8657] Bluetooth: MGMT ver 1.23 [ 123.548224][ T8657] FAULT_INJECTION: forcing a failure. [ 123.548224][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 123.548238][ T8657] CPU: 3 UID: 0 PID: 8657 Comm: syz.4.912 Not tainted syzkaller #0 PREEMPT(full) [ 123.548251][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.548257][ T8657] Call Trace: [ 123.548261][ T8657] [ 123.548266][ T8657] dump_stack_lvl+0x100/0x190 [ 123.548287][ T8657] should_fail_ex.cold+0x5/0xa [ 123.548318][ T8657] should_failslab+0xc2/0x120 [ 123.548333][ T8657] __kmalloc_cache_noprof+0x91/0x6d0 [ 123.548350][ T8657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.548367][ T8657] ? mgmt_pending_new+0x5b/0x240 [ 123.548387][ T8657] mgmt_pending_new+0x5b/0x240 [ 123.548403][ T8657] mgmt_pending_add+0x3a/0x1a0 [ 123.548418][ T8657] set_discoverable+0xb90/0xfa0 [ 123.548435][ T8657] ? __pfx_set_discoverable+0x10/0x10 [ 123.548452][ T8657] ? timer_init_key+0x150/0x310 [ 123.548466][ T8657] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 123.548481][ T8657] hci_sock_sendmsg+0x154e/0x2620 [ 123.548498][ T8657] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 123.548512][ T8657] ? selinux_socket_sendmsg+0x198/0x2f0 [ 123.548527][ T8657] sock_write_iter+0x53a/0x5b0 [ 123.548543][ T8657] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 123.548557][ T8657] ? __pfx_sock_write_iter+0x10/0x10 [ 123.548577][ T8657] ? bpf_lsm_file_permission+0x9/0x10 [ 123.548591][ T8657] ? security_file_permission+0x76/0x210 [ 123.548605][ T8657] ? rw_verify_area+0xce/0x6d0 [ 123.548623][ T8657] vfs_write+0x6af/0x1050 [ 123.548635][ T8657] ? __pfx_sock_write_iter+0x10/0x10 [ 123.548652][ T8657] ? __pfx_vfs_write+0x10/0x10 [ 123.548662][ T8657] ? find_held_lock+0x2b/0x80 [ 123.548687][ T8657] ksys_write+0x1f8/0x250 [ 123.548698][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 123.548713][ T8657] do_syscall_64+0x123/0x790 [ 123.548730][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.548742][ T8657] RIP: 0033:0x7f2f7c59e159 [ 123.548751][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.548762][ T8657] RSP: 002b:00007f2f7d536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.548773][ T8657] RAX: ffffffffffffffda RBX: 00007f2f7c825fa0 RCX: 00007f2f7c59e159 [ 123.548780][ T8657] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000004 [ 123.548787][ T8657] RBP: 00007f2f7d536090 R08: 0000000000000000 R09: 0000000000000000 [ 123.548793][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.548799][ T8657] R13: 00007f2f7c826038 R14: 00007f2f7c825fa0 R15: 00007ffe9188b488 [ 123.548814][ T8657] [ 123.585538][ T8664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.914'. [ 123.623145][ T8664] netlink: 'syz.4.914': attribute type 12 has an invalid length. [ 123.695365][ T8679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8679 comm=syz.4.921 [ 123.695408][ T8679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8679 comm=syz.4.921 [ 123.695420][ T8679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8679 comm=syz.4.921 [ 123.697105][ T8679] netlink: 200 bytes leftover after parsing attributes in process `syz.4.921'. [ 123.697835][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.921'. [ 123.744932][ T8687] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 123.744947][ T8687] netlink: 152 bytes leftover after parsing attributes in process `syz.2.923'. [ 123.747895][ T8687] .`: renamed from bond0 (while UP) [ 123.794277][ T8692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.925'. [ 123.862800][ T8703] netlink: 'syz.2.929': attribute type 21 has an invalid length. [ 123.900194][ T43] audit: type=1400 audit(123.828:659): avc: denied { getopt } for pid=8705 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.920551][ T8706] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 123.927928][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 123.938374][ T8708] bond2: entered promiscuous mode [ 123.938387][ T8708] bond2: entered allmulticast mode [ 124.008560][ T8721] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 124.055740][ T8730] SET target dimension over the limit! [ 124.092497][ T8726] md: could not open device unknown-block(1,1). [ 124.092536][ T8726] md: md_import_device returned -16 [ 124.102352][ T8733] syz.4.941 (8733): /proc/8732/oom_adj is deprecated, please use /proc/8732/oom_score_adj instead. [ 124.108008][ T8733] 8021q: VLANs not supported on wg1 [ 124.154238][ T43] audit: type=1400 audit(124.088:660): avc: denied { create } for pid=8737 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.239346][ T43] audit: type=1400 audit(124.168:661): avc: denied { ioctl } for pid=8751 comm="syz.4.948" path="socket:[27285]" dev="sockfs" ino=27285 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 124.271595][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 124.298865][ T43] audit: type=1400 audit(124.228:662): avc: denied { shutdown } for pid=8761 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.299820][ T8762] sctp: [Deprecated]: syz.1.952 (pid 8762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.299820][ T8762] Use struct sctp_sack_info instead [ 124.397883][ T8776] devpts: Unknown parameter 'ï±æ¸£Ö.€Ú(0(M]Åó‰>¥²¢å qÌ°3÷ùg+Úƒƒ‹Ñ' [ 124.399061][ T8777] devpts: Unknown parameter 'ï±æ¸£Ö.€Ú(0(M]Åó‰>¥²¢å qÌ°3÷ùg+Úƒƒ‹Ñ' [ 124.442413][ T43] audit: type=1400 audit(124.368:663): avc: denied { create } for pid=8783 comm="syz.2.962" name="#c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.442488][ T43] audit: type=1400 audit(124.368:664): avc: denied { link } for pid=8783 comm="syz.2.962" name="#c" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.443703][ T43] audit: type=1400 audit(124.378:665): avc: denied { rename } for pid=8783 comm="syz.2.962" name="#d" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.455915][ T8787] tipc: Trying to set illegal importance in message [ 124.458663][ T43] audit: type=1400 audit(124.388:666): avc: denied { getopt } for pid=8786 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.459059][ T8787] fuse: fd is not a fuse device [ 124.660314][ T8812] fuse: fd is not a fuse device [ 125.074442][ T42] net_ratelimit: 57 callbacks suppressed [ 125.074455][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.080618][ T8847] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.129491][ T43] audit: type=1400 audit(125.058:667): avc: denied { ioctl } for pid=8849 comm="syz.4.987" path="socket:[27409]" dev="sockfs" ino=27409 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.129621][ T8850] syzkaller0: entered promiscuous mode [ 125.129631][ T8850] syzkaller0: entered allmulticast mode [ 125.276340][ T8855] SET target dimension over the limit! [ 125.299688][ T8858] FAULT_INJECTION: forcing a failure. [ 125.299688][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 125.299709][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.4.989 Not tainted syzkaller #0 PREEMPT(full) [ 125.299721][ T8858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.299728][ T8858] Call Trace: [ 125.299732][ T8858] [ 125.299736][ T8858] dump_stack_lvl+0x100/0x190 [ 125.299765][ T8858] should_fail_ex.cold+0x5/0xa [ 125.299779][ T8858] ? __netlink_lookup+0x652/0x900 [ 125.299795][ T8858] should_failslab+0xc2/0x120 [ 125.299813][ T8858] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.299826][ T8858] ? skb_clone+0x190/0x400 [ 125.299841][ T8858] skb_clone+0x190/0x400 [ 125.299855][ T8858] netlink_deliver_tap+0xaed/0xcc0 [ 125.299869][ T8858] netlink_unicast+0x62b/0x850 [ 125.299883][ T8858] ? __pfx_netlink_unicast+0x10/0x10 [ 125.299895][ T8858] ? __pfx_sock_has_perm+0x10/0x10 [ 125.299918][ T8858] netlink_sendmsg+0x8b0/0xda0 [ 125.299932][ T8858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.299946][ T8858] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.299959][ T8858] ____sys_sendmsg+0xa4d/0xbe0 [ 125.299975][ T8858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.299988][ T8858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.300007][ T8858] ? lock_acquire+0x1d1/0x380 [ 125.300019][ T8858] ? get_pid_task+0x2a/0x250 [ 125.300035][ T8858] ___sys_sendmsg+0x190/0x1e0 [ 125.300053][ T8858] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.300069][ T8858] ? get_pid_task+0x106/0x250 [ 125.300089][ T8858] ? find_held_lock+0x2b/0x80 [ 125.300113][ T8858] __sys_sendmsg+0x160/0x210 [ 125.300143][ T8858] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.300164][ T8858] do_syscall_64+0x123/0x790 [ 125.300185][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.300197][ T8858] RIP: 0033:0x7f2f7c59e159 [ 125.300206][ T8858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.300217][ T8858] RSP: 002b:00007f2f7d536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.300228][ T8858] RAX: ffffffffffffffda RBX: 00007f2f7c825fa0 RCX: 00007f2f7c59e159 [ 125.300235][ T8858] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 125.300241][ T8858] RBP: 00007f2f7d536090 R08: 0000000000000000 R09: 0000000000000000 [ 125.300248][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.300254][ T8858] R13: 00007f2f7c826038 R14: 00007f2f7c825fa0 R15: 00007ffe9188b488 [ 125.300268][ T8858] [ 125.513869][ T5091] Bluetooth: hci0: unexpected event for opcode 0x8d41 [ 125.584358][ T8877] bond0: entered promiscuous mode [ 125.588813][ T8877] batadv0: entered promiscuous mode [ 125.589155][ T8877] debugfs: 'hsr0' already exists in 'hsr' [ 125.589166][ T8877] Cannot create hsr debugfs directory [ 125.589968][ T8877] hsr0: entered promiscuous mode [ 125.590732][ T8877] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 125.591974][ T8877] bond0: left promiscuous mode [ 125.597663][ T8877] batadv0: left promiscuous mode [ 125.629854][ T8879] FAULT_INJECTION: forcing a failure. [ 125.629854][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 125.629881][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.2.998 Not tainted syzkaller #0 PREEMPT(full) [ 125.629899][ T8879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.629909][ T8879] Call Trace: [ 125.629916][ T8879] [ 125.629923][ T8879] dump_stack_lvl+0x100/0x190 [ 125.629951][ T8879] should_fail_ex.cold+0x5/0xa [ 125.629975][ T8879] should_failslab+0xc2/0x120 [ 125.629997][ T8879] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 125.630016][ T8879] ? start_dirop+0x79/0xb0 [ 125.630035][ T8879] ? alloc_inode+0x68/0x250 [ 125.630053][ T8879] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 125.630078][ T8879] alloc_inode+0x68/0x250 [ 125.630095][ T8879] new_inode+0x22/0x1c0 [ 125.630113][ T8879] __debugfs_create_file+0xd8/0x4d0 [ 125.630139][ T8879] debugfs_create_file_full+0x41/0x60 [ 125.630167][ T8879] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 125.630191][ T8879] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 125.630235][ T8879] ? lockdep_init_map_type+0x5c/0x250 [ 125.630258][ T8879] ? __pfx_hsr_dev_setup+0x10/0x10 [ 125.630276][ T8879] alloc_netdev_mqs+0x314/0x15c0 [ 125.630302][ T8879] rtnl_create_link+0xc13/0xf80 [ 125.630327][ T8879] rtnl_newlink+0x15bc/0x2620 [ 125.630357][ T8879] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.630376][ T8879] ? avc_has_perm_noaudit+0x56/0x3b0 [ 125.630400][ T8879] ? find_held_lock+0x2b/0x80 [ 125.630422][ T8879] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 125.630444][ T8879] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 125.630491][ T8879] ? lock_acquire+0x1d1/0x380 [ 125.630508][ T8879] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 125.630530][ T8879] ? find_held_lock+0x2b/0x80 [ 125.630552][ T8879] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.630572][ T8879] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.630595][ T8879] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.630617][ T8879] rtnetlink_rcv_msg+0x95e/0xe90 [ 125.630646][ T8879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.630676][ T8879] ? ref_tracker_free+0x37e/0x6c0 [ 125.630699][ T8879] netlink_rcv_skb+0x159/0x420 [ 125.630719][ T8879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.630743][ T8879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.630770][ T8879] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.630793][ T8879] netlink_unicast+0x585/0x850 [ 125.630815][ T8879] ? __pfx_netlink_unicast+0x10/0x10 [ 125.630841][ T8879] netlink_sendmsg+0x8b0/0xda0 [ 125.630864][ T8879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.630886][ T8879] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.630909][ T8879] ____sys_sendmsg+0xa4d/0xbe0 [ 125.630931][ T8879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.630952][ T8879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.630982][ T8879] ? lock_acquire+0x1d1/0x380 [ 125.630998][ T8879] ? get_pid_task+0x2a/0x250 [ 125.631023][ T8879] ___sys_sendmsg+0x190/0x1e0 [ 125.631049][ T8879] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.631075][ T8879] ? get_pid_task+0x106/0x250 [ 125.631106][ T8879] ? find_held_lock+0x2b/0x80 [ 125.631144][ T8879] __sys_sendmsg+0x160/0x210 [ 125.631165][ T8879] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.631200][ T8879] do_syscall_64+0x123/0x790 [ 125.631246][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.631264][ T8879] RIP: 0033:0x7f76d0b9e159 [ 125.631278][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.631294][ T8879] RSP: 002b:00007f76d1ae8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.631310][ T8879] RAX: ffffffffffffffda RBX: 00007f76d0e25fa0 RCX: 00007f76d0b9e159 [ 125.631322][ T8879] RDX: 0000000004040030 RSI: 0000200000000040 RDI: 0000000000000003 [ 125.631332][ T8879] RBP: 00007f76d1ae8090 R08: 0000000000000000 R09: 0000000000000000 [ 125.631342][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.631352][ T8879] R13: 00007f76d0e26038 R14: 00007f76d0e25fa0 R15: 00007fff10e3ecc8 [ 125.631396][ T8879] [ 125.632462][ T5743] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 125.635781][ T8879] debugfs: out of free dentries, can not create file 'netdev@ffff8880569dc700' [ 125.697041][ T8887] SET target dimension over the limit! [ 125.766112][ T8893] __nla_validate_parse: 3 callbacks suppressed [ 125.766130][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 125.767732][ T8893] loop7: detected capacity change from 0 to 7 [ 125.772299][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.772397][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.777354][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.777395][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.778938][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.778975][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.781962][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.782034][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.784398][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 125.784436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.784462][ T8897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.784470][ T8897] IPv6: NLM_F_CREATE should be set when creating new route [ 125.784489][ T8897] IPv6: NLM_F_CREATE should be set when creating new route [ 125.784487][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.785159][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.785202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.785401][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.785433][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.785480][ T8893] ldm_validate_partition_table(): Disk read failed. [ 125.785598][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.785631][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.785781][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.785810][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.785970][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.785998][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.786244][ T8893] Dev loop7: unable to read RDB block 0 [ 125.788389][ T8893] loop7: unable to read partition table [ 125.788569][ T8893] loop7: partition table beyond EOD, truncated [ 125.788614][ T8893] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 125.802562][ T8893] ldm_validate_partition_table(): Disk read failed. [ 125.803253][ T8893] Dev loop7: unable to read RDB block 0 [ 125.803694][ T8893] loop7: unable to read partition table [ 125.803835][ T8893] loop7: partition table beyond EOD, truncated [ 126.112629][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.272667][ T7315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.273040][ T7317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.380468][ T8921] SET target dimension over the limit! [ 126.406325][ T8923] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 126.406340][ T8923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1014'. [ 126.429503][ T8926] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 126.445503][ T5743] Bluetooth: hci1: Malformed LE Event: 0x0b [ 126.446899][ T8917] kernel profiling enabled (shift: 5) [ 126.558841][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 126.590342][ T8938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1019'. [ 126.815589][ T8957] md: could not open device unknown-block(1,1). [ 126.815665][ T8957] md: md_import_device returned -16 [ 126.863278][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 126.863299][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 126.863328][ T8966] netlink: 'syz.4.1028': attribute type 7 has an invalid length. [ 126.874423][ T8972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8972 comm=syz.1.1029 [ 126.963511][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 126.969504][ T8981] ip6erspan0: entered promiscuous mode [ 126.972488][ T5876] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 127.134672][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 127.135277][ T5876] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.137708][ T5876] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.137722][ T5876] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.137743][ T5876] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 127.137757][ T5876] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 127.137777][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.141980][ T5876] hub 7-1:1.0: bad descriptor, ignoring hub [ 127.141993][ T5876] hub 7-1:1.0: probe with driver hub failed with error -5 [ 127.142640][ T5876] cdc_wdm 7-1:1.0: skipping garbage [ 127.142649][ T5876] cdc_wdm 7-1:1.0: skipping garbage [ 127.143619][ T5876] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 127.143628][ T5876] cdc_wdm 7-1:1.0: Unknown control protocol [ 127.155560][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.166331][ T8994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1035'. [ 127.260424][ T9001] FAULT_INJECTION: forcing a failure. [ 127.260424][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 127.260443][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.3.1038 Not tainted syzkaller #0 PREEMPT(full) [ 127.260456][ T9001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.260462][ T9001] Call Trace: [ 127.260472][ T9001] [ 127.260477][ T9001] dump_stack_lvl+0x100/0x190 [ 127.260502][ T9001] should_fail_ex.cold+0x5/0xa [ 127.260516][ T9001] ? __netlink_lookup+0x652/0x900 [ 127.260532][ T9001] should_failslab+0xc2/0x120 [ 127.260550][ T9001] kmem_cache_alloc_noprof+0x92/0x6a0 [ 127.260563][ T9001] ? skb_clone+0x190/0x400 [ 127.260578][ T9001] skb_clone+0x190/0x400 [ 127.260592][ T9001] netlink_deliver_tap+0xaed/0xcc0 [ 127.260606][ T9001] netlink_unicast+0x62b/0x850 [ 127.260620][ T9001] ? __pfx_netlink_unicast+0x10/0x10 [ 127.260632][ T9001] ? __pfx_sock_has_perm+0x10/0x10 [ 127.260652][ T9001] netlink_sendmsg+0x8b0/0xda0 [ 127.260667][ T9001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.260680][ T9001] ? selinux_socket_sendmsg+0x198/0x2f0 [ 127.260694][ T9001] ____sys_sendmsg+0xa4d/0xbe0 [ 127.260709][ T9001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.260722][ T9001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.260742][ T9001] ? lock_acquire+0x1d1/0x380 [ 127.260753][ T9001] ? get_pid_task+0x2a/0x250 [ 127.260770][ T9001] ___sys_sendmsg+0x190/0x1e0 [ 127.260787][ T9001] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.260804][ T9001] ? get_pid_task+0x106/0x250 [ 127.260824][ T9001] ? find_held_lock+0x2b/0x80 [ 127.260847][ T9001] __sys_sendmsg+0x160/0x210 [ 127.260861][ T9001] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.260881][ T9001] do_syscall_64+0x123/0x790 [ 127.260902][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.260914][ T9001] RIP: 0033:0x7fa08af9e159 [ 127.260923][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.260934][ T9001] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.260948][ T9001] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 127.260955][ T9001] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 127.260961][ T9001] RBP: 00007fa08be6b090 R08: 0000000000000000 R09: 0000000000000000 [ 127.260968][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.260974][ T9001] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 127.260988][ T9001] [ 127.263745][ T8999] md: could not open device unknown-block(1,1). [ 127.263772][ T8999] md: md_import_device returned -16 [ 127.545434][ T25] usb 7-1: USB disconnect, device number 8 [ 127.556815][ T9018] kvm: user requested TSC rate below hardware speed [ 127.611787][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 127.771172][ T9025] kvm [9024]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 127.771969][ T9025] kvm [9024]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 127.841304][ T9025] kvm_intel: kvm [9024]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 127.853706][ T9025] kvm [9024]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 127.854068][ T9025] kvm [9024]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 128.011809][ T9040] bond0: entered promiscuous mode [ 128.011824][ T9040] bond_slave_0: entered promiscuous mode [ 128.011956][ T9040] bond_slave_1: entered promiscuous mode [ 128.014012][ T9040] batadv0: entered promiscuous mode [ 128.014645][ T9040] hsr1: entered promiscuous mode [ 128.014816][ T9040] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 128.018611][ T9040] bond0: left promiscuous mode [ 128.018624][ T9040] bond_slave_0: left promiscuous mode [ 128.018723][ T9040] bond_slave_1: left promiscuous mode [ 128.020376][ T9040] batadv0: left promiscuous mode [ 128.134690][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 128.134704][ T43] audit: type=1400 audit(128.068:678): avc: denied { mount } for pid=9043 comm="syz.4.1052" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.156241][ T9045] hfs: can't find a HFS filesystem on dev sr0 [ 128.161869][ T9049] hfs: can't find a HFS filesystem on dev sr0 [ 128.171084][ T43] audit: type=1400 audit(128.098:679): avc: denied { unmount } for pid=7920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.203772][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.335483][ T9062] mmap: syz.3.1055 (9062): VmData 37728256 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 128.341138][ T9062] type: 17119 invalid [ 128.359663][ T9062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.428366][ T43] audit: type=1400 audit(128.358:680): avc: denied { mount } for pid=9070 comm="syz.4.1059" name="/" dev="rpc_pipefs" ino=30989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 128.456335][ T43] audit: type=1400 audit(128.388:681): avc: denied { map } for pid=9070 comm="syz.4.1059" path="socket:[30987]" dev="sockfs" ino=30987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.478304][ T9075] bond0: entered promiscuous mode [ 128.478318][ T9075] veth0_to_bond: entered promiscuous mode [ 128.480722][ T9075] batadv0: entered promiscuous mode [ 128.483122][ T9075] hsr1: entered promiscuous mode [ 128.483295][ T9075] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 128.484555][ T9075] bond0: left promiscuous mode [ 128.484566][ T9075] veth0_to_bond: left promiscuous mode [ 128.486557][ T9075] batadv0: left promiscuous mode [ 128.573479][ T43] audit: type=1400 audit(128.508:682): avc: denied { unmount } for pid=7920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 128.602087][ T9081] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 128.653441][ T9084] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.655096][ T9084] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.658684][ T43] audit: type=1400 audit(128.588:683): avc: denied { audit_write } for pid=9082 comm="syz.4.1071" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.234357][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.298848][ T43] audit: type=1400 audit(129.228:684): avc: denied { append } for pid=9117 comm="syz.4.1077" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 129.320061][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.350911][ T43] audit: type=1400 audit(129.278:685): avc: denied { read } for pid=9121 comm="syz.3.1078" dev="nsfs" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.351254][ T43] audit: type=1400 audit(129.278:686): avc: denied { open } for pid=9121 comm="syz.3.1078" path="net:[4026533050]" dev="nsfs" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.401284][ T9124] kvm: MWAIT instruction emulated as NOP! [ 129.822420][ T5568] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824188][ T5568] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824209][ T5568] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824226][ T5568] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.846564][ T43] audit: type=1400 audit(129.788:687): avc: denied { getopt } for pid=9150 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.866259][ T9145] syzkaller0: entered promiscuous mode [ 129.866275][ T9145] syzkaller0: entered allmulticast mode [ 129.918242][ T9151] syzkaller0: entered promiscuous mode [ 129.918256][ T9151] syzkaller0: entered allmulticast mode [ 130.019076][ T9157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.070718][ T9160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.274482][ T9141] net_ratelimit: 1 callbacks suppressed [ 130.274503][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.322552][ T5876] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 130.484997][ T5876] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 130.485888][ T5876] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.485907][ T5876] usb 9-1: config 0 has no interfaces? [ 130.485936][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.487383][ T5876] usb 9-1: config 0 descriptor?? [ 130.572341][ T5797] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 130.702622][ T5876] usb 9-1: USB disconnect, device number 4 [ 130.742329][ T5797] usb 8-1: Using ep0 maxpacket: 8 [ 130.743199][ T5797] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 130.744283][ T5797] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.744300][ T5797] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.744332][ T5797] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 130.744353][ T5797] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 130.744382][ T5797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.751558][ T5797] hub 8-1:1.0: bad descriptor, ignoring hub [ 130.751579][ T5797] hub 8-1:1.0: probe with driver hub failed with error -5 [ 130.751953][ T5797] cdc_wdm 8-1:1.0: skipping garbage [ 130.751964][ T5797] cdc_wdm 8-1:1.0: skipping garbage [ 130.766559][ T5797] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 130.766572][ T5797] cdc_wdm 8-1:1.0: Unknown control protocol [ 130.851648][ T9185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.132324][ T9141] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 131.152743][ T5797] usb 8-1: USB disconnect, device number 14 [ 131.304939][ T9141] usb 7-1: New USB device found, idVendor=047f, idProduct=00ff, bcdDevice= 0.00 [ 131.306678][ T9141] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 131.306704][ T9141] usb 7-1: can't read configurations, error -61 [ 131.322572][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.402824][ T7315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.452662][ T9141] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 131.461052][ T9193] FAULT_INJECTION: forcing a failure. [ 131.461052][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 131.461073][ T9193] CPU: 2 UID: 0 PID: 9193 Comm: syz.4.1098 Not tainted syzkaller #0 PREEMPT(full) [ 131.461086][ T9193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.461092][ T9193] Call Trace: [ 131.461096][ T9193] [ 131.461100][ T9193] dump_stack_lvl+0x100/0x190 [ 131.461131][ T9193] should_fail_ex.cold+0x5/0xa [ 131.461147][ T9193] should_failslab+0xc2/0x120 [ 131.461165][ T9193] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.461177][ T9193] ? vhost_task_create+0x1db/0x370 [ 131.461194][ T9193] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 131.461207][ T9193] ? alloc_pid+0x1bd/0x1930 [ 131.461225][ T9193] alloc_pid+0x1bd/0x1930 [ 131.461243][ T9193] ? __pfx_alloc_pid+0x10/0x10 [ 131.461262][ T9193] ? __lock_acquire+0x5c0/0x1f40 [ 131.461275][ T9193] ? avc_has_perm_noaudit+0x145/0x3b0 [ 131.461297][ T9193] ? fpu_clone+0x226/0x7a0 [ 131.461313][ T9193] ? copy_thread+0x729/0xbe0 [ 131.461328][ T9193] copy_process+0x4dd6/0x8370 [ 131.461348][ T9193] ? __pfx_copy_process+0x10/0x10 [ 131.461360][ T9193] ? kasan_save_track+0x14/0x30 [ 131.461373][ T9193] ? __kasan_kmalloc+0xaa/0xb0 [ 131.461386][ T9193] ? lockdep_init_map_type+0x5c/0x250 [ 131.461399][ T9193] ? lockdep_init_map_type+0x5c/0x250 [ 131.461412][ T9193] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 131.461430][ T9193] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 131.461445][ T9193] vhost_task_create+0x1db/0x370 [ 131.461462][ T9193] ? __pfx_vhost_task_create+0x10/0x10 [ 131.461483][ T9193] ? __pfx_vhost_task_fn+0x10/0x10 [ 131.461506][ T9193] ? register_lock_class+0x3f/0x7b0 [ 131.461518][ T9193] ? rcu_is_watching+0x13/0xc0 [ 131.461532][ T9193] ? trace_contention_end+0x126/0x160 [ 131.461548][ T9193] kvm_mmu_post_init_vm+0x1b3/0x360 [ 131.461562][ T9193] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 131.461576][ T9193] ? __pfx___mutex_lock+0x10/0x10 [ 131.461595][ T9193] ? kasan_quarantine_put+0x104/0x240 [ 131.461609][ T9193] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 131.461622][ T9193] ? lock_acquire+0x1d1/0x380 [ 131.461634][ T9193] ? do_raw_write_lock+0x11e/0x260 [ 131.461647][ T9193] ? find_held_lock+0x2b/0x80 [ 131.461662][ T9193] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 131.461676][ T9193] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 131.461694][ T9193] kvm_vcpu_ioctl+0x730/0x1700 [ 131.461711][ T9193] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.461726][ T9193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.461740][ T9193] ? do_vfs_ioctl+0x226/0x13e0 [ 131.461751][ T9193] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.461761][ T9193] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 131.461777][ T9193] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 131.461792][ T9193] ? __fget_files+0x34/0x3d0 [ 131.461812][ T9193] ? selinux_file_ioctl+0x13b/0x290 [ 131.461823][ T9193] ? selinux_file_ioctl+0xb6/0x290 [ 131.461836][ T9193] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.461852][ T9193] __x64_sys_ioctl+0x18e/0x210 [ 131.461864][ T9193] do_syscall_64+0x123/0x790 [ 131.461880][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.461891][ T9193] RIP: 0033:0x7f2f7c59e159 [ 131.461902][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.461913][ T9193] RSP: 002b:00007f2f7d536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.461924][ T9193] RAX: ffffffffffffffda RBX: 00007f2f7c825fa0 RCX: 00007f2f7c59e159 [ 131.461931][ T9193] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 131.461938][ T9193] RBP: 00007f2f7d536090 R08: 0000000000000000 R09: 0000000000000000 [ 131.461945][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.461951][ T9193] R13: 00007f2f7c826038 R14: 00007f2f7c825fa0 R15: 00007ffe9188b488 [ 131.461965][ T9193] [ 131.598893][ T9195] __nla_validate_parse: 5 callbacks suppressed [ 131.598909][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1099'. [ 131.632866][ T9141] usb 7-1: New USB device found, idVendor=047f, idProduct=00ff, bcdDevice= 0.00 [ 131.639531][ T9141] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 131.639553][ T9141] usb 7-1: can't read configurations, error -61 [ 131.641637][ T9141] usb usb7-port1: attempt power cycle [ 131.765376][ T9203] overlayfs: failed to clone upperpath [ 131.992306][ T9141] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 132.025076][ T9141] usb 7-1: New USB device found, idVendor=047f, idProduct=00ff, bcdDevice= 0.00 [ 132.026230][ T9141] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 132.026247][ T9141] usb 7-1: can't read configurations, error -61 [ 132.033857][ T7317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.089300][ T9219] tipc: Enabling of bearer rejected, failed to enable media [ 132.152321][ T9141] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 132.176690][ T9141] usb 7-1: New USB device found, idVendor=047f, idProduct=00ff, bcdDevice= 0.00 [ 132.178191][ T9141] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 132.178220][ T9141] usb 7-1: can't read configurations, error -61 [ 132.178601][ T9141] usb usb7-port1: unable to enumerate USB device [ 132.362527][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.674394][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802542][ T9139] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 132.952949][ T9139] usb 9-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 132.954082][ T9139] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.954107][ T9139] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.954128][ T9139] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.954160][ T9139] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.956212][ T9139] usb 9-1: config 0 descriptor?? [ 133.223233][ T9139] usbhid 9-1:0.0: can't add hid device: -71 [ 133.223314][ T9139] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 133.228941][ T9139] usb 9-1: USB disconnect, device number 5 [ 133.317415][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 133.317432][ T43] audit: type=1400 audit(133.248:690): avc: denied { getopt } for pid=9270 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.363593][ T43] audit: type=1804 audit(133.298:691): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1126" name="/newroot/199/file0" dev="tmpfs" ino=1104 res=1 errno=0 [ 133.364528][ T9274] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 133.364540][ T9274] ref_ctr increment failed for inode: 0x450 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035a53300 [ 133.389789][ T9273] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 133.389807][ T9273] ref_ctr decrement failed for inode: 0x450 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035a53300 [ 133.389841][ T9273] uprobe: syz.3.1126:9273 failed to unregister, leaking uprobe [ 133.393051][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.441344][ T43] audit: type=1400 audit(133.368:692): avc: denied { cmd } for pid=9276 comm="iou-wrk-9277" path="socket:[30492]" dev="sockfs" ino=30492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.498193][ T9284] FAULT_INJECTION: forcing a failure. [ 133.498193][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.498222][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.3.1128 Not tainted syzkaller #0 PREEMPT(full) [ 133.498242][ T9284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.498253][ T9284] Call Trace: [ 133.498259][ T9284] [ 133.498266][ T9284] dump_stack_lvl+0x100/0x190 [ 133.498297][ T9284] should_fail_ex.cold+0x5/0xa [ 133.498340][ T9284] _copy_to_user+0x32/0xd0 [ 133.498363][ T9284] video_usercopy+0xece/0x1730 [ 133.498399][ T9284] ? __pfx___video_do_ioctl+0x10/0x10 [ 133.498426][ T9284] ? __pfx_video_usercopy+0x10/0x10 [ 133.498473][ T9284] v4l2_ioctl+0x1bd/0x250 [ 133.498498][ T9284] ? __pfx_v4l2_ioctl+0x10/0x10 [ 133.498525][ T9284] __x64_sys_ioctl+0x18e/0x210 [ 133.498545][ T9284] do_syscall_64+0x123/0x790 [ 133.498571][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.498590][ T9284] RIP: 0033:0x7fa08af9e159 [ 133.498604][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.498620][ T9284] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.498639][ T9284] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 133.498650][ T9284] RDX: 0000200000000080 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 133.498661][ T9284] RBP: 00007fa08be6b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.498671][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.498681][ T9284] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 133.498705][ T9284] [ 133.617386][ T9290] FAULT_INJECTION: forcing a failure. [ 133.617386][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 133.617417][ T9290] CPU: 2 UID: 0 PID: 9290 Comm: syz.3.1130 Not tainted syzkaller #0 PREEMPT(full) [ 133.617439][ T9290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.617449][ T9290] Call Trace: [ 133.617456][ T9290] [ 133.617463][ T9290] dump_stack_lvl+0x100/0x190 [ 133.617496][ T9290] should_fail_ex.cold+0x5/0xa [ 133.617523][ T9290] should_failslab+0xc2/0x120 [ 133.617557][ T9290] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 133.617580][ T9290] ? alloc_vmap_area+0x640/0x2bb0 [ 133.617608][ T9290] alloc_vmap_area+0x640/0x2bb0 [ 133.617637][ T9290] ? kasan_save_track+0x14/0x30 [ 133.617659][ T9290] ? __kasan_kmalloc+0xaa/0xb0 [ 133.617680][ T9290] ? __pfx_alloc_vmap_area+0x10/0x10 [ 133.617705][ T9290] ? __get_vm_area_node+0x124/0x350 [ 133.617731][ T9290] __get_vm_area_node+0x1ed/0x350 [ 133.617760][ T9290] __vmalloc_node_range_noprof+0x268/0x1420 [ 133.617788][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.617814][ T9290] ? stack_depot_save_flags+0x27/0x9f0 [ 133.617838][ T9290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.617867][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.617893][ T9290] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 133.617919][ T9290] ? do_syscall_64+0x123/0x790 [ 133.617974][ T9290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.618007][ T9290] ? rcu_is_watching+0x13/0xc0 [ 133.618037][ T9290] __kvmalloc_node_noprof+0x3da/0x9b0 [ 133.618058][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.618083][ T9290] ? __lock_acquire+0x5c0/0x1f40 [ 133.618102][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.618130][ T9290] xt_alloc_entry_offsets+0x42/0x60 [ 133.618157][ T9290] translate_table+0x229/0x1630 [ 133.618186][ T9290] ? lock_acquire+0x1d1/0x380 [ 133.618205][ T9290] ? __might_fault+0xc5/0x140 [ 133.618234][ T9290] ? find_held_lock+0x2b/0x80 [ 133.618265][ T9290] ? __pfx_translate_table+0x10/0x10 [ 133.618302][ T9290] do_ipt_set_ctl+0x689/0xcf0 [ 133.618330][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.618359][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.618386][ T9290] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 133.618414][ T9290] ? __mutex_unlock_slowpath+0x35d/0x930 [ 133.618442][ T9290] ? sockopt_release_sock+0x5c/0x70 [ 133.618467][ T9290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.618504][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.618537][ T9290] nf_setsockopt+0x8d/0xf0 [ 133.618564][ T9290] ip_setsockopt+0xcb/0xf0 [ 133.618596][ T9290] udp_setsockopt+0x64/0xb0 [ 133.618625][ T9290] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.618655][ T9290] do_sock_setsockopt+0xf3/0x1d0 [ 133.618684][ T9290] __sys_setsockopt+0x195/0x220 [ 133.618713][ T9290] __x64_sys_setsockopt+0xbd/0x160 [ 133.618734][ T9290] ? do_syscall_64+0xae/0x790 [ 133.618758][ T9290] ? lockdep_hardirqs_on+0x7d/0x110 [ 133.618784][ T9290] do_syscall_64+0x123/0x790 [ 133.618813][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.618833][ T9290] RIP: 0033:0x7fa08af9e159 [ 133.618850][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.618868][ T9290] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.618887][ T9290] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 133.618900][ T9290] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 133.618912][ T9290] RBP: 00007fa08b03503b R08: 00000000000003d0 R09: 0000000000000000 [ 133.618925][ T9290] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 133.618937][ T9290] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 133.618963][ T9290] [ 133.619041][ T9290] syz.3.1130: vmalloc error: size 536870912, align 0x200000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.619099][ T9290] CPU: 2 UID: 0 PID: 9290 Comm: syz.3.1130 Not tainted syzkaller #0 PREEMPT(full) [ 133.619120][ T9290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.619131][ T9290] Call Trace: [ 133.619138][ T9290] [ 133.619145][ T9290] dump_stack_lvl+0x100/0x190 [ 133.619176][ T9290] warn_alloc.cold+0x9e/0xb2 [ 133.619196][ T9290] ? __pfx_warn_alloc+0x10/0x10 [ 133.619227][ T9290] ? lockdep_hardirqs_on+0x7d/0x110 [ 133.619257][ T9290] ? __get_vm_area_node+0x2f0/0x350 [ 133.619288][ T9290] ? __get_vm_area_node+0x22b/0x350 [ 133.619318][ T9290] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 133.619367][ T9290] ? stack_depot_save_flags+0x27/0x9f0 [ 133.619405][ T9290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.619436][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.619463][ T9290] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 133.619487][ T9290] ? do_syscall_64+0x123/0x790 [ 133.619512][ T9290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.619546][ T9290] ? rcu_is_watching+0x13/0xc0 [ 133.619579][ T9290] __kvmalloc_node_noprof+0x3da/0x9b0 [ 133.619602][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.619629][ T9290] ? __lock_acquire+0x5c0/0x1f40 [ 133.619650][ T9290] ? xt_alloc_entry_offsets+0x42/0x60 [ 133.619678][ T9290] xt_alloc_entry_offsets+0x42/0x60 [ 133.619702][ T9290] translate_table+0x229/0x1630 [ 133.619731][ T9290] ? lock_acquire+0x1d1/0x380 [ 133.619750][ T9290] ? __might_fault+0xc5/0x140 [ 133.619779][ T9290] ? find_held_lock+0x2b/0x80 [ 133.619809][ T9290] ? __pfx_translate_table+0x10/0x10 [ 133.619845][ T9290] do_ipt_set_ctl+0x689/0xcf0 [ 133.619873][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.619897][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.619926][ T9290] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 133.619954][ T9290] ? __mutex_unlock_slowpath+0x35d/0x930 [ 133.619982][ T9290] ? sockopt_release_sock+0x5c/0x70 [ 133.620006][ T9290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.620042][ T9290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 133.620068][ T9290] nf_setsockopt+0x8d/0xf0 [ 133.620094][ T9290] ip_setsockopt+0xcb/0xf0 [ 133.620125][ T9290] udp_setsockopt+0x64/0xb0 [ 133.620149][ T9290] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.620179][ T9290] do_sock_setsockopt+0xf3/0x1d0 [ 133.620208][ T9290] __sys_setsockopt+0x195/0x220 [ 133.620235][ T9290] __x64_sys_setsockopt+0xbd/0x160 [ 133.620256][ T9290] ? do_syscall_64+0xae/0x790 [ 133.620280][ T9290] ? lockdep_hardirqs_on+0x7d/0x110 [ 133.620304][ T9290] do_syscall_64+0x123/0x790 [ 133.620333][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.620352][ T9290] RIP: 0033:0x7fa08af9e159 [ 133.620367][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.620384][ T9290] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.620402][ T9290] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 133.620414][ T9290] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 133.620424][ T9290] RBP: 00007fa08b03503b R08: 00000000000003d0 R09: 0000000000000000 [ 133.620435][ T9290] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 133.620446][ T9290] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 133.620472][ T9290] [ 133.620579][ T9290] Mem-Info: [ 133.620590][ T9290] active_anon:9120 inactive_anon:115 isolated_anon:0 [ 133.620590][ T9290] active_file:1228 inactive_file:60655 isolated_file:0 [ 133.620590][ T9290] unevictable:1000 dirty:299 writeback:0 [ 133.620590][ T9290] slab_reclaimable:8860 slab_unreclaimable:72892 [ 133.620590][ T9290] mapped:31019 shmem:1558 pagetables:1630 [ 133.620590][ T9290] sec_pagetables:296 bounce:0 [ 133.620590][ T9290] kernel_misc_reclaimable:0 [ 133.620590][ T9290] free:428018 free_pcp:10631 free_cma:0 [ 133.620639][ T9290] Node 0 active_anon:36328kB inactive_anon:460kB active_file:4912kB inactive_file:241912kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:119952kB dirty:1196kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15744kB pagetables:6164kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 133.620690][ T9290] Node 1 active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:708kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4124kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 133.620738][ T9290] Node 0 DMA free:6548kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:160kB free_cma:0kB [ 133.620787][ T9290] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 133.620821][ T9290] Node 0 DMA32 free:99896kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36328kB inactive_anon:460kB active_file:4912kB inactive_file:241808kB unevictable:2000kB writepending:1196kB zspages:0kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:20088kB local_pcp:5840kB free_cma:0kB [ 133.620874][ T9290] lowmem_reserve[]: 0 0 0 0 0 [ 133.620905][ T9290] Node 1 Normal free:1605628kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:708kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:21964kB local_pcp:4908kB free_cma:0kB [ 133.620956][ T9290] lowmem_reserve[]: 0 0 0 0 0 [ 133.620986][ T9290] Node 0 DMA: 3*4kB (U) 3*8kB (M) 5*16kB (UM) 5*32kB (UM) 2*64kB (M) 4*128kB (UM) 2*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 1*4096kB (M) = 6548kB [ 133.621120][ T9290] Node 0 DMA32: 1570*4kB (UME) 461*8kB (UME) 374*16kB (UME) 426*32kB (UME) 171*64kB (UME) 90*128kB (UME) 56*256kB (UME) 35*512kB (UM) 7*1024kB (UM) 4*2048kB (UM) 0*4096kB = 99664kB [ 133.621278][ T9290] Node 1 Normal: 40*4kB (UM) 32*8kB (UM) 26*16kB (UME) 22*32kB (UME) 46*64kB (UME) 31*128kB (UME) 33*256kB (UM) 27*512kB (UM) 8*1024kB (UME) 5*2048kB (UME) 380*4096kB (UM) = 1605632kB [ 133.621425][ T9290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.621439][ T9290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.621453][ T9290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.621467][ T9290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.621480][ T9290] 63437 total pagecache pages [ 133.621487][ T9290] 0 pages in swap cache [ 133.621493][ T9290] Free swap = 124996kB [ 133.621499][ T9290] Total swap = 124996kB [ 133.621506][ T9290] 1048443 pages RAM [ 133.621512][ T9290] 0 pages HighMem/MovableOnly [ 133.621518][ T9290] 285812 pages reserved [ 133.621524][ T9290] 0 pages cma reserved [ 133.954265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.954940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.078315][ T43] audit: type=1400 audit(134.008:693): avc: denied { read } for pid=9303 comm="syz.2.1137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.078574][ T43] audit: type=1400 audit(134.008:694): avc: denied { open } for pid=9303 comm="syz.2.1137" path="/291/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.110805][ T9311] trusted_key: encrypted_key: keylen parameter is missing [ 134.136012][ T43] audit: type=1400 audit(134.068:695): avc: denied { mounton } for pid=9303 comm="syz.2.1137" path="/291/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.311313][ T9337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.319054][ T9340] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.320618][ T9340] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 134.320846][ T9340] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 134.432770][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.433031][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.986385][ T43] audit: type=1400 audit(134.918:696): avc: denied { map } for pid=9357 comm="syz.2.1152" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 134.986413][ T43] audit: type=1400 audit(134.918:697): avc: denied { execute } for pid=9357 comm="syz.2.1152" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 135.030962][ T9368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 135.056436][ T9370] fuse: fd is not a fuse device [ 135.147667][ T9380] netlink: 'syz.1.1159': attribute type 39 has an invalid length. [ 135.179933][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1161'. [ 135.474210][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.772372][ T9139] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 135.932428][ T9139] usb 8-1: Using ep0 maxpacket: 8 [ 135.933025][ T9139] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.934169][ T9139] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.934187][ T9139] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.934223][ T9139] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 135.934246][ T9139] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 135.934279][ T9139] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.951177][ T9139] hub 8-1:1.0: bad descriptor, ignoring hub [ 135.951198][ T9139] hub 8-1:1.0: probe with driver hub failed with error -5 [ 135.951615][ T9139] cdc_wdm 8-1:1.0: skipping garbage [ 135.951629][ T9139] cdc_wdm 8-1:1.0: skipping garbage [ 135.956125][ T9139] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 135.956625][ T9139] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.522726][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.780707][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780727][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780739][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780751][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780763][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780774][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780786][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780797][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780809][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.780821][ T9139] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 136.812707][ T9139] hid-generic 0006:0004:0009.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 136.835015][ T43] audit: type=1400 audit(136.768:698): avc: denied { ioctl } for pid=9425 comm="syz.2.1175" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.029534][ T43] audit: type=1400 audit(136.958:699): avc: denied { ioctl } for pid=9430 comm="syz.4.1176" path="socket:[30550]" dev="sockfs" ino=30550 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.030372][ T9394] cdc_wdm 8-1:1.0: Error autopm - -16 [ 137.030587][ T2400] usb 8-1: USB disconnect, device number 15 [ 137.051135][ T9431] XFS (loop4): SB validate failed with error -5. [ 137.122888][ T9438] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 137.126285][ T9438] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1177'. [ 137.127665][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 137.153834][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.432984][ T9461] input: syz0 as /devices/virtual/input/input21 [ 137.444182][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1186'. [ 137.539737][ T9462] jffs2: notice: (9462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.563132][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.627279][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627376][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627427][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627574][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627629][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627681][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627732][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627781][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.627830][ T9471] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 137.692952][ T9469] FAULT_INJECTION: forcing a failure. [ 137.692952][ T9469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.692974][ T9469] CPU: 0 UID: 0 PID: 9469 Comm: syz.3.1189 Not tainted syzkaller #0 PREEMPT(full) [ 137.692987][ T9469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.692993][ T9469] Call Trace: [ 137.692998][ T9469] [ 137.693002][ T9469] dump_stack_lvl+0x100/0x190 [ 137.693037][ T9469] should_fail_ex.cold+0x5/0xa [ 137.693053][ T9469] _copy_from_user+0x2e/0xd0 [ 137.693070][ T9469] __sys_bpf+0x2f5/0x4a30 [ 137.693086][ T9469] ? __pfx___sys_bpf+0x10/0x10 [ 137.693096][ T9469] ? find_held_lock+0x2b/0x80 [ 137.693113][ T9469] ? futex_wake+0x4ea/0x5e0 [ 137.693140][ T9469] ? rcu_read_lock_any_held+0x6a/0x90 [ 137.693158][ T9469] ? find_held_lock+0x2b/0x80 [ 137.693174][ T9469] ? ksys_write+0x190/0x250 [ 137.693185][ T9469] ? ksys_write+0x190/0x250 [ 137.693203][ T9469] ? __x64_sys_futex+0x34f/0x4d0 [ 137.693217][ T9469] ? __x64_sys_futex+0x358/0x4d0 [ 137.693233][ T9469] ? fput+0x7c/0x100 [ 137.693246][ T9469] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.693260][ T9469] ? ksys_write+0x1ac/0x250 [ 137.693272][ T9469] ? __x64_sys_bpf+0xce/0x140 [ 137.693282][ T9469] __x64_sys_bpf+0xce/0x140 [ 137.693293][ T9469] ? do_syscall_64+0xae/0x790 [ 137.693312][ T9469] do_syscall_64+0x123/0x790 [ 137.693328][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.693339][ T9469] RIP: 0033:0x7fa08af9e159 [ 137.693349][ T9469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.693359][ T9469] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.693372][ T9469] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 137.693380][ T9469] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000005 [ 137.693387][ T9469] RBP: 00007fa08b03503b R08: 0000000000000000 R09: 0000000000000000 [ 137.693396][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.693402][ T9469] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 137.693416][ T9469] [ 137.803533][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.879211][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 137.879878][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1196'. [ 137.882016][ T9485] SET target dimension over the limit! [ 137.884187][ T5743] Bluetooth: hci3: hcon ffff88803348c000 sent 1 < count 9 [ 137.884225][ T5743] Bluetooth: hci3: hcon ffff888036e08000 sent 1 < count 5 [ 137.884236][ T5743] Bluetooth: hci3: hcon ffff888036e08000 sent 0 < count 5 [ 137.884246][ T5743] Bluetooth: hci3: hcon ffff888036e08000 sent 0 < count 8 [ 137.884257][ T5743] Bluetooth: hci3: hcon ffff888036e08000 sent 0 < count 15 [ 137.884270][ T5743] Bluetooth: hci3: hcon ffff88803348c000 sent 0 < count 7 [ 137.884280][ T5743] Bluetooth: hci3: hcon ffff88803348c000 sent 0 < count 2 [ 137.961885][ T9491] syzkaller0: entered promiscuous mode [ 137.961905][ T9491] syzkaller0: entered allmulticast mode [ 137.965261][ T9493] FAULT_INJECTION: forcing a failure. [ 137.965261][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 137.965282][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.3.1199 Not tainted syzkaller #0 PREEMPT(full) [ 137.965295][ T9493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.965301][ T9493] Call Trace: [ 137.965305][ T9493] [ 137.965309][ T9493] dump_stack_lvl+0x100/0x190 [ 137.965329][ T9493] should_fail_ex.cold+0x5/0xa [ 137.965365][ T9493] should_failslab+0xc2/0x120 [ 137.965380][ T9493] __kmalloc_cache_noprof+0x91/0x6d0 [ 137.965398][ T9493] ? input_allocate_device+0x44/0x350 [ 137.965423][ T9493] input_allocate_device+0x44/0x350 [ 137.965439][ T9493] hidp_connection_add+0x128f/0x1f80 [ 137.965458][ T9493] do_hidp_sock_ioctl.isra.0+0x365/0x520 [ 137.965473][ T9493] ? __pfx_do_hidp_sock_ioctl.isra.0+0x10/0x10 [ 137.965489][ T9493] ? avc_has_extended_perms+0x33a/0x1080 [ 137.965513][ T9493] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 137.965536][ T9493] ? tomoyo_path_number_perm+0x188/0x580 [ 137.965552][ T9493] sock_do_ioctl+0x118/0x280 [ 137.965569][ T9493] ? __pfx_sock_do_ioctl+0x10/0x10 [ 137.965584][ T9493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.965599][ T9493] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.965610][ T9493] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 137.965624][ T9493] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.965639][ T9493] sock_ioctl+0x599/0x6b0 [ 137.965649][ T9493] ? __pfx_sock_ioctl+0x10/0x10 [ 137.965666][ T9493] ? selinux_file_ioctl+0x13b/0x290 [ 137.965677][ T9493] ? selinux_file_ioctl+0xb6/0x290 [ 137.965690][ T9493] ? __pfx_sock_ioctl+0x10/0x10 [ 137.965700][ T9493] __x64_sys_ioctl+0x18e/0x210 [ 137.965712][ T9493] do_syscall_64+0x123/0x790 [ 137.965729][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.965740][ T9493] RIP: 0033:0x7fa08af9e159 [ 137.965749][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.965760][ T9493] RSP: 002b:00007fa08be6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.965771][ T9493] RAX: ffffffffffffffda RBX: 00007fa08b225fa0 RCX: 00007fa08af9e159 [ 137.965778][ T9493] RDX: 0000200000000180 RSI: 00000000400448c8 RDI: 0000000000000004 [ 137.965784][ T9493] RBP: 00007fa08be6b090 R08: 0000000000000000 R09: 0000000000000000 [ 137.965790][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.965796][ T9493] R13: 00007fa08b226038 R14: 00007fa08b225fa0 R15: 00007ffd509a0c18 [ 137.965810][ T9493] [ 138.472306][ T9139] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 138.602898][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.643583][ T9139] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.644522][ T9139] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.644540][ T9139] usb 8-1: config 0 has no interfaces? [ 138.645623][ T9139] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.645641][ T9139] usb 8-1: Manufacturer: syz [ 138.647906][ T9139] usb 8-1: config 0 descriptor?? [ 138.851251][ T9139] usb 8-1: USB disconnect, device number 16 [ 139.290212][ T9509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 139.363181][ T9515] input: syz0 as /devices/virtual/input/input23 [ 139.434846][ T9519] jffs2: notice: (9519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.437880][ T9519] FAULT_INJECTION: forcing a failure. [ 139.437880][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 139.437909][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(full) [ 139.437930][ T9519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.437940][ T9519] Call Trace: [ 139.437948][ T9519] [ 139.437955][ T9519] dump_stack_lvl+0x100/0x190 [ 139.437986][ T9519] should_fail_ex.cold+0x5/0xa [ 139.438013][ T9519] should_failslab+0xc2/0x120 [ 139.438037][ T9519] __kmalloc_noprof+0xfc/0x840 [ 139.438057][ T9519] ? tomoyo_encode2+0xfb/0x3c0 [ 139.438084][ T9519] tomoyo_encode2+0xfb/0x3c0 [ 139.438108][ T9519] tomoyo_encode+0x29/0x50 [ 139.438129][ T9519] tomoyo_realpath_from_path+0x18c/0x690 [ 139.438158][ T9519] tomoyo_path_number_perm+0x23c/0x580 [ 139.438175][ T9519] ? tomoyo_path_number_perm+0x22e/0x580 [ 139.438197][ T9519] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.438215][ T9519] ? rcu_read_unlock+0x17/0x60 [ 139.438249][ T9519] ? __lock_acquire+0x5c0/0x1f40 [ 139.438285][ T9519] ? current_check_access_path+0x262/0x420 [ 139.438329][ T9519] ? __pfx_current_check_access_path+0x10/0x10 [ 139.438358][ T9519] ? d_alloc_parallel+0x9f6/0x14c0 [ 139.438390][ T9519] tomoyo_path_mknod+0x164/0x190 [ 139.438412][ T9519] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 139.438438][ T9519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.438465][ T9519] security_path_mknod+0x161/0x300 [ 139.438493][ T9519] may_o_create+0x30/0x3a0 [ 139.438513][ T9519] lookup_open+0xe35/0x1990 [ 139.438542][ T9519] path_openat+0xa2c/0x2440 [ 139.438570][ T9519] ? __pfx_path_openat+0x10/0x10 [ 139.438601][ T9519] do_file_open+0x20e/0x430 [ 139.438627][ T9519] ? __pfx_do_file_open+0x10/0x10 [ 139.438667][ T9519] ? _raw_spin_unlock+0x28/0x50 [ 139.438689][ T9519] ? alloc_fd+0x471/0x7a0 [ 139.438719][ T9519] do_sys_openat2+0x10f/0x1e0 [ 139.438745][ T9519] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.438771][ T9519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.438796][ T9519] ? __fget_files+0x21f/0x3d0 [ 139.438823][ T9519] __x64_sys_openat+0x12d/0x210 [ 139.438848][ T9519] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.438872][ T9519] ? ksys_write+0x1ac/0x250 [ 139.438900][ T9519] do_syscall_64+0x123/0x790 [ 139.438927][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.438946][ T9519] RIP: 0033:0x7f76d0b9e159 [ 139.438962][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.438980][ T9519] RSP: 002b:00007f76d1ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.438999][ T9519] RAX: ffffffffffffffda RBX: 00007f76d0e26090 RCX: 00007f76d0b9e159 [ 139.439011][ T9519] RDX: 0000000000000042 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 139.439022][ T9519] RBP: 00007f76d1ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.439034][ T9519] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 139.439045][ T9519] R13: 00007f76d0e26128 R14: 00007f76d0e26090 R15: 00007fff10e3ecc8 [ 139.439071][ T9519] [ 139.440244][ T9519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.442637][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 139.442650][ T43] audit: type=1400 audit(139.368:703): avc: denied { write } for pid=9514 comm="syz.2.1208" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.442889][ T43] audit: type=1400 audit(139.378:704): avc: denied { add_name } for pid=9514 comm="syz.2.1208" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.446503][ T43] audit: type=1400 audit(139.378:705): avc: denied { read write open } for pid=9514 comm="syz.2.1208" path="/300/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.547971][ T9512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1207'. [ 139.608218][ T9527] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 139.632542][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.780613][ T9534] FAULT_INJECTION: forcing a failure. [ 139.780613][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 139.780635][ T9534] CPU: 2 UID: 0 PID: 9534 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT(full) [ 139.780649][ T9534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.780655][ T9534] Call Trace: [ 139.780659][ T9534] [ 139.780664][ T9534] dump_stack_lvl+0x100/0x190 [ 139.780685][ T9534] should_fail_ex.cold+0x5/0xa [ 139.780702][ T9534] should_failslab+0xc2/0x120 [ 139.780718][ T9534] kmem_cache_alloc_noprof+0x92/0x6a0 [ 139.780731][ T9534] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 139.780751][ T9534] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 139.780773][ T9534] mmu_topup_memory_caches+0x25/0x170 [ 139.780787][ T9534] kvm_mmu_load+0xe8/0x2580 [ 139.780801][ T9534] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 139.780819][ T9534] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 139.780839][ T9534] ? __pfx_kvm_mmu_load+0x10/0x10 [ 139.780852][ T9534] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 139.780865][ T9534] ? kvm_check_and_inject_events+0x896/0x1050 [ 139.780881][ T9534] vcpu_run+0x395d/0x5e80 [ 139.780894][ T9534] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 139.780917][ T9534] ? __pfx_vcpu_run+0x10/0x10 [ 139.780933][ T9534] ? lock_acquire+0x1d1/0x380 [ 139.780945][ T9534] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 139.780962][ T9534] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 139.780977][ T9534] ? __local_bh_enable_ip+0xa5/0x120 [ 139.780993][ T9534] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 139.781006][ T9534] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 139.781026][ T9534] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 139.781040][ T9534] ? lock_acquire+0x1d1/0x380 [ 139.781052][ T9534] ? do_raw_write_lock+0x11e/0x260 [ 139.781065][ T9534] ? find_held_lock+0x2b/0x80 [ 139.781080][ T9534] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 139.781095][ T9534] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 139.781113][ T9534] kvm_vcpu_ioctl+0x730/0x1700 [ 139.781129][ T9534] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.781145][ T9534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.781159][ T9534] ? do_vfs_ioctl+0x226/0x13e0 [ 139.781171][ T9534] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.781181][ T9534] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 139.781196][ T9534] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 139.781212][ T9534] ? __fget_files+0x34/0x3d0 [ 139.781231][ T9534] ? selinux_file_ioctl+0x13b/0x290 [ 139.781242][ T9534] ? selinux_file_ioctl+0xb6/0x290 [ 139.781255][ T9534] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.781271][ T9534] __x64_sys_ioctl+0x18e/0x210 [ 139.781284][ T9534] do_syscall_64+0x123/0x790 [ 139.781301][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.781313][ T9534] RIP: 0033:0x7f2f7c59e159 [ 139.781322][ T9534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.781333][ T9534] RSP: 002b:00007f2f7d536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.781344][ T9534] RAX: ffffffffffffffda RBX: 00007f2f7c825fa0 RCX: 00007f2f7c59e159 [ 139.781352][ T9534] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 139.781358][ T9534] RBP: 00007f2f7d536090 R08: 0000000000000000 R09: 0000000000000000 [ 139.781365][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.781373][ T9534] R13: 00007f2f7c826038 R14: 00007f2f7c825fa0 R15: 00007ffe9188b488 [ 139.781395][ T9534] [ 139.879738][ T9540] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:00: unknown uevent action string [ 139.879805][ T9540] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 140.202562][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.373511][ T9571] FAULT_INJECTION: forcing a failure. [ 140.373511][ T9571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.373534][ T9571] CPU: 2 UID: 0 PID: 9571 Comm: syz.4.1219 Not tainted syzkaller #0 PREEMPT(full) [ 140.373548][ T9571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.373555][ T9571] Call Trace: [ 140.373560][ T9571] [ 140.373565][ T9571] dump_stack_lvl+0x100/0x190 [ 140.373594][ T9571] should_fail_ex.cold+0x5/0xa [ 140.373611][ T9571] ? prepare_alloc_pages+0x16d/0x5b0 [ 140.373630][ T9571] should_fail_alloc_page+0xeb/0x140 [ 140.373647][ T9571] prepare_alloc_pages+0x1f0/0x5b0 [ 140.373664][ T9571] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 140.373677][ T9571] ? prepare_alloc_pages+0x151/0x5b0 [ 140.373691][ T9571] ? is_bpf_text_address+0x94/0x1a0 [ 140.373708][ T9571] ? rcu_is_watching+0x13/0xc0 [ 140.373726][ T9571] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 140.373740][ T9571] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.373755][ T9571] ? stack_trace_save+0x8e/0xc0 [ 140.373765][ T9571] ? __pfx_stack_trace_save+0x10/0x10 [ 140.373775][ T9571] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.373792][ T9571] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.373802][ T9571] ? is_bpf_text_address+0x94/0x1a0 [ 140.373825][ T9571] ? kasan_save_track+0x14/0x30 [ 140.373838][ T9571] ? __kasan_slab_alloc+0x89/0x90 [ 140.373851][ T9571] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 140.373864][ T9571] ? alloc_vmap_area+0x640/0x2bb0 [ 140.373877][ T9571] ? __get_vm_area_node+0x1ed/0x350 [ 140.373890][ T9571] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 140.373905][ T9571] ? __kvmalloc_node_noprof+0x3da/0x9b0 [ 140.373917][ T9571] ? xt_alloc_entry_offsets+0x42/0x60 [ 140.373933][ T9571] ? translate_table+0x229/0x1630 [ 140.373949][ T9571] ? do_ipt_set_ctl+0x689/0xcf0 [ 140.373964][ T9571] ? nf_setsockopt+0x8d/0xf0 [ 140.373979][ T9571] ? ip_setsockopt+0xcb/0xf0 [ 140.373995][ T9571] ? udp_setsockopt+0x64/0xb0 [ 140.374007][ T9571] ? do_sock_setsockopt+0xf3/0x1d0 [ 140.374021][ T9571] ? __sys_setsockopt+0x195/0x220 [ 140.374036][ T9571] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 140.374052][ T9571] ? policy_nodemask+0xed/0x4f0 [ 140.374068][ T9571] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 140.374088][ T9571] __kasan_populate_vmalloc+0xf0/0x210 [ 140.374103][ T9571] alloc_vmap_area+0x95d/0x2bb0 [ 140.374120][ T9571] ? kasan_save_track+0x14/0x30 [ 140.374132][ T9571] ? __kasan_kmalloc+0xaa/0xb0 [ 140.374234][ T9571] ? __pfx_alloc_vmap_area+0x10/0x10 [ 140.374249][ T9571] ? __get_vm_area_node+0x124/0x350 [ 140.374265][ T9571] __get_vm_area_node+0x1ed/0x350 [ 140.374283][ T9571] __vmalloc_node_range_noprof+0x268/0x1420 [ 140.374299][ T9571] ? xt_alloc_entry_offsets+0x42/0x60 [ 140.374314][ T9571] ? stack_depot_save_flags+0x27/0x9f0 [ 140.374328][ T9571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.374344][ T9571] ? xt_alloc_entry_offsets+0x42/0x60 [ 140.374359][ T9571] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.374373][ T9571] ? do_syscall_64+0x123/0x790 [ 140.374393][ T9571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.374409][ T9571] ? rcu_is_watching+0x13/0xc0 [ 140.374426][ T9571] __kvmalloc_node_noprof+0x3da/0x9b0 [ 140.374439][ T9571] ? xt_alloc_entry_offsets+0x42/0x60 [ 140.374456][ T9571] ? __lock_acquire+0x5c0/0x1f40 [ 140.374468][ T9571] ? xt_alloc_entry_offsets+0x42/0x60 [ 140.374485][ T9571] xt_alloc_entry_offsets+0x42/0x60 [ 140.374500][ T9571] translate_table+0x229/0x1630 [ 140.374517][ T9571] ? lock_acquire+0x1d1/0x380 [ 140.374528][ T9571] ? __might_fault+0xc5/0x140 [ 140.374544][ T9571] ? find_held_lock+0x2b/0x80 [ 140.374561][ T9571] ? __pfx_translate_table+0x10/0x10 [ 140.374580][ T9571] do_ipt_set_ctl+0x689/0xcf0 [ 140.374595][ T9571] ? nf_sockopt_find.isra.0+0x222/0x290 [ 140.374622][ T9571] ? nf_sockopt_find.isra.0+0x222/0x290 [ 140.374641][ T9571] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 140.374657][ T9571] ? __mutex_unlock_slowpath+0x35d/0x930 [ 140.374674][ T9571] ? sockopt_release_sock+0x5c/0x70 [ 140.374690][ T9571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.374712][ T9571] ? nf_sockopt_find.isra.0+0x222/0x290 [ 140.374729][ T9571] nf_setsockopt+0x8d/0xf0 [ 140.374746][ T9571] ip_setsockopt+0xcb/0xf0 [ 140.374763][ T9571] udp_setsockopt+0x64/0xb0 [ 140.374777][ T9571] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.374793][ T9571] do_sock_setsockopt+0xf3/0x1d0 [ 140.374810][ T9571] __sys_setsockopt+0x195/0x220 [ 140.374844][ T9571] __x64_sys_setsockopt+0xbd/0x160 [ 140.374858][ T9571] ? do_syscall_64+0xae/0x790 [ 140.374873][ T9571] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.374889][ T9571] do_syscall_64+0x123/0x790 [ 140.374906][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.374919][ T9571] RIP: 0033:0x7f2f7c59e159 [ 140.374934][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.374944][ T9571] RSP: 002b:00007f2f7d536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.374957][ T9571] RAX: ffffffffffffffda RBX: 00007f2f7c825fa0 RCX: 00007f2f7c59e159 [ 140.374966][ T9571] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.374973][ T9571] RBP: 00007f2f7c63503b R08: 00000000000003d0 R09: 0000000000000000 [ 140.374980][ T9571] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 140.374987][ T9571] R13: 00007f2f7c826038 R14: 00007f2f7c825fa0 R15: 00007ffe9188b488 [ 140.375003][ T9571] [ 140.476223][ T43] audit: type=1400 audit(140.408:706): avc: denied { name_bind } for pid=9577 comm="syz.1.1230" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 140.656129][ T9590] CIFS: VFS: UNC: missing share name [ 140.656304][ T9590] CIFS: VFS: Malformed UNC in devname [ 140.656479][ T9591] CIFS: VFS: UNC: missing share name [ 140.656496][ T9591] CIFS: VFS: Malformed UNC in devname [ 140.674420][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.937496][ T9620] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 140.940712][ T43] audit: type=1400 audit(140.868:707): avc: denied { lock } for pid=9619 comm="syz.2.1252" path="socket:[36022]" dev="sockfs" ino=36022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 141.472793][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 141.622444][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 141.624904][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 141.624947][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 141.626028][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 141.626048][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 141.626065][ T10] usb 8-1: config 14 has no interface number 0 [ 141.626080][ T10] usb 8-1: config 14 has no interface number 1 [ 141.626167][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 141.626187][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 141.626209][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 141.626231][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 141.626254][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 141.626274][ T10] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.626297][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 141.626313][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 141.628427][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.628447][ T10] usb 8-1: Product: syz [ 141.628458][ T10] usb 8-1: Manufacturer: syz [ 141.628472][ T10] usb 8-1: SerialNumber: syz [ 141.724836][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.792114][ T43] audit: type=1400 audit(141.718:708): avc: denied { execute } for pid=9647 comm="syz.4.1256" path="/dev/audio1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 141.813549][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 141.877094][ T43] audit: type=1400 audit(141.808:709): avc: denied { create } for pid=9662 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 141.877226][ T43] audit: type=1400 audit(141.808:710): avc: denied { write } for pid=9662 comm="syz.1.1258" path="socket:[33224]" dev="sockfs" ino=33224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 141.877250][ T9663] scsi_nl_rcv_msg: discarding partial skb [ 141.901952][ T43] audit: type=1400 audit(141.828:711): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 142.003403][ T9669] [ 142.004197][ T9669] ====================================================== [ 142.006296][ T9669] WARNING: possible circular locking dependency detected [ 142.008398][ T9669] syzkaller #0 Not tainted [ 142.010047][ T9669] ------------------------------------------------------ [ 142.012182][ T9669] syz.2.1260/9669 is trying to acquire lock: [ 142.014035][ T9669] ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 142.016889][ T9669] [ 142.016889][ T9669] but task is already holding lock: [ 142.019001][ T9669] ffff8880354c0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 142.021748][ T9669] [ 142.021748][ T9669] which lock already depends on the new lock. [ 142.021748][ T9669] [ 142.024692][ T9669] [ 142.024692][ T9669] the existing dependency chain (in reverse order) is: [ 142.027272][ T9669] [ 142.027272][ T9669] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 142.029653][ T9669] lock_acquire+0x1d1/0x380 [ 142.031126][ T9669] __mutex_lock+0x1a4/0x1bd0 [ 142.032716][ T9669] md_start_sync+0xc4/0xea0 [ 142.034227][ T9669] process_one_work+0xac7/0x1b10 [ 142.035844][ T9669] worker_thread+0x5ef/0xe50 [ 142.037342][ T9669] kthread+0x373/0x450 [ 142.038693][ T9669] ret_from_fork+0x730/0xd60 [ 142.040206][ T9669] ret_from_fork_asm+0x1a/0x30 [ 142.041782][ T9669] [ 142.041782][ T9669] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 142.044554][ T9669] lock_acquire+0x1d1/0x380 [ 142.046063][ T9669] process_one_work+0xa32/0x1b10 [ 142.047679][ T9669] worker_thread+0x5ef/0xe50 [ 142.048728][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 142.051160][ T9669] kthread+0x373/0x450 [ 142.052555][ T9669] ret_from_fork+0x730/0xd60 [ 142.054087][ T9669] ret_from_fork_asm+0x1a/0x30 [ 142.055659][ T9669] [ 142.055659][ T9669] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 142.058043][ T9669] lock_acquire+0x1d1/0x380 [ 142.059522][ T9669] touch_wq_lockdep_map+0xad/0x1c0 [ 142.061168][ T9669] __flush_workqueue+0x131/0x1200 [ 142.062851][ T9669] md_alloc+0x30/0x10a0 [ 142.064272][ T9669] md_probe+0x73/0xf0 [ 142.065657][ T9669] blk_probe_dev+0x149/0x1e0 [ 142.067193][ T9669] blk_request_module+0x16/0xc0 [ 142.068789][ T9669] blkdev_get_no_open+0x9b/0xf0 [ 142.070364][ T9669] bdev_file_open_by_dev+0x70/0x210 [ 142.072044][ T9669] swsusp_check+0x72/0x470 [ 142.073578][ T9669] software_resume+0x6f/0x330 [ 142.075172][ T9669] resume_store+0x248/0x460 [ 142.076683][ T9669] kobj_attr_store+0x58/0x80 [ 142.078177][ T9669] sysfs_kf_write+0xf2/0x150 [ 142.079697][ T9669] kernfs_fop_write_iter+0x3e0/0x5f0 [ 142.081438][ T9669] vfs_write+0x6af/0x1050 [ 142.082950][ T9669] ksys_write+0x12a/0x250 [ 142.084423][ T9669] do_syscall_64+0x123/0x790 [ 142.085976][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.087900][ T9669] [ 142.087900][ T9669] -> #0 (major_names_lock){+.+.}-{4:4}: [ 142.090196][ T9669] check_prev_add+0xeb/0xe60 [ 142.091748][ T9669] __lock_acquire+0x1528/0x1f40 [ 142.093343][ T9669] lock_acquire+0x1d1/0x380 [ 142.094878][ T9669] __mutex_lock+0x1a4/0x1bd0 [ 142.096452][ T9669] blk_probe_dev+0x28/0x1e0 [ 142.097946][ T9669] blk_request_module+0x16/0xc0 [ 142.099527][ T9669] blkdev_get_no_open+0x9b/0xf0 [ 142.101126][ T9669] bdev_file_open_by_dev+0x70/0x210 [ 142.102822][ T9669] md_import_device+0x120/0x360 [ 142.104437][ T9669] md_add_new_disk+0xcc0/0x1820 [ 142.106065][ T9669] md_ioctl+0x2bec/0x36d0 [ 142.107524][ T9669] blkdev_ioctl+0x5ad/0x6f0 [ 142.109021][ T9669] __x64_sys_ioctl+0x18e/0x210 [ 142.110615][ T9669] do_syscall_64+0x123/0x790 [ 142.112170][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.114063][ T9669] [ 142.114063][ T9669] other info that might help us debug this: [ 142.114063][ T9669] [ 142.117047][ T9669] Chain exists of: [ 142.117047][ T9669] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 142.117047][ T9669] [ 142.121462][ T9669] Possible unsafe locking scenario: [ 142.121462][ T9669] [ 142.123635][ T9669] CPU0 CPU1 [ 142.125204][ T9669] ---- ---- [ 142.126751][ T9669] lock(&mddev->reconfig_mutex); [ 142.128274][ T9669] lock((work_completion)(&mddev->sync_work)); [ 142.130794][ T9669] lock(&mddev->reconfig_mutex); [ 142.133102][ T9669] lock(major_names_lock); [ 142.134457][ T9669] [ 142.134457][ T9669] *** DEADLOCK *** [ 142.134457][ T9669] [ 142.136855][ T9669] locks held by syz.2.1260/9669: 1, last CPU#1: [ 142.138741][ T9669] #0: ffff8880354c0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 142.141653][ T9669] [ 142.141653][ T9669] stack backtrace: [ 142.143418][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.2.1260 Not tainted syzkaller #0 PREEMPT(full) [ 142.146105][ T9669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.149135][ T9669] Call Trace: [ 142.150160][ T9669] [ 142.151063][ T9669] dump_stack_lvl+0x100/0x190 [ 142.152553][ T9669] print_circular_bug.cold+0x178/0x1be [ 142.154200][ T9669] check_noncircular+0x146/0x160 [ 142.155721][ T9669] ? __pfx_get_page_from_freelist+0x10/0x10 [ 142.157498][ T9669] check_prev_add+0xeb/0xe60 [ 142.158922][ T9669] __lock_acquire+0x1528/0x1f40 [ 142.160426][ T9669] lock_acquire+0x1d1/0x380 [ 142.161818][ T9669] ? blk_probe_dev+0x28/0x1e0 [ 142.163274][ T9669] ? __pfx___might_resched+0x10/0x10 [ 142.164878][ T9669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.166726][ T9669] __mutex_lock+0x1a4/0x1bd0 [ 142.168163][ T9669] ? blk_probe_dev+0x28/0x1e0 [ 142.169581][ T9669] ? blk_probe_dev+0x28/0x1e0 [ 142.171001][ T9669] ? lock_acquire+0x1d1/0x380 [ 142.172444][ T9669] ? find_inode_fast+0xa5/0xa30 [ 142.173946][ T9669] ? find_held_lock+0x2b/0x80 [ 142.175399][ T9669] ? __pfx___mutex_lock+0x10/0x10 [ 142.177266][ T9669] ? find_inode_fast+0x1fa/0xa30 [ 142.179201][ T9669] ? ilookup+0x189/0x210 [ 142.180896][ T9669] ? blk_probe_dev+0x28/0x1e0 [ 142.182699][ T9669] blk_probe_dev+0x28/0x1e0 [ 142.184409][ T9669] blk_request_module+0x16/0xc0 [ 142.186319][ T9669] blkdev_get_no_open+0x9b/0xf0 [ 142.188183][ T9669] bdev_file_open_by_dev+0x70/0x210 [ 142.189824][ T9669] md_import_device+0x120/0x360 [ 142.191255][ T9669] md_add_new_disk+0xcc0/0x1820 [ 142.192746][ T9669] md_ioctl+0x2bec/0x36d0 [ 142.194039][ T9669] ? __pfx_md_ioctl+0x10/0x10 [ 142.195491][ T9669] ? do_vfs_ioctl+0x226/0x13e0 [ 142.196946][ T9669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.198940][ T9669] ? __fget_files+0x34/0x3d0 [ 142.200328][ T9669] ? __pfx_md_ioctl+0x10/0x10 [ 142.201731][ T9669] blkdev_ioctl+0x5ad/0x6f0 [ 142.203111][ T9669] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.204609][ T9669] ? selinux_file_ioctl+0x13b/0x290 [ 142.206191][ T9669] ? selinux_file_ioctl+0xb6/0x290 [ 142.208189][ T9669] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.210151][ T9669] __x64_sys_ioctl+0x18e/0x210 [ 142.212063][ T9669] do_syscall_64+0x123/0x790 [ 142.213934][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.216257][ T9669] RIP: 0033:0x7f76d0b9e159 [ 142.218003][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.224994][ T9669] RSP: 002b:00007f76d1ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.227631][ T9669] RAX: ffffffffffffffda RBX: 00007f76d0e25fa0 RCX: 00007f76d0b9e159 [ 142.230646][ T9669] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000003 [ 142.233799][ T9669] RBP: 00007f76d0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 142.236865][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.239988][ T9669] R13: 00007f76d0e26038 R14: 00007f76d0e25fa0 R15: 00007fff10e3ecc8 [ 142.243066][ T9669] [ 142.273677][ T9669] md: could not open device unknown-block(0,0). [ 142.273716][ T9669] md: md_import_device returned -6 [ 142.451009][ T9633] kAFS: unable to lookup cell 'syz1' [ 142.451616][ T10] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 142.452390][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 142.752719][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.832757][ T7314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.912588][ T7314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.265512][ T2400] usb 8-1: USB disconnect, device number 17 [ 143.268641][ T2400] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 143.793499][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.832576][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.872615][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.952914][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.912591][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.952548][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.672744][ T7315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.672771][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.992603][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.032629][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.072389][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.722508][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog