last executing test programs: 4m40.796000046s ago: executing program 32 (id=626): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1d6b 0001 0', 0xb) write(r1, &(0x7f0000000200)='1d6b 0002 0\x00', 0xc) write(r1, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc) close(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='2-0:1.0\x00', 0x7) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x41201003, @loopback, 0xb}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x9, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0xe96, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x7, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0xfffffffd], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f8d, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) readv(r5, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f0000000f80)=""/249, 0xf9}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000800)=""/121, 0x79}, {&(0x7f00000008c0)=""/2, 0x2}, {&(0x7f0000000900)=""/236, 0xec}], 0x9) ioctl(r4, 0xc4c85512, &(0x7f0000000200)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x1b, 0xd, 0x1, 0x0, "a615b4f781f2f1e3a6f6041d5e749ca1d984d58227e3b2"}, @NFTA_SET_USERDATA={0x4f, 0xd, 0x1, 0x0, "783816d1186f15c51af5e5f4c52e80e662965813e6ceb35022740951e9d6d64ad54834b0cb987dea2abb5aaafc1409dae9d4bd01cee81155824840b32836e29b6d2392a21a94ed67d05da5"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004020}, 0x0) 4m31.849881091s ago: executing program 33 (id=698): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) setns(0xc9, 0x0) socket(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)=@urb_type_bulk={0x3, {0x6}, 0x8, 0x1, &(0x7f0000000140)="45056eaf3deb9d085e88e78b291ed1a2303140442ce57e351a642dfa0114fda01d77597cfe9acab8c7ee1a128171eabc0776464cf2ef930c437f03b1339d72f9e2d42b60025567953bad", 0x4a, 0x9, 0x6, 0x80000000, 0x9, 0x2, &(0x7f0000000200)="32af49fe01db58efad251340492508a85f795bf1de3dacc6f5c51f951e7eb86629cf40619401e65c62e6ef1c32b85d65d291fc8008"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3110000019"]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200000, 0x15b, 0x1}, 0x18) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000100)) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000001c0)=""/33) 4m19.172009379s ago: executing program 0 (id=850): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 4m19.002647402s ago: executing program 0 (id=852): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c000180060006008847000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 4m18.881696927s ago: executing program 0 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8eab1c226c676cfb}, 0x8000) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}], 0x18}, 0x3400c8c4) 4m18.739222916s ago: executing program 0 (id=856): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x7, 0x1b3f, 0x3, 0x40000000000001a, 0x3, 0x2, 0xb, 0x100fff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7, 0x9, 0x38, 0x8}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x100010, r2, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbb"], 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x34) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000005900), r6) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005b80)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x11100, 0x0, 0x0) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffa, 0x20000) setrlimit(0x7, &(0x7f0000000000)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x12, 0x7, 0x2, {{0x5, '&}#$$'}, 0x1e39}}, 0x12) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') read(r10, &(0x7f0000001a00)=""/177, 0xb1) 4m18.219038659s ago: executing program 0 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (fail_nth: 1) 4m17.615822244s ago: executing program 0 (id=867): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000001) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xea6f, 0x2) socketpair(0x28, 0x6, 0x10, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000500)) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f00000000c0)='fd\x00') 4m17.153607744s ago: executing program 34 (id=867): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000001) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xea6f, 0x2) socketpair(0x28, 0x6, 0x10, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000500)) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f00000000c0)='fd\x00') 2m22.900007987s ago: executing program 1 (id=1801): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c0a0f078988767bc8f23415e8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x4080) 2m22.835371416s ago: executing program 1 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000a20378a9b24fbfcf93ce0abca2000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x14014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0x3a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000fa729d6736d545a91691e71839eb0abfb1c0469cea7e4946dae02c1c25cc26b1073b7233b456cc63ae2618a0ad4c0e3bd24eb86e0ad2f18e86a224874377e80ef3d211c27fefc9b01cc35e9cb8da2a44fdf79ddb5fabb1572034000066d3bff56837899afc5f8a352522e0b501c2426620324ed6587f320c3c2cf11ea32dfc57faee49073ea64d37a2ce82ab56f6dfed5efef802d635d63cad69", @ANYRES16=r8, @ANYBLOB="04002cbd7000fcdbdf25090000004c00018006000100020000000800080009000000060001000a0000000800050004000000060004004e2300000600020000000000090006006e6f6e65000000000c0007000100000004000000080004000000000008000500cb0c000008000400050000000800060001010000"], 0x80}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, r9) keyctl$read(0xb, r10, &(0x7f0000001580)=""/4108, 0x100c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="89e7ee2c67062f080700000088ca", 0xe}], 0x1) 2m20.650478927s ago: executing program 1 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c0a0f078988767bc8f23415e8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x4080) 2m20.3160337s ago: executing program 1 (id=1815): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x80000000000c9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 2m19.417571069s ago: executing program 1 (id=1819): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x3, 0x0, 0x7, '\x00', 0x80000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) 2m19.283840765s ago: executing program 1 (id=1820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109, 0x1f00}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2m4.251149434s ago: executing program 35 (id=1820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109, 0x1f00}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 1m12.07752289s ago: executing program 4 (id=2719): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = socket$kcm(0x10, 0x0, 0x4) close(r1) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) connect(r2, &(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x30, 0xc, 0x3, 0xfffff030}, {0x6, 0x0, 0x2, 0x50ab}]}) write$nbd(r2, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="a6dcf01dbf0589ab6bde27b383937caf74aa2df6049c38635a30dcba633844df626a669fb1591f063e2024663f26687a16dc378b776e43e881b885c68565ee4bb347071f96a46907b17c57aac5295fa021c937164369fd3e3e7ef21e42910bc570714ea584038b02de8aab0885f5cad55456b786fc15f51751bd808a1cc3970da03c83fc640d35009a48b631370897c69127e13cfcd6e530b0b9ce18a562678b1f6739d8db7664a45e443d0461999be745d00c51badbc91ca87f87a07ae8d8e092984c7cb269760437805837d0120683ba27c95a373869b8a159e878f48418390f62aeb75f538b6311802b05f694c74824d883", 0xf3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b34, 0x3bf) unshare(0x26020600) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x0, 0x2, 0x5}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x1d, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r5], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)={r7, r9}) sendto$inet(r3, &(0x7f00000001c0)="e10cc6769d47606536eb028e63dcf80004413d56dd10be", 0x17, 0x4005, 0x0, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) 1m11.934548208s ago: executing program 4 (id=2725): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x80000000000c9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 1m11.050281989s ago: executing program 4 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x530d19e49dbee1a2, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05ad380c"], 0x8) 1m11.049802642s ago: executing program 4 (id=2744): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0x30000000}) 1m10.929907707s ago: executing program 4 (id=2746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000f00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d628739944c056f5616c7bfae9e4f631503eeb57da", 0x3a, 0x24009076, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0xc8, 0x6, @local}, 0x14) 1m10.720842915s ago: executing program 4 (id=2750): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x80000000000c9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 1m10.608822426s ago: executing program 36 (id=2750): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x80000000000c9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 38.573657831s ago: executing program 8 (id=3153): socket$igmp(0x2, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 38.483079461s ago: executing program 8 (id=3156): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000202010300000000000000000300000499addbdeb48dc85d6f5249ee"], 0x14}, 0x1, 0x0, 0x0, 0x2000010}, 0x4080) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) sendmsg$sock(r4, 0x0, 0x8001) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 38.252500241s ago: executing program 8 (id=3158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='cramfs\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './sys/kernel/mm/ksm/pages_to_scan\x00'}) quotactl$Q_GETINFO(0x0, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r9, &(0x7f0000000100)) write(r0, &(0x7f0000000600)='100', 0x3) 38.1213361s ago: executing program 8 (id=3159): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f33c423255e6008c8400f01f86564660f3815f164670f00170f3566b84e008ec066b8a9008ed066440feefbb805000000b9f1a1415c0f01c1", 0x39}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast1, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 37.931747827s ago: executing program 8 (id=3162): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x50, {0x2, 0x4e21, @remote}, 'veth0_to_bond\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 37.673156031s ago: executing program 8 (id=3168): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r4 = accept4$bt_l2cap(r1, &(0x7f0000000680), &(0x7f00000006c0)=0xe, 0x80000) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_SETWSUBD(r0, 0x6411) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000640)=0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x413, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) 37.585398917s ago: executing program 37 (id=3168): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r4 = accept4$bt_l2cap(r1, &(0x7f0000000680), &(0x7f00000006c0)=0xe, 0x80000) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_SETWSUBD(r0, 0x6411) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000640)=0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x413, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) 32.87345336s ago: executing program 6 (id=3212): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)='4', 0x1}], 0x1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) 32.781760633s ago: executing program 6 (id=3216): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x4000c89f, 0xc000, 0x0, 0x3c1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffff9) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.483462184s ago: executing program 6 (id=3219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB="fb91"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x4024) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) 32.421688223s ago: executing program 6 (id=3220): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x80000001, @loopback, 0x1d5f6394}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a2a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x62, 0x2) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000580)='\"', 0x1, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r8, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xee}}, 0x14) 32.354383646s ago: executing program 6 (id=3221): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0xe}, 0xfff}, @in6={0xa, 0x4e24, 0x7fffffff, @remote, 0x6}, @in6={0xa, 0x4e22, 0x6, @empty, 0x6}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010100}], 0x84) 31.693017777s ago: executing program 6 (id=3232): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) (fail_nth: 12) 31.636041891s ago: executing program 38 (id=3232): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) (fail_nth: 12) 31.419333686s ago: executing program 9 (id=3240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x20001) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000080)=""/99) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c080045150020006700000002907864010100e000000111c29078e800000122e0e636"], 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000140)={0x48}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 31.323738481s ago: executing program 9 (id=3242): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x336, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x60, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x50, 0x0, r6, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r14, &(0x7f0000000580)={0x18, 0x0, 0x0, {0xfff}}, 0x18) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {0x0, r2, 0x20a}}, 0xffffffffffffffa7) 30.411106333s ago: executing program 9 (id=3249): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000083b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000301"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c08060304600506040003ffffffffffffab7309fdaaaaaaaaaa41785321dbf8bcf2b91b918950f3c56515a5097d6d1989f01cdedcf187f63663ef00aaba83dcef12496589d22e19340049ae4b7b3f648b6e9a6f8b5081a8503ba29e8a734906c3f0ede298a17839de552492ca6f4dc09170ae5b2fe8fa363122144dd4713fabcec4"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) 30.334113823s ago: executing program 9 (id=3250): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x80000001, @loopback, 0x1d5f6394}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e190987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b68090890e0878f0e1ac6e7049b3146959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a2a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x62, 0x2) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000580)='\"', 0x1, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r8, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xee}}, 0x14) 30.261979615s ago: executing program 9 (id=3252): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x3479, &(0x7f0000000400)={0x0, 0x8800595d, 0x0, 0x20002, 0x1002053, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r6, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x4048091) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 29.79245463s ago: executing program 9 (id=3253): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x53, 0x0, 0x7, 0xff, 0x5, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0x3, 0x7, 0xc4, 0x3, 0x1, 0x48, 0x3, 0x2, 0x3}, {0x6000, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0xb, 0x3, 0x8, 0xff, 0x4, 0xd}, {0x2000, 0xdddd0000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x50000, 0x0, 0x34, 0x5, 0x2, 0xd, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82, 0x0, 0xfd}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x2}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xa900, 0x0, [0x80000002, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.716573595s ago: executing program 39 (id=3253): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x53, 0x0, 0x7, 0xff, 0x5, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0x3, 0x7, 0xc4, 0x3, 0x1, 0x48, 0x3, 0x2, 0x3}, {0x6000, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0xb, 0x3, 0x8, 0xff, 0x4, 0xd}, {0x2000, 0xdddd0000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x50000, 0x0, 0x34, 0x5, 0x2, 0xd, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82, 0x0, 0xfd}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x2}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xa900, 0x0, [0x80000002, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.02372994s ago: executing program 3 (id=3462): socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x40090) 9.912309778s ago: executing program 3 (id=3463): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) unlink(&(0x7f0000000180)='./file1\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r2, 0x0, &(0x7f0000000280)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 9.91218832s ago: executing program 3 (id=3464): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x40087101, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60f9000e00200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80cb00000000000bdacb70b544ea370455c777810004ac5a08a9eb"], 0x0) 9.834100046s ago: executing program 3 (id=3465): r0 = memfd_secret(0x0) ftruncate(r0, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x2, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.946597521s ago: executing program 3 (id=3478): r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x80, 0x1, 0x2ab}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf3f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x5c, 0x101) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xc, 0xffff}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50d0}, 0x40) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="43ee25") process_vm_readv(r8, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0) ptrace(0x2c08fa9c35254c09, r8) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 8.743904475s ago: executing program 3 (id=3481): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00", 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002a40)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xf0000005}) 3.052170772s ago: executing program 7 (id=3520): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xd, 0x1cb600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x400, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb1a0001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57fd]}}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x3) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x48) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.974321898s ago: executing program 7 (id=3521): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x800000000000001}]}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 2.783463714s ago: executing program 7 (id=3522): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRES32, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r5 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.253891994s ago: executing program 5 (id=3525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0xfffffffe}}, 0x2e) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB], 0x24, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x808) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002000)) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x6, 0xffffffffffffffff, 0x9, 0x70, 0xf, 0x80000006, 0xfffffffffffffffd}, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_emit_vhci(&(0x7f00000025c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.144300869s ago: executing program 2 (id=3526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b840e080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000340)={{r0}, "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"}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.214093552s ago: executing program 2 (id=3527): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x80) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1) write(r7, &(0x7f0000000400)='1', 0x1) write(r7, &(0x7f0000000500)='0', 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x20991}, 0xc000) socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000fc0)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0x7d, 0xffffffffffffffff]}, &(0x7f0000000000)=0x78) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r8, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r9, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) 1.054400151s ago: executing program 2 (id=3528): r0 = getpid() (async) r1 = gettid() (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20028800) (async) prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x602, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x4d}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00') (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000300), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) 284.196791ms ago: executing program 5 (id=3529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) r1 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40880, 0x122) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x4102, r0}, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 283.831538ms ago: executing program 7 (id=3530): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000006c0)="3b000300010006", 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000280)="b962554b020de4b25cc54c5c4d817f9fcc7b37e62c439af8f5824419bbb2ad12d15fe988cf4e03b16c44230713f11c89af2002a9abc53a4ca41ba1b2c9ec9eda218f52bf08231a0f6763c430e3a334ba397db66982087349aa8ab8b4b048f4ef1b1a1d7c4afe48cfb4bafcf906f22e523883934ff40c7c20e0e29ee78327cdc9a307a1ecec90ec82379e4de7b28e93babe2373dd584fff368fc4157bb67504808a0537f41ac9a72c17defe68e19477ac", &(0x7f0000000340)}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c21018006000100", @ANYRES32=r6, @ANYBLOB="0c00050002"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x400400c) r9 = accept$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000580)=0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r5, r4, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r6, r9]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x50}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r10 = dup(r3) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r11, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet6(r10, &(0x7f00000000c0)="e9189c20d3d9df48f7277171d7c4c247b273874aadedc16021924911503b8e821a17f840c9852ed621dfbfd4b4c6b2fb7bd2fd10ff1c103516b430c5ae57f2fbe2cccc5604e9bbbdc639323c328133d52bd5174bc140725b2ab33d5cf2f3ea57ba0620afb781d8b012918a74a4313b86fe52d185c696529638f76a40cbdfe15305f3e1904a159baa4dbe8e1f7f5343c625a92928c26b14cee79c02953e9053ed31eb4e52502c32b7ff345d7688df782a9cd6e34c0bfaaa2e22be2e91dc30408f3a6eaf09359944b0678208d950b61d9c1e01529ab48ccee958ba4ee0973ed9d8780fb44afe02bb1d79b03bb6771561c54d871bc065a161", 0xf7, 0x4008044, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r12, &(0x7f00000004c0)=""/57, 0x39) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x2, 0x1, 0x0, @sint={0x8001}}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) 283.627336ms ago: executing program 2 (id=3531): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='((\'v', 0x4) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x15) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x35) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x9, [0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x27, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000001540)=0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) lseek(r4, 0x3, 0x1) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000080)={0x20002004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, &(0x7f0000000040)={0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r8) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fadbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20054044) 234.258626ms ago: executing program 5 (id=3532): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) close(0x3) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000a80)=""/175, 0xb2}, {&(0x7f0000001f00)=""/4131, 0x1023}, {&(0x7f0000000c00)=""/205, 0xc3}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000600)=""/186, 0xfffffea9}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f0000000200)=""/19, 0x13}], 0x9}, 0x10040) (async) recvmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) 134.167039ms ago: executing program 5 (id=3533): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x600000c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008002e"], 0x50}}, 0x0) socket(0xf, 0x5, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = socket(0x18, 0x5, 0xfffffff5) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ed84, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x7b, @mcast1, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="0e3162e2891bab219a025fabf47824bd2f3d11214545e0a0fe0f671ddd58ce4d7fca909d39e7740cfe6d24664c54eba8181c7849561976f8931e3edf644207ad727af6e4d5788739ee92d7250e4bba3af35cffea112c3abea927682d96f103c5abeac13da8fb49f3d8d562853db822688d1748a9a121ec16c24a59d0a5dd3f6aaaa339d9117d25c7730eb18a67b66ffd44a519607dd8debb7bae900aea96b8a350b8b883d44326189f1fe91a2b5ed22c872936371895a55c34cf3882a43ae051ab1f62d3", 0xc4}, {&(0x7f00000003c0)="499e14ba5583160e446e1395f14418202c41de37ffa3bb691e63c5891d69", 0x1e}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="70000000000000002900000037000000730b00000000000004010907280000000108b50200000000000000000008000000000000000002000000000000090000000000000007200000000106090400100000000000000004000000000000000d0c00000000000000010000010000010038000000000000002900000037000000ff03000000000000000100c20400000001c910200100000000000000000000000000010000000000140000000000000029000000430000008e550000000000002bf1febe2f85f9f3cf243ab3f54ac6a9b3ae"], 0xc0}}], 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) 133.031734ms ago: executing program 2 (id=3534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 90.668102ms ago: executing program 7 (id=3535): socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.638409ms ago: executing program 5 (id=3536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250900020008000300", @ANYRES32=r3, @ANYBLOB="05000700040000000500080000000000"], 0x2c}}, 0x0) 2.037692ms ago: executing program 7 (id=3537): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='1', 0x1) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x3, 0x100, 0x7, {0xeffffff4, 0xffffffff, 0x7, 0x6}}) 285.5µs ago: executing program 2 (id=3538): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRES32, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r5 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 5 (id=3539): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xef9999a8e46d7cd7, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x4030, &(0x7f0000000140)='}^:\x00') kernel console output (not intermixed with test programs): escriptor read/8, error -71 [ 475.520497][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.521904][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.522754][ T5799] bond0 (unregistering): Released all slaves [ 475.526140][ T5826] netdevsim netdevsim9 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.526667][ T5826] netdevsim netdevsim9 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.581493][ T5826] netdevsim netdevsim9 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.736345][ T25] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 475.766351][ T25] usb 12-1: device descriptor read/8, error -71 [ 475.766520][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.766591][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.766659][T17061] bridge_slave_0: entered allmulticast mode [ 475.767429][T17061] bridge_slave_0: entered promiscuous mode [ 475.769745][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.769812][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.769893][T17061] bridge_slave_1: entered allmulticast mode [ 475.770657][T17061] bridge_slave_1: entered promiscuous mode [ 475.823453][T17061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.826050][T17061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.847147][ T5799] hsr_slave_0: left promiscuous mode [ 475.847537][ T5799] hsr_slave_1: left promiscuous mode [ 475.847951][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.847963][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.848432][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.848442][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.852400][ T5799] veth1_vlan: left promiscuous mode [ 475.852437][ T5799] veth0_vlan: left promiscuous mode [ 475.876234][ T25] usb usb12-port1: unable to enumerate USB device [ 476.015711][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 476.023468][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 476.081337][T17061] team0: Port device team_slave_0 added [ 476.086613][T17061] team0: Port device team_slave_1 added [ 476.112692][T17061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.112704][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.112717][T17061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.118524][T17061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.118539][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.118560][T17061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.212230][T17061] hsr_slave_0: entered promiscuous mode [ 476.218540][T17061] hsr_slave_1: entered promiscuous mode [ 476.218838][T17061] debugfs: 'hsr0' already exists in 'hsr' [ 476.218849][T17061] Cannot create hsr debugfs directory [ 476.463883][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 476.562453][T17131] FAULT_INJECTION: forcing a failure. [ 476.562453][T17131] name fail_page_alloc, interval 1, probability 0, space 0, times 2 [ 476.562475][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.5.3261 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.562490][T17131] Tainted: [L]=SOFTLOCKUP [ 476.562500][T17131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.562506][T17131] Call Trace: [ 476.562511][T17131] [ 476.562516][T17131] dump_stack_lvl+0x100/0x190 [ 476.562535][T17131] should_fail_ex.cold+0x5/0xa [ 476.562549][T17131] ? prepare_alloc_pages+0x16d/0x5b0 [ 476.562564][T17131] should_fail_alloc_page+0xeb/0x140 [ 476.562594][T17131] prepare_alloc_pages+0x1f0/0x5b0 [ 476.562611][T17131] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 476.562632][T17131] ? lock_acquire+0x1d1/0x380 [ 476.562647][T17131] ? __lock_acquire+0x5c0/0x1f40 [ 476.562660][T17131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 476.562684][T17131] ? __lock_acquire+0x5c0/0x1f40 [ 476.562696][T17131] ? __lock_acquire+0x5c0/0x1f40 [ 476.562707][T17131] ? __css_rstat_updated+0x1ce/0x590 [ 476.562724][T17131] ? lock_acquire+0x1d1/0x380 [ 476.562735][T17131] ? page_table_check_set+0x11d/0x580 [ 476.562751][T17131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.562765][T17131] ? policy_nodemask+0xed/0x4f0 [ 476.562781][T17131] alloc_pages_mpol+0x201/0x550 [ 476.562796][T17131] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 476.562811][T17131] ? __page_table_check_ptes_set+0x1d5/0x530 [ 476.562829][T17131] folio_alloc_mpol_noprof+0x36/0x260 [ 476.562847][T17131] vma_alloc_folio_noprof+0xed/0x1d0 [ 476.562864][T17131] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 476.562880][T17131] ? rcu_read_unlock+0x2d/0xb0 [ 476.562900][T17131] do_anonymous_page+0xac9/0x2050 [ 476.562920][T17131] ? __pfx_do_anonymous_page+0x10/0x10 [ 476.562935][T17131] ? rcu_read_unlock+0x2d/0xb0 [ 476.562950][T17131] ? rcu_read_unlock+0x2d/0xb0 [ 476.562966][T17131] ? __pte_offset_map+0x179/0x310 [ 476.562980][T17131] __handle_mm_fault+0x1ff3/0x2f60 [ 476.562999][T17131] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.563015][T17131] ? pte_offset_map_lock+0x174/0x320 [ 476.563027][T17131] ? find_held_lock+0x2b/0x80 [ 476.563043][T17131] ? find_held_lock+0x2b/0x80 [ 476.563057][T17131] ? follow_page_pte+0x536/0x1050 [ 476.563078][T17131] handle_mm_fault+0x363/0xa20 [ 476.563097][T17131] __get_user_pages+0x8ae/0x2c30 [ 476.563113][T17131] ? __pfx_mt_find+0x10/0x10 [ 476.563130][T17131] ? __pfx___get_user_pages+0x10/0x10 [ 476.563148][T17131] populate_vma_page_range+0x267/0x3f0 [ 476.563163][T17131] ? __pfx_populate_vma_page_range+0x10/0x10 [ 476.563176][T17131] ? __pfx_find_vma_intersection+0x10/0x10 [ 476.563193][T17131] __mm_populate+0x107/0x3a0 [ 476.563207][T17131] ? __pfx___mm_populate+0x10/0x10 [ 476.563222][T17131] ? up_write+0x2dc/0x5b0 [ 476.563237][T17131] do_mlock+0x3f0/0x800 [ 476.563255][T17131] ? __pfx_do_mlock+0x10/0x10 [ 476.563273][T17131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.563288][T17131] ? __fget_files+0x21f/0x3d0 [ 476.563306][T17131] __x64_sys_mlock+0xce/0x120 [ 476.563323][T17131] ? __pfx___x64_sys_mlock+0x10/0x10 [ 476.563345][T17131] do_syscall_64+0x123/0x790 [ 476.563361][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.563373][T17131] RIP: 0033:0x7f115c39e159 [ 476.563382][T17131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.563393][T17131] RSP: 002b:00007f115d2fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 476.563404][T17131] RAX: ffffffffffffffda RBX: 00007f115c626090 RCX: 00007f115c39e159 [ 476.563412][T17131] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 476.563419][T17131] RBP: 00007f115d2fc090 R08: 0000000000000000 R09: 0000000000000000 [ 476.563425][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.563432][T17131] R13: 00007f115c626128 R14: 00007f115c626090 R15: 00007ffdd405d7c8 [ 476.563446][T17131] [ 476.717269][T17061] netdevsim netdevsim2 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.776157][T16263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 476.778180][T16263] (NULL device *): queue 0 connect admin queue failed (-111). [ 476.778197][T16263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 476.778207][T16263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 476.905115][T17061] netdevsim netdevsim2 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.905973][ T43] kauditd_printk_skb: 7894 callbacks suppressed [ 476.905983][ T43] audit: type=1326 audit(1789004511.145:60167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906035][ T43] audit: type=1326 audit(1789004511.145:60169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906128][ T43] audit: type=1326 audit(1789004511.155:60171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906241][ T43] audit: type=1326 audit(1789004511.155:60172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906326][ T43] audit: type=1326 audit(1789004511.155:60173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906519][ T43] audit: type=1326 audit(1789004511.155:60174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906605][ T43] audit: type=1326 audit(1789004511.155:60175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906711][ T43] audit: type=1326 audit(1789004511.155:60176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906796][ T43] audit: type=1326 audit(1789004511.155:60177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.906881][ T43] audit: type=1326 audit(1789004511.155:60178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.3.3259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3978b9e159 code=0x50000 [ 476.941087][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 477.070394][T17061] netdevsim netdevsim2 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.096110][ T67] Bluetooth: hci1: command tx timeout [ 477.143006][T17061] netdevsim netdevsim2 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.255874][ T67] Bluetooth: hci0: command tx timeout [ 477.306357][ T8267] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 477.333647][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 477.344523][T17148] loop6: detected capacity change from 0 to 2640 [ 477.359141][T10001] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.359390][T10001] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.359699][T10001] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.359920][T10001] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.360161][T10001] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.456277][ T8267] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 477.457076][ T8267] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.457090][ T8267] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.457102][ T8267] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.458698][ T8267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 477.458710][ T8267] usb 10-1: Product: syz [ 477.458718][ T8267] usb 10-1: Manufacturer: syz [ 477.458725][ T8267] usb 10-1: SerialNumber: syz [ 477.565062][T17061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.584057][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.584453][T17061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.592241][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.593200][T17061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.605051][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.605573][T17061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.614452][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.682850][ T8267] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 477.748198][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.752383][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 477.765143][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.772571][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.772657][T16266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.794966][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.795053][T16266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.943330][ T8267] usb 10-1: USB disconnect, device number 32 [ 477.946458][ T8267] usblp0: removed [ 478.264190][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.312512][T17061] veth0_vlan: entered promiscuous mode [ 478.325484][T17061] veth1_vlan: entered promiscuous mode [ 478.361886][T17061] veth0_macvtap: entered promiscuous mode [ 478.376215][T17061] veth1_macvtap: entered promiscuous mode [ 478.391567][T17061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.396375][T17061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.437328][ T35] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 478.456437][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.456639][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.456871][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.521891][T16263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.521911][T16263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.538182][ T9375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.568537][T16263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.568561][T16263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.596333][ T35] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 478.597122][ T35] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 478.597135][ T35] usb 12-1: config 1 has no interface number 0 [ 478.597154][ T35] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 478.597166][ T35] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8 [ 478.599579][ T35] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.599592][ T35] usb 12-1: Product: syz [ 478.599600][ T35] usb 12-1: Manufacturer: syz [ 478.599607][ T35] usb 12-1: SerialNumber: syz [ 478.603567][T17191] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 478.603619][T17191] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 478.604585][ T35] usb 12-1: Error in usbnet_get_endpoints (-22) [ 478.835363][ T25] usb 12-1: USB disconnect, device number 30 [ 478.856139][T16266] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 478.856770][T16266] (NULL device *): queue 0 connect admin queue failed (-111). [ 478.856784][T16266] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 478.856794][T16266] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 479.179746][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 479.186387][ T67] Bluetooth: hci1: command tx timeout [ 479.337796][ T67] Bluetooth: hci0: command tx timeout [ 479.685607][T17271] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 479.986703][T17302] md: could not open device unknown-block(1,0). [ 480.069084][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.069331][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.140222][T17317] md: could not open device unknown-block(1,0). [ 480.159934][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.171803][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.236399][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3295'. [ 480.261175][T17332] devpts: Bad value for 'max' [ 480.308750][T17335] base or size exceeds the MTRR width [ 480.377514][ T9375] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.377545][ T9375] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.377564][ T9375] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.377584][ T9375] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.388745][T17334] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3298'. [ 480.388760][T17334] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3298'. [ 480.587288][T17356] kvm: user requested TSC rate below hardware speed [ 480.589703][T17356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 480.605060][T17360] FAULT_INJECTION: forcing a failure. [ 480.605060][T17360] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 480.605082][T17360] CPU: 1 UID: 0 PID: 17360 Comm: syz.2.3304 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.605097][T17360] Tainted: [L]=SOFTLOCKUP [ 480.605101][T17360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.605107][T17360] Call Trace: [ 480.605112][T17360] [ 480.605116][T17360] dump_stack_lvl+0x100/0x190 [ 480.605146][T17360] should_fail_ex.cold+0x5/0xa [ 480.605160][T17360] ? prepare_alloc_pages+0x16d/0x5b0 [ 480.605178][T17360] should_fail_alloc_page+0xeb/0x140 [ 480.605193][T17360] prepare_alloc_pages+0x1f0/0x5b0 [ 480.605210][T17360] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 480.605229][T17360] ? prepare_alloc_pages+0x191/0x5b0 [ 480.605245][T17360] ? rcu_is_watching+0x13/0xc0 [ 480.605262][T17360] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 480.605283][T17360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 480.605302][T17360] ? find_held_lock+0x2b/0x80 [ 480.605317][T17360] ? is_bpf_text_address+0x8a/0x1a0 [ 480.605332][T17360] ? is_bpf_text_address+0x8a/0x1a0 [ 480.605346][T17360] ? bpf_ksym_find+0x128/0x1c0 [ 480.605362][T17360] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.605386][T17360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 480.605403][T17360] ? is_bpf_text_address+0x94/0x1a0 [ 480.605419][T17360] ? __kernel_text_address+0xd/0x30 [ 480.605445][T17360] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 480.605463][T17360] ? unwind_get_return_address+0x59/0xa0 [ 480.605481][T17360] ? policy_nodemask+0xed/0x4f0 [ 480.605499][T17360] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 480.605524][T17360] __kasan_populate_vmalloc+0xf0/0x210 [ 480.605541][T17360] alloc_vmap_area+0x95d/0x2bb0 [ 480.605563][T17360] ? kasan_save_track+0x14/0x30 [ 480.605575][T17360] ? __kasan_kmalloc+0xaa/0xb0 [ 480.605588][T17360] ? __pfx_alloc_vmap_area+0x10/0x10 [ 480.605603][T17360] ? __get_vm_area_node+0x124/0x350 [ 480.605620][T17360] __get_vm_area_node+0x1ed/0x350 [ 480.605637][T17360] __vmalloc_node_range_noprof+0x268/0x1420 [ 480.605653][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.605670][T17360] ? do_raw_spin_lock+0x128/0x260 [ 480.605686][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.605700][T17360] ? lock_acquire+0x1d1/0x380 [ 480.605712][T17360] ? find_held_lock+0x2b/0x80 [ 480.605728][T17360] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.605742][T17360] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 480.605776][T17360] ? avc_has_perm_noaudit+0x145/0x3b0 [ 480.605795][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.605811][T17360] __vmalloc_node_noprof+0xad/0xf0 [ 480.605826][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.605870][T17360] __vmalloc_noprof+0xa3/0x120 [ 480.605893][T17360] ? __pfx___vmalloc_noprof+0x10/0x10 [ 480.605911][T17360] ? rcu_is_watching+0x13/0xc0 [ 480.605926][T17360] ? cap_capable+0x107/0x430 [ 480.605943][T17360] bpf_prog_alloc_no_stats+0x59/0x690 [ 480.605957][T17360] ? security_capable+0x80/0x260 [ 480.605973][T17360] bpf_prog_alloc+0x3b/0x200 [ 480.605986][T17360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.606000][T17360] bpf_prog_load+0x49e/0x2a80 [ 480.606017][T17360] ? __pfx_bpf_prog_load+0x10/0x10 [ 480.606044][T17360] __sys_bpf+0x1f46/0x4a30 [ 480.606058][T17360] ? __pfx___sys_bpf+0x10/0x10 [ 480.606068][T17360] ? find_held_lock+0x2b/0x80 [ 480.606083][T17360] ? futex_wake+0x4ea/0x5e0 [ 480.606109][T17360] ? rcu_read_lock_any_held+0x6a/0x90 [ 480.606125][T17360] ? find_held_lock+0x2b/0x80 [ 480.606140][T17360] ? ksys_write+0x190/0x250 [ 480.606151][T17360] ? ksys_write+0x190/0x250 [ 480.606170][T17360] ? __x64_sys_futex+0x34f/0x4d0 [ 480.606183][T17360] ? __x64_sys_futex+0x358/0x4d0 [ 480.606200][T17360] ? xfd_validate_state+0x129/0x190 [ 480.606213][T17360] ? __x64_sys_bpf+0xce/0x140 [ 480.606224][T17360] __x64_sys_bpf+0xce/0x140 [ 480.606235][T17360] ? do_syscall_64+0xae/0x790 [ 480.606258][T17360] do_syscall_64+0x123/0x790 [ 480.606274][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.606287][T17360] RIP: 0033:0x7fc35f79e159 [ 480.606297][T17360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.606308][T17360] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.606320][T17360] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 480.606327][T17360] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 480.606334][T17360] RBP: 00007fc35f83503b R08: 0000000000000000 R09: 0000000000000000 [ 480.606340][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.606347][T17360] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 480.606361][T17360] [ 480.607550][T17360] syz.2.3304: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.607595][T17360] CPU: 1 UID: 0 PID: 17360 Comm: syz.2.3304 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.607612][T17360] Tainted: [L]=SOFTLOCKUP [ 480.607617][T17360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.607624][T17360] Call Trace: [ 480.607628][T17360] [ 480.607632][T17360] dump_stack_lvl+0x100/0x190 [ 480.607651][T17360] warn_alloc.cold+0x9e/0xb2 [ 480.607664][T17360] ? __pfx_warn_alloc+0x10/0x10 [ 480.607681][T17360] ? lockdep_hardirqs_on+0x7d/0x110 [ 480.607698][T17360] ? __get_vm_area_node+0x2f0/0x350 [ 480.607715][T17360] ? __get_vm_area_node+0x22b/0x350 [ 480.607731][T17360] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 480.607750][T17360] ? do_raw_spin_lock+0x128/0x260 [ 480.607766][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.607781][T17360] ? lock_acquire+0x1d1/0x380 [ 480.607793][T17360] ? find_held_lock+0x2b/0x80 [ 480.607809][T17360] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.607824][T17360] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 480.607841][T17360] ? avc_has_perm_noaudit+0x145/0x3b0 [ 480.607856][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.607869][T17360] __vmalloc_node_noprof+0xad/0xf0 [ 480.607883][T17360] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 480.607899][T17360] __vmalloc_noprof+0xa3/0x120 [ 480.607912][T17360] ? __pfx___vmalloc_noprof+0x10/0x10 [ 480.607927][T17360] ? rcu_is_watching+0x13/0xc0 [ 480.607942][T17360] ? cap_capable+0x107/0x430 [ 480.607959][T17360] bpf_prog_alloc_no_stats+0x59/0x690 [ 480.607972][T17360] ? security_capable+0x80/0x260 [ 480.607990][T17360] bpf_prog_alloc+0x3b/0x200 [ 480.608002][T17360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.608016][T17360] bpf_prog_load+0x49e/0x2a80 [ 480.608033][T17360] ? __pfx_bpf_prog_load+0x10/0x10 [ 480.608059][T17360] __sys_bpf+0x1f46/0x4a30 [ 480.608073][T17360] ? __pfx___sys_bpf+0x10/0x10 [ 480.608083][T17360] ? find_held_lock+0x2b/0x80 [ 480.608097][T17360] ? futex_wake+0x4ea/0x5e0 [ 480.608123][T17360] ? rcu_read_lock_any_held+0x6a/0x90 [ 480.608138][T17360] ? find_held_lock+0x2b/0x80 [ 480.608152][T17360] ? ksys_write+0x190/0x250 [ 480.608163][T17360] ? ksys_write+0x190/0x250 [ 480.608181][T17360] ? __x64_sys_futex+0x34f/0x4d0 [ 480.608194][T17360] ? __x64_sys_futex+0x358/0x4d0 [ 480.608210][T17360] ? xfd_validate_state+0x129/0x190 [ 480.608224][T17360] ? __x64_sys_bpf+0xce/0x140 [ 480.608233][T17360] __x64_sys_bpf+0xce/0x140 [ 480.608245][T17360] ? do_syscall_64+0xae/0x790 [ 480.608279][T17360] do_syscall_64+0x123/0x790 [ 480.608297][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.608309][T17360] RIP: 0033:0x7fc35f79e159 [ 480.608319][T17360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.608331][T17360] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.608342][T17360] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 480.608350][T17360] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 480.608356][T17360] RBP: 00007fc35f83503b R08: 0000000000000000 R09: 0000000000000000 [ 480.608363][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.608369][T17360] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 480.608383][T17360] [ 480.608421][T17360] Mem-Info: [ 480.608428][T17360] active_anon:4844 inactive_anon:11248 isolated_anon:0 [ 480.608428][T17360] active_file:21618 inactive_file:26656 isolated_file:0 [ 480.608428][T17360] unevictable:1000 dirty:487 writeback:0 [ 480.608428][T17360] slab_reclaimable:8764 slab_unreclaimable:76395 [ 480.608428][T17360] mapped:26975 shmem:1589 pagetables:1933 [ 480.608428][T17360] sec_pagetables:317 bounce:0 [ 480.608428][T17360] kernel_misc_reclaimable:0 [ 480.608428][T17360] free:414316 free_pcp:22414 free_cma:0 [ 480.608457][T17360] Node 0 active_anon:19376kB inactive_anon:44928kB active_file:86352kB inactive_file:106440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66908kB dirty:1940kB writeback:0kB shmem:2340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16960kB pagetables:7524kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.608486][T17360] Node 1 active_anon:0kB inactive_anon:64kB active_file:120kB inactive_file:184kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:40992kB dirty:8kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:208kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.608515][T17360] Node 0 DMA free:6664kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:92kB free_cma:0kB [ 480.608551][T17360] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 480.608571][T17360] Node 0 DMA32 free:161704kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19376kB inactive_anon:44896kB active_file:86352kB inactive_file:106440kB unevictable:0kB writepending:1940kB zspages:612kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:76720kB local_pcp:25040kB free_cma:0kB [ 480.608602][T17360] lowmem_reserve[]: 0 0 0 0 0 [ 480.608621][T17360] Node 1 Normal free:1488896kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:64kB active_file:120kB inactive_file:184kB unevictable:4000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:12700kB local_pcp:1180kB free_cma:0kB [ 480.608653][T17360] lowmem_reserve[]: 0 0 0 0 0 [ 480.608672][T17360] Node 0 DMA: 18*4kB (UM) 18*8kB (UME) 17*16kB (UM) 17*32kB (UME) 12*64kB (UME) 4*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 1*2048kB (U) 0*4096kB = 6664kB [ 480.608756][T17360] Node 0 DMA32: 1130*4kB (ME) 560*8kB (UME) 676*16kB (UME) 501*32kB (UME) 133*64kB (UME) 87*128kB (ME) 51*256kB (UME) 30*512kB (UME) 46*1024kB (UM) 13*2048kB (UM) 1*4096kB (M) = 161736kB [ 480.608838][T17360] Node 1 Normal: 109*4kB (UME) 86*8kB (UME) 72*16kB (UME) 85*32kB (UME) 62*64kB (UME) 54*128kB (UME) 42*256kB (UME) 28*512kB (UME) 18*1024kB (UM) 14*2048kB (UME) 342*4096kB (UM) = 1488900kB [ 480.608986][T17360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.608997][T17360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 480.609005][T17360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.609014][T17360] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 480.609023][T17360] 49859 total pagecache pages [ 480.609027][T17360] 2 pages in swap cache [ 480.609031][T17360] Free swap = 123788kB [ 480.609035][T17360] Total swap = 124996kB [ 480.609040][T17360] 1048443 pages RAM [ 480.609044][T17360] 0 pages HighMem/MovableOnly [ 480.609048][T17360] 285903 pages reserved [ 480.609052][T17360] 0 pages cma reserved [ 480.754043][T17367] FAULT_INJECTION: forcing a failure. [ 480.754043][T17367] name failslab, interval 1, probability 0, space 0, times 0 [ 480.754066][T17367] CPU: 0 UID: 0 PID: 17367 Comm: syz.2.3308 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.754082][T17367] Tainted: [L]=SOFTLOCKUP [ 480.754086][T17367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.754093][T17367] Call Trace: [ 480.754098][T17367] [ 480.754103][T17367] dump_stack_lvl+0x100/0x190 [ 480.754123][T17367] should_fail_ex.cold+0x5/0xa [ 480.754139][T17367] should_failslab+0xc2/0x120 [ 480.754155][T17367] __kmalloc_noprof+0xfc/0x840 [ 480.754166][T17367] ? rcu_is_watching+0x13/0xc0 [ 480.754187][T17367] ? tomoyo_realpath_from_path+0xb6/0x690 [ 480.754213][T17367] tomoyo_realpath_from_path+0xb6/0x690 [ 480.754241][T17367] tomoyo_path_number_perm+0x23c/0x580 [ 480.754269][T17367] ? tomoyo_path_number_perm+0x22e/0x580 [ 480.754299][T17367] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.754324][T17367] ? __lock_acquire+0x5c0/0x1f40 [ 480.754343][T17367] ? __fget_files+0x34/0x3d0 [ 480.754357][T17367] ? find_held_lock+0x2b/0x80 [ 480.754373][T17367] ? hook_file_ioctl_common+0x140/0x440 [ 480.754391][T17367] ? __fget_files+0x21f/0x3d0 [ 480.754407][T17367] security_file_ioctl+0xd3/0x230 [ 480.754420][T17367] __x64_sys_ioctl+0xb7/0x210 [ 480.754433][T17367] do_syscall_64+0x123/0x790 [ 480.754449][T17367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.754461][T17367] RIP: 0033:0x7fc35f79e159 [ 480.754472][T17367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.754482][T17367] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.754494][T17367] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 480.754501][T17367] RDX: 0000200000000140 RSI: 00000000c0285628 RDI: 0000000000000003 [ 480.754509][T17367] RBP: 00007fc3605ef090 R08: 0000000000000000 R09: 0000000000000000 [ 480.754515][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.754522][T17367] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 480.754536][T17367] [ 480.754548][T17367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.809061][T17369] tipc: Started in network mode [ 480.809078][T17369] tipc: Node identity cadc2a45f6c2, cluster identity 4711 [ 480.809149][T17369] tipc: Enabled bearer , priority 0 [ 480.817357][T17368] tipc: Disabling bearer [ 480.935904][T16257] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 480.936033][T16257] (NULL device *): queue 0 connect admin queue failed (-111). [ 480.936050][T16257] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 480.936063][T16257] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 481.265957][ T67] Bluetooth: hci1: command tx timeout [ 481.416251][ T67] Bluetooth: hci0: command tx timeout [ 481.444698][T17418] FAULT_INJECTION: forcing a failure. [ 481.444698][T17418] name failslab, interval 1, probability 0, space 0, times 0 [ 481.444731][T17418] CPU: 2 UID: 0 PID: 17418 Comm: syz.2.3323 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.444757][T17418] Tainted: [L]=SOFTLOCKUP [ 481.444764][T17418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.444773][T17418] Call Trace: [ 481.444778][T17418] [ 481.444785][T17418] dump_stack_lvl+0x100/0x190 [ 481.444820][T17418] should_fail_ex.cold+0x5/0xa [ 481.444849][T17418] should_failslab+0xc2/0x120 [ 481.444874][T17418] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 481.444896][T17418] ? register_lock_class+0x3f/0x7b0 [ 481.444916][T17418] ? __d_alloc+0x35/0xa50 [ 481.444946][T17418] __d_alloc+0x35/0xa50 [ 481.444971][T17418] ? __lock_acquire+0x5c0/0x1f40 [ 481.444992][T17418] d_alloc_parallel+0x105/0x14c0 [ 481.445019][T17418] ? lock_acquire+0x1d1/0x380 [ 481.445038][T17418] ? lookup_slow+0x42/0x70 [ 481.445064][T17418] ? __pfx_d_alloc_parallel+0x10/0x10 [ 481.445083][T17418] ? __pfx___might_resched+0x10/0x10 [ 481.445116][T17418] ? try_to_unlazy+0x296/0x910 [ 481.445141][T17418] ? down_read+0x13b/0x4c0 [ 481.445169][T17418] ? __pfx_down_read+0x10/0x10 [ 481.445197][T17418] __lookup_slow+0x98/0x320 [ 481.445226][T17418] lookup_slow+0x50/0x70 [ 481.445253][T17418] link_path_walk+0x1377/0x1cc0 [ 481.445282][T17418] __filename_parentat+0x213/0x740 [ 481.445307][T17418] ? __pfx___filename_parentat+0x10/0x10 [ 481.445351][T17418] ? __lock_acquire+0x5c0/0x1f40 [ 481.445380][T17418] filename_create+0xbe/0x400 [ 481.445401][T17418] ? __pfx_filename_create+0x10/0x10 [ 481.445422][T17418] ? lock_acquire+0x1d1/0x380 [ 481.445443][T17418] ? find_held_lock+0x2b/0x80 [ 481.445472][T17418] filename_mkdirat+0xb9/0x5e0 [ 481.445499][T17418] ? __pfx_filename_mkdirat+0x10/0x10 [ 481.445523][T17418] ? strncpy_from_user+0x19d/0x2d0 [ 481.445548][T17418] ? do_getname+0x191/0x390 [ 481.445583][T17418] __x64_sys_mkdirat+0x89/0xc0 [ 481.445609][T17418] do_syscall_64+0x123/0x790 [ 481.445635][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.445654][T17418] RIP: 0033:0x7fc35f79e159 [ 481.445671][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.445688][T17418] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 481.445708][T17418] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 481.445720][T17418] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 481.445732][T17418] RBP: 00007fc3605ef090 R08: 0000000000000000 R09: 0000000000000000 [ 481.445743][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.445755][T17418] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 481.445780][T17418] [ 481.625711][T17431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=17431 comm=syz.2.3325 [ 481.648435][T17430] syzkaller0: entered promiscuous mode [ 481.648451][T17430] syzkaller0: entered allmulticast mode [ 481.810485][T17440] netlink: 'syz.7.3329': attribute type 25 has an invalid length. [ 481.877946][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3330'. [ 481.878738][T17442] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3330'. [ 481.930981][ T43] kauditd_printk_skb: 40354 callbacks suppressed [ 481.931001][ T43] audit: type=1800 audit(1789004516.175:100526): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 481.949693][ T43] audit: type=1800 audit(1789004516.195:100527): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 481.961663][ T43] audit: type=1400 audit(1789004516.205:100528): avc: denied { bind } for pid=17447 comm="syz.7.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 481.961928][ T43] audit: type=1400 audit(1789004516.205:100529): avc: denied { name_bind } for pid=17447 comm="syz.7.3332" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 481.962254][ T43] audit: type=1400 audit(1789004516.205:100530): avc: denied { node_bind } for pid=17447 comm="syz.7.3332" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 481.962704][ T43] audit: type=1400 audit(1789004516.205:100531): avc: denied { write } for pid=17447 comm="syz.7.3332" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 481.967711][ T43] audit: type=1800 audit(1789004516.215:100532): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258586 res=0 errno=0 [ 481.971132][ T43] audit: type=1400 audit(1789004516.215:100533): avc: denied { write } for pid=17449 comm="syz.5.3333" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.999146][ T43] audit: type=1800 audit(1789004516.245:100534): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 482.144923][ T43] audit: type=1800 audit(1789004516.385:100535): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 482.331184][T17463] comedi: valid board names for 8255 driver are: [ 482.331195][T17463] 8255 [ 482.331200][T17463] comedi: valid board names for vmk80xx driver are: [ 482.331204][T17463] vmk80xx [ 482.331208][T17463] comedi: valid board names for usbduxsigma driver are: [ 482.331213][T17463] usbduxsigma [ 482.331217][T17463] comedi: valid board names for usbduxfast driver are: [ 482.331222][T17463] usbduxfast [ 482.331225][T17463] comedi: valid board names for usbdux driver are: [ 482.331230][T17463] usbdux [ 482.331234][T17463] comedi: valid board names for ni6501 driver are: [ 482.331239][T17463] ni6501 [ 482.331242][T17463] comedi: valid board names for dt9812 driver are: [ 482.331247][T17463] dt9812 [ 482.331251][T17463] comedi: valid board names for ni_labpc_cs driver are: [ 482.331256][T17463] ni_labpc_cs [ 482.331259][T17463] comedi: valid board names for ni_daq_700 driver are: [ 482.331264][T17463] ni_daq_700 [ 482.331268][T17463] comedi: valid board names for labpc_pci driver are: [ 482.331273][T17463] labpc_pci [ 482.331276][T17463] comedi: valid board names for adl_pci9118 driver are: [ 482.331281][T17463] pci9118dg [ 482.331285][T17463] pci9118hg [ 482.331288][T17463] pci9118hr [ 482.331292][T17463] comedi: valid board names for 8255_pci driver are: [ 482.331297][T17463] 8255_pci [ 482.331300][T17463] comedi: valid board names for s526 driver are: [ 482.331305][T17463] s526 [ 482.331309][T17463] comedi: valid board names for multiq3 driver are: [ 482.331314][T17463] multiq3 [ 482.331318][T17463] comedi: valid board names for pcmuio driver are: [ 482.331323][T17463] pcmuio48 [ 482.331327][T17463] pcmuio96 [ 482.331331][T17463] comedi: valid board names for pcmmio driver are: [ 482.331336][T17463] pcmmio [ 482.331341][T17463] comedi: valid board names for pcmda12 driver are: [ 482.331346][T17463] pcmda12 [ 482.331350][T17463] comedi: valid board names for pcmad driver are: [ 482.331355][T17463] pcmad12 [ 482.331359][T17463] pcmad16 [ 482.331363][T17463] comedi: valid board names for ni_labpc driver are: [ 482.331368][T17463] lab-pc-1200 [ 482.331373][T17463] lab-pc-1200ai [ 482.331377][T17463] lab-pc+ [ 482.331381][T17463] comedi: valid board names for atmio16 driver are: [ 482.331386][T17463] atmio16 [ 482.331390][T17463] atmio16d [ 482.331394][T17463] comedi: valid board names for ni_at_ao driver are: [ 482.331399][T17463] at-ao-6 [ 482.331403][T17463] at-ao-10 [ 482.331407][T17463] comedi: valid board names for ni_at_a2150 driver are: [ 482.331412][T17463] ni_at_a2150 [ 482.331416][T17463] comedi: valid board names for adq12b driver are: [ 482.331421][T17463] adq12b [ 482.331424][T17463] comedi: valid board names for mpc624 driver are: [ 482.331429][T17463] mpc624 [ 482.331433][T17463] comedi: valid board names for c6xdigio driver are: [ 482.331437][T17463] c6xdigio [ 482.331441][T17463] comedi: valid board names for aio_iiro_16 driver are: [ 482.331446][T17463] aio_iiro_16 [ 482.331449][T17463] comedi: valid board names for aio_aio12_8 driver are: [ 482.331454][T17463] aio_aio12_8 [ 482.331458][T17463] aio_ai12_8 [ 482.331461][T17463] aio_ao12_4 [ 482.331465][T17463] comedi: valid board names for fl512 driver are: [ 482.331470][T17463] fl512 [ 482.331473][T17463] comedi: valid board names for dmm32at driver are: [ 482.331478][T17463] dmm32at [ 482.331481][T17463] comedi: valid board names for dt282x driver are: [ 482.331486][T17463] dt2821 [ 482.331490][T17463] dt2821-f [ 482.331493][T17463] dt2821-g [ 482.331497][T17463] dt2823 [ 482.331500][T17463] dt2824-pgh [ 482.331504][T17463] dt2824-pgl [ 482.331508][T17463] dt2825 [ 482.331511][T17463] dt2827 [ 482.331515][T17463] dt2828 [ 482.331518][T17463] dt2829 [ 482.331522][T17463] dt21-ez [ 482.331525][T17463] dt23-ez [ 482.331530][T17463] dt24-ez [ 482.331535][T17463] dt24-ez-pgl [ 482.331539][T17463] comedi: valid board names for dt2817 driver are: [ 482.331544][T17463] dt2817 [ 482.331547][T17463] comedi: valid board names for dt2815 driver are: [ 482.331552][T17463] dt2815 [ 482.331555][T17463] comedi: valid board names for dt2814 driver are: [ 482.331560][T17463] dt2814 [ 482.331564][T17463] comedi: valid board names for dt2811 driver are: [ 482.331568][T17463] dt2811-pgh [ 482.331572][T17463] dt2811-pgl [ 482.331576][T17463] comedi: valid board names for dt2801 driver are: [ 482.331580][T17463] dt2801 [ 482.331584][T17463] comedi: valid board names for das6402 driver are: [ 482.331589][T17463] das6402-12 [ 482.331592][T17463] das6402-16 [ 482.331596][T17463] comedi: valid board names for das1800 driver are: [ 482.331600][T17463] das-1701st [ 482.331604][T17463] das-1701st-da [ 482.331608][T17463] das-1702st [ 482.331611][T17463] das-1702st-da [ 482.331615][T17463] das-1702hr [ 482.331619][T17463] das-1702hr-da [ 482.331622][T17463] das-1701ao [ 482.331626][T17463] das-1702ao [ 482.331630][T17463] das-1801st [ 482.331633][T17463] das-1801st-da [ 482.331637][T17463] das-1802st [ 482.331641][T17463] das-1802st-da [ 482.331645][T17463] das-1802hr [ 482.331651][T17463] das-1802hr-da [ 482.331656][T17463] das-1801hc [ 482.331661][T17463] das-1802hc [ 482.331666][T17463] das-1801ao [ 482.331672][T17463] das-1802ao [ 482.331677][T17463] comedi: valid board names for das800 driver are: [ 482.331684][T17463] das-800 [ 482.331689][T17463] cio-das800 [ 482.331695][T17463] das-801 [ 482.331700][T17463] cio-das801 [ 482.331705][T17463] das-802 [ 482.331710][T17463] cio-das802 [ 482.331715][T17463] cio-das802/16 [ 482.331720][T17463] comedi: valid board names for isa-das08 driver are: [ 482.331741][T17463] isa-das08 [ 482.331748][T17463] das08-pgm [ 482.331754][T17463] das08-pgh [ 482.331760][T17463] das08-pgl [ 482.331766][T17463] das08-aoh [ 482.331773][T17463] das08-aol [ 482.331779][T17463] das08-aom [ 482.331784][T17463] das08/jr-ao [ 482.331791][T17463] das08jr-16-ao [ 482.331798][T17463] pc104-das08 [ 482.331804][T17463] das08jr/16 [ 482.331810][T17463] comedi: valid board names for das16m1 driver are: [ 482.331818][T17463] das16m1 [ 482.331824][T17463] comedi: valid board names for dac02 driver are: [ 482.331832][T17463] dac02 [ 482.331838][T17463] comedi: valid board names for rti802 driver are: [ 482.331845][T17463] rti802 [ 482.331852][T17463] comedi: valid board names for rti800 driver are: [ 482.331859][T17463] rti800 [ 482.331865][T17463] rti815 [ 482.331871][T17463] comedi: valid board names for pcm3724 driver are: [ 482.331879][T17463] pcm3724 [ 482.331885][T17463] comedi: valid board names for pcl818 driver are: [ 482.331893][T17463] pcl818l [ 482.331899][T17463] pcl818h [ 482.331906][T17463] pcl818hd [ 482.331912][T17463] pcl818hg [ 482.331918][T17463] pcl818 [ 482.331924][T17463] pcl718 [ 482.331930][T17463] pcm3718 [ 482.331936][T17463] comedi: valid board names for pcl816 driver are: [ 482.331943][T17463] pcl816 [ 482.331950][T17463] pcl814b [ 482.331956][T17463] comedi: valid board names for pcl812 driver are: [ 482.331964][T17463] pcl812 [ 482.331969][T17463] pcl812pg [ 482.331974][T17463] acl8112pg [ 482.331979][T17463] acl8112dg [ 482.331985][T17463] acl8112hg [ 482.331991][T17463] a821pgl [ 482.331997][T17463] a821pglnda [ 482.332003][T17463] a821pgh [ 482.332009][T17463] a822pgl [ 482.332014][T17463] a822pgh [ 482.332020][T17463] a823pgl [ 482.332038][T17463] a823pgh [ 482.332045][T17463] pcl813 [ 482.332053][T17463] pcl813b [ 482.332060][T17463] acl8113 [ 482.332066][T17463] iso813 [ 482.332072][T17463] acl8216 [ 482.332079][T17463] a826pg [ 482.332086][T17463] comedi: valid board names for pcl730 driver are: [ 482.332095][T17463] pcl730 [ 482.332102][T17463] iso730 [ 482.332108][T17463] acl7130 [ 482.332114][T17463] pcm3730 [ 482.332120][T17463] pcl725 [ 482.332125][T17463] p8r8dio [ 482.332131][T17463] acl7225b [ 482.332137][T17463] p16r16dio [ 482.332144][T17463] pcl733 [ 482.332150][T17463] pcl734 [ 482.332157][T17463] opmm-1616-xt [ 482.332164][T17463] pearl-mm-p [ 482.332170][T17463] ir104-pbf [ 482.332177][T17463] comedi: valid board names for pcl726 driver are: [ 482.332188][T17463] pcl726 [ 482.332195][T17463] pcl727 [ 482.332201][T17463] pcl728 [ 482.332207][T17463] acl6126 [ 482.332213][T17463] acl6128 [ 482.332219][T17463] comedi: valid board names for pcl724 driver are: [ 482.332227][T17463] pcl724 [ 482.332233][T17463] pcl722 [ 482.332239][T17463] pcl731 [ 482.332245][T17463] acl7122 [ 482.332251][T17463] acl7124 [ 482.332258][T17463] pet48dio [ 482.332263][T17463] pcmio48 [ 482.332270][T17463] onyx-mm-dio [ 482.332275][T17463] comedi: valid board names for pcl711 driver are: [ 482.332283][T17463] pcl711 [ 482.332289][T17463] pcl711b [ 482.332294][T17463] acl8112hg [ 482.332300][T17463] acl8112dg [ 482.332306][T17463] comedi: valid board names for amplc_pc263 driver are: [ 482.332314][T17463] pc263 [ 482.332321][T17463] comedi: valid board names for amplc_pc236 driver are: [ 482.332329][T17463] pc36at [ 482.332335][T17463] comedi: valid board names for amplc_dio200 driver are: [ 482.332343][T17463] pc212e [ 482.332350][T17463] pc214e [ 482.332355][T17463] pc215e [ 482.332360][T17463] pc218e [ 482.332367][T17463] pc272e [ 482.332372][T17463] comedi: valid board names for comedi_parport driver are: [ 482.332384][T17463] comedi_parport [ 482.332390][T17463] comedi: valid board names for comedi_test driver are: [ 482.332397][T17463] comedi_test [ 482.332403][T17463] comedi: valid board names for comedi_bond driver are: [ 482.332412][T17463] comedi_bond [ 482.429420][T17469] comedi: valid board names for 8255 driver are: [ 482.429436][T17469] 8255 [ 482.429443][T17469] comedi: valid board names for vmk80xx driver are: [ 482.429457][T17469] vmk80xx [ 482.429463][T17469] comedi: valid board names for usbduxsigma driver are: [ 482.429471][T17469] usbduxsigma [ 482.429478][T17469] comedi: valid board names for usbduxfast driver are: [ 482.429486][T17469] usbduxfast [ 482.429493][T17469] comedi: valid board names for usbdux driver are: [ 482.429501][T17469] usbdux [ 482.429507][T17469] comedi: valid board names for ni6501 driver are: [ 482.429515][T17469] ni6501 [ 482.429522][T17469] comedi: valid board names for dt9812 driver are: [ 482.429531][T17469] dt9812 [ 482.429538][T17469] comedi: valid board names for ni_labpc_cs driver are: [ 482.429546][T17469] ni_labpc_cs [ 482.429553][T17469] comedi: valid board names for ni_daq_700 driver are: [ 482.429561][T17469] ni_daq_700 [ 482.429568][T17469] comedi: valid board names for labpc_pci driver are: [ 482.429575][T17469] labpc_pci [ 482.429582][T17469] comedi: valid board names for adl_pci9118 driver are: [ 482.429590][T17469] pci9118dg [ 482.429596][T17469] pci9118hg [ 482.429603][T17469] pci9118hr [ 482.429609][T17469] comedi: valid board names for 8255_pci driver are: [ 482.429616][T17469] 8255_pci [ 482.429621][T17469] comedi: valid board names for s526 driver are: [ 482.429628][T17469] s526 [ 482.429633][T17469] comedi: valid board names for multiq3 driver are: [ 482.429641][T17469] multiq3 [ 482.429646][T17469] comedi: valid board names for pcmuio driver are: [ 482.429654][T17469] pcmuio48 [ 482.429660][T17469] pcmuio96 [ 482.429667][T17469] comedi: valid board names for pcmmio driver are: [ 482.429675][T17469] pcmmio [ 482.429681][T17469] comedi: valid board names for pcmda12 driver are: [ 482.429689][T17469] pcmda12 [ 482.429695][T17469] comedi: valid board names for pcmad driver are: [ 482.429703][T17469] pcmad12 [ 482.429709][T17469] pcmad16 [ 482.429716][T17469] comedi: valid board names for ni_labpc driver are: [ 482.429724][T17469] lab-pc-1200 [ 482.429730][T17469] lab-pc-1200ai [ 482.429737][T17469] lab-pc+ [ 482.429743][T17469] comedi: valid board names for atmio16 driver are: [ 482.429751][T17469] atmio16 [ 482.429757][T17469] atmio16d [ 482.429763][T17469] comedi: valid board names for ni_at_ao driver are: [ 482.429771][T17469] at-ao-6 [ 482.429778][T17469] at-ao-10 [ 482.429784][T17469] comedi: valid board names for ni_at_a2150 driver are: [ 482.429793][T17469] ni_at_a2150 [ 482.429799][T17469] comedi: valid board names for adq12b driver are: [ 482.429807][T17469] adq12b [ 482.429814][T17469] comedi: valid board names for mpc624 driver are: [ 482.429822][T17469] mpc624 [ 482.429854][T17469] comedi: valid board names for c6xdigio driver are: [ 482.429863][T17469] c6xdigio [ 482.429870][T17469] comedi: valid board names for aio_iiro_16 driver are: [ 482.429879][T17469] aio_iiro_16 [ 482.429886][T17469] comedi: valid board names for aio_aio12_8 driver are: [ 482.429895][T17469] aio_aio12_8 [ 482.429902][T17469] aio_ai12_8 [ 482.429909][T17469] aio_ao12_4 [ 482.429915][T17469] comedi: valid board names for fl512 driver are: [ 482.429924][T17469] fl512 [ 482.429931][T17469] comedi: valid board names for dmm32at driver are: [ 482.429939][T17469] dmm32at [ 482.429945][T17469] comedi: valid board names for dt282x driver are: [ 482.429953][T17469] dt2821 [ 482.429959][T17469] dt2821-f [ 482.429965][T17469] dt2821-g [ 482.429972][T17469] dt2823 [ 482.429978][T17469] dt2824-pgh [ 482.429984][T17469] dt2824-pgl [ 482.429991][T17469] dt2825 [ 482.429997][T17469] dt2827 [ 482.430004][T17469] dt2828 [ 482.430010][T17469] dt2829 [ 482.430016][T17469] dt21-ez [ 482.430022][T17469] dt23-ez [ 482.430029][T17469] dt24-ez [ 482.430035][T17469] dt24-ez-pgl [ 482.430041][T17469] comedi: valid board names for dt2817 driver are: [ 482.430049][T17469] dt2817 [ 482.430055][T17469] comedi: valid board names for dt2815 driver are: [ 482.430063][T17469] dt2815 [ 482.430069][T17469] comedi: valid board names for dt2814 driver are: [ 482.430078][T17469] dt2814 [ 482.430084][T17469] comedi: valid board names for dt2811 driver are: [ 482.430092][T17469] dt2811-pgh [ 482.430099][T17469] dt2811-pgl [ 482.430105][T17469] comedi: valid board names for dt2801 driver are: [ 482.430113][T17469] dt2801 [ 482.430119][T17469] comedi: valid board names for das6402 driver are: [ 482.430127][T17469] das6402-12 [ 482.430134][T17469] das6402-16 [ 482.430141][T17469] comedi: valid board names for das1800 driver are: [ 482.430149][T17469] das-1701st [ 482.430155][T17469] das-1701st-da [ 482.430161][T17469] das-1702st [ 482.430168][T17469] das-1702st-da [ 482.430174][T17469] das-1702hr [ 482.430180][T17469] das-1702hr-da [ 482.430187][T17469] das-1701ao [ 482.430193][T17469] das-1702ao [ 482.430200][T17469] das-1801st [ 482.430206][T17469] das-1801st-da [ 482.430212][T17469] das-1802st [ 482.430219][T17469] das-1802st-da [ 482.430225][T17469] das-1802hr [ 482.430232][T17469] das-1802hr-da [ 482.430238][T17469] das-1801hc [ 482.430245][T17469] das-1802hc [ 482.430251][T17469] das-1801ao [ 482.430257][T17469] das-1802ao [ 482.430264][T17469] comedi: valid board names for das800 driver are: [ 482.430272][T17469] das-800 [ 482.430278][T17469] cio-das800 [ 482.430285][T17469] das-801 [ 482.430291][T17469] cio-das801 [ 482.430298][T17469] das-802 [ 482.430304][T17469] cio-das802 [ 482.430310][T17469] cio-das802/16 [ 482.430317][T17469] comedi: valid board names for isa-das08 driver are: [ 482.430325][T17469] isa-das08 [ 482.430332][T17469] das08-pgm [ 482.430384][T17469] das08-pgh [ 482.430392][T17469] das08-pgl [ 482.430398][T17469] das08-aoh [ 482.430404][T17469] das08-aol [ 482.430411][T17469] das08-aom [ 482.430417][T17469] das08/jr-ao [ 482.430423][T17469] das08jr-16-ao [ 482.430430][T17469] pc104-das08 [ 482.430438][T17469] das08jr/16 [ 482.430451][T17469] comedi: valid board names for das16m1 driver are: [ 482.430459][T17469] das16m1 [ 482.430465][T17469] comedi: valid board names for dac02 driver are: [ 482.430473][T17469] dac02 [ 482.430479][T17469] comedi: valid board names for rti802 driver are: [ 482.430487][T17469] rti802 [ 482.430493][T17469] comedi: valid board names for rti800 driver are: [ 482.430500][T17469] rti800 [ 482.430506][T17469] rti815 [ 482.430512][T17469] comedi: valid board names for pcm3724 driver are: [ 482.430520][T17469] pcm3724 [ 482.430526][T17469] comedi: valid board names for pcl818 driver are: [ 482.430534][T17469] pcl818l [ 482.430540][T17469] pcl818h [ 482.430546][T17469] pcl818hd [ 482.430553][T17469] pcl818hg [ 482.430560][T17469] pcl818 [ 482.430567][T17469] pcl718 [ 482.430574][T17469] pcm3718 [ 482.430581][T17469] comedi: valid board names for pcl816 driver are: [ 482.430590][T17469] pcl816 [ 482.430596][T17469] pcl814b [ 482.430603][T17469] comedi: valid board names for pcl812 driver are: [ 482.430612][T17469] pcl812 [ 482.430619][T17469] pcl812pg [ 482.430626][T17469] acl8112pg [ 482.430632][T17469] acl8112dg [ 482.430639][T17469] acl8112hg [ 482.430646][T17469] a821pgl [ 482.430653][T17469] a821pglnda [ 482.430660][T17469] a821pgh [ 482.430666][T17469] a822pgl [ 482.430672][T17469] a822pgh [ 482.430678][T17469] a823pgl [ 482.430684][T17469] a823pgh [ 482.430690][T17469] pcl813 [ 482.430696][T17469] pcl813b [ 482.430702][T17469] acl8113 [ 482.430708][T17469] iso813 [ 482.430714][T17469] acl8216 [ 482.430720][T17469] a826pg [ 482.430726][T17469] comedi: valid board names for pcl730 driver are: [ 482.430734][T17469] pcl730 [ 482.430740][T17469] iso730 [ 482.430746][T17469] acl7130 [ 482.430752][T17469] pcm3730 [ 482.430758][T17469] pcl725 [ 482.430764][T17469] p8r8dio [ 482.430770][T17469] acl7225b [ 482.430777][T17469] p16r16dio [ 482.430783][T17469] pcl733 [ 482.430789][T17469] pcl734 [ 482.430796][T17469] opmm-1616-xt [ 482.430802][T17469] pearl-mm-p [ 482.430808][T17469] ir104-pbf [ 482.430815][T17469] comedi: valid board names for pcl726 driver are: [ 482.430822][T17469] pcl726 [ 482.430828][T17469] pcl727 [ 482.430834][T17469] pcl728 [ 482.430840][T17469] acl6126 [ 482.430846][T17469] acl6128 [ 482.430853][T17469] comedi: valid board names for pcl724 driver are: [ 482.430861][T17469] pcl724 [ 482.430868][T17469] pcl722 [ 482.430874][T17469] pcl731 [ 482.430880][T17469] acl7122 [ 482.430886][T17469] acl7124 [ 482.430893][T17469] pet48dio [ 482.430899][T17469] pcmio48 [ 482.430905][T17469] onyx-mm-dio [ 482.430912][T17469] comedi: valid board names for pcl711 driver are: [ 482.430920][T17469] pcl711 [ 482.430926][T17469] pcl711b [ 482.430932][T17469] acl8112hg [ 482.430938][T17469] acl8112dg [ 482.430945][T17469] comedi: valid board names for amplc_pc263 driver are: [ 482.430952][T17469] pc263 [ 482.430958][T17469] comedi: valid board names for amplc_pc236 driver are: [ 482.430966][T17469] pc36at [ 482.430972][T17469] comedi: valid board names for amplc_dio200 driver are: [ 482.430980][T17469] pc212e [ 482.430986][T17469] pc214e [ 482.430992][T17469] pc215e [ 482.430998][T17469] pc218e [ 482.431004][T17469] pc272e [ 482.431011][T17469] comedi: valid board names for comedi_parport driver are: [ 482.431019][T17469] comedi_parport [ 482.431026][T17469] comedi: valid board names for comedi_test driver are: [ 482.431034][T17469] comedi_test [ 482.431040][T17469] comedi: valid board names for comedi_bond driver are: [ 482.431049][T17469] comedi_bond [ 482.680295][T14491] cxacru 9-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 482.782863][T17485] trusted_key: encrypted_key: insufficient parameters specified [ 483.021941][T16266] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 483.022518][T16266] (NULL device *): queue 0 connect admin queue failed (-111). [ 483.022540][T16266] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 483.022550][T16266] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 483.026169][T17494] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 483.030861][T17494] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 483.141368][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 483.305898][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 483.307487][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 483.307514][ T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 483.308278][ T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 483.308291][ T9] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 483.308302][ T9] usb 8-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 483.308314][ T9] usb 8-1: config 14 has no interface number 0 [ 483.308331][ T9] usb 8-1: config 14 interface 57 altsetting 216 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 483.308346][ T9] usb 8-1: config 14 interface 57 altsetting 216 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 483.308361][ T9] usb 8-1: config 14 interface 57 altsetting 216 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 483.308376][ T9] usb 8-1: config 14 interface 57 altsetting 216 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.308390][ T9] usb 8-1: config 14 interface 57 has no altsetting 0 [ 483.310424][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.310443][ T9] usb 8-1: Product: syz [ 483.310451][ T9] usb 8-1: Manufacturer: syz [ 483.310460][ T9] usb 8-1: SerialNumber: syz [ 483.346023][ T67] Bluetooth: hci1: command tx timeout [ 484.887558][T17483] tipc: Enabling of bearer rejected, failed to enable media [ 484.896491][ T9] legousbtower 8-1:14.57: interrupt endpoints not found [ 484.900857][ T9] usb 8-1: USB disconnect, device number 15 [ 484.906690][T10001] udevd[10001]: setting mode of /dev/bus/usb/008/015 to 020664 failed: No such file or directory [ 484.906772][T10001] udevd[10001]: setting owner of /dev/bus/usb/008/015 to uid=0, gid=0 failed: No such file or directory [ 484.915170][T17500] FAULT_INJECTION: forcing a failure. [ 484.915170][T17500] name failslab, interval 1, probability 0, space 0, times 0 [ 484.915191][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.2.3350 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.915207][T17500] Tainted: [L]=SOFTLOCKUP [ 484.915211][T17500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.915219][T17500] Call Trace: [ 484.915224][T17500] [ 484.915229][T17500] dump_stack_lvl+0x100/0x190 [ 484.915249][T17500] should_fail_ex.cold+0x5/0xa [ 484.915266][T17500] should_failslab+0xc2/0x120 [ 484.915281][T17500] __kmalloc_cache_node_noprof+0x94/0x720 [ 484.915296][T17500] ? __get_vm_area_node+0x124/0x350 [ 484.915313][T17500] __get_vm_area_node+0x124/0x350 [ 484.915329][T17500] __vmalloc_node_range_noprof+0x268/0x1420 [ 484.915362][T17500] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 484.915385][T17500] ? kfree+0x22b/0x6d0 [ 484.915404][T17500] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 484.915418][T17500] ? lock_acquire+0x1d1/0x380 [ 484.915431][T17500] ? find_held_lock+0x2b/0x80 [ 484.915447][T17500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.915461][T17500] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 484.915480][T17500] ? avc_has_perm_noaudit+0x145/0x3b0 [ 484.915495][T17500] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 484.915509][T17500] __vmalloc_node_noprof+0xad/0xf0 [ 484.915524][T17500] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 484.915539][T17500] __vmalloc_noprof+0xa3/0x120 [ 484.915554][T17500] ? __pfx___vmalloc_noprof+0x10/0x10 [ 484.915570][T17500] ? rcu_is_watching+0x13/0xc0 [ 484.915585][T17500] ? cap_capable+0x107/0x430 [ 484.915603][T17500] bpf_prog_alloc_no_stats+0x59/0x690 [ 484.915617][T17500] ? security_capable+0x80/0x260 [ 484.915634][T17500] bpf_prog_alloc+0x3b/0x200 [ 484.915647][T17500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.915661][T17500] bpf_prog_load+0x49e/0x2a80 [ 484.915680][T17500] ? __pfx_bpf_prog_load+0x10/0x10 [ 484.915706][T17500] __sys_bpf+0x1f46/0x4a30 [ 484.915721][T17500] ? __pfx___sys_bpf+0x10/0x10 [ 484.915731][T17500] ? find_held_lock+0x2b/0x80 [ 484.915746][T17500] ? get_pid_task+0xfc/0x250 [ 484.915761][T17500] ? get_pid_task+0xfc/0x250 [ 484.915780][T17500] ? find_held_lock+0x2b/0x80 [ 484.915798][T17500] ? rcu_read_lock_any_held+0x6a/0x90 [ 484.915814][T17500] ? find_held_lock+0x2b/0x80 [ 484.915829][T17500] ? ksys_write+0x190/0x250 [ 484.915840][T17500] ? ksys_write+0x190/0x250 [ 484.915851][T17500] ? lock_acquire+0x1d1/0x380 [ 484.915875][T17500] ? fput+0x7c/0x100 [ 484.915889][T17500] ? ksys_write+0x1ac/0x250 [ 484.915902][T17500] ? __x64_sys_bpf+0xce/0x140 [ 484.915912][T17500] __x64_sys_bpf+0xce/0x140 [ 484.915924][T17500] ? do_syscall_64+0xae/0x790 [ 484.915939][T17500] do_syscall_64+0x123/0x790 [ 484.915955][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.915967][T17500] RIP: 0033:0x7fc35f79e159 [ 484.915977][T17500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.915988][T17500] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 484.915999][T17500] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 484.916007][T17500] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 484.916013][T17500] RBP: 00007fc3605ef090 R08: 0000000000000000 R09: 0000000000000000 [ 484.916020][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.916027][T17500] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 484.916041][T17500] [ 484.988848][T17507] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 484.988900][T17507] FAULT_INJECTION: forcing a failure. [ 484.988900][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 484.988926][T17507] CPU: 1 UID: 0 PID: 17507 Comm: syz.7.3353 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.988951][T17507] Tainted: [L]=SOFTLOCKUP [ 484.988958][T17507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.988970][T17507] Call Trace: [ 484.988977][T17507] [ 484.988985][T17507] dump_stack_lvl+0x100/0x190 [ 484.989018][T17507] should_fail_ex.cold+0x5/0xa [ 484.989045][T17507] should_failslab+0xc2/0x120 [ 484.989069][T17507] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 484.989092][T17507] ? smb3_fs_context_dup+0x4cd/0xb20 [ 484.989124][T17507] kstrdup+0x51/0xe0 [ 484.989153][T17507] smb3_fs_context_dup+0x4cd/0xb20 [ 484.989186][T17507] cifs_smb3_do_mount+0x18c/0x1b10 [ 484.989206][T17507] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 484.989233][T17507] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 484.989255][T17507] ? rcu_is_watching+0x13/0xc0 [ 484.989279][T17507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.989306][T17507] smb3_get_tree+0x1fd/0x440 [ 484.989333][T17507] vfs_get_tree+0x92/0x320 [ 484.989361][T17507] vfs_cmd_create+0xd7/0x2a0 [ 484.989382][T17507] __do_sys_fsconfig+0x55a/0xcb0 [ 484.989402][T17507] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 484.989420][T17507] ? fput+0x7c/0x100 [ 484.989454][T17507] do_syscall_64+0x123/0x790 [ 484.989483][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.989507][T17507] RIP: 0033:0x7f2c4d99e159 [ 484.989523][T17507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.989542][T17507] RSP: 002b:00007f2c4e819028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 484.989561][T17507] RAX: ffffffffffffffda RBX: 00007f2c4dc25fa0 RCX: 00007f2c4d99e159 [ 484.989574][T17507] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 484.989586][T17507] RBP: 00007f2c4e819090 R08: 0000000000000000 R09: 0000000000000000 [ 484.989597][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.989608][T17507] R13: 00007f2c4dc26038 R14: 00007f2c4dc25fa0 R15: 00007ffcfc7c93c8 [ 484.989635][T17507] [ 485.098941][T16262] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 485.099193][T16262] (NULL device *): queue 0 connect admin queue failed (-111). [ 485.099206][T16262] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 485.099215][T16262] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 485.101987][T17513] netlink: 'syz.5.3355': attribute type 1 has an invalid length. [ 485.194735][T17524] FAULT_INJECTION: forcing a failure. [ 485.194735][T17524] name failslab, interval 1, probability 0, space 0, times 0 [ 485.194756][T17524] CPU: 0 UID: 0 PID: 17524 Comm: syz.7.3357 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.194772][T17524] Tainted: [L]=SOFTLOCKUP [ 485.194776][T17524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.194783][T17524] Call Trace: [ 485.194788][T17524] [ 485.194792][T17524] dump_stack_lvl+0x100/0x190 [ 485.194813][T17524] should_fail_ex.cold+0x5/0xa [ 485.194830][T17524] should_failslab+0xc2/0x120 [ 485.194845][T17524] kmem_cache_alloc_noprof+0x92/0x6a0 [ 485.194858][T17524] ? __asan_memcpy+0x3c/0x60 [ 485.194868][T17524] ? __kernfs_new_node+0xd2/0xa10 [ 485.194887][T17524] __kernfs_new_node+0xd2/0xa10 [ 485.194904][T17524] ? lock_acquire+0x1d1/0x380 [ 485.194915][T17524] ? kernfs_add_one+0x4cb/0xaa0 [ 485.194932][T17524] ? __pfx___kernfs_new_node+0x10/0x10 [ 485.194951][T17524] ? lock_acquire+0x1d1/0x380 [ 485.194961][T17524] ? kernfs_root+0x23/0x2a0 [ 485.194976][T17524] ? find_held_lock+0x2b/0x80 [ 485.194991][T17524] ? kernfs_root+0xee/0x2a0 [ 485.195006][T17524] ? kernfs_root+0xee/0x2a0 [ 485.195026][T17524] kernfs_new_node+0x117/0x150 [ 485.195046][T17524] __kernfs_create_file+0x53/0x350 [ 485.195060][T17524] cgroup_addrm_files+0x4ef/0xdb0 [ 485.195081][T17524] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 485.195100][T17524] ? css_next_child+0xcf/0x2e0 [ 485.195117][T17524] ? css_next_descendant_pre+0x58/0x1a0 [ 485.195136][T17524] css_populate_dir+0x343/0x590 [ 485.195152][T17524] cgroup_mkdir+0x563/0x1330 [ 485.195166][T17524] ? __pfx_cgroup_mkdir+0x10/0x10 [ 485.195179][T17524] kernfs_iop_mkdir+0x111/0x190 [ 485.195195][T17524] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 485.195210][T17524] vfs_mkdir+0x364/0x850 [ 485.195230][T17524] filename_mkdirat+0x48b/0x5e0 [ 485.195246][T17524] ? __pfx_filename_mkdirat+0x10/0x10 [ 485.195261][T17524] ? strncpy_from_user+0x19d/0x2d0 [ 485.195275][T17524] ? do_getname+0x191/0x390 [ 485.195293][T17524] __x64_sys_mkdirat+0x89/0xc0 [ 485.195308][T17524] do_syscall_64+0x123/0x790 [ 485.195324][T17524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.195336][T17524] RIP: 0033:0x7f2c4d99e159 [ 485.195346][T17524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.195357][T17524] RSP: 002b:00007f2c4e819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 485.195368][T17524] RAX: ffffffffffffffda RBX: 00007f2c4dc25fa0 RCX: 00007f2c4d99e159 [ 485.195375][T17524] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 485.195382][T17524] RBP: 00007f2c4da3503b R08: 0000000000000000 R09: 0000000000000000 [ 485.195389][T17524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.195395][T17524] R13: 00007f2c4dc26038 R14: 00007f2c4dc25fa0 R15: 00007ffcfc7c93c8 [ 485.195413][T17524] [ 485.195426][T17524] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 485.223348][T17522] usb 1-1: USB disconnect, device number 2 [ 485.298228][T17536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.382507][T17543] netlink: 'syz.7.3360': attribute type 25 has an invalid length. [ 485.407194][T11411] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 485.505646][T17553] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 485.510286][T17553] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 485.556592][T11411] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 485.557403][T11411] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 485.557416][T11411] usb 10-1: config 1 has no interface number 0 [ 485.558982][T11411] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.558994][T11411] usb 10-1: Product: syz [ 485.559002][T11411] usb 10-1: Manufacturer: syz [ 485.559009][T11411] usb 10-1: SerialNumber: syz [ 485.564244][T11411] usb 10-1: 3:1 : does not exist [ 485.564256][T11411] usb 10-1: 3:2 : does not exist [ 485.659251][T17563] loop5: detected capacity change from 0 to 7 [ 485.662146][T17563] Dev loop5: unable to read RDB block 7 [ 485.662174][T17563] loop5: unable to read partition table [ 485.662323][T17563] loop5: partition table beyond EOD, truncated [ 485.662338][T17563] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.716246][T15373] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 485.767019][T17520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.770611][T17520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.826279][ T5144] ldm_validate_privheads(): Disk read failed. [ 485.826416][ T5144] loop0: [ 485.826436][ T5144] loop0: partition table partially beyond EOD, truncated [ 485.863417][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 485.868363][T15373] usb 12-1: Using ep0 maxpacket: 32 [ 485.868910][T15373] usb 12-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 485.877622][T15373] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.877639][T15373] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.879149][T15373] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.879162][T15373] usb 12-1: Product: syz [ 485.879169][T15373] usb 12-1: Manufacturer: syz [ 485.879177][T15373] usb 12-1: SerialNumber: syz [ 485.906899][T15373] usb 12-1: config 0 descriptor?? [ 485.933591][T17579] netlink: 'syz.2.3369': attribute type 25 has an invalid length. [ 486.119452][T15373] usb 12-1: USB disconnect, device number 31 [ 486.847945][T17592] loop3: detected capacity change from 0 to 7 [ 486.870374][T17594] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 486.871246][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 486.871699][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 486.872134][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 486.872473][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 486.872886][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 486.882526][T17594] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 486.948081][ T43] kauditd_printk_skb: 108 callbacks suppressed [ 486.948094][ T43] audit: type=1800 audit(1789004521.195:100644): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 486.977674][ T43] audit: type=1400 audit(1789004521.225:100645): avc: denied { create } for pid=17597 comm="syz.2.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.978204][ T43] audit: type=1400 audit(1789004521.225:100646): avc: denied { setopt } for pid=17597 comm="syz.2.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.980519][ T43] audit: type=1400 audit(1789004521.225:100647): avc: denied { connect } for pid=17597 comm="syz.2.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 487.040782][ T43] audit: type=1800 audit(1789004521.285:100648): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 487.063090][ T43] audit: type=1800 audit(1789004521.305:100649): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 487.085532][ T43] audit: type=1800 audit(1789004521.325:100650): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 487.113682][ T43] audit: type=1800 audit(1789004521.355:100651): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 487.126889][T17610] FAULT_INJECTION: forcing a failure. [ 487.126889][T17610] name fail_futex, interval 1, probability 0, space 0, times 0 [ 487.126910][T17610] CPU: 3 UID: 0 PID: 17610 Comm: syz.2.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.126938][T17610] Tainted: [L]=SOFTLOCKUP [ 487.126942][T17610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.126949][T17610] Call Trace: [ 487.126954][T17610] [ 487.126969][T17610] dump_stack_lvl+0x100/0x190 [ 487.127000][T17610] should_fail_ex.cold+0x5/0xa [ 487.127016][T17610] get_futex_key+0x1d0/0x14f0 [ 487.127034][T17610] ? __pfx_get_futex_key+0x10/0x10 [ 487.127047][T17610] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 487.127061][T17610] ? __smp_call_single_queue+0x17e/0x450 [ 487.127074][T17610] ? __pfx___smp_call_single_queue+0x10/0x10 [ 487.127089][T17610] futex_wait_setup+0x91/0x540 [ 487.127110][T17610] __futex_wait+0x19f/0x300 [ 487.127128][T17610] ? __pfx___futex_wait+0x10/0x10 [ 487.127144][T17610] ? __pfx_try_to_wake_up+0x10/0x10 [ 487.127156][T17610] ? futex_hash+0x311/0x400 [ 487.127170][T17610] ? __pfx_futex_wake_mark+0x10/0x10 [ 487.127189][T17610] ? find_held_lock+0x2b/0x80 [ 487.127204][T17610] ? futex_wake+0x4ea/0x5e0 [ 487.127224][T17610] futex_wait+0xe6/0x370 [ 487.127241][T17610] ? __pfx_futex_wait+0x10/0x10 [ 487.127261][T17610] ? irqentry_exit+0x24d/0xa10 [ 487.127283][T17610] do_futex+0x265/0x440 [ 487.127298][T17610] ? __pfx_do_futex+0x10/0x10 [ 487.127314][T17610] ? strncpy_from_user+0x275/0x2d0 [ 487.127333][T17610] __x64_sys_futex+0x34f/0x4d0 [ 487.127352][T17610] ? __pfx___x64_sys_futex+0x10/0x10 [ 487.127366][T17610] ? ksys_write+0x1ac/0x250 [ 487.127382][T17610] do_syscall_64+0x123/0x790 [ 487.127403][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.127415][T17610] RIP: 0033:0x7fc35f79e159 [ 487.127426][T17610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.127438][T17610] RSP: 002b:00007fc3605ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.127451][T17610] RAX: ffffffffffffffda RBX: 00007fc35fa25fa8 RCX: 00007fc35f79e159 [ 487.127459][T17610] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc35fa25fa8 [ 487.127466][T17610] RBP: 00007fc35fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 487.127473][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.127481][T17610] R13: 00007fc35fa26038 R14: 00007ffec414e110 R15: 00007ffec414e1f8 [ 487.127497][T17610] [ 487.173326][ T43] audit: type=1800 audit(1789004521.415:100652): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 487.173374][ T43] audit: type=1800 audit(1789004521.415:100653): pid=17612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3378" name="address_bits" dev="sysfs" ino=11 res=0 errno=0 [ 487.177304][T16259] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 487.177567][T16259] (NULL device *): queue 0 connect admin queue failed (-111). [ 487.177584][T16259] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 487.177595][T16259] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 487.239246][T15301] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 487.314739][T17621] FAULT_INJECTION: forcing a failure. [ 487.314739][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.314761][T17621] CPU: 3 UID: 0 PID: 17621 Comm: syz.7.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.314789][T17621] Tainted: [L]=SOFTLOCKUP [ 487.314793][T17621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.314800][T17621] Call Trace: [ 487.314805][T17621] [ 487.314809][T17621] dump_stack_lvl+0x100/0x190 [ 487.314830][T17621] should_fail_ex.cold+0x5/0xa [ 487.314846][T17621] _copy_from_user+0x2e/0xd0 [ 487.314859][T17621] copy_msghdr_from_user+0x9f/0x4c0 [ 487.314883][T17621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 487.314903][T17621] ? lock_acquire+0x1d1/0x380 [ 487.314915][T17621] ? get_pid_task+0x2a/0x250 [ 487.314932][T17621] ___sys_sendmsg+0x106/0x1e0 [ 487.314949][T17621] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.314966][T17621] ? get_pid_task+0x106/0x250 [ 487.314986][T17621] ? find_held_lock+0x2b/0x80 [ 487.315010][T17621] __sys_sendmsg+0x160/0x210 [ 487.315024][T17621] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.315044][T17621] do_syscall_64+0x123/0x790 [ 487.315061][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.315074][T17621] RIP: 0033:0x7f2c4d99e159 [ 487.315084][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.315095][T17621] RSP: 002b:00007f2c4e819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.315107][T17621] RAX: ffffffffffffffda RBX: 00007f2c4dc25fa0 RCX: 00007f2c4d99e159 [ 487.315114][T17621] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 487.315121][T17621] RBP: 00007f2c4e819090 R08: 0000000000000000 R09: 0000000000000000 [ 487.315128][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.315135][T17621] R13: 00007f2c4dc26038 R14: 00007f2c4dc25fa0 R15: 00007ffcfc7c93c8 [ 487.315149][T17621] [ 487.366083][T15301] usb 8-1: device descriptor read/64, error -71 [ 487.616028][T15301] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 487.766019][T15301] usb 8-1: device descriptor read/64, error -71 [ 487.783050][T17631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.876506][T15301] usb usb8-port1: attempt power cycle [ 488.001381][T17644] nvme_fabrics: missing parameter 'transport=%s' [ 488.001398][T17644] nvme_fabrics: missing parameter 'nqn=%s' [ 488.146503][T17651] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3392'. [ 488.182368][T17653] kAFS: unparsable volume name [ 488.226839][T15301] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 488.246748][T15301] usb 8-1: device descriptor read/8, error -71 [ 488.340214][T17659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2076 sclass=netlink_route_socket pid=17659 comm=syz.7.3396 [ 488.340641][T17659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pid=17659 comm=syz.7.3396 [ 488.506176][T15301] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 488.536810][T15301] usb 8-1: device descriptor read/8, error -71 [ 488.646446][T15301] usb usb8-port1: unable to enumerate USB device [ 489.256006][T16259] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 489.257543][T16259] (NULL device *): queue 0 connect admin queue failed (-111). [ 489.257558][T16259] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 489.257568][T16259] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 489.364624][T17677] FAULT_INJECTION: forcing a failure. [ 489.364624][T17677] name failslab, interval 1, probability 0, space 0, times 0 [ 489.364647][T17677] CPU: 3 UID: 0 PID: 17677 Comm: syz.2.3402 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.364662][T17677] Tainted: [L]=SOFTLOCKUP [ 489.364667][T17677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.364674][T17677] Call Trace: [ 489.364678][T17677] [ 489.364683][T17677] dump_stack_lvl+0x100/0x190 [ 489.364703][T17677] should_fail_ex.cold+0x5/0xa [ 489.364720][T17677] should_failslab+0xc2/0x120 [ 489.364748][T17677] kmem_cache_alloc_noprof+0x92/0x6a0 [ 489.364761][T17677] ? do_getname+0x35/0x390 [ 489.364779][T17677] do_getname+0x35/0x390 [ 489.364796][T17677] user_path_at+0x26/0x60 [ 489.364809][T17677] __x64_sys_mount+0x1fb/0x310 [ 489.364826][T17677] ? __pfx___x64_sys_mount+0x10/0x10 [ 489.364846][T17677] do_syscall_64+0x123/0x790 [ 489.364864][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.364878][T17677] RIP: 0033:0x7fc35f79e159 [ 489.364888][T17677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.364898][T17677] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.364910][T17677] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 489.364917][T17677] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 00002000000001c0 [ 489.364924][T17677] RBP: 00007fc3605ef090 R08: 0000000000000000 R09: 0000000000000000 [ 489.364931][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.364938][T17677] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 489.364952][T17677] [ 489.500438][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3407'. [ 489.508114][T17688] CIFS: Attempting to mount //127.0.0.1/test [ 489.514107][T17688] CIFS: VFS: Error connecting to socket. Aborting operation. [ 489.514157][T17688] CIFS: VFS: cifs_mount failed w/return code = -22 [ 489.552634][T17690] FAULT_INJECTION: forcing a failure. [ 489.552634][T17690] name failslab, interval 1, probability 0, space 0, times 0 [ 489.552656][T17690] CPU: 3 UID: 0 PID: 17690 Comm: syz.2.3408 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.552672][T17690] Tainted: [L]=SOFTLOCKUP [ 489.552676][T17690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.552684][T17690] Call Trace: [ 489.552689][T17690] [ 489.552695][T17690] dump_stack_lvl+0x100/0x190 [ 489.552715][T17690] should_fail_ex.cold+0x5/0xa [ 489.552731][T17690] should_failslab+0xc2/0x120 [ 489.552759][T17690] __kmalloc_noprof+0xfc/0x840 [ 489.552771][T17690] ? asymmetric_key_generate_id+0x7e/0x180 [ 489.552790][T17690] asymmetric_key_generate_id+0x7e/0x180 [ 489.552807][T17690] x509_akid_note_kid+0x100/0x260 [ 489.552820][T17690] asn1_ber_decoder+0x12b3/0x2170 [ 489.552841][T17690] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 489.552859][T17690] ? kasan_save_track+0x14/0x30 [ 489.552871][T17690] ? __kasan_kmalloc+0xaa/0xb0 [ 489.552884][T17690] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 489.552902][T17690] ? x509_cert_parse+0x162/0x910 [ 489.552922][T17690] x509_cert_parse+0x24b/0x910 [ 489.552941][T17690] x509_key_preparse+0x65/0x9c0 [ 489.552955][T17690] asymmetric_key_preparse+0xce/0x1d0 [ 489.552970][T17690] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 489.552986][T17690] __key_create_or_update+0x463/0xe30 [ 489.553002][T17690] ? __pfx___key_create_or_update+0x10/0x10 [ 489.553016][T17690] ? lookup_user_key+0x3f3/0x1300 [ 489.553034][T17690] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 489.553055][T17690] key_create_or_update+0x42/0x60 [ 489.553070][T17690] __do_sys_add_key+0x2e8/0x460 [ 489.553087][T17690] ? __pfx___do_sys_add_key+0x10/0x10 [ 489.553107][T17690] do_syscall_64+0x123/0x790 [ 489.553124][T17690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.553135][T17690] RIP: 0033:0x7fc35f79e159 [ 489.553145][T17690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.553156][T17690] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 489.553168][T17690] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 489.553175][T17690] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 489.553182][T17690] RBP: 00007fc35f83503b R08: ffffffffffffffff R09: 0000000000000000 [ 489.553189][T17690] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 489.553195][T17690] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 489.553212][T17690] [ 489.553245][T17690] X.509: Couldn't decode AuthKeyIdentifier [ 489.947262][T17706] [U] [ 489.947284][T17706] [U] [ 489.947298][T17706] [U] [ 489.947313][T17706] [U] [ 489.947395][T17706] [U] [ 489.947411][T17706] [U] [ 489.947428][T17706] [U] [ 489.947444][T17706] [U] [ 489.947530][T17706] [U] [ 489.947552][T17706] [U] [ 489.947576][T17706] [U] [ 489.947601][T17706] [U] [ 489.947704][T17706] [U] [ 489.947720][T17706] [U] [ 489.947735][T17706] [U] [ 489.947750][T17706] [U] [ 490.717470][T17701] [U] [ 490.794420][ T973] usb 10-1: USB disconnect, device number 33 [ 491.335973][T16269] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 491.337155][T16269] (NULL device *): queue 0 connect admin queue failed (-111). [ 491.337179][T16269] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 491.337194][T16269] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 492.623804][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 492.623822][ T43] audit: type=1800 audit(1789004526.865:100725): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 492.644911][ T43] audit: type=1800 audit(1789004526.885:100726): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 492.669501][ T43] audit: type=1400 audit(1789004526.915:100727): avc: denied { write } for pid=17742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.682567][ T43] audit: type=1800 audit(1789004526.925:100728): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 492.688544][ T43] audit: type=1400 audit(1789004526.925:100729): avc: denied { bind } for pid=17749 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 492.696796][ T43] audit: type=1800 audit(1789004526.945:100730): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 492.720798][ T43] audit: type=1400 audit(1789004526.965:100731): avc: denied { write } for pid=17752 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.735916][T17754] FAULT_INJECTION: forcing a failure. [ 492.735916][T17754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.735938][T17754] CPU: 3 UID: 0 PID: 17754 Comm: syz.3.3422 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.735954][T17754] Tainted: [L]=SOFTLOCKUP [ 492.735958][T17754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 492.735965][T17754] Call Trace: [ 492.735969][T17754] [ 492.735975][T17754] dump_stack_lvl+0x100/0x190 [ 492.735995][T17754] should_fail_ex.cold+0x5/0xa [ 492.736011][T17754] _copy_to_user+0x32/0xd0 [ 492.736024][T17754] copy_siginfo_to_user+0x27/0xc0 [ 492.736039][T17754] x64_setup_rt_frame+0xa03/0xce0 [ 492.736059][T17754] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 492.736080][T17754] arch_do_signal_or_restart+0x5ee/0x7e0 [ 492.736097][T17754] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.736121][T17754] exit_to_user_mode_loop+0x139/0x700 [ 492.736135][T17754] ? rcu_is_watching+0x13/0xc0 [ 492.736151][T17754] do_syscall_64+0x661/0x790 [ 492.736168][T17754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.736180][T17754] RIP: 0033:0x7f3978b9e159 [ 492.736190][T17754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.736202][T17754] RSP: 002b:00007f3979a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.736213][T17754] RAX: 0000000000000001 RBX: 00007f3978e25fa0 RCX: 00007f3978b9e159 [ 492.736220][T17754] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 492.736227][T17754] RBP: 00007f3979a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 492.736234][T17754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.736241][T17754] R13: 00007f3978e26038 R14: 00007f3978e25fa0 R15: 00007fff00847d58 [ 492.736256][T17754] [ 492.743337][ T43] audit: type=1800 audit(1789004526.985:100732): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 492.761516][ T43] audit: type=1400 audit(1789004527.005:100733): avc: denied { watch watch_reads } for pid=17756 comm="syz.2.3423" path="/53/net_prio.prioidx" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 492.783478][ T43] audit: type=1800 audit(1789004527.025:100734): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 492.866770][T15301] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 492.959861][T17781] dlm: no locking on control device [ 493.019228][T15301] usb 10-1: Using ep0 maxpacket: 32 [ 493.020532][T15301] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 493.021983][T15301] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 493.021996][T15301] usb 10-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 493.022006][T15301] usb 10-1: config 0 has no interface number 0 [ 493.022028][T15301] usb 10-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.022325][T17783] netlink: 'syz.3.3434': attribute type 11 has an invalid length. [ 493.026124][T15301] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.026137][T15301] usb 10-1: Product: syz [ 493.026177][T15301] usb 10-1: Manufacturer: syz [ 493.026186][T15301] usb 10-1: SerialNumber: syz [ 493.027607][T15301] usb 10-1: config 0 descriptor?? [ 493.036592][T15301] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input63 [ 493.133879][T17797] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3437'. [ 493.134097][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3437'. [ 493.234755][T15301] usb 10-1: USB disconnect, device number 34 [ 493.316510][T17804] FAULT_INJECTION: forcing a failure. [ 493.316510][T17804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.316531][T17804] CPU: 0 UID: 0 PID: 17804 Comm: syz.2.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.316547][T17804] Tainted: [L]=SOFTLOCKUP [ 493.316551][T17804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.316558][T17804] Call Trace: [ 493.316563][T17804] [ 493.316567][T17804] dump_stack_lvl+0x100/0x190 [ 493.316597][T17804] should_fail_ex.cold+0x5/0xa [ 493.316614][T17804] _copy_from_iter+0x1f4/0x1690 [ 493.316631][T17804] ? __asan_memset+0x23/0x50 [ 493.316642][T17804] ? __pfx__copy_from_iter+0x10/0x10 [ 493.316653][T17804] ? __pfx___alloc_skb+0x10/0x10 [ 493.316674][T17804] netlink_sendmsg+0x808/0xda0 [ 493.316689][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.316703][T17804] ? selinux_socket_sendmsg+0x198/0x2f0 [ 493.316723][T17804] ____sys_sendmsg+0xa4d/0xbe0 [ 493.316738][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.316751][T17804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.316770][T17804] ? lock_acquire+0x1d1/0x380 [ 493.316782][T17804] ? get_pid_task+0x2a/0x250 [ 493.316798][T17804] ___sys_sendmsg+0x190/0x1e0 [ 493.316816][T17804] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.316832][T17804] ? get_pid_task+0x106/0x250 [ 493.316852][T17804] ? find_held_lock+0x2b/0x80 [ 493.316882][T17804] __sys_sendmsg+0x160/0x210 [ 493.316895][T17804] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.316915][T17804] do_syscall_64+0x123/0x790 [ 493.316935][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.316947][T17804] RIP: 0033:0x7fc35f79e159 [ 493.316957][T17804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.316968][T17804] RSP: 002b:00007fc3605ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.316979][T17804] RAX: ffffffffffffffda RBX: 00007fc35fa25fa0 RCX: 00007fc35f79e159 [ 493.316986][T17804] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 493.316993][T17804] RBP: 00007fc3605ef090 R08: 0000000000000000 R09: 0000000000000000 [ 493.317000][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.317006][T17804] R13: 00007fc35fa26038 R14: 00007fc35fa25fa0 R15: 00007ffec414e1f8 [ 493.317020][T17804] [ 493.415959][T16259] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 493.416197][T16259] (NULL device *): queue 0 connect admin queue failed (-111). [ 493.416210][T16259] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 493.416220][T16259] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 493.992715][T17816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3445'. [ 494.109444][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 494.129507][T17834] macsec1: entered promiscuous mode [ 494.129522][T17834] batadv0: entered promiscuous mode [ 494.129671][T17834] macsec1: entered allmulticast mode [ 494.129681][T17834] batadv0: entered allmulticast mode [ 494.130370][T17834] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 494.134085][T17834] batadv0: left allmulticast mode [ 494.134099][T17834] batadv0: left promiscuous mode [ 494.186412][T17838] overlayfs: invalid origin (0000) [ 494.346701][T17852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 494.396305][ T973] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 494.566294][ T973] usb 10-1: Using ep0 maxpacket: 32 [ 494.568616][ T973] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 494.569933][ T973] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 494.569953][ T973] usb 10-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 494.569970][ T973] usb 10-1: config 0 has no interface number 0 [ 494.569997][ T973] usb 10-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.572240][ T973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.572259][ T973] usb 10-1: Product: syz [ 494.572272][ T973] usb 10-1: Manufacturer: syz [ 494.572285][ T973] usb 10-1: SerialNumber: syz [ 494.575030][ T973] usb 10-1: config 0 descriptor?? [ 494.588742][ T973] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input64 [ 494.804983][ T973] usb 10-1: USB disconnect, device number 35 [ 494.964942][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3461'. [ 494.964964][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3461'. [ 494.964984][T17863] netlink: 'syz.7.3461': attribute type 15 has an invalid length. [ 494.964996][T17863] netlink: 'syz.7.3461': attribute type 18 has an invalid length. [ 495.132988][T17884] nvmet: adding nsid 1 to subsystem testsubsys [ 495.177511][ T67] Bluetooth: hci0: command tx timeout [ 495.233877][T16262] IPVS: starting estimator thread 0... [ 495.258021][T17899] openvswitch: netlink: Message has 8 unknown bytes. [ 495.275645][T17901] kernel read not supported for file /policy (pid: 17901 comm: syz.7.3474) [ 495.338437][T17897] IPVS: using max 43 ests per chain, 103200 per kthread [ 495.495964][T16266] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 495.499336][T16266] (NULL device *): queue 0 connect admin queue failed (-111). [ 495.499472][T16266] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 495.499491][T16266] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 495.648557][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 495.743947][T17914] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3479'. [ 495.905267][T17920] tipc: Started in network mode [ 495.905278][T17920] tipc: Node identity , cluster identity 4711 [ 495.905285][T17920] tipc: Failed to obtain node identity [ 495.905297][T17920] tipc: Enabling of bearer rejected, failed to enable media [ 496.153370][T17930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17930 comm=syz.2.3484 [ 496.191843][T17932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.372280][T17941] loop5: detected capacity change from 0 to 7 [ 496.378137][T17941] loop5: [ 496.378151][T17941] loop5: partition table partially beyond EOD, truncated [ 497.575961][T16257] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 497.576122][T16257] (NULL device *): queue 0 connect admin queue failed (-111). [ 497.576142][T16257] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 497.576158][T16257] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 497.937329][ T43] kauditd_printk_skb: 5122 callbacks suppressed [ 497.937346][ T43] audit: type=1800 audit(1789004532.185:105857): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 497.960052][ T43] audit: type=1800 audit(1789004532.205:105858): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 497.988046][ T43] audit: type=1800 audit(1789004532.235:105859): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 498.023454][T17961] syzkaller0: entered promiscuous mode [ 498.023468][T17961] syzkaller0: entered allmulticast mode [ 498.134296][T17956] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3491'. [ 498.158610][ T43] audit: type=1800 audit(1789004532.405:105860): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 498.215669][ T43] audit: type=1800 audit(1789004532.455:105861): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 498.275289][ T43] audit: type=1800 audit(1789004532.515:105862): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 498.336582][T17968] loop0: detected capacity change from 1 to 0 [ 498.405964][ T25] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 498.556525][ T25] usb 10-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 498.557445][ T25] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.557472][ T25] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.557495][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 498.557521][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.562274][ T43] audit: type=1800 audit(1789004532.805:105863): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260870 res=0 errno=0 [ 498.562379][ T25] usb 10-1: config 0 descriptor?? [ 498.576297][ T43] audit: type=1800 audit(1789004532.825:105864): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=260899 res=0 errno=0 [ 498.577396][ T43] audit: type=1800 audit(1789004532.825:105865): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=260877 res=0 errno=0 [ 498.578239][ T43] audit: type=1800 audit(1789004532.825:105866): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=260878 res=0 errno=0 [ 498.772923][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.773307][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.119120][T17968] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 499.223826][T17979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'. [ 499.406825][T17992] tipc: Enabling of bearer rejected, failed to enable media [ 499.460297][T17994] input: syz0 as /devices/virtual/input/input65 [ 499.658986][T16266] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 499.659057][T16266] (NULL device *): queue 0 connect admin queue failed (-111). [ 499.659068][T16266] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 499.659078][T16266] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 500.046758][T18035] tipc: Enabling of bearer rejected, failed to enable media [ 500.145874][ T35] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 500.305868][ T35] usb 12-1: Using ep0 maxpacket: 32 [ 500.375968][ T67] Bluetooth: hci2: command 0x0401 tx timeout [ 500.516370][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.516647][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.719171][ T35] usb 12-1: unable to get BOS descriptor or descriptor too short [ 500.719200][ T35] usb 12-1: New USB device found, idVendor=2694, idProduct=ca0e, bcdDevice= 6.41 [ 500.719218][ T35] usb 12-1: too many configurations: 120, using maximum allowed: 8 [ 500.720391][ T35] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 500.720408][ T35] usb 12-1: can't read configurations, error -71 [ 501.186305][ T65] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 501.203258][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 501.203316][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 501.204449][ T25] usb 10-1: USB disconnect, device number 36 [ 501.366384][ T65] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.367453][ T65] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 501.367469][ T65] usb 7-1: config 0 interface 0 has no altsetting 0 [ 501.369835][ T65] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 501.369853][ T65] usb 7-1: Product: syz [ 501.369863][ T65] usb 7-1: Manufacturer: syz [ 501.369873][ T65] usb 7-1: SerialNumber: syz [ 501.372561][ T65] usb 7-1: config 0 descriptor?? [ 501.373288][T18057] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 501.382852][ T65] usb 7-1: selecting invalid altsetting 0 [ 501.403228][T18063] kvm [18062]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 501.528535][T18070] loop3: detected capacity change from 0 to 7 [ 501.531790][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.532083][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.532747][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.532995][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.533733][T10001] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.735927][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.743534][ T58] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 501.743549][ T58] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 501.749320][T16273] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 501.755936][T16273] (NULL device *): queue 0 connect admin queue failed (-111). [ 501.755955][T16273] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 501.755965][T16273] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 501.800650][ T35] usb 7-1: USB disconnect, device number 12 [ 502.221804][T18081] FAULT_INJECTION: forcing a failure. [ 502.221804][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 502.221827][T18081] CPU: 3 UID: 0 PID: 18081 Comm: syz.5.3524 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.221842][T18081] Tainted: [L]=SOFTLOCKUP [ 502.221846][T18081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.221853][T18081] Call Trace: [ 502.221857][T18081] [ 502.221862][T18081] dump_stack_lvl+0x100/0x190 [ 502.221896][T18081] should_fail_ex.cold+0x5/0xa [ 502.221913][T18081] should_failslab+0xc2/0x120 [ 502.221932][T18081] __kmalloc_cache_node_noprof+0x94/0x720 [ 502.221949][T18081] ? __css_rstat_updated+0x1ce/0x590 [ 502.221964][T18081] ? __get_vm_area_node+0x124/0x350 [ 502.221981][T18081] __get_vm_area_node+0x124/0x350 [ 502.221997][T18081] __vmalloc_node_range_noprof+0x268/0x1420 [ 502.222012][T18081] ? vhost_task_create+0x1db/0x370 [ 502.222030][T18081] ? lock_acquire+0x1d1/0x380 [ 502.222041][T18081] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 502.222060][T18081] ? find_held_lock+0x2b/0x80 [ 502.222075][T18081] ? rcu_read_unlock+0x17/0x60 [ 502.222094][T18081] ? vhost_task_create+0x1db/0x370 [ 502.222114][T18081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 502.222131][T18081] ? rcu_is_watching+0x13/0xc0 [ 502.222146][T18081] ? trace_kmem_cache_alloc+0xdd/0x100 [ 502.222162][T18081] ? vhost_task_create+0x1db/0x370 [ 502.222179][T18081] __vmalloc_node_noprof+0xad/0xf0 [ 502.222193][T18081] ? vhost_task_create+0x1db/0x370 [ 502.222212][T18081] copy_process+0x803/0x8370 [ 502.222232][T18081] ? __pfx_copy_process+0x10/0x10 [ 502.222245][T18081] ? kasan_save_track+0x14/0x30 [ 502.222257][T18081] ? __kasan_kmalloc+0xaa/0xb0 [ 502.222270][T18081] ? lockdep_init_map_type+0x5c/0x250 [ 502.222283][T18081] ? lockdep_init_map_type+0x5c/0x250 [ 502.222296][T18081] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 502.222315][T18081] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 502.222330][T18081] vhost_task_create+0x1db/0x370 [ 502.222348][T18081] ? __pfx_vhost_task_create+0x10/0x10 [ 502.222370][T18081] ? __pfx_vhost_task_fn+0x10/0x10 [ 502.222388][T18081] ? register_lock_class+0x3f/0x7b0 [ 502.222400][T18081] ? rcu_is_watching+0x13/0xc0 [ 502.222414][T18081] ? trace_contention_end+0x126/0x160 [ 502.222430][T18081] kvm_mmu_post_init_vm+0x1b3/0x360 [ 502.222444][T18081] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 502.222459][T18081] ? __pfx___mutex_lock+0x10/0x10 [ 502.222478][T18081] ? kasan_quarantine_put+0x104/0x240 [ 502.222492][T18081] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 502.222505][T18081] ? lock_acquire+0x1d1/0x380 [ 502.222517][T18081] ? do_raw_write_lock+0x11e/0x260 [ 502.222531][T18081] ? find_held_lock+0x2b/0x80 [ 502.222546][T18081] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 502.222561][T18081] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 502.222579][T18081] kvm_vcpu_ioctl+0x730/0x1700 [ 502.222596][T18081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.222611][T18081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.222625][T18081] ? do_vfs_ioctl+0x226/0x13e0 [ 502.222637][T18081] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 502.222647][T18081] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 502.222661][T18081] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 502.222676][T18081] ? __fget_files+0x34/0x3d0 [ 502.222695][T18081] ? selinux_file_ioctl+0x13b/0x290 [ 502.222707][T18081] ? selinux_file_ioctl+0xb6/0x290 [ 502.222719][T18081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.222735][T18081] __x64_sys_ioctl+0x18e/0x210 [ 502.222748][T18081] do_syscall_64+0x123/0x790 [ 502.222764][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.222776][T18081] RIP: 0033:0x7f115c39e159 [ 502.222786][T18081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.222797][T18081] RSP: 002b:00007f115d31d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.222808][T18081] RAX: ffffffffffffffda RBX: 00007f115c625fa0 RCX: 00007f115c39e159 [ 502.222816][T18081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 502.222822][T18081] RBP: 00007f115d31d090 R08: 0000000000000000 R09: 0000000000000000 [ 502.222829][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.222835][T18081] R13: 00007f115c626038 R14: 00007f115c625fa0 R15: 00007ffdd405d7c8 [ 502.222850][T18081] [ 502.222856][T18081] warn_alloc: 1 callbacks suppressed [ 502.222907][T18081] syz.5.3524: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 502.226893][T18081] CPU: 3 UID: 0 PID: 18081 Comm: syz.5.3524 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.226911][T18081] Tainted: [L]=SOFTLOCKUP [ 502.226915][T18081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.226922][T18081] Call Trace: [ 502.226927][T18081] [ 502.226932][T18081] dump_stack_lvl+0x100/0x190 [ 502.226953][T18081] warn_alloc.cold+0x9e/0xb2 [ 502.226967][T18081] ? __pfx_warn_alloc+0x10/0x10 [ 502.226984][T18081] ? __kasan_kmalloc+0x8a/0xb0 [ 502.227004][T18081] ? __get_vm_area_node+0x22b/0x350 [ 502.227022][T18081] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 502.227037][T18081] ? lock_acquire+0x1d1/0x380 [ 502.227049][T18081] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 502.227070][T18081] ? find_held_lock+0x2b/0x80 [ 502.227086][T18081] ? rcu_read_unlock+0x17/0x60 [ 502.227105][T18081] ? vhost_task_create+0x1db/0x370 [ 502.227127][T18081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 502.227145][T18081] ? rcu_is_watching+0x13/0xc0 [ 502.227161][T18081] ? trace_kmem_cache_alloc+0xdd/0x100 [ 502.227178][T18081] ? vhost_task_create+0x1db/0x370 [ 502.227195][T18081] __vmalloc_node_noprof+0xad/0xf0 [ 502.227211][T18081] ? vhost_task_create+0x1db/0x370 [ 502.227230][T18081] copy_process+0x803/0x8370 [ 502.227253][T18081] ? __pfx_copy_process+0x10/0x10 [ 502.227266][T18081] ? kasan_save_track+0x14/0x30 [ 502.227279][T18081] ? __kasan_kmalloc+0xaa/0xb0 [ 502.227292][T18081] ? lockdep_init_map_type+0x5c/0x250 [ 502.227306][T18081] ? lockdep_init_map_type+0x5c/0x250 [ 502.227320][T18081] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 502.227339][T18081] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 502.227356][T18081] vhost_task_create+0x1db/0x370 [ 502.227375][T18081] ? __pfx_vhost_task_create+0x10/0x10 [ 502.227399][T18081] ? __pfx_vhost_task_fn+0x10/0x10 [ 502.227418][T18081] ? register_lock_class+0x3f/0x7b0 [ 502.227431][T18081] ? rcu_is_watching+0x13/0xc0 [ 502.227446][T18081] ? trace_contention_end+0x126/0x160 [ 502.227463][T18081] kvm_mmu_post_init_vm+0x1b3/0x360 [ 502.227478][T18081] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 502.227493][T18081] ? __pfx___mutex_lock+0x10/0x10 [ 502.227509][T18081] ? kasan_quarantine_put+0x104/0x240 [ 502.227524][T18081] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 502.227538][T18081] ? lock_acquire+0x1d1/0x380 [ 502.227550][T18081] ? do_raw_write_lock+0x11e/0x260 [ 502.227565][T18081] ? find_held_lock+0x2b/0x80 [ 502.227580][T18081] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 502.227595][T18081] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 502.227613][T18081] kvm_vcpu_ioctl+0x730/0x1700 [ 502.227629][T18081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.227645][T18081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.227658][T18081] ? do_vfs_ioctl+0x226/0x13e0 [ 502.227670][T18081] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 502.227679][T18081] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 502.227694][T18081] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 502.227709][T18081] ? __fget_files+0x34/0x3d0 [ 502.227728][T18081] ? selinux_file_ioctl+0x13b/0x290 [ 502.227740][T18081] ? selinux_file_ioctl+0xb6/0x290 [ 502.227752][T18081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.227768][T18081] __x64_sys_ioctl+0x18e/0x210 [ 502.227780][T18081] do_syscall_64+0x123/0x790 [ 502.227796][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.227808][T18081] RIP: 0033:0x7f115c39e159 [ 502.227818][T18081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.227829][T18081] RSP: 002b:00007f115d31d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.227840][T18081] RAX: ffffffffffffffda RBX: 00007f115c625fa0 RCX: 00007f115c39e159 [ 502.227847][T18081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 502.227854][T18081] RBP: 00007f115d31d090 R08: 0000000000000000 R09: 0000000000000000 [ 502.227860][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.227867][T18081] R13: 00007f115c626038 R14: 00007f115c625fa0 R15: 00007ffdd405d7c8 [ 502.227887][T18081] [ 502.227892][T18081] Mem-Info: [ 502.227897][T18081] active_anon:4865 inactive_anon:11598 isolated_anon:0 [ 502.227897][T18081] active_file:21627 inactive_file:26654 isolated_file:0 [ 502.227897][T18081] unevictable:1000 dirty:31 writeback:0 [ 502.227897][T18081] slab_reclaimable:8780 slab_unreclaimable:80758 [ 502.227897][T18081] mapped:26942 shmem:1634 pagetables:1946 [ 502.227897][T18081] sec_pagetables:317 bounce:0 [ 502.227897][T18081] kernel_misc_reclaimable:0 [ 502.227897][T18081] free:417749 free_pcp:14431 free_cma:0 [ 502.227924][T18081] Node 0 active_anon:19460kB inactive_anon:46328kB active_file:86388kB inactive_file:106432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66780kB dirty:124kB writeback:0kB shmem:2520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17184kB pagetables:7576kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 502.227951][T18081] Node 1 active_anon:0kB inactive_anon:64kB active_file:120kB inactive_file:184kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:40988kB dirty:0kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:208kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 502.227977][T18081] Node 0 DMA free:6664kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:104kB free_cma:0kB [ 502.228006][T18081] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 502.228025][T18081] Node 0 DMA32 free:168932kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19460kB inactive_anon:46296kB active_file:86388kB inactive_file:106432kB unevictable:0kB writepending:124kB zspages:608kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:51276kB local_pcp:23016kB free_cma:0kB [ 502.228055][T18081] lowmem_reserve[]: 0 0 0 0 0 [ 502.228073][T18081] Node 1 Normal free:1495400kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:64kB active_file:120kB inactive_file:184kB unevictable:4000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6212kB local_pcp:0kB free_cma:0kB [ 502.228102][T18081] lowmem_reserve[]: 0 0 0 0 0 [ 502.228120][T18081] Node 0 DMA: 18*4kB (UM) 18*8kB (UME) 17*16kB (UM) 17*32kB (UME) 12*64kB (UME) 4*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 1*2048kB (U) 0*4096kB = 6664kB [ 502.228224][T18081] Node 0 DMA32: 169*4kB (ME) 734*8kB (UME) 552*16kB (UME) 313*32kB (UME) 357*64kB (UME) 120*128kB (UME) 53*256kB (UME) 29*512kB (UME) 45*1024kB (UM) 13*2048kB (UM) 1*4096kB (M) = 168820kB [ 502.228347][T18081] Node 1 Normal: 109*4kB (UME) 87*8kB (UME) 80*16kB (UME) 78*32kB (UME) 61*64kB (UME) 56*128kB (UME) 35*256kB (UME) 26*512kB (UME) 17*1024kB (UM) 11*2048kB (UME) 346*4096kB (UM) = 1495404kB [ 502.228432][T18081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.228441][T18081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 502.228450][T18081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.228458][T18081] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 502.228466][T18081] 49913 total pagecache pages [ 502.228470][T18081] 4 pages in swap cache [ 502.228474][T18081] Free swap = 123788kB [ 502.228478][T18081] Total swap = 124996kB [ 502.228482][T18081] 1048443 pages RAM [ 502.228486][T18081] 0 pages HighMem/MovableOnly [ 502.228490][T18081] 285903 pages reserved [ 502.228493][T18081] 0 pages cma reserved [ 502.436096][T18084] netlink: 'syz.5.3525': attribute type 1 has an invalid length. [ 503.335968][ T43] kauditd_printk_skb: 258 callbacks suppressed [ 503.335981][ T43] audit: type=1800 audit(1789004537.575:106125): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 503.355407][ T43] audit: type=1400 audit(1789004537.595:106126): avc: denied { execmem } for pid=18089 comm="syz.2.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 503.376654][ T43] audit: type=1400 audit(1789004537.625:106127): avc: denied { node_bind } for pid=18089 comm="syz.2.3527" saddr=127.0.0.1 src=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 503.380756][ T43] audit: type=1400 audit(1789004537.625:106128): avc: denied { mounton } for pid=18089 comm="syz.2.3527" path="/88/debug" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 503.380785][ T43] audit: type=1400 audit(1789004537.625:106129): avc: denied { mount } for pid=18089 comm="syz.2.3527" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 503.382106][T18090] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 503.382402][ T43] audit: type=1400 audit(1789004537.625:106130): avc: denied { search } for pid=18089 comm="syz.2.3527" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 503.382524][ T43] audit: type=1400 audit(1789004537.625:106131): avc: denied { search } for pid=18089 comm="syz.2.3527" name="events" dev="tracefs" ino=3819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 503.383181][ T43] audit: type=1400 audit(1789004537.625:106132): avc: denied { search } for pid=18089 comm="syz.2.3527" name="sched" dev="tracefs" ino=20603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 503.383205][ T43] audit: type=1400 audit(1789004537.625:106133): avc: denied { search } for pid=18089 comm="syz.2.3527" name="sched_switch" dev="tracefs" ino=20045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 503.383226][ T43] audit: type=1400 audit(1789004537.625:106134): avc: denied { write search } for pid=18089 comm="syz.2.3527" name="sched_switch" dev="tracefs" ino=20045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 503.574541][T18096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=18096 comm=syz.2.3528 [ 503.825634][ T67] Bluetooth: hci2: command 0x0401 tx timeout [ 503.826117][T16263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 503.830312][ T58] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 503.830336][ T58] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 503.831012][T16263] (NULL device *): queue 0 connect admin queue failed (-111). [ 503.831036][T16263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 503.831053][T16263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 504.238906][T18084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.248726][T18088] bond1: (slave geneve3): making interface the new active one [ 504.249546][T18088] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 504.332857][T18108] input: syz1 as /devices/virtual/input/input67 [ 504.368483][T18110] netlink: 'syz.5.3532': attribute type 29 has an invalid length. [ 504.370067][T18111] netlink: 'syz.5.3532': attribute type 29 has an invalid length. [ 504.370313][T18110] netlink: 'syz.5.3532': attribute type 29 has an invalid length. [ 504.460021][T18114] block nbd0: Receive control failed (result -32) [ 504.517183][T18120] loop0: detected capacity change from 0 to 1 [ 504.587494][T18126] [ 504.588714][T18126] ====================================================== [ 504.591034][T18126] WARNING: possible circular locking dependency detected [ 504.593421][T18126] syzkaller #0 Tainted: G L [ 504.595325][T18126] ------------------------------------------------------ [ 504.597456][T18126] syz.7.3537/18126 is trying to acquire lock: [ 504.599276][T18126] ffff8880282ca460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 504.602086][T18126] [ 504.602086][T18126] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.604909][T18126] ffff888058a40068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 504.608480][T18126] [ 504.608480][T18126] which lock already depends on the new lock. [ 504.608480][T18126] [ 504.612320][T18126] [ 504.612320][T18126] the existing dependency chain (in reverse order) is: [ 504.615064][T18126] [ 504.615064][T18126] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 504.617347][T18126] lock_acquire+0x1d1/0x380 [ 504.618898][T18126] __mutex_lock+0x1a4/0x1bd0 [ 504.620520][T18126] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 504.622406][T18126] configfs_write_iter+0x302/0x4e0 [ 504.624150][T18126] vfs_write+0x6af/0x1050 [ 504.625738][T18126] ksys_write+0x12a/0x250 [ 504.627236][T18126] do_syscall_64+0x123/0x790 [ 504.628802][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.630793][T18126] [ 504.630793][T18126] -> #2 (&p->frag_sem){++++}-{4:4}: [ 504.633004][T18126] lock_acquire+0x1d1/0x380 [ 504.634593][T18126] down_read+0x99/0x4c0 [ 504.636062][T18126] __configfs_open_file+0xe8/0x9c0 [ 504.637788][T18126] do_dentry_open+0x6ab/0x14d0 [ 504.639364][T18126] vfs_open+0x82/0x3f0 [ 504.640803][T18126] dentry_open+0x71/0xd0 [ 504.642282][T18126] ima_calc_file_hash+0xe1/0x380 [ 504.643929][T18126] ima_collect_measurement+0x94f/0xb30 [ 504.645758][T18126] process_measurement+0xdfe/0x2350 [ 504.647497][T18126] ima_file_check+0xc3/0x110 [ 504.649038][T18126] security_file_post_open+0xc4/0x210 [ 504.650863][T18126] path_openat+0x5cd/0x2440 [ 504.652352][T18126] do_file_open+0x20e/0x430 [ 504.653902][T18126] do_sys_openat2+0x10f/0x1e0 [ 504.655489][T18126] __x64_sys_openat+0x12d/0x210 [ 504.657128][T18126] do_syscall_64+0x123/0x790 [ 504.658707][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.660666][T18126] [ 504.660666][T18126] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 504.663218][T18126] lock_acquire+0x1d1/0x380 [ 504.664731][T18126] __mutex_lock+0x1a4/0x1bd0 [ 504.666305][T18126] process_measurement+0x5ab/0x2350 [ 504.668007][T18126] ima_file_check+0xc3/0x110 [ 504.669566][T18126] security_file_post_open+0xc4/0x210 [ 504.671375][T18126] path_openat+0x5cd/0x2440 [ 504.672912][T18126] do_file_open+0x20e/0x430 [ 504.674461][T18126] do_sys_openat2+0x10f/0x1e0 [ 504.676080][T18126] __x64_sys_openat+0x12d/0x210 [ 504.677694][T18126] do_syscall_64+0x123/0x790 [ 504.679231][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.681315][T18126] [ 504.681315][T18126] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 504.683532][T18126] check_prev_add+0xeb/0xe60 [ 504.685085][T18126] __lock_acquire+0x1528/0x1f40 [ 504.686704][T18126] lock_acquire+0x1d1/0x380 [ 504.688217][T18126] mnt_want_write+0x6f/0x420 [ 504.689748][T18126] lookup_open+0x150/0x1990 [ 504.691324][T18126] path_openat+0xa2c/0x2440 [ 504.692865][T18126] do_file_open+0x20e/0x430 [ 504.694611][T18126] file_open_name+0x1c3/0x3e0 [ 504.696330][T18126] filp_open+0x2e/0x50 [ 504.697739][T18126] nvmet_file_ns_enable+0x95/0x420 [ 504.699436][T18126] nvmet_ns_enable+0x43b/0x650 [ 504.701037][T18126] nvmet_ns_enable_store+0x11e/0x160 [ 504.702784][T18126] configfs_write_iter+0x302/0x4e0 [ 504.704498][T18126] vfs_write+0x6af/0x1050 [ 504.705997][T18126] ksys_write+0x12a/0x250 [ 504.707460][T18126] do_syscall_64+0x123/0x790 [ 504.709009][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.710892][T18126] [ 504.710892][T18126] other info that might help us debug this: [ 504.710892][T18126] [ 504.713657][T18126] Chain exists of: [ 504.713657][T18126] sb_writers#6 --> &p->frag_sem --> &subsys->lock [ 504.713657][T18126] [ 504.717283][T18126] Possible unsafe locking scenario: [ 504.717283][T18126] [ 504.719445][T18126] CPU0 CPU1 [ 504.721029][T18126] ---- ---- [ 504.722637][T18126] lock(&subsys->lock); [ 504.723919][T18126] lock(&p->frag_sem); [ 504.725914][T18126] lock(&subsys->lock); [ 504.727905][T18126] rlock(sb_writers#6); [ 504.729194][T18126] [ 504.729194][T18126] *** DEADLOCK *** [ 504.729194][T18126] [ 504.731614][T18126] locks held by syz.7.3537/18126: 6, last CPU#0: [ 504.733481][T18126] #0: ffff88804160d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 504.736168][T18126] #1: ffff8880241a2460 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 504.738852][T18126] #2: ffff88804afd9a80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 504.741808][T18126] #3: ffff888033f7fe70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 504.744670][T18126] #4: ffffffff8ff58d28 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 504.747765][T18126] #5: ffff888058a40068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 504.750565][T18126] [ 504.750565][T18126] stack backtrace: [ 504.752346][T18126] CPU: 0 UID: 0 PID: 18126 Comm: syz.7.3537 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.755613][T18126] Tainted: [L]=SOFTLOCKUP [ 504.756935][T18126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.759930][T18126] Call Trace: [ 504.760942][T18126] [ 504.761854][T18126] dump_stack_lvl+0x100/0x190 [ 504.763276][T18126] print_circular_bug.cold+0x178/0x1be [ 504.764925][T18126] check_noncircular+0x146/0x160 [ 504.766459][T18126] check_prev_add+0xeb/0xe60 [ 504.767879][T18126] __lock_acquire+0x1528/0x1f40 [ 504.769355][T18126] lock_acquire+0x1d1/0x380 [ 504.770751][T18126] ? lookup_open+0x150/0x1990 [ 504.772177][T18126] ? __pfx___might_resched+0x10/0x10 [ 504.773786][T18126] ? find_held_lock+0x2b/0x80 [ 504.775254][T18126] mnt_want_write+0x6f/0x420 [ 504.776676][T18126] ? lookup_open+0x150/0x1990 [ 504.778140][T18126] lookup_open+0x150/0x1990 [ 504.779545][T18126] path_openat+0xa2c/0x2440 [ 504.780934][T18126] ? __pfx_path_openat+0x10/0x10 [ 504.782420][T18126] ? kasan_save_stack+0x3f/0x50 [ 504.783899][T18126] ? kasan_save_stack+0x30/0x50 [ 504.785378][T18126] ? kasan_save_track+0x14/0x30 [ 504.786853][T18126] ? __kasan_slab_alloc+0x89/0x90 [ 504.788573][T18126] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 504.790270][T18126] ? do_getname_kernel+0x5d/0x250 [ 504.791794][T18126] ? filp_open+0x1d/0x50 [ 504.793033][T18126] ? nvmet_file_ns_enable+0x95/0x420 [ 504.794667][T18126] do_file_open+0x20e/0x430 [ 504.796056][T18126] ? __pfx_do_file_open+0x10/0x10 [ 504.797569][T18126] ? rcu_is_watching+0x13/0xc0 [ 504.799045][T18126] file_open_name+0x1c3/0x3e0 [ 504.800475][T18126] ? __pfx_file_open_name+0x10/0x10 [ 504.802020][T18126] ? do_getname_kernel+0x5d/0x250 [ 504.803557][T18126] ? __asan_memcpy+0x3c/0x60 [ 504.804969][T18126] ? do_getname_kernel+0x1be/0x250 [ 504.806526][T18126] filp_open+0x2e/0x50 [ 504.807772][T18126] nvmet_file_ns_enable+0x95/0x420 [ 504.809331][T18126] nvmet_ns_enable+0x43b/0x650 [ 504.810797][T18126] nvmet_ns_enable_store+0x11e/0x160 [ 504.812390][T18126] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 504.814212][T18126] ? configfs_write_iter+0x388/0x4e0 [ 504.815825][T18126] configfs_write_iter+0x302/0x4e0 [ 504.817388][T18126] vfs_write+0x6af/0x1050 [ 504.818732][T18126] ? __pfx_configfs_write_iter+0x10/0x10 [ 504.820425][T18126] ? __pfx_vfs_write+0x10/0x10 [ 504.821904][T18126] ? find_held_lock+0x2b/0x80 [ 504.823377][T18126] ksys_write+0x12a/0x250 [ 504.824729][T18126] ? __pfx_ksys_write+0x10/0x10 [ 504.826218][T18126] do_syscall_64+0x123/0x790 [ 504.827637][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.829416][T18126] RIP: 0033:0x7f2c4d99e159 [ 504.830713][T18126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.836430][T18126] RSP: 002b:00007f2c4e819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 504.838882][T18126] RAX: ffffffffffffffda RBX: 00007f2c4dc25fa0 RCX: 00007f2c4d99e159 [ 504.841252][T18126] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004 [ 504.843843][T18126] RBP: 00007f2c4da3503b R08: 0000000000000000 R09: 0000000000000000 [ 504.846261][T18126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.848624][T18126] R13: 00007f2c4dc26038 R14: 00007f2c4dc25fa0 R15: 00007ffcfc7c93c8 [ 504.851027][T18126] [ 504.857065][T18126] nvmet: failed to open file ./file0: (-2) [ 505.905567][ T1185] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 505.906316][ T1185] (NULL device *): queue 0 connect admin queue failed (-111). [ 505.906332][ T1185] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 505.906342][ T1185] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 506.375388][ T58] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 506.375456][ T58] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 506.450849][T16556] vhci_hcd: connection reset by peer [ 506.466955][ T5799] vhci_hcd vhci_hcd.7: stop threads [ 506.466980][ T5799] vhci_hcd vhci_hcd.7: release socket [ 506.467092][ T5799] vhci_hcd vhci_hcd.7: disconnect device [ 506.535496][ T1589] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 506.830754][ T9375] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.832462][ T9375] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.842694][ T5826] bridge_slave_1: left allmulticast mode [ 506.842714][ T5826] bridge_slave_1: left promiscuous mode [ 506.842834][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.844731][ T5826] bridge_slave_0: left allmulticast mode [ 506.844750][ T5826] bridge_slave_0: left promiscuous mode [ 506.844853][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.918734][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.919476][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.919810][ T5826] bond0 (unregistering): Released all slaves [ 506.925289][ T9375] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.935377][ T9375] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.973637][ T5826] tipc: Left network mode [ 507.035337][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 507.171478][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 507.174248][ T5826] hsr_slave_0: left promiscuous mode [ 507.174562][ T5826] hsr_slave_1: left promiscuous mode [ 507.174797][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.175203][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.221531][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 507.223458][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 507.377340][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 507.483023][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 507.504281][ T5826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.558111][ T5826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.597976][ T5826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.668688][ T5826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.735015][ T9375] netdevsim netdevsim3 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.738017][ T9375] netdevsim netdevsim3 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.753650][ T5826] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.775397][ T9375] netdevsim netdevsim3 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.775422][ T9375] netdevsim netdevsim3 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.801361][ T5826] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.843114][ T5447] 8021q: adding VLAN 0 to HW filter on device eth26 [ 507.852974][ T5826] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.889923][ T5826] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.956412][ T5826] bridge_slave_1: left allmulticast mode [ 507.956436][ T5826] bridge_slave_1: left promiscuous mode [ 507.956568][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.957990][ T5826] bridge_slave_0: left allmulticast mode [ 507.958007][ T5826] bridge_slave_0: left promiscuous mode [ 507.958114][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.970537][ T5826] bridge_slave_1: left allmulticast mode [ 507.970551][ T5826] bridge_slave_1: left promiscuous mode [ 507.970650][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.975211][T16274] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 507.975526][T16274] (NULL device *): queue 0 connect admin queue failed (-111). [ 507.975544][T16274] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 507.975559][T16274] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 507.979350][ T5826] bridge_slave_0: left allmulticast mode [ 507.979368][ T5826] bridge_slave_0: left promiscuous mode [ 507.979505][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.050264][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.051151][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.051650][ T5826] bond0 (unregistering): Released all slaves [ 508.068008][ T5826] bond1 (unregistering): (slave geneve3): Releasing active interface [ 508.079896][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.080941][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.081515][ T5826] bond0 (unregistering): Released all slaves [ 508.082754][ T5826] bond1 (unregistering): Released all slaves [ 508.085772][ T5447] 8021q: adding VLAN 0 to HW filter on device eth27 [ 508.086152][T17108] netdevsim netdevsim5 eth30: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.086178][T17108] netdevsim netdevsim5 eth33: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.105459][ T9375] netdevsim netdevsim5 eth31: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.105491][ T9375] netdevsim netdevsim5 eth32: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.216724][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.216750][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.218428][ T5447] 8021q: adding VLAN 0 to HW filter on device eth28 [ 508.350623][ T43] kauditd_printk_skb: 161 callbacks suppressed [ 508.350644][ T43] audit: type=1400 audit(1789004542.595:106296): avc: denied { write } for pid=18189 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.383710][ T5826] hsr_slave_0: left promiscuous mode [ 508.384156][ T5826] hsr_slave_1: left promiscuous mode [ 508.384523][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.384537][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.386253][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.386267][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.397287][ T5826] hsr_slave_0: left promiscuous mode [ 508.400356][ T5826] hsr_slave_1: left promiscuous mode [ 508.400685][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.400697][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.403492][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.403502][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.411126][ T5826] veth1_macvtap: left promiscuous mode [ 508.411146][ T5826] veth0_macvtap: left promiscuous mode [ 508.411177][ T5826] veth1_vlan: left promiscuous mode [ 508.411198][ T5826] veth0_vlan: left promiscuous mode [ 508.421890][ T5826] veth1_macvtap: left promiscuous mode [ 508.421909][ T5826] veth0_macvtap: left promiscuous mode [ 508.421949][ T5826] veth1_vlan: left promiscuous mode [ 508.421972][ T5826] veth0_vlan: left promiscuous mode [ 508.526514][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 508.528530][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 508.615486][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 508.618614][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 508.649539][ T5447] 8021q: adding VLAN 0 to HW filter on device eth29 [ 508.699615][ T43] audit: type=1400 audit(1789004542.946:106297): avc: denied { write } for pid=18192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.733012][ T43] audit: type=1400 audit(1789004542.976:106298): avc: denied { write } for pid=18195 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.773637][ T5447] 8021q: adding VLAN 0 to HW filter on device eth30 [ 508.821624][ T43] audit: type=1400 audit(1789004543.066:106299): avc: denied { write } for pid=18198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.863466][ T43] audit: type=1400 audit(1789004543.106:106300): avc: denied { write } for pid=18201 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.900244][ T5447] 8021q: adding VLAN 0 to HW filter on device eth31 [ 508.966141][ T43] audit: type=1400 audit(1789004543.216:106301): avc: denied { write } for pid=18204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.000222][ T43] audit: type=1400 audit(1789004543.246:106302): avc: denied { write } for pid=18207 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.038842][ T5447] 8021q: adding VLAN 0 to HW filter on device eth32 [ 509.100471][ T43] audit: type=1400 audit(1789004543.346:106303): avc: denied { write } for pid=18211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.139712][ T43] audit: type=1400 audit(1789004543.386:106304): avc: denied { write } for pid=18214 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.163713][ T5447] 8021q: adding VLAN 0 to HW filter on device eth33 [ 510.065448][T16267] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 510.065581][T16267] (NULL device *): queue 0 connect admin queue failed (-111). [ 510.065600][T16267] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 510.065616][T16267] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 512.134702][T16267] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 512.135096][T16267] (NULL device *): queue 0 connect admin queue failed (-111). [ 512.135114][T16267] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 512.135128][T16267] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 514.214601][ T1185] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 514.214732][ T1185] (NULL device *): queue 0 connect admin queue failed (-111). [ 514.214756][ T1185] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 514.214771][ T1185] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds