last executing test programs: 1m38.370714554s ago: executing program 1 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="8d522bd88978d6d9fa684ba45f4b691022965b55fbb11c1d9bcdac0659040000000800000032fee1eafd787035349f20c099125068891e3cb5c6dbf58767c20921593372580b46e81765cf77883ded322a64d10ca039fd23000000ade19d61d6cda48c529cc380d30e18e0c96289d7b35fff9a625e86ed8cc45ad3847d4330b694816de4abed93a7922c59c8b3290ba185363cbefcd839f8ffffffffbfffffa2003a043aa5430a6ffa94", 0xaa}], 0x3}}], 0x1, 0x20040082) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 1m38.243740268s ago: executing program 1 (id=366): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) (fail_nth: 4) 1m38.243369558s ago: executing program 1 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000400), 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000400), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)) r4 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000540)={0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100003100090027bd70000000000004000000100016"], 0x104}, 0x1, 0x0, 0x0, 0x4e8d4}, 0x24004804) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000580)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000005c0)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000005c0)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}) connect$vsock_stream(r6, &(0x7f0000000680)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000680)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) syz_emit_ethernet(0x3b6, &(0x7f0000000700)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f"], 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000700)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/split_huge_pages\x00', 0x1, 0x84) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x2000000, 0x10, r7, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000800)=[{&(0x7f0000000840)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) (async) writev(r9, &(0x7f0000000800)=[{&(0x7f0000000840)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="89f6ffff00000000280012806a4cf5b8b339c52eacf5f75450f8eb360b0001006272696467650000180002800c0018000200000000000000050019000300000009c02fccf495f808bfde2c01593d15c9cba97f2717"], 0x48}}, 0x404c010) 1m37.341163248s ago: executing program 1 (id=381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000600)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000800)=0x7, 0x4) recvfrom$inet(r0, &(0x7f0000000840)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022180000000501150025bf0904a101090192008c0508950129309102c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000500)='./file0\x00') rmdir(&(0x7f0000000540)='./file2\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x95}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='1', 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x81, 0x4, 0x2, 0x0, 0xffffffc0, 0xb3, 0x1, 0x8b, 0x5, 0x3, 0xc, 0x15, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x6e, '\x00', 0x30, 0x240}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m34.720796647s ago: executing program 0 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000580), 0x111, 0x5}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0xc0, 0x0, 0x6}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0xc0, 0x0, 0x6}]}) getpgid(0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffff8, 0x0, 0x2]}}) syz_kvm_add_vcpu$x86(r3, &(0x7f00000005c0)={0x0, &(0x7f0000000200)=[@code={0xa, 0x5f, {"460f008f00500000653e450fc776016565542e410f3566baf80cb84449ff8fef66bafc0ced4015d10000003666459bb805000000b9560000000f01d9400fa14cd1d1425e32f695fe008e2800f83d"}}], 0x5f}) (async) r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000005c0)={0x0, &(0x7f0000000200)=[@code={0xa, 0x5f, {"460f008f00500000653e450fc776016565542e410f3566baf80cb84449ff8fef66bafc0ced4015d10000003666459bb805000000b9560000000f01d9400fa14cd1d1425e32f695fe008e2800f83d"}}], 0x5f}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000000020657020000000600000000050000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c000180080001400a010102050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', r10, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x300}, 0xa0, 0x8000, 0x8, 0x202}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', r10, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x300}, 0xa0, 0x8000, 0x8, 0x202}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0xffffffffffffffd2}, 0x48) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m34.210012429s ago: executing program 1 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000780)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000007c0)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x32, {"b80000c0fec70010000000de0ec7401020590000c70011000000c74010000000ff"}}], 0x32}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 11) 1m33.790848232s ago: executing program 1 (id=425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x34000, 0xe0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x92, 0x8}]}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x6, 0x10000, 0x0, 0x54, 0x6}, 0x9c) 1m33.722287668s ago: executing program 32 (id=425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x34000, 0xe0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x92, 0x8}]}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x6, 0x10000, 0x0, 0x54, 0x6}, 0x9c) 1m33.66861157s ago: executing program 0 (id=426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x2) syz_io_uring_setup(0x3b8c, &(0x7f0000000240)={0x0, 0x800009b6, 0x2, 0x23, 0x2bb, 0x0, r0}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) 1m33.668401312s ago: executing program 0 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x8) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000280)={0x7a, {{0x29, 0x0, 0x2000000, @loopback, 0x800005}}}, 0x88) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x21) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000200)) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='100', 0x3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write(r3, &(0x7f00000003c0)='transport=loop,nqn=n', 0x14) 1m33.499080579s ago: executing program 0 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x4) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000100)={0x0}) 1m33.401121387s ago: executing program 0 (id=430): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x100, "b9d9b462a25144b561096b8463345346abca4ac5ecd3d882059b311387ba5454", 0x5, 0x7ff, 0x3, 0x2, 0x8c91, 0x1, 0x7, 0x600b3be6, [0x7, 0x810001, 0x4, 0x8]}) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/2, 0x2) 1m33.046757475s ago: executing program 0 (id=436): r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x400002, r3}) close_range(r0, 0xffffffffffffffff, 0x3f000000) 1m32.949718318s ago: executing program 33 (id=436): r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x400002, r3}) close_range(r0, 0xffffffffffffffff, 0x3f000000) 59.390226397s ago: executing program 5 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x88840, 0x0) syz_open_dev$video4linux(&(0x7f00000002c0), 0x7ffffffff, 0x148600) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000100)="d9e1bad104b80e00efd3cc670f79a6ef5e00000f01c23e64f4baf80c66b883636f8266efbafc0cecb800008ed8baf80c66b85dd6468166efbafc0cecba430066b88200000066ef"}], 0x0, 0x3e, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0xdc6f1de4ad8d21ca, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000580), 0x10) sendmsg$can_bcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc_mnt\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x4000004) capset(&(0x7f0000000880)={0x20080522}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x407, 0x100000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) accept(r3, 0x0, &(0x7f0000000800)) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x40884) read(r9, &(0x7f00000007c0)=""/1, 0x1000) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000001a40)=@svm={0x0, 0x1, 0x1080, {0x5000, 0xffffffff}, {"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"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 59.257047353s ago: executing program 5 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000001c0)=0x80000001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x12255f12, 0x2, 0x6, 0x0, 0x2, 0x5, 0x4, 0xaba, 0x974, 0x74, 0x0, 0xf, 0x3, 0x1000, 0x10000, 0x4], 0x1ff8, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 58.954428224s ago: executing program 5 (id=849): socket(0x10, 0x803, 0x2) syz_io_uring_setup(0x3b8c, &(0x7f0000000240)={0x0, 0x800009b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) 58.849968882s ago: executing program 5 (id=850): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000340)={{0x2, 0x0, 0x2000000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x403, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffd, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x99, 0xb, 0x7ff, 0xfffffffe, 0x0, 0x3c, 0x93d, 0x4, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x200005, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x2, 0x0, 0x0, 0x40, 0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x8, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x2000000000000000, 0x0, 0x80000, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0x3, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x100000000, 0x4, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0xffffffffffffffff, 0xde4, 0x5, 0x0, 0x100000000]}) r1 = socket$netlink(0x10, 0x3, 0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x2, 0x0, &(0x7f0000001180)) sendmsg$nl_netfilter(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x11, 0x3, 0x201, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x2c, 0x6, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@wrmsr={0x65, 0x20, {0x40000010}}], 0x20}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r6, &(0x7f0000000940)={&(0x7f0000000980)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000a00)="dc", 0x1}], 0x1}, 0x48043) r8 = dup(r6) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000a40)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0xfffd, 0x457, 0x3, 0x50, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(r7, &(0x7f0000000b40)={0x7, 0x1b, 0x3}, 0xfeca) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000b80)={'#! ', './file0', [], 0xa, "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"}, 0x411) ioctl$KVM_RUN(r5, 0xae80, 0x0) 58.790913302s ago: executing program 5 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000400), 0x40402, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$tun(r2, &(0x7f0000000480)={@val={0xffff, 0x11}, @val={0x1, 0x1, 0x1, 0x8, 0x2, 0x1}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @rand_addr=0x64010102}}, 0x2a) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="13", 0x1}], 0x1}, 0x48043) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r4, &(0x7f00000005c0)='27', 0x2) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = syz_open_procfs$namespace(r7, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2c, r6, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x2c}}, 0x90) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000640)=ANY=[], 0x8) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7fffffff}, 0x90) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r3, 0x84, 0x83, &(0x7f0000000000)={0x1, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb9, 0x1a}, 0x9c) 58.600992579s ago: executing program 5 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x80a0000, 0x100000, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'vlan1\x00', 0x100}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x7ff, 0x12) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0xf010000, 0x3, 0x20000004, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980908, 0x5, '\x00', @p_u8=0x0}}) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000280)={0x2, 0x2e5, 0x5, 0xa, 0xb, 0x800000000000003}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x489, 0x0, 0x5}]}) 43.59821292s ago: executing program 34 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x80a0000, 0x100000, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'vlan1\x00', 0x100}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x7ff, 0x12) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0xf010000, 0x3, 0x20000004, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980908, 0x5, '\x00', @p_u8=0x0}}) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000280)={0x2, 0x2e5, 0x5, 0xa, 0xb, 0x800000000000003}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x489, 0x0, 0x5}]}) 1.150445529s ago: executing program 2 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.102052055s ago: executing program 2 (id=1400): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x201, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x60) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x7fff, 0x10000, 0xb3d, 0xfffffffe, 0xff, "ad6e4a08000461939244e185de86000100", 0x8, 0xdb}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)) readv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1b8, 0xfffffec7, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x448, 0x0, 0x80, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1'}, 0x20, '32', 0x20, 'R', ' 1 allow_discards'}}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x2) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000cc0)='./dm0\x00', 0x6180, r4) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000d00)='./dm0\x00', 0x2, 0x0) 997.887815ms ago: executing program 2 (id=1404): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000200)=""/163, 0xa3}) (async) msgget(0x0, 0x209) msgget(0x0, 0x445) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000010000000020000000900000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dbbbdcf5e9cfc18d67e77a79afd601867641f75cd8a96a0740b0cc82361da8e2984cccdf717fd225b73c7981dfb46eabf16fb9438ae34181fa2a0bd472d13352c300"/107], 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='fdinfo/3\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) msgget(0x3, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x7, 0x1, 0x7f, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r2, 0x18, 0x0, @val=@netkit={@void, @value=r2, @void, @void, r4}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7328, 0x0, 0x0, 0x0, 0x38}, [@kfunc]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) (async) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) 900.179347ms ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x40}]}}}]}, 0x58}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={0x1, 0x1}, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000700)={0x0, 0xe0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400202024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r5], 0x22c}}, 0x0) 899.942959ms ago: executing program 2 (id=1406): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x375}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) (fail_nth: 82) read(r0, &(0x7f0000000440)=""/133, 0x85) 640.413274ms ago: executing program 3 (id=1411): r0 = socket(0x10, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xd864}}) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092ad44886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000020000000005000100110000000c000500000000000a"], 0xe1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x42, @private1, @mcast1, 0x40, 0x40, 0x6, 0x41}}) 639.897177ms ago: executing program 6 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000000)=0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="7b87f2e1d253c5feb1a763f6b592df5e078b54f3f1efcaeb3781756097b27d717e79d0e10e9e058439008f51b9a7378519c04426c6daa9ef574d9ebb3ab74972dd25742c54299ae63a8cbb"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 639.283859ms ago: executing program 2 (id=1413): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x4a7}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x88841, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xe7) sendto$inet(r4, 0x0, 0x0, 0x4008245, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x278, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r2}, [@verity={0x0, 0x48, 0x0, 0x140, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '512', 0x20, 0xc4, 0x20, 0xfa, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @none, ' 2 ignore_zero_blocks check_at_most_once'}}]}) 638.734247ms ago: executing program 3 (id=1414): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_clone3(&(0x7f0000003240)={0x20000, &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100), {0x1}, &(0x7f0000002140)=""/173, 0xad, &(0x7f0000002200)=""/4096, &(0x7f0000003200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) write$FUSE_LK(r0, &(0x7f00000032c0)={0x28, 0x0, r1, {{0x4, 0x100000000, 0x1, r4}}}, 0x28) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x7b) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000003300)={'batadv_slave_0\x00', {0x2, 0x4e24, @broadcast}}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000003340)={0x1f, 0x0, 0x1}, 0x6) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000033c0)=@generic={&(0x7f0000003380)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000036c0)={0xffffffffffffffff, 0xe0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000003440)=[0x0], &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000034c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003500), &(0x7f0000003540), 0x8, 0x9, 0x8, 0x8, &(0x7f0000003580)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003880)={&(0x7f0000003700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x12, 0x34, 0x0, 0x3, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x4, 0x0, 0x13, 0x0, 0xa, [{0x7, 0x7, 0x69d}, {0x6, 0x7fffffff, 0x4}, {0xf, 0x40, 0x1}, {0x5, 0x8, 0x3}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x5, 0x2}]}, @union={0x6, 0x8, 0x0, 0x5, 0x0, 0x3, [{0xe, 0x3, 0x2}, {0xf, 0x5, 0x6}, {0x4, 0x0, 0x100}, {0x0, 0x2, 0x4}, {0xe, 0x4, 0xc}, {0xf, 0x1, 0x8}, {0x5, 0x2, 0x80000000}, {0xb, 0x4}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x30, 0x0]}}, &(0x7f0000003840)=""/26, 0x107, 0x1a, 0x1, 0x8, 0x10000, @value=r5}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000038c0)=@base={0x19, 0x7, 0xff, 0x6, 0x20040, r8, 0x6a6a, '\x00', r9, r10, 0x4, 0x2, 0x3}, 0x50) r12 = socket$inet_udp(0x2, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003940)='./file0\x00', &(0x7f0000003980), 0x1120000, &(0x7f00000039c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@pcr={'pcr', 0x3d, 0x5}}, {@uid_lt={'uid<', r2}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_user={'subj_user', 0x3d, ','}}]}}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003b80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000003ac0)="cf945100aec516844ec0ffcaf5729a08c8f7b90b0c9469ca814f1a9206e13f40b510546dad280e73d603e6e8ee5c91ba2af933960fc4633b7864ed9cdeaca8db71be7021dd932289951010b6d7e0cf7ff9293f2d7417ad2d5222bed599832012c381b3ad244b998884de0c421627c90383fd41b9560456f382ac9b473eb125654854f08aa5baf71f04d3081d84f6", 0x8e, r6}, 0x68) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000003c00)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000003d00)=0xe8) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000003d40), 0x3) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000003d80)={@rand_addr=0x64010100, @empty, r13}, 0xc) bind$l2tp6(r6, &(0x7f0000003dc0)={0xa, 0x0, 0xce6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff7, 0x4}, 0x20) setxattr$security_ima(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40), &(0x7f0000003e80)=@ng={0x4, 0xe, "93331712c0ad3d35c94a"}, 0xc, 0x3) r15 = fsmount(0xffffffffffffffff, 0x1, 0x2) setsockopt$inet_tcp_TLS_TX(r15, 0x11a, 0x1, &(0x7f0000003ec0)=@gcm_256={{0x304}, "41036d3c364f1a02", "097fcfdd76204632146904df035293fbfff8ebba0f4fd07e4e482ca1b920d38b", "b48f55bf", "b0efe8ad75bdb118"}, 0x38) connect$l2tp6(r15, &(0x7f0000003f00)={0xa, 0x0, 0x8301, @local, 0xa091, 0x3}, 0x20) dup3(r11, r7, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r15, 0x3b89, &(0x7f0000003f80)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000003f40)}) 546.96796ms ago: executing program 3 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010001fff000000000100784ee10000000000006bea7d310d2cb2f01b75e0a062fb445041b307de7fd241b25a63e9ff03004c6003544c00884bb30660da144491c73640e7a2d8d7dc3f4178bae8a85bbe09efe9021bdb59659e97e5853149a557ef11a96bb1dd0ad13c60b0c4fa", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="400000003164040068001680640001800c00070003000000810000001000020000000000ef01000000020000100006000700000064ffffff070000000c00030006000000ff0700000c000400ffff0000ff0000000c000700010000000101000010000200010000005b06000000e00000040014000800250000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4804}, 0x4004) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)=@overlay={0x9, 0xe, 0x4, 0x4, 0x2, {}, {0x4, 0x0, 0x4, 0x5, 0x8, 0xb4, "5b1281ab"}, 0xc0, 0x3, {}, 0x9, 0x0, r9}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010001fff000000000100784ee10000000000006bea7d310d2cb2f01b75e0a062fb445041b307de7fd241b25a63e9ff03004c6003544c00884bb30660da144491c73640e7a2d8d7dc3f4178bae8a85bbe09efe9021bdb59659e97e5853149a557ef11a96bb1dd0ad13c60b0c4fa", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="2bbd7000fcdbdf0000000000000000aa40653c6837fb24049aa09351cb41ae304312016d63614e3a9b9f59d6b876a4e1e0880a05ce5b246f575582244ba27e4d25b6ad0887d2617fad48bdd5bb19aefcb24a807877539fcaf9978b5b07fe3d07a288e314e51bdf78237c57fb45e5497f4886ef6db0b827cfc26a8618dd9e8228559d65c42a59148d5d4f1e6847f09319d1604d4a747ff95589c883b5e1a6c6885a278790a14104a3d0a301780e37bde39f365d5eb738f4651dc9d1f9db1df2f916904782b1b758256ee284e7218ffbc34272e99ff93f30060000000000000098daf19b4be2f5acc6eaf694d4237ae51c83b88b2686da00945c7a59d0fe4230914159a5d8673865a47d5dff72fd6afaf60ad026dfde5abf65dbabcf4e2120e140badc5c592d0b864c7f910b8a2e484d", @ANYRES32=r6, @ANYBLOB="400000003164040068001680640001800c00070003000000810000001000020000000000ef01000000020000100006000700000064ffffff070000000c00030006000000ff0700000c000400ffff0000ff0000000c000700010000000101000010000200010000005b06000000e00000040014000800250000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4804}, 0x4004) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)=@overlay={0x9, 0xe, 0x4, 0x4, 0x2, {}, {0x4, 0x0, 0x4, 0x5, 0x8, 0xb4, "5b1281ab"}, 0xc0, 0x3, {}, 0x9, 0x0, r9}) (async) 430.484127ms ago: executing program 4 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000240)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x41) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000740)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1a, 0x4, &(0x7f0000000880)=ANY=[@ANYRES32=r4], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7, 0xfffffff7}}, './file0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 429.992877ms ago: executing program 3 (id=1419): syz_emit_ethernet(0x76, &(0x7f00000003c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x400006, 0xa, 0x4, 0x1, 0x4, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6}, 0x6, 0x2, {0x0}}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x8000000) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xd) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xffff, 0xdbb, 0x400, 0xff}) 428.545209ms ago: executing program 4 (id=1420): r0 = syz_open_dev$usbfs(&(0x7f0000000cc0), 0x204, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/sda/device/unload_heads\x00', 0x101001, 0x0) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d80), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000dc0), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000e00)={r2, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x14, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e77727d2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x6, 0x1]}}) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x21ed, &(0x7f0000000140)={0x0, 0x792b, 0x1, 0x1, 0x157}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r5}}) syz_ublk_add_dev(r5, r6, r7, r8, 0x0, 0x0) read$FUSE(r4, &(0x7f00000010c0)={0x2020}, 0x67ec255e) 359.968372ms ago: executing program 6 (id=1421): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80102, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r0, &(0x7f00000001c0)="0ae97c9265bd493b1b7293bce552aab823078da82d05d075107a75e89e5dd7bf00bd7eb0a424797bd1fd0674344c467bea35281bfcbe42bef9a3feae1d72cd93c2f5082cf10ba83a9e9e56f21d37902b14c6b0f0d59a5ecad5e482e8", 0x5c, 0x400c800, &(0x7f0000000300)={0x11, 0xf7, r3, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0xffff9047, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000180)={r5, 0x3, 0x2, r5}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa0800ffffffffff86dd60b8192300020000fe8000000000000000000000000000aafe80000000000000b8fa2f464e7fb54d4600000000009070ab8ceec3e6386eaa49e7de7665d718000000"], 0x0) 359.812663ms ago: executing program 3 (id=1422): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x375}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) (fail_nth: 83) read(r0, &(0x7f0000000440)=""/133, 0x85) 260.002914ms ago: executing program 4 (id=1423): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="b4372f7e7a9ec05a21fb1eece760ef700a8109714008a5405980d8b1a877342e539207e3ed5fe85d6e7fd58d7473810ee3431a8ae46578ee48bd49867d9105ec65f4796aac9f025c99f14376146013cd076e6b486ee4c6ebbc57726117fd104b4e2f045d3119f708f5703a4e71fff48b84adbd66ea0ac65eafbc04d8cbaca68f6d4d13bc710ac64014854cb9d36837c02cc584567003705ae55373df260e7329b1499a112e34a91a58907486c7ccb76a4a430ea4efffd133b0b034e7b8eb", @ANYRESOCT, @ANYRES16], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x5d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000000101040000000000000000020000005000fb5847f8666fd5477e01801400018008000100ac1e010108000200ac1414aa0c00028005000100000000002c00018014000300ff02000000000000000000ff010000000000000000000000000001240002801400018008000100e000000108"], 0x90}}, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0xa, 0x4000, @fd_index=0x7, 0x2, 0xfffffffffffffffd, 0x0, 0x8, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0}}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000840)={{@align=0x22, {0x3, 0x9, 0x1, 0x7}}, {{[0x1, 0xd1d, 0x5, 0x2]}, 0x0, 0x2, 0x9, 0x0, &(0x7f0000000780)=[{{@_ha_fsid={[0x4, 0x4]}, {0x8000, 0x10, 0x9}}, 0x4, 0x0, '-*-*\x00'}, {{@align=0x7, {0x7ff, 0x0, 0xf9c9, 0x10001}}, 0x100, 0x0, 'keyring\x00'}, {{@_ha_fsid={[0x5, 0x1]}, {0x8, 0xd, 0x2, 0xe8}}, 0x8, 0x0, '\x00'}, {{@align=0x8, {0x6, 0xa000, 0x7, 0x1}}, 0x2, 0x0, '\x00'}, {{@_ha_fsid={[0x9, 0x4]}, {0x3, 0x8, 0x5, 0x101000000000000}}, 0x2, 0x0, 'keyring\x00'}]}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000500)=""/110, 0x6e}], 0x2) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x20000000, 0x5, 0x10, r1, 0x20000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_ublk_add_dev(r1, r6, r3, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x1, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, r7, 0x0, 0x10}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x98) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r8, &(0x7f00000006c0)="1f701d3aa4cf98db2dd96300017eb48643ff240d5d3b509001861e3e783381c3114aae60d21a8a9edebabfea3f2ae1a3408b94d14288efe3e71d4a22a8c67b050400420473999a7ce46779a923b07c00000000000000698b7e679826b80eef6231ab10e62f70ccd4196f94f586c4c33eef6b9da943f9c3fb81ad0d4580d162", 0x7f) add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xa, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=r10, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000880), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000008c0)={0x0, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000980)={0x0}) close(r11) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffe4) 167.003066ms ago: executing program 6 (id=1424): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0xd45, @empty, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="29fac3a4cb8cc6e582e1dc1a23887064ed3a63cfcf62274018a76e1b131f98ed3bc634277ee910c0cb142e14d769adf864846202ed95de2056e825856579561987cf7e5489f3d166dd2dd85caf381630175c245d5917e01f5d90e22a75c9b79120ffdce09147bef414c4727000ac134088992b41eb906ea5b4069b19475872a47c9b268a0ea9a88da9999b011dca8faf3449673657ccde4a46ca949190", 0x9d}, {&(0x7f00000001c0)="f15d6c96d3a958ae7f013c7f06a1a4d77c5f9112c8609d4d003c6f87b9ffbdaee9ea4546cc365d4a9ca8e60f8f712bee6285c2766e8f98968ee93dde463da5b96fc5738ea6408682c3412859df815a7917be084bb42ae025ec9d", 0x5a}, {&(0x7f0000000240)="916004b7cdc581c0e8ecaaf39981f5c9993fbde0cfc91b20f5f6c0d1a61c159ee3e6de53ffa940e6d336c6a4948564262baafabf97ee887beb9b4cba43f8d610bd8457848050ab72b278b47daace70052c9b358ada9980972eaf7e", 0x5b}, {&(0x7f00000002c0)="03a169f4e621673bb5d1b2fcf8983693e00dd259ca5d997cce3068114a9ae60ea95450bc3da5099c64f421bd96e05dfb0c4aecef9475bfd7a9af01fb1c631eb964b195fed8a42b358e6259ee7901b3ef08f828640d07f681d25fb50d61e08b308edfe6309b504557f3e58993aafe00cd4ab2e4dc20818000", 0x78}, {&(0x7f0000000340)="d4de6e5a76e54baf0cf6f23ef3293da51ee21895bf3edb7e36715f", 0x1b}, {&(0x7f0000000380)="f78bd55e3630ddf1446bf24f12c0e64e26c792f81f0e0e40034a173052be370ee7dc644069afe2fbddd21e9ccef3aae9adc182a0e33042bd014150e4e37ffd793c19625307b4f318ca66e8067f8cf73255ea496c19083f1bccb3c68296bc05255b62528e50123350004dcac42f4e7f650d5e14315f19419b8b12cee22085360a18f9f2159f0751a700a5bf949191c1fbb74129dc5fc8fae613014921c1070c8afad342137f05e26186a0057664f413619c8167d94a3c7a699cc8c51534c8898ea642794b0ae4dd65d2afb9840de4d712191da9222553fb313af327b8357c", 0xde}, {&(0x7f0000000480)="542f48b09a1915a2258859bba80a0e6202a87e780a5b94afdb5e413f59754bf61bf065acad264f57d7d828ceccbb93885039555f72b0e492e9426faea4d3aeafc41593348f95c83fc1f8011a97050444442701e94fbf726c08c081219169197945581089200e89fba6fabfaa560ea3b9c29b2594300ed29925e0ffc587d7ab5d35103509", 0x84}, {&(0x7f0000000540)="ac2db87e505b3dc60e480c4628d108fce93f0baa94f9699f5a041ee5d87c2fdf7f72f121e1c9c51cdd4ec096a9256c78d3aba07e2c80193ce6528ee31f579e0aa39758cda112b37e3c7288bfbe4d76e88e21d59050fe75ab904c00a400c23f1cd391aee77d6f7e5b41a23b12829dc5ea372c79161e8ab2087b2b68440833fc4f81f631ccc2d2e07b6441eb0fa5aba6640191bafe189351ba0f5e", 0x9a}], 0x8, &(0x7f0000000780)=[@dstopts_2292={{0x178, 0x29, 0x4, {0x1, 0x2b, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x69, 0xe}}, @generic={0x30, 0xb4, "0698b837426e149302d948ac1ce17a821a505f1f1823965b5f350a2179ffb2c015bba7bf982870a6495eea0732185ae56a35052f8f20d2567221533d8c74f3c0abd5fe73f02e30441857aae5c45d0a3c886925a3738976f50bcce5ce07dbda9e3fe31660dca502161a3a3021d057d4a0de43013640a2c74b9c3d36dfbbb11f0b23b26f272fbea7ec5f736bbe691aee89a7380ee08f00d8d2f19d763558e605ded0638209a47d60be415dcb2fa174cf6db37a9654"}, @ra={0x5, 0x2, 0x100}, @generic={0x3, 0x85, "6a49a407c70c03190f50ca17f3d4ce5cda4fa6546b15880d2c0507071ff22cf4ee3c77376847169b0bd5efc3e7cbf6048e1a1e309fd7f50188ce3041f1c5f762b838f2b8d76ddcc03b83f27bba0f3b481c0d668b1eaead177c6e35759c228d29b261c8969ba1b7f3e5e57fba3f0b3560b1c3b0fdd41dcc98b6c1e05ae626a0fdbd5669e47f"}, @jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x1, 0xc6, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @remote, @loopback, @private2, @private2]}}}], 0x1f0}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0xa8, @loopback, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000009c0)="4ac76e4657edd529aadbee86b640037afe486fbe87288a55dded21dd3d20c2569932d058e514ca6000854c18713076ed8bc11c6bbcd888271fab0dbda7a998b905884d994cd76613b88c719b4dda98581d67d7843a3c1c382a87336e9d84d641574a5245305530b33c9ddf", 0x6b}, {&(0x7f0000000a40)="475f7b78ffdde3a136c10a692b4231b5be3e8cf0b6ad5df87630ca5411190d28338e2f734739107fd332cd10c51d93988227b4f40c059658a31571d3eb0f73a5c17a37c5bc455408", 0x48}, {&(0x7f0000000ac0)="45972277c113b029304c92c8309c17", 0xf}], 0x3, &(0x7f0000000b40)=[@hopopts={{0x20, 0x29, 0x36, {0x1d, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1, 0x0, '\x00', [@enc_lim]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x58}}], 0x3, 0x20000012) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$alg(0x26, 0x5, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x2c, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000680)=0x0) timer_settime(r3, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 165.6079ms ago: executing program 4 (id=1425): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46800c040001200000010000000200060001000000dd0000003800000045032100080000000100200002000400090000000000000005000000a86bbf2503000000ffffffff0900000004000000ae000000010000000300000001004000526f000007000000a9"], 0x78) close(r0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 109.393271ms ago: executing program 4 (id=1426): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x56, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x40000000}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x1, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_io_uring_setup(0x4b6, &(0x7f00000001c0)={0x0, 0xc568, 0x10000, 0x6, 0x20e}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0), 0xa002a0}], &(0x7f0000000400), 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x1100, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@release]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000680)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}}}]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x94, 0x2c, 0x601, 0x20000, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x3ff}, {0x400, 0x2658, 0x40000, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffe}]}}]}, 0x94}}, 0x0) write$P9_RSTATu(r2, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) 108.609319ms ago: executing program 3 (id=1427): r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_newrule={0x7c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0xa, 0x80, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e23}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x8}, @FRA_DST={0x14, 0x1, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc000) sendmsg$nl_route_sched(r2, 0x0, 0x44840) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0536"], 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x156, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket(0x400000010, 0x3, 0x0) write(r5, &(0x7f0000000180)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x100075}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffc, 0x4d}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 49.66196ms ago: executing program 6 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x4041840) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @local, 0xb}, 0x1c) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x80, 0x0) read(r2, &(0x7f00000002c0)=""/10, 0x5b) 496.423µs ago: executing program 6 (id=1429): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000c80)=[{&(0x7f0000000d00)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 263.133µs ago: executing program 4 (id=1430): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x187f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0x16, 0x7, 0x63, 0x40, 0x5, 0x20003, 0x40}}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, r0}) write(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f0000000500), 0x40c, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000580)) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='6', 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./pipe\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000ff2f00000000000001"]) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000007c0)={r6, r6, 0xd, 0x9e, &(0x7f0000000700)="c9d755af81ac7afca185a33a5e23416f275f3632d3f0df543879c4470abf10db8fc84a477181a1ecbf6e7add263e2d506fa517be96229164faa2c76c13378aa717307d0cd1598bffc9688b14d285294f1483dfe3d4561ba431a62cbb78106844803b939e26bd3f62b4bfcf9dfc9cf345a43dcadf1381dc1dcbf8c0d3cf97f559e6492da2ea2ea4183ef207305dd488ab5719b4c375523a4c78874c4f4231", 0xc0, 0x6, 0x3, 0x7, 0xc, 0x1, 0x401, 'syz1\x00'}) 0s ago: executing program 6 (id=1431): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x80000005, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x5c1d, @multicast1}, 0xfffffffffffffc70) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.1198'. [ 150.395291][ T858] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 150.525232][ T858] usb 11-1: device descriptor read/64, error -71 [ 150.745250][ T5872] net_ratelimit: 84 callbacks suppressed [ 150.745271][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.745289][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 150.765344][ T858] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 150.855574][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.855604][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 150.905233][ T858] usb 11-1: device descriptor read/64, error -71 [ 150.965231][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.965252][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 151.015989][ T858] usb usb11-port1: attempt power cycle [ 151.075321][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.075350][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 151.185598][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.185626][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 151.365236][ T858] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 151.385776][ T858] usb 11-1: device descriptor read/8, error -71 [ 151.572261][T10339] FAULT_INJECTION: forcing a failure. [ 151.572261][T10339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.572291][T10339] CPU: 0 UID: 0 PID: 10339 Comm: syz.3.1201 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.572312][T10339] Tainted: [L]=SOFTLOCKUP [ 151.572317][T10339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.572328][T10339] Call Trace: [ 151.572334][T10339] [ 151.572342][T10339] dump_stack_lvl+0x100/0x190 [ 151.572375][T10339] should_fail_ex.cold+0x5/0xa [ 151.572400][T10339] should_fail_alloc_page+0xeb/0x140 [ 151.572422][T10339] prepare_alloc_pages+0x1f0/0x5b0 [ 151.572447][T10339] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 151.572473][T10339] ? stack_trace_save+0x8e/0xc0 [ 151.572510][T10339] ? __pfx_stack_trace_save+0x10/0x10 [ 151.572531][T10339] ? stack_depot_save_flags+0x27/0xa10 [ 151.572559][T10339] ? try_charge_memcg+0x180/0xf30 [ 151.572585][T10339] ? kasan_save_stack+0x3f/0x50 [ 151.572602][T10339] ? kasan_save_stack+0x30/0x50 [ 151.572619][T10339] ? kasan_save_track+0x14/0x30 [ 151.572637][T10339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.572660][T10339] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 151.572692][T10339] ? vcpu_run+0x4009/0x60d0 [ 151.572716][T10339] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 151.572745][T10339] ? __x64_sys_ioctl+0x18e/0x210 [ 151.572762][T10339] ? do_syscall_64+0x123/0x7b0 [ 151.572783][T10339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.572824][T10339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.572867][T10339] ? policy_nodemask+0xed/0x5e0 [ 151.572891][T10339] alloc_pages_mpol+0x201/0x560 [ 151.572915][T10339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 151.572941][T10339] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 151.572965][T10339] alloc_pages_noprof+0x1a/0x160 [ 151.572990][T10339] get_free_pages_noprof+0x10/0xb0 [ 151.573007][T10339] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 151.573033][T10339] mmu_topup_memory_caches.part.0+0x93/0x170 [ 151.573060][T10339] kvm_mmu_load+0x11a/0x25b0 [ 151.573084][T10339] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 151.573104][T10339] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 151.573126][T10339] ? __pfx_kvm_mmu_load+0x10/0x10 [ 151.573147][T10339] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 151.573170][T10339] ? kvm_check_and_inject_events+0x896/0x1050 [ 151.573196][T10339] vcpu_run+0x4009/0x60d0 [ 151.573231][T10339] ? __pfx_vcpu_run+0x10/0x10 [ 151.573254][T10339] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 151.573276][T10339] ? lock_acquire+0x1d1/0x380 [ 151.573299][T10339] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 151.573325][T10339] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 151.573344][T10339] ? __local_bh_enable_ip+0xa5/0x120 [ 151.573396][T10339] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 151.573421][T10339] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 151.573453][T10339] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 151.573477][T10339] ? lock_acquire+0x1d1/0x380 [ 151.573500][T10339] ? do_raw_write_lock+0x11e/0x260 [ 151.573517][T10339] ? find_held_lock+0x2b/0x80 [ 151.573536][T10339] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 151.573560][T10339] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 151.573592][T10339] kvm_vcpu_ioctl+0x735/0x17b0 [ 151.573620][T10339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.573647][T10339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.573668][T10339] ? do_vfs_ioctl+0x241/0x13f0 [ 151.573688][T10339] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.573705][T10339] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 151.573737][T10339] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.573761][T10339] ? __fget_files+0x34/0x3d0 [ 151.573795][T10339] ? selinux_file_ioctl+0x1e0/0x290 [ 151.573812][T10339] ? selinux_file_ioctl+0x1e7/0x290 [ 151.573831][T10339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.573859][T10339] __x64_sys_ioctl+0x18e/0x210 [ 151.573880][T10339] do_syscall_64+0x123/0x7b0 [ 151.573907][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.573930][T10339] RIP: 0033:0x7ff6cd9a94d9 [ 151.573948][T10339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.573965][T10339] RSP: 002b:00007ff6ce83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.573984][T10339] RAX: ffffffffffffffda RBX: 00007ff6cdc25fa0 RCX: 00007ff6cd9a94d9 [ 151.573996][T10339] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 151.574006][T10339] RBP: 00007ff6ce83d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.574016][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.574026][T10339] R13: 00007ff6cdc26038 R14: 00007ff6cdc25fa0 R15: 00007ffe635a4408 [ 151.574052][T10339] [ 151.628103][ T858] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 151.663686][ T858] usb 11-1: device descriptor read/8, error -71 [ 151.766007][ T858] usb usb11-port1: unable to enumerate USB device [ 152.035996][T10307] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 152.037971][ T25] usb 9-1: USB disconnect, device number 12 [ 152.048949][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 152.054988][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 152.055791][ T25] ti_usb_3410_5052 9-1:2.0: device disconnected [ 152.995403][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 153.145330][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 153.145834][ T25] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.146635][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 153.146665][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25161, setting to 1024 [ 153.146685][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.151190][ T25] usb 8-1: config 0 descriptor?? [ 153.333639][T10366] netlink: 'syz.6.1209': attribute type 5 has an invalid length. [ 153.337630][T10366] ip6erspan0: entered promiscuous mode [ 153.357914][ T25] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 153.557520][ T81] usb 8-1: USB disconnect, device number 18 [ 153.673083][T10372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.829718][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1212'. [ 153.838481][T10375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=10375 comm=syz.4.1212 [ 153.894993][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 153.895013][ T43] audit: type=1400 audit(1794683178.384:1121): avc: denied { setopt } for pid=10376 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.262152][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 154.465636][T10394] FAULT_INJECTION: forcing a failure. [ 154.465636][T10394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.465666][T10394] CPU: 2 UID: 0 PID: 10394 Comm: syz.3.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.465689][T10394] Tainted: [L]=SOFTLOCKUP [ 154.465695][T10394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.465706][T10394] Call Trace: [ 154.465712][T10394] [ 154.465719][T10394] dump_stack_lvl+0x100/0x190 [ 154.465753][T10394] should_fail_ex.cold+0x5/0xa [ 154.465779][T10394] should_fail_alloc_page+0xeb/0x140 [ 154.465867][T10394] prepare_alloc_pages+0x1f0/0x5b0 [ 154.465892][T10394] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 154.465920][T10394] ? stack_trace_save+0x8e/0xc0 [ 154.465943][T10394] ? __pfx_stack_trace_save+0x10/0x10 [ 154.465966][T10394] ? stack_depot_save_flags+0x27/0xa10 [ 154.465995][T10394] ? kasan_save_stack+0x3f/0x50 [ 154.466012][T10394] ? kasan_save_stack+0x30/0x50 [ 154.466024][T10394] ? kasan_save_track+0x14/0x30 [ 154.466039][T10394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.466057][T10394] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 154.466077][T10394] ? vcpu_run+0x4009/0x60d0 [ 154.466096][T10394] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 154.466114][T10394] ? __x64_sys_ioctl+0x18e/0x210 [ 154.466128][T10394] ? do_syscall_64+0x123/0x7b0 [ 154.466146][T10394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.466176][T10394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.466197][T10394] ? policy_nodemask+0xed/0x5e0 [ 154.466217][T10394] alloc_pages_mpol+0x201/0x560 [ 154.466235][T10394] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 154.466253][T10394] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 154.466272][T10394] alloc_pages_noprof+0x1a/0x160 [ 154.466291][T10394] get_free_pages_noprof+0x10/0xb0 [ 154.466305][T10394] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 154.466325][T10394] mmu_topup_memory_caches.part.0+0x93/0x170 [ 154.466344][T10394] kvm_mmu_load+0x11a/0x25b0 [ 154.466364][T10394] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 154.466380][T10394] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 154.466397][T10394] ? __pfx_kvm_mmu_load+0x10/0x10 [ 154.466415][T10394] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 154.466432][T10394] ? kvm_check_and_inject_events+0x896/0x1050 [ 154.466454][T10394] vcpu_run+0x4009/0x60d0 [ 154.466482][T10394] ? __pfx_vcpu_run+0x10/0x10 [ 154.466500][T10394] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 154.466517][T10394] ? lock_acquire+0x1d1/0x380 [ 154.466535][T10394] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 154.466557][T10394] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 154.466571][T10394] ? __local_bh_enable_ip+0xa5/0x120 [ 154.466596][T10394] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 154.466613][T10394] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 154.466638][T10394] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 154.466661][T10394] ? lock_acquire+0x1d1/0x380 [ 154.466679][T10394] ? do_raw_write_lock+0x11e/0x260 [ 154.466696][T10394] ? find_held_lock+0x2b/0x80 [ 154.466710][T10394] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 154.466731][T10394] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 154.466755][T10394] kvm_vcpu_ioctl+0x735/0x17b0 [ 154.466777][T10394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.466797][T10394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.466813][T10394] ? do_vfs_ioctl+0x241/0x13f0 [ 154.466828][T10394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.466840][T10394] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 154.466859][T10394] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.466877][T10394] ? __fget_files+0x34/0x3d0 [ 154.466903][T10394] ? selinux_file_ioctl+0x1e0/0x290 [ 154.466917][T10394] ? selinux_file_ioctl+0x1e7/0x290 [ 154.466933][T10394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.466954][T10394] __x64_sys_ioctl+0x18e/0x210 [ 154.466975][T10394] do_syscall_64+0x123/0x7b0 [ 154.467032][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.467052][T10394] RIP: 0033:0x7ff6cd9a94d9 [ 154.467066][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.467079][T10394] RSP: 002b:00007ff6ce83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.467096][T10394] RAX: ffffffffffffffda RBX: 00007ff6cdc25fa0 RCX: 00007ff6cd9a94d9 [ 154.467109][T10394] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 154.467119][T10394] RBP: 00007ff6ce83d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.467152][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.467162][T10394] R13: 00007ff6cdc26038 R14: 00007ff6cdc25fa0 R15: 00007ffe635a4408 [ 154.467186][T10394] [ 154.623175][ T43] audit: type=1400 audit(1794683179.114:1122): avc: denied { ioctl } for pid=10396 comm="syz.2.1219" path="socket:[55504]" dev="sockfs" ino=55504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.671317][T10399] FAULT_INJECTION: forcing a failure. [ 154.671317][T10399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.671346][T10399] CPU: 0 UID: 0 PID: 10399 Comm: syz.3.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.671371][T10399] Tainted: [L]=SOFTLOCKUP [ 154.671378][T10399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.671388][T10399] Call Trace: [ 154.671410][T10399] [ 154.671417][T10399] dump_stack_lvl+0x100/0x190 [ 154.671498][T10399] should_fail_ex.cold+0x5/0xa [ 154.671526][T10399] should_fail_alloc_page+0xeb/0x140 [ 154.671550][T10399] prepare_alloc_pages+0x1f0/0x5b0 [ 154.671574][T10399] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 154.671600][T10399] ? lru_gen_add_folio+0x236/0x15d0 [ 154.671620][T10399] ? __css_rstat_updated+0x1ce/0x590 [ 154.671648][T10399] ? __lock_acquire+0x5c0/0x1f40 [ 154.671674][T10399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.671707][T10399] ? lock_acquire+0x1d1/0x380 [ 154.671731][T10399] ? do_raw_spin_lock+0x128/0x260 [ 154.671750][T10399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 154.671768][T10399] ? find_held_lock+0x2b/0x80 [ 154.671794][T10399] ? __lock_acquire+0x5c0/0x1f40 [ 154.671842][T10399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.671864][T10399] ? policy_nodemask+0xed/0x5e0 [ 154.671889][T10399] alloc_pages_mpol+0x201/0x560 [ 154.671911][T10399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 154.671939][T10399] folio_alloc_mpol_noprof+0x36/0x260 [ 154.671965][T10399] shmem_alloc_folio+0x135/0x160 [ 154.671990][T10399] shmem_alloc_and_add_folio+0x371/0xd40 [ 154.672017][T10399] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 154.672039][T10399] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 154.672069][T10399] shmem_get_folio_gfp+0x758/0x1af0 [ 154.672096][T10399] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 154.672118][T10399] ? filemap_map_pages+0x1155/0x1f10 [ 154.672149][T10399] shmem_fault+0x1fb/0xa30 [ 154.672173][T10399] ? __pfx_shmem_fault+0x10/0x10 [ 154.672192][T10399] ? __pte_offset_map+0x9a/0x470 [ 154.672220][T10399] ? __pfx_filemap_map_pages+0x10/0x10 [ 154.672264][T10399] ? find_held_lock+0x2b/0x80 [ 154.672287][T10399] ? __pfx_filemap_map_pages+0x10/0x10 [ 154.672311][T10399] __do_fault+0x10b/0x440 [ 154.672338][T10399] do_fault+0xb3f/0x1890 [ 154.672356][T10399] ? __pfx_do_fault+0x10/0x10 [ 154.672370][T10399] ? rcu_read_unlock+0x2d/0xb0 [ 154.672387][T10399] ? rcu_read_unlock+0x2d/0xb0 [ 154.672415][T10399] __handle_mm_fault+0x1858/0x2f40 [ 154.672441][T10399] ? __pfx___handle_mm_fault+0x10/0x10 [ 154.672462][T10399] ? __pfx_follow_page_pte+0x10/0x10 [ 154.672486][T10399] ? __pfx___css_rstat_updated+0x10/0x10 [ 154.672527][T10399] handle_mm_fault+0x363/0xa30 [ 154.672556][T10399] __get_user_pages+0x7ca/0x1d50 [ 154.672588][T10399] ? __pfx_mt_find+0x10/0x10 [ 154.672639][T10399] ? __pfx___get_user_pages+0x10/0x10 [ 154.672673][T10399] populate_vma_page_range+0x2bb/0x450 [ 154.672703][T10399] ? __pfx_populate_vma_page_range+0x10/0x10 [ 154.672729][T10399] ? __pfx_find_vma_intersection+0x10/0x10 [ 154.672763][T10399] __mm_populate+0x107/0x3a0 [ 154.672791][T10399] ? __pfx___mm_populate+0x10/0x10 [ 154.672820][T10399] ? up_write+0x2dc/0x5b0 [ 154.672841][T10399] vm_mmap_pgoff+0x44a/0x490 [ 154.672868][T10399] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 154.672886][T10399] ? lock_acquire+0x1d1/0x380 [ 154.672913][T10399] ? __mutex_unlock_slowpath+0x35d/0x930 [ 154.672948][T10399] ksys_mmap_pgoff+0xe4/0x610 [ 154.672979][T10399] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 154.673004][T10399] ? fput+0x7c/0x100 [ 154.673028][T10399] ? ksys_write+0x1ac/0x250 [ 154.673051][T10399] ? __pfx_ksys_write+0x10/0x10 [ 154.673068][T10399] __x64_sys_mmap+0x125/0x190 [ 154.673093][T10399] do_syscall_64+0x123/0x7b0 [ 154.673120][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.673139][T10399] RIP: 0033:0x7ff6cd9a94d9 [ 154.673155][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.673173][T10399] RSP: 002b:00007ff6ce83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.673199][T10399] RAX: ffffffffffffffda RBX: 00007ff6cdc25fa0 RCX: 00007ff6cd9a94d9 [ 154.673211][T10399] RDX: b635773f06ebbee6 RSI: 0000000000b36000 RDI: 0000200000000000 [ 154.673222][T10399] RBP: 00007ff6ce83d090 R08: ffffffffffffffff R09: 0000000028f41000 [ 154.673234][T10399] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 154.673245][T10399] R13: 00007ff6cdc26038 R14: 00007ff6cdc25fa0 R15: 00007ffe635a4408 [ 154.673270][T10399] [ 154.867945][T10403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.867960][T10403] overlayfs: failed to set xattr on upper [ 154.867965][T10403] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.867969][T10403] overlayfs: ...falling back to index=off. [ 154.867973][T10403] overlayfs: ...falling back to uuid=null. [ 154.872355][ T43] audit: type=1400 audit(1794683179.364:1123): avc: denied { map } for pid=10402 comm="syz.3.1221" path="socket:[55269]" dev="sockfs" ino=55269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 155.084890][ T43] audit: type=1400 audit(1794683179.574:1124): avc: denied { mount } for pid=10411 comm="syz.3.1223" name="/" dev="pstore" ino=6319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 155.092290][T10412] phram: illegal erasesize or len [ 155.424852][T10422] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 155.429488][T10422] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 155.567864][ T43] audit: type=1400 audit(1794683180.054:1125): avc: denied { mounton } for pid=10431 comm="syz.2.1227" path="/296/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 155.797909][ T9997] IPVS: starting estimator thread 0... [ 155.798726][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1228'. [ 155.821368][T10442] FAULT_INJECTION: forcing a failure. [ 155.821368][T10442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.821400][T10442] CPU: 0 UID: 0 PID: 10442 Comm: syz.4.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.821415][T10442] Tainted: [L]=SOFTLOCKUP [ 155.821419][T10442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.821434][T10442] Call Trace: [ 155.821450][T10442] [ 155.821459][T10442] dump_stack_lvl+0x100/0x190 [ 155.821535][T10442] should_fail_ex.cold+0x5/0xa [ 155.821560][T10442] should_fail_alloc_page+0xeb/0x140 [ 155.821583][T10442] prepare_alloc_pages+0x1f0/0x5b0 [ 155.821606][T10442] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 155.821623][T10442] ? lru_gen_add_folio+0x236/0x15d0 [ 155.821643][T10442] ? folios_put_refs+0x58a/0xaa0 [ 155.821655][T10442] ? __lock_acquire+0x5c0/0x1f40 [ 155.821678][T10442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.821698][T10442] ? lock_acquire+0x1d1/0x380 [ 155.821712][T10442] ? do_raw_spin_lock+0x128/0x260 [ 155.821723][T10442] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.821734][T10442] ? find_held_lock+0x2b/0x80 [ 155.821749][T10442] ? __lock_acquire+0x5c0/0x1f40 [ 155.821764][T10442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.821784][T10442] ? policy_nodemask+0xed/0x5e0 [ 155.821800][T10442] alloc_pages_mpol+0x201/0x560 [ 155.821814][T10442] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 155.821831][T10442] folio_alloc_mpol_noprof+0x36/0x260 [ 155.821848][T10442] shmem_alloc_folio+0x135/0x160 [ 155.821865][T10442] shmem_alloc_and_add_folio+0x371/0xd40 [ 155.821880][T10442] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 155.821894][T10442] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 155.821909][T10442] shmem_get_folio_gfp+0x758/0x1af0 [ 155.821925][T10442] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 155.821939][T10442] ? filemap_map_pages+0x1155/0x1f10 [ 155.821966][T10442] shmem_fault+0x1fb/0xa30 [ 155.821979][T10442] ? __pfx_shmem_fault+0x10/0x10 [ 155.821991][T10442] ? __pte_offset_map+0x9a/0x470 [ 155.822008][T10442] ? __pfx_filemap_map_pages+0x10/0x10 [ 155.822026][T10442] ? find_held_lock+0x2b/0x80 [ 155.822039][T10442] ? __pfx_filemap_map_pages+0x10/0x10 [ 155.822054][T10442] __do_fault+0x10b/0x440 [ 155.822070][T10442] do_fault+0xb3f/0x1890 [ 155.822081][T10442] ? __pfx_do_fault+0x10/0x10 [ 155.822091][T10442] ? rcu_read_unlock+0x2d/0xb0 [ 155.822103][T10442] ? rcu_read_unlock+0x2d/0xb0 [ 155.822119][T10442] __handle_mm_fault+0x1858/0x2f40 [ 155.822135][T10442] ? __pfx___handle_mm_fault+0x10/0x10 [ 155.822147][T10442] ? __pfx_follow_page_pte+0x10/0x10 [ 155.822161][T10442] ? __pfx___css_rstat_updated+0x10/0x10 [ 155.822192][T10442] handle_mm_fault+0x363/0xa30 [ 155.822207][T10442] __get_user_pages+0x7ca/0x1d50 [ 155.822227][T10442] ? __pfx_mt_find+0x10/0x10 [ 155.822288][T10442] ? __pfx___get_user_pages+0x10/0x10 [ 155.822309][T10442] populate_vma_page_range+0x2bb/0x450 [ 155.822327][T10442] ? __pfx_populate_vma_page_range+0x10/0x10 [ 155.822343][T10442] ? __pfx_find_vma_intersection+0x10/0x10 [ 155.822363][T10442] __mm_populate+0x107/0x3a0 [ 155.822380][T10442] ? __pfx___mm_populate+0x10/0x10 [ 155.822397][T10442] ? up_write+0x2dc/0x5b0 [ 155.822408][T10442] vm_mmap_pgoff+0x44a/0x490 [ 155.822424][T10442] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 155.822437][T10442] ? lock_acquire+0x1d1/0x380 [ 155.822457][T10442] ? __mutex_unlock_slowpath+0x35d/0x930 [ 155.822477][T10442] ksys_mmap_pgoff+0xe4/0x610 [ 155.822495][T10442] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 155.822511][T10442] ? fput+0x7c/0x100 [ 155.822531][T10442] ? ksys_write+0x1ac/0x250 [ 155.822542][T10442] ? __pfx_ksys_write+0x10/0x10 [ 155.822556][T10442] __x64_sys_mmap+0x125/0x190 [ 155.822578][T10442] do_syscall_64+0x123/0x7b0 [ 155.822594][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.822605][T10442] RIP: 0033:0x7f6d411a94d9 [ 155.822615][T10442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.822626][T10442] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 155.822650][T10442] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 155.822657][T10442] RDX: b635773f06ebbee6 RSI: 0000000000b36000 RDI: 0000200000000000 [ 155.822663][T10442] RBP: 00007f6d42099090 R08: ffffffffffffffff R09: 0000000028f41000 [ 155.822670][T10442] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 155.822676][T10442] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 155.822691][T10442] [ 155.845258][ T5829] net_ratelimit: 86 callbacks suppressed [ 155.845291][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.865942][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.865967][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 155.916115][T10446] IPVS: using max 38 ests per chain, 91200 per kthread [ 155.975635][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.005750][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.005777][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 156.107247][T10456] FAULT_INJECTION: forcing a failure. [ 156.107247][T10456] name failslab, interval 1, probability 10, space 0, times 0 [ 156.107268][T10456] CPU: 2 UID: 0 PID: 10456 Comm: syz.6.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.107284][T10456] Tainted: [L]=SOFTLOCKUP [ 156.107288][T10456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.107294][T10456] Call Trace: [ 156.107298][T10456] [ 156.107302][T10456] dump_stack_lvl+0x100/0x190 [ 156.107323][T10456] should_fail_ex.cold+0x5/0xa [ 156.107339][T10456] should_failslab+0xc2/0x120 [ 156.107353][T10456] kmem_cache_alloc_noprof+0x92/0x6a0 [ 156.107371][T10456] ? anon_vma_clone+0x4b8/0x2080 [ 156.107385][T10456] anon_vma_clone+0x4b8/0x2080 [ 156.107401][T10456] __split_vma+0x58a/0xce0 [ 156.107417][T10456] ? __pfx___split_vma+0x10/0x10 [ 156.107429][T10456] ? mas_next_slot+0xc05/0x13a0 [ 156.107476][T10456] vms_gather_munmap_vmas+0x3a5/0x1720 [ 156.107495][T10456] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 156.107509][T10456] ? __pfx_vma_link+0x10/0x10 [ 156.107530][T10456] ? __pfx___might_resched+0x10/0x10 [ 156.107556][T10456] do_vmi_align_munmap+0x287/0x5f0 [ 156.107573][T10456] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 156.107606][T10456] ? mas_walk+0x260/0x310 [ 156.107624][T10456] do_vmi_munmap+0x1f8/0x410 [ 156.107641][T10456] unmap_source_vma+0x35c/0x8f0 [ 156.107658][T10456] ? __pfx_unmap_source_vma+0x10/0x10 [ 156.107679][T10456] ? __vm_enough_memory+0x184/0x390 [ 156.107694][T10456] ? vm_stat_account+0x162/0x190 [ 156.107707][T10456] move_vma+0x351/0x11e0 [ 156.107721][T10456] ? __pfx_mtree_load+0x10/0x10 [ 156.107737][T10456] ? __pfx_move_vma+0x10/0x10 [ 156.107750][T10456] ? security_mmap_addr+0x71/0x1e0 [ 156.107770][T10456] ? __get_unmapped_area+0x255/0x3e0 [ 156.107783][T10456] ? vrm_set_new_addr+0x1f5/0x2a0 [ 156.107798][T10456] mremap_to+0x234/0x530 [ 156.107837][T10456] ? __pfx_mremap_to+0x10/0x10 [ 156.107852][T10456] ? mas_walk+0x260/0x310 [ 156.107870][T10456] __do_sys_mremap+0x9b7/0x17f0 [ 156.107890][T10456] ? __pfx___do_sys_mremap+0x10/0x10 [ 156.107907][T10456] ? vm_mmap_pgoff+0x101/0x490 [ 156.107927][T10456] ? __pfx_do_futex+0x10/0x10 [ 156.107947][T10456] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 156.107965][T10456] ? xfd_validate_state+0x129/0x190 [ 156.107985][T10456] do_syscall_64+0x123/0x7b0 [ 156.108000][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.108012][T10456] RIP: 0033:0x7fdc621a94d9 [ 156.108021][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.108032][T10456] RSP: 002b:00007fdc62f88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 156.108043][T10456] RAX: ffffffffffffffda RBX: 00007fdc62425fa0 RCX: 00007fdc621a94d9 [ 156.108050][T10456] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 156.108056][T10456] RBP: 00007fdc6223804e R08: 0000200000ff6000 R09: 0000000000000000 [ 156.108062][T10456] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 156.108068][T10456] R13: 00007fdc62426038 R14: 00007fdc62425fa0 R15: 00007ffe0d1cf748 [ 156.108083][T10456] [ 156.122902][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.122932][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 156.169828][ T43] audit: type=1400 audit(1794683180.664:1126): avc: denied { name_connect } for pid=10459 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 156.238122][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.238150][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 156.240733][ T43] audit: type=1400 audit(1794683180.734:1127): avc: denied { ioctl } for pid=10455 comm="syz.6.1232" path="socket:[62290]" dev="sockfs" ino=62290 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.366953][ T43] audit: type=1400 audit(1794683181.864:1128): avc: denied { write } for pid=10483 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.368594][ T43] audit: type=1400 audit(1794683181.864:1129): avc: denied { write } for pid=10487 comm="syz.4.1238" name="usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.368765][ T43] audit: type=1400 audit(1794683181.864:1130): avc: denied { open } for pid=10487 comm="syz.4.1238" path="/dev/usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.621440][T10509] kvm [10508]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 157.622317][T10509] kvm [10508]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 157.910681][T10515] cgroup2: Unknown parameter 'net' [ 157.958528][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 158.267136][T10528] 9pnet_virtio: no channels available for device syz [ 158.340874][T10533] tap0: tun_chr_ioctl cmd 1074025675 [ 158.340889][T10533] tap0: persist enabled [ 158.341090][T10533] tap0: tun_chr_ioctl cmd 1074025675 [ 158.341098][T10533] tap0: persist enabled [ 158.374852][T10536] team_slave_0: entered allmulticast mode [ 158.376047][T10536] team_slave_0: entered promiscuous mode [ 158.633189][ T5931] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 158.706898][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 158.707650][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 158.707661][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 158.715394][ T25] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 158.890245][ T25] usb 9-1: not running at top speed; connect to a high speed hub [ 158.890276][ T25] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 158.891478][ T25] usb 9-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.891505][ T25] usb 9-1: config 1 interface 0 has no altsetting 0 [ 158.893924][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.893944][ T25] usb 9-1: Product: syz [ 158.893955][ T25] usb 9-1: Manufacturer: syz [ 158.893966][ T25] usb 9-1: SerialNumber: syz [ 158.929082][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 158.929103][ T43] audit: type=1400 audit(1794683183.424:1139): avc: denied { kexec_image_load } for pid=10552 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 159.029484][T10559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 159.135667][ T25] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 159.139615][ T25] usb 9-1: USB disconnect, device number 13 [ 159.143673][ T6008] udevd[6008]: setting owner of /dev/bus/usb/009/013 to uid=0, gid=0 failed: No such file or directory [ 159.280513][ T43] audit: type=1400 audit(1794683183.774:1140): avc: denied { setopt } for pid=10561 comm="syz.6.1261" lport=33344 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 159.903739][T10577] Mount JFS Failure: -22 [ 159.903751][T10577] jfs_mount failed w/return code = -22 [ 159.911446][T10577] Mount JFS Failure: -22 [ 159.911459][T10577] jfs_mount failed w/return code = -22 [ 159.912738][T10577] Mount JFS Failure: -22 [ 159.912752][T10577] jfs_mount failed w/return code = -22 [ 159.914101][T10577] Mount JFS Failure: -22 [ 159.914112][T10577] jfs_mount failed w/return code = -22 [ 159.915349][T10577] Mount JFS Failure: -22 [ 159.915360][T10577] jfs_mount failed w/return code = -22 [ 159.916271][T10577] Mount JFS Failure: -22 [ 159.916279][T10577] jfs_mount failed w/return code = -22 [ 159.919513][T10577] Mount JFS Failure: -22 [ 159.919523][T10577] jfs_mount failed w/return code = -22 [ 159.920765][T10577] Mount JFS Failure: -22 [ 159.920775][T10577] jfs_mount failed w/return code = -22 [ 159.922007][T10577] Mount JFS Failure: -22 [ 159.922017][T10577] jfs_mount failed w/return code = -22 [ 159.923202][T10577] Mount JFS Failure: -22 [ 159.923212][T10577] jfs_mount failed w/return code = -22 [ 159.924317][T10577] Mount JFS Failure: -22 [ 159.924326][T10577] jfs_mount failed w/return code = -22 [ 159.931874][T10577] Mount JFS Failure: -22 [ 159.931887][T10577] jfs_mount failed w/return code = -22 [ 159.933194][T10577] Mount JFS Failure: -22 [ 159.933204][T10577] jfs_mount failed w/return code = -22 [ 159.934438][T10577] Mount JFS Failure: -22 [ 159.934447][T10577] jfs_mount failed w/return code = -22 [ 159.937255][T10581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.938768][T10577] Mount JFS Failure: -22 [ 159.938777][T10577] jfs_mount failed w/return code = -22 [ 159.939609][T10577] Mount JFS Failure: -22 [ 159.939618][T10577] jfs_mount failed w/return code = -22 [ 159.940393][T10577] Mount JFS Failure: -22 [ 159.940403][T10577] jfs_mount failed w/return code = -22 [ 159.941288][T10577] Mount JFS Failure: -22 [ 159.941297][T10577] jfs_mount failed w/return code = -22 [ 159.944255][T10577] Mount JFS Failure: -22 [ 159.944265][T10577] jfs_mount failed w/return code = -22 [ 159.946668][T10577] Mount JFS Failure: -22 [ 159.946678][T10577] jfs_mount failed w/return code = -22 [ 159.947834][T10577] Mount JFS Failure: -22 [ 159.947847][T10577] jfs_mount failed w/return code = -22 [ 159.948861][T10577] Mount JFS Failure: -22 [ 159.948877][T10577] jfs_mount failed w/return code = -22 [ 159.956320][T10577] Mount JFS Failure: -22 [ 159.956332][T10577] jfs_mount failed w/return code = -22 [ 159.957589][T10577] Mount JFS Failure: -22 [ 159.957600][T10577] jfs_mount failed w/return code = -22 [ 159.958821][T10577] Mount JFS Failure: -22 [ 159.958832][T10577] jfs_mount failed w/return code = -22 [ 159.960066][T10577] Mount JFS Failure: -22 [ 159.960075][T10577] jfs_mount failed w/return code = -22 [ 159.961257][T10577] Mount JFS Failure: -22 [ 159.961267][T10577] jfs_mount failed w/return code = -22 [ 159.962391][T10577] Mount JFS Failure: -22 [ 159.962401][T10577] jfs_mount failed w/return code = -22 [ 159.965060][T10577] Mount JFS Failure: -22 [ 159.965072][T10577] jfs_mount failed w/return code = -22 [ 159.967747][T10577] Mount JFS Failure: -22 [ 159.967757][T10577] jfs_mount failed w/return code = -22 [ 159.968964][T10577] Mount JFS Failure: -22 [ 159.968974][T10577] jfs_mount failed w/return code = -22 [ 159.970164][T10577] Mount JFS Failure: -22 [ 159.970174][T10577] jfs_mount failed w/return code = -22 [ 159.971537][T10577] Mount JFS Failure: -22 [ 159.971547][T10577] jfs_mount failed w/return code = -22 [ 160.015893][T10581] md: could not open device unknown-block(1,6). [ 160.015943][T10581] md: error, md_import_device() returned -16 [ 160.036350][ T5858] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 160.145257][T10589] md: md3 stopped. [ 160.205213][ T5858] usb 9-1: Using ep0 maxpacket: 16 [ 160.205657][ T5858] usb 9-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 160.206522][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 160.209389][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.209401][ T5858] usb 9-1: Product: syz [ 160.209409][ T5858] usb 9-1: Manufacturer: syz [ 160.209416][ T5858] usb 9-1: SerialNumber: syz [ 160.210606][ T5858] usb 9-1: config 0 descriptor?? [ 160.212928][ T5858] hub 9-1:0.0: bad descriptor, ignoring hub [ 160.212940][ T5858] hub 9-1:0.0: probe with driver hub failed with error -5 [ 160.214003][ T5858] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.270908][T10593] loop5: detected capacity change from 0 to 4096 [ 160.309534][T10594] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 160.312846][T10594] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 160.313111][T10594] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 160.313125][T10594] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 160.313450][T10594] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 160.313469][T10594] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 160.313480][T10594] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 160.313493][T10594] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 160.313503][T10594] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 160.313543][T10594] loop5: [ 160.380623][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 160.435961][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 160.480214][ T25] usb 9-1: USB disconnect, device number 14 [ 160.684052][T10613] comedi comedi1: das16m1: I/O base address not correctly aligned [ 160.832316][T10619] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.885343][ T14] net_ratelimit: 85 callbacks suppressed [ 160.885379][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.885399][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 160.927960][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.006403][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.025591][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.045299][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.065951][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.065969][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 161.093256][ T43] audit: type=1400 audit(1794683185.584:1141): avc: denied { getopt } for pid=10632 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.166103][T10637] syzkaller0: entered promiscuous mode [ 161.166121][T10637] syzkaller0: entered allmulticast mode [ 161.168885][ T43] audit: type=1800 audit(1794683185.664:1142): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1285" name=08 dev="sda1" ino=2044 res=0 errno=-22 [ 161.170408][ T43] audit: type=1800 audit(1794683185.664:1143): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1285" name=08 dev="sda1" ino=2044 res=0 errno=-22 [ 161.175520][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.198295][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.215392][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.955633][T10647] FAULT_INJECTION: forcing a failure. [ 161.955633][T10647] name failslab, interval 1, probability 10, space 0, times 0 [ 161.955655][T10647] CPU: 1 UID: 0 PID: 10647 Comm: syz.4.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.955669][T10647] Tainted: [L]=SOFTLOCKUP [ 161.955674][T10647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.955692][T10647] Call Trace: [ 161.955703][T10647] [ 161.955709][T10647] dump_stack_lvl+0x100/0x190 [ 161.955742][T10647] should_fail_ex.cold+0x5/0xa [ 161.955768][T10647] should_failslab+0xc2/0x120 [ 161.955816][T10647] __kmalloc_cache_noprof+0x91/0x6d0 [ 161.955839][T10647] ? sctp_add_bind_addr+0xae/0x3e0 [ 161.955867][T10647] sctp_add_bind_addr+0xae/0x3e0 [ 161.955879][T10647] sctp_copy_local_addr_list+0x349/0x550 [ 161.955904][T10647] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.955918][T10647] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 161.955933][T10647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.955953][T10647] sctp_bind_addr_copy+0xe0/0x530 [ 161.955968][T10647] sctp_connect_new_asoc+0x1c9/0x770 [ 161.955984][T10647] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.955999][T10647] ? selinux_sctp_bind_connect+0xe0/0x230 [ 161.956024][T10647] sctp_sendmsg+0x1743/0x22e0 [ 161.956042][T10647] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.956058][T10647] ? __pfx_sock_has_perm+0x10/0x10 [ 161.956085][T10647] ? __might_fault+0xc5/0x140 [ 161.956102][T10647] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.956118][T10647] inet_sendmsg+0x11c/0x140 [ 161.956144][T10647] __sys_sendto+0x470/0x4e0 [ 161.956165][T10647] ? __pfx_inet_sendmsg+0x10/0x10 [ 161.956180][T10647] ? __pfx___sys_sendto+0x10/0x10 [ 161.956197][T10647] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.956225][T10647] ? ksys_write+0x1ac/0x250 [ 161.956243][T10647] ? __pfx_ksys_write+0x10/0x10 [ 161.956253][T10647] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 161.956269][T10647] __x64_sys_sendto+0xe0/0x1c0 [ 161.956281][T10647] ? do_syscall_64+0xae/0x7b0 [ 161.956295][T10647] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.956309][T10647] do_syscall_64+0x123/0x7b0 [ 161.956324][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.956336][T10647] RIP: 0033:0x7f6d411a94d9 [ 161.956346][T10647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.956356][T10647] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 161.956375][T10647] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 161.956382][T10647] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 161.956392][T10647] RBP: 00007f6d42099090 R08: 0000200000000600 R09: 0000000000000010 [ 161.956398][T10647] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 161.956404][T10647] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 161.956419][T10647] [ 161.986973][T10648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1288'. [ 162.023628][T10652] FAULT_INJECTION: forcing a failure. [ 162.023628][T10652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.023656][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.4.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.023680][T10652] Tainted: [L]=SOFTLOCKUP [ 162.023686][T10652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.023696][T10652] Call Trace: [ 162.023701][T10652] [ 162.023709][T10652] dump_stack_lvl+0x100/0x190 [ 162.023756][T10652] should_fail_ex.cold+0x5/0xa [ 162.023803][T10652] should_fail_alloc_page+0xeb/0x140 [ 162.023828][T10652] prepare_alloc_pages+0x1f0/0x5b0 [ 162.023853][T10652] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 162.023886][T10652] ? stack_trace_save+0x8e/0xc0 [ 162.023920][T10652] ? __pfx_stack_trace_save+0x10/0x10 [ 162.023942][T10652] ? stack_depot_save_flags+0x27/0xa10 [ 162.023975][T10652] ? kasan_save_stack+0x3f/0x50 [ 162.023993][T10652] ? kasan_save_stack+0x30/0x50 [ 162.024009][T10652] ? kasan_save_track+0x14/0x30 [ 162.024027][T10652] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.024050][T10652] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 162.024080][T10652] ? vcpu_run+0x4009/0x60d0 [ 162.024102][T10652] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 162.024133][T10652] ? __x64_sys_ioctl+0x18e/0x210 [ 162.024159][T10652] ? do_syscall_64+0x123/0x7b0 [ 162.024180][T10652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.024219][T10652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.024239][T10652] ? policy_nodemask+0xed/0x5e0 [ 162.024260][T10652] alloc_pages_mpol+0x201/0x560 [ 162.024279][T10652] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.024300][T10652] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 162.024322][T10652] alloc_pages_noprof+0x1a/0x160 [ 162.024338][T10654] kAFS: unable to lookup cell '.' [ 162.024346][T10652] get_free_pages_noprof+0x10/0xb0 [ 162.024363][T10652] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 162.024387][T10652] mmu_topup_memory_caches.part.0+0x93/0x170 [ 162.024412][T10652] kvm_mmu_load+0x11a/0x25b0 [ 162.024436][T10652] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 162.024455][T10652] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 162.024475][T10652] ? __pfx_kvm_mmu_load+0x10/0x10 [ 162.024497][T10652] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 162.024517][T10652] ? kvm_check_and_inject_events+0x896/0x1050 [ 162.024543][T10652] vcpu_run+0x4009/0x60d0 [ 162.024577][T10652] ? __pfx_vcpu_run+0x10/0x10 [ 162.024597][T10652] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 162.024617][T10652] ? lock_acquire+0x1d1/0x380 [ 162.024649][T10652] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 162.024674][T10652] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 162.024700][T10652] ? __local_bh_enable_ip+0xa5/0x120 [ 162.024739][T10652] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 162.024760][T10652] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 162.024790][T10652] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 162.024812][T10652] ? lock_acquire+0x1d1/0x380 [ 162.024834][T10652] ? do_raw_write_lock+0x11e/0x260 [ 162.024850][T10652] ? find_held_lock+0x2b/0x80 [ 162.024867][T10652] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 162.024894][T10652] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 162.024924][T10652] kvm_vcpu_ioctl+0x735/0x17b0 [ 162.024951][T10652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.024970][T10652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.024982][T10652] ? do_vfs_ioctl+0x241/0x13f0 [ 162.024993][T10652] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.025004][T10652] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 162.025024][T10652] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 162.025047][T10652] ? __fget_files+0x34/0x3d0 [ 162.025079][T10652] ? selinux_file_ioctl+0x1e0/0x290 [ 162.025096][T10652] ? selinux_file_ioctl+0x1e7/0x290 [ 162.025115][T10652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.025140][T10652] __x64_sys_ioctl+0x18e/0x210 [ 162.025159][T10652] do_syscall_64+0x123/0x7b0 [ 162.025183][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.025200][T10652] RIP: 0033:0x7f6d411a94d9 [ 162.025215][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.025230][T10652] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.025246][T10652] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 162.025257][T10652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 162.025267][T10652] RBP: 00007f6d42099090 R08: 0000000000000000 R09: 0000000000000000 [ 162.025278][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.025288][T10652] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 162.025313][T10652] [ 162.115598][ T43] audit: type=1400 audit(1794683186.604:1144): avc: denied { listen } for pid=10643 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.162387][ T43] audit: type=1400 audit(1794683186.654:1145): avc: denied { write } for pid=10658 comm="syz.3.1291" name="functions" dev="configfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.168186][ T43] audit: type=1400 audit(1794683186.664:1146): avc: denied { write } for pid=10658 comm="syz.3.1291" name="uncompressed" dev="configfs" ino=62712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.168907][ T43] audit: type=1400 audit(1794683186.664:1147): avc: denied { write } for pid=10658 comm="syz.3.1291" name="u" dev="configfs" ino=62721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.451665][T10680] comedi comedi1: dt2815: I/O base address or length out of range [ 162.594696][T10684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1300'. [ 162.641155][T10686] FAULT_INJECTION: forcing a failure. [ 162.641155][T10686] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.641175][T10686] CPU: 1 UID: 0 PID: 10686 Comm: syz.4.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.641190][T10686] Tainted: [L]=SOFTLOCKUP [ 162.641194][T10686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.641200][T10686] Call Trace: [ 162.641204][T10686] [ 162.641208][T10686] dump_stack_lvl+0x100/0x190 [ 162.641230][T10686] should_fail_ex.cold+0x5/0xa [ 162.641247][T10686] should_fail_alloc_page+0xeb/0x140 [ 162.641261][T10686] prepare_alloc_pages+0x1f0/0x5b0 [ 162.641277][T10686] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 162.641293][T10686] ? stack_trace_save+0x8e/0xc0 [ 162.641308][T10686] ? __pfx_stack_trace_save+0x10/0x10 [ 162.641323][T10686] ? stack_depot_save_flags+0x27/0xa10 [ 162.641335][T10686] ? stack_trace_save+0x8e/0xc0 [ 162.641348][T10686] ? __pfx_stack_trace_save+0x10/0x10 [ 162.641364][T10686] ? kasan_save_stack+0x3f/0x50 [ 162.641375][T10686] ? kasan_save_stack+0x30/0x50 [ 162.641385][T10686] ? kasan_save_track+0x14/0x30 [ 162.641396][T10686] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.641411][T10686] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 162.641426][T10686] ? vcpu_run+0x4009/0x60d0 [ 162.641440][T10686] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 162.641455][T10686] ? __x64_sys_ioctl+0x18e/0x210 [ 162.641465][T10686] ? do_syscall_64+0x123/0x7b0 [ 162.641480][T10686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.641508][T10686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.641520][T10686] ? policy_nodemask+0xed/0x5e0 [ 162.641535][T10686] alloc_pages_mpol+0x201/0x560 [ 162.641549][T10686] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.641562][T10686] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 162.641576][T10686] alloc_pages_noprof+0x1a/0x160 [ 162.641591][T10686] get_free_pages_noprof+0x10/0xb0 [ 162.641602][T10686] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 162.641617][T10686] mmu_topup_memory_caches.part.0+0x93/0x170 [ 162.641632][T10686] kvm_mmu_load+0x11a/0x25b0 [ 162.641647][T10686] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 162.641659][T10686] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 162.641686][T10686] ? __pfx_kvm_mmu_load+0x10/0x10 [ 162.641699][T10686] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 162.641713][T10686] ? kvm_check_and_inject_events+0x896/0x1050 [ 162.641729][T10686] vcpu_run+0x4009/0x60d0 [ 162.641751][T10686] ? __pfx_vcpu_run+0x10/0x10 [ 162.641764][T10686] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 162.641776][T10686] ? lock_acquire+0x1d1/0x380 [ 162.641790][T10686] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 162.641807][T10686] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 162.641818][T10686] ? __local_bh_enable_ip+0xa5/0x120 [ 162.641834][T10686] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 162.641849][T10686] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 162.641868][T10686] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 162.641883][T10686] ? lock_acquire+0x1d1/0x380 [ 162.641897][T10686] ? do_raw_write_lock+0x11e/0x260 [ 162.641908][T10686] ? find_held_lock+0x2b/0x80 [ 162.641919][T10686] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 162.641935][T10686] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 162.641954][T10686] kvm_vcpu_ioctl+0x735/0x17b0 [ 162.641972][T10686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.641988][T10686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.642000][T10686] ? do_vfs_ioctl+0x241/0x13f0 [ 162.642011][T10686] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.642021][T10686] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 162.642035][T10686] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 162.642049][T10686] ? __fget_files+0x34/0x3d0 [ 162.642069][T10686] ? selinux_file_ioctl+0x1e0/0x290 [ 162.642080][T10686] ? selinux_file_ioctl+0x1e7/0x290 [ 162.642091][T10686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.642108][T10686] __x64_sys_ioctl+0x18e/0x210 [ 162.642120][T10686] do_syscall_64+0x123/0x7b0 [ 162.642135][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.642146][T10686] RIP: 0033:0x7f6d411a94d9 [ 162.642156][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.642166][T10686] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.642177][T10686] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 162.642184][T10686] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 162.642190][T10686] RBP: 00007f6d42099090 R08: 0000000000000000 R09: 0000000000000000 [ 162.642196][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.642203][T10686] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 162.642217][T10686] [ 162.821252][ T5858] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 162.960738][T10704] syzkaller1: entered allmulticast mode [ 162.965474][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 162.966727][ T5858] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.968066][ T5858] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.968091][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.968109][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.968127][ T5858] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.968159][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.074249][ T43] audit: type=1400 audit(1794683187.564:1148): avc: denied { read write } for pid=10716 comm="syz.6.1310" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.107092][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1311'. [ 163.167690][ T5829] nci: nci_rsp_packet: unknown rsp opcode 0x807 [ 163.173928][ T5858] usb 8-1: GET_CAPABILITIES returned 0 [ 163.173967][ T5858] usbtmc 8-1:16.0: can't read capabilities [ 163.180055][T10725] FAULT_INJECTION: forcing a failure. [ 163.180055][T10725] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.180080][T10725] CPU: 3 UID: 0 PID: 10725 Comm: syz.6.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.180105][T10725] Tainted: [L]=SOFTLOCKUP [ 163.180112][T10725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.180123][T10725] Call Trace: [ 163.180130][T10725] [ 163.180137][T10725] dump_stack_lvl+0x100/0x190 [ 163.180170][T10725] should_fail_ex.cold+0x5/0xa [ 163.180199][T10725] get_futex_key+0x1c9/0x13e0 [ 163.180256][T10725] ? __pfx_get_futex_key+0x10/0x10 [ 163.180283][T10725] futex_wait_setup+0x91/0x540 [ 163.180314][T10725] __futex_wait+0x19f/0x360 [ 163.180341][T10725] ? __pfx___futex_wait+0x10/0x10 [ 163.180364][T10725] ? futex_hash+0x311/0x400 [ 163.180386][T10725] ? __pfx_futex_wake_mark+0x10/0x10 [ 163.180415][T10725] ? __pfx_futex_hash+0x10/0x10 [ 163.180432][T10725] ? __pfx_get_futex_key+0x10/0x10 [ 163.180460][T10725] futex_wait+0xe6/0x370 [ 163.180484][T10725] ? __pfx_futex_wait+0x10/0x10 [ 163.180518][T10725] ? __mutex_unlock_slowpath+0x35d/0x930 [ 163.180545][T10725] do_futex+0x265/0x440 [ 163.180566][T10725] ? __pfx_do_futex+0x10/0x10 [ 163.180585][T10725] ? rcu_is_watching+0x13/0xc0 [ 163.180604][T10725] ? __do_sys_fsconfig+0x31d/0xcb0 [ 163.180635][T10725] ? kfree+0x1e5/0x6d0 [ 163.180657][T10725] ? vfs_get_tree+0x1f9/0x320 [ 163.180688][T10725] __x64_sys_futex+0x34f/0x4d0 [ 163.180711][T10725] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 163.180732][T10725] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.180763][T10725] do_syscall_64+0x123/0x7b0 [ 163.180790][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.180814][T10725] RIP: 0033:0x7fdc621a94d9 [ 163.180830][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.180847][T10725] RSP: 002b:00007fdc62f880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.180866][T10725] RAX: ffffffffffffffda RBX: 00007fdc62425fa8 RCX: 00007fdc621a94d9 [ 163.180878][T10725] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc62425fa8 [ 163.180889][T10725] RBP: 00007fdc62425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 163.180901][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.180912][T10725] R13: 00007fdc62426038 R14: 00007ffe0d1cf660 R15: 00007ffe0d1cf748 [ 163.180937][T10725] [ 163.181742][T10725] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 163.181793][T10726] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 163.243205][T10732] syzkaller0: entered promiscuous mode [ 163.243224][T10732] syzkaller0: entered allmulticast mode [ 163.381963][T10682] usb 8-1: usbtmc_ioctl_clear_out_halt returned -32 [ 163.471593][ T858] usb 8-1: USB disconnect, device number 19 [ 163.604931][T10741] xt_hashlimit: size too large, truncated to 1048576 [ 163.975215][ T7000] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 164.136670][ T7000] usb 11-1: Using ep0 maxpacket: 32 [ 164.140516][ T7000] usb 11-1: unable to get BOS descriptor or descriptor too short [ 164.140558][ T7000] usb 11-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 164.141516][ T7000] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 164.141536][ T7000] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 164.141552][ T7000] usb 11-1: config 14 has no interface number 0 [ 164.141565][ T7000] usb 11-1: config 14 has no interface number 1 [ 164.141609][ T7000] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 164.141627][ T7000] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 164.141647][ T7000] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 164.141668][ T7000] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 164.141689][ T7000] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 164.141708][ T7000] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.141726][ T7000] usb 11-1: config 14 interface 57 has no altsetting 0 [ 164.141738][ T7000] usb 11-1: config 14 interface 228 has no altsetting 0 [ 164.143571][ T7000] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.143590][ T7000] usb 11-1: Product: syz [ 164.143602][ T7000] usb 11-1: Manufacturer: syz [ 164.143614][ T7000] usb 11-1: SerialNumber: syz [ 164.420860][T10757] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1320'. [ 164.506068][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 164.554743][ T7000] legousbtower 11-1:14.57: interrupt endpoints not found [ 164.956568][ T7000] legousbtower 11-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 164.964259][ T7000] legousbtower 11-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 164.964497][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 164.964514][ T43] audit: type=1400 audit(1794683189.454:1151): avc: denied { mounton } for pid=10744 comm="syz.6.1316" path="/64/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 165.083451][T10760] usb 11-1: LEGO USB Tower reset control request failed [ 165.287925][ T858] usb 11-1: USB disconnect, device number 7 [ 165.295925][ T858] legousbtower 11-1:14.228: LEGO USB Tower #-160 now disconnected [ 165.915425][ T5829] net_ratelimit: 85 callbacks suppressed [ 165.915439][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 165.915451][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 166.035576][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.035605][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 166.045690][T10715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.046225][T10711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.106516][T10784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.128510][T10790] : entered promiscuous mode [ 166.139883][T10784] md: couldn't update array info. -22 [ 166.145268][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.145287][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 166.185415][T10784] md: could not open device unknown-block(1,4). [ 166.185446][T10784] md: md_import_device returned -16 [ 166.214676][T10797] FAULT_INJECTION: forcing a failure. [ 166.214676][T10797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.214696][T10797] CPU: 0 UID: 0 PID: 10797 Comm: syz.4.1331 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.214711][T10797] Tainted: [L]=SOFTLOCKUP [ 166.214715][T10797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.214722][T10797] Call Trace: [ 166.214726][T10797] [ 166.214731][T10797] dump_stack_lvl+0x100/0x190 [ 166.214752][T10797] should_fail_ex.cold+0x5/0xa [ 166.214770][T10797] should_fail_alloc_page+0xeb/0x140 [ 166.214785][T10797] prepare_alloc_pages+0x1f0/0x5b0 [ 166.214804][T10797] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 166.214828][T10797] ? stack_trace_save+0x8e/0xc0 [ 166.214850][T10797] ? __pfx_stack_trace_save+0x10/0x10 [ 166.214874][T10797] ? stack_depot_save_flags+0x27/0xa10 [ 166.214898][T10797] ? stack_trace_save+0x8e/0xc0 [ 166.214921][T10797] ? __pfx_stack_trace_save+0x10/0x10 [ 166.214946][T10797] ? kasan_save_stack+0x3f/0x50 [ 166.214960][T10797] ? kasan_save_stack+0x30/0x50 [ 166.214970][T10797] ? kasan_save_track+0x14/0x30 [ 166.214981][T10797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.214996][T10797] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 166.215011][T10797] ? vcpu_run+0x4009/0x60d0 [ 166.215026][T10797] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 166.215041][T10797] ? __x64_sys_ioctl+0x18e/0x210 [ 166.215052][T10797] ? do_syscall_64+0x123/0x7b0 [ 166.215066][T10797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.215089][T10797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.215101][T10797] ? policy_nodemask+0xed/0x5e0 [ 166.215131][T10797] alloc_pages_mpol+0x201/0x560 [ 166.215145][T10797] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.215159][T10797] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 166.215173][T10797] alloc_pages_noprof+0x1a/0x160 [ 166.215188][T10797] get_free_pages_noprof+0x10/0xb0 [ 166.215199][T10797] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 166.215214][T10797] mmu_topup_memory_caches.part.0+0x93/0x170 [ 166.215229][T10797] kvm_mmu_load+0x11a/0x25b0 [ 166.215244][T10797] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 166.215256][T10797] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 166.215269][T10797] ? __pfx_kvm_mmu_load+0x10/0x10 [ 166.215283][T10797] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 166.215296][T10797] ? kvm_check_and_inject_events+0x896/0x1050 [ 166.215313][T10797] vcpu_run+0x4009/0x60d0 [ 166.215334][T10797] ? __pfx_vcpu_run+0x10/0x10 [ 166.215347][T10797] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 166.215359][T10797] ? lock_acquire+0x1d1/0x380 [ 166.215373][T10797] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 166.215392][T10797] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 166.215402][T10797] ? __local_bh_enable_ip+0xa5/0x120 [ 166.215418][T10797] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 166.215433][T10797] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 166.215452][T10797] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 166.215467][T10797] ? lock_acquire+0x1d1/0x380 [ 166.215481][T10797] ? do_raw_write_lock+0x11e/0x260 [ 166.215492][T10797] ? find_held_lock+0x2b/0x80 [ 166.215503][T10797] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 166.215518][T10797] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 166.215537][T10797] kvm_vcpu_ioctl+0x735/0x17b0 [ 166.215555][T10797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 166.215571][T10797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.215583][T10797] ? do_vfs_ioctl+0x241/0x13f0 [ 166.215594][T10797] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.215604][T10797] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 166.215618][T10797] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.215632][T10797] ? __fget_files+0x34/0x3d0 [ 166.215652][T10797] ? selinux_file_ioctl+0x1e0/0x290 [ 166.215663][T10797] ? selinux_file_ioctl+0x1e7/0x290 [ 166.215675][T10797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 166.215691][T10797] __x64_sys_ioctl+0x18e/0x210 [ 166.215704][T10797] do_syscall_64+0x123/0x7b0 [ 166.215719][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.215731][T10797] RIP: 0033:0x7f6d411a94d9 [ 166.215741][T10797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.215751][T10797] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.215779][T10797] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 166.215787][T10797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 166.215793][T10797] RBP: 00007f6d42099090 R08: 0000000000000000 R09: 0000000000000000 [ 166.215799][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.215805][T10797] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 166.215820][T10797] [ 166.255384][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.255404][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 166.273166][T10804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.273916][T10784] md2: detected capacity change from 5886 to 0 [ 166.273926][T10784] md: md2 stopped. [ 166.335278][ T30] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 166.365013][ T43] audit: type=1400 audit(1794683190.854:1152): avc: denied { write } for pid=10806 comm="syz.2.1334" path="socket:[61279]" dev="sockfs" ino=61279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.369497][ T43] audit: type=1400 audit(1794683190.864:1153): avc: denied { ioctl } for pid=10806 comm="syz.2.1334" path="socket:[61279]" dev="sockfs" ino=61279 ioctlcmd=0xc0cc5615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.376132][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.485671][ T30] usb 11-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 166.487353][ T30] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.487366][ T30] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.487942][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.492940][ T30] usb 11-1: config 0 descriptor?? [ 166.497949][ T30] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 166.498179][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 166.501585][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 166.502290][ T30] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 166.502314][ T30] usb 11-1: media controller created [ 166.503622][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.518121][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 166.519927][ T30] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.522362][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input17 [ 166.526843][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 166.526855][ T30] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.687962][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 166.688010][ T30] dvb-usb: error while querying for an remote control event. [ 166.712192][T10817] FAULT_INJECTION: forcing a failure. [ 166.712192][T10817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.712221][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.2.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.712243][T10817] Tainted: [L]=SOFTLOCKUP [ 166.712247][T10817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.712255][T10817] Call Trace: [ 166.712274][T10817] [ 166.712282][T10817] dump_stack_lvl+0x100/0x190 [ 166.712344][T10817] should_fail_ex.cold+0x5/0xa [ 166.712370][T10817] should_fail_alloc_page+0xeb/0x140 [ 166.712393][T10817] prepare_alloc_pages+0x1f0/0x5b0 [ 166.712417][T10817] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 166.712442][T10817] ? lru_gen_add_folio+0x236/0x15d0 [ 166.712470][T10817] ? folios_put_refs+0x58a/0xaa0 [ 166.712488][T10817] ? __lock_acquire+0x5c0/0x1f40 [ 166.712513][T10817] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.712542][T10817] ? lock_acquire+0x1d1/0x380 [ 166.712565][T10817] ? do_raw_spin_lock+0x128/0x260 [ 166.712582][T10817] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 166.712598][T10817] ? find_held_lock+0x2b/0x80 [ 166.712624][T10817] ? __lock_acquire+0x5c0/0x1f40 [ 166.712647][T10817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.712661][T10817] ? policy_nodemask+0xed/0x5e0 [ 166.712684][T10817] alloc_pages_mpol+0x201/0x560 [ 166.712707][T10817] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.712735][T10817] folio_alloc_mpol_noprof+0x36/0x260 [ 166.712754][T10817] shmem_alloc_folio+0x135/0x160 [ 166.712780][T10817] shmem_alloc_and_add_folio+0x371/0xd40 [ 166.712804][T10817] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 166.712825][T10817] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 166.712846][T10817] shmem_get_folio_gfp+0x758/0x1af0 [ 166.712868][T10817] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 166.712890][T10817] ? filemap_map_pages+0x1155/0x1f10 [ 166.712933][T10817] shmem_fault+0x1fb/0xa30 [ 166.712949][T10817] ? __pfx_shmem_fault+0x10/0x10 [ 166.712966][T10817] ? __pte_offset_map+0x9a/0x470 [ 166.712992][T10817] ? __pfx_filemap_map_pages+0x10/0x10 [ 166.713020][T10817] ? find_held_lock+0x2b/0x80 [ 166.713039][T10817] ? __pfx_filemap_map_pages+0x10/0x10 [ 166.713057][T10817] __do_fault+0x10b/0x440 [ 166.713081][T10817] do_fault+0xb3f/0x1890 [ 166.713101][T10817] ? __pfx_do_fault+0x10/0x10 [ 166.713115][T10817] ? rcu_read_unlock+0x2d/0xb0 [ 166.713135][T10817] ? rcu_read_unlock+0x2d/0xb0 [ 166.713154][T10817] __handle_mm_fault+0x1858/0x2f40 [ 166.713180][T10817] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.713199][T10817] ? __pfx_follow_page_pte+0x10/0x10 [ 166.713222][T10817] ? __pfx___css_rstat_updated+0x10/0x10 [ 166.713253][T10817] handle_mm_fault+0x363/0xa30 [ 166.713279][T10817] __get_user_pages+0x7ca/0x1d50 [ 166.713309][T10817] ? __pfx_mt_find+0x10/0x10 [ 166.713347][T10817] ? __pfx___get_user_pages+0x10/0x10 [ 166.713380][T10817] populate_vma_page_range+0x2bb/0x450 [ 166.713407][T10817] ? __pfx_populate_vma_page_range+0x10/0x10 [ 166.713427][T10817] ? __pfx_find_vma_intersection+0x10/0x10 [ 166.713448][T10817] __mm_populate+0x107/0x3a0 [ 166.713465][T10817] ? __pfx___mm_populate+0x10/0x10 [ 166.713482][T10817] ? up_write+0x2dc/0x5b0 [ 166.713493][T10817] vm_mmap_pgoff+0x44a/0x490 [ 166.713509][T10817] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 166.713523][T10817] ? lock_acquire+0x1d1/0x380 [ 166.713547][T10817] ? __mutex_unlock_slowpath+0x35d/0x930 [ 166.713576][T10817] ksys_mmap_pgoff+0xe4/0x610 [ 166.713605][T10817] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 166.713628][T10817] ? fput+0x7c/0x100 [ 166.713650][T10817] ? ksys_write+0x1ac/0x250 [ 166.713667][T10817] ? __pfx_ksys_write+0x10/0x10 [ 166.713702][T10817] __x64_sys_mmap+0x125/0x190 [ 166.713729][T10817] do_syscall_64+0x123/0x7b0 [ 166.713753][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.713770][T10817] RIP: 0033:0x7fbe765a94d9 [ 166.713785][T10817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.713797][T10817] RSP: 002b:00007fbe77534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.713824][T10817] RAX: ffffffffffffffda RBX: 00007fbe76825fa0 RCX: 00007fbe765a94d9 [ 166.713835][T10817] RDX: b635773f06ebbee6 RSI: 0000000000b36000 RDI: 0000200000000000 [ 166.713846][T10817] RBP: 00007fbe77534090 R08: ffffffffffffffff R09: 0000000028f41000 [ 166.713857][T10817] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 166.713868][T10817] R13: 00007fbe76826038 R14: 00007fbe76825fa0 R15: 00007ffe36e24d08 [ 166.713893][T10817] [ 166.845211][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 166.845233][ T30] dvb-usb: error while querying for an remote control event. [ 166.964768][ T43] audit: type=1400 audit(1794683191.454:1154): avc: denied { getopt } for pid=10820 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.964797][ T43] audit: type=1400 audit(1794683191.454:1155): avc: denied { read } for pid=10820 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.005273][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.005307][ T30] dvb-usb: error while querying for an remote control event. [ 167.161818][T10830] FAULT_INJECTION: forcing a failure. [ 167.161818][T10830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.161846][T10830] CPU: 2 UID: 0 PID: 10830 Comm: syz.2.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.161868][T10830] Tainted: [L]=SOFTLOCKUP [ 167.161874][T10830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.161884][T10830] Call Trace: [ 167.161891][T10830] [ 167.161898][T10830] dump_stack_lvl+0x100/0x190 [ 167.161931][T10830] should_fail_ex.cold+0x5/0xa [ 167.161960][T10830] should_fail_alloc_page+0xeb/0x140 [ 167.161982][T10830] prepare_alloc_pages+0x1f0/0x5b0 [ 167.162012][T10830] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 167.162039][T10830] ? stack_trace_save+0x8e/0xc0 [ 167.162065][T10830] ? __pfx_stack_trace_save+0x10/0x10 [ 167.162090][T10830] ? stack_depot_save_flags+0x27/0xa10 [ 167.162111][T10830] ? stack_trace_save+0x8e/0xc0 [ 167.162134][T10830] ? __pfx_stack_trace_save+0x10/0x10 [ 167.162161][T10830] ? kasan_save_stack+0x3f/0x50 [ 167.162179][T10830] ? kasan_save_stack+0x30/0x50 [ 167.162201][T10830] ? kasan_save_track+0x14/0x30 [ 167.162221][T10830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.162247][T10830] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 167.162272][T10830] ? vcpu_run+0x4009/0x60d0 [ 167.162296][T10830] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 167.162323][T10830] ? __x64_sys_ioctl+0x18e/0x210 [ 167.162342][T10830] ? do_syscall_64+0x123/0x7b0 [ 167.162366][T10830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.162408][T10830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.162431][T10830] ? policy_nodemask+0xed/0x5e0 [ 167.162457][T10830] alloc_pages_mpol+0x201/0x560 [ 167.162483][T10830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.162505][T10830] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 167.162553][T10830] alloc_pages_noprof+0x1a/0x160 [ 167.162581][T10830] get_free_pages_noprof+0x10/0xb0 [ 167.162600][T10830] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 167.162627][T10830] mmu_topup_memory_caches.part.0+0x93/0x170 [ 167.162654][T10830] kvm_mmu_load+0x11a/0x25b0 [ 167.162680][T10830] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 167.162700][T10830] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 167.162724][T10830] ? __pfx_kvm_mmu_load+0x10/0x10 [ 167.162747][T10830] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 167.162770][T10830] ? kvm_check_and_inject_events+0x896/0x1050 [ 167.162796][T10830] vcpu_run+0x4009/0x60d0 [ 167.162832][T10830] ? __pfx_vcpu_run+0x10/0x10 [ 167.162855][T10830] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 167.162877][T10830] ? lock_acquire+0x1d1/0x380 [ 167.162901][T10830] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 167.162928][T10830] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 167.162946][T10830] ? __local_bh_enable_ip+0xa5/0x120 [ 167.162974][T10830] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 167.163002][T10830] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 167.163036][T10830] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 167.163062][T10830] ? lock_acquire+0x1d1/0x380 [ 167.163085][T10830] ? do_raw_write_lock+0x11e/0x260 [ 167.163103][T10830] ? find_held_lock+0x2b/0x80 [ 167.163123][T10830] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 167.163147][T10830] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 167.163180][T10830] kvm_vcpu_ioctl+0x735/0x17b0 [ 167.163210][T10830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.163238][T10830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.163263][T10830] ? do_vfs_ioctl+0x241/0x13f0 [ 167.163303][T10830] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.163320][T10830] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 167.163344][T10830] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 167.163368][T10830] ? __fget_files+0x34/0x3d0 [ 167.163403][T10830] ? selinux_file_ioctl+0x1e0/0x290 [ 167.163423][T10830] ? selinux_file_ioctl+0x1e7/0x290 [ 167.163444][T10830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.163473][T10830] __x64_sys_ioctl+0x18e/0x210 [ 167.163494][T10830] do_syscall_64+0x123/0x7b0 [ 167.163520][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.163539][T10830] RIP: 0033:0x7fbe765a94d9 [ 167.163557][T10830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.163575][T10830] RSP: 002b:00007fbe77534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.163594][T10830] RAX: ffffffffffffffda RBX: 00007fbe76825fa0 RCX: 00007fbe765a94d9 [ 167.163606][T10830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 167.163617][T10830] RBP: 00007fbe77534090 R08: 0000000000000000 R09: 0000000000000000 [ 167.163628][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.163639][T10830] R13: 00007fbe76826038 R14: 00007fbe76825fa0 R15: 00007ffe36e24d08 [ 167.163666][T10830] [ 167.175529][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.175598][ T30] dvb-usb: error while querying for an remote control event. [ 167.302294][T10835] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.335601][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.335637][ T30] dvb-usb: error while querying for an remote control event. [ 167.345410][T10835] md: array md4 already has disks! [ 167.387355][T10835] md: could not open device unknown-block(1,8). [ 167.387441][T10835] md: error, md_import_device() returned -16 [ 167.445799][T10835] md: pers->run() failed ... [ 167.495437][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.495712][ T30] dvb-usb: error while querying for an remote control event. [ 167.515316][T10835] md: md4 stopped. [ 167.573060][ T43] audit: type=1400 audit(1794683192.064:1156): avc: denied { prog_run } for pid=10844 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1 [ 167.648300][T10846] EXT4-fs (loop2): unable to read superblock [ 167.655264][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 167.655286][ T5886] dvb-usb: error while querying for an remote control event. [ 167.704919][ T43] audit: type=1400 audit(1794683192.194:1157): avc: denied { getopt } for pid=10847 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.785431][ T7000] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 167.793437][ T43] audit: type=1400 audit(1794683192.284:1158): avc: denied { name_bind } for pid=10854 comm="syz.2.1350" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 167.813522][T10853] tipc: Started in network mode [ 167.813547][T10853] tipc: Node identity e0000002, cluster identity 4711 [ 167.813590][T10853] tipc: Enabling of bearer rejected, failed to enable media [ 167.831688][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.831718][ T30] dvb-usb: error while querying for an remote control event. [ 167.927998][T10858] kvm: user requested TSC rate below hardware speed [ 167.938342][ T7000] usb 8-1: Using ep0 maxpacket: 32 [ 167.954756][T10842] FAULT_INJECTION: forcing a failure. [ 167.954756][T10842] name failslab, interval 1, probability 10, space 0, times 0 [ 167.954788][T10842] CPU: 2 UID: 0 PID: 10842 Comm: syz.3.1344 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.954803][T10842] Tainted: [L]=SOFTLOCKUP [ 167.954807][T10842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.954823][T10842] Call Trace: [ 167.954832][T10842] [ 167.954837][T10842] dump_stack_lvl+0x100/0x190 [ 167.954890][T10842] should_fail_ex.cold+0x5/0xa [ 167.954917][T10842] should_failslab+0xc2/0x120 [ 167.954941][T10842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.954967][T10842] ? pidfs_register_pid_gfp+0x93/0x1f0 [ 167.954994][T10842] pidfs_register_pid_gfp+0x93/0x1f0 [ 167.955010][T10842] __pidfs_register_pids+0x76/0xd0 [ 167.955026][T10842] unix_stream_connect+0x445/0x1bf0 [ 167.955056][T10842] ? __pfx_unix_stream_connect+0x10/0x10 [ 167.955070][T10842] ? bpf_lsm_socket_post_create+0x9/0x10 [ 167.955095][T10842] ? __sock_create+0xa3/0x860 [ 167.955126][T10842] p9_fd_create_unix+0x252/0x300 [ 167.955150][T10842] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 167.955172][T10842] ? lockdep_init_map_type+0x5c/0x250 [ 167.955197][T10842] p9_client_create+0x563/0xd40 [ 167.955216][T10842] ? __pfx_p9_client_create+0x10/0x10 [ 167.955237][T10842] ? lockdep_init_map_type+0x5c/0x250 [ 167.955254][T10842] ? __raw_spin_lock_init+0x3a/0x110 [ 167.955268][T10842] v9fs_session_init+0x3c/0xdd0 [ 167.955288][T10842] ? v9fs_get_tree+0x9c/0xb60 [ 167.955312][T10842] v9fs_get_tree+0xb8/0xb60 [ 167.955324][T10842] ? rcu_is_watching+0x13/0xc0 [ 167.955344][T10842] ? __pfx_v9fs_get_tree+0x10/0x10 [ 167.955371][T10842] ? bpf_lsm_capable+0x9/0x10 [ 167.955398][T10842] ? security_capable+0x80/0x260 [ 167.955436][T10842] vfs_get_tree+0x92/0x320 [ 167.955475][T10842] path_mount+0x7d0/0x2850 [ 167.955512][T10842] ? __pfx_path_mount+0x10/0x10 [ 167.955528][T10842] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.955552][T10842] ? putname+0xb1/0x110 [ 167.955567][T10842] ? kmem_cache_free+0x127/0x6c0 [ 167.955589][T10842] ? __x64_sys_mount+0x293/0x310 [ 167.955606][T10842] __x64_sys_mount+0x293/0x310 [ 167.955623][T10842] ? __pfx___x64_sys_mount+0x10/0x10 [ 167.955645][T10842] do_syscall_64+0x123/0x7b0 [ 167.955662][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.955673][T10842] RIP: 0033:0x7ff6cd9a94d9 [ 167.955683][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.955693][T10842] RSP: 002b:00007ff6ce83d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.955714][T10842] RAX: ffffffffffffffda RBX: 00007ff6cdc25fa0 RCX: 00007ff6cd9a94d9 [ 167.955722][T10842] RDX: 00002000000005c0 RSI: 0000200000000580 RDI: 0000200000000540 [ 167.955730][T10842] RBP: 00007ff6cda3804e R08: 0000200000000600 R09: 0000000000000000 [ 167.955738][T10842] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 167.955745][T10842] R13: 00007ff6cdc26038 R14: 00007ff6cdc25fa0 R15: 00007ffe635a4408 [ 167.955780][T10842] [ 167.955979][T10842] 9pnet_fd: p9_fd_create_unix (10842): problem connecting socket: ./proc: -12 [ 167.991327][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 167.991360][ T30] dvb-usb: error while querying for an remote control event. [ 168.018687][ T7000] usb 8-1: unable to get BOS descriptor or descriptor too short [ 168.018723][ T7000] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 168.019358][ T7000] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 168.019375][ T7000] usb 8-1: can't read configurations, error -71 [ 168.047704][T10858] kvm [10857]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 168.050928][T10858] kvm [10857]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 168.145245][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 168.145279][ T30] dvb-usb: error while querying for an remote control event. [ 168.291903][T10871] tipc: Started in network mode [ 168.291930][T10871] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 168.292106][T10871] tipc: Enabled bearer , priority 0 [ 168.306033][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 168.306064][ T30] dvb-usb: error while querying for an remote control event. [ 168.371668][T10875] overlayfs: failed to resolve './file0': -2 [ 168.373483][T10876] overlayfs: failed to resolve './file0': -2 [ 168.414117][T10881] syzkaller0: entered promiscuous mode [ 168.414132][T10881] syzkaller0: entered allmulticast mode [ 168.416620][ T43] audit: type=1400 audit(1794683192.914:1159): avc: denied { create } for pid=10880 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.476004][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 168.476035][ T30] dvb-usb: error while querying for an remote control event. [ 168.505314][ T25] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 168.620054][T10884] syzkaller0: entered promiscuous mode [ 168.620068][T10884] syzkaller0: entered allmulticast mode [ 168.624740][ T43] audit: type=1400 audit(1794683193.114:1160): avc: denied { bind } for pid=10883 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.637667][T10884] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 168.638026][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 168.638042][ T63] dvb-usb: error while querying for an remote control event. [ 168.666074][ T25] usb 9-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 168.666991][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.667028][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 168.667050][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.667068][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.667087][ T25] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 168.667120][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.671050][T10869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.673663][ T25] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 168.676645][ T25] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 168.676710][ T25] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 168.682823][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 168.684595][ T25] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 168.684661][ T25] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 168.689707][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 168.795232][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 168.795252][ T30] dvb-usb: error while querying for an remote control event. [ 168.872797][T10891] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 168.955327][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 168.955344][ T5886] dvb-usb: error while querying for an remote control event. [ 169.104780][ T35] usb 9-1: USB disconnect, device number 15 [ 169.116048][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 169.116091][ T30] dvb-usb: error while querying for an remote control event. [ 169.138312][ T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 169.140558][ T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 169.141184][ T35] keyspan 9-1:1.0: device disconnected [ 169.174440][ T5872] bridge_slave_1: left allmulticast mode [ 169.174725][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.182768][ T5872] bridge_slave_0: left allmulticast mode [ 169.184560][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.266248][ T858] usb 11-1: USB disconnect, device number 8 [ 169.275328][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 169.275356][ T63] dvb-usb: error while querying for an remote control event. [ 169.361699][ T858] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 169.376596][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'. [ 169.379588][T10904] FAULT_INJECTION: forcing a failure. [ 169.379588][T10904] name failslab, interval 1, probability 10, space 0, times 0 [ 169.379617][T10904] CPU: 2 UID: 0 PID: 10904 Comm: syz.6.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.379643][T10904] Tainted: [L]=SOFTLOCKUP [ 169.379650][T10904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.379671][T10904] Call Trace: [ 169.379684][T10904] [ 169.379693][T10904] dump_stack_lvl+0x100/0x190 [ 169.379773][T10904] should_fail_ex.cold+0x5/0xa [ 169.379817][T10904] should_failslab+0xc2/0x120 [ 169.379856][T10904] __kvmalloc_node_noprof+0x113/0x9b0 [ 169.379888][T10904] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 169.379915][T10904] ? percpu_ref_init+0xec/0x3f0 [ 169.379946][T10904] ? io_alloc_cache_init+0x38/0x170 [ 169.379970][T10904] io_alloc_cache_init+0x38/0x170 [ 169.380002][T10904] io_uring_setup.cold+0x46e/0x1c7e [ 169.380030][T10904] ? lock_acquire+0x1d1/0x380 [ 169.380067][T10904] ? avc_has_perm_noaudit+0x56/0x470 [ 169.380105][T10904] ? __pfx_io_uring_setup+0x10/0x10 [ 169.380138][T10904] ? find_held_lock+0x2b/0x80 [ 169.380159][T10904] ? avc_has_perm_noaudit+0x11e/0x470 [ 169.380185][T10904] ? avc_has_perm_noaudit+0x11e/0x470 [ 169.380226][T10904] ? xfd_validate_state+0x129/0x190 [ 169.380269][T10904] __x64_sys_io_uring_setup+0xc2/0x170 [ 169.380298][T10904] do_syscall_64+0x123/0x7b0 [ 169.380339][T10904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.380360][T10904] RIP: 0033:0x7fdc621a94d9 [ 169.380377][T10904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.380395][T10904] RSP: 002b:00007fdc62f87fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 169.380433][T10904] RAX: ffffffffffffffda RBX: 0000200000000780 RCX: 00007fdc621a94d9 [ 169.380445][T10904] RDX: 0000200000000840 RSI: 0000200000000780 RDI: 0000000000004337 [ 169.380459][T10904] RBP: 00007fdc6223804e R08: 0000000000000000 R09: 00007fdc62f889c8 [ 169.380472][T10904] R10: 0000200000000880 R11: 0000000000000206 R12: 0000200000000840 [ 169.380484][T10904] R13: 0000200000000880 R14: 0000200000000800 R15: 00007ffe0d1cf748 [ 169.380509][T10904] [ 169.429247][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.435428][ T5872] bond0 (unregistering): Released all slaves [ 169.459937][ T7000] tipc: Node number set to 43690 [ 169.554717][T10904] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.725496][ T35] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 169.823899][ T5495] 8021q: adding VLAN 0 to HW filter on device eth10 [ 169.858454][ T35] usb 8-1: device descriptor read/64, error -71 [ 170.006925][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.008371][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.041015][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 170.041035][ T43] audit: type=1400 audit(1794683194.534:1167): avc: denied { write } for pid=10934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.097515][ T35] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 170.111044][ T43] audit: type=1400 audit(1794683194.604:1168): avc: denied { write } for pid=10941 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.154070][T10949] device-mapper: table: 248:10: thin-pool: Error setting metadata or data device (-EINVAL) [ 170.154088][T10949] device-mapper: ioctl: error adding target to table [ 170.168175][T10939] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 170.168276][T10939] device-mapper: ioctl: error adding target to table [ 170.184445][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 170.195008][ T5872] team0 (unregistering): Port device team_slave_0 removed [ 170.208582][T10953] tipc: Can't bind to reserved service type 2 [ 170.225420][ T35] usb 8-1: device descriptor read/64, error -71 [ 170.280336][T10956] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 170.280989][T10956] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 170.282362][T10956] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 170.301956][T10953] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 170.303344][ T43] audit: type=1400 audit(1794683194.794:1169): avc: denied { create } for pid=10952 comm="syz.4.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 170.338125][ T35] usb usb8-port1: attempt power cycle [ 170.339086][ T5495] 8021q: adding VLAN 0 to HW filter on device eth11 [ 170.437661][ T43] audit: type=1400 audit(1794683194.934:1170): avc: denied { write } for pid=10969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.542395][ T43] audit: type=1400 audit(1794683195.044:1171): avc: denied { write } for pid=10980 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.580793][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1377'. [ 170.580862][T10985] bridge_slave_1: left allmulticast mode [ 170.580882][T10985] bridge_slave_1: left promiscuous mode [ 170.581088][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.586142][T10985] bridge_slave_0: left allmulticast mode [ 170.586158][T10985] bridge_slave_0: left promiscuous mode [ 170.586287][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.605677][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 170.638050][ T5495] 8021q: adding VLAN 0 to HW filter on device eth12 [ 170.675321][ T35] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 170.699074][ T35] usb 8-1: device descriptor read/8, error -71 [ 170.711476][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 170.743813][ T43] audit: type=1400 audit(1794683195.234:1172): avc: denied { write } for pid=10994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.804629][ T43] audit: type=1400 audit(1794683195.294:1173): avc: denied { write } for pid=11007 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.851015][ T5495] 8021q: adding VLAN 0 to HW filter on device eth13 [ 170.935532][ T35] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 170.936683][T11029] syzkaller0: entered promiscuous mode [ 170.936695][T11029] syzkaller0: entered allmulticast mode [ 170.938074][T11027] syzkaller0: left promiscuous mode [ 170.938085][T11027] syzkaller0: left allmulticast mode [ 170.947868][ T14] net_ratelimit: 106 callbacks suppressed [ 170.947894][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.947911][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.955652][ T35] usb 8-1: device descriptor read/8, error -71 [ 170.980357][ T43] audit: type=1400 audit(1794683195.474:1174): avc: denied { write } for pid=11030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.065285][ T43] audit: type=1400 audit(1794683195.554:1175): avc: denied { write } for pid=11034 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.065535][ T35] usb usb8-port1: unable to enumerate USB device [ 171.086759][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.105256][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.123889][ T43] audit: type=1400 audit(1794683195.614:1176): avc: denied { getopt } for pid=11035 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.125267][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.155472][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.174157][T11042] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.175573][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.175594][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 171.223729][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 171.274796][T11051] kAFS: Invalid Command on /proc/fs/afs/cells file [ 171.277649][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 171.285953][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.285972][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 171.326898][T11045] Bluetooth: (null): Too short H5 packet [ 171.328735][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 171.328751][T11051] nbd: device at index 64 is going down [ 171.439550][T10596] udevd[10596]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.464415][T11065] nvme_fabrics: missing parameter 'nqn=%s' [ 171.604746][T11079] overlayfs: conflicting options: userxattr,metacopy=on [ 171.613238][T11079] netlink: 'syz.4.1395': attribute type 2 has an invalid length. [ 172.088006][T11096] device-mapper: ioctl: Target spec extends beyond end of parameters [ 172.088016][T11096] device-mapper: ioctl: unable to find target [ 172.104547][T11099] FAULT_INJECTION: forcing a failure. [ 172.104547][T11099] name failslab, interval 1, probability 10, space 0, times 0 [ 172.104568][T11099] CPU: 0 UID: 0 PID: 11099 Comm: syz.6.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.104583][T11099] Tainted: [L]=SOFTLOCKUP [ 172.104587][T11099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.104594][T11099] Call Trace: [ 172.104610][T11099] [ 172.104614][T11099] dump_stack_lvl+0x100/0x190 [ 172.104664][T11099] should_fail_ex.cold+0x5/0xa [ 172.104682][T11099] should_failslab+0xc2/0x120 [ 172.104696][T11099] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.104711][T11099] ? sctp_add_bind_addr+0xae/0x3e0 [ 172.104752][T11099] sctp_add_bind_addr+0xae/0x3e0 [ 172.104765][T11099] sctp_copy_local_addr_list+0x349/0x550 [ 172.104790][T11099] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 172.104805][T11099] ? selinux_sctp_assoc_request+0xde/0x270 [ 172.104831][T11099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.104851][T11099] sctp_bind_addr_copy+0xe0/0x530 [ 172.104866][T11099] sctp_sf_do_unexpected_init.isra.0+0xa0c/0x18c0 [ 172.104882][T11099] ? __pfx_sctp_sf_do_unexpected_init.isra.0+0x10/0x10 [ 172.104894][T11099] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 172.104909][T11099] ? __pfx_sctp_cname+0x10/0x10 [ 172.104919][T11099] sctp_do_sm+0x17a/0x5c30 [ 172.104935][T11099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.104949][T11099] ? __lock_acquire+0x5c0/0x1f40 [ 172.104963][T11099] ? __pfx_sctp_do_sm+0x10/0x10 [ 172.105009][T11099] ? ktime_get+0x22c/0x320 [ 172.105033][T11099] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.105060][T11099] sctp_endpoint_bh_rcv+0x43f/0x8c0 [ 172.105087][T11099] ? __pfx_sctp_endpoint_bh_rcv+0x10/0x10 [ 172.105127][T11099] ? __lock_acquire+0x5c0/0x1f40 [ 172.105157][T11099] sctp_inq_push+0x25c/0x320 [ 172.105176][T11099] sctp_backlog_rcv+0x169/0x590 [ 172.105201][T11099] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 172.105225][T11099] __release_sock+0x39d/0x440 [ 172.105277][T11099] release_sock+0x1e5/0x280 [ 172.105299][T11099] sctp_sendmsg+0x1166/0x22e0 [ 172.105327][T11099] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.105351][T11099] ? __pfx_sock_has_perm+0x10/0x10 [ 172.105382][T11099] ? __might_fault+0xc5/0x140 [ 172.105400][T11099] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.105416][T11099] inet_sendmsg+0x11c/0x140 [ 172.105442][T11099] __sys_sendto+0x470/0x4e0 [ 172.105460][T11099] ? __pfx_inet_sendmsg+0x10/0x10 [ 172.105485][T11099] ? __pfx___sys_sendto+0x10/0x10 [ 172.105512][T11099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.105534][T11099] ? ksys_write+0x1ac/0x250 [ 172.105553][T11099] ? __pfx_ksys_write+0x10/0x10 [ 172.105567][T11099] __x64_sys_sendto+0xe0/0x1c0 [ 172.105579][T11099] ? do_syscall_64+0xae/0x7b0 [ 172.105593][T11099] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.105607][T11099] do_syscall_64+0x123/0x7b0 [ 172.105622][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.105634][T11099] RIP: 0033:0x7fdc621a94d9 [ 172.105643][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.105654][T11099] RSP: 002b:00007fdc62f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 172.105672][T11099] RAX: ffffffffffffffda RBX: 00007fdc62425fa0 RCX: 00007fdc621a94d9 [ 172.105679][T11099] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 172.105685][T11099] RBP: 00007fdc62f88090 R08: 0000200000000600 R09: 0000000000000010 [ 172.105691][T11099] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 172.105698][T11099] R13: 00007fdc62426038 R14: 00007fdc62425fa0 R15: 00007ffe0d1cf748 [ 172.105712][T11099] [ 172.285490][T11115] FAULT_INJECTION: forcing a failure. [ 172.285490][T11115] name failslab, interval 1, probability 10, space 0, times 0 [ 172.285522][T11115] CPU: 2 UID: 0 PID: 11115 Comm: syz.4.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.285547][T11115] Tainted: [L]=SOFTLOCKUP [ 172.285553][T11115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.285563][T11115] Call Trace: [ 172.285570][T11115] [ 172.285578][T11115] dump_stack_lvl+0x100/0x190 [ 172.285612][T11115] should_fail_ex.cold+0x5/0xa [ 172.285640][T11115] should_failslab+0xc2/0x120 [ 172.285663][T11115] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.285689][T11115] ? rdma_resolve_ip+0x63/0x6b0 [ 172.285727][T11115] rdma_resolve_ip+0x63/0x6b0 [ 172.285745][T11115] ? __pfx_addr_handler+0x10/0x10 [ 172.285783][T11115] rdma_resolve_addr+0x357/0x20e0 [ 172.285806][T11115] ? xa_load+0x153/0x2c0 [ 172.285824][T11115] ? __pfx_xa_load+0x10/0x10 [ 172.285847][T11115] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 172.285874][T11115] ? __pfx_ucma_get_ctx+0x10/0x10 [ 172.285901][T11115] ? ucma_resolve_ip+0x161/0x220 [ 172.285916][T11115] ucma_resolve_ip+0x161/0x220 [ 172.285935][T11115] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 172.285963][T11115] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 172.285983][T11115] ucma_write+0x1f6/0x330 [ 172.286000][T11115] ? __pfx_ucma_write+0x10/0x10 [ 172.286017][T11115] ? bpf_lsm_file_permission+0x9/0x10 [ 172.286064][T11115] ? security_file_permission+0x76/0x210 [ 172.286082][T11115] ? rw_verify_area+0xce/0x6d0 [ 172.286110][T11115] ? __pfx_ucma_write+0x10/0x10 [ 172.286127][T11115] vfs_writev+0x5ed/0xdd0 [ 172.286151][T11115] ? __pfx_vfs_writev+0x10/0x10 [ 172.286176][T11115] ? lock_acquire+0x1d1/0x380 [ 172.286200][T11115] ? __fget_files+0x34/0x3d0 [ 172.286247][T11115] ? __fget_files+0x21f/0x3d0 [ 172.286276][T11115] ? do_writev+0x28a/0x340 [ 172.286298][T11115] do_writev+0x28a/0x340 [ 172.286317][T11115] ? __pfx_do_writev+0x10/0x10 [ 172.286342][T11115] do_syscall_64+0x123/0x7b0 [ 172.286369][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.286388][T11115] RIP: 0033:0x7f6d411a94d9 [ 172.286403][T11115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.286421][T11115] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 172.286440][T11115] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 172.286452][T11115] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 172.286463][T11115] RBP: 00007f6d42099090 R08: 0000000000000000 R09: 0000000000000000 [ 172.286475][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.286486][T11115] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 172.286516][T11115] [ 172.333528][T11113] FAULT_INJECTION: forcing a failure. [ 172.333528][T11113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.333558][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.2.1406 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.333582][T11113] Tainted: [L]=SOFTLOCKUP [ 172.333588][T11113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.333597][T11113] Call Trace: [ 172.333603][T11113] [ 172.333610][T11113] dump_stack_lvl+0x100/0x190 [ 172.333643][T11113] should_fail_ex.cold+0x5/0xa [ 172.333668][T11113] should_fail_alloc_page+0xeb/0x140 [ 172.333689][T11113] prepare_alloc_pages+0x1f0/0x5b0 [ 172.333714][T11113] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 172.333739][T11113] ? lru_gen_add_folio+0x236/0x15d0 [ 172.333793][T11113] ? folios_put_refs+0x58a/0xaa0 [ 172.333810][T11113] ? __lock_acquire+0x5c0/0x1f40 [ 172.333834][T11113] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.333866][T11113] ? lock_acquire+0x1d1/0x380 [ 172.333888][T11113] ? do_raw_spin_lock+0x128/0x260 [ 172.333905][T11113] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.333922][T11113] ? find_held_lock+0x2b/0x80 [ 172.333947][T11113] ? __lock_acquire+0x5c0/0x1f40 [ 172.333970][T11113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.333989][T11113] ? policy_nodemask+0xed/0x5e0 [ 172.334017][T11113] alloc_pages_mpol+0x201/0x560 [ 172.334039][T11113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.334068][T11113] folio_alloc_mpol_noprof+0x36/0x260 [ 172.334093][T11113] shmem_alloc_folio+0x135/0x160 [ 172.334119][T11113] shmem_alloc_and_add_folio+0x371/0xd40 [ 172.334145][T11113] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 172.334166][T11113] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 172.334191][T11113] shmem_get_folio_gfp+0x758/0x1af0 [ 172.334217][T11113] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 172.334240][T11113] ? filemap_map_pages+0x1155/0x1f10 [ 172.334265][T11113] ? __lock_acquire+0x5c0/0x1f40 [ 172.334291][T11113] shmem_fault+0x1fb/0xa30 [ 172.334312][T11113] ? __pfx_shmem_fault+0x10/0x10 [ 172.334329][T11113] ? lock_acquire+0x1d1/0x380 [ 172.334350][T11113] ? __pte_offset_map+0x9a/0x470 [ 172.334376][T11113] ? __pfx_filemap_map_pages+0x10/0x10 [ 172.334404][T11113] ? find_held_lock+0x2b/0x80 [ 172.334424][T11113] ? __pfx_filemap_map_pages+0x10/0x10 [ 172.334447][T11113] __do_fault+0x10b/0x440 [ 172.334472][T11113] do_fault+0xb3f/0x1890 [ 172.334491][T11113] ? __pfx_do_fault+0x10/0x10 [ 172.334505][T11113] ? rcu_read_unlock+0x2d/0xb0 [ 172.334524][T11113] ? rcu_read_unlock+0x2d/0xb0 [ 172.334550][T11113] __handle_mm_fault+0x1858/0x2f40 [ 172.334576][T11113] ? __pfx___handle_mm_fault+0x10/0x10 [ 172.334594][T11113] ? __pfx_follow_page_pte+0x10/0x10 [ 172.334615][T11113] ? __pfx___css_rstat_updated+0x10/0x10 [ 172.334666][T11113] handle_mm_fault+0x363/0xa30 [ 172.334693][T11113] __get_user_pages+0x7ca/0x1d50 [ 172.334723][T11113] ? __pfx_mt_find+0x10/0x10 [ 172.334739][T11113] ? __pfx___get_user_pages+0x10/0x10 [ 172.334771][T11113] populate_vma_page_range+0x2bb/0x450 [ 172.334799][T11113] ? __pfx_populate_vma_page_range+0x10/0x10 [ 172.334822][T11113] ? __pfx_find_vma_intersection+0x10/0x10 [ 172.334853][T11113] __mm_populate+0x107/0x3a0 [ 172.334879][T11113] ? __pfx___mm_populate+0x10/0x10 [ 172.334904][T11113] ? up_write+0x2dc/0x5b0 [ 172.334924][T11113] vm_mmap_pgoff+0x44a/0x490 [ 172.334948][T11113] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 172.334970][T11113] ? lock_acquire+0x1d1/0x380 [ 172.334994][T11113] ? __mutex_unlock_slowpath+0x35d/0x930 [ 172.335029][T11113] ksys_mmap_pgoff+0xe4/0x610 [ 172.335058][T11113] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 172.335080][T11113] ? fput+0x7c/0x100 [ 172.335103][T11113] ? ksys_write+0x1ac/0x250 [ 172.335120][T11113] ? __pfx_ksys_write+0x10/0x10 [ 172.335141][T11113] __x64_sys_mmap+0x125/0x190 [ 172.335166][T11113] do_syscall_64+0x123/0x7b0 [ 172.335191][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.335208][T11113] RIP: 0033:0x7fbe765a94d9 [ 172.335223][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.335238][T11113] RSP: 002b:00007fbe77534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 172.335255][T11113] RAX: ffffffffffffffda RBX: 00007fbe76825fa0 RCX: 00007fbe765a94d9 [ 172.335266][T11113] RDX: b635773f06ebbee6 RSI: 0000000000b36000 RDI: 0000200000000000 [ 172.335277][T11113] RBP: 00007fbe77534090 R08: ffffffffffffffff R09: 0000000028f41000 [ 172.335288][T11113] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 172.335299][T11113] R13: 00007fbe76826038 R14: 00007fbe76825fa0 R15: 00007ffe36e24d08 [ 172.335324][T11113] [ 172.365245][T11123] FAULT_INJECTION: forcing a failure. [ 172.365245][T11123] name failslab, interval 1, probability 10, space 0, times 0 [ 172.365275][T11123] CPU: 2 UID: 0 PID: 11123 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.365305][T11123] Tainted: [L]=SOFTLOCKUP [ 172.365312][T11123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.365323][T11123] Call Trace: [ 172.365329][T11123] [ 172.365337][T11123] dump_stack_lvl+0x100/0x190 [ 172.365372][T11123] should_fail_ex.cold+0x5/0xa [ 172.365399][T11123] should_failslab+0xc2/0x120 [ 172.365422][T11123] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.365447][T11123] ? percpu_ref_init+0xec/0x3f0 [ 172.365470][T11123] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 172.365491][T11123] percpu_ref_init+0xec/0x3f0 [ 172.365511][T11123] io_uring_setup.cold+0x2be/0x1c7e [ 172.365534][T11123] ? lock_acquire+0x1d1/0x380 [ 172.365558][T11123] ? avc_has_perm_noaudit+0x56/0x470 [ 172.365582][T11123] ? __pfx_io_uring_setup+0x10/0x10 [ 172.365604][T11123] ? find_held_lock+0x2b/0x80 [ 172.365624][T11123] ? avc_has_perm_noaudit+0x11e/0x470 [ 172.365646][T11123] ? avc_has_perm_noaudit+0x11e/0x470 [ 172.365686][T11123] ? __pfx___x64_sys_futex+0x10/0x10 [ 172.365708][T11123] ? __sys_setsockopt+0x1b5/0x220 [ 172.365737][T11123] __x64_sys_io_uring_setup+0xc2/0x170 [ 172.365762][T11123] do_syscall_64+0x123/0x7b0 [ 172.365789][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.365808][T11123] RIP: 0033:0x7fdc621a94d9 [ 172.365823][T11123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.365838][T11123] RSP: 002b:00007fdc603f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 172.365855][T11123] RAX: ffffffffffffffda RBX: 00007fdc62426090 RCX: 00007fdc621a94d9 [ 172.365868][T11123] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000899 [ 172.365879][T11123] RBP: 00007fdc6223804e R08: 0000000000000000 R09: 0000000000000000 [ 172.365890][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.365902][T11123] R13: 00007fdc62426128 R14: 00007fdc62426090 R15: 00007ffe0d1cf748 [ 172.365924][T11123] [ 172.455098][T11127] FAULT_INJECTION: forcing a failure. [ 172.455098][T11127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.455209][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz.4.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.455225][T11127] Tainted: [L]=SOFTLOCKUP [ 172.455229][T11127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.455235][T11127] Call Trace: [ 172.455240][T11127] [ 172.455245][T11127] dump_stack_lvl+0x100/0x190 [ 172.455267][T11127] should_fail_ex.cold+0x5/0xa [ 172.455284][T11127] should_fail_alloc_page+0xeb/0x140 [ 172.455299][T11127] prepare_alloc_pages+0x1f0/0x5b0 [ 172.455319][T11127] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 172.455337][T11127] ? stack_trace_save+0x8e/0xc0 [ 172.455352][T11127] ? __pfx_stack_trace_save+0x10/0x10 [ 172.455366][T11127] ? stack_depot_save_flags+0x27/0xa10 [ 172.455389][T11127] ? stack_trace_save+0x8e/0xc0 [ 172.455402][T11127] ? __pfx_stack_trace_save+0x10/0x10 [ 172.455418][T11127] ? kasan_save_stack+0x3f/0x50 [ 172.455429][T11127] ? kasan_save_stack+0x30/0x50 [ 172.455439][T11127] ? kasan_save_track+0x14/0x30 [ 172.455450][T11127] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.455465][T11127] ? mmu_topup_memory_caches.part.0+0x93/0x170 [ 172.455488][T11127] ? vcpu_run+0x4009/0x60d0 [ 172.455502][T11127] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 172.455525][T11127] ? __x64_sys_ioctl+0x18e/0x210 [ 172.455535][T11127] ? do_syscall_64+0x123/0x7b0 [ 172.455549][T11127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.455572][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.455585][T11127] ? policy_nodemask+0xed/0x5e0 [ 172.455600][T11127] alloc_pages_mpol+0x201/0x560 [ 172.455614][T11127] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.455627][T11127] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 172.455642][T11127] alloc_pages_noprof+0x1a/0x160 [ 172.455657][T11127] get_free_pages_noprof+0x10/0xb0 [ 172.455667][T11127] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 172.455682][T11127] mmu_topup_memory_caches.part.0+0x93/0x170 [ 172.455698][T11127] kvm_mmu_load+0x11a/0x25b0 [ 172.455713][T11127] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 172.455725][T11127] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 172.455761][T11127] ? __pfx_kvm_mmu_load+0x10/0x10 [ 172.455775][T11127] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 172.455788][T11127] ? kvm_check_and_inject_events+0x896/0x1050 [ 172.455805][T11127] vcpu_run+0x4009/0x60d0 [ 172.455826][T11127] ? __pfx_vcpu_run+0x10/0x10 [ 172.455839][T11127] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 172.455852][T11127] ? lock_acquire+0x1d1/0x380 [ 172.455866][T11127] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 172.455883][T11127] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 172.455894][T11127] ? __local_bh_enable_ip+0xa5/0x120 [ 172.455928][T11127] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 172.455943][T11127] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 172.455962][T11127] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 172.455976][T11127] ? lock_acquire+0x1d1/0x380 [ 172.455990][T11127] ? do_raw_write_lock+0x11e/0x260 [ 172.456000][T11127] ? find_held_lock+0x2b/0x80 [ 172.456012][T11127] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 172.456027][T11127] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 172.456046][T11127] kvm_vcpu_ioctl+0x735/0x17b0 [ 172.456063][T11127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 172.456079][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.456090][T11127] ? do_vfs_ioctl+0x241/0x13f0 [ 172.456102][T11127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.456112][T11127] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 172.456126][T11127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 172.456140][T11127] ? __fget_files+0x34/0x3d0 [ 172.456159][T11127] ? selinux_file_ioctl+0x1e0/0x290 [ 172.456170][T11127] ? selinux_file_ioctl+0x1e7/0x290 [ 172.456182][T11127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 172.456199][T11127] __x64_sys_ioctl+0x18e/0x210 [ 172.456211][T11127] do_syscall_64+0x123/0x7b0 [ 172.456229][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.456244][T11127] RIP: 0033:0x7f6d411a94d9 [ 172.456256][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.456285][T11127] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.456297][T11127] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 172.456304][T11127] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 172.456310][T11127] RBP: 00007f6d42099090 R08: 0000000000000000 R09: 0000000000000000 [ 172.456321][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.456327][T11127] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 172.456342][T11127] [ 172.517123][T11132] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 172.517135][T11132] Unsupported pkey algo: 106 [ 172.538579][T11134] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 172.615893][T11141] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 172.618887][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'. [ 172.657222][T11147] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 172.657887][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 172.658600][T11147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1416'. [ 172.664811][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'. [ 172.671047][T11147] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 172.721375][T11158] batadv_slave_1: entered promiscuous mode [ 172.724427][T11157] batadv_slave_1: left promiscuous mode [ 172.764182][T11160] xfrm1: entered allmulticast mode [ 172.843854][ T5192] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 172.844095][ T5192] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 172.844250][ T5192] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 172.844259][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 172.844489][ T5192] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 172.844504][ T5192] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 172.844515][ T5192] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 172.844527][ T5192] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 172.844537][ T5192] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 172.844577][ T5192] loop5: [ 172.879288][T11167] FAULT_INJECTION: forcing a failure. [ 172.879288][T11167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.879310][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.3.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.879326][T11167] Tainted: [L]=SOFTLOCKUP [ 172.879330][T11167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.879336][T11167] Call Trace: [ 172.879349][T11167] [ 172.879354][T11167] dump_stack_lvl+0x100/0x190 [ 172.879405][T11167] should_fail_ex.cold+0x5/0xa [ 172.879427][T11167] should_fail_alloc_page+0xeb/0x140 [ 172.879442][T11167] prepare_alloc_pages+0x1f0/0x5b0 [ 172.879458][T11167] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 172.879474][T11167] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 172.879514][T11167] ? __lock_acquire+0x5c0/0x1f40 [ 172.879533][T11167] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.879553][T11167] ? lock_acquire+0x1d1/0x380 [ 172.879568][T11167] ? do_raw_spin_lock+0x128/0x260 [ 172.879578][T11167] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.879589][T11167] ? find_held_lock+0x2b/0x80 [ 172.879604][T11167] ? __lock_acquire+0x5c0/0x1f40 [ 172.879620][T11167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.879632][T11167] ? policy_nodemask+0xed/0x5e0 [ 172.879647][T11167] alloc_pages_mpol+0x201/0x560 [ 172.879661][T11167] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.879679][T11167] folio_alloc_mpol_noprof+0x36/0x260 [ 172.879695][T11167] shmem_alloc_folio+0x135/0x160 [ 172.879712][T11167] shmem_alloc_and_add_folio+0x371/0xd40 [ 172.879728][T11167] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 172.879760][T11167] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 172.879775][T11167] shmem_get_folio_gfp+0x758/0x1af0 [ 172.879791][T11167] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 172.879805][T11167] ? filemap_map_pages+0x1155/0x1f10 [ 172.879824][T11167] shmem_fault+0x1fb/0xa30 [ 172.879836][T11167] ? __pfx_shmem_fault+0x10/0x10 [ 172.879848][T11167] ? __pte_offset_map+0x9a/0x470 [ 172.879865][T11167] ? __pfx_filemap_map_pages+0x10/0x10 [ 172.879883][T11167] ? find_held_lock+0x2b/0x80 [ 172.879896][T11167] ? __pfx_filemap_map_pages+0x10/0x10 [ 172.879911][T11167] __do_fault+0x10b/0x440 [ 172.879927][T11167] do_fault+0xb3f/0x1890 [ 172.879939][T11167] ? __pfx_do_fault+0x10/0x10 [ 172.879948][T11167] ? rcu_read_unlock+0x2d/0xb0 [ 172.879961][T11167] ? rcu_read_unlock+0x2d/0xb0 [ 172.879977][T11167] __handle_mm_fault+0x1858/0x2f40 [ 172.879993][T11167] ? __pfx___handle_mm_fault+0x10/0x10 [ 172.880005][T11167] ? __pfx_follow_page_pte+0x10/0x10 [ 172.880019][T11167] ? __pfx___css_rstat_updated+0x10/0x10 [ 172.880042][T11167] handle_mm_fault+0x363/0xa30 [ 172.880058][T11167] __get_user_pages+0x7ca/0x1d50 [ 172.880077][T11167] ? __pfx_mt_find+0x10/0x10 [ 172.880111][T11167] ? __pfx___get_user_pages+0x10/0x10 [ 172.880131][T11167] populate_vma_page_range+0x2bb/0x450 [ 172.880149][T11167] ? __pfx_populate_vma_page_range+0x10/0x10 [ 172.880165][T11167] ? __pfx_find_vma_intersection+0x10/0x10 [ 172.880185][T11167] __mm_populate+0x107/0x3a0 [ 172.880202][T11167] ? __pfx___mm_populate+0x10/0x10 [ 172.880219][T11167] ? up_write+0x2dc/0x5b0 [ 172.880230][T11167] vm_mmap_pgoff+0x44a/0x490 [ 172.880246][T11167] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 172.880259][T11167] ? lock_acquire+0x1d1/0x380 [ 172.880275][T11167] ? __mutex_unlock_slowpath+0x35d/0x930 [ 172.880294][T11167] ksys_mmap_pgoff+0xe4/0x610 [ 172.880312][T11167] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 172.880327][T11167] ? fput+0x7c/0x100 [ 172.880341][T11167] ? ksys_write+0x1ac/0x250 [ 172.880352][T11167] ? __pfx_ksys_write+0x10/0x10 [ 172.880365][T11167] __x64_sys_mmap+0x125/0x190 [ 172.880381][T11167] do_syscall_64+0x123/0x7b0 [ 172.880397][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.880412][T11167] RIP: 0033:0x7ff6cd9a94d9 [ 172.880421][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.880431][T11167] RSP: 002b:00007ff6ce83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 172.880449][T11167] RAX: ffffffffffffffda RBX: 00007ff6cdc25fa0 RCX: 00007ff6cd9a94d9 [ 172.880456][T11167] RDX: b635773f06ebbee6 RSI: 0000000000b36000 RDI: 0000200000000000 [ 172.880462][T11167] RBP: 00007ff6ce83d090 R08: ffffffffffffffff R09: 0000000028f41000 [ 172.880469][T11167] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 172.880475][T11167] R13: 00007ff6cdc26038 R14: 00007ff6cdc25fa0 R15: 00007ffe635a4408 [ 172.880489][T11167] [ 172.997803][T11172] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.997832][T11172] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 172.997946][T11172] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 173.076322][ T68] Bluetooth: hci1: ISO packet for unknown connection handle 54 [ 173.195095][T11187] [ 173.195996][T11187] ====================================================== [ 173.198239][T11187] WARNING: possible circular locking dependency detected [ 173.200556][T11187] syzkaller #0 Tainted: G L [ 173.202782][T11187] ------------------------------------------------------ [ 173.205014][T11187] syz.4.1430/11187 is trying to acquire lock: [ 173.206821][T11187] ffffffff916373e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.209990][T11187] [ 173.209990][T11187] but task is already holding lock: [ 173.211961][T11187] ffff888038db8470 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 173.214519][T11187] [ 173.214519][T11187] which lock already depends on the new lock. [ 173.214519][T11187] [ 173.217319][T11187] [ 173.217319][T11187] the existing dependency chain (in reverse order) is: [ 173.219695][T11187] [ 173.219695][T11187] -> #4 (&p->frag_sem){++++}-{4:4}: [ 173.221689][T11187] lock_acquire+0x1d1/0x380 [ 173.223055][T11187] down_write_killable+0x8e/0x240 [ 173.224626][T11187] configfs_rmdir+0x3fa/0x950 [ 173.226051][T11187] vfs_rmdir+0x328/0x8e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.227381][T11187] filename_rmdir+0x31a/0x610 [ 173.228918][T11187] __x64_sys_rmdir+0x46/0x70 [ 173.230302][T11187] do_syscall_64+0x123/0x7b0 [ 173.231708][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.233459][T11187] [ 173.233459][T11187] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 173.235888][T11187] lock_acquire+0x1d1/0x380 [ 173.237232][T11187] down_write+0x86/0x1f0 [ 173.238506][T11187] configfs_depend_item_unlocked+0xf3/0x6a0 [ 173.240263][T11187] usbg_make_tpg+0x251/0x610 [ 173.241685][T11187] target_fabric_make_tpg+0xab/0x8c0 [ 173.243367][T11187] configfs_mkdir+0x525/0xd40 [ 173.244833][T11187] vfs_mkdir+0x36d/0x8a0 [ 173.246131][T11187] filename_mkdirat+0x4c4/0x630 [ 173.247545][T11187] __x64_sys_mkdirat+0x89/0xc0 [ 173.248947][T11187] do_syscall_64+0x123/0x7b0 [ 173.250327][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.252037][T11187] [ 173.252037][T11187] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 173.254103][T11187] lock_acquire+0x1d1/0x380 [ 173.255462][T11187] __mutex_lock+0x19f/0x1c10 [ 173.256829][T11187] tcm_alloc_inst+0x5f/0x1e0 [ 173.258212][T11187] try_get_usb_function_instance+0x136/0x1f0 [ 173.259972][T11187] usb_get_function_instance+0x16/0x70 [ 173.261635][T11187] function_make+0x18c/0x3f0 [ 173.263025][T11187] configfs_mkdir+0x525/0xd40 [ 173.264438][T11187] vfs_mkdir+0x36d/0x8a0 [ 173.265787][T11187] filename_mkdirat+0x4c4/0x630 [ 173.267308][T11187] __x64_sys_mkdirat+0x89/0xc0 [ 173.268811][T11187] do_syscall_64+0x123/0x7b0 [ 173.270208][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.271930][T11187] [ 173.271930][T11187] -> #1 (func_lock){+.+.}-{4:4}: [ 173.273872][T11187] lock_acquire+0x1d1/0x380 [ 173.275254][T11187] __mutex_lock+0x19f/0x1c10 [ 173.276663][T11187] try_get_usb_function_instance+0x26/0x1f0 [ 173.278386][T11187] usb_get_function_instance+0x16/0x70 [ 173.280031][T11187] function_make+0x18c/0x3f0 [ 173.281428][T11187] configfs_mkdir+0x525/0xd40 [ 173.282846][T11187] vfs_mkdir+0x36d/0x8a0 [ 173.284188][T11187] filename_mkdirat+0x4c4/0x630 [ 173.285654][T11187] __x64_sys_mkdirat+0x89/0xc0 [ 173.287090][T11187] do_syscall_64+0x123/0x7b0 [ 173.288510][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.290239][T11187] [ 173.290239][T11187] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 173.292477][T11187] check_prev_add+0xeb/0xe60 [ 173.293863][T11187] __lock_acquire+0x1528/0x1f40 [ 173.295328][T11187] lock_acquire+0x1d1/0x380 [ 173.296700][T11187] __mutex_lock+0x19f/0x1c10 [ 173.298151][T11187] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.299998][T11187] configfs_write_iter+0x302/0x4e0 [ 173.301399][T11187] vfs_write+0x6af/0x1040 [ 173.302676][T11187] ksys_write+0x12a/0x250 [ 173.304040][T11187] do_syscall_64+0x123/0x7b0 [ 173.305458][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.307040][T11187] [ 173.307040][T11187] other info that might help us debug this: [ 173.307040][T11187] [ 173.309562][T11187] Chain exists of: [ 173.309562][T11187] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#24 --> &p->frag_sem [ 173.309562][T11187] [ 173.313306][T11187] Possible unsafe locking scenario: [ 173.313306][T11187] [ 173.315306][T11187] CPU0 CPU1 [ 173.316727][T11187] ---- ---- [ 173.318161][T11187] rlock(&p->frag_sem); [ 173.319299][T11187] lock(&sb->s_type->i_mutex_key#24); [ 173.321369][T11187] lock(&p->frag_sem); [ 173.323152][T11187] lock(gadget_subsys.su_mutex); [ 173.324508][T11187] [ 173.324508][T11187] *** DEADLOCK *** [ 173.324508][T11187] [ 173.326643][T11187] locks held by syz.4.1430/11187: 4, on CPU#1: [ 173.328336][T11187] #0: ffff8880361e4630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 173.330781][T11187] #1: ffff8880253b0478 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 173.333197][T11187] #2: ffff88804065ea80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 173.335843][T11187] #3: ffff888038db8470 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 173.338458][T11187] [ 173.338458][T11187] stack backtrace: [ 173.340070][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.4.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.342974][T11187] Tainted: [L]=SOFTLOCKUP [ 173.344177][T11187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.346919][T11187] Call Trace: [ 173.347872][T11187] [ 173.348691][T11187] dump_stack_lvl+0x100/0x190 [ 173.349970][T11187] print_circular_bug.cold+0x178/0x1be [ 173.351501][T11187] check_noncircular+0x146/0x160 [ 173.352933][T11187] check_prev_add+0xeb/0xe60 [ 173.354352][T11187] __lock_acquire+0x1528/0x1f40 [ 173.355754][T11187] ? __pfx_stack_trace_save+0x10/0x10 [ 173.357356][T11187] lock_acquire+0x1d1/0x380 [ 173.358738][T11187] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.360556][T11187] ? __pfx___might_resched+0x10/0x10 [ 173.362144][T11187] ? __lock_acquire+0x5c0/0x1f40 [ 173.363514][T11187] __mutex_lock+0x19f/0x1c10 [ 173.364853][T11187] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.366759][T11187] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.368578][T11187] ? __pfx___mutex_lock+0x10/0x10 [ 173.369969][T11187] ? find_held_lock+0x2b/0x80 [ 173.371285][T11187] ? __might_fault+0xc5/0x140 [ 173.372594][T11187] ? __might_fault+0xc5/0x140 [ 173.373910][T11187] ? lock_acquire+0x1d1/0x380 [ 173.375226][T11187] ? configfs_write_iter+0x218/0x4e0 [ 173.376686][T11187] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.378477][T11187] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 173.380203][T11187] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 173.382086][T11187] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 173.383685][T11187] ? configfs_write_iter+0x388/0x4e0 [ 173.385285][T11187] configfs_write_iter+0x302/0x4e0 [ 173.386788][T11187] vfs_write+0x6af/0x1040 [ 173.388032][T11187] ? __pfx_configfs_write_iter+0x10/0x10 [ 173.389589][T11187] ? __pfx_vfs_write+0x10/0x10 [ 173.390917][T11187] ? find_held_lock+0x2b/0x80 [ 173.392231][T11187] ksys_write+0x12a/0x250 [ 173.393421][T11187] ? __pfx_ksys_write+0x10/0x10 [ 173.394764][T11187] do_syscall_64+0x123/0x7b0 [ 173.396076][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.397748][T11187] RIP: 0033:0x7f6d411a94d9 [ 173.399020][T11187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.404379][T11187] RSP: 002b:00007f6d42099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.406692][T11187] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d411a94d9 [ 173.408868][T11187] RDX: 0000000000000023 RSI: 0000200000000640 RDI: 0000000000000006 [ 173.411075][T11187] RBP: 00007f6d4123804e R08: 0000000000000000 R09: 0000000000000000 [ 173.413333][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.415537][T11187] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007fffa4536028 [ 173.417752][T11187] [ 173.597314][ T9809] tipc: Disabling bearer [ 173.631590][ T5829] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.690473][ T5829] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.818832][ T5829] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.887695][ T5829] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.015191][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.017894][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.018868][ T5829] bond0 (unregistering): Released all slaves [ 174.020838][ T5829] bond1 (unregistering): Released all slaves [ 174.022837][ T5829] bond2 (unregistering): Released all slaves [ 174.024897][ T5829] bond3 (unregistering): Released all slaves [ 174.161936][ T5495] 8021q: adding VLAN 0 to HW filter on device eth14 [ 174.252823][ T5495] 8021q: adding VLAN 0 to HW filter on device eth15 [ 174.296667][ T5829] hsr_slave_0: left promiscuous mode [ 174.297158][ T5829] hsr_slave_1: left promiscuous mode [ 174.297440][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.297451][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.297744][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.297753][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.298741][ T5829] veth1_macvtap: left promiscuous mode [ 174.298763][ T5829] veth0_macvtap: left promiscuous mode [ 174.298796][ T5829] veth1_vlan: left promiscuous mode [ 174.298817][ T5829] veth0_vlan: left promiscuous mode [ 174.369530][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 174.371692][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 174.408157][ T5495] 8021q: adding VLAN 0 to HW filter on device eth16 [ 174.536045][ T5495] 8021q: adding VLAN 0 to HW filter on device eth17 [ 174.668045][ T5829] IPVS: stop unused estimator thread 0... [ 174.746040][ T5829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.804318][ T5829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.868708][ T5829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.926262][ T5829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.996933][ T5829] bridge_slave_1: left allmulticast mode [ 174.997069][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.998244][ T5829] bridge_slave_0: left allmulticast mode [ 174.998341][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.112819][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.113818][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.114249][ T5829] bond0 (unregistering): Released all slaves [ 175.117422][ T5829] bond1 (unregistering): Released all slaves [ 175.121023][ T5829] bond2 (unregistering): Released all slaves [ 175.170585][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 175.170599][ T43] audit: type=1400 audit(1794683199.664:1210): avc: denied { write } for pid=11221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.197736][ T43] audit: type=1400 audit(1794683199.694:1211): avc: denied { write } for pid=11224 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.228177][ T5495] 8021q: adding VLAN 0 to HW filter on device eth18 [ 175.292725][ T43] audit: type=1400 audit(1794683199.784:1212): avc: denied { write } for pid=11229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.327687][ T43] audit: type=1400 audit(1794683199.824:1213): avc: denied { write } for pid=11232 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.347499][ T5495] 8021q: adding VLAN 0 to HW filter on device eth19 [ 175.396476][ T43] audit: type=1400 audit(1794683199.894:1214): avc: denied { write } for pid=11235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.423264][ T43] audit: type=1400 audit(1794683199.914:1215): avc: denied { write } for pid=11238 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.442970][ T5495] 8021q: adding VLAN 0 to HW filter on device eth20 [ 175.485292][ T43] audit: type=1400 audit(1794683199.984:1216): avc: denied { write } for pid=11241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.525255][ T43] audit: type=1400 audit(1794683200.014:1217): avc: denied { write } for pid=11244 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.548144][ T5495] 8021q: adding VLAN 0 to HW filter on device eth21 [ 175.583639][ T43] audit: type=1400 audit(1794683200.074:1218): avc: denied { write } for pid=11247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.633215][ T43] audit: type=1400 audit(1794683200.124:1219): avc: denied { write } for pid=11250 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.045254][ T14] net_ratelimit: 91 callbacks suppressed [ 176.045276][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.045294][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.155376][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.155402][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.275237][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.275257][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.385393][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.385422][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.505261][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.505289][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.736775][ T5829] tipc: Left network mode [ 176.755576][ T5829] IPVS: stopping backup sync thread 9274 ... [ 176.920932][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.135269][ T5829] net_ratelimit: 84 callbacks suppressed [ 181.135291][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.135310][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.245329][ T5829] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.245358][ T5829] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.355270][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.355298][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.465339][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.465370][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.575338][ T5872] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.575369][ T5872] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.658569][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 181.658583][ T43] audit: type=1400 audit(1794683206.154:1230): avc: denied { write } for pid=11296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.687764][ T43] audit: type=1400 audit(1794683206.184:1231): avc: denied { write } for pid=11299 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.254038][ T43] audit: type=1400 audit(1794683206.744:1232): avc: denied { write } for pid=11306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.288467][ T43] audit: type=1400 audit(1794683206.784:1233): avc: denied { write } for pid=11309 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.348562][ T43] audit: type=1400 audit(1794683206.844:1234): avc: denied { write } for pid=11312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.383092][ T43] audit: type=1400 audit(1794683206.874:1235): avc: denied { write } for pid=11315 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.932636][ T43] audit: type=1400 audit(1794683207.424:1236): avc: denied { write } for pid=11318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.967415][ T43] audit: type=1400 audit(1794683207.464:1237): avc: denied { write } for pid=11321 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1