last executing test programs: 3.330631985s ago: executing program 1 (id=405): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x42080, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/56, 0x38) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a) r3 = dup(r0) r4 = socket$igmp6(0xa, 0x3, 0x2) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x7, 0x10, 0x0, 0x6}, {0xa6b2, 0x2, 0x7, 0x1}, {0xd9f, 0x3, 0x1, 0x5}, {0x7, 0xa2, 0x10, 0x3}, {0x2, 0x2b, 0x7f, 0x7f}, {0xe, 0x3, 0xe, 0xff}, {0x1, 0x7, 0x40, 0x3}, {0x7, 0x2, 0x6, 0x2}, {0x7, 0x7, 0x0, 0x7}, {0x9, 0x5, 0x81, 0xbb08}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000029c0)=[{&(0x7f00000004c0)="e186be73fa802745632550db7b4ff8772840f82a921021ac275d7b18b062b77f3290c6b4cf550946d5be068ed215943e2d489cd4f1df355a5b4d99792de2d33c4881b676318c1a0acdf0581967befb7de47c6fc7a5f94f49077980e83e64a4a1959847587801cfc3d2210b02e1c781c95b59fc4a89ec42ffbbeadd6f7e6a33f428290ca38b5386eaf5ab1cccf3228b42874f027ffd68ef97", 0x98}, {&(0x7f0000000580)="4aab299062ddc06db2c6a0fe2e02f8921c2a0dd4337a06e101f584395b37a23e140a16eb4c06ff427e669af4b5a0d1266c87140b1938d555de058b66da717f744ef9d6342ce46b4abf7cd7f8a6f94fbe237a2e5a21e14d479488333e40277af9d6cb8464dcd244657dd8c6020e8c27e918212973f7c5d108b5062e8a626862def58336", 0x83}, {&(0x7f0000000640)="bb6f1eb70f5006c527500fef0040075c2277e675facf89475124f246c4322f89b04cd885d48e7a5c1effa0d4f6cc7bc1be82c613da382c26585278d495f9d91cafdd63272706296c910136f4deb50fb895894d0d33f5d5d0821550839fc1446e421a953e34a0c20953b6a9876b4a3564a915a0a1fae91c19758f35703c3c15959f394ace49e719a1f60689bdeefb09564d6f89b81b7c4c3912252f9ef3ed5009f63f63f7f1eaa802771ad376ba4c00aa335dc987e8eec8698da6d5dbb9bd244e5c23334bcee2b1e20cf4ae06c88254b86d92dc2bfc6bae994694f968e674305eda750d", 0xe3}, {&(0x7f0000000740)="46149773de8ffc9d79b1cdebb29a890cc1aec00854362d9254b8177cf310340ec747a2933c34a32937f53b5a09e027d4380a574416d96e04d6d452352717e6f59f014651a31ea7502e3534f80a99df20c40b069bfadc7a8fad027f327c463b209c517733cec8cc0c211a15da707349d32e87e8aab298ac5de7a07e4a58a31679cb94d710e76517ddef8c0b160b74748ffc10a3cce38b5ba892b71b20472cbb04b60d718ef6f46cba21920466de441e92ef9321df45ed619091a19ea5e88a88df4f6e451506f61fbd49aa0540c8503af1a692dfe7983daaae7429b6d6e91c0ed2e47485599af866fb457351db209b3b6535646557a0d8962b6014251f587c2a2b6ea62c63be073c1aef373fdb6b929719a8e952ab7df57a49a478f44c524d8e3fac92d42c90694246ca290ef5827e770f8047bcf18d1269cf0da33ffad6e0d8cece88c87abe44348fe5241be6be5a55261d19fb1d1c28828423739bb2d0d19ceeacebf41fbc235071557f0b3438abd09d88fe306cb605246cf0dd89349180c34f9955d8f799b2d8b3ba091764c05372a0c11db8ca57ac9846669fd9e49ce002efeb1a1043a1da58d6695039e1332165e82a0f60ea638ced45d7d16f688e064b48ff809457d323a27148262becb21b805db0d1839599a5b8642c8bc49a7ffdf1fdfaf949896f0388df131e3f5677e3062aec5904bacad7347b90e5ac9baa698255072b6aee148ed4a082ad84aed874f9766481cb5b01b2f58d23e676a3d35c7c3f1b2003252237417bf3d7d6bdd33a3b57a83939a9084a276695264c4141506028f18d3c6af75695bd887b361c26d34b8667151cc2e2a5b964edc09928447ccb9b3ab48cdaad19c5fb36f15e4e4c59de5d9c6df44955eab6a42a6cfcfe456dba98e52a926ca15a2e5c612b379214b954fb5af099eed008b6af870c3e3f7ba64912a1086e5ce8fffdc67c9b97e47d7c00c7fbf1b60a201b6905d9e983b6276f42023aa2422eb330990f60ecabe0dbd7d979cfe72a46f07f818911c671838fc9954cf187e26bfbb083a7f137a2d00ef48ced0d9dc62d14caac1a962e3f878333e7bc375ee8faaf3791560d954b8ae0c8fc72e8280bb0dc761e654120536c39605448e4a997d252216f3e3728263ff30e4d23d2fb079c63cce6b6a5aaaebfdae10d1fcb2e93d4a16e456dd9e6026ddd7cb6968d56e4dc438d81f5d1ad9a8e9850feba2d9478daca1fbfa89b2d9b05badb9673858c6009d027626a742a3db19bda998af0719985b3983180cd38627e7cbc7c3bdfa21c1f7f0a293c00a1260e73ec872383236b583204979bd3a3f2fc99d0cd662b9d258b846a832139184d68b61a6aadb2ef10732d708dbe84e41dbb62f80cca006b0ff933d79c89ecea203d609e2773cfa7dec4f8c8333b92292b31d702695669aa513a1793f7e947ca1b3eb011e477081de168076ca1156bd01073a9e81c12cc98484c879d7d68287dfdda902b10fbf27d80ded37ee7668c6d0d0588babe041a683f30770a859bcafcc3a63ce50b481d1b84779febacf9d5e40126a3e00cf979d0e95eabd6ead6528682acd760d1bdc2f845f86a172d03a2565c720392c7633bf9ef798cc0ade38e12d06f61371bb19489b2824111a256414ae811ebd73141c42a1ba1cfdbffc6a71a79a3cedde56dc81c0d137614c7b1b736bd4ce2be73ef389fe54efdeb68855b6dcc3679646c081ab777d2a54a66b912986699c19477071aa639665ee314b72b81e263291c90f2f593d8b0536234fdb5247d34f6b59982646896afccae78ba47d168a6d820140b5ed8063a3915597484deaf99bab1d8df69be27018370727bfeee8637e2ebea57b40ec6fb7c20acdd55d35ed9b26aa4e0e31dc3705e5408f82dfdf19ccf1d06b08cfdd33ae0fab276d36cccd29ac9d218e5e34999424c064327146c845a8a9d445762cb98953c2df76c9e106275d4d2bae6cda8216e897c6f24f5c296d257daab0cd2cb419bfcfee40cb551c47eaf5aedad9c25154f27c84801f00ac2f3f9f6fd7058febd101448d8ada9885620857473c4adf850a1f709995f52c4559de078a183b07ab06ebc9404b2f77287120fd8f2947ac147fa08b4dbe4504901745b1f6879b42becfe8f64e2f08dff5f20a557709411b357bb7d9f349fdb32f0217ed81da5cfc0c8b3644a4c5e3ace0177a5863fa884648ba5bc36938cd24665b4255e8bce7a325572112ff75f1caae930efb6ebc2c408fad318aa99c77511bf77dade7388c2e2bc3991909b21582ec89f3874705ade37ebcdd8e4f941efab7de37e40da36c74c5006e46171133788156d769d69dca0ae523512a555756a78a18e86d0c53767ab7ca055ef08dc31fb4b50915bf5144b02424c2198c8e1cf5c8ea989f778093113c500fc209d2c0216ada3fff270cd59b7a993faea9b5e305660b6f243366b0aa66367cffbacf0bcc4c8e76443b49a722a06701b9f23168367d4bf2dc06c7b47fd02599d5ef625cc6135d8a69de3929456fac7fd550bfd6a31ce3d0613208ca225296c832f576b5c2815ae956d11bd8b1ebeb41ceaa6b92a714766e4ada1f7205709d60b76482cf26b08f92b2c793107e0903987c95a78427fd305c1e1ab7f9a745c5d08165fbe44aa0775115c42dc1e71ae6bb24cd86c89ff06e8b444d34961187000274c69d8f089662ebc5daa995ec9d0c1785f60609a6f6a0058cd5278a29c2a72e2f0fa29d4432a0c3266b3e2fbd80ad1a84d1c05cdceca695741e8f2e785e33dfe986b35ada1f7577ba2dd5b52ca5511063f48b29987703840444ad298f14de6c0f256396f93cb3489ad2a03142b14ece33f1fa2b352971fc210508766b4c6036f00abd96847e5831a1b6d08a15c4d2a21e55fe6308e552ecfa40d3c9051670e10d603b585c15253b179d8cd85f2c621761d8fa92fb2c5f52736f1c1373b8c7a49219c9e2cb184563fd6421cb86752118be65b9975f4e0631893a52d5df4df1f9e6ab9e877a1a0795d3176bd32f230dafc3db53af135cc864e2e01129de72512b5feaa133b8a77ac6ff4ed58adedbd2d37bbd93b1f553d8b8d472c24cbb43be1f070be7c0b839f5ab6448f16819d70431d7cb8703a93ba04eba6ee75c4b7129b61436f7534966d03ddc89cc72ad253bc21f8d95be02b85759856d8a4a8a3d039737852803baef5e7d5a920ea80eb26608b1568c0b1112151044ee491af91cb6adcec1b509efea3297bb8249b8aa900e79b38e17b35f6f06f7a92259f1c665d494bbf1262fdde3254213f7166f339e561f9ab35330be5774497e7e5e273e859951c220d4b6ef8992a39dcd163ec3eaca71a6d381f060070b217ab528919bbc1ef70810c27faabcc8601fc263a8458bcdd75a967231946dfa68c7ebe18e35b5eb30954a8126206e461f35fec8c315b9c42fc5cb8d58582f15b5910eb0dafb6c3c9a480e7cca7274f69b8067934055bedc3ab4be900fcde89603c62c32a8bddfa785a7c3afd1b4208cc602d820de77322c4e73ab0f8743b7f2147b111fddf9bd37b098ad1cae4465942d342ef366d78644998d3d8ecefa5ae4db42722c387ab5e0950863e3c04db1e54b8b830df6ab96273b8f8f2e91e6967fa6a63ab0c216ee6fe7f076d8f1c2c4d6c1157ee786a727864889372abea6e1672996b120a57411fa55350e4a5c6d71a00f2c1ebfa0d88d53dd53bc5c09d06175c3b89633817b2421ba8c546a067eb848bce85b4f3e666e5e3d5d0683db64fd99c2a0e39b68beb67ccb3785fede46b999020654c430aa97cd4d199fed8c428fc0c98e42124c8bdd6e66399fae48609d830319c2ca37501c84eb0ff195dc0878b68fd5e34d728e47a8b2d643361a29d58e792b220f51dbbb7f7b510b62b32e7c856fb62401ff40d86d8c2924deb83ebe7ee163409bfea9dc90a36e2c6f02022d2e78a0066baeaa95955ba5750e4708f006592443da360f7ef7b8508f679cfbfe009faa62ef5977c55c4b7276e27808c6c45c3062ad5de752a08f759624ebaa2a2e5c2e9fb961b3bacebddda14ad59df55eb1cb95692f67ea1abbbbb1196b6e8291f4fd6529a8bd9f3b12af18c63be402f92155f25ede1189add5389417c96575afe1df324d15943b030a3e833661be8a4fbdb9c742def704d6078e9ac6bd35cb030780547c02c643f98f7dee46dd05e5335e86a480e637465f0539cb901e5f7bbefdc8426465e36f139d0bd2713088d0e8d642398b92fe5c1f03594884da78243e56550cb03517b6fc14b5d2219321649bcb5e7ef717b914f83357a67d26d744741ff0142b976ae666d8a1eae6d186f8b8aee03346c16d86c04a1a3584dc3f9f03cc7556fc8815b7049f7bf0511bbd88b41367cb41569b9403cff6720e262ffaeb4f6d5040a70b2f03393c824469414e47627b220690e808545bfb6c70453082d09123e7cdd3e5488f131faf81572d43ce1d780b6bc54ee4dabaa1cdaabcc263b9af6c06b475bc8161ae4c1185da8e4c46c560b6b8e43d1a838c415931dd4315a3d66eda7cc6e0f16a0b05c8e7343ed5da2f26300544801a214d4bc9f8273e7ba8ebf4ca360c0a5900db69a3c20ec6982897591770cad4419c70939fadd63e229399b9ed924a496b1756895816db94113644ab194d6accd50405b4935e6422e22e2a0d70cb72f5177b31d305feedc46a579dd2ca5b7bb3efc176da37b6ff5a4d788e823da5d5090649969d504faea1be083efe74b8c8439522659aeeb38f9832e86a4779ca822f09202cf4c52a3ce49edc4e90094eea739bc271659b8446966fb6e778e6d0b1268d63f9c0f9a3793546dbf4e50e2ddd52dcf0dfa2874c7d452dd368805764e38a9b204d318435a38396bffa021954abc86d10e74460fd3004bc9865552a187caf0bd8513d9c3edfc291d77f7bd809d4b0fbad25cc2f3455b6c0cac7944fe8b2e3bb3cc0561205ec3a37acfede43a85785b82e497f716d37847689f7d9962d0505d75bcaf3c9f16c508dd05d610cbc995f1f72a5e150054c96a728b6a9171c13aec66481f3fb6054495630b4ce9e56f2c9441cb4fd73144e6973681fd037203edad78cdd494b783fc04313cab81dc0a4212819a2df223ab7c2e0046d3baea9d08f3fa9d837bc81d4e4240e46d93e9183a7273c77d361fc018158bedc52bb90b9d0ea74645c5c7d0b4f4f1ea72acfa83e37e6d78e2f45d5d3184903515bd1863384577c7cd00392f9f5f9414b33c1bdf0879e6b16cf3fba65ae6ee62d4a42c06fcadba64d6988da4e7e4c1f13976bbaf084f357c3bdbdd17f62a3330b6749abff1d301eccd54d76519974ee32c300152797be75de8e00ded84ff3d7190592b964d8f7667a5b055beb73cb3beabe928a6a2f8953ad2435a7447204644f27edd39d9ac92a787ed884342270c64ef6ae6bac3dd013b05bec12aedff232257f04aa614bca2f7658cf81dae6821ab137410204807748106cf711a66253ecdda85a581a0f487e92faf5fdcec8f934bf86890976b583356e7b9620a4b7124e0bc794a1869b12591f7dc24fb06be8e68196be3744a992514eac034bd758b7cda0d4d094b144717d64de7ef487812077f1d61499d9c8a6bd075b93833b3cee5388b4fe53dcf9a7cb5febf97caef47abd7626993d340b8d4d0be8eddf60ae3533880a681cd17df8ed18cd512716b64ea818098516fecc1e1fb14411cacb7f7cdd7e9a27e3afb2c7fbb762c3b4527f0fede9226a4e81c1f9deaadb483550980c309104c71f296607da9139631569d65973d01731b2849937eef6a7a32e3b04ed486a8eef5", 0x1000}, {&(0x7f0000001740)="a9069d261d85ce67cf11079175c20197a139ef7b5f706517089f457545607dbdc424bea6e53723442b14dda54e3a73971ee6fe2f0329465e1bfddc6929cb84d2a152959dbfa7a0af7c71caa1e976adab7c756828210a933d3f8b6c8c6ed121c267f9a8a14431c1a6c8285be9574c5d95e145c870926c", 0x76}, {&(0x7f00000017c0)="db3a07fe51909728ef4c3ed68775f3b353cb74671fb04362f9eb1e7fb0e07a3571031b7430e2e8ff1a96855f91eafccec5e47b2a644c855771c6e93244f5fc99003f99fb89b56488aefb4e70bc0b4c0b8014048286b3e1de", 0x58}, {&(0x7f0000001840)="d2952c1552d383be2da096d68373833b586b3acb72fc7fccfb7941cbdcb884f0ae2781d1954eb19c320dfc4a804c4441df4c7aff3201b6aa406f90ded492e7aa13a2840bd85f6b3327c35277fe46e9443a16ad19d5b3886d1ce75813f79667181a2d5869881d92badf27e6053fa5d3867346", 0x72}, {&(0x7f00000018c0)="0b67c324eca8850da61157c8aca6c4d1d4611447fd334fa3e1016046d073b5e853007dacb7d895436dc91abcab57ff73a2ad016af841e57f10f4284d7ffc0ac45044ca9f6aaac3ed0fa8af4822f99ad46fcd158dd1d1d5d45ad6101a866e6fe34fdce790beca08fdeadbcb42d41d67d6db12eec63eac645ba558b631ab56fd7cb661883697142034fe673481248bf18497d0fa4252203096dcab463cc2ddd7edb53c16926d596ba741026031634f8d04f2a300991358d09d688e97611a8c6b5315e603", 0xc3}, {&(0x7f00000019c0)="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", 0x1000}], 0x9, &(0x7f0000002a80)=[{0x40, 0x10a, 0xfff, "6187c45feaf4838005a5a72065d7f120ad069526a6d5842351dff6e513f24d4802d1a07e9bb085e1fe1671bc7e65"}, {0x70, 0x0, 0xffffffff, "8199d207d5d0f0a1848368f3189cd1fe7059168870faa4aa7a22e442d4ea77b01f0a430bfabc4a6028ae1d81804b526f1179c5b77f70430be193d88a6a18aa8298469d758eafc7740980aa7606f8812bb76ac2889ee51c232868ab6f"}, {0x40, 0x103, 0xffff, "534b9ab37b2834ce28661d632000cbac2a602b9be4f54d6a87515215cce6d9b7eeef945a93e9abaf4e34af83dfa0"}, {0x1010, 0x107, 0x7fff, "a2acb75b652c495aa5e4bd3b4bcc73e029adb24c8d00c9b7c3ac1c17fb1c6f5b0d504899a3a5a0155517e991193dbd8c2b8284898cd42931c7ea9d4c5692d9cf4e1f7e15cf3323a1db53f7913082ca753b6561eaf093f890af832cb9b98358c9012698bf7124d33fc90dbb2dd5676707ed2c1c0017fa150ee98bfeabb39a24c6c75d8e8d3ac5b6eafb7920286d1fbc6a6a76cc7ed39c5dff1cf1c443f9195d7725520b9c3c1e9e14b351ddf372a7c7543829130a6e6c56c10678e6750f8cd651288a4ffed2da78740e1afb080d1b0e611d5b458ce192e5d4e1851ba9756a35fa7caba1f816bf1b0235ab9f3e33f5cc804eadaab123b1a0450bfadc34ea0b8cfadadca9797b2237785c7539140b09eb7b0084a59d887da1b9814d2b9b9bcde8a4b2ac78480943b8bc0168a1eb7191b0cfc45c4a1262e38290b697d6718257d7be0ca5a74953702d06cd074a27a562239a086973294738494d5896f3dcaf21447446bba445fd467148f5f60ffa49bcea4d9f7f30c0420fce1e6e325161bde64efdadbe5b7d88db5900036d0c03515bbb8a9db97e3b93cfec5cbf809c72076305cf5cb7bfce50741bf8afa1d3c3596ad5dbdcb381da1cbec6d395dee35a4ff440995c0efa03acf3efbeb41e15b7737fe5ecd99985f4a84dfd5cb6e30572b82d25516c18178fec0a40035562d06e1887e3fbb1fc1ce504f853f48ca0c34ac1cc3b69f6dd5c72262c324bbb11f25e5fa1754e8378c1c69da38ae2e7c1fc26dab9d537e9633af3cbdcc93b6dfc756069c3330508d2ac43f433a3e458e55eee55f9e203e5904323ca50d316eb49818221d18c8742eb45bcedb8a361435b5a26a66871c647bfc5d8559093ee3115d23ea923016e21f8083145c6fe34f4110d0b16b818f89de818d466e324233657c46b9f7b72797f3247e752b20d21eaa0b963952b2a0aa91bcf4d6eb671c8b0b712ccf4d2d94035bda2af624805cb7bdc5b8d46b234d6027573f2feeffd8fe0510cb8c2b7fb2dc6780e11fdc101d94ab2cac9529845ac4a6826bfb95e38f9d5d60b739274988fc83896eb2c4a095df51aa6ca8775fe094dbd985904a20d06466a9435f18820749309e7cbde7ced38c3a28701ea36f39ed9d27794a1151899fde2c90a41e81af2922eef1c85b1b0abc089a5ebca9ebdb0b1a9cbc3030f35d990f72492e4217930b08f4166d56a95de11c77e6b8daecb6763ec65c0de243000d77c6f653092e4714aec5c4e56f64a143c5db06d0b91c8b41a9a411174fd82ff9d95fc7f9cc788dc55e8fb7ab7e874dbbb0cc946c2763a7f1e267b9b5780b8da2834c75fc5b9c632741d451685b804c95ea394c1ee38471ffcd9029ff6d390fac18bd6a44a3100d4553236b602cd0e6bc132b2c99f10b4a8ec21f697ed57c1044657b51c240e22e366c8a3b98fa6bbf879724913d79744f4478707e65f4742b9ffc8dd00345d51dbbdce97b517ca76a2e529c5e42a31227c828d0d93bece3ba257d959fa81cf23cc385ec61fe29e72ce7c03558138673a860ba9bedb26c6b4060e91f7be73ae9a6eacce8fd0bb5704c2795342e65e1f8a6f0e0d01689307b551f00325dd0d03fc4ee024b20264680717c1d3a24a1e05c9ced484e0282a2032b710b2be1a313f97d086c6dd354418e2dae5fb8451787eca6d6c980bc5cb8aff5f253c8fea174ffd7c6a64e26953fbe2fb36825b6dc736800df239f69ba719a636df31e13de5f0a66918040a4865f407840bcf96ed5d62299dbc6e069c9a27f144c3859d5145128933da34094949fb78aba500ba4b474f18ccff36151270016e6baf8b3f3de6b0d879b2e937692e6513be955a5623b26834535030c196a4145957f4f1e2879b255fe8f5919f0b55c0a7865521a3ac93c77c6d345f1e807e1a9747a58876e7f6d0f603bfa194eb263023a920b45b7f3471b7e72c45279373c85d4a2c0d89336e7f941e79f5d8e0e4804079f37705101400a1d62157b853177c0105fa8adee43239f85bfdc3a166dadacbf340b69e89b9eeef497a528ae1457af172d20a8d6873f1af7bfcaefee12f61691027a3a81d98e3b76169cf24c08e83fbb978a5e88b00aca8cafa4f884c92f12de3938f9eedceada4c10359157f46e8f3a41a084e33b4e53f7e85b7e8bd840e02ac518ccc60c87f91a85a56cf61c901d5a1e06c5f80050d828ce9444d9bca74cacc0e434d2d762dd0d453b5892d3cbf5fd4496cffa054b33d898686e6c463b2801b8aa6bb81974fcd4b0aeb288d6316c5eedd0b3ec7bab6aae335d818ae26391311baee9b4d7f3bc43e8ac688f43368e92272fdb490dd854d74b6c3fa3e5de96b4373f2f1b36590fb16ab878996ae202398534d7287df37cdd934e7779af2894a7e094f0c164b6dc00405bb9fc72d8fe0da8538741137535d9c1709224538493d6bc615f0ec88fe61bd88fe1692e9e5b259144d81b620953198851bd28929969bbc8d1bef0791c97a7c4fdb78b26dc4a93e9551aacf2c667e2b88e08f5a9728c3d9a09e5ac7b17f53ac16917db448846e27e9e077e4b0c5fcfc0c3dbf235dabfc0b243bda27b7851b74c6dfe0f4b571aaa9fef080321d1c96e8d85dfdee2143446ba4e0595c037e50f9f88c2380ec54f743a127f700932183a78014347188dcc26aef97578517d382a9194bea89af94a4c29cf92b81fe58b47728c12fb75a46277f7dc82067f911d99da4785a9f53b7415f3455798dd9c479f0a74b92de5756a678baf6f9064e5ba402385368f5b58ad1f0067f3703e742707fa59aa6c5f75039018ee0b8a883ee3a89e23f9c950e96946a7850485f6b1c1cdbb360defb13295fa5d11a5d95b7c26c52ef3e6fea052b9b95476b0022408a257740f041528d39b8eaf433da63be1caff87d12c2d5d4899b96e32d06ceb961fa505a1573ad15b19595cb92fe0fc7672765cc31fe4ea7596475b10cc7dad45f5015c34e2c72e6e2543e399cdd4fe0c2de9a42eddd43d615e85e74f3130d4242fcd6b1e14aa88fef0149cf6d88bf8025cadefe4f75fd725d7da3d64f185c93995f6bee66e7b5fd7961b306ea27a1afce2c072cb1ef6c76b91b71eb7c69751a369b5f248b3cbd52d3d2cb05f0d611dca61083dcd0d8f6f51c448383f8beb4bcf93fd9da51018e2ec89b8cdea2cdb73eab81fb462d8fda2ee173abfe4271952ed063f04ddd7dfa7f7ad9075c6a04aeef6732c8623df78d1c36c2b2f344a13ccc849ca03a66d9627350aaa4e554824b90008e2b33e0b86ee16e133d22684512b61cb8c7029f58fa1f12f461abd41a8ecc1a1f824e71a75c92c80aaae24c491ea5f8ffac819eba27e44215f190a11359a44edc9ff03b0199379020ea90e36c09b65eed667bd248756b9aee88fdcebac58d95ee13682f95932cfd17eb2a465238857c21d71bbd72d2a86f69a1dfb177cfe2ae0d264ace5b9c27a8235fa3871c45be46b7056529a010b0ba25bf5144d96cf46b3093ec480c29124a1674f3fdf06a33604e9097104160d2b886331bda7ed5873ea25825c5dbb023d38b38860a24cc0ff322a9bd76e5e9205560f1741faa6aa6076e0869a77dd1b2c0d90e5dd6f7dd736858da13f51b4ee3c2af7ca9ed4aef987087d4f4a25b8fec4540b1241d57698e008034c5daa6b0bf1a6fa11edb11c801f1a59a069f356790b37c6cb1f43386aae8f6d3e32d6dbb86f16edcc43fe100e0114befebf088c0537fd85d5d90c454e4cac61c90328e8fd2ef7a141e6b462a2565576a793da81dfe0630d2b6039c732787e54929dbdcaa44c292e27e285619a0ace2ed08190b1a2b0de51baea68b4b2f32c4d1757641427e7ce65cfc80d6fc079de0faf3436d7725981999b365521baff042e27437f09b181493e6e27bbd708ffd3f4de00d0eb4be4f5b5c833337116ee7a990bf0c7ad82a85869122adacd49a3cfb4f5bace25ba33bc64c6dde95c4a141669293a665cfa4848bdffe33e7d48483ec34aaeceb106a2846337467a106e8d74a6126f5308a5788d11f53f2d495150ffcc76255b4d49133c66ee48f703f9864e2f378849ab4e16abbd8d7b6a223edddb15810daba89f148a36120657cad857cb28656c553fc10fd24beb1dfdc545572f5fafd48a16ffde62d9d7d637dfd46de2c590ad137c82ff268dba7d092698e460934bbd1376e734f6c752ec746fc12a059638bc341ef5c41ff75bdc100309a0bd2b50c760f78d29f667740688a8d5af4035bcd3bb8d811142116686d2adfb19e04aa1109ca1d982f00bd2d34b442edb0d45a0a53e0b72428f13a0dfa031ac07c0df45f1aa9a1814ee529183ff26b1a52416078fbbc9216c9fb1890464a8930d1d453db9fcf781abbf97fddef9e1b35d3148445eb4dbdc9f05b610ef23d28458b30702701a6545de3c1572978bee38837b9b93d473fd52af2243b8d8efa1746066c4b9bf5554c75bb7818afcf93158c46b7c54d2b299d4ca0c54c4e6b55151e0c51a628b1543f4151ae49db08486a55d5a6bbd4a3f8608a6d874c788e2b7eeeec7833f93f38c87bab5f1ad0da573d528419ec61288cbe60e12b30b40fc7270d5d9044541383956f359f5c068115e4fa602862e89a06e2684db384e28793aff2b15f7d997558b6df41e7d71905e1516697e72d86eeb40edf2b117ee6844d54efcf9ddd74166d0bc409439fe19945324c854d836aa05c281d68aae1aaef3bf908fb4d34a3e672e22a2f62ae7de362fa7972b4498acb3be78cada2dbfa9a602d187420f49153a00b0d244ddf954504ab0fee1cef7da2dad0d9e374e405d54c591f848714651fa2e211f13e911922539b59ad9900f100c4fad1019a764c97a41799787b61b1383c93c692d33ab4ef713eec696d789c593bacc81370023bb09e5d7a519d091089788a9451db6cdbe9cdc3e3d0dff0b793f41932378437d072fe451a03dd2ac71cb27d0704424c9631bd4ca4c0e4e609a710949294f4503be3d66b56ef5b25ab890a03c896ea31e86084da8d1f0b694ed03d87a8481d8ea8ac6f709870cba2ffbd5c275e4ca040452d805ff5483229a0b606ca4dc37f0061e1c9df3e1f3b5afa7a192fc784dfeb4a347d96ee0c571a705cbe84f74c45cb1ca8c213987e1cc55255e9d3178c6bcf0faedd4ddeedcf2b47710ac434ff5f5bd9995fc4281de37b0926435c1ebe0d8d23f74167ac61e4001022b2b8ab0c0acfd864ab836d2d0174a0c078deb6ca807866eab2daebadfcc04dfef6058422f4e22cf118b7c91cda957a42ad998f896b9a7afa932795330bda504f5ea37cb88c68fbd60014c9501b7ae60cdf69d5aa4f330663888a8bd1c82b55f0baff1ecc5191b7eb46dc58f6670c985de752e641ddcf59844e2c41fdaa30c9a4ea957150e263bf13de73c7065304a98799b9330862ed69ffe9c1f4b25d2dcb8b7cbd088a7c55500d548ebd858d863d244b76ffed20858277c5c340668123f4005d827c7b09c272dee470484d89f090c8129ec6de235fd1fdfa29aa7faca2b30664c9fe280a51535d03cc1d7cca4441b57dcfce789e40f41fcbac4a75a04d1c664f61c4c9a0b77d5ff14963f99688e68204dce70ebb88b23a5e25f621768c40dba8058c58a57a12c618ca4f0ba28e14ee0a032ad1018a27319d27a6e60b57375413877c046e7070c754b3ab1c4770faf3327094bb4aa68b4f715ac263510d7baa07b06b6f219ccaab7b210306337a6492848092f2060580292a3346c66e0366d40aaf655743197ff8e1c87ede06bbb9412e7ee64cbdbe4d8dd7c244a6f70a979ea1cbf0b73f3260674403c5d2dc24"}, {0x110, 0x10c, 0xd5, "4fa16c972d4db9de0af33e5b6958e21cb39b8c2dadff03251867acf122f7b8729053b6d7c1cd50bbe7e36dcc0b406d939a7622ab60102ec2159e69507ed4bdf8144fa56afa477fcb934d780022befe09cb85cf9ac8369616e6a3b5eaecfaf5e055ba1406e4a507fc282ddad730754ef6a313e7c9e129afbf92f728b529ef14f6b71e36eaff1fb33e028a2dda2387f6c5458962157e7bb0324689929168b12e0015901d5893acabdd7d9e8b230a36d2df87c4d7f1cef489bd7aebe788867d8566ceffc781785a9808a286d433f799e0f350205ce846136d9939d0f2bd14131f77fb89b8570a18e4ab3773b5b8944ea2a0126021dd1777087676"}, {0x110, 0x10d, 0x0, "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"}, {0xa8, 0x29, 0x0, "dcb5f11209f4d7090761c599830f1a55195cb8280030795dba14d8ffc405f662024390c17f020121198597ff167bc133b919fadbc3af2671edf0feff25783a027c323e10f8c735221bec6d3f608f8124a57ac6b7ccb21cea3904304824c872f60e3c535a0535dbfc7a56c49e4bd17b3fe188208143fb91e4b66c721fb22bb1481897ec43be396f99fa16acfe09084c51edc750cf25d08118"}, {0x100, 0x104, 0x5, "e0f8f8ffc50b809fb512e4c318b1d02d0ae63a504c0eb1fda8e294b1c1c61057b3ac6000dce7c832417c368b0e3ed58fe96295fff3a95b8dfa22c2604d077d34835a5b06103c71f60eee8ce1732f39a914b36adc5bb09b8d5ef61b0518f1a52477dae53029db553b9112dca25ecd2063337778d8f49e8a80bc5da12696ef8910f5991c5051d54600284698fed5e8201656b0387b8cba78249e7cab4eef76ec4d679c7cd50f484f056706769cb82648121a30e0ce54325430f0eb67b0a35db3a447b16abb68cbee2e19cfe843b0368eeef4d87e1f93a7524cee5813c1cc46abe6898b00bcdee94415c6f9a27674"}], 0x14c8}, 0x10000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x40080) statx(r3, &(0x7f00000040c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() keyctl$chown(0x4, r2, r7, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000004240), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x28, r10, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000004480)={'dummy0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004680)={r3, 0x20, &(0x7f0000004640)={&(0x7f00000044c0)=""/86, 0x56, 0x0, &(0x7f0000004540)=""/221, 0xdd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004780)={0x1b, 0x12, &(0x7f0000004340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x2, 0x0, 0x7, 0x3, 0x0, 0xc}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004400)='GPL\x00', 0x9, 0x3d, &(0x7f0000004440)=""/61, 0x41000, 0xa, '\x00', r11, @fallback=0x38, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r3, 0x7, &(0x7f00000046c0)=[r3], &(0x7f0000004700)=[{0x4, 0x5, 0xa, 0xa}, {0x5, 0x5, 0x9, 0x9}, {0x1, 0x3, 0x0, 0xc}, {0x4, 0x2, 0x4, 0x3}, {0x3, 0x1, 0xa, 0x6}, {0x5, 0x4, 0x3, 0xa}, {0x5, 0x1, 0x8, 0x8}], 0x10, 0x7fff}, 0x94) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000004880)={0x0, 0xc, {}, {r7}, 0xff, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000005040)=@filter={'filter\x00', 0xe, 0x4, 0x770, [0x0, 0x2000000048c0, 0x200000004a96, 0x200000004ec2], 0x0, &(0x7f0000004840), &(0x7f00000048c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x88f7, 'erspan0\x00', 'vlan0\x00', 'ipvlan1\x00', 'macvlan0\x00', @random="5bc85555f6d0", [0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0x10e, 0x176, 0x1a6, [@stp={{'stp\x00', 0x0, 0x48}, {{0x9, {0x3, 0x1ff, 0x6, @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xfff, 0x4, 0x7ff, 0xd, @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x4e22, 0x4e24, 0x5f16, 0xe00, 0x1, 0xfff, 0x2, 0x7, 0x1, 0x8}, 0x208}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7fff}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xc431c4fb0de4c}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x12, 0x19, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'macvlan0\x00', 'geneve1\x00', @local, [0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xee, 0x18e, 0x1be, [@owner={{'owner\x00', 0x0, 0x18}, {{r7, r14, r8, r8, 0x2, 0x5}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x7fffffffffffffff, {0x2}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5f, 'syz1\x00', {0x4}}}}, @common=@log={'log\x00', 0x28, {{0x39, "a664612f51f07f8be68d3b59d408ffe38ade845f7b0353a85d785573725b", 0x3}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x3, 0x52, 0x9000, 'pim6reg0\x00', 'veth0_virt_wifi\x00', 'bond_slave_0\x00', 'bond_slave_1\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff], 0xde, 0x10e, 0x23e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'xfrm0\x00', 'tunl0\x00', 0x11, 0x3, 0xbcf3, 0x8, 0xfff, 0x80000000, {0xffffffffffffff7f}, {0x675e8263}}}}], [@common=@STANDARD={'\x00', 0x8}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:boot_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x11, 0x20, 0x200, 'vlan0\x00', 'veth0_macvtap\x00', 'syzkaller1\x00', 'team_slave_1\x00', @multicast, [0x5015036c5d016839, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x10e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x7, 0x0, 0x2, 0x3}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x5, 0x2000000}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x200}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x7e8) sendmsg(r9, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)="9e1451c268f4bd826a835ad3c7be62b0f8d6b6", 0x13}, {&(0x7f0000005100)="f670d5b9fff17bf597afba86c9401a87a4cee812492d9e50ca384e5c3419369fa6bbcdfd0baee6e0df0397467d22912ea5687b80bc3fabdf9d9cb9a53b2077d2ef8229d98d8cfb93c600c935a8337b00c00574d24e14c6c7f025be508aaeda0152386d8514c3de3fa695c782b39a4be76aacbc84b0edeaddad311bdbbd1bafaad283c2ce", 0x84}, {&(0x7f00000051c0)="86aeb81573c8a9307bd7a54126ff98538ebab3fb3d8a8e1ca8ea1465c73766f36d464ca33133e16b93af2db9a16aee79e2508ec03d0a7b7141a240084faeefee397f7754c384094e5b1197cebb616978d5f4569763379e948b4fbc97a1fcbe67c9ed9d261e92d4a8e07a0a58121f3de6295ec88b71acbcff827e9728f3d109f7d17effe30323f2a373a31f03636aa8a25638eea9dbf118109ec084", 0x9b}], 0x3}, 0x24004010) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000005300)={0x0, 0x77c, 0x180, 0xa, 0x8, "cbf8663045962906"}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000005400)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x332050058582b184}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) 3.262739857s ago: executing program 1 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f0000000300)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0xf, 0x40, 0x83, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "671dfcfe76"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7d4a, 0xfff5, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x1e}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xb4}, @dmm={0x7, 0x24, 0x14, 0x4, 0xff51}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x7d, 0x10}, @dmm={0x7, 0x24, 0x14, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x61, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2e, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xa, 0xa}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x4, 0x5, 0x7, 0xff, 0x6}, 0x12f, &(0x7f0000000500)={0x5, 0xf, 0x12f, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2c, 0x0, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc1, 0x7, 0xb, 0xc043, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1c8ae442484167630959a674ea533ff5"}, @generic={0xf7, 0x10, 0x4, "a3c1d27a8857d2c01bebae8b5d8eb6e63474ea7419ac0eaef8440cb84c6e11f22a09a04f0e35eea68ab0866237c0e16c376236ed9e9bc6f1fe4f6234d7b2201b5763419064801947473d8c8c724aaab1cdf2abca6904b578969d35a3f0eccf9d8595d8555d7c7d5f8c39f7d244b0c89d88975d05dd63dd2c4fd3b12c2b01944d9302d47f036eeec04e4b33a50810f709186ee55cd854a15a3237a6bb95cca17b41ffc35d15d0651f99714d5eea8ecf58989959324cd86840a29a42783441c1684c44d0ce9dc4a324f4642bb1ba357f13dd3a29a8a6b0dcd280ea711bdfea165e3d7df5e38482682c9108bbe83adf083f8c999d2b"}]}, 0x8, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x814}}, {0x40, &(0x7f00000006c0)=@string={0x40, 0x3, "e93c786012efcce9505790679a32b735cdc9e5344185c47dceb93ed3696b83611fbf13c4477d3f9a4b9127568041356cea64a4de3072d31e25222dc559ec"}}, {0x4e, &(0x7f0000000700)=@string={0x4e, 0x3, "4478499e397c5f1115934b2f0dd9a6a9de6eb5cd1134eda18732578a04edbf585a50d921f5643629cf89466ff6c1d9636b826094b2e1025fba877a1707c228c67c88b341679687119d34de0f"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x409}}, {0xa6, &(0x7f00000007c0)=@string={0xa6, 0x3, "209eacc2a2e6f30bf14fda2e3a8bf5126fce99559b75dae447c216b3d90335362a51ae4c49ff921f8d043d3ae034bdf73534cd6df0a93782bb441e3c98440ffaa26cd82a17a7e4973b4c15608abc7434c90a60e8b060e8a48bc7373e42adaff33f44094fb3f23dda0f8380e8905e0340f896d26a81df01fbb03c9061f67ad4e5851924e6b581937af1948de4426f482edb83b8075e80dfa0ad22089029e72c5e549df300"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x843}}, {0x30, &(0x7f00000008c0)=@string={0x30, 0x3, "fbba561566678a90cfb2926b9a81533aa3aa6f4beca46130360d028761fe7b9f89a17b9d917b586e66cc7478066c"}}]}) syz_usb_ep_write(r1, 0x6, 0x2, &(0x7f0000000a80)="c2b4") sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 2.962854082s ago: executing program 2 (id=409): r0 = socket(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000600)='/dev/comedi2\x00', 0x2, 0x0) ioctl$COMEDI_RANGEINFO(r1, 0x80106408, &(0x7f0000000680)={0x6, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r4 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002580)="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", 0x2000, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_dev$I2C(&(0x7f0000000280), 0xffffffffffffffff, 0x8002) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000800300000000000000cc03e9e605000000010000000004000005be00000000000000010000001500000000007206002abb00000000000000800000000000009cb10000000000000000001000000000000000000000d60000"]) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r8}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x4, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xfffffca0, 0xfffffffffffffe21, &(0x7f00000003c0)="e0278f7c5768793f40cc760532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2f) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r10, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080)={0x77359400}, 0xfffffffffffffffe) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000000a010400000000000000000500000a0c00044000000000000000050c000000000000030c000440000000000000000408000dd8c70346d953c83e5e96875b5bec34464d2d6c27e978b5adefe3ab285ae6a9a672492c21320aeea14ed29b3c7122213a26ef5bd762c213f026cdaeeea48a23bc09af8a14c55391d6d3c9426aae6e577a230034000000030a010400000000000000000500000a0900010073797a30000000000900030073797a300000000008000a4000000004140000001100010000000000000000000500000a00"/244], 0xf8}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x2, 0x81, 0x0, 0x6080, 0x40000ef3, 0x1}}, {0xffffffffffffffcf, 0x2, [0x7]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) 2.760289366s ago: executing program 2 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x16) r4 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x2e}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x1, 0x4, 0x6, &(0x7f0000000040)={0x5, "71748c020000000000000000000019004000000100001100800000000000000b00"}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010001fff000000000100000000000000", @ANYRES64=r3, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00dc4fa2df391d756727cc62a6ccdeb421f9ca0723c93710e0", @ANYRESOCT=r4], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 2.759771691s ago: executing program 2 (id=411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f100400000101020001090220000101008032090400000200000000070581020002000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 2.361357866s ago: executing program 0 (id=412): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) readv(r1, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_emit_ethernet(0x22, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe0080045000014000000000004907800000000ffffffff190ae0d67d18007e7fcc823fc259547274a3251b277662b384485c68fe3c8e9668be722b53734c89648b8c45d83f3aa0884f0d7bae16cccf94e1cd779c65ad4da83878d366c287eaf649cc1c43014568e61a782566"], 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)='virtiofs\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x1e800, 0x0) munmap(&(0x7f0000fee000/0x12000)=nil, 0x12000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="ff220a1377d681be2a348fbcf30cccafe6062194b135", @ANYRES8=r2, @ANYRES8=0x0], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000100)=[{0x0, 0x1d, 0x7, 0x25}, {0x5, 0x8, 0xf, 0x2}, {0x7f, 0x3, 0xe4, 0x4}, {0x10, 0x5, 0x5, 0x1}, {0x2, 0x9, 0x6, 0x8c1}, {0x2, 0xd, 0xf9, 0x8}, {0x1, 0x6, 0xee, 0x1}]}) 1.472666205s ago: executing program 0 (id=415): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000001c0)="65a01e83ffe2c8bc8bce16c2373759b28132105023c9a79936ed94cefd3b4c22dd84e092bec981c5591c5ed874ba4f52972d5d59366c1922235a599f399c65", &(0x7f0000000240)="4bcc3596aaed831c68ae3a92e9c9f44d5e0d29446cffb5464a1e76fa0fa79bb4847d1746a628bdcc006c183c78181940b31c5cbcd67dbb00ffbe9da0fc3fe33e9e3099193bb41bb05dcb949129e3850f350d112e17c4929875ed63dcb1808537e0"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f000009a000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0xec773000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d300", 0x2, 0xc899) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$TIOCL_PASTESEL(r1, 0x4b47, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500120000080008"], 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDADDIO(r5, 0x4b34, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000020000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='1', 0x1) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000000180)={0x2, 0x1, &(0x7f0000001080)=[0x0], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 1.303133364s ago: executing program 0 (id=416): mmap(&(0x7f0000300000/0x2000)=nil, 0x2000, 0x100000c, 0x10010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = getuid() write$cgroup_pressure(r0, &(0x7f0000000480)={'some', 0x20, 0x1, 0x20, 0xb26}, 0x2f) mount$pvfs2(&(0x7f0000000300), &(0x7f0000000340)='./cgroup/../file0\x00', &(0x7f0000000380), 0x1080, &(0x7f0000000400)={[{'\'#${'}], [{@obj_type={'obj_type', 0x3d, 'E(-'}}, {@smackfshat={'smackfshat', 0x3d, 'illinois'}}, {@euid_lt={'euid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'threaded\x00'}}]}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x1, @name="add8dbc8cb5628d0bf82e6000015bf296aa942591225dfab46d27b90860000ad"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) (async) shutdown(r0, 0x1) (async) socketpair(0x2b, 0x8080e, 0xe, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f00000000c0)='s\xef\xec !\x84\xde\xb3#\xc3G\xa3\x9a\xaf\xdej1Q\xe1\xeb\x97*\x1cV\x9ae\xdf#\x9f\xc8\xad\xb7\x8d\x9e\xa0\xd7\xe6\xb5&\xde0\x86\xf8\x04v\xc3qJ\x97[8\x84\xe2\n\xf2\xe9\xfb\x8f\x1az\xe1\xf3\xb8f\x1c\xbe\x84X\xd5}D\x95\xe3-\xe9\xd646O\x87E\x12X\xfd\x9dL+`\x9d\xdf\xe6\xfd\x88\xcbe\xd9\xb8A\xf7\xeel\xb3\x19\xfc\xd52', 0xe7c804b5) (async) pread64(r0, &(0x7f0000000240)=""/145, 0x91, 0x7) 1.301883564s ago: executing program 0 (id=417): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r2, &(0x7f0000000000)='\"', 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r4, 0x0, 0x0) (async) write(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000200000000000000010000000800010000000000040004800800020002000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000200000000000000010000000800010000000000040004800800020002000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES64=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) bind(r4, &(0x7f00000001c0)=@nl=@unspec, 0x80) (async) bind(r4, &(0x7f00000001c0)=@nl=@unspec, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000034}, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000034}, 0x10) 992.339569ms ago: executing program 2 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010029bd7000ffdbdf250a801408fe0203020001000008001000ddffffffc0f00b2ae93f37ea2f1bb1951c52232ae76127860e5c3ecbd1243d2b395bfc40b32c42"], 0x24}}, 0x0) 642.086094ms ago: executing program 3 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000005207955ec371db5256c0e1c79f9ff16f1a1315dd8300b530ae1a2dd45ca58779496f7d86e8d48ac891bbf699", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = signalfd(r1, &(0x7f0000000000), 0x8) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pK \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1a, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x80, 0x5c, &(0x7f0000000900)=""/92, 0x41000, 0x3, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x10, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[r0, r0, r6, r2, r0, r2, r2, r7, r2, r2], &(0x7f0000000bc0)=[{0x1, 0x2, 0x6}, {0x3, 0x2, 0x0, 0x2}, {0x1, 0x5, 0xd, 0xb}, {0x0, 0x5, 0xf, 0x8}, {0x1, 0x3, 0xa, 0x9}, {0x0, 0x3, 0xf, 0x4}, {0x3, 0x4, 0x3, 0x7}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000700), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r13 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async) r14 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r15 = openat$binfmt(0xffffffffffffff9c, r14, 0x42, 0x1ff) close(r15) (async) execveat$binfmt(0xffffffffffffff9c, r13, 0x0, &(0x7f00000005c0)={[], 0xf000}, 0x1000) (async) r16 = dup(r11) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r17, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 401.635706ms ago: executing program 0 (id=425): r0 = socket$igmp(0x2, 0x3, 0x2) (async) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/ioports\x00', 0x105443, 0x0) read(r1, &(0x7f0000000400)=""/1024, 0x400) (async) read$FUSE(r1, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000540)=0x1ff, 0xfffffffffffffecd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000b00)) (async) syz_emit_ethernet(0x15, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRESOCT], 0x0) r3 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x114}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) r4 = socket(0xa, 0x3, 0xff) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x38}, 0x4000004) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f00000001c0)={0xcc, 0x0, 0x1}) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x905d, @mcast2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001080)="6717", 0x2}, {&(0x7f0000000300)="9ee2ffb332c99223a7dfe52c1f51218200000000000a0000b57311c6bc4fb03f287f00b61f95", 0x26}], 0x2}, 0x20008b88) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x46, &(0x7f0000000180)=0x0) (async) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x180, r9, &(0x7f0000000200)="d0", 0x1}]) (async) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0x3, 0x56a, [0x200000000580, 0x0, 0x0, 0x2000000005b0, 0x20000000093c], 0x0, &(0x7f00000000c0), &(0x7f00000010c0)=ANY=[@ANYBLOB="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"]}, 0x5ff) 400.666384ms ago: executing program 3 (id=426): creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x906, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) fchdir(r0) mount$9p_rdma(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, &(0x7f0000000c00)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq}]}}) 331.068451ms ago: executing program 3 (id=427): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x20008000) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r2], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 330.896003ms ago: executing program 0 (id=428): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f10040000010102000109022000010100803209040000020000000007058102000200070502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 252.738256ms ago: executing program 3 (id=429): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mlock(&(0x7f00000dd000/0x4000)=nil, 0x4000) mbind(&(0x7f00000c3000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x80000000, 0x7, 0x3) 247.944988ms ago: executing program 1 (id=430): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) unshare(0x4020000) 142.698885ms ago: executing program 1 (id=431): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c00000002"], 0x20}, 0x4000004) (async) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r6}, 0x94) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async) mmap(&(0x7f00000c9000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) read$FUSE(r7, &(0x7f0000002980)={0x2020}, 0x15be) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) ioctl$VIDIOC_G_INPUT(r10, 0x80045626, &(0x7f00000001c0)) 142.479929ms ago: executing program 3 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_regs={0x12, 0x0, 0x5, "25c44e092c"}}) open_by_handle_at(r3, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x22, 0x45e7fcfa, 0xb9}}, 0x1d9400) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x4c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) 82.946365ms ago: executing program 2 (id=433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002") syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) write$9p(r1, &(0x7f0000000380)="a3442e", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000001c0)=0x18, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @loopback, 0xc}, 0x16) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x81) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00', 0x1}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}], 0x1}, 0x0) io_uring_enter(r1, 0xccc, 0x4b84, 0x4, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8) 78.211015ms ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = msgget$private(0x0, 0x400) msgsnd(r1, &(0x7f0000001100)={0x3, "0bac971c67631c2ce299415d8785d987ebc3ca938d96ff3a6b67d9f03a451806dbf07e95b65359429ba5bcc8d57297b4c443cb76806f6044720807eb563604fc412bd5cb992f391d49803e63fa149fb77b9b2c85d204a60c114aa83082700b1f2f900ba613ae6e0c984f3a97922e37f12e21bd92b168bd33dce9a8236a7eea269af20afa2d4b42f50e55065820b24c2fe4e631e8b201ba78501ab785d5fbd3b3473bd1c7a32e886a72f85a07df241abee64189a5bea2279ab4f2d9f865d65c0a0cd7fa6b2dd07a208c3a402c18a647c6a6fb5149445e78fee9f66a1d752e1d5c85c2d681901a5cc3d212d14d0640a06760b152f5ea90a249b7afd9dccf9aacfb8c8aaf6ac6e533f6bc8650a0598482d4f07b6196dbd2d1518785c49e35ffc182aab47e07c2c845fe8c26a8f6a7887b2929292288e01a6c7207e4af7ea03e6831f61d0ed5c18e9b56641992b7054627b15bfc253f7bb2d8d794157af2af107fda6178e806e926f52d8823f0764e082ec45b408535af8f39e6071a5294e102df8c022a3e39fbc07d014feef77a36c90fe32d662a6b566e7923a3fff152c20f1f99103d044d5d60226c578bd36d9cbcdd0d965f2c538d541f09858cb66a48e49bada91db18707ae29ae3cc09c54e177704ad1ad34fd0253f0235190d8e82e1b1df5f59ce5ce667fded2db3ac7ba286ff630a548aba03e077ce7fc97f525d32295dc542e2975cf1d3d004f0e2662b549c012d7b48f07694cc9816c32575f757f714bf4550edd862fe6d3f088c99639c2aa837f9478549a37986b41ef3abb2b79a6c6795b917d66294cb0f1db84c3af2621ecbaebe6e8e0d44bc1dbbc252615abdc325df2198ca397dfbb70d672027888976a9e2b0b769de860609462132bbb670e09b5dad63b8909d2d48bc3e3280778b7a3cfcda0bfa95b05f00957d94eb13bc5510e0331c49a908cc3a4e263ec6762c79a343cc2d651036c34b700bb55dea8db0c9da1064002fc60b859c02349997fd5c9cf66af63efc5e10697e4e407d2cc9d0b3ddca761494548ff7957e9f89b7a4a01dc268498d021f72eec93bf9db6fc223e6c760f4ecfc772efdf569ed549eee17b1eddd3e817f7b7f1f228078b381254cce9d11fbdd8e46d55bbad5e7005bc461846459f533cff2dd0ca5aa63ec5571f2f465516086ff7fb6a7e133c41fbcbe00678cb507c0d09730460cab8545e5c21ae766956acce14ca07482c5d7eab987fccaebf88f45e74e967413574a8013a0b421f1c32ce3fe2e7ec873d58bab337913833d763b655f57bd9b93b42836770aaadc1dea3614d45b2690a9b0edf95d8ed204e3343ac76726721d91ed512fce63c28121c43acfd4730f557a8760a5d0c6d374d23d7b6d03be267d3ab55044b780bd8f30da0aa246cc631f48f5e1ad0e2afcb716747fed0c368ecfe6aaaac08bb145b3ee074e1f8f28d4ebabf015c599309b89e99ca9da3eed0f77b96c1e7bae49b8a99d064db9641a5f3b18f7de802a95d267a1ecf2210c807bee693968d8b23b23bb42c1405d21ad1090b9115cfadbc87c478f2f6550fecdef7017338106391a83535a14020994a09c213862c6e9e1e6ef8620671bff897953739a08bd3fe1ce37422bd9d0f244548d9ef0accae6aabbe8ad79771cd06d74d29dcc1f984345afd0a93c455c9e0a2a56db53dfef2a9885c6498a7c7833698078d262fc1248a710b4b1267c0e644562dd8f74b204e9a9451da531e93e0945da8c5576bd332716c162212235e60bfa2106e2bb6d35c7d021cdba693cc4a06295cd088cedd10559633becea22be18e5d860cce6156110ecf55489701b7c6e56527454f7515df0535a0a759a4dacc9a03a729b79fdf5a668fae6af1493453a178483dd896964fb5a0b49a02217f196758c88115cf8c3108d6248f6238c4e427ca49be9dca2ecbcbd0faf43b8740c51c81dbbe4ea04982fe440cc612088a5817513cfceb1a116580f2eb58ca81c34aa465ed50e49810919044342ab9c110d90e52161334964991058adb04e0ed9fe0c40141cb3c1802f450146176d6e44062d353a705386d915d4ecb37d3ceef53959700a04fb984ae6cbd0a3dba0a9b5c1e5b2ebd6e0e6cf32188a6d670f786edd2c27b4a2f03b025866902a449fa75dab4563b7cc9a96d3a3acd27b0ddba49f51a8fb893676b97ae72e842b781f2124fa254f67e5f2aa37353f74bf86865daadb40d165a7eedc67f72ec726dedca305aaa077d6a7ad50da42bd27268a27892f458c068a93dcc37b06631656b26024a2050dcd045c6ecbf7b95ed1c316270d61abdd7b519037d9e27885fd588988d0525e4b4ed7957550f8703679acfa69777e4209abd45ee8b6803140edd1865769aa4d313ab24d3e47a269cb4427fe856cec7e3f4e05c21a54a65f74e8d4e53f6d743afcca2f9433f75296685f94a96181605daaddc15ba8c65dc2f7cbcc399d93faf4c2d2d38daf04458ac88a07e5f77a8ab8164a408ad79da1a5ecd4731ad076853f3a910a426f0fc3459e1670d380e4f3fba56fca93107a85fe3c3298b498481cc2bb39746ba962dbc38e4f48dcae9b2f994f882cf75ab4bf20ee748264b87f8bb4212b5dbb1e9c0f8f1df02947f1129911a4c18eb9631a96a212eee4e0e3645dcfa811d38320baa4706fc65233ac82e2cafad62dc132842d08a644264c964279dff22fefa6879927e2cbeff7ce23d68d1bfe75b1731f6346aee931505c0efcbcb8599e2fa1e8421b8b9b4c3781b87f6b30b2cdb2d39a271ac2e72d8d2e2211ab2eead3d9ef9ebd31631c748828adb379c5f31a86148e389f727ab92c05c9fa26f1c2cead801d59dca5c2267158e1b9c8a53b21a7e1c7201d6e8f0bcca38218781bad37ab73c43c26c20e9a94b129ba74818f5ebdbe13ff3f0856e43dee31d4fb1120dfd02e19f9805adaffafd5938d817642c54e6003f4499794321ae986546d154c2b6f1dde29f6d7ab4bdb81dd274cb7dbe5ce5df620f4762f4844c8ff4ebdde755c8e194036be43748decc08572b606cb31484a3c9ba1d3049b4e7164c18d080a52bc207b79c96c8d55dabcaa411dbab167d7ce72ef9056a9e2bed47139812d93d51d6ed3e9b603c60fbb77d52e3238ced431fc7553588ea1e1fe97a66a7468fdb71a219f91d06994aa43b42b93bd78aa3c6411c98125c750650e1108f011b504daa00b6586b8c5ec27a3857d483c30ad972d8646ad8b2d8393bcd8b28bf709dffd7ed6296989d8a2b70a52106e86a759a2f9b5c87a9babaae37fd42e9de5615bbee2e1b56685a767eb8d9f6fa222a5fee23b88e467bc8826a7294d699e7254492642ed74597f1221ac181254011c735f8ca636ab7fcfe3ac2e56bc0852568758d6383d5db966928ca02bc5ade33a533e3fefae83d634fa861d327508924561303f9ce1bd086f20124d67ed0c845adc90275a16d52a9aa7d10fca832c25f53ed61f22f66a727eae46d33abfe70a4b25ef128e80796a8bc8f2bae0aedc32fdea4aa26752b719d3b85504259b2a99256f4f2b884ca5ccaa76bdcaf6d9f69563bfa889d2ebaaf163e1a7582321f7861c102ac64dcf7ebc2592073c73b2822a0095cecd4905d852391669bb2575482dbcb9c782c1090d442c71063fd53c63bb9d618b3392987309dda810330c2d979853e87be1c3612a44d9006083e1579996a3f5649c7258d2c11d8ebea7f01b073243ad85e1080a1d81b7fe1dfe5faa2adc2cb9aafaf07a72d231de7e40ef70767ce3e5d606944c2c9cb1cd76ba8e6daa99046b231e5e09a814311fea25e2d6029a0898267eafa0d606aff3622d36fe4179a996f80f352830dc0245f3bc91a7aa68edc114a46d19175ee8adf68b9c29fe94d8c0827d3bdeb737be0046ef8b66219239b91b92fc93fe58ecd84393758a6ca7a13fc20b4c03c66f2927dc8877911b14502517805845db3b480dd4662ca46b78a3afe5482511b924bffba1b2b458d0b452cf79f0c9be6920d0db085852cbdfcc96ba70e1b4509aedadc11b49e3f0c0213437adef456c19a8c13e0d1e54051da95d68b32bed28e7d31ac52814196eafd5c7419c8212b8f66dee91226b70b2970e4c139af4c73173975a5aa528406008b183866ca4b0b8e50e7decb1fe250e0e5bde4f94b8f859b2b24429b90459fe0fcd3ef34d6ea7426164ac57b713735c7474fe41be696c13fa5518c19f7a4f8b0f5decf923ae35e0a800bfae644a68aa0a00f036a74cd1cac28de1754e12513a0d38e81700721bbfa4fc22341d8954840876f379f8b874a9ac5d88ff25bb70820eb77431571c22213e5116fa37971b93c7105336344a76b2c849e99ee10f1603aeb6ae92c263c8ae8c34edb2b68251908bdeaead61d15370c83cd935df2df37d54f53bd5d6093e6a2d45546b8c1223ea9633e0ecc170dae05d7d9a788630404b8b29b9883f00eb6bd50d651201abc6ab88a06b961ed587fb1b2f84485c47d0c8d053c813a66c0dc475a008608a8a54b42ba6230eba0f3d23c2c2a68e1fbe1bbca662445a31582a12ae8bb2a4bdaa6be384b3b2a38fcfb77a037ee35affb72e7a8eb8227432c66379a5a24336bfff146a673c1797f41428a8b2e9ef2dff43cadf16ede6c63d3b990e67844b683fcc7ffbd301941b355e7bb3d3e60c1c5a006f672e010f29e898595ab04c50eb2c5ca9b1fbb85e7c409c4462fd30a70aa6d94ec60ca4d167daa1538e11b0e7e02a7d2914a88777210ffe428fd63a45249231f87322b587ba305e7551c9b5151cc954a850150624fdd1220cf4d9466d30e3f3b34efee659086d29c6a62ba58b6edea2d4bbc42ed9aec064229480950906d4b5f4a76feb7fe596d883e11bec0a8ca0af03a095770e38f55acc98a2236123ba7e7b14e55fedc0ee0f6b46cc83f0b3ac63b32965f3db07861e8111e5b950eab8c7090bb95bf54f25a278bde7e21005b67069c588dadbcd6909f7e710fffcf86f005f2d2beab2743ca4dd0db730c6912c1451d93af53d8b8f25954bc0abae047c89ca8fb90204e189dc90ed18703db32fdd5cd3ec1c52cd8354bc43afc91de0657be7b91fd8a1722a768cfc63bcef1b551f7348d6fcdb88b4bc6c160bf33635f27bb7365d909e77931bbdf78c086e52bdf6b600fa262f7072b50811af52b44ad839d6b70799378c19f3533b55e04094d7ff978a5f421c9d42e3ec9ee005446c7df4b6836262b19c129902aed96e47bf99365670760e88e1c6fa495c2de511d9aaa41c68a5c14ce43223b4e9ee068eed45de591158c64cbf41c8efc8c4570c76f3fcaf4e531f8c0a08617a561f4adb52868f6291bc24f20414bd9d83dd6c3a7c4d97494a1940ee722966de6d8729608772b3c47ad34ef97c7379d8afd06dbee65f37c0f83b7f5f6ed3b93833d783405baed87d4f437ba584a14146a46c0bcb3d7a5e57eb9c0e809593f6ce51f5f30fcddf79e65ee527709596432f3fd652eade6f1fee9a36cdc318c45dcac3aa576b660272679a47e1bbd3d61edf81dd8814c8531d5de401f9401818dc0fb86e003de0a771fbc26f661588285e66506bfcfae77e16b5942f30b9f73ea661fe5fd7e56ee9a7095f1ae983c19a5528e8e91e92e9e191b989260dc8b9403c4c13113301eb2e52f4316edabf2e164f188e304b4762d1092d57f7a1deb9d9186f0b7e4fc5eb29c8b8737d3cce4c6e3b060afb2851a0087b26d27d3c0a88eca8aea97fe7f8db2b5137deb11789d3dcf60f7090e85d1af5fdd8a9dab10fe77beeb09523c1116b4a126126fc1676d58d54cb2ded286e0922b7e426a"}, 0x1008, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000638000000180a0101000b000000000000010000000900010073797a30000000000c0005"], 0xc0}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 3.317723ms ago: executing program 3 (id=435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80000, 0xfffffffc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) close(r1) r2 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e11c000000", 0x9}], 0x1}, 0x4004) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1) ftruncate(r2, 0x0) 324.551µs ago: executing program 1 (id=436): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x5, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0xf876, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x103, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0xfffffffa, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='pim6reg1\x00', 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 2 (id=437): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x2c, 0x52, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x801) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x17}}) kernel console output (not intermixed with test programs): 2.470991][ T6976] rss 204800 [ 82.470995][ T6976] rss_huge 0 [ 82.470998][ T6976] shmem 308297728 [ 82.471002][ T6976] mapped_file 0 [ 82.471005][ T6976] dirty 0 [ 82.471009][ T6976] writeback 0 [ 82.471012][ T6976] workingset_refault_anon 6 [ 82.471016][ T6976] workingset_refault_file 150687 [ 82.471020][ T6976] swap 127893504 [ 82.471024][ T6976] swapcached 144179200 [ 82.471028][ T6976] pgpgin 364886 [ 82.471031][ T6976] pgpgout 290059 [ 82.471035][ T6976] pgfault 40505 [ 82.471039][ T6976] pgmajfault 1370 [ 82.471047][ T6976] inactive_anon 135823360 [ 82.471051][ T6976] active_anon 172703744 [ 82.471055][ T6976] inactive_file 24576 [ 82.471059][ T6976] active_file 4096 [ 82.471062][ T6976] unevictable 0 [ 82.471066][ T6976] hierarchical_memory_limit 314572800 [ 82.471070][ T6976] hierarchical_memsw_limit 9223372036854771712 [ 82.471075][ T6976] total_cache 308355072 [ 82.471079][ T6976] total_rss 204800 [ 82.471083][ T6976] total_rss_huge 0 [ 82.471086][ T6976] total_shmem 308297728 [ 82.471090][ T6976] total_mapped_file 0 [ 82.471094][ T6976] total_dirty 0 [ 82.471098][ T6976] total_writeback 0 [ 82.471101][ T6976] total_workingset_refault_anon 6 [ 82.471105][ T6976] total_workingset_refault_file 150687 [ 82.471110][ T6976] total_swap 127893504 [ 82.471113][ T6976] total_swapcached 144179200 [ 82.471117][ T6976] total_pgpgin 364886 [ 82.471121][ T6976] total_pgpgout 290059 [ 82.471125][ T6976] total_pgfault 40505 [ 82.471129][ T6976] total_pgmajfault 1370 [ 82.471132][ T6976] total_inactive_anon 135823360 [ 82.471137][ T6976] total_active_anon 172703744 [ 82.471141][ T6976] total_inactive_file 24576 [ 82.471145][ T6976] total_active_file 4096 [ 82.471149][ T6976] total_unevictable 0 [ 82.471152][ T6976] anon_cost 0 [ 82.471156][ T6976] file_cost 0 [ 82.471160][ T6976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6991,uid=0 [ 82.471333][ T6976] Memory cgroup out of memory: Killed process 6991 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 82.532513][ T5731] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 82.532534][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 82.532547][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.532568][ T5731] Call Trace: [ 82.532573][ T5731] [ 82.532578][ T5731] dump_stack_lvl+0x100/0x190 [ 82.532599][ T5731] dump_header+0xfb/0x606 [ 82.532613][ T5731] oom_kill_process.cold+0xd/0x380 [ 82.532626][ T5731] out_of_memory+0x340/0x14f0 [ 82.532644][ T5731] ? __pfx_out_of_memory+0x10/0x10 [ 82.532662][ T5731] mem_cgroup_out_of_memory+0xc6/0x130 [ 82.532675][ T5731] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 82.532686][ T5731] ? find_held_lock+0x2b/0x80 [ 82.532705][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.532720][ T5731] ? _raw_spin_unlock+0x28/0x50 [ 82.532734][ T5731] try_charge_memcg+0x783/0xf60 [ 82.532753][ T5731] ? __pfx_try_charge_memcg+0x10/0x10 [ 82.532768][ T5731] ? find_held_lock+0x2b/0x80 [ 82.532782][ T5731] ? rcu_read_unlock+0x17/0x60 [ 82.532798][ T5731] ? rcu_read_unlock+0x17/0x60 [ 82.532814][ T5731] ? find_held_lock+0x2b/0x80 [ 82.532829][ T5731] ? rcu_read_unlock+0x17/0x60 [ 82.532848][ T5731] charge_memcg+0x1ae/0x210 [ 82.532864][ T5731] __mem_cgroup_charge+0x2b/0x1c0 [ 82.532883][ T5731] do_wp_page+0xe40/0x45c0 [ 82.532900][ T5731] ? lock_acquire+0x1d1/0x380 [ 82.532911][ T5731] ? __pfx_do_wp_page+0x10/0x10 [ 82.532926][ T5731] ? do_raw_spin_lock+0x128/0x260 [ 82.532940][ T5731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.532958][ T5731] __handle_mm_fault+0x1cd2/0x2f60 [ 82.532976][ T5731] ? lock_vma_under_rcu+0x11d/0x590 [ 82.532990][ T5731] ? __pfx___handle_mm_fault+0x10/0x10 [ 82.533009][ T5731] ? lock_vma_under_rcu+0x17c/0x590 [ 82.533032][ T5731] handle_mm_fault+0x363/0xa20 [ 82.533056][ T5731] do_user_addr_fault+0x59c/0x12f0 [ 82.533075][ T5731] exc_page_fault+0x6f/0xd0 [ 82.533090][ T5731] asm_exc_page_fault+0x26/0x30 [ 82.533100][ T5731] RIP: 0033:0x7f0330e56dc7 [ 82.533111][ T5731] Code: 00 e8 cd 54 ff ff 85 c0 74 54 49 8b 34 24 8b 54 24 0c 31 c0 48 8d 3d 3e e2 1d 00 e8 03 b7 ff ff 8b 44 24 6c 8b 74 24 08 89 ef <49> 89 9c 24 b8 00 00 00 49 8d 4c 24 60 ba 40 00 00 00 41 89 84 24 [ 82.533122][ T5731] RSP: 002b:00007ffd7cf26490 EFLAGS: 00010202 [ 82.533131][ T5731] RAX: 0000000000000004 RBX: 00007ffd7cf26510 RCX: 0000000000000001 [ 82.533138][ T5731] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.533145][ T5731] RBP: 0000000000000003 R08: 00007ffd7cf264ac R09: 0000000000000000 [ 82.533151][ T5731] R10: 00007ffd7cf26510 R11: 0000000000000216 R12: 00007f03311effc0 [ 82.533158][ T5731] R13: 00007ffd7cf264ac R14: 0000000000000000 R15: 00007f03311f2180 [ 82.533172][ T5731] [ 82.565385][ T5731] memory: usage 307200kB, limit 307200kB, failcnt 124373 [ 82.565397][ T5731] memory+swap: usage 431940kB, limit 9007199254740988kB, failcnt 0 [ 82.565404][ T5731] kmem: usage 5476kB, limit 9007199254740988kB, failcnt 0 [ 82.565411][ T5731] Memory cgroup stats for /syz1: [ 82.565541][ T5731] cache 308846592 [ 82.565546][ T5731] rss 61440 [ 82.565550][ T5731] rss_huge 0 [ 82.565554][ T5731] shmem 308547584 [ 82.565557][ T5731] mapped_file 270336 [ 82.565561][ T5731] dirty 0 [ 82.565565][ T5731] writeback 0 [ 82.565568][ T5731] workingset_refault_anon 6 [ 82.565572][ T5731] workingset_refault_file 151038 [ 82.565577][ T5731] swap 127733760 [ 82.565651][ T5731] swapcached 144269312 [ 82.565656][ T5731] pgpgin 365592 [ 82.565660][ T5731] pgpgout 290675 [ 82.565664][ T5731] pgfault 40857 [ 82.565668][ T5731] pgmajfault 1718 [ 82.565671][ T5731] inactive_anon 294268928 [ 82.565675][ T5731] active_anon 14143488 [ 82.565679][ T5731] inactive_file 57344 [ 82.565683][ T5731] active_file 8192 [ 82.565687][ T5731] unevictable 0 [ 82.565691][ T5731] hierarchical_memory_limit 314572800 [ 82.565695][ T5731] hierarchical_memsw_limit 9223372036854771712 [ 82.565700][ T5731] total_cache 308846592 [ 82.565704][ T5731] total_rss 61440 [ 82.565707][ T5731] total_rss_huge 0 [ 82.565711][ T5731] total_shmem 308547584 [ 82.565715][ T5731] total_mapped_file 270336 [ 82.565719][ T5731] total_dirty 0 [ 82.565723][ T5731] total_writeback 0 [ 82.565726][ T5731] total_workingset_refault_anon 6 [ 82.565731][ T5731] total_workingset_refault_file 151038 [ 82.565735][ T5731] total_swap 127733760 [ 82.565739][ T5731] total_swapcached 144269312 [ 82.565743][ T5731] total_pgpgin 365592 [ 82.565747][ T5731] total_pgpgout 290675 [ 82.565751][ T5731] total_pgfault 40857 [ 82.565754][ T5731] total_pgmajfault 1718 [ 82.565758][ T5731] total_inactive_anon 294268928 [ 82.565762][ T5731] total_active_anon 14143488 [ 82.565766][ T5731] total_inactive_file 57344 [ 82.565771][ T5731] total_active_file 8192 [ 82.565835][ T5731] total_unevictable 0 [ 82.565840][ T5731] anon_cost 0 [ 82.565843][ T5731] file_cost 0 [ 82.565848][ T5731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6988,uid=0 [ 82.566014][ T5731] Memory cgroup out of memory: Killed process 6988 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:8228kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 82.935034][ T44] audit: type=1400 audit(1789063975.947:673): avc: denied { write } for pid=7194 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.941657][ T44] audit: type=1400 audit(1789063975.957:674): avc: denied { read write } for pid=7194 comm="syz.1.283" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.941980][ T44] audit: type=1400 audit(1789063975.957:675): avc: denied { open } for pid=7194 comm="syz.1.283" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.945080][ T44] audit: type=1400 audit(1789063975.957:676): avc: denied { map } for pid=7194 comm="syz.1.283" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.977676][ T7199] FAULT_INJECTION: forcing a failure. [ 82.977676][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 82.977695][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) [ 82.977708][ T7199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.977715][ T7199] Call Trace: [ 82.977719][ T7199] [ 82.977724][ T7199] dump_stack_lvl+0x100/0x190 [ 82.977744][ T7199] should_fail_ex.cold+0x5/0xa [ 82.977760][ T7199] should_failslab+0xc2/0x120 [ 82.977777][ T7199] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.977794][ T7199] ? alloc_netdev_mqs+0xea8/0x15c0 [ 82.977819][ T7199] alloc_netdev_mqs+0xea8/0x15c0 [ 82.977835][ T7199] __ip_tunnel_create+0x398/0x670 [ 82.977851][ T7199] ? __pfx___ip_tunnel_create+0x10/0x10 [ 82.977866][ T7199] ? bpf_lsm_capable+0x9/0x10 [ 82.977881][ T7199] ? security_capable+0x80/0x260 [ 82.977900][ T7199] ip_tunnel_ctl+0x540/0xb80 [ 82.977916][ T7199] ipip_tunnel_ctl+0xfb/0x270 [ 82.977931][ T7199] ? __pfx_ipip_tunnel_ctl+0x10/0x10 [ 82.977946][ T7199] vif_add+0x35a/0x15c0 [ 82.977956][ T7199] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.977974][ T7199] ? __pfx_vif_add+0x10/0x10 [ 82.977985][ T7199] ? cred_has_capability.isra.0+0x186/0x300 [ 82.978000][ T7199] ? lock_acquire+0x1d1/0x380 [ 82.978013][ T7199] ? __might_fault+0xc5/0x140 [ 82.978036][ T7199] ip_mroute_setsockopt+0x108f/0x12b0 [ 82.978060][ T7199] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 82.978076][ T7199] ? avc_has_perm_noaudit+0x145/0x3b0 [ 82.978095][ T7199] ? __pfx_avc_has_perm+0x10/0x10 [ 82.978113][ T7199] do_ip_setsockopt+0x382/0x3310 [ 82.978132][ T7199] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 82.978148][ T7199] ? __pfx_sock_has_perm+0x10/0x10 [ 82.978165][ T7199] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 82.978179][ T7199] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 82.978198][ T7199] ip_setsockopt+0x5a/0xf0 [ 82.978215][ T7199] raw_setsockopt+0x60/0x1b0 [ 82.978231][ T7199] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.978246][ T7199] do_sock_setsockopt+0xf3/0x1d0 [ 82.978262][ T7199] __sys_setsockopt+0x195/0x220 [ 82.978276][ T7199] __x64_sys_setsockopt+0xbd/0x160 [ 82.978287][ T7199] ? do_syscall_64+0xae/0x790 [ 82.978301][ T7199] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.978315][ T7199] do_syscall_64+0x123/0x790 [ 82.978330][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.978341][ T7199] RIP: 0033:0x7f8bbdf9e159 [ 82.978351][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.978362][ T7199] RSP: 002b:00007f8bbc1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.978374][ T7199] RAX: ffffffffffffffda RBX: 00007f8bbe225fa0 RCX: 00007f8bbdf9e159 [ 82.978381][ T7199] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 82.978388][ T7199] RBP: 00007f8bbe03503b R08: 0000000000000010 R09: 0000000000000000 [ 82.978394][ T7199] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 82.978401][ T7199] R13: 00007f8bbe226038 R14: 00007f8bbe225fa0 R15: 00007fffdbabdcf8 [ 82.978415][ T7199] [ 83.030483][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 83.140303][ T44] audit: type=1400 audit(1789063976.157:677): avc: denied { create } for pid=7201 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.481642][ T6991] syz.1.234 (6991) used greatest stack depth: 18600 bytes left [ 83.586395][ T851] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 83.600787][ T6981] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 83.600808][ T6981] CPU: 3 UID: 0 PID: 6981 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 83.600821][ T6981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.600827][ T6981] Call Trace: [ 83.600831][ T6981] [ 83.600836][ T6981] dump_stack_lvl+0x100/0x190 [ 83.600856][ T6981] dump_header+0xfb/0x606 [ 83.600870][ T6981] oom_kill_process.cold+0xd/0x380 [ 83.600883][ T6981] out_of_memory+0x340/0x14f0 [ 83.600901][ T6981] ? __pfx_out_of_memory+0x10/0x10 [ 83.600919][ T6981] mem_cgroup_out_of_memory+0xc6/0x130 [ 83.600932][ T6981] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 83.600943][ T6981] ? find_held_lock+0x2b/0x80 [ 83.600961][ T6981] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.600977][ T6981] ? _raw_spin_unlock+0x28/0x50 [ 83.600990][ T6981] try_charge_memcg+0x783/0xf60 [ 83.601009][ T6981] ? __pfx_try_charge_memcg+0x10/0x10 [ 83.601024][ T6981] ? find_held_lock+0x2b/0x80 [ 83.601039][ T6981] ? rcu_read_unlock+0x17/0x60 [ 83.601055][ T6981] ? rcu_read_unlock+0x17/0x60 [ 83.601071][ T6981] ? find_held_lock+0x2b/0x80 [ 83.601086][ T6981] ? rcu_read_unlock+0x17/0x60 [ 83.601105][ T6981] charge_memcg+0x1ae/0x210 [ 83.601121][ T6981] __mem_cgroup_charge+0x2b/0x1c0 [ 83.601140][ T6981] shmem_alloc_and_add_folio+0x451/0xd40 [ 83.601174][ T6981] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 83.601194][ T6981] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 83.601218][ T6981] shmem_get_folio_gfp+0x75b/0x1980 [ 83.601238][ T6981] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 83.601255][ T6981] ? vm_normal_page+0x1d1/0x380 [ 83.601267][ T6981] ? __pfx_vm_normal_page+0x10/0x10 [ 83.601282][ T6981] shmem_write_begin+0x1a4/0x420 [ 83.601300][ T6981] ? __pfx_shmem_write_begin+0x10/0x10 [ 83.601317][ T6981] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 83.601337][ T6981] generic_perform_write+0x292/0xa40 [ 83.601351][ T6981] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 83.601365][ T6981] ? __pfx_generic_perform_write+0x10/0x10 [ 83.601381][ T6981] ? file_update_time_flags+0x38c/0x520 [ 83.601399][ T6981] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 83.601410][ T6981] shmem_file_write_iter+0x10e/0x140 [ 83.601422][ T6981] __kernel_write_iter+0x2ac/0x930 [ 83.601434][ T6981] ? __pfx___kernel_write_iter+0x10/0x10 [ 83.601445][ T6981] ? cgroup1_freezing+0x12c/0x3b0 [ 83.601467][ T6981] ? cgroup1_freezing+0x136/0x3b0 [ 83.601484][ T6981] ? freezing_slow_path+0xb5/0x1a0 [ 83.601503][ T6981] dump_user_range+0x3f9/0xad0 [ 83.601517][ T6981] ? __pfx_dump_user_range+0x10/0x10 [ 83.601533][ T6981] ? __pfx_writenote+0x10/0x10 [ 83.601545][ T6981] ? elf_core_dump+0x1f25/0x3d20 [ 83.601559][ T6981] elf_core_dump+0x2d68/0x3d20 [ 83.601579][ T6981] ? __pfx_elf_core_dump+0x10/0x10 [ 83.601590][ T6981] ? kasan_save_stack+0x3f/0x50 [ 83.601602][ T6981] ? kasan_save_stack+0x30/0x50 [ 83.601613][ T6981] ? kasan_save_track+0x14/0x30 [ 83.601625][ T6981] ? __kasan_kmalloc+0xaa/0xb0 [ 83.601636][ T6981] ? vfs_coredump+0x21f6/0x54a0 [ 83.601646][ T6981] ? get_signal+0x1f2a/0x21e0 [ 83.601657][ T6981] ? arch_do_signal_or_restart+0x91/0x7e0 [ 83.601677][ T6981] ? 0xffffffffff600000 [ 83.601704][ T6981] ? lock_acquire+0x1d1/0x380 [ 83.601715][ T6981] ? get_signal+0x1f2a/0x21e0 [ 83.601731][ T6981] ? vfs_coredump+0x281a/0x54a0 [ 83.601741][ T6981] vfs_coredump+0x281a/0x54a0 [ 83.601757][ T6981] ? __pfx_vfs_coredump+0x10/0x10 [ 83.601768][ T6981] ? __lock_acquire+0x5c0/0x1f40 [ 83.601783][ T6981] ? __lock_acquire+0x5c0/0x1f40 [ 83.601796][ T6981] ? lock_acquire+0x1d1/0x380 [ 83.601807][ T6981] ? unwind_next_frame+0xbd/0x2090 [ 83.601825][ T6981] ? lock_acquire+0x1d1/0x380 [ 83.601840][ T6981] ? bpf_ksym_find+0x128/0x1c0 [ 83.601857][ T6981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.601879][ T6981] ? arch_stack_walk+0xa6/0xf0 [ 83.601898][ T6981] ? __sigqueue_free+0xbe/0x2a0 [ 83.601913][ T6981] ? stack_trace_save+0x8e/0xc0 [ 83.601930][ T6981] ? __pfx_stack_trace_save+0x10/0x10 [ 83.601947][ T6981] ? stack_depot_save_flags+0x27/0x9f0 [ 83.601962][ T6981] ? __lock_acquire+0x5c0/0x1f40 [ 83.601998][ T6981] ? proc_coredump_connector+0x2d3/0x4f0 [ 83.602015][ T6981] ? __pfx_proc_coredump_connector+0x10/0x10 [ 83.602035][ T6981] ? rcu_is_watching+0x13/0xc0 [ 83.602052][ T6981] get_signal+0x1f2a/0x21e0 [ 83.602070][ T6981] ? __pfx_get_signal+0x10/0x10 [ 83.602081][ T6981] ? __pfx_force_sig_fault+0x10/0x10 [ 83.602096][ T6981] arch_do_signal_or_restart+0x91/0x7e0 [ 83.602113][ T6981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 83.602138][ T6981] irqentry_exit+0x402/0xa10 [ 83.602155][ T6981] asm_exc_page_fault+0x26/0x30 [ 83.602166][ T6981] RIP: 0033:0x7f0330f9e159 [ 83.602179][ T6981] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 83.602184][ T6981] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 83.602193][ T6981] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 83.602200][ T6981] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 83.602210][ T6981] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 83.602216][ T6981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 83.602223][ T6981] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 83.602237][ T6981] [ 83.613070][ T6981] memory: usage 307200kB, limit 307200kB, failcnt 129461 [ 83.613081][ T6981] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 83.613088][ T6981] kmem: usage 5684kB, limit 9007199254740988kB, failcnt 0 [ 83.613094][ T6981] Memory cgroup stats for /syz1: [ 83.613175][ T6981] cache 308539392 [ 83.613181][ T6981] rss 208896 [ 83.613185][ T6981] rss_huge 0 [ 83.613188][ T6981] shmem 307716096 [ 83.613192][ T6981] mapped_file 770048 [ 83.613196][ T6981] dirty 552960 [ 83.613200][ T6981] writeback 0 [ 83.613209][ T6981] workingset_refault_anon 6 [ 83.613213][ T6981] workingset_refault_file 154022 [ 83.613218][ T6981] swap 127991808 [ 83.613221][ T6981] swapcached 158990336 [ 83.613225][ T6981] pgpgin 380951 [ 83.613229][ T6981] pgpgout 306083 [ 83.613232][ T6981] pgfault 46624 [ 83.613236][ T6981] pgmajfault 6817 [ 83.613240][ T6981] inactive_anon 42860544 [ 83.613244][ T6981] active_anon 265068544 [ 83.613248][ T6981] inactive_file 0 [ 83.613252][ T6981] active_file 4096 [ 83.613255][ T6981] unevictable 770048 [ 83.613259][ T6981] hierarchical_memory_limit 314572800 [ 83.613264][ T6981] hierarchical_memsw_limit 9223372036854771712 [ 83.613268][ T6981] total_cache 308539392 [ 83.613272][ T6981] total_rss 208896 [ 83.613276][ T6981] total_rss_huge 0 [ 83.613280][ T6981] total_shmem 307716096 [ 83.613284][ T6981] total_mapped_file 770048 [ 83.613287][ T6981] total_dirty 552960 [ 83.613291][ T6981] total_writeback 0 [ 83.613295][ T6981] total_workingset_refault_anon 6 [ 83.613299][ T6981] total_workingset_refault_file 154022 [ 83.613304][ T6981] total_swap 127991808 [ 83.613308][ T6981] total_swapcached 158990336 [ 83.613312][ T6981] total_pgpgin 380951 [ 83.613316][ T6981] total_pgpgout 306083 [ 83.613319][ T6981] total_pgfault 46624 [ 83.613323][ T6981] total_pgmajfault 6817 [ 83.613327][ T6981] total_inactive_anon 42860544 [ 83.613331][ T6981] total_active_anon 265068544 [ 83.613335][ T6981] total_inactive_file 0 [ 83.613339][ T6981] total_active_file 4096 [ 83.613343][ T6981] total_unevictable 770048 [ 83.613347][ T6981] anon_cost 0 [ 83.613351][ T6981] file_cost 0 [ 83.613355][ T6981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.283,pid=7194,uid=0 [ 83.614344][ T6981] Memory cgroup out of memory: Killed process 7194 (syz.1.283) total-vm:102384kB, anon-rss:1428kB, file-rss:24064kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 83.756519][ T851] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 83.759635][ T851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.759654][ T851] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 83.761063][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.761083][ T851] usb 5-1: Product: syz [ 83.761095][ T851] usb 5-1: Manufacturer: syz [ 83.820261][ T44] audit: type=1400 audit(1789063976.847:678): avc: denied { create } for pid=7216 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.822709][ T44] audit: type=1400 audit(1789063976.847:679): avc: denied { write } for pid=7216 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.966506][ T6975] syz.1.234 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 83.966529][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 83.966545][ T6975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.966552][ T6975] Call Trace: [ 83.966556][ T6975] [ 83.966561][ T6975] dump_stack_lvl+0x100/0x190 [ 83.966582][ T6975] dump_header+0xfb/0x606 [ 83.966595][ T6975] oom_kill_process.cold+0xd/0x380 [ 83.966609][ T6975] out_of_memory+0x340/0x14f0 [ 83.966627][ T6975] ? __pfx_out_of_memory+0x10/0x10 [ 83.966645][ T6975] mem_cgroup_out_of_memory+0xc6/0x130 [ 83.966658][ T6975] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 83.966669][ T6975] ? find_held_lock+0x2b/0x80 [ 83.966688][ T6975] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.966702][ T6975] ? _raw_spin_unlock+0x28/0x50 [ 83.966718][ T6975] try_charge_memcg+0x783/0xf60 [ 83.966740][ T6975] ? __pfx_try_charge_memcg+0x10/0x10 [ 83.966754][ T6975] ? find_held_lock+0x2b/0x80 [ 83.966769][ T6975] ? rcu_read_unlock+0x17/0x60 [ 83.966786][ T6975] ? rcu_read_unlock+0x17/0x60 [ 83.966802][ T6975] ? find_held_lock+0x2b/0x80 [ 83.966817][ T6975] ? rcu_read_unlock+0x17/0x60 [ 83.966836][ T6975] charge_memcg+0x1ae/0x210 [ 83.966853][ T6975] __mem_cgroup_charge+0x2b/0x1c0 [ 83.966871][ T6975] filemap_add_folio+0xe7/0x6a0 [ 83.966887][ T6975] ? __pfx_filemap_add_folio+0x10/0x10 [ 83.966906][ T6975] __filemap_get_folio_mpol+0x584/0x1320 [ 83.966926][ T6975] filemap_fault+0x879/0x3130 [ 83.966944][ T6975] ? __pfx_filemap_fault+0x10/0x10 [ 83.966963][ T6975] ? find_held_lock+0x2b/0x80 [ 83.966980][ T6975] ? __pfx_filemap_map_pages+0x10/0x10 [ 83.966993][ T6975] __do_fault+0x10b/0x440 [ 83.967006][ T6975] do_fault+0xb3f/0x1830 [ 83.967020][ T6975] ? __pfx_do_fault+0x10/0x10 [ 83.967032][ T6975] ? rcu_read_unlock+0x2d/0xb0 [ 83.967048][ T6975] ? rcu_read_unlock+0x2d/0xb0 [ 83.967064][ T6975] ? __pte_offset_map+0x179/0x310 [ 83.967078][ T6975] __handle_mm_fault+0x150b/0x2f60 [ 83.967097][ T6975] ? __pfx___handle_mm_fault+0x10/0x10 [ 83.967112][ T6975] ? pte_offset_map_lock+0x174/0x320 [ 83.967125][ T6975] ? find_held_lock+0x2b/0x80 [ 83.967139][ T6975] ? find_held_lock+0x2b/0x80 [ 83.967154][ T6975] ? follow_page_pte+0x536/0x1050 [ 83.967175][ T6975] handle_mm_fault+0x363/0xa20 [ 83.967194][ T6975] __get_user_pages+0x8ae/0x2c30 [ 83.967211][ T6975] ? lock_acquire+0x1d1/0x380 [ 83.967223][ T6975] ? __pfx___get_user_pages+0x10/0x10 [ 83.967236][ T6975] ? __pfx___might_resched+0x10/0x10 [ 83.967247][ T6975] ? cgroup1_freezing+0x27/0x3b0 [ 83.967268][ T6975] get_dump_page+0x27e/0x3d0 [ 83.967281][ T6975] ? __pfx_get_dump_page+0x10/0x10 [ 83.967294][ T6975] ? cgroup1_freezing+0x136/0x3b0 [ 83.967311][ T6975] ? freezing_slow_path+0xb5/0x1a0 [ 83.967330][ T6975] dump_user_range+0x18d/0xad0 [ 83.967344][ T6975] ? __pfx_dump_user_range+0x10/0x10 [ 83.967360][ T6975] ? __pfx_writenote+0x10/0x10 [ 83.967372][ T6975] ? elf_core_dump+0x1f25/0x3d20 [ 83.967387][ T6975] elf_core_dump+0x2d68/0x3d20 [ 83.967406][ T6975] ? __pfx_elf_core_dump+0x10/0x10 [ 83.967418][ T6975] ? kasan_save_stack+0x3f/0x50 [ 83.967430][ T6975] ? kasan_save_stack+0x30/0x50 [ 83.967441][ T6975] ? kasan_save_track+0x14/0x30 [ 83.967452][ T6975] ? __kasan_kmalloc+0xaa/0xb0 [ 83.967484][ T6975] ? vfs_coredump+0x21f6/0x54a0 [ 83.967494][ T6975] ? get_signal+0x1f2a/0x21e0 [ 83.967506][ T6975] ? arch_do_signal_or_restart+0x91/0x7e0 [ 83.967526][ T6975] ? 0xffffffffff600000 [ 83.967556][ T6975] ? lock_acquire+0x1d1/0x380 [ 83.967567][ T6975] ? get_signal+0x1f2a/0x21e0 [ 83.967583][ T6975] ? vfs_coredump+0x281a/0x54a0 [ 83.967593][ T6975] vfs_coredump+0x281a/0x54a0 [ 83.967609][ T6975] ? __pfx_vfs_coredump+0x10/0x10 [ 83.967620][ T6975] ? __lock_acquire+0x5c0/0x1f40 [ 83.967635][ T6975] ? __lock_acquire+0x5c0/0x1f40 [ 83.967648][ T6975] ? lock_acquire+0x1d1/0x380 [ 83.967659][ T6975] ? unwind_next_frame+0xbd/0x2090 [ 83.967677][ T6975] ? lock_acquire+0x1d1/0x380 [ 83.967692][ T6975] ? bpf_ksym_find+0x128/0x1c0 [ 83.967709][ T6975] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.967732][ T6975] ? arch_stack_walk+0xa6/0xf0 [ 83.967750][ T6975] ? __sigqueue_free+0xbe/0x2a0 [ 83.967765][ T6975] ? stack_trace_save+0x8e/0xc0 [ 83.967781][ T6975] ? __pfx_stack_trace_save+0x10/0x10 [ 83.967799][ T6975] ? stack_depot_save_flags+0x27/0x9f0 [ 83.967813][ T6975] ? __lock_acquire+0x5c0/0x1f40 [ 83.967849][ T6975] ? proc_coredump_connector+0x2d3/0x4f0 [ 83.967866][ T6975] ? __pfx_proc_coredump_connector+0x10/0x10 [ 83.967886][ T6975] ? rcu_is_watching+0x13/0xc0 [ 83.967903][ T6975] get_signal+0x1f2a/0x21e0 [ 83.967921][ T6975] ? __pfx_get_signal+0x10/0x10 [ 83.967944][ T6975] ? __pfx_force_sig_fault+0x10/0x10 [ 83.967961][ T6975] arch_do_signal_or_restart+0x91/0x7e0 [ 83.967978][ T6975] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 83.968003][ T6975] irqentry_exit+0x402/0xa10 [ 83.968020][ T6975] asm_exc_page_fault+0x26/0x30 [ 83.968031][ T6975] RIP: 0033:0x7f0330f9e159 [ 83.968044][ T6975] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 83.968049][ T6975] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 83.968059][ T6975] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 83.968066][ T6975] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 83.968072][ T6975] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 83.968079][ T6975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 83.968085][ T6975] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 83.968100][ T6975] [ 83.968127][ T6975] memory: usage 307192kB, limit 307200kB, failcnt 130754 [ 83.968135][ T6975] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 83.968142][ T6975] kmem: usage 5608kB, limit 9007199254740988kB, failcnt 0 [ 83.968148][ T6975] Memory cgroup stats for /syz1: [ 83.968224][ T6975] cache 308617216 [ 83.968229][ T6975] rss 200704 [ 83.968233][ T6975] rss_huge 0 [ 83.968236][ T6975] shmem 307785728 [ 83.968240][ T6975] mapped_file 0 [ 83.968244][ T6975] dirty 552960 [ 83.968248][ T6975] writeback 0 [ 83.968251][ T6975] workingset_refault_anon 6 [ 83.968255][ T6975] workingset_refault_file 154038 [ 83.968260][ T6975] swap 127991808 [ 83.968264][ T6975] swapcached 158990336 [ 83.968268][ T6975] pgpgin 380987 [ 83.968271][ T6975] pgpgout 306102 [ 83.968275][ T6975] pgfault 46643 [ 83.968279][ T6975] pgmajfault 6834 [ 83.968283][ T6975] inactive_anon 163065856 [ 83.968287][ T6975] active_anon 144924672 [ 83.968291][ T6975] inactive_file 684032 [ 83.968295][ T6975] active_file 24576 [ 83.968299][ T6975] unevictable 0 [ 83.968332][ T6975] hierarchical_memory_limit 314572800 [ 83.968338][ T6975] hierarchical_memsw_limit 9223372036854771712 [ 83.968343][ T6975] total_cache 308617216 [ 83.968347][ T6975] total_rss 200704 [ 83.968350][ T6975] total_rss_huge 0 [ 83.968354][ T6975] total_shmem 307785728 [ 83.968358][ T6975] total_mapped_file 0 [ 83.968362][ T6975] total_dirty 552960 [ 83.968366][ T6975] total_writeback 0 [ 83.968370][ T6975] total_workingset_refault_anon 6 [ 83.968374][ T6975] total_workingset_refault_file 154038 [ 83.968379][ T6975] total_swap 127991808 [ 83.968383][ T6975] total_swapcached 158990336 [ 83.968387][ T6975] total_pgpgin 380987 [ 83.968391][ T6975] total_pgpgout 306102 [ 83.968394][ T6975] total_pgfault 46643 [ 83.968398][ T6975] total_pgmajfault 6834 [ 83.968402][ T6975] total_inactive_anon 163065856 [ 83.968406][ T6975] total_active_anon 144924672 [ 83.968411][ T6975] total_inactive_file 684032 [ 83.968415][ T6975] total_active_file 24576 [ 83.968419][ T6975] total_unevictable 0 [ 83.968423][ T6975] anon_cost 0 [ 83.968426][ T6975] file_cost 0 [ 83.968430][ T6975] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6981,uid=0 [ 83.968482][ T6975] Memory cgroup out of memory: Killed process 6981 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 83.984998][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 83.985134][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 83.989524][ T851] usb 5-1: USB disconnect, device number 14 [ 84.137986][ T7219] ceph: No mds server is up or the cluster is laggy [ 84.153888][ T6983] syz.1.234 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.153917][ T6983] CPU: 3 UID: 0 PID: 6983 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 84.153934][ T6983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.153943][ T6983] Call Trace: [ 84.153949][ T6983] [ 84.153955][ T6983] dump_stack_lvl+0x100/0x190 [ 84.153981][ T6983] dump_header+0xfb/0x606 [ 84.153999][ T6983] oom_kill_process.cold+0xd/0x380 [ 84.154019][ T6983] out_of_memory+0x340/0x14f0 [ 84.154045][ T6983] ? __pfx_out_of_memory+0x10/0x10 [ 84.154073][ T6983] mem_cgroup_out_of_memory+0xc6/0x130 [ 84.154094][ T6983] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 84.154109][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154135][ T6983] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.154154][ T6983] ? _raw_spin_unlock+0x28/0x50 [ 84.154191][ T6983] try_charge_memcg+0x783/0xf60 [ 84.154221][ T6983] ? __pfx_try_charge_memcg+0x10/0x10 [ 84.154240][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154259][ T6983] ? rcu_read_unlock+0x17/0x60 [ 84.154279][ T6983] ? rcu_read_unlock+0x17/0x60 [ 84.154300][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154320][ T6983] ? rcu_read_unlock+0x17/0x60 [ 84.154345][ T6983] charge_memcg+0x1ae/0x210 [ 84.154367][ T6983] __mem_cgroup_charge+0x2b/0x1c0 [ 84.154391][ T6983] filemap_add_folio+0xe7/0x6a0 [ 84.154411][ T6983] ? __pfx_filemap_add_folio+0x10/0x10 [ 84.154437][ T6983] __filemap_get_folio_mpol+0x584/0x1320 [ 84.154463][ T6983] filemap_fault+0x879/0x3130 [ 84.154488][ T6983] ? __pfx_filemap_fault+0x10/0x10 [ 84.154516][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154541][ T6983] ? __pfx_filemap_map_pages+0x10/0x10 [ 84.154564][ T6983] __do_fault+0x10b/0x440 [ 84.154586][ T6983] do_fault+0xb3f/0x1830 [ 84.154620][ T6983] ? __pfx_do_fault+0x10/0x10 [ 84.154638][ T6983] ? rcu_read_unlock+0x2d/0xb0 [ 84.154660][ T6983] ? rcu_read_unlock+0x2d/0xb0 [ 84.154681][ T6983] ? __pte_offset_map+0x179/0x310 [ 84.154700][ T6983] __handle_mm_fault+0x150b/0x2f60 [ 84.154726][ T6983] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.154747][ T6983] ? pte_offset_map_lock+0x174/0x320 [ 84.154765][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154785][ T6983] ? find_held_lock+0x2b/0x80 [ 84.154804][ T6983] ? follow_page_pte+0x536/0x1050 [ 84.154835][ T6983] handle_mm_fault+0x363/0xa20 [ 84.154861][ T6983] __get_user_pages+0x8ae/0x2c30 [ 84.154886][ T6983] ? lock_acquire+0x1d1/0x380 [ 84.154902][ T6983] ? __pfx___get_user_pages+0x10/0x10 [ 84.154921][ T6983] ? __pfx___might_resched+0x10/0x10 [ 84.154937][ T6983] ? cgroup1_freezing+0x27/0x3b0 [ 84.154965][ T6983] get_dump_page+0x27e/0x3d0 [ 84.154984][ T6983] ? __pfx_get_dump_page+0x10/0x10 [ 84.155024][ T6983] ? cgroup1_freezing+0x136/0x3b0 [ 84.155047][ T6983] ? freezing_slow_path+0xb5/0x1a0 [ 84.155071][ T6983] dump_user_range+0x18d/0xad0 [ 84.155092][ T6983] ? __pfx_dump_user_range+0x10/0x10 [ 84.155116][ T6983] ? __pfx_writenote+0x10/0x10 [ 84.155133][ T6983] ? elf_core_dump+0x1f25/0x3d20 [ 84.155153][ T6983] elf_core_dump+0x2d68/0x3d20 [ 84.155183][ T6983] ? __pfx_elf_core_dump+0x10/0x10 [ 84.155198][ T6983] ? kasan_save_stack+0x3f/0x50 [ 84.155213][ T6983] ? kasan_save_stack+0x30/0x50 [ 84.155229][ T6983] ? kasan_save_track+0x14/0x30 [ 84.155243][ T6983] ? __kasan_kmalloc+0xaa/0xb0 [ 84.155258][ T6983] ? vfs_coredump+0x21f6/0x54a0 [ 84.155272][ T6983] ? get_signal+0x1f2a/0x21e0 [ 84.155288][ T6983] ? arch_do_signal_or_restart+0x91/0x7e0 [ 84.155315][ T6983] ? 0xffffffffff600000 [ 84.155356][ T6983] ? lock_acquire+0x1d1/0x380 [ 84.155371][ T6983] ? get_signal+0x1f2a/0x21e0 [ 84.155394][ T6983] ? vfs_coredump+0x281a/0x54a0 [ 84.155408][ T6983] vfs_coredump+0x281a/0x54a0 [ 84.155433][ T6983] ? __pfx_vfs_coredump+0x10/0x10 [ 84.155448][ T6983] ? __lock_acquire+0x5c0/0x1f40 [ 84.155501][ T6983] ? __lock_acquire+0x5c0/0x1f40 [ 84.155525][ T6983] ? lock_acquire+0x1d1/0x380 [ 84.155538][ T6983] ? unwind_next_frame+0xbd/0x2090 [ 84.155563][ T6983] ? lock_acquire+0x1d1/0x380 [ 84.155583][ T6983] ? bpf_ksym_find+0x128/0x1c0 [ 84.155611][ T6983] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 84.155642][ T6983] ? arch_stack_walk+0xa6/0xf0 [ 84.155669][ T6983] ? __sigqueue_free+0xbe/0x2a0 [ 84.155689][ T6983] ? stack_trace_save+0x8e/0xc0 [ 84.155711][ T6983] ? __pfx_stack_trace_save+0x10/0x10 [ 84.155733][ T6983] ? stack_depot_save_flags+0x27/0x9f0 [ 84.155752][ T6983] ? __lock_acquire+0x5c0/0x1f40 [ 84.155805][ T6983] ? proc_coredump_connector+0x2d3/0x4f0 [ 84.155828][ T6983] ? __pfx_proc_coredump_connector+0x10/0x10 [ 84.155855][ T6983] ? rcu_is_watching+0x13/0xc0 [ 84.155879][ T6983] get_signal+0x1f2a/0x21e0 [ 84.155906][ T6983] ? __pfx_get_signal+0x10/0x10 [ 84.155922][ T6983] ? __pfx_force_sig_fault+0x10/0x10 [ 84.155943][ T6983] arch_do_signal_or_restart+0x91/0x7e0 [ 84.155967][ T6983] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 84.156001][ T6983] irqentry_exit+0x402/0xa10 [ 84.156024][ T6983] asm_exc_page_fault+0x26/0x30 [ 84.156039][ T6983] RIP: 0033:0x7f0330f9e159 [ 84.156060][ T6983] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 84.156067][ T6983] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 84.156079][ T6983] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 84.156088][ T6983] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 84.156097][ T6983] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 84.156106][ T6983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.156114][ T6983] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 84.156136][ T6983] [ 84.156272][ T6983] memory: usage 307200kB, limit 307200kB, failcnt 131666 [ 84.156284][ T6983] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 84.156293][ T6983] kmem: usage 5352kB, limit 9007199254740988kB, failcnt 0 [ 84.156302][ T6983] Memory cgroup stats for /syz1: [ 84.156410][ T6983] cache 309022720 [ 84.156418][ T6983] rss 61440 [ 84.156422][ T6983] rss_huge 0 [ 84.156427][ T6983] shmem 308973568 [ 84.156432][ T6983] mapped_file 12288 [ 84.156437][ T6983] dirty 0 [ 84.156444][ T6983] writeback 0 [ 84.156450][ T6983] workingset_refault_anon 6 [ 84.156456][ T6983] workingset_refault_file 154230 [ 84.156461][ T6983] swap 127991808 [ 84.156466][ T6983] swapcached 158990336 [ 84.156471][ T6983] pgpgin 381566 [ 84.156476][ T6983] pgpgout 306615 [ 84.156480][ T6983] pgfault 46934 [ 84.156485][ T6983] pgmajfault 7123 [ 84.156490][ T6983] inactive_anon 265789440 [ 84.156495][ T6983] active_anon 43245568 [ 84.156500][ T6983] inactive_file 0 [ 84.156505][ T6983] active_file 28672 [ 84.156510][ T6983] unevictable 0 [ 84.156515][ T6983] hierarchical_memory_limit 314572800 [ 84.156521][ T6983] hierarchical_memsw_limit 9223372036854771712 [ 84.156527][ T6983] total_cache 309022720 [ 84.156533][ T6983] total_rss 61440 [ 84.156538][ T6983] total_rss_huge 0 [ 84.156543][ T6983] total_shmem 308973568 [ 84.156550][ T6983] total_mapped_file 12288 [ 84.156557][ T6983] total_dirty 0 [ 84.156562][ T6983] total_writeback 0 [ 84.156567][ T6983] total_workingset_refault_anon 6 [ 84.156573][ T6983] total_workingset_refault_file 154230 [ 84.156579][ T6983] total_swap 127991808 [ 84.156590][ T6983] total_swapcached 158990336 [ 84.156596][ T6983] total_pgpgin 381566 [ 84.156601][ T6983] total_pgpgout 306615 [ 84.156611][ T6983] total_pgfault 46934 [ 84.156617][ T6983] total_pgmajfault 7123 [ 84.156622][ T6983] total_inactive_anon 265789440 [ 84.156627][ T6983] total_active_anon 43245568 [ 84.156633][ T6983] total_inactive_file 0 [ 84.156637][ T6983] total_active_file 28672 [ 84.156643][ T6983] total_unevictable 0 [ 84.156647][ T6983] anon_cost 0 [ 84.156652][ T6983] file_cost 0 [ 84.156657][ T6983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6980,uid=0 [ 84.156737][ T6983] Memory cgroup out of memory: Killed process 6980 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 84.374829][ T7219] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 84.374865][ T7219] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 84.374904][ T7219] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 84.406362][ T7219] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.413360][ T7219] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.435770][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.294'. [ 84.576039][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 84.870257][ T6817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.870272][ T6817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.000796][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.000938][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.000950][ T7257] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 85.000957][ T7257] UDF-fs: Scanning with blocksize 512 failed [ 85.006426][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.006491][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.006501][ T7257] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 85.006508][ T7257] UDF-fs: Scanning with blocksize 1024 failed [ 85.006783][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.006831][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.006842][ T7257] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 85.006848][ T7257] UDF-fs: Scanning with blocksize 2048 failed [ 85.007355][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.007400][ T7257] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.007410][ T7257] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 85.007418][ T7257] UDF-fs: Scanning with blocksize 4096 failed [ 85.007423][ T7257] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 85.131581][ T6989] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.131603][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 85.131615][ T6989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.131622][ T6989] Call Trace: [ 85.131627][ T6989] [ 85.131631][ T6989] dump_stack_lvl+0x100/0x190 [ 85.131652][ T6989] dump_header+0xfb/0x606 [ 85.131665][ T6989] oom_kill_process.cold+0xd/0x380 [ 85.131692][ T6989] out_of_memory+0x340/0x14f0 [ 85.131711][ T6989] ? __pfx_out_of_memory+0x10/0x10 [ 85.131729][ T6989] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.131742][ T6989] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.131753][ T6989] ? find_held_lock+0x2b/0x80 [ 85.131771][ T6989] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.131785][ T6989] ? _raw_spin_unlock+0x28/0x50 [ 85.131799][ T6989] try_charge_memcg+0x783/0xf60 [ 85.131819][ T6989] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.131834][ T6989] ? find_held_lock+0x2b/0x80 [ 85.131849][ T6989] ? rcu_read_unlock+0x17/0x60 [ 85.131864][ T6989] ? rcu_read_unlock+0x17/0x60 [ 85.131880][ T6989] ? find_held_lock+0x2b/0x80 [ 85.131895][ T6989] ? rcu_read_unlock+0x17/0x60 [ 85.131915][ T6989] charge_memcg+0x1ae/0x210 [ 85.131931][ T6989] __mem_cgroup_charge+0x2b/0x1c0 [ 85.131949][ T6989] shmem_alloc_and_add_folio+0x451/0xd40 [ 85.131969][ T6989] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 85.131986][ T6989] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 85.132003][ T6989] ? __lock_acquire+0x5c0/0x1f40 [ 85.132020][ T6989] shmem_get_folio_gfp+0x75b/0x1980 [ 85.132040][ T6989] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 85.132055][ T6989] ? inode_set_ctime_current+0x9c/0x850 [ 85.132071][ T6989] ? find_held_lock+0x2b/0x80 [ 85.132087][ T6989] ? timestamp_truncate+0x22e/0x2f0 [ 85.132104][ T6989] shmem_write_begin+0x1a4/0x420 [ 85.132121][ T6989] ? __pfx_shmem_write_begin+0x10/0x10 [ 85.132137][ T6989] ? inode_set_ctime_current+0x283/0x850 [ 85.132152][ T6989] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 85.132170][ T6989] ? inode_maybe_inc_iversion+0x169/0x220 [ 85.132185][ T6989] generic_perform_write+0x292/0xa40 [ 85.132198][ T6989] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.132213][ T6989] ? __pfx_generic_perform_write+0x10/0x10 [ 85.132227][ T6989] ? mnt_put_write_access_file+0x4e/0x100 [ 85.132242][ T6989] ? file_update_time_flags+0x38c/0x520 [ 85.132260][ T6989] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.132271][ T6989] shmem_file_write_iter+0x10e/0x140 [ 85.132283][ T6989] __kernel_write_iter+0x2ac/0x930 [ 85.132296][ T6989] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.132306][ T6989] ? cgroup1_freezing+0x12c/0x3b0 [ 85.132327][ T6989] ? cgroup1_freezing+0x136/0x3b0 [ 85.132344][ T6989] ? freezing_slow_path+0xb5/0x1a0 [ 85.132362][ T6989] dump_user_range+0x3f9/0xad0 [ 85.132376][ T6989] ? __pfx_dump_user_range+0x10/0x10 [ 85.132392][ T6989] ? __pfx_writenote+0x10/0x10 [ 85.132403][ T6989] ? elf_core_dump+0x1f25/0x3d20 [ 85.132418][ T6989] elf_core_dump+0x2d68/0x3d20 [ 85.132438][ T6989] ? __pfx_elf_core_dump+0x10/0x10 [ 85.132449][ T6989] ? kasan_save_stack+0x3f/0x50 [ 85.132460][ T6989] ? kasan_save_stack+0x30/0x50 [ 85.132471][ T6989] ? kasan_save_track+0x14/0x30 [ 85.132483][ T6989] ? __kasan_kmalloc+0xaa/0xb0 [ 85.132494][ T6989] ? vfs_coredump+0x21f6/0x54a0 [ 85.132504][ T6989] ? get_signal+0x1f2a/0x21e0 [ 85.132515][ T6989] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.132535][ T6989] ? 0xffffffffff600000 [ 85.132561][ T6989] ? lock_acquire+0x1d1/0x380 [ 85.132572][ T6989] ? get_signal+0x1f2a/0x21e0 [ 85.132589][ T6989] ? vfs_coredump+0x281a/0x54a0 [ 85.132599][ T6989] vfs_coredump+0x281a/0x54a0 [ 85.132615][ T6989] ? __pfx_vfs_coredump+0x10/0x10 [ 85.132626][ T6989] ? __lock_acquire+0x5c0/0x1f40 [ 85.132641][ T6989] ? __lock_acquire+0x5c0/0x1f40 [ 85.132654][ T6989] ? lock_acquire+0x1d1/0x380 [ 85.132665][ T6989] ? unwind_next_frame+0xbd/0x2090 [ 85.132682][ T6989] ? lock_acquire+0x1d1/0x380 [ 85.132697][ T6989] ? bpf_ksym_find+0x128/0x1c0 [ 85.132713][ T6989] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.132736][ T6989] ? arch_stack_walk+0xa6/0xf0 [ 85.132754][ T6989] ? __sigqueue_free+0xbe/0x2a0 [ 85.132769][ T6989] ? stack_trace_save+0x8e/0xc0 [ 85.132786][ T6989] ? __pfx_stack_trace_save+0x10/0x10 [ 85.132803][ T6989] ? stack_depot_save_flags+0x27/0x9f0 [ 85.132817][ T6989] ? __lock_acquire+0x5c0/0x1f40 [ 85.132853][ T6989] ? proc_coredump_connector+0x2d3/0x4f0 [ 85.132872][ T6989] ? __pfx_proc_coredump_connector+0x10/0x10 [ 85.132892][ T6989] ? rcu_is_watching+0x13/0xc0 [ 85.132909][ T6989] get_signal+0x1f2a/0x21e0 [ 85.132926][ T6989] ? __pfx_get_signal+0x10/0x10 [ 85.132938][ T6989] ? __pfx_force_sig_fault+0x10/0x10 [ 85.132953][ T6989] arch_do_signal_or_restart+0x91/0x7e0 [ 85.132970][ T6989] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.132995][ T6989] irqentry_exit+0x402/0xa10 [ 85.133014][ T6989] asm_exc_page_fault+0x26/0x30 [ 85.133025][ T6989] RIP: 0033:0x7f0330f9e159 [ 85.133038][ T6989] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 85.133043][ T6989] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 85.133052][ T6989] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 85.133059][ T6989] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 85.133066][ T6989] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 85.133072][ T6989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.133079][ T6989] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 85.133094][ T6989] [ 85.133126][ T6989] memory: usage 307200kB, limit 307200kB, failcnt 138456 [ 85.133135][ T6989] memory+swap: usage 432080kB, limit 9007199254740988kB, failcnt 0 [ 85.133142][ T6989] kmem: usage 5600kB, limit 9007199254740988kB, failcnt 0 [ 85.133148][ T6989] Memory cgroup stats for /syz1: [ 85.133225][ T6989] cache 308461568 [ 85.133230][ T6989] rss 339968 [ 85.133234][ T6989] rss_huge 0 [ 85.133238][ T6989] shmem 307855360 [ 85.133242][ T6989] mapped_file 598016 [ 85.133245][ T6989] dirty 0 [ 85.133249][ T6989] writeback 0 [ 85.133253][ T6989] workingset_refault_anon 6 [ 85.133257][ T6989] workingset_refault_file 159724 [ 85.133261][ T6989] swap 127877120 [ 85.133265][ T6989] swapcached 175833088 [ 85.133269][ T6989] pgpgin 402432 [ 85.133272][ T6989] pgpgout 327543 [ 85.133276][ T6989] pgfault 55868 [ 85.133280][ T6989] pgmajfault 15597 [ 85.133284][ T6989] inactive_anon 155897856 [ 85.133288][ T6989] active_anon 152301568 [ 85.133292][ T6989] inactive_file 0 [ 85.133295][ T6989] active_file 405504 [ 85.133299][ T6989] unevictable 0 [ 85.133303][ T6989] hierarchical_memory_limit 314572800 [ 85.133308][ T6989] hierarchical_memsw_limit 9223372036854771712 [ 85.133312][ T6989] total_cache 308461568 [ 85.133316][ T6989] total_rss 339968 [ 85.133320][ T6989] total_rss_huge 0 [ 85.133324][ T6989] total_shmem 307855360 [ 85.133328][ T6989] total_mapped_file 598016 [ 85.133332][ T6989] total_dirty 0 [ 85.133336][ T6989] total_writeback 0 [ 85.133339][ T6989] total_workingset_refault_anon 6 [ 85.133344][ T6989] total_workingset_refault_file 159724 [ 85.133348][ T6989] total_swap 127877120 [ 85.133352][ T6989] total_swapcached 175833088 [ 85.133357][ T6989] total_pgpgin 402432 [ 85.133360][ T6989] total_pgpgout 327543 [ 85.133364][ T6989] total_pgfault 55868 [ 85.133369][ T6989] total_pgmajfault 15597 [ 85.133374][ T6989] total_inactive_anon 155897856 [ 85.133380][ T6989] total_active_anon 152301568 [ 85.133385][ T6989] total_inactive_file 0 [ 85.133391][ T6989] total_active_file 405504 [ 85.133396][ T6989] total_unevictable 0 [ 85.133401][ T6989] anon_cost 0 [ 85.133406][ T6989] file_cost 0 [ 85.133411][ T6989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.295,pid=7231,uid=0 [ 85.133512][ T6989] Memory cgroup out of memory: Killed process 7231 (syz.1.295) total-vm:102384kB, anon-rss:1432kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 85.244750][ T7269] binder: BINDER_SET_CONTEXT_MGR already set [ 85.244759][ T7269] binder: 7267:7269 ioctl 4018620d 200000004a80 returned -16 [ 85.250864][ T7268] binder: BINDER_SET_CONTEXT_MGR already set [ 85.250873][ T7268] binder: 7267:7268 ioctl 4018620d 200000000100 returned -16 [ 85.313435][ T6979] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.313456][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 85.313468][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.313475][ T6979] Call Trace: [ 85.313479][ T6979] [ 85.313484][ T6979] dump_stack_lvl+0x100/0x190 [ 85.313504][ T6979] dump_header+0xfb/0x606 [ 85.313517][ T6979] oom_kill_process.cold+0xd/0x380 [ 85.313531][ T6979] out_of_memory+0x340/0x14f0 [ 85.313561][ T6979] ? __pfx_out_of_memory+0x10/0x10 [ 85.313582][ T6979] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.313594][ T6979] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.313606][ T6979] ? find_held_lock+0x2b/0x80 [ 85.313624][ T6979] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.313639][ T6979] ? _raw_spin_unlock+0x28/0x50 [ 85.313653][ T6979] try_charge_memcg+0x783/0xf60 [ 85.313672][ T6979] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.313687][ T6979] ? find_held_lock+0x2b/0x80 [ 85.313702][ T6979] ? rcu_read_unlock+0x17/0x60 [ 85.313718][ T6979] ? rcu_read_unlock+0x17/0x60 [ 85.313733][ T6979] ? find_held_lock+0x2b/0x80 [ 85.313749][ T6979] ? rcu_read_unlock+0x17/0x60 [ 85.313768][ T6979] charge_memcg+0x1ae/0x210 [ 85.313784][ T6979] __mem_cgroup_charge+0x2b/0x1c0 [ 85.313802][ T6979] shmem_alloc_and_add_folio+0x451/0xd40 [ 85.313822][ T6979] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 85.313839][ T6979] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 85.313856][ T6979] ? __lock_acquire+0x5c0/0x1f40 [ 85.313869][ T6979] shmem_get_folio_gfp+0x75b/0x1980 [ 85.313889][ T6979] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 85.313904][ T6979] ? inode_set_ctime_current+0x9c/0x850 [ 85.313919][ T6979] ? find_held_lock+0x2b/0x80 [ 85.313936][ T6979] ? timestamp_truncate+0x22e/0x2f0 [ 85.313953][ T6979] shmem_write_begin+0x1a4/0x420 [ 85.313971][ T6979] ? __pfx_shmem_write_begin+0x10/0x10 [ 85.313987][ T6979] ? inode_set_ctime_current+0x283/0x850 [ 85.314002][ T6979] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 85.314019][ T6979] ? inode_maybe_inc_iversion+0x169/0x220 [ 85.314034][ T6979] generic_perform_write+0x292/0xa40 [ 85.314047][ T6979] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.314062][ T6979] ? __pfx_generic_perform_write+0x10/0x10 [ 85.314076][ T6979] ? mnt_put_write_access_file+0x4e/0x100 [ 85.314094][ T6979] ? file_update_time_flags+0x38c/0x520 [ 85.314113][ T6979] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.314123][ T6979] shmem_file_write_iter+0x10e/0x140 [ 85.314136][ T6979] __kernel_write_iter+0x2ac/0x930 [ 85.314148][ T6979] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.314158][ T6979] ? cgroup1_freezing+0x12c/0x3b0 [ 85.314179][ T6979] ? cgroup1_freezing+0x136/0x3b0 [ 85.314196][ T6979] ? freezing_slow_path+0xb5/0x1a0 [ 85.314214][ T6979] dump_user_range+0x3f9/0xad0 [ 85.314229][ T6979] ? __pfx_dump_user_range+0x10/0x10 [ 85.314244][ T6979] ? __pfx_writenote+0x10/0x10 [ 85.314256][ T6979] ? elf_core_dump+0x1f25/0x3d20 [ 85.314270][ T6979] elf_core_dump+0x2d68/0x3d20 [ 85.314290][ T6979] ? __pfx_elf_core_dump+0x10/0x10 [ 85.314301][ T6979] ? kasan_save_stack+0x3f/0x50 [ 85.314313][ T6979] ? kasan_save_stack+0x30/0x50 [ 85.314324][ T6979] ? kasan_save_track+0x14/0x30 [ 85.314335][ T6979] ? __kasan_kmalloc+0xaa/0xb0 [ 85.314347][ T6979] ? vfs_coredump+0x21f6/0x54a0 [ 85.314356][ T6979] ? get_signal+0x1f2a/0x21e0 [ 85.314368][ T6979] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.314387][ T6979] ? 0xffffffffff600000 [ 85.314414][ T6979] ? lock_acquire+0x1d1/0x380 [ 85.314425][ T6979] ? get_signal+0x1f2a/0x21e0 [ 85.314441][ T6979] ? vfs_coredump+0x281a/0x54a0 [ 85.314451][ T6979] vfs_coredump+0x281a/0x54a0 [ 85.314467][ T6979] ? __pfx_vfs_coredump+0x10/0x10 [ 85.314478][ T6979] ? __lock_acquire+0x5c0/0x1f40 [ 85.314493][ T6979] ? __lock_acquire+0x5c0/0x1f40 [ 85.314506][ T6979] ? lock_acquire+0x1d1/0x380 [ 85.314516][ T6979] ? unwind_next_frame+0xbd/0x2090 [ 85.314535][ T6979] ? lock_acquire+0x1d1/0x380 [ 85.314550][ T6979] ? bpf_ksym_find+0x128/0x1c0 [ 85.314566][ T6979] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.314588][ T6979] ? arch_stack_walk+0xa6/0xf0 [ 85.314607][ T6979] ? __sigqueue_free+0xbe/0x2a0 [ 85.314621][ T6979] ? stack_trace_save+0x8e/0xc0 [ 85.314638][ T6979] ? __pfx_stack_trace_save+0x10/0x10 [ 85.314655][ T6979] ? stack_depot_save_flags+0x27/0x9f0 [ 85.314669][ T6979] ? __lock_acquire+0x5c0/0x1f40 [ 85.314705][ T6979] ? proc_coredump_connector+0x2d3/0x4f0 [ 85.314722][ T6979] ? __pfx_proc_coredump_connector+0x10/0x10 [ 85.314742][ T6979] ? rcu_is_watching+0x13/0xc0 [ 85.314759][ T6979] get_signal+0x1f2a/0x21e0 [ 85.314777][ T6979] ? __pfx_get_signal+0x10/0x10 [ 85.314789][ T6979] ? __pfx_force_sig_fault+0x10/0x10 [ 85.314804][ T6979] arch_do_signal_or_restart+0x91/0x7e0 [ 85.314820][ T6979] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.314846][ T6979] irqentry_exit+0x402/0xa10 [ 85.314862][ T6979] asm_exc_page_fault+0x26/0x30 [ 85.314873][ T6979] RIP: 0033:0x7f0330f9e159 [ 85.314885][ T6979] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 85.314890][ T6979] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 85.314899][ T6979] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 85.314906][ T6979] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 85.314913][ T6979] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 85.314919][ T6979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.314926][ T6979] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 85.314941][ T6979] [ 85.344197][ T6979] memory: usage 307200kB, limit 307200kB, failcnt 139283 [ 85.344214][ T6979] memory+swap: usage 432080kB, limit 9007199254740988kB, failcnt 0 [ 85.344224][ T6979] kmem: usage 5532kB, limit 9007199254740988kB, failcnt 0 [ 85.344230][ T6979] Memory cgroup stats for /syz1: [ 85.344319][ T6979] cache 308674560 [ 85.344324][ T6979] rss 221184 [ 85.344328][ T6979] rss_huge 0 [ 85.344331][ T6979] shmem 308568064 [ 85.344335][ T6979] mapped_file 53248 [ 85.344339][ T6979] dirty 0 [ 85.344343][ T6979] writeback 0 [ 85.344347][ T6979] workingset_refault_anon 6 [ 85.344351][ T6979] workingset_refault_file 159884 [ 85.344355][ T6979] swap 127877120 [ 85.344359][ T6979] swapcached 175833088 [ 85.344363][ T6979] pgpgin 402785 [ 85.344367][ T6979] pgpgout 327879 [ 85.344370][ T6979] pgfault 56052 [ 85.344374][ T6979] pgmajfault 15767 [ 85.344378][ T6979] inactive_anon 253239296 [ 85.344382][ T6979] active_anon 55554048 [ 85.344386][ T6979] inactive_file 8192 [ 85.344390][ T6979] active_file 4096 [ 85.344393][ T6979] unevictable 0 [ 85.344398][ T6979] hierarchical_memory_limit 314572800 [ 85.344402][ T6979] hierarchical_memsw_limit 9223372036854771712 [ 85.344407][ T6979] total_cache 308674560 [ 85.344411][ T6979] total_rss 221184 [ 85.344414][ T6979] total_rss_huge 0 [ 85.344418][ T6979] total_shmem 308568064 [ 85.344422][ T6979] total_mapped_file 53248 [ 85.344426][ T6979] total_dirty 0 [ 85.344430][ T6979] total_writeback 0 [ 85.344434][ T6979] total_workingset_refault_anon 6 [ 85.344438][ T6979] total_workingset_refault_file 159884 [ 85.344442][ T6979] total_swap 127877120 [ 85.344446][ T6979] total_swapcached 175833088 [ 85.344450][ T6979] total_pgpgin 402785 [ 85.344454][ T6979] total_pgpgout 327879 [ 85.344458][ T6979] total_pgfault 56052 [ 85.344461][ T6979] total_pgmajfault 15767 [ 85.344465][ T6979] total_inactive_anon 253239296 [ 85.344470][ T6979] total_active_anon 55554048 [ 85.344474][ T6979] total_inactive_file 8192 [ 85.344478][ T6979] total_active_file 4096 [ 85.344482][ T6979] total_unevictable 0 [ 85.344486][ T6979] anon_cost 0 [ 85.344489][ T6979] file_cost 0 [ 85.344493][ T6979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.295,pid=7264,uid=0 [ 85.344566][ T6979] Memory cgroup out of memory: Killed process 7264 (syz.1.295) total-vm:102252kB, anon-rss:1424kB, file-rss:20548kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 85.515850][ T851] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.562932][ T5731] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 85.562952][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 85.562965][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.562972][ T5731] Call Trace: [ 85.562984][ T5731] [ 85.562989][ T5731] dump_stack_lvl+0x100/0x190 [ 85.563015][ T5731] dump_header+0xfb/0x606 [ 85.563029][ T5731] oom_kill_process.cold+0xd/0x380 [ 85.563043][ T5731] out_of_memory+0x340/0x14f0 [ 85.563063][ T5731] ? __pfx_out_of_memory+0x10/0x10 [ 85.563097][ T5731] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.563111][ T5731] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.563123][ T5731] ? find_held_lock+0x2b/0x80 [ 85.563141][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.563155][ T5731] ? _raw_spin_unlock+0x28/0x50 [ 85.563173][ T5731] try_charge_memcg+0x783/0xf60 [ 85.563193][ T5731] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.563207][ T5731] ? find_held_lock+0x2b/0x80 [ 85.563222][ T5731] ? rcu_read_unlock+0x17/0x60 [ 85.563238][ T5731] ? rcu_read_unlock+0x17/0x60 [ 85.563254][ T5731] ? find_held_lock+0x2b/0x80 [ 85.563270][ T5731] ? rcu_read_unlock+0x17/0x60 [ 85.563288][ T5731] charge_memcg+0x1ae/0x210 [ 85.563305][ T5731] __mem_cgroup_charge+0x2b/0x1c0 [ 85.563324][ T5731] do_wp_page+0xe40/0x45c0 [ 85.563341][ T5731] ? lock_acquire+0x1d1/0x380 [ 85.563352][ T5731] ? __pfx_do_wp_page+0x10/0x10 [ 85.563367][ T5731] ? do_raw_spin_lock+0x128/0x260 [ 85.563381][ T5731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.563399][ T5731] __handle_mm_fault+0x1cd2/0x2f60 [ 85.563417][ T5731] ? lock_vma_under_rcu+0x11d/0x590 [ 85.563432][ T5731] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.563451][ T5731] ? lock_vma_under_rcu+0x17c/0x590 [ 85.563518][ T5731] handle_mm_fault+0x363/0xa20 [ 85.563539][ T5731] do_user_addr_fault+0x59c/0x12f0 [ 85.563559][ T5731] exc_page_fault+0x6f/0xd0 [ 85.563574][ T5731] asm_exc_page_fault+0x26/0x30 [ 85.563584][ T5731] RIP: 0033:0x7f0330e54a8b [ 85.563598][ T5731] Code: 00 00 00 89 ef c7 44 24 1c 78 00 00 00 e8 ad ae 14 00 85 c0 0f 85 6d 01 00 00 66 0f ef c0 48 8d 43 88 ba 78 00 00 00 4c 89 e6 <48> c7 43 f8 00 00 00 00 48 89 c7 0f 11 43 b8 0f 11 43 c8 0f 11 43 [ 85.563609][ T5731] RSP: 002b:00007ffd7cf264a0 EFLAGS: 00010246 [ 85.563622][ T5731] RAX: 00007f03311ed0e8 RBX: 00007f03311ed160 RCX: 00007f0330f9f92a [ 85.563629][ T5731] RDX: 0000000000000078 RSI: 00007ffd7cf264c0 RDI: 0000000000000003 [ 85.563636][ T5731] RBP: 0000000000000003 R08: 00007ffd7cf264bc R09: 0000000000000000 [ 85.563643][ T5731] R10: 00007ffd7cf264c0 R11: 0000000000000246 R12: 00007ffd7cf264c0 [ 85.563649][ T5731] R13: 00007ffd7cf264bc R14: 0000000000000002 R15: 0000000000000000 [ 85.563664][ T5731] [ 85.579785][ T5731] memory: usage 307200kB, limit 307200kB, failcnt 140101 [ 85.579806][ T5731] memory+swap: usage 432080kB, limit 9007199254740988kB, failcnt 0 [ 85.579816][ T5731] kmem: usage 5272kB, limit 9007199254740988kB, failcnt 0 [ 85.579826][ T5731] Memory cgroup stats for /syz1: [ 85.579955][ T5731] cache 309108736 [ 85.579960][ T5731] rss 61440 [ 85.579964][ T5731] rss_huge 0 [ 85.579968][ T5731] shmem 309055488 [ 85.579971][ T5731] mapped_file 0 [ 85.579977][ T5731] dirty 0 [ 85.579981][ T5731] writeback 0 [ 85.579985][ T5731] workingset_refault_anon 6 [ 85.579989][ T5731] workingset_refault_file 159948 [ 85.579993][ T5731] swap 127877120 [ 85.579997][ T5731] swapcached 175833088 [ 85.580003][ T5731] pgpgin 403022 [ 85.580006][ T5731] pgpgout 328051 [ 85.580010][ T5731] pgfault 56170 [ 85.580014][ T5731] pgmajfault 15886 [ 85.580018][ T5731] inactive_anon 237895680 [ 85.580022][ T5731] active_anon 70262784 [ 85.580026][ T5731] inactive_file 20480 [ 85.580030][ T5731] active_file 16384 [ 85.580033][ T5731] unevictable 0 [ 85.580037][ T5731] hierarchical_memory_limit 314572800 [ 85.580042][ T5731] hierarchical_memsw_limit 9223372036854771712 [ 85.580047][ T5731] total_cache 309108736 [ 85.580053][ T5731] total_rss 61440 [ 85.580057][ T5731] total_rss_huge 0 [ 85.580060][ T5731] total_shmem 309055488 [ 85.580064][ T5731] total_mapped_file 0 [ 85.580068][ T5731] total_dirty 0 [ 85.580072][ T5731] total_writeback 0 [ 85.580075][ T5731] total_workingset_refault_anon 6 [ 85.580080][ T5731] total_workingset_refault_file 159948 [ 85.580084][ T5731] total_swap 127877120 [ 85.580088][ T5731] total_swapcached 175833088 [ 85.580092][ T5731] total_pgpgin 403022 [ 85.580096][ T5731] total_pgpgout 328051 [ 85.580102][ T5731] total_pgfault 56170 [ 85.580106][ T5731] total_pgmajfault 15886 [ 85.580110][ T5731] total_inactive_anon 237895680 [ 85.580114][ T5731] total_active_anon 70262784 [ 85.580118][ T5731] total_inactive_file 20480 [ 85.580122][ T5731] total_active_file 16384 [ 85.580126][ T5731] total_unevictable 0 [ 85.580132][ T5731] anon_cost 0 [ 85.580136][ T5731] file_cost 0 [ 85.580140][ T5731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6979,uid=0 [ 85.580793][ T5731] Memory cgroup out of memory: Killed process 6979 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 85.676316][ T851] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 85.677120][ T851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.677141][ T851] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.678426][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.678437][ T851] usb 7-1: Product: syz [ 85.678445][ T851] usb 7-1: Manufacturer: syz [ 85.684675][ T851] iuu_phoenix 7-1:1.0: required endpoints missing [ 85.787058][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 85.787093][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 85.788183][ T64] Bluetooth: hci1: hardware error 0x00 [ 85.877546][ T7257] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.893871][ T851] usb 7-1: USB disconnect, device number 8 [ 86.010590][ T7282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.136934][ T7285] Bluetooth: MGMT ver 1.23 [ 86.139482][ T7285] batadv_slave_1: Caught tx_queue_len zero misconfig [ 86.139498][ T7285] netlink: 'syz.3.309': attribute type 14 has an invalid length. [ 86.235132][ T6994] Memory cgroup out of memory: Killed process 6994 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:9920kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 86.596050][ T30] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 86.686452][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 86.767659][ T30] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 86.767696][ T30] usb 8-1: too many configurations: 176, using maximum allowed: 8 [ 86.781748][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.781763][ T30] usb 8-1: Product: syz [ 86.781770][ T30] usb 8-1: Manufacturer: syz [ 86.781777][ T30] usb 8-1: SerialNumber: syz [ 86.875947][ T5878] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.006507][ T5878] usb 6-1: device descriptor read/64, error -71 [ 87.024741][ T5737] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 87.129091][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 87.129109][ T44] audit: type=1400 audit(1789063980.147:690): avc: denied { write } for pid=7304 comm="syz.2.315" name="/" dev="9p" ino=76832943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.180048][ T44] audit: type=1400 audit(1789063980.197:691): avc: denied { ioctl } for pid=7304 comm="syz.2.315" path="/92/file0/cgroup.kill" dev="9p" ino=76832983 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.213708][ T44] audit: type=1400 audit(1789063980.227:692): avc: denied { map } for pid=7304 comm="syz.2.315" path="socket:[18633]" dev="sockfs" ino=18633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.215964][ T44] audit: type=1400 audit(1789063980.227:693): avc: denied { read } for pid=7304 comm="syz.2.315" path="socket:[18633]" dev="sockfs" ino=18633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.241439][ T7307] 9pnet_virtio: no channels available for device syz [ 87.255888][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.385892][ T5878] usb 6-1: device descriptor read/64, error -71 [ 87.464419][ T6976] oom_kill_process: 1 callbacks suppressed [ 87.464440][ T6976] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.464464][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 87.464484][ T6976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.464495][ T6976] Call Trace: [ 87.464502][ T6976] [ 87.464510][ T6976] dump_stack_lvl+0x100/0x190 [ 87.464540][ T6976] dump_header+0xfb/0x606 [ 87.464563][ T6976] oom_kill_process.cold+0xd/0x380 [ 87.464587][ T6976] out_of_memory+0x340/0x14f0 [ 87.464617][ T6976] ? __pfx_out_of_memory+0x10/0x10 [ 87.464648][ T6976] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.464669][ T6976] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.464688][ T6976] ? find_held_lock+0x2b/0x80 [ 87.464719][ T6976] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.464762][ T6976] ? _raw_spin_unlock+0x28/0x50 [ 87.464786][ T6976] try_charge_memcg+0x783/0xf60 [ 87.464819][ T6976] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.464844][ T6976] ? find_held_lock+0x2b/0x80 [ 87.464867][ T6976] ? rcu_read_unlock+0x17/0x60 [ 87.464893][ T6976] ? rcu_read_unlock+0x17/0x60 [ 87.464919][ T6976] ? find_held_lock+0x2b/0x80 [ 87.464944][ T6976] ? rcu_read_unlock+0x17/0x60 [ 87.464976][ T6976] charge_memcg+0x1ae/0x210 [ 87.465004][ T6976] __mem_cgroup_charge+0x2b/0x1c0 [ 87.465039][ T6976] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.465074][ T6976] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.465102][ T6976] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 87.465135][ T6976] shmem_get_folio_gfp+0x75b/0x1980 [ 87.465168][ T6976] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.465197][ T6976] ? vm_normal_page+0x1d1/0x380 [ 87.465218][ T6976] ? __pfx_vm_normal_page+0x10/0x10 [ 87.465242][ T6976] shmem_write_begin+0x1a4/0x420 [ 87.465270][ T6976] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.465297][ T6976] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.465329][ T6976] generic_perform_write+0x292/0xa40 [ 87.465350][ T6976] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.465375][ T6976] ? __pfx_generic_perform_write+0x10/0x10 [ 87.465401][ T6976] ? file_update_time_flags+0x38c/0x520 [ 87.465432][ T6976] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.465450][ T6976] shmem_file_write_iter+0x10e/0x140 [ 87.465472][ T6976] __kernel_write_iter+0x2ac/0x930 [ 87.465493][ T6976] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.465511][ T6976] ? cgroup1_freezing+0x12c/0x3b0 [ 87.465544][ T6976] ? cgroup1_freezing+0x136/0x3b0 [ 87.465573][ T6976] ? freezing_slow_path+0xb5/0x1a0 [ 87.465604][ T6976] dump_user_range+0x3f9/0xad0 [ 87.465630][ T6976] ? __pfx_dump_user_range+0x10/0x10 [ 87.465658][ T6976] ? __pfx_writenote+0x10/0x10 [ 87.465678][ T6976] ? elf_core_dump+0x1f25/0x3d20 [ 87.465703][ T6976] elf_core_dump+0x2d68/0x3d20 [ 87.465739][ T6976] ? __pfx_elf_core_dump+0x10/0x10 [ 87.465759][ T6976] ? kasan_save_stack+0x3f/0x50 [ 87.465780][ T6976] ? kasan_save_stack+0x30/0x50 [ 87.465799][ T6976] ? kasan_save_track+0x14/0x30 [ 87.465817][ T6976] ? __kasan_kmalloc+0xaa/0xb0 [ 87.465838][ T6976] ? vfs_coredump+0x21f6/0x54a0 [ 87.465854][ T6976] ? get_signal+0x1f2a/0x21e0 [ 87.465872][ T6976] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.465905][ T6976] ? 0xffffffffff600000 [ 87.465954][ T6976] ? lock_acquire+0x1d1/0x380 [ 87.465974][ T6976] ? get_signal+0x1f2a/0x21e0 [ 87.466003][ T6976] ? vfs_coredump+0x281a/0x54a0 [ 87.466020][ T6976] vfs_coredump+0x281a/0x54a0 [ 87.466054][ T6976] ? __pfx_vfs_coredump+0x10/0x10 [ 87.466073][ T6976] ? __lock_acquire+0x5c0/0x1f40 [ 87.466099][ T6976] ? __lock_acquire+0x5c0/0x1f40 [ 87.466121][ T6976] ? lock_acquire+0x1d1/0x380 [ 87.466139][ T6976] ? unwind_next_frame+0xbd/0x2090 [ 87.466170][ T6976] ? lock_acquire+0x1d1/0x380 [ 87.466196][ T6976] ? bpf_ksym_find+0x128/0x1c0 [ 87.466223][ T6976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.466259][ T6976] ? arch_stack_walk+0xa6/0xf0 [ 87.466290][ T6976] ? __sigqueue_free+0xbe/0x2a0 [ 87.466314][ T6976] ? stack_trace_save+0x8e/0xc0 [ 87.466342][ T6976] ? __pfx_stack_trace_save+0x10/0x10 [ 87.466370][ T6976] ? stack_depot_save_flags+0x27/0x9f0 [ 87.466394][ T6976] ? __lock_acquire+0x5c0/0x1f40 [ 87.466459][ T6976] ? proc_coredump_connector+0x2d3/0x4f0 [ 87.466487][ T6976] ? __pfx_proc_coredump_connector+0x10/0x10 [ 87.466521][ T6976] ? rcu_is_watching+0x13/0xc0 [ 87.466549][ T6976] get_signal+0x1f2a/0x21e0 [ 87.466580][ T6976] ? __pfx_get_signal+0x10/0x10 [ 87.466600][ T6976] ? __pfx_force_sig_fault+0x10/0x10 [ 87.466626][ T6976] arch_do_signal_or_restart+0x91/0x7e0 [ 87.466654][ T6976] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.466698][ T6976] irqentry_exit+0x402/0xa10 [ 87.466726][ T6976] asm_exc_page_fault+0x26/0x30 [ 87.466745][ T6976] RIP: 0033:0x7f0330f9e159 [ 87.466765][ T6976] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 87.466774][ T6976] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 87.466789][ T6976] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 87.466801][ T6976] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 87.466812][ T6976] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 87.466822][ T6976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.466833][ T6976] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 87.466859][ T6976] [ 87.509885][ T5878] usb usb6-port1: attempt power cycle [ 87.512113][ T6976] memory: usage 307200kB, limit 307200kB, failcnt 151598 [ 87.512124][ T6976] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 87.512132][ T6976] kmem: usage 5076kB, limit 9007199254740988kB, failcnt 0 [ 87.512138][ T6976] Memory cgroup stats for /syz1: [ 87.512263][ T6976] cache 309219328 [ 87.512269][ T6976] rss 139264 [ 87.512273][ T6976] rss_huge 0 [ 87.512277][ T6976] shmem 309194752 [ 87.512281][ T6976] mapped_file 0 [ 87.512285][ T6976] dirty 0 [ 87.512288][ T6976] writeback 0 [ 87.512292][ T6976] workingset_refault_anon 6 [ 87.512296][ T6976] workingset_refault_file 169499 [ 87.512300][ T6976] swap 127979520 [ 87.512304][ T6976] swapcached 198676480 [ 87.512308][ T6976] pgpgin 443132 [ 87.512311][ T6976] pgpgout 368112 [ 87.512315][ T6976] pgfault 71853 [ 87.512355][ T6976] pgmajfault 30679 [ 87.512360][ T6976] inactive_anon 220991488 [ 87.512365][ T6976] active_anon 88358912 [ 87.512368][ T6976] inactive_file 12288 [ 87.512372][ T6976] active_file 12288 [ 87.512376][ T6976] unevictable 0 [ 87.512380][ T6976] hierarchical_memory_limit 314572800 [ 87.512384][ T6976] hierarchical_memsw_limit 9223372036854771712 [ 87.512389][ T6976] total_cache 309219328 [ 87.512393][ T6976] total_rss 139264 [ 87.512397][ T6976] total_rss_huge 0 [ 87.512401][ T6976] total_shmem 309194752 [ 87.512404][ T6976] total_mapped_file 0 [ 87.512408][ T6976] total_dirty 0 [ 87.512412][ T6976] total_writeback 0 [ 87.512416][ T6976] total_workingset_refault_anon 6 [ 87.512420][ T6976] total_workingset_refault_file 169499 [ 87.512424][ T6976] total_swap 127979520 [ 87.512428][ T6976] total_swapcached 198676480 [ 87.512432][ T6976] total_pgpgin 443132 [ 87.512436][ T6976] total_pgpgout 368112 [ 87.512440][ T6976] total_pgfault 71853 [ 87.512444][ T6976] total_pgmajfault 30679 [ 87.512448][ T6976] total_inactive_anon 220991488 [ 87.512452][ T6976] total_active_anon 88358912 [ 87.512456][ T6976] total_inactive_file 12288 [ 87.512461][ T6976] total_active_file 12288 [ 87.512464][ T6976] total_unevictable 0 [ 87.512468][ T6976] anon_cost 0 [ 87.512517][ T6976] file_cost 0 [ 87.512523][ T6976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.306,pid=7287,uid=0 [ 87.513130][ T6976] Memory cgroup out of memory: Killed process 7287 (syz.1.306) total-vm:102252kB, anon-rss:1364kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 87.583794][ T6974] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.583825][ T6974] CPU: 2 UID: 0 PID: 6974 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 87.583859][ T6974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.583869][ T6974] Call Trace: [ 87.583875][ T6974] [ 87.583884][ T6974] dump_stack_lvl+0x100/0x190 [ 87.583912][ T6974] dump_header+0xfb/0x606 [ 87.583934][ T6974] oom_kill_process.cold+0xd/0x380 [ 87.583957][ T6974] out_of_memory+0x340/0x14f0 [ 87.583985][ T6974] ? __pfx_out_of_memory+0x10/0x10 [ 87.584015][ T6974] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.584035][ T6974] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.584053][ T6974] ? find_held_lock+0x2b/0x80 [ 87.584087][ T6974] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.584111][ T6974] ? _raw_spin_unlock+0x28/0x50 [ 87.584132][ T6974] try_charge_memcg+0x783/0xf60 [ 87.584163][ T6974] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.584186][ T6974] ? find_held_lock+0x2b/0x80 [ 87.584209][ T6974] ? rcu_read_unlock+0x17/0x60 [ 87.584233][ T6974] ? rcu_read_unlock+0x17/0x60 [ 87.584256][ T6974] ? find_held_lock+0x2b/0x80 [ 87.584280][ T6974] ? rcu_read_unlock+0x17/0x60 [ 87.584310][ T6974] charge_memcg+0x1ae/0x210 [ 87.584336][ T6974] __mem_cgroup_charge+0x2b/0x1c0 [ 87.584365][ T6974] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.584397][ T6974] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.584424][ T6974] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 87.584450][ T6974] ? __lock_acquire+0x5c0/0x1f40 [ 87.584471][ T6974] shmem_get_folio_gfp+0x75b/0x1980 [ 87.584502][ T6974] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.584526][ T6974] ? inode_set_ctime_current+0x9c/0x850 [ 87.584550][ T6974] ? find_held_lock+0x2b/0x80 [ 87.584574][ T6974] ? timestamp_truncate+0x22e/0x2f0 [ 87.584601][ T6974] shmem_write_begin+0x1a4/0x420 [ 87.584628][ T6974] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.584653][ T6974] ? inode_set_ctime_current+0x283/0x850 [ 87.584677][ T6974] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.584702][ T6974] ? inode_maybe_inc_iversion+0x169/0x220 [ 87.584726][ T6974] generic_perform_write+0x292/0xa40 [ 87.584748][ T6974] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.584771][ T6974] ? __pfx_generic_perform_write+0x10/0x10 [ 87.584793][ T6974] ? mnt_put_write_access_file+0x4e/0x100 [ 87.584816][ T6974] ? file_update_time_flags+0x38c/0x520 [ 87.584845][ T6974] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.584863][ T6974] shmem_file_write_iter+0x10e/0x140 [ 87.584882][ T6974] __kernel_write_iter+0x2ac/0x930 [ 87.584902][ T6974] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.584918][ T6974] ? cgroup1_freezing+0x12c/0x3b0 [ 87.584948][ T6974] ? cgroup1_freezing+0x136/0x3b0 [ 87.584974][ T6974] ? freezing_slow_path+0xb5/0x1a0 [ 87.585003][ T6974] dump_user_range+0x3f9/0xad0 [ 87.585026][ T6974] ? __pfx_dump_user_range+0x10/0x10 [ 87.585053][ T6974] ? __pfx_writenote+0x10/0x10 [ 87.585076][ T6974] ? elf_core_dump+0x1f25/0x3d20 [ 87.585100][ T6974] elf_core_dump+0x2d68/0x3d20 [ 87.585134][ T6974] ? __pfx_elf_core_dump+0x10/0x10 [ 87.585153][ T6974] ? kasan_save_stack+0x3f/0x50 [ 87.585172][ T6974] ? kasan_save_stack+0x30/0x50 [ 87.585189][ T6974] ? kasan_save_track+0x14/0x30 [ 87.585207][ T6974] ? __kasan_kmalloc+0xaa/0xb0 [ 87.585224][ T6974] ? vfs_coredump+0x21f6/0x54a0 [ 87.585241][ T6974] ? get_signal+0x1f2a/0x21e0 [ 87.585257][ T6974] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.585289][ T6974] ? 0xffffffffff600000 [ 87.585335][ T6974] ? lock_acquire+0x1d1/0x380 [ 87.585352][ T6974] ? get_signal+0x1f2a/0x21e0 [ 87.585380][ T6974] ? vfs_coredump+0x281a/0x54a0 [ 87.585397][ T6974] vfs_coredump+0x281a/0x54a0 [ 87.585424][ T6974] ? __pfx_vfs_coredump+0x10/0x10 [ 87.585443][ T6974] ? __lock_acquire+0x5c0/0x1f40 [ 87.585467][ T6974] ? __lock_acquire+0x5c0/0x1f40 [ 87.585489][ T6974] ? lock_acquire+0x1d1/0x380 [ 87.585507][ T6974] ? unwind_next_frame+0xbd/0x2090 [ 87.585535][ T6974] ? lock_acquire+0x1d1/0x380 [ 87.585560][ T6974] ? bpf_ksym_find+0x128/0x1c0 [ 87.585585][ T6974] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.585619][ T6974] ? arch_stack_walk+0xa6/0xf0 [ 87.585650][ T6974] ? __sigqueue_free+0xbe/0x2a0 [ 87.585672][ T6974] ? stack_trace_save+0x8e/0xc0 [ 87.585697][ T6974] ? __pfx_stack_trace_save+0x10/0x10 [ 87.585724][ T6974] ? stack_depot_save_flags+0x27/0x9f0 [ 87.585747][ T6974] ? __lock_acquire+0x5c0/0x1f40 [ 87.585807][ T6974] ? proc_coredump_connector+0x2d3/0x4f0 [ 87.585834][ T6974] ? __pfx_proc_coredump_connector+0x10/0x10 [ 87.585880][ T6974] ? rcu_is_watching+0x13/0xc0 [ 87.585908][ T6974] get_signal+0x1f2a/0x21e0 [ 87.585937][ T6974] ? __pfx_get_signal+0x10/0x10 [ 87.585955][ T6974] ? __pfx_force_sig_fault+0x10/0x10 [ 87.585980][ T6974] arch_do_signal_or_restart+0x91/0x7e0 [ 87.586007][ T6974] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.586047][ T6974] irqentry_exit+0x402/0xa10 [ 87.586078][ T6974] asm_exc_page_fault+0x26/0x30 [ 87.586097][ T6974] RIP: 0033:0x7f0330f9e159 [ 87.586118][ T6974] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 87.586126][ T6974] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 87.586142][ T6974] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 87.586153][ T6974] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 87.586163][ T6974] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 87.586175][ T6974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.586185][ T6974] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 87.586210][ T6974] [ 87.626770][ T6974] memory: usage 307200kB, limit 307200kB, failcnt 151780 [ 87.626789][ T6974] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 87.626800][ T6974] kmem: usage 5016kB, limit 9007199254740988kB, failcnt 0 [ 87.626810][ T6974] Memory cgroup stats for /syz1: [ 87.626928][ T6974] cache 309358592 [ 87.626937][ T6974] rss 61440 [ 87.626944][ T6974] rss_huge 0 [ 87.626950][ T6974] shmem 309325824 [ 87.626956][ T6974] mapped_file 4096 [ 87.626961][ T6974] dirty 0 [ 87.626966][ T6974] writeback 0 [ 87.626972][ T6974] workingset_refault_anon 6 [ 87.626980][ T6974] workingset_refault_file 169511 [ 87.626986][ T6974] swap 127979520 [ 87.626992][ T6974] swapcached 198676480 [ 87.626997][ T6974] pgpgin 443180 [ 87.627003][ T6974] pgpgout 368145 [ 87.627011][ T6974] pgfault 71870 [ 87.627016][ T6974] pgmajfault 30693 [ 87.627021][ T6974] inactive_anon 161255424 [ 87.627027][ T6974] active_anon 148148224 [ 87.627033][ T6974] inactive_file 24576 [ 87.627040][ T6974] active_file 4096 [ 87.627046][ T6974] unevictable 0 [ 87.627052][ T6974] hierarchical_memory_limit 314572800 [ 87.627063][ T6974] hierarchical_memsw_limit 9223372036854771712 [ 87.627072][ T6974] total_cache 309358592 [ 87.627078][ T6974] total_rss 61440 [ 87.627084][ T6974] total_rss_huge 0 [ 87.627090][ T6974] total_shmem 309325824 [ 87.627095][ T6974] total_mapped_file 4096 [ 87.627104][ T6974] total_dirty 0 [ 87.627109][ T6974] total_writeback 0 [ 87.627115][ T6974] total_workingset_refault_anon 6 [ 87.627121][ T6974] total_workingset_refault_file 169511 [ 87.627128][ T6974] total_swap 127979520 [ 87.627136][ T6974] total_swapcached 198676480 [ 87.627142][ T6974] total_pgpgin 443180 [ 87.627147][ T6974] total_pgpgout 368145 [ 87.627153][ T6974] total_pgfault 71870 [ 87.627159][ T6974] total_pgmajfault 30693 [ 87.627167][ T6974] total_inactive_anon 161255424 [ 87.627174][ T6974] total_active_anon 148148224 [ 87.627180][ T6974] total_inactive_file 24576 [ 87.627186][ T6974] total_active_file 4096 [ 87.627193][ T6974] total_unevictable 0 [ 87.627199][ T6974] anon_cost 0 [ 87.627205][ T6974] file_cost 0 [ 87.627210][ T6974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6996,uid=0 [ 87.627297][ T6974] Memory cgroup out of memory: Killed process 6996 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:12224kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 87.716147][ T6987] syz.1.234 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.716176][ T6987] CPU: 3 UID: 0 PID: 6987 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 87.716196][ T6987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.716206][ T6987] Call Trace: [ 87.716212][ T6987] [ 87.716219][ T6987] dump_stack_lvl+0x100/0x190 [ 87.716248][ T6987] dump_header+0xfb/0x606 [ 87.716271][ T6987] oom_kill_process.cold+0xd/0x380 [ 87.716294][ T6987] out_of_memory+0x340/0x14f0 [ 87.716322][ T6987] ? __pfx_out_of_memory+0x10/0x10 [ 87.716352][ T6987] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.716373][ T6987] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.716391][ T6987] ? find_held_lock+0x2b/0x80 [ 87.716420][ T6987] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.716444][ T6987] ? _raw_spin_unlock+0x28/0x50 [ 87.716466][ T6987] try_charge_memcg+0x783/0xf60 [ 87.716497][ T6987] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.716519][ T6987] ? find_held_lock+0x2b/0x80 [ 87.716543][ T6987] ? rcu_read_unlock+0x17/0x60 [ 87.716567][ T6987] ? rcu_read_unlock+0x17/0x60 [ 87.716592][ T6987] ? find_held_lock+0x2b/0x80 [ 87.716614][ T6987] ? rcu_read_unlock+0x17/0x60 [ 87.716645][ T6987] charge_memcg+0x1ae/0x210 [ 87.716686][ T6987] __mem_cgroup_charge+0x2b/0x1c0 [ 87.716716][ T6987] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.716747][ T6987] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.716775][ T6987] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 87.716801][ T6987] ? __lock_acquire+0x5c0/0x1f40 [ 87.716823][ T6987] shmem_get_folio_gfp+0x75b/0x1980 [ 87.716853][ T6987] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.716877][ T6987] ? inode_set_ctime_current+0x9c/0x850 [ 87.716901][ T6987] ? find_held_lock+0x2b/0x80 [ 87.716925][ T6987] ? timestamp_truncate+0x22e/0x2f0 [ 87.716952][ T6987] shmem_write_begin+0x1a4/0x420 [ 87.716980][ T6987] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.717005][ T6987] ? inode_set_ctime_current+0x283/0x850 [ 87.717034][ T6987] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.717061][ T6987] ? inode_maybe_inc_iversion+0x169/0x220 [ 87.717086][ T6987] generic_perform_write+0x292/0xa40 [ 87.717106][ T6987] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.717130][ T6987] ? __pfx_generic_perform_write+0x10/0x10 [ 87.717153][ T6987] ? mnt_put_write_access_file+0x4e/0x100 [ 87.717176][ T6987] ? file_update_time_flags+0x38c/0x520 [ 87.717203][ T6987] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.717221][ T6987] shmem_file_write_iter+0x10e/0x140 [ 87.717241][ T6987] __kernel_write_iter+0x2ac/0x930 [ 87.717263][ T6987] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.717279][ T6987] ? cgroup1_freezing+0x12c/0x3b0 [ 87.717310][ T6987] ? cgroup1_freezing+0x136/0x3b0 [ 87.717337][ T6987] ? freezing_slow_path+0xb5/0x1a0 [ 87.717366][ T6987] dump_user_range+0x3f9/0xad0 [ 87.717389][ T6987] ? __pfx_dump_user_range+0x10/0x10 [ 87.717415][ T6987] ? __pfx_writenote+0x10/0x10 [ 87.717434][ T6987] ? elf_core_dump+0x1f25/0x3d20 [ 87.717458][ T6987] elf_core_dump+0x2d68/0x3d20 [ 87.717492][ T6987] ? __pfx_elf_core_dump+0x10/0x10 [ 87.717511][ T6987] ? kasan_save_stack+0x3f/0x50 [ 87.717529][ T6987] ? kasan_save_stack+0x30/0x50 [ 87.717548][ T6987] ? kasan_save_track+0x14/0x30 [ 87.717565][ T6987] ? __kasan_kmalloc+0xaa/0xb0 [ 87.717584][ T6987] ? vfs_coredump+0x21f6/0x54a0 [ 87.717600][ T6987] ? get_signal+0x1f2a/0x21e0 [ 87.717618][ T6987] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.717649][ T6987] ? 0xffffffffff600000 [ 87.717695][ T6987] ? lock_acquire+0x1d1/0x380 [ 87.717713][ T6987] ? get_signal+0x1f2a/0x21e0 [ 87.717740][ T6987] ? vfs_coredump+0x281a/0x54a0 [ 87.717757][ T6987] vfs_coredump+0x281a/0x54a0 [ 87.717783][ T6987] ? __pfx_vfs_coredump+0x10/0x10 [ 87.717801][ T6987] ? __lock_acquire+0x5c0/0x1f40 [ 87.717825][ T6987] ? __lock_acquire+0x5c0/0x1f40 [ 87.717846][ T6987] ? lock_acquire+0x1d1/0x380 [ 87.717864][ T6987] ? unwind_next_frame+0xbd/0x2090 [ 87.717892][ T6987] ? lock_acquire+0x1d1/0x380 [ 87.717916][ T6987] ? bpf_ksym_find+0x128/0x1c0 [ 87.717942][ T6987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.717979][ T6987] ? arch_stack_walk+0xa6/0xf0 [ 87.718009][ T6987] ? __sigqueue_free+0xbe/0x2a0 [ 87.718038][ T6987] ? stack_trace_save+0x8e/0xc0 [ 87.718064][ T6987] ? __pfx_stack_trace_save+0x10/0x10 [ 87.718091][ T6987] ? stack_depot_save_flags+0x27/0x9f0 [ 87.718112][ T6987] ? __lock_acquire+0x5c0/0x1f40 [ 87.718174][ T6987] ? proc_coredump_connector+0x2d3/0x4f0 [ 87.718200][ T6987] ? __pfx_proc_coredump_connector+0x10/0x10 [ 87.718231][ T6987] ? rcu_is_watching+0x13/0xc0 [ 87.718258][ T6987] get_signal+0x1f2a/0x21e0 [ 87.718287][ T6987] ? __pfx_get_signal+0x10/0x10 [ 87.718307][ T6987] ? __pfx_force_sig_fault+0x10/0x10 [ 87.718331][ T6987] arch_do_signal_or_restart+0x91/0x7e0 [ 87.718357][ T6987] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.718399][ T6987] irqentry_exit+0x402/0xa10 [ 87.718424][ T6987] asm_exc_page_fault+0x26/0x30 [ 87.718442][ T6987] RIP: 0033:0x7f0330f9e159 [ 87.718464][ T6987] Code: Unable to access opcode bytes at 0x7f0330f9e12f. [ 87.718472][ T6987] RSP: 002b:0000000000000040 EFLAGS: 00010206 [ 87.718485][ T6987] RAX: 0000000000000000 RBX: 00007f0331226090 RCX: 00007f0330f9e159 [ 87.718498][ T6987] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 87.718508][ T6987] RBP: 00007f033103503b R08: 0000000000000000 R09: 0000000000000000 [ 87.718517][ T6987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.718528][ T6987] R13: 00007f0331226128 R14: 00007f0331226090 R15: 00007ffd7cf26818 [ 87.718553][ T6987] [ 87.759167][ T6987] memory: usage 307200kB, limit 307200kB, failcnt 151959 [ 87.759184][ T6987] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 87.759197][ T6987] kmem: usage 4824kB, limit 9007199254740988kB, failcnt 0 [ 87.759207][ T6987] Memory cgroup stats for /syz1: [ 87.759325][ T6987] cache 309555200 [ 87.759335][ T6987] rss 61440 [ 87.759341][ T6987] rss_huge 0 [ 87.759347][ T6987] shmem 309526528 [ 87.759352][ T6987] mapped_file 4096 [ 87.759358][ T6987] dirty 0 [ 87.759364][ T6987] writeback 0 [ 87.759371][ T6987] workingset_refault_anon 6 [ 87.759377][ T6987] workingset_refault_file 169539 [ 87.759383][ T6987] swap 127979520 [ 87.759389][ T6987] swapcached 198676480 [ 87.759395][ T6987] pgpgin 443272 [ 87.759403][ T6987] pgpgout 368189 [ 87.759408][ T6987] pgfault 71920 [ 87.759414][ T6987] pgmajfault 30738 [ 87.759419][ T6987] inactive_anon 161353728 [ 87.759427][ T6987] active_anon 148250624 [ 87.759433][ T6987] inactive_file 4096 [ 87.759439][ T6987] active_file 16384 [ 87.759464][ T6987] unevictable 0 [ 87.759472][ T6987] hierarchical_memory_limit 314572800 [ 87.759479][ T6987] hierarchical_memsw_limit 9223372036854771712 [ 87.759486][ T6987] total_cache 309555200 [ 87.759491][ T6987] total_rss 61440 [ 87.759497][ T6987] total_rss_huge 0 [ 87.759502][ T6987] total_shmem 309526528 [ 87.759508][ T6987] total_mapped_file 4096 [ 87.759514][ T6987] total_dirty 0 [ 87.759520][ T6987] total_writeback 0 [ 87.759526][ T6987] total_workingset_refault_anon 6 [ 87.759532][ T6987] total_workingset_refault_file 169539 [ 87.759539][ T6987] total_swap 127979520 [ 87.759545][ T6987] total_swapcached 198676480 [ 87.759552][ T6987] total_pgpgin 443272 [ 87.759558][ T6987] total_pgpgout 368189 [ 87.759564][ T6987] total_pgfault 71920 [ 87.759570][ T6987] total_pgmajfault 30738 [ 87.759577][ T6987] total_inactive_anon 161353728 [ 87.759583][ T6987] total_active_anon 148250624 [ 87.759593][ T6987] total_inactive_file 4096 [ 87.759598][ T6987] total_active_file 16384 [ 87.759602][ T6987] total_unevictable 0 [ 87.759605][ T6987] anon_cost 0 [ 87.759609][ T6987] file_cost 0 [ 87.759613][ T6987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.234,pid=6985,uid=0 [ 87.759668][ T6987] Memory cgroup out of memory: Killed process 6985 (syz.1.234) total-vm:49272kB, anon-rss:0kB, file-rss:12224kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 87.823755][ T7307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.866567][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 88.182854][ T7307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.188774][ T7325] No source specified [ 88.252427][ T7325] (syz.2.320,7325,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 88.252446][ T7325] (syz.2.320,7325,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 88.384688][ T44] audit: type=1400 audit(1789063981.397:694): avc: denied { ioctl } for pid=7328 comm="syz.1.321" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.389881][ T7307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.454721][ T44] audit: type=1400 audit(1789063981.467:695): avc: denied { mounton } for pid=7328 comm="syz.1.321" path="/87/file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 88.731217][ T7307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.797483][ T44] audit: type=1400 audit(1789063981.817:696): avc: denied { write } for pid=7338 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.858444][ T6975] syz.1.234 (6975) used greatest stack depth: 17992 bytes left [ 88.900736][ T6976] syz.1.234 (6976) used greatest stack depth: 17256 bytes left [ 89.056769][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.085954][ T5829] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.167176][ T5829] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.167210][ T5829] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.172246][ T44] audit: type=1400 audit(1789063982.187:697): avc: denied { write } for pid=7345 comm="syz.1.326" name="configs" dev="configfs" ino=12495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.172575][ T44] audit: type=1400 audit(1789063982.187:698): avc: denied { write } for pid=7345 comm="syz.1.326" name="functions" dev="configfs" ino=12494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.193269][ T44] audit: type=1400 audit(1789063982.197:699): avc: denied { write } for pid=7345 comm="syz.1.326" name="uncompressed" dev="configfs" ino=19539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.236479][ T7349] 9pnet_virtio: no channels available for device syz [ 89.696822][ T30] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 89.696850][ T30] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 89.696861][ T30] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 89.735585][ T30] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 89.740731][ T30] usb 8-1: USB disconnect, device number 19 [ 89.777045][ T7377] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 89.925934][ T851] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.981349][ T7383] netlink: 96 bytes leftover after parsing attributes in process `syz.0.337'. [ 90.023343][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 90.096388][ T851] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 90.097191][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.097250][ T851] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.098466][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 90.098478][ T851] usb 6-1: Product: syz [ 90.098486][ T851] usb 6-1: Manufacturer: syz [ 90.102493][ T851] iuu_phoenix 6-1:1.0: required endpoints missing [ 90.308439][ T851] usb 6-1: USB disconnect, device number 9 [ 90.835880][ T5877] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 90.885369][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 90.915876][ T851] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 91.005958][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 91.006434][ T5877] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 91.007310][ T5877] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 91.007323][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.007332][ T5877] usb 7-1: config 0 has no interface number 0 [ 91.007349][ T5877] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.010101][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.010113][ T5877] usb 7-1: Product: syz [ 91.010121][ T5877] usb 7-1: Manufacturer: syz [ 91.010128][ T5877] usb 7-1: SerialNumber: syz [ 91.013023][ T5877] usb 7-1: config 0 descriptor?? [ 91.025681][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input11 [ 91.045086][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 91.045105][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 91.065859][ T851] usb 8-1: Using ep0 maxpacket: 32 [ 91.066226][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 91.066277][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 91.066292][ T851] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 91.067073][ T851] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 91.067086][ T851] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.067095][ T851] usb 8-1: config 0 has no interface number 0 [ 91.067111][ T851] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.067855][ T64] Bluetooth: hci3: hardware error 0x00 [ 91.073305][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.073318][ T851] usb 8-1: Product: syz [ 91.073325][ T851] usb 8-1: Manufacturer: syz [ 91.073332][ T851] usb 8-1: SerialNumber: syz [ 91.078022][ T851] usb 8-1: config 0 descriptor?? [ 91.084316][ T851] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input12 [ 91.225598][ T7398] GUP no longer grows the stack in syz.2.342 (7398): 200000007000-20000000a000 (200000004000) [ 91.228055][ T7398] CPU: 2 UID: 0 PID: 7398 Comm: syz.2.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.228079][ T7398] Tainted: [L]=SOFTLOCKUP [ 91.228083][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.228089][ T7398] Call Trace: [ 91.228093][ T7398] [ 91.228098][ T7398] dump_stack_lvl+0x100/0x190 [ 91.228119][ T7398] gup_vma_lookup.cold+0x83/0x96 [ 91.228136][ T7398] __get_user_pages+0x252/0x2c30 [ 91.228151][ T7398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.228168][ T7398] ? __pfx___get_user_pages+0x10/0x10 [ 91.228180][ T7398] ? __pfx_down_read_killable+0x10/0x10 [ 91.228202][ T7398] __gup_longterm_locked+0x87d/0x16f0 [ 91.228218][ T7398] ? __pfx___gup_longterm_locked+0x10/0x10 [ 91.228231][ T7398] ? lock_acquire+0x1d1/0x380 [ 91.228257][ T7398] ? gup_fast_fallback+0x946/0x2790 [ 91.228275][ T7398] gup_fast_fallback+0x16dc/0x2790 [ 91.228298][ T7398] ? __pfx_gup_fast_fallback+0x10/0x10 [ 91.228312][ T7398] ? __lock_acquire+0x5c0/0x1f40 [ 91.228323][ T7398] ? rcu_is_watching+0x13/0xc0 [ 91.228338][ T7398] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 91.228353][ T7398] get_user_pages_fast+0xa7/0xf0 [ 91.228366][ T7398] ? __pfx_get_user_pages_fast+0x10/0x10 [ 91.228378][ T7398] ? lock_acquire+0x1d1/0x380 [ 91.228389][ T7398] ? pipe_lock+0x69/0x80 [ 91.228405][ T7398] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 91.228419][ T7398] ? __mutex_lock+0x26c/0x1bd0 [ 91.228433][ T7398] ? pipe_lock+0x69/0x80 [ 91.228446][ T7398] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 91.228457][ T7398] ? __pfx___mutex_lock+0x10/0x10 [ 91.228471][ T7398] ? __fget_files+0x34/0x3d0 [ 91.228484][ T7398] ? import_ubuf+0x1b6/0x220 [ 91.228504][ T7398] iov_iter_get_pages2+0xa3/0x100 [ 91.228515][ T7398] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 91.228525][ T7398] ? wait_for_space+0x2ca/0x3b0 [ 91.228542][ T7398] __do_sys_vmsplice+0x7dd/0x13c0 [ 91.228560][ T7398] ? __pfx_futex_hash+0x10/0x10 [ 91.228574][ T7398] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 91.228593][ T7398] ? __pfx_futex_wait+0x10/0x10 [ 91.228633][ T7398] ? do_syscall_64+0x123/0x790 [ 91.228647][ T7398] do_syscall_64+0x123/0x790 [ 91.228662][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.228674][ T7398] RIP: 0033:0x7f8bbdf9e159 [ 91.228683][ T7398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.228694][ T7398] RSP: 002b:00007f8bbc1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 91.228705][ T7398] RAX: ffffffffffffffda RBX: 00007f8bbe225fa0 RCX: 00007f8bbdf9e159 [ 91.228712][ T7398] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000005 [ 91.228719][ T7398] RBP: 00007f8bbe03503b R08: 0000000000000000 R09: 0000000000000000 [ 91.228725][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.228731][ T7398] R13: 00007f8bbe226038 R14: 00007f8bbe225fa0 R15: 00007fffdbabdcf8 [ 91.228746][ T7398] [ 91.238788][ T5830] logitech-hidpp-device 0003:046D:C082.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 91.290871][ T7420] fido_id[7420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.310847][ T7401] FAULT_INJECTION: forcing a failure. [ 91.310847][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.310877][ T7401] CPU: 2 UID: 0 PID: 7401 Comm: syz.3.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.310901][ T7401] Tainted: [L]=SOFTLOCKUP [ 91.310908][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.310919][ T7401] Call Trace: [ 91.310926][ T7401] [ 91.310933][ T7401] dump_stack_lvl+0x100/0x190 [ 91.310964][ T7401] should_fail_ex.cold+0x5/0xa [ 91.310990][ T7401] _copy_to_user+0x32/0xd0 [ 91.311012][ T7401] simple_read_from_buffer+0xcb/0x170 [ 91.311037][ T7401] proc_fail_nth_read+0x1af/0x230 [ 91.311061][ T7401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.311085][ T7401] ? rw_verify_area+0xce/0x6d0 [ 91.311112][ T7401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.311134][ T7401] vfs_read+0x1e4/0xb40 [ 91.311153][ T7401] ? lock_acquire+0x1d1/0x380 [ 91.311172][ T7401] ? __fget_files+0x34/0x3d0 [ 91.311193][ T7401] ? __pfx_vfs_read+0x10/0x10 [ 91.311209][ T7401] ? find_held_lock+0x2b/0x80 [ 91.311234][ T7401] ? __fget_files+0x215/0x3d0 [ 91.311261][ T7401] ? __fget_files+0x21f/0x3d0 [ 91.311290][ T7401] ksys_read+0x12a/0x250 [ 91.311308][ T7401] ? __pfx_ksys_read+0x10/0x10 [ 91.311333][ T7401] do_syscall_64+0x123/0x790 [ 91.311361][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.311380][ T7401] RIP: 0033:0x7f423455e98e [ 91.311395][ T7401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.311413][ T7401] RSP: 002b:00007f4235537fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.311456][ T7401] RAX: ffffffffffffffda RBX: 00007f42355386c0 RCX: 00007f423455e98e [ 91.311468][ T7401] RDX: 000000000000000f RSI: 00007f42355380a0 RDI: 0000000000000004 [ 91.311480][ T7401] RBP: 00007f4235538090 R08: 0000000000000000 R09: 0000000000000000 [ 91.311491][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.311502][ T7401] R13: 00007f4234826038 R14: 00007f4234825fa0 R15: 00007ffd68a8fb88 [ 91.311533][ T7401] [ 91.315626][ T5815] usb 7-1: USB disconnect, device number 9 [ 91.345298][ T851] usb 8-1: USB disconnect, device number 20 [ 91.370224][ T7424] batman_adv: batadv0: Adding interface: veth0 [ 91.370234][ T7424] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.370249][ T7424] batman_adv: batadv0: Interface activated: veth0 [ 91.422686][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 91.455899][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.605940][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 91.606664][ T35] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 91.607913][ T35] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 91.607950][ T35] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 91.607971][ T35] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.607992][ T35] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 91.609864][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.610048][ T35] usb 6-1: Product: syz [ 91.610061][ T35] usb 6-1: Manufacturer: syz [ 91.610080][ T35] usb 6-1: SerialNumber: syz [ 91.620489][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 91.623700][ T35] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input13 [ 91.838322][ T35] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 91.838340][ T35] (id 0x00) [ 91.885942][ T35] rc_core: IR keymap rc-imon-pad not found [ 91.885954][ T35] Registered IR keymap rc-empty [ 91.885990][ T35] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 91.885999][ T35] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 92.040350][ T35] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 92.043365][ T35] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input14 [ 92.049899][ T35] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:10> initialized [ 92.052607][ T7455] FAULT_INJECTION: forcing a failure. [ 92.052607][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 92.052637][ T7455] CPU: 0 UID: 0 PID: 7455 Comm: syz.3.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.052665][ T7455] Tainted: [L]=SOFTLOCKUP [ 92.052672][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.052682][ T7455] Call Trace: [ 92.052688][ T7455] [ 92.052695][ T7455] dump_stack_lvl+0x100/0x190 [ 92.052721][ T7455] should_fail_ex.cold+0x5/0xa [ 92.052739][ T7455] should_failslab+0xc2/0x120 [ 92.052755][ T7455] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.052767][ T7455] ? __asan_memcpy+0x3c/0x60 [ 92.052777][ T7455] ? __kernfs_new_node+0xd2/0xa10 [ 92.052795][ T7455] __kernfs_new_node+0xd2/0xa10 [ 92.052811][ T7455] ? lock_acquire+0x1d1/0x380 [ 92.052822][ T7455] ? kernfs_add_one+0x4cb/0xaa0 [ 92.052838][ T7455] ? __pfx___kernfs_new_node+0x10/0x10 [ 92.052876][ T7455] ? lock_acquire+0x1d1/0x380 [ 92.052893][ T7455] ? kernfs_root+0x23/0x2a0 [ 92.052920][ T7455] ? find_held_lock+0x2b/0x80 [ 92.052946][ T7455] ? kernfs_root+0xee/0x2a0 [ 92.052966][ T7455] ? kernfs_root+0xee/0x2a0 [ 92.052984][ T7455] kernfs_new_node+0x117/0x150 [ 92.053002][ T7455] __kernfs_create_file+0x53/0x350 [ 92.053016][ T7455] cgroup_addrm_files+0x4ef/0xdb0 [ 92.053043][ T7455] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 92.053062][ T7455] ? css_next_child+0xcf/0x2e0 [ 92.053078][ T7455] ? css_next_descendant_pre+0x58/0x1a0 [ 92.053097][ T7455] css_populate_dir+0x3c4/0x590 [ 92.053115][ T7455] cgroup_mkdir+0x563/0x1330 [ 92.053130][ T7455] ? __pfx_cgroup_mkdir+0x10/0x10 [ 92.053144][ T7455] kernfs_iop_mkdir+0x111/0x190 [ 92.053161][ T7455] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 92.053177][ T7455] vfs_mkdir+0x364/0x850 [ 92.053196][ T7455] filename_mkdirat+0x48b/0x5e0 [ 92.053212][ T7455] ? __pfx_filename_mkdirat+0x10/0x10 [ 92.053226][ T7455] ? strncpy_from_user+0x19d/0x2d0 [ 92.053240][ T7455] ? do_getname+0x191/0x390 [ 92.053257][ T7455] __x64_sys_mkdirat+0x89/0xc0 [ 92.053271][ T7455] do_syscall_64+0x123/0x790 [ 92.053287][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.053300][ T7455] RIP: 0033:0x7f423459e159 [ 92.053311][ T7455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.053322][ T7455] RSP: 002b:00007f4235538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 92.053346][ T7455] RAX: ffffffffffffffda RBX: 00007f4234825fa0 RCX: 00007f423459e159 [ 92.053355][ T7455] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 92.053363][ T7455] RBP: 00007f423463503b R08: 0000000000000000 R09: 0000000000000000 [ 92.053370][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.053377][ T7455] R13: 00007f4234826038 R14: 00007f4234825fa0 R15: 00007ffd68a8fb88 [ 92.053393][ T7455] [ 92.055073][ T7455] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 92.192625][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 92.192639][ T44] audit: type=1400 audit(1789063985.207:720): avc: denied { block_suspend } for pid=7462 comm="syz.2.360" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.208804][ T7463] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 92.208870][ T5737] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 92.208885][ T5737] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 92.293041][ T44] audit: type=1400 audit(1789063985.307:721): avc: denied { connect } for pid=7416 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.311675][ T7468] binfmt_misc: register: failed to install interpreter ./file0 [ 92.315615][ T7417] imon:send_packet: task interrupted [ 92.315987][ T7417] imon:send_packet: packet tx failed (-512) [ 92.316612][ T7417] imon:vfd_write: send packet #0 failed [ 92.320723][ T44] audit: type=1400 audit(1789063985.337:722): avc: denied { write } for pid=7470 comm="syz.2.362" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.320828][ T44] audit: type=1400 audit(1789063985.337:723): avc: denied { open } for pid=7470 comm="syz.2.362" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.402506][ T5878] usb 6-1: USB disconnect, device number 10 [ 92.421859][ T44] audit: type=1400 audit(1789063985.437:724): avc: denied { wake_alarm } for pid=7478 comm="syz.3.365" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.462695][ T44] audit: type=1400 audit(1789063985.477:725): avc: denied { getopt } for pid=7475 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.631662][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 92.631692][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.365'. [ 92.671205][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 92.671226][ T7492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.365'. [ 92.915026][ T7508] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 93.012262][ T7509] FAULT_INJECTION: forcing a failure. [ 93.012262][ T7509] name fail_futex, interval 1, probability 0, space 0, times 1 [ 93.012294][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.0.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.012319][ T7509] Tainted: [L]=SOFTLOCKUP [ 93.012326][ T7509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.012335][ T7509] Call Trace: [ 93.012341][ T7509] [ 93.012348][ T7509] dump_stack_lvl+0x100/0x190 [ 93.012377][ T7509] should_fail_ex.cold+0x5/0xa [ 93.012403][ T7509] get_futex_key+0x1d0/0x14f0 [ 93.012430][ T7509] ? __pfx_get_futex_key+0x10/0x10 [ 93.012467][ T7509] futex_wait_setup+0x91/0x540 [ 93.012502][ T7509] __futex_wait+0x19f/0x300 [ 93.012532][ T7509] ? __pfx___futex_wait+0x10/0x10 [ 93.012559][ T7509] ? futex_hash+0x311/0x400 [ 93.012583][ T7509] ? __pfx_futex_wake_mark+0x10/0x10 [ 93.012615][ T7509] ? __pfx_futex_hash+0x10/0x10 [ 93.012638][ T7509] ? __pfx_do_anonymous_page+0x10/0x10 [ 93.012669][ T7509] futex_wait+0xe6/0x370 [ 93.012714][ T7509] ? __pfx_futex_wait+0x10/0x10 [ 93.012747][ T7509] ? __pfx___handle_mm_fault+0x10/0x10 [ 93.012771][ T7509] ? __pfx___css_rstat_updated+0x10/0x10 [ 93.012799][ T7509] do_futex+0x265/0x440 [ 93.012824][ T7509] ? __pfx_do_futex+0x10/0x10 [ 93.012847][ T7509] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 93.012873][ T7509] __x64_sys_futex+0x34f/0x4d0 [ 93.012899][ T7509] ? exc_page_fault+0x6f/0xd0 [ 93.012921][ T7509] ? __pfx___x64_sys_futex+0x10/0x10 [ 93.012955][ T7509] do_syscall_64+0x123/0x790 [ 93.012980][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.012999][ T7509] RIP: 0033:0x7f8bf1b9e159 [ 93.013014][ T7509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.013030][ T7509] RSP: 002b:00007f8bf2a0b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.013050][ T7509] RAX: ffffffffffffffda RBX: 00007f8bf1e26188 RCX: 00007f8bf1b9e159 [ 93.013062][ T7509] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bf1e26188 [ 93.013073][ T7509] RBP: 00007f8bf1e26180 R08: 0000000000000000 R09: 0000000000000000 [ 93.013084][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.013094][ T7509] R13: 00007f8bf1e26218 R14: 00007ffd4fee6cd0 R15: 00007ffd4fee6db8 [ 93.013119][ T7509] [ 93.105871][ T5815] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 93.135949][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 93.175899][ T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 93.256947][ T5815] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.257789][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.257806][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.257817][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.257835][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.260803][ T5815] usb 8-1: config 0 descriptor?? [ 93.337410][ T30] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 93.338844][ T30] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 93.338881][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.340717][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 93.340736][ T30] usb 6-1: Product: syz [ 93.340748][ T30] usb 6-1: Manufacturer: syz [ 93.348420][ T30] iuu_phoenix 6-1:1.0: required endpoints missing [ 93.551496][ T5877] usb 6-1: USB disconnect, device number 11 [ 93.674505][ T5815] hid_parser_main: 5 callbacks suppressed [ 93.674525][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674549][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674568][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674587][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674606][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674624][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674643][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674662][ T5815] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.674763][ T5815] plantronics 0003:047F:FFFF.0004: collection stack underflow [ 93.674780][ T5815] plantronics 0003:047F:FFFF.0004: item 0 0 0 12 parsing failed [ 93.676618][ T5815] plantronics 0003:047F:FFFF.0004: parse failed [ 93.676691][ T5815] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 93.909791][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 94.093988][ T44] audit: type=1400 audit(1789063987.107:726): avc: denied { ioctl } for pid=7530 comm="syz.1.376" path="socket:[17804]" dev="sockfs" ino=17804 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.125713][ T5878] Process accounting resumed [ 95.151390][ T44] audit: type=1400 audit(1789063988.167:727): avc: denied { bind } for pid=7557 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.151601][ T44] audit: type=1400 audit(1789063988.167:728): avc: denied { connect } for pid=7557 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.277609][ T44] audit: type=1400 audit(1789063988.297:729): avc: denied { connect } for pid=7562 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.435911][ T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 95.606625][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.607781][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.607806][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.607825][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.607857][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.610159][ T35] usb 7-1: config 0 descriptor?? [ 95.950240][ T5830] usb 8-1: USB disconnect, device number 21 [ 96.024204][ T35] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 96.024232][ T35] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 96.044890][ T35] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.152286][ T7579] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.581957][ T7588] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 97.043628][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 97.089725][ T7593] capability: warning: `syz.3.394' uses 32-bit capabilities (legacy support in use) [ 97.119897][ T7595] sock: sock_timestamping_bind_phc: sock not bind to device [ 97.211879][ T7603] jffs2: notice: (7603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.223098][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 97.223118][ T44] audit: type=1400 audit(1789063990.247:743): avc: denied { write } for pid=7602 comm="syz.0.398" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.223844][ T44] audit: type=1400 audit(1789063990.247:744): avc: denied { add_name } for pid=7602 comm="syz.0.398" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.238643][ T44] audit: type=1400 audit(1789063990.257:745): avc: denied { read write open } for pid=7602 comm="syz.0.398" path="/65/file0/test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.256810][ T44] audit: type=1400 audit(1789063990.277:746): avc: denied { read } for pid=7602 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.326193][ T7561] usb 7-1: string descriptor 0 read error: -71 [ 97.381402][ T7607] syzkaller0: entered promiscuous mode [ 97.381424][ T7607] syzkaller0: entered allmulticast mode [ 97.406535][ T30] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 97.456512][ T5878] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 97.514639][ T7618] ceph: Path missing in source [ 97.519021][ T7616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.566697][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 97.567589][ T30] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.568738][ T30] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.568791][ T30] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.568811][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.568835][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.571031][ T30] usb 8-1: config 0 descriptor?? [ 97.587908][ T5878] usb 7-1: device descriptor read/64, error -32 [ 97.651706][ T44] audit: type=1400 audit(1789063990.667:747): avc: denied { write } for pid=7624 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 97.656937][ T44] audit: type=1400 audit(1789063990.677:748): avc: denied { read } for pid=7624 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 97.673039][ T7626] affs: No valid root block on device sr0 [ 97.825911][ T5878] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 97.906522][ T5830] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.919060][ T44] audit: type=1400 audit(1789063990.937:749): avc: denied { getopt } for pid=7631 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.956095][ T7636] sctp: [Deprecated]: syz.2.409 (pid 7636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.956095][ T7636] Use struct sctp_sack_info instead [ 97.960370][ T44] audit: type=1400 audit(1789063990.977:750): avc: denied { write } for pid=7635 comm="syz.2.409" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 97.987828][ T30] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 98.034239][ T7638] netlink: 112 bytes leftover after parsing attributes in process `syz.2.409'. [ 98.034942][ T44] audit: type=1400 audit(1789063991.047:751): avc: denied { write } for pid=7635 comm="syz.2.409" lport=60771 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.065890][ T5830] usb 6-1: Using ep0 maxpacket: 16 [ 98.067316][ T5830] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.068287][ T5830] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 98.068309][ T5830] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 98.171188][ T7640] netlink: 84 bytes leftover after parsing attributes in process `syz.2.410'. [ 98.181795][ T30] usb 8-1: USB disconnect, device number 22 [ 98.652303][ T7645] No source specified [ 98.656298][ T5878] usb 7-1: device descriptor read/64, error -32 [ 98.734661][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 98.896191][ T5878] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 98.917263][ T5878] usb 7-1: device firmware changed [ 98.922523][ T10] usb 7-1: USB disconnect, device number 10 [ 98.952809][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 99.066395][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 99.226792][ T10] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 99.227790][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 99.227813][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3072, setting to 64 [ 99.229581][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.229600][ T10] usb 7-1: Product: syz [ 99.229611][ T10] usb 7-1: Manufacturer: syz [ 99.234530][ T10] iuu_phoenix 7-1:1.0: required endpoints missing [ 99.439316][ T10] usb 7-1: USB disconnect, device number 11 [ 99.669129][ T7671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7671 comm=syz.0.417 [ 100.184613][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.422'. [ 100.192548][ T7696] netlink: 'syz.3.422': attribute type 39 has an invalid length. [ 100.205364][ T7696] hsr_slave_0 (unregistering): left promiscuous mode [ 100.292590][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 100.298993][ T7699] bridge4: entered promiscuous mode [ 100.299006][ T7699] bridge4: entered allmulticast mode [ 100.645918][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.645944][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.645961][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.645978][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.698846][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.704403][ T5830] usb 6-1: can't set config #1, error -71 [ 100.708361][ T5830] usb 6-1: USB disconnect, device number 12 [ 100.789640][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.818065][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.844551][ T7727] tc_dump_action: action bad kind [ 100.890864][ T7736] devpts: Bad value for 'max' [ 100.901973][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 100.902515][ T44] audit: type=1400 audit(1789063993.917:752): avc: denied { mount } for pid=7735 comm="syz.1.434" name="/" dev="rpc_pipefs" ino=19315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 100.907008][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 100.912500][ T7737] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 100.955756][ T7741] [ 100.956945][ T7741] ====================================================== [ 100.959912][ T7741] WARNING: possible circular locking dependency detected [ 100.962716][ T7741] syzkaller #0 Tainted: G L [ 100.965223][ T7741] ------------------------------------------------------ [ 100.968003][ T7741] syz.2.437/7741 is trying to acquire lock: [ 100.970145][ T7741] ffff888020643580 (&sb->s_type->i_mutex_key#31){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 100.973958][ T7741] [ 100.973958][ T7741] but task is already holding lock: [ 100.976855][ T7741] ffffffff9047d980 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 100.980610][ T7741] [ 100.980610][ T7741] which lock already depends on the new lock. [ 100.980610][ T7741] [ 100.984228][ T7741] [ 100.984228][ T7741] the existing dependency chain (in reverse order) is: [ 100.987718][ T7741] [ 100.987718][ T7741] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 100.990458][ T7741] lock_acquire+0x1d1/0x380 [ 100.992000][ T7741] __mutex_lock+0x1a4/0x1bd0 [ 100.993626][ T7741] tcm_alloc_inst+0x5f/0x1e0 [ 100.995298][ T7741] try_get_usb_function_instance+0x136/0x1f0 [ 100.997376][ T7741] usb_get_function_instance+0x16/0x70 [ 100.999537][ T7741] function_make+0x18c/0x3f0 [ 101.001365][ T7741] configfs_mkdir+0x525/0xd40 [ 101.003422][ T7741] vfs_mkdir+0x364/0x850 [ 101.005361][ T7741] filename_mkdirat+0x48b/0x5e0 [ 101.007544][ T7741] __x64_sys_mkdir+0x6b/0x90 [ 101.009410][ T7741] do_syscall_64+0x123/0x790 [ 101.011471][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.013974][ T7741] [ 101.013974][ T7741] -> #2 (func_lock){+.+.}-{4:4}: [ 101.017528][ T7741] lock_acquire+0x1d1/0x380 [ 101.019552][ T7741] __mutex_lock+0x1a4/0x1bd0 [ 101.021609][ T7741] try_get_usb_function_instance+0x26/0x1f0 [ 101.024131][ T7741] usb_get_function_instance+0x16/0x70 [ 101.026487][ T7741] function_make+0x18c/0x3f0 [ 101.028550][ T7741] configfs_mkdir+0x525/0xd40 [ 101.030578][ T7741] vfs_mkdir+0x364/0x850 [ 101.032513][ T7741] filename_mkdirat+0x48b/0x5e0 [ 101.034649][ T7741] __x64_sys_mkdirat+0x89/0xc0 [ 101.036765][ T7741] do_syscall_64+0x123/0x790 [ 101.038787][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.041337][ T7741] [ 101.041337][ T7741] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 101.044615][ T7741] lock_acquire+0x1d1/0x380 [ 101.046667][ T7741] __mutex_lock+0x1a4/0x1bd0 [ 101.048738][ T7741] uvcg_streaming_header_allow_link+0x7c/0x650 [ 101.051404][ T7741] configfs_symlink+0x695/0x1340 [ 101.053550][ T7741] vfs_symlink+0x178/0x4d0 [ 101.055582][ T7741] filename_symlinkat+0x2a6/0x560 [ 101.057728][ T7741] __x64_sys_symlink+0x79/0xb0 [ 101.059899][ T7741] do_syscall_64+0x123/0x790 [ 101.061993][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.064493][ T7741] [ 101.064493][ T7741] -> #0 (&sb->s_type->i_mutex_key#31){++++}-{4:4}: [ 101.067966][ T7741] check_prev_add+0xeb/0xe60 [ 101.070023][ T7741] __lock_acquire+0x1528/0x1f40 [ 101.072121][ T7741] lock_acquire+0x1d1/0x380 [ 101.073999][ T7741] down_write+0x8b/0x1f0 [ 101.075955][ T7741] configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.078381][ T7741] usbg_make_tpg+0x251/0x610 [ 101.080459][ T7741] target_fabric_make_tpg+0xab/0x8c0 [ 101.082798][ T7741] configfs_mkdir+0x525/0xd40 [ 101.084914][ T7741] vfs_mkdir+0x364/0x850 [ 101.086874][ T7741] filename_mkdirat+0x48b/0x5e0 [ 101.089055][ T7741] __x64_sys_mkdir+0x6b/0x90 [ 101.091163][ T7741] do_syscall_64+0x123/0x790 [ 101.093214][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.095713][ T7741] [ 101.095713][ T7741] other info that might help us debug this: [ 101.095713][ T7741] [ 101.099770][ T7741] Chain exists of: [ 101.099770][ T7741] &sb->s_type->i_mutex_key#31 --> func_lock --> tpg_instances_lock [ 101.099770][ T7741] [ 101.105110][ T7741] Possible unsafe locking scenario: [ 101.105110][ T7741] [ 101.107961][ T7741] CPU0 CPU1 [ 101.110092][ T7741] ---- ---- [ 101.112225][ T7741] lock(tpg_instances_lock); [ 101.114142][ T7741] lock(func_lock); [ 101.116738][ T7741] lock(tpg_instances_lock); [ 101.119669][ T7741] lock(&sb->s_type->i_mutex_key#31); [ 101.121884][ T7741] [ 101.121884][ T7741] *** DEADLOCK *** [ 101.121884][ T7741] [ 101.125073][ T7741] locks held by syz.2.437/7741: 4, last CPU#3: [ 101.127535][ T7741] #0: ffff888024188460 (sb_writers#19){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 101.131284][ T7741] #1: ffff88803b5d6500 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 101.135553][ T7741] #2: ffffffff8ffb0888 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 101.138520][ T7741] #3: ffffffff9047d980 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 101.141556][ T7741] [ 101.141556][ T7741] stack backtrace: [ 101.143371][ T7741] CPU: 3 UID: 0 PID: 7741 Comm: syz.2.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.146636][ T7741] Tainted: [L]=SOFTLOCKUP [ 101.148001][ T7741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.151729][ T7741] Call Trace: [ 101.153113][ T7741] [ 101.154339][ T7741] dump_stack_lvl+0x100/0x190 [ 101.156274][ T7741] print_circular_bug.cold+0x178/0x1be [ 101.156341][ T5877] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 101.157178][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3072, setting to 64 [ 101.158395][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.158413][ T5877] usb 5-1: Product: syz [ 101.158425][ T5877] usb 5-1: Manufacturer: syz [ 101.163003][ T5877] iuu_phoenix 5-1:1.0: required endpoints missing [ 101.173463][ T7741] check_noncircular+0x146/0x160 [ 101.175503][ T7741] check_prev_add+0xeb/0xe60 [ 101.177198][ T7741] __lock_acquire+0x1528/0x1f40 [ 101.178729][ T7741] ? rcu_is_watching+0x13/0xc0 [ 101.180261][ T7741] lock_acquire+0x1d1/0x380 [ 101.181738][ T7741] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.184028][ T7741] ? __pfx___might_resched+0x10/0x10 [ 101.186126][ T7741] down_write+0x8b/0x1f0 [ 101.187889][ T7741] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.190312][ T7741] ? __pfx_down_write+0x10/0x10 [ 101.192341][ T7741] ? kstrtou16+0xde/0x130 [ 101.194106][ T7741] configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.196494][ T7741] usbg_make_tpg+0x251/0x610 [ 101.198359][ T7741] ? __pfx_usbg_make_tpg+0x10/0x10 [ 101.200453][ T7741] ? find_held_lock+0x2b/0x80 [ 101.202383][ T7741] ? __pfx_usbg_make_tpg+0x10/0x10 [ 101.204477][ T7741] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 101.206874][ T7741] target_fabric_make_tpg+0xab/0x8c0 [ 101.208778][ T7741] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 101.210855][ T7741] configfs_mkdir+0x525/0xd40 [ 101.212659][ T7741] ? may_create+0x285/0x440 [ 101.214458][ T7741] ? __pfx_configfs_mkdir+0x10/0x10 [ 101.216142][ T7741] vfs_mkdir+0x364/0x850 [ 101.217440][ T7741] filename_mkdirat+0x48b/0x5e0 [ 101.219034][ T7741] ? __pfx_filename_mkdirat+0x10/0x10 [ 101.220907][ T7741] ? strncpy_from_user+0x19d/0x2d0 [ 101.222485][ T7741] ? do_getname+0x191/0x390 [ 101.223898][ T7741] __x64_sys_mkdir+0x6b/0x90 [ 101.225306][ T7741] do_syscall_64+0x123/0x790 [ 101.226719][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.228559][ T7741] RIP: 0033:0x7f8bbdf9e159 [ 101.230011][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.236480][ T7741] RSP: 002b:00007f8bbc1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 101.239867][ T7741] RAX: ffffffffffffffda RBX: 00007f8bbe225fa0 RCX: 00007f8bbdf9e159 [ 101.242947][ T7741] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 101.245897][ T7741] RBP: 00007f8bbe03503b R08: 0000000000000000 R09: 0000000000000000 [ 101.248970][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.252072][ T7741] R13: 00007f8bbe226038 R14: 00007f8bbe225fa0 R15: 00007fffdbabdcf8 [ 101.255251][ T7741] [ 101.364184][ T5877] usb 5-1: USB disconnect, device number 15