last executing test programs: 3m39.132449415s ago: executing program 32 (id=312): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x11, &(0x7f0000000600)={0x0}}, 0x0) 3m35.152144789s ago: executing program 33 (id=243): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000700)={0x1, 0x0, [{0x4b564d04, 0x0, 0x4001000000000009}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) r4 = accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x0, 0x3}, 0x10) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000480)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000004c0)=0x800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000300)='10', 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="5872ea3e", @ANYRES16=0x0, @ANYBLOB="0800e30b0000fddbdf253e00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) readlinkat(r10, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f00000000c0)=""/118, 0x76) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) 2m46.000326397s ago: executing program 0 (id=816): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close_range(r0, r0, 0x0) (async, rerun: 64) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x80, 0x1, 0x27e}, &(0x7f00000004c0)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000500)=0x0) (rerun: 64) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xffffffff}}) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000006c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x1ad840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r5, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x315a02, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000780)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000feffffffffffff32300979ad5269e2003c00000000000000ffffffffffffffff000000000020000000000000000000400000000000000000000a000000000000feffffffff7f40000200000000000008ffff00000000000001000000000000004400050000000000000000000000ffff0a010101fcffffff3b00000002000000ac1e01010000000000000000000000000135000004450000000000000000000001000000"], 0xfc}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) (async) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1], 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @any, 0xe}, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) (async, rerun: 32) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000400), 0x2, 0x40402) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000440)={&(0x7f0000000480)=[{0xe, 0x2200, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0}], 0x2}) (async) connect$inet6(r9, &(0x7f0000000240)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff492d}], 0x1, 0x12060, 0x0) 2m45.380870395s ago: executing program 0 (id=825): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x1, 0xfffffffff8100f4f, 0x6000, 0x5, 0xf, 0x2, 0x0, 0x0, 0x10, 0x10}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000380)={0x10, 0x2, {0x5, @usage=0x101, 0x0, 0x0, 0x6, 0x0, 0x5, 0x8, 0x0, @usage=0xc66, 0x1ff, 0x5, [0x6, 0xffffffffffffffff, 0x24, 0x8, 0x33a, 0x7]}, {0x12e000, @struct={0x100, 0x3}, 0x0, 0x5081bc9c, 0x8, 0xf997, 0x7fffffff, 0x0, 0x2, @struct={0x7f, 0x81}, 0x7, 0x81, [0x100000001, 0xfffffffffffffe01, 0x1, 0x80000001, 0x6, 0x7]}, {0x8, @struct={0x40, 0x9}, 0x0, 0x6, 0xffff, 0x7, 0x7, 0x6, 0x4, @struct={0x3, 0x5}, 0xfffffffd, 0x7fff, [0xff, 0x8, 0x8, 0x1, 0x8001, 0x2]}, {0x101, 0x2, 0x8000000000000001}}) mkdirat(0xffffffffffffff9c, &(0x7f00000017c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001800)='./config\x00', &(0x7f0000001840)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./config/nullb/my_zoned_dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000001900)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001940)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000001980)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e21000000090000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f0000001d40)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001d80)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x6, 0x5, &(0x7f0000001f40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000001f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000002040)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write(r3, &(0x7f0000000080)="31d1f6eae1072ac0b2b724a0022af6f2a00af668123ab39ebeb969cbef93810af5917fb834920313d6bfd707826b919ec90f3f5bb2424f9a85426b046e401e3b6f7f", 0x42) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc00456bf, &(0x7f0000002100)) readv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000002180)=""/140, 0x8c}], 0x100000000000002a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000002240)) r5 = openat(0xffffffffffffff9c, &(0x7f0000002340)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f0000002380)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./dev\x00', 0x1ff) setfsgid(0xee01) 2m44.550717226s ago: executing program 0 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0xffffffffffffff2d, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) (fail_nth: 10) sendmsg$nl_route(r0, 0x0, 0x11) 2m44.490589225s ago: executing program 0 (id=833): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1, 0x1206}], 0x1, 0x0, 0x0, 0x0) 2m41.460057958s ago: executing program 0 (id=848): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x1, 0xfffffffff8100f4f, 0x6000, 0x5, 0xf, 0x2, 0x0, 0x0, 0x10, 0x10}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000380)={0x10, 0x2, {0x5, @usage=0x101, 0x0, 0x0, 0x6, 0x0, 0x5, 0x8, 0x0, @usage=0xc66, 0x1ff, 0x5, [0x6, 0xffffffffffffffff, 0x24, 0x8, 0x33a, 0x7]}, {0x12e000, @struct={0x100, 0x3}, 0x0, 0x5081bc9c, 0x8, 0xf997, 0x7fffffff, 0x0, 0x2, @struct={0x7f, 0x81}, 0x7, 0x81, [0x100000001, 0xfffffffffffffe01, 0x1, 0x80000001, 0x6, 0x7]}, {0x8, @struct={0x40, 0x9}, 0x0, 0x6, 0xffff, 0x7, 0x7, 0x6, 0x4, @struct={0x3, 0x5}, 0xfffffffd, 0x7fff, [0xff, 0x8, 0x8, 0x1, 0x8001, 0x2]}, {0x101, 0x2, 0x8000000000000001}}) mkdirat(0xffffffffffffff9c, &(0x7f00000017c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001800)='./config\x00', &(0x7f0000001840)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./config/nullb/my_zoned_dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000001900)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001940)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000001980)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e21000000090000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f0000001d40)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001d80)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x6, 0x5, &(0x7f0000001f40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000001f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000002040)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write(r3, &(0x7f0000000080)="31d1f6eae1072ac0b2b724a0022af6f2a00af668123ab39ebeb969cbef93810af5917fb834920313d6bfd707826b919ec90f3f5bb2424f9a85426b046e401e3b6f7f", 0x42) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc00456bf, &(0x7f0000002100)) readv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000002180)=""/140, 0x8c}], 0x100000000000002a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000002240)) r5 = openat(0xffffffffffffff9c, &(0x7f0000002340)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f0000002380)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./dev\x00', 0x1ff) setfsgid(0xee01) 2m40.579942173s ago: executing program 0 (id=856): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000000}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x2) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/141, 0x8d}], 0x1) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000300)={0x15, &(0x7f0000000280)=[{0x46, '\x00', @data=0x1, 0x3}]}) syz_clone(0x40000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 2m36.508651398s ago: executing program 5 (id=874): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=0x0}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 2m33.430666567s ago: executing program 5 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x84) r1 = syz_create_resource$futex(&(0x7f0000000000)) futex(r1, 0x6, 0x0, 0x0, 0x0, 0x1) futex$unlock_pi_list32(r1, 0x687, 0x4, 0x0, &(0x7f0000000040)=0x7, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) openat$mixer(0xffffffffffffff9c, &(0x7f0000000780), 0xa000, 0x0) syz_io_uring_setup(0x4a5f, &(0x7f00000007c0)={0x0, 0x3b5c, 0x400, 0xfffffffd}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000c40)) ioprio_set$uid(0x3, 0x0, 0x2007) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x5, 0xc356, &(0x7f0000000600)=[{&(0x7f0000000080)="41db363ced79d4d881cd0fee4b243e961fe01a80cfb66e36341999a82f5df123700c3715f7687fb5bc7f071a73327d0e1a2bcb5ec85a8f8da1849627ca34a056362e842972579640a04be3831d233a8cceb46bd178cf5a79bf6ef71c04e6a9b8ced57841caca312d4bdc05fb8853e648d14884a01a961efda219738917cf672d570dccb39b754a7c77191b8a5f536456f22fff24319f24cdda921d9bbefbe2c417d646fb79939f76d893e74f6d597ad19af01aad17c53b32bff60ddde761d95ffd8075d838220304ecddc4cdd26c81331a0f6041dd66672713e75cfd43164cb88c", 0xe1}, {&(0x7f0000000380)="47b58b92de00709608cd3b82c14208e90c652d43ed0b98a63e1cf5c5166422246b7095198a25a91096ab3e8d82a1200dfd812b5695eaf51e750c6d1960efa507d3b0e624f37a330ec30117bc993324efa7af8c435d279c362b7f7b0de38f34fbe5f6c99099c269b1dc9f", 0x6a}, {&(0x7f0000000400)="c46b23abc96c985da47bbb3a651eaac528f1d76f4d1a9c414c071c02a010a6e3035fd7e7991d26a645838f005116fd3593c3b0ea6de202c7b7b9dc1fd3f1bf39bb7d48cc21ac02b182ea1cbbb823fc86fe709f2fc493b07674f21d2585df5ae7325ab33dd326eef5467e1206ea96179ba6ced74421ea0946a04d0ae4f4102c1c5f28315ade9113730dc60c2a5fd8b68dd58da94748d708efa12191562f6c24a1a6ba9fc086d68b1e0c999baf826801454aa912b1b9254f148f5149ff940cd6ad51738e0a1986", 0xc6}, {&(0x7f0000000500)="7c7cdc9f00360a7e8f88b1c24256828c0ac8ca5eb98200faaef09d917a04ee46ffccae550c8e3f9fea921b1dbaf0b2ef69713a5b98b14b53e083", 0x3a}, {&(0x7f0000000540)="fe7a0604ae2a4181306ffd01589c7fa2ed666c93c7e078fb3e8bdfa8c18ede844eb6dbf5377af3c481b31b18563f674edaa5ae60f7c27d60312800f28c0b7afb83875edf8310bf2a28edbee5f0a063624d4d94050740f644f2b1f2d0e96e8a3d521f6e91f703cf3dad305f74247d6f0071cafa420666ed33675f2046e96e631e8c23ba2a64d94b21673ae812c3a7a45b082d8e9826608fb6cae58cf9bf496c15b19a0d3ce08d39f383fae7a134325ffcaf1e05", 0xb3}], 0x5, 0x18, 0x3, {0x3, 0x0, 0x8, '\x00', &(0x7f0000000740)={0x4, 0x3ff, 0xa5, &(0x7f0000000680)="282358055fdc0799ead8cdd04789f7f74861a8fc4a96a88d2f20af156e784cf3932a3e2324169a5a69ce03d28f0afedac8d537d75b8b08d34e925c2d31e67c71740277c9eae9b83991b05db5d70ac006cbaaac0141e48c763d8b44c05cfcd882d40b9445f10fbb230053f1ec59e190ba0cfcbff2c950406d5fa1091aa3c93f3688267f9f278b9397147521b18f375bbe9b95a7b74e8942577cea68fb23d031565065e644dd", 0x2}, 0x8}}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000c80)={0x5, 0x9, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0x3d60000000000, 0xbb1}, &(0x7f0000000cc0)={0x6, 0x2, 0x80, 0x200, 0xffff, 0x800, 0x0, 0xffffffff}, &(0x7f0000000d00)={0xffffffffffff8001, 0x6, 0xfffffffffffffffb, 0x5, 0x4, 0x1, 0x9, 0x4}, &(0x7f0000000d40)={0x0, 0x989680}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0xffffffff]}, 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x10, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000f00)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000001040)={0xa, 0x4e20}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="06000cdc47aebef0000004000000fd03000012000000220502003f0793bdf2d18c4aeb2d90e0f8d97623da40cf64864a1c42a6c5cb54728638b4e4b18266767bfafb3a8eefc5e02201f606e792f882f930d2a8aa47f92a5a2850cef1d665ca6e66224ea0544f191216cd8871c53c90589d4a1296a56aae4b868b3a6da404d36b226e5f22987cf8ceb09fb6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB="0500000000000000000000725600"/28], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0xe, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="7dd37d6bbbd2c7ad30447e509bd05082e613f1368696616e3f69b8a83113414f07bf044511edd38d1474f7a9b1e4faa4cba70352f9ec8c46e494d2beb78e637f4bc5cb5ed040d6cc2133a0c7", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r9}, &(0x7f00000012c0), &(0x7f0000001300)=r7}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ff0300000000000000ff0610689fad838942219081603e33ffff08004500001c00ddc2638bf9eee9935e1d8c258d2b62656c940000000611a778000000000008907800000000000000009c18868a8b42efaaa7383ce2c1f6328593ec6678257c7cb3416c9efb8b8a02ec1d187a593ab01d9775384d94963c9a06ce0088fc83657a4f9778a0a0f23a5b9fd9816218bcc11c1e58c4e22455678dd19256dc21840dec79f1bec8b6980e4620effc9f6925dec1bc5d9b6bb31fe70fefd798a1dffae936d3859a499f3afda431c3eeedb27d0f5cfa622c859031b9699d2ce9c364581ebbd7dd5a945f05875b95283cc9e577c30d753b5617454bc0b8ae12d3ed442361a60862f4f81909a9d14247a1f4a1901eeb4a24753d2e993f9ab3c1303cfbb6852e31a31ac43b2a79194e09ca18ec38a27e4f25f3a10ff0aaa6a0014e1aecb0f7069d4e24000000000000"], 0x0) syz_pidfd_open(r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000980)={0x69b, 0xff, {}, {}, 0x7, 0x72f8}) getgroups(0x3, &(0x7f00000009c0)=[0xee00, 0xffffffffffffffff, 0x0]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) 2m33.430525052s ago: executing program 5 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 2m33.35075809s ago: executing program 5 (id=886): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m30.301137909s ago: executing program 5 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000480)="0ef1ffffe9080004", 0x8) mount(0x0, &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000880), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000008c0)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ppoll(&(0x7f0000000940)=[{r3, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f0000000c80)=""/4100, 0x1004) write$dsp(r2, &(0x7f0000001cc0)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) pread64$ublk_ch(r1, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000700)=0xb6, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000007c0)={'netdevsim0\x00', &(0x7f0000002cc0)=@ethtool_perm_addr={0x20, 0x1000, "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"}}) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './config', [], 0xa, "7f841e85e2d48595bef871f0a77911ae8145747cbde5ab8ce0b7787de92e96b8ab16a7342ea09d30b2afb5b5bfcfb652ba844359c9ef37a4649b6d0f6c4c34b1edaa94e9be2bb7b7f5612f8fe7d17c609d65788090e37708d2f32165cf599a7b43027a3bded1873e1a30e7895f5a0d23435fe6c0e0050790fb1472bce5eec41129b72383a11419f5c2"}, 0x95) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f0000000540)={0xec, 0x6, 0x6}}) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000600)={0x2, 0x0, 0xffffffffffffff7b, &(0x7f0000000640)={0x0, 0x2, 0x1}}) r8 = syz_open_dev$I2C(&(0x7f0000000840), 0x1, 0x0) ioctl$I2C_SLAVE(r8, 0x703, 0x60) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r9, &(0x7f00000004c0), 0x8, &(0x7f00000001c0)) write(r6, &(0x7f0000000000)="020052487f0000000000000000000df4aabf0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) 2m30.071273668s ago: executing program 5 (id=895): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x48001013, r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (fail_nth: 14) 2m25.001636517s ago: executing program 34 (id=856): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000000}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x2) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/141, 0x8d}], 0x1) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000300)={0x15, &(0x7f0000000280)=[{0x46, '\x00', @data=0x1, 0x3}]}) syz_clone(0x40000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 2m15.09615233s ago: executing program 35 (id=895): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x48001013, r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (fail_nth: 14) 45.844935667s ago: executing program 7 (id=2190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0xe0, &(0x7f0000000080)=[{&(0x7f00000000c0)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 45.770408345s ago: executing program 7 (id=2191): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044830}, 0x4004884) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000000500), 0x318, 0xfc0, 0x0) 45.769015704s ago: executing program 7 (id=2194): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 45.690695776s ago: executing program 7 (id=2195): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x180) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r4}, &(0x7f0000000d40), &(0x7f0000000d80)=r2}, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000540)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) unshare(0x60060480) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='p:s/_ ./file0:0', 0xf) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000100)=0x5, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x5}, r7}}, 0x30) syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000dc0), 0x400c00, 0x0) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000b80)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e23, 0xe107, @empty, 0x8000}, r7, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0xa, r7, 0x0, 0x0, 0x1}}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x240, 0x240, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff000000, 0xffffffff, 0x7, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb946432a1341d4c0}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x8, 0x9695, 0x0, 0x6, 0x4, 'bond_slave_1\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x19f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xb8, 0x6, 0x0, 0x1, 0x0, "51059173bfd53824a126296d5a3d621d7c0ceaeb6d466c351d827490ee20197e1b8c79397f17a734aae4060e168bc4257a86f9dc10a0c9722a559db2b9ffd970"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r7, 0x8}}, 0x10) sendto$inet6(r8, &(0x7f0000000300)="297aca1f4cec9b2a3f6b5746c13d1b6b8c6ea86dd3642df761df752583892dd05a4d4661c6214077267178423f21f2a3779b8889e0ecbf2cf4dd7e1f2af86c46ea8ab8a9b23c803417418359b2ff7da2eeaa37e5e9e528da3ac5e36ee1dec8318a1a212b6bfe0d45259a6213df59cbf73ce6224e332849a0d45e9037b28ba6c0736d1295746a5da533b93e5b3b14489779cb576717c15a98cd1f3b2b56df", 0x9e, 0x14, &(0x7f00000003c0)={0xa, 0x4e24, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x65, 0xfa00, {0x0, r7, r0}}, 0x18) 45.260700775s ago: executing program 7 (id=2204): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x20, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x3, "f4"}, @cipso={0x86, 0x0, 0x1, [{0x5, 0x0, "c2993db7"}, {0x0, 0x0, "1297b3dcd37aa31610edbed9c5eee6"}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) 44.950440364s ago: executing program 7 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000500)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000540)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x7b36}, 0x30, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) landlock_restrict_self(r3, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/4140], &(0x7f0000001640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0xffffffffffffff97, 0x10, &(0x7f00000016c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(r0, &(0x7f0000000000)="fb1b661d1f0d33ef9edaea781ef426eeef1ed967f77af9322bc1e29254441fea730ac67824121ddb0e40dd887fa165ecde917a5f951a000df4cdacbe29a24395f266f409eef0a0f0e8ac2b9aabbf7fa02830ccaf892ddf510d89989cb82c1a295d0cdad6b54f0356f488b8827f627b80152c8006c2c8089a9fdb4bb525162506dee62b4d97c2d02696e7cbcb76327a3dc27c20b0b2f4ca31b02bfc89533b863f935ac8e619d6a9f213723dc81200e290528190b767c345161cc4e4c07b0062de7419caff22739eda6bf92c6cb13dc8f89cd656c6516b7d725807315e8106b8ac12c01fa2be287d38fbc8476e95f9eeb9102c9b1801216a47", 0xf8, 0x20000845, &(0x7f00000005c0)={0xa, 0x2, 0x0, @empty, 0x37}, 0x1c) 44.838512219s ago: executing program 36 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000500)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000540)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x7b36}, 0x30, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) landlock_restrict_self(r3, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b7000000286c0000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f0000001640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0xffffffffffffff97, 0x10, &(0x7f00000016c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(r0, &(0x7f0000000000)="fb1b661d1f0d33ef9edaea781ef426eeef1ed967f77af9322bc1e29254441fea730ac67824121ddb0e40dd887fa165ecde917a5f951a000df4cdacbe29a24395f266f409eef0a0f0e8ac2b9aabbf7fa02830ccaf892ddf510d89989cb82c1a295d0cdad6b54f0356f488b8827f627b80152c8006c2c8089a9fdb4bb525162506dee62b4d97c2d02696e7cbcb76327a3dc27c20b0b2f4ca31b02bfc89533b863f935ac8e619d6a9f213723dc81200e290528190b767c345161cc4e4c07b0062de7419caff22739eda6bf92c6cb13dc8f89cd656c6516b7d725807315e8106b8ac12c01fa2be287d38fbc8476e95f9eeb9102c9b1801216a47", 0xf8, 0x20000845, &(0x7f00000005c0)={0xa, 0x2, 0x0, @empty, 0x37}, 0x1c) 41.690692718s ago: executing program 4 (id=2253): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044830}, 0x4004884) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000000500), 0x318, 0xfc0, 0x0) 41.630371433s ago: executing program 4 (id=2256): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000040)) syz_clone(0x288c1000, &(0x7f0000000080)="ad205a10ab9974a807924519d77e65d911f667c4385f3e2b6f1e9c40ae2fe638837668631f99c83cdad7e6817ef13aae356f01d4b2116de26f014cbfdee653aaad8bf05431fbd972d99f6d770d84bbd19f0cb290b1f750bc93dbfce896b80adb2383700a3f80b1fae3f3a31471d4ae3155c3273a32efb778a13b3e1355cd2383a5fa6487ea9db15dfe1e645ae566788dd01b90397c7077e3a4b845143743f15682a640afba6ccb3c23d272e24a", 0xad, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000180)=@abs={0x27, 0x0, 0x4}, 0x6e) 41.49055063s ago: executing program 4 (id=2259): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x3f, 0xfffffbfc, 0x2}, 0x2e) 41.407687014s ago: executing program 4 (id=2262): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000180), 0xca, 0xfffffffffffffffe) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x15, 0x0, &(0x7f0000000080)) connect(r0, &(0x7f0000000000)=@rc={0x1f, @any, 0xe}, 0x80) 41.406362485s ago: executing program 4 (id=2263): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) socket$packet(0x11, 0x3, 0x300) unshare(0x20040400) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./proc_mnt\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) read$eventfd(r1, &(0x7f0000000600), 0x8) syz_io_uring_setup(0x1cd, &(0x7f0000000380)={0x0, 0x1373, 0x2, 0x40000002, 0x24a}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 41.300052851s ago: executing program 4 (id=2266): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 40.688773909s ago: executing program 3 (id=2275): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (fail_nth: 5) 40.61978563s ago: executing program 3 (id=2277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) (fail_nth: 5) 40.615464104s ago: executing program 3 (id=2278): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x804, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) umount2(&(0x7f0000000680)='./mnt\x00', 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x150, 0x1403, 0x0, 0x70bd2b, 0xae, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000881}, 0x24000040) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x20, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 40.540743834s ago: executing program 3 (id=2280): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x801f, 0x0) 40.469343881s ago: executing program 3 (id=2281): mkdir(&(0x7f0000000100)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='my_sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x700, 0x0, 0x0, 0x0) 40.370437745s ago: executing program 3 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x20000000) 35.778018834s ago: executing program 8 (id=2326): setns(0xc9, 0x0) setsockopt(0xffffffffffffffff, 0x9, 0x42020054, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x5, 0xf000000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) 35.708496851s ago: executing program 8 (id=2327): r0 = syz_open_dev$dri(&(0x7f0000000800), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000840)={0x3, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) close(r1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="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", 0x559, r2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000700)) connect$bt_sco(r5, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000900)={0x401, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 35.529638716s ago: executing program 8 (id=2330): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0xf0000000, 0x1000, &(0x7f0000200000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000022c0)='27', 0x2) unshare(0xa000400) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002300)={0x0, &(0x7f0000002340)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xffff, 0x5}}, @cpuid={0x64, 0x18, {0xd6, 0x4}}, @nested_vmlaunch={0x12f, 0x18}], 0x78}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_create_resource$kvm_nested_state(&(0x7f0000000240)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r4, 0xc080aebe, r5) ioctl$KVM_SET_NESTED_STATE_res(r4, 0x4080aebf, r5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.240238286s ago: executing program 8 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a310000000014000780050015000600000008001240000008000500050002000000050004000100000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000340)=@v2={0x2000000, [{0xd5a, 0x5}, {0x3, 0x1}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0xa14000, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='8\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) r2 = memfd_secret(0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r1) io_setup(0x7fffffff, &(0x7f0000000380)) 35.178639563s ago: executing program 8 (id=2332): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000003c0)=""/4102, &(0x7f0000001400)=0x1006) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000100)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0xff}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @time={0x8, 0x8}, {0xf9}, {}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0xff, @time={0x9, 0x5}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xe, 0x7fff}}, {0x8, 0x3, 0xa, 0x4, @time={0x800003, 0x6}, {0xbd, 0x3}, {0xd}, @time=@tick=0x5}], 0x70) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0xffffffffffffffff, 0x6}, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) r8 = syz_open_dev$video(&(0x7f0000001980), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000019c0)={0xa, 0x0, 0x4, {0x80000004, 0x1, 0x2, 0x8000001}}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xa8, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0xa8}}, 0x8841) openat$cgroup_pressure(r3, &(0x7f0000001440)='io.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2000}], 0x1, 0xde) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x4002) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x5) 34.907866699s ago: executing program 8 (id=2335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, 0x4f, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 34.833889207s ago: executing program 37 (id=2335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, 0x4f, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 26.225743501s ago: executing program 38 (id=2266): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 25.219680901s ago: executing program 39 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x20000000) 6.040466834s ago: executing program 9 (id=2592): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180080) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000001c0)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000003c0)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r6, &(0x7f0000000940)={0x0, 0x2, 0x1000, 0x1, 0x16a, 0x0, r1}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x23, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x0, 0x22a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46a, 0x4000, 0x1, 0xfffffffc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4000, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x105, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) 5.215678573s ago: executing program 9 (id=2597): syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0xa48, 0x6, 0x4, 0x20, 0xfff, 0x2654}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000000300)=""/104, 0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000007b40)=ANY=[@ANYBLOB="180200000000000000000000d15100008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000007bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007c00)={r6, 0x2f, 0xe, 0x0, &(0x7f0000007c80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x1, 0x2, r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x2, 0x2, r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x2, 0x0, [{0x10000000, 0x1, 0x1, 0x0, @sint={0x2, 0x2345}}, {0x10, 0x2, 0x0, 0x0, @irqchip={0x8001, 0x40}}]}) close(r4) close(r3) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002600)='./file0/file0\x00', &(0x7f0000000440), 0x80, &(0x7f0000002640)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '.]@\''}}, {@hash}]}}) read$FUSE(r5, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002540)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x400, 0x2c) syz_fuse_handle_req(r7, &(0x7f0000007cc0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007a80)={0x20, 0x0, 0x0, {0x0, 0x1f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004700)="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", 0x2000, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x29, 0xfffffffffffffffc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000067c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000df80)={0x270, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x0, 0x3, 0x6, 0xff, {0x0, 0x400000000005, 0x8000000000000000, 0x7, 0xd, 0x0, 0x404, 0x3, 0x3e, 0x4000, 0xa5, 0x0, 0x0, 0x80000000, 0xffffffff}}, {0x4, 0x10001, 0x84, 0x7fffffff, '\\sev_\xa4d\xf1\x97\x86\x84\xc3\xb1\x9c\xd7]EC\x12\x91Ll\xfe\xddk\xaf\x1cB\xf6\xdf\xcd+\xa6\'\xd1\xdd\xd7\xdfQ\xd3\xa9\xachfr\xd7\x1dJ&\x01\xc6\"\x05\x0e%&\xd1\xf9\x03#\xa7\xb5z\xf7\x03Zr\xc1k\xc6\xf0*:cW\xe0>\x82\x04\xbeE\xd9\aQP\xf6|\xc5^\xc8\xd2\xe6\xc2\x1b,l\v\x11]\x13>T\x10\x18\x14\xb2\x9f\xe5s\xe8\xb3wr#a\x87\xa8@\xbf\xd0%\xe9c\xfe\xa2~\x02\xd8\x04\xd9z\x89'}}, {{0x3, 0x0, 0xdb6a, 0x6, 0x86, 0xb402, {0x3, 0x8, 0x20000000000000, 0x3, 0xb, 0x7ff, 0x1000, 0x3, 0x3, 0x4000, 0x3, 0xee00, 0x0, 0xc6, 0x5}}, {0x0, 0x81, 0x2, 0x0, 'fd'}}, {{0x6, 0x1, 0xfffffffffffffff7, 0x34, 0x1, 0xfffffffd, {0x3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x535a, 0x2, 0x4, 0x2000, 0x0, 0x0, r9, 0x5, 0x7}}, {0x2, 0x5, 0x1, 0x4, '.'}}]}, 0x0, 0x0, 0x0}) getdents64(r10, &(0x7f0000006a80)=""/4096, 0x1000) close(r0) 4.870345814s ago: executing program 9 (id=2598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x1ffc, 0xa32, 0x2, 0x9, 0x0, [{0x0, 0x27, 0x4, '\x00', 0x7}, {0x3, 0x0, 0x8}, {0x5, 0x0, 0xfa, '\x00', 0x4}, {0xe, 0x3, 0x9, '\x00', 0x79}, {0x0, 0x5, 0xe, '\x00', 0x8}, {0x0, 0xb, 0x5, '\x00', 0x1}, {0x81, 0x6, 0x4, '\x00', 0x5}, {0x7, 0x7, 0xd1, '\x00', 0xb}, {0x4, 0x1, 0x3, '\x00', 0x5}, {0x7, 0x9, 0x0, '\x00', 0xd3}, {0x0, 0x4d, 0x7f, '\x00', 0x1}, {0x2, 0xc, 0x25, '\x00', 0x4}, {0x3, 0x2, 0x0, '\x00', 0xf}, {0x4, 0xf, 0x0, '\x00', 0x7}, {0x3, 0x9, 0x2, '\x00', 0x7}, {0x9, 0x0, 0x36, '\x00', 0x3}, {0x9, 0x3, 0x0, '\x00', 0xc}, {0x8, 0x3, 0xa, '\x00', 0x1}, {0xfa, 0x3, 0x8, '\x00', 0x1c}, {0x6, 0x0, 0xb, '\x00', 0x7}, {0x9e, 0x0, 0x0, '\x00', 0x3}, {0x71, 0x5, 0x2, '\x00', 0x6a}, {0x7, 0x5, 0x8, '\x00', 0x9}, {0xe, 0xad, 0x3, '\x00', 0x6}]}}) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x2f327d4e2582813d) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x806c5864, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x50, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x38}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x402c890}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) timer_create(0x2, 0x0, 0x0) (rerun: 32) setfsgid(0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000001900)={'bond_slave_1\x00', @random="0163014030d9"}) socket$unix(0x1, 0x1, 0x0) 3.730374277s ago: executing program 2 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000d580)={0x0, 0x0, &(0x7f000000d540)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x900, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008850}, 0x804) 3.729859882s ago: executing program 2 (id=2606): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000e80), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000fc0)='./proc\x00', &(0x7f0000001000)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000020c0)='./sys\x00', &(0x7f0000002100)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000020c0)='./sys\x00', &(0x7f0000002100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x100, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002340)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x18, 0x3, 0x4, {0x7391, 0x2, 0x8, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x18, 0x3, 0x4, {0x7391, 0x2, 0x8, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000024c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000024c0)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) close(r12) (async) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002600)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f0000002640)={&(0x7f0000002680)=@xdp={0x2c, 0x7, r8, 0x2003e}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002740)="81", 0x1}], 0x1}, 0x4) write(r3, &(0x7f00000021c0)='7', 0x1) write(r2, &(0x7f0000002200)='md0', 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000f00)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000f00)=r0, 0x4) 3.568168246s ago: executing program 2 (id=2607): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x1, 0x0, 0x0, 0x1, 0x4, 0x20, 0x0, 0x0, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x2b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000300000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.480367114s ago: executing program 2 (id=2609): r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x7, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000200)={0x2, 0x0, 0x1, 0x5, 0x4}) mkdir(&(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') write$sysctl(r3, &(0x7f0000000540)='4\x00', 0x2) syz_usb_disconnect(r1) syz_usb_ep_read(r1, 0x3, 0x9, &(0x7f0000000180)=""/9) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="1400000000064101"], 0x14}}, 0x40) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x16, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f00000026c0)={0x2e0ea940, 0xfb}) 1.737253573s ago: executing program 2 (id=2621): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 1.550357133s ago: executing program 1 (id=2623): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x3000000, 0x20000, 0x9, 0x2, 0x200, &(0x7f0000000200)="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"}) 1.490481713s ago: executing program 1 (id=2624): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x883, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x32, 0x198, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x410, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '1024'}, 0x20, '32', 0x20, 'J', ' 1 legacy_recalculate'}}]}) 1.490249358s ago: executing program 1 (id=2625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) 1.420608171s ago: executing program 1 (id=2626): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = eventfd2(0x0, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) 930.542804ms ago: executing program 9 (id=2631): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000480)={0x7, 0x10, 0x23a3edbd, 0x6b5, 0x3, "3633a3bbe5de846f0143c8f9259f54d740a18c", 0xa, 0x9}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsmount(0xffffffffffffffff, 0x1, 0x8e) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="26440080", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25020000000500590008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x10800) r4 = fsopen(&(0x7f00000004c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f00000002c0)=0x1, 0x4) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000003c0)=0x1) read$dsp(r1, &(0x7f0000000200)=""/67, 0x43) 294.220137ms ago: executing program 6 (id=2633): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x883, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1223) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r4}, [@integrity={0x0, 0x410, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '1024'}, 0x20, '32', 0x20, 'J', ' 1 legacy_recalculate'}}]}) 207.300629ms ago: executing program 6 (id=2634): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0xafa6}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x0, 0x0, 0x19, 0x16, 0x11a, &(0x7f0000000240)="d8c5a51648416cb1f5d8eedd44344f88a8eaa49237264d98b34fcc5ab08a1e32316dcf9c176a6e07f7d0e787c68bd2e3eac655a97dfb353b9875f138b48e98e01a7e26ef33eb6a4f307258db2d178825addbc5f68fdde3db36d44b51ccc96b36bdc708e525e9167cbe6ff6feb5dc3c84c48c95514f8912e2b8717543c49118639c429c18aabea16e8544926d7bb3393463ac1d1bfee00528f1cdb49589fcccfddd7e8acc8c8f8db6fe98387c47642083b1b0ca89f3084e50b374ffb16efeb4eca568642adec89464b1b8ac3a4057bdb59efe6643a17d4f2954a672a95aadf244abddf87ba1df880f2e0e329b958bf33acedf29459a4645f637be1171db329ccf5cb12d1d2c574db265b212063452979100d18b7584d4ddf6357105d050a7064f835a75e3a20e17883beee7e1d3fe4eedb8b1b1fbe130763919511d497bcec66e2dccf774149679e6003c13e72e33b251dc8caac028157a836f75474b9c5677aed868bc08ca929454c5d168f8ffab5eaec348bbdcfeeee3413406975eacdecef27c7d8e19e24553bf2aa1a0b71161714e5dd8e5c5007ac0250c3aff1603b92a9a8e1cbb72cb403010e1ae8cb7b2e7e48d0e4340ed16424d1086e2c29584b8dd2591520f8cc6aaaf19deb40397f2401b9fd9e07c5111774c89bbc3d6ff179047cbe22e46d7cbe1fc3295f689894177647e54a855563ab97b05cf5d99ec801db9077568cddd94f446f50cf5a67daad85099e99f07e498de0dc3560f02e77774b0f556b84790d0b1dfd292f3243e7b987ee90533bc81ef5d20ada41084dfc6ce594eed8bea872c7f4282ada623e5a8c06bbb0019a482fc3405ba3feae04761a6e18a1781a2f20295c6705c5e538c80ecdf20987dfbf32e172b47a3912b18821ddd901c92e5d2476cf6da111b8e5ee97ec2b9b8d1270c151781ec351cda5545aa418bcc84c819b16ac9f19864152d2d8cdfd87554134a50af1c67e52d0058801e1ea254162865d72dbe0c7f7ce17772c03ca1b226a45f15d88d688a54f8c8280aa3b7e175f92610b2e6d2cd4d3052b250c5ab77004944b7d109eeff4a8c12850e7541fdde75e2e5c8707a9e08dae050a1a16bb83ff2c0e6e244f9690ba6157b5ec5f5014ec9e6ad2c42be7b0249433f342a4ef3bcfce90d20da3379049d7eeb6ddd29c7feae5e60776c4ebcd7ab196bba08272d17d084ce72767940be17ff174490c86c2e36d1d94ae66b6d51f0149af937e25ca2f626c7e08bfbe1622fa333873b637b0d619d0146a066368b73fe16d10a9641cd8ec603bda60f2c2f640a2cafedf086b0463ba28efd822848030889f8fb1d187645f02e2bee3966dfb0b283a53ab740315cdedce503e1384d25ff04dfcde1ea0ff32754ba6ef31316db8d5641b3b81f413f86a56997b8092b0b0a299a580190c73bf9a1d0d8f20ccc63340bddeb53"}) 206.456889ms ago: executing program 6 (id=2635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xf582f2b530579bd4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001040)=@arm64={0x4, 0x6, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 128.460671ms ago: executing program 2 (id=2636): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40042, 0x1) file_getattr(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x18, 0x1000) r3 = syz_create_resource$futex(&(0x7f0000000040)) futex(r1, 0xb, 0x1, 0x0, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x5, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x5, 0x8, '\x00', 0x7f}, {0x2, 0x1, 0x8, '\x00', 0x8}, {0x7f, 0x10, 0x4, '\x00', 0x3d}, {0x2, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x84}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x11c0, 0x0) r8 = inotify_init1(0x400) inotify_add_watch(r8, &(0x7f0000000380)='./file0\x00', 0xa4000061) inotify_add_watch(r8, &(0x7f00000003c0)='./file0\x00', 0x10000408) futex$unlock_pi_list32(r3, 0x687, 0x7, &(0x7f0000000540), &(0x7f0000000640)=0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000006800010002000000fcfeff7f00000000000004000b001d18f2d419fb4487a1fe7a149bd17a3238ecf13cf12383c2fcf11d05ccd24919772f504878b90c5864f62f8f3dc63c4df119abc52a650e5c1bea03efd2d9197271bcf33995ba0aaf6e2e0159ac294726ad8e86c7f490514ee4f447cce564a88dc306a7bbcf55fbc092e78e9484610562d1874d14fede496ba376452066f4892a7c1066dc596d939c3ae97a887ad7b7aff7f36a0e17b87542dee70b09caa400"/200], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r10 = syz_io_uring_setup(0xefd, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x2, 0x51}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000240)=@IORING_OP_NOP128={0x3f, 0x1, 0x0, 0xffffffffffffffff, 0xbaf, 0x3, 0x8, 0x0, 0x1, {0x6}}) io_uring_enter(r10, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40800) 125.285264ms ago: executing program 6 (id=2644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000800)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000a40)="0000000000000040fffff0000000", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 69.41444ms ago: executing program 1 (id=2637): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1f7) openat(0xffffffffffffff9c, &(0x7f0000001280)='./dev/kmsg\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x900, 0x0, 0x0, &(0x7f00000012c0)={0x1f}, &(0x7f0000001300)={0x0, 0x3938700}, 0x0) 69.31351ms ago: executing program 9 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 68.206842ms ago: executing program 6 (id=2639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x83, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000940)={0x66666666666648c, 0x0, [{0x80000008, 0x0, 0x2, 0x100, 0x8b0, 0xf0d6, 0x193}]}) (fail_nth: 15) 68.093648ms ago: executing program 9 (id=2640): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1, 0x0, 0x0, 0x7, 0xffffff00}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) 342.419µs ago: executing program 6 (id=2641): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) 0s ago: executing program 1 (id=2642): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x801070cf, 0x0) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000002c0)="8907040400", 0x5) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) (async) r3 = socket$inet6(0xa, 0x4, 0x88) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0xd9a) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000500), &(0x7f0000000540)=0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x4e20, 0x80000, @private2, 0x1ff}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRESDEC=r2, @ANYBLOB="d90429af42b14a8a7e0ad773a5d3a037f331f4dbdf50afd457161a058e351b97650f0720fb492025d71dfc2fd7e2a7b4efc6aeac7c9167bf6a825955b52b9c129a073218933f7ddd991db1906d10d7a395227a18ee4e96ff33e7e199cfe1a75f3a58734b00762b9884ba55bbb36abd361269070ac2f7bb7525a90d160b47bbf437fe94b6d3218e76bfc0d03ec3fb90df2968afc0dd299c3069d310f1dac32d91d6986885166b7a01b731908b295de6152e5c9d6ac3a81b076fff1c1b8e311590719db2cb0fe5561fdd9871976642da47d20411", @ANYRESHEX=r3, @ANYRES16=r3], 0x28}, 0x2000c0c4) 0s ago: executing program 2 (id=2651): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) ioctl$UBLK_U_IO_FETCH_REQ(r0, 0xc0107520, &(0x7f0000001640)={0x4, 0x3c3, 0x0, &(0x7f0000000640)=@buf_1k="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"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) kernel console output (not intermixed with test programs): [ 274.943400][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.943408][T13549] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 274.943423][T13549] [ 274.955229][ T5783] Bluetooth: hci4: command 0x0405 tx timeout [ 274.974581][T13347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.979287][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.979725][T13347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.983011][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.983534][T13347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.987901][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.988474][T13347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.991035][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.017628][T13554] FAULT_INJECTION: forcing a failure. [ 275.017628][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 275.017649][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.6.2422 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 275.017667][T13554] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 275.017672][T13554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.017679][T13554] Call Trace: [ 275.017684][T13554] [ 275.017689][T13554] dump_stack_lvl+0x100/0x190 [ 275.017710][T13554] should_fail_ex.cold+0x5/0xa [ 275.017728][T13554] should_failslab+0xc2/0x120 [ 275.017747][T13554] __kvmalloc_node_noprof+0x113/0x9b0 [ 275.017764][T13554] ? cred_has_capability.isra.0+0x186/0x300 [ 275.017779][T13554] ? dm_create+0x9f/0x1530 [ 275.017798][T13554] dm_create+0x9f/0x1530 [ 275.017815][T13554] dev_create+0x121/0x2a0 [ 275.017834][T13554] ? __pfx_dev_create+0x10/0x10 [ 275.017856][T13554] ctl_ioctl+0x4d2/0xcc0 [ 275.017893][T13554] ? __pfx_dev_create+0x10/0x10 [ 275.017913][T13554] ? __pfx_ctl_ioctl+0x10/0x10 [ 275.017948][T13554] ? selinux_file_ioctl+0x1e0/0x290 [ 275.017962][T13554] dm_ctl_ioctl+0x22/0x30 [ 275.017979][T13554] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 275.017997][T13554] __x64_sys_ioctl+0x18e/0x210 [ 275.018014][T13554] do_syscall_64+0x123/0x790 [ 275.018031][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.018044][T13554] RIP: 0033:0x7f6011f9f559 [ 275.018054][T13554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.018065][T13554] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.018077][T13554] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 275.018085][T13554] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 275.018093][T13554] RBP: 00007f6012036b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.018100][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.018107][T13554] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 275.018124][T13554] [ 275.018153][T13554] device-mapper: core: unable to allocate device, out of memory. [ 275.085883][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.093059][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.098102][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.098148][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.100500][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.109986][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.110032][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.140362][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 275.148646][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 275.148846][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 275.149286][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 275.261229][T13578] netlink: 'syz.9.2427': attribute type 5 has an invalid length. [ 275.275398][ T5783] Bluetooth: hci1: command tx timeout [ 275.325257][T13575] nvme_fabrics: no handler found for transport t. [ 275.372436][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 275.415693][ T34] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 275.468647][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.494894][T13347] veth0_vlan: entered promiscuous mode [ 275.500934][T13347] veth1_vlan: entered promiscuous mode [ 275.519985][T13347] veth0_macvtap: entered promiscuous mode [ 275.525443][T13347] veth1_macvtap: entered promiscuous mode [ 275.538513][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.542787][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.567899][T13449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.567942][T13449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.567974][T13449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.568006][T13449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.569371][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.570301][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.570319][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.570337][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.570367][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.572321][ T34] usb 6-1: config 0 descriptor?? [ 275.655920][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.655939][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.684795][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 275.689191][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.689208][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.815619][ T10] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 275.884468][T13617] FAULT_INJECTION: forcing a failure. [ 275.884468][T13617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.884492][T13617] CPU: 3 UID: 0 PID: 13617 Comm: syz.2.2433 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 275.884509][T13617] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 275.884514][T13617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.884521][T13617] Call Trace: [ 275.884526][T13617] [ 275.884531][T13617] dump_stack_lvl+0x100/0x190 [ 275.884565][T13617] should_fail_ex.cold+0x5/0xa [ 275.884581][T13617] ? prepare_alloc_pages+0x16d/0x5b0 [ 275.884600][T13617] should_fail_alloc_page+0xeb/0x140 [ 275.884619][T13617] prepare_alloc_pages+0x1f0/0x5b0 [ 275.884636][T13617] ? is_bpf_text_address+0x94/0x1a0 [ 275.884655][T13617] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 275.884677][T13617] ? stack_trace_save+0x8e/0xc0 [ 275.884689][T13617] ? __pfx_stack_trace_save+0x10/0x10 [ 275.884701][T13617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.884718][T13617] ? kasan_save_stack+0x3f/0x50 [ 275.884734][T13617] ? kasan_save_stack+0x30/0x50 [ 275.884749][T13617] ? kasan_save_track+0x14/0x30 [ 275.884763][T13617] ? __kasan_slab_alloc+0x89/0x90 [ 275.884779][T13617] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 275.884795][T13617] ? alloc_vmap_area+0x1829/0x2bc0 [ 275.884810][T13617] ? __get_vm_area_node+0x1ed/0x350 [ 275.884825][T13617] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 275.884843][T13617] ? __vmalloc_node_noprof+0xad/0xf0 [ 275.884859][T13617] ? copy_process+0x80b/0x84c0 [ 275.884880][T13617] ? kernel_clone+0x176/0x9d0 [ 275.884889][T13617] ? __do_sys_clone+0xd9/0x120 [ 275.884899][T13617] ? do_syscall_64+0x123/0x790 [ 275.884919][T13617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.884938][T13617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.884955][T13617] ? policy_nodemask+0xed/0x4f0 [ 275.884975][T13617] alloc_pages_mpol+0x201/0x550 [ 275.884994][T13617] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.885017][T13617] alloc_pages_noprof+0x1a/0x160 [ 275.885030][T13617] get_free_pages_noprof+0x10/0xb0 [ 275.885047][T13617] __kasan_populate_vmalloc+0xa0/0x210 [ 275.885065][T13617] alloc_vmap_area+0x963/0x2bc0 [ 275.885100][T13617] ? kasan_save_track+0x14/0x30 [ 275.885117][T13617] ? __kasan_kmalloc+0xaa/0xb0 [ 275.885132][T13617] ? __pfx_alloc_vmap_area+0x10/0x10 [ 275.885149][T13617] ? __get_vm_area_node+0x124/0x350 [ 275.885168][T13617] __get_vm_area_node+0x1ed/0x350 [ 275.885187][T13617] __vmalloc_node_range_noprof+0x268/0x1420 [ 275.885206][T13617] ? kernel_clone+0x176/0x9d0 [ 275.885216][T13617] ? lock_acquire+0x1d1/0x380 [ 275.885234][T13617] ? kernel_clone+0x176/0x9d0 [ 275.885245][T13617] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 275.885260][T13617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.885280][T13617] ? rcu_is_watching+0x13/0xc0 [ 275.885296][T13617] ? trace_kmem_cache_alloc+0xdd/0x100 [ 275.885315][T13617] ? kernel_clone+0x176/0x9d0 [ 275.885325][T13617] __vmalloc_node_noprof+0xad/0xf0 [ 275.885342][T13617] ? kernel_clone+0x176/0x9d0 [ 275.885354][T13617] copy_process+0x80b/0x84c0 [ 275.885367][T13617] ? __pfx___futex_wait+0x10/0x10 [ 275.885378][T13617] ? __pfx_try_to_wake_up+0x10/0x10 [ 275.885399][T13617] ? futex_hash+0x311/0x400 [ 275.885420][T13617] ? __pfx_copy_process+0x10/0x10 [ 275.885433][T13617] ? futex_wake+0x4ea/0x5e0 [ 275.885451][T13617] kernel_clone+0x176/0x9d0 [ 275.885465][T13617] ? __pfx_kernel_clone+0x10/0x10 [ 275.885480][T13617] ? ksys_write+0x190/0x250 [ 275.885500][T13617] __do_sys_clone+0xd9/0x120 [ 275.885512][T13617] ? __pfx___do_sys_clone+0x10/0x10 [ 275.885523][T13617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.885551][T13617] do_syscall_64+0x123/0x790 [ 275.885568][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.885580][T13617] RIP: 0033:0x7f45df79f559 [ 275.885591][T13617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.885603][T13617] RSP: 002b:00007f45dd9f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 275.885615][T13617] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 275.885623][T13617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006a00400 [ 275.885630][T13617] RBP: 00007f45df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.885637][T13617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.885644][T13617] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 275.885659][T13617] [ 275.893043][T13617] warn_alloc: 2 callbacks suppressed [ 275.893055][T13617] syz.2.2433: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 275.893093][T13617] CPU: 3 UID: 0 PID: 13617 Comm: syz.2.2433 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 275.893112][T13617] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 275.893117][T13617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.893124][T13617] Call Trace: [ 275.893128][T13617] [ 275.893133][T13617] dump_stack_lvl+0x100/0x190 [ 275.893165][T13617] warn_alloc.cold+0x9e/0xb2 [ 275.893192][T13617] ? __pfx_warn_alloc+0x10/0x10 [ 275.893206][T13617] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.893224][T13617] ? __get_vm_area_node+0x2f0/0x350 [ 275.893247][T13617] ? __get_vm_area_node+0x22b/0x350 [ 275.893267][T13617] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 275.893285][T13617] ? lock_acquire+0x1d1/0x380 [ 275.893306][T13617] ? kernel_clone+0x176/0x9d0 [ 275.893325][T13617] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 275.893347][T13617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.893373][T13617] ? rcu_is_watching+0x13/0xc0 [ 275.893390][T13617] ? trace_kmem_cache_alloc+0xdd/0x100 [ 275.893409][T13617] ? kernel_clone+0x176/0x9d0 [ 275.893419][T13617] __vmalloc_node_noprof+0xad/0xf0 [ 275.893437][T13617] ? kernel_clone+0x176/0x9d0 [ 275.893449][T13617] copy_process+0x80b/0x84c0 [ 275.893461][T13617] ? __pfx___futex_wait+0x10/0x10 [ 275.893473][T13617] ? __pfx_try_to_wake_up+0x10/0x10 [ 275.893486][T13617] ? futex_hash+0x311/0x400 [ 275.893506][T13617] ? __pfx_copy_process+0x10/0x10 [ 275.893516][T13617] ? futex_wake+0x4ea/0x5e0 [ 275.893533][T13617] kernel_clone+0x176/0x9d0 [ 275.893545][T13617] ? __pfx_kernel_clone+0x10/0x10 [ 275.893559][T13617] ? ksys_write+0x190/0x250 [ 275.893578][T13617] __do_sys_clone+0xd9/0x120 [ 275.893589][T13617] ? __pfx___do_sys_clone+0x10/0x10 [ 275.893599][T13617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.893627][T13617] do_syscall_64+0x123/0x790 [ 275.893643][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.893655][T13617] RIP: 0033:0x7f45df79f559 [ 275.893665][T13617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.893676][T13617] RSP: 002b:00007f45dd9f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 275.893688][T13617] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 275.893695][T13617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006a00400 [ 275.893702][T13617] RBP: 00007f45df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.893709][T13617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.893716][T13617] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 275.893731][T13617] [ 275.893818][T13617] Mem-Info: [ 275.893825][T13617] active_anon:49062 inactive_anon:2 isolated_anon:0 [ 275.893825][T13617] active_file:1312 inactive_file:35772 isolated_file:0 [ 275.893825][T13617] unevictable:0 dirty:184 writeback:0 [ 275.893825][T13617] slab_reclaimable:9211 slab_unreclaimable:89962 [ 275.893825][T13617] mapped:32515 shmem:34514 pagetables:4112 [ 275.893825][T13617] sec_pagetables:304 bounce:0 [ 275.893825][T13617] kernel_misc_reclaimable:0 [ 275.893825][T13617] free:372500 free_pcp:19338 free_cma:0 [ 275.893857][T13617] Node 0 active_anon:159836kB inactive_anon:8kB active_file:5244kB inactive_file:137588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64384kB dirty:724kB writeback:0kB shmem:109336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17136kB pagetables:14748kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.893888][T13617] Node 1 active_anon:36412kB inactive_anon:0kB active_file:4kB inactive_file:5500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65676kB dirty:12kB writeback:0kB shmem:28720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:416kB pagetables:1700kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.893971][T13617] Node 0 DMA free:8860kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:220kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 275.894008][T13617] lowmem_reserve[]: 0 1203 1203 1203 1203 [ 275.894028][T13617] Node 0 DMA32 free:104192kB boost:0kB min:27072kB low:33840kB high:40608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:159616kB inactive_anon:8kB active_file:5244kB inactive_file:137452kB unevictable:0kB writepending:724kB zspages:0kB present:2080628kB managed:1232264kB mlocked:0kB bounce:0kB free_pcp:39180kB local_pcp:5956kB free_cma:0kB [ 275.894062][T13617] lowmem_reserve[]: 0 0 0 0 0 [ 275.894118][T13617] Node 1 Normal free:1376948kB boost:0kB min:40160kB low:50200kB high:60240kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36412kB inactive_anon:0kB active_file:4kB inactive_file:5500kB unevictable:0kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:38132kB local_pcp:13644kB free_cma:0kB [ 275.894150][T13617] lowmem_reserve[]: 0 0 0 0 0 [ 275.894168][T13617] Node 0 DMA: 49*4kB (UM) 23*8kB (UME) 14*16kB (UME) 46*32kB (UME) 14*64kB (UME) 6*128kB (UME) 2*256kB (M) 5*512kB (UME) 2*1024kB (ME) 0*2048kB 0*4096kB = 8860kB [ 275.894320][T13617] Node 0 DMA32: 1592*4kB (UME) 682*8kB (UME) 259*16kB (UM) 201*32kB (UME) 108*64kB (UME) 81*128kB (UME) 34*256kB (UME) 15*512kB (M) 7*1024kB (UM) 6*2048kB (UM) 7*4096kB (UM) = 104192kB [ 275.894456][T13617] Node 1 Normal: 987*4kB (UME) 883*8kB (UME) 509*16kB (UME) 355*32kB (UME) 204*64kB (UME) 211*128kB (UME) 275*256kB (UM) 246*512kB (UME) 196*1024kB (UME) 36*2048kB (UM) 204*4096kB (UM) = 1376948kB [ 275.894588][T13617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.894599][T13617] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 275.894607][T13617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.894616][T13617] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB [ 275.894625][T13617] 71594 total pagecache pages [ 275.894629][T13617] 0 pages in swap cache [ 275.894633][T13617] Free swap = 124996kB [ 275.894637][T13617] Total swap = 124996kB [ 275.894642][T13617] 1048443 pages RAM [ 275.894646][T13617] 0 pages HighMem/MovableOnly [ 275.894650][T13617] 291067 pages reserved [ 275.894654][T13617] 0 pages cma reserved [ 275.946105][T13620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 275.977460][ T10] usb 14-1: not running at top speed; connect to a high speed hub [ 275.977479][ T10] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 275.978272][ T10] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.978300][ T10] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.978311][ T10] usb 14-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 275.978330][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.982538][ T10] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 275.983483][ T10] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 275.990103][ T10] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 275.993596][ T10] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 275.993668][ T10] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 275.999029][ T10] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 276.000862][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 276.000942][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 276.013174][ T34] usb 6-1: USB disconnect, device number 10 [ 276.113147][T13631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13631 comm=syz.6.2435 [ 276.211711][T13639] FAULT_INJECTION: forcing a failure. [ 276.211711][T13639] name failslab, interval 1, probability 0, space 0, times 0 [ 276.211732][T13639] CPU: 3 UID: 0 PID: 13639 Comm: syz.6.2437 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 276.211749][T13639] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 276.211754][T13639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.211761][T13639] Call Trace: [ 276.211765][T13639] [ 276.211770][T13639] dump_stack_lvl+0x100/0x190 [ 276.211790][T13639] should_fail_ex.cold+0x5/0xa [ 276.211807][T13639] should_failslab+0xc2/0x120 [ 276.211825][T13639] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 276.211840][T13639] ? __alloc_skb+0x5b7/0x710 [ 276.211856][T13639] ? __alloc_skb+0x140/0x710 [ 276.211874][T13639] __alloc_skb+0x140/0x710 [ 276.211889][T13639] ? __alloc_skb+0x5b7/0x710 [ 276.211904][T13639] ? __pfx___alloc_skb+0x10/0x10 [ 276.211927][T13639] ? find_held_lock+0x2b/0x80 [ 276.211943][T13639] ? avc_has_perm_noaudit+0x11e/0x470 [ 276.211960][T13639] ? avc_has_perm_noaudit+0x11e/0x470 [ 276.211983][T13639] alloc_skb_with_frags+0xdb/0x750 [ 276.212003][T13639] ? avc_has_perm+0x135/0x1e0 [ 276.212028][T13639] sock_alloc_send_pskb+0x86a/0x9e0 [ 276.212061][T13639] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 276.212086][T13639] ? sock_has_perm+0x254/0x320 [ 276.212103][T13639] ? __pfx_sock_has_perm+0x10/0x10 [ 276.212118][T13639] ? __pfx_avc_has_perm+0x10/0x10 [ 276.212135][T13639] hci_sock_sendmsg+0x1c7/0x26f0 [ 276.212156][T13639] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 276.212173][T13639] ? selinux_socket_sendmsg+0x198/0x2f0 [ 276.212207][T13639] sock_write_iter+0x560/0x5d0 [ 276.212219][T13639] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 276.212236][T13639] ? __pfx_sock_write_iter+0x10/0x10 [ 276.212253][T13639] ? bpf_lsm_file_permission+0x9/0x10 [ 276.212269][T13639] ? security_file_permission+0x76/0x210 [ 276.212282][T13639] ? rw_verify_area+0xce/0x6d0 [ 276.212296][T13639] vfs_write+0x6af/0x1050 [ 276.212311][T13639] ? __pfx_sock_write_iter+0x10/0x10 [ 276.212325][T13639] ? __pfx_vfs_write+0x10/0x10 [ 276.212338][T13639] ? find_held_lock+0x2b/0x80 [ 276.212363][T13639] ksys_write+0x1f8/0x250 [ 276.212377][T13639] ? __pfx_ksys_write+0x10/0x10 [ 276.212396][T13639] do_syscall_64+0x123/0x790 [ 276.212414][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.212426][T13639] RIP: 0033:0x7f6011f9f559 [ 276.212435][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.212448][T13639] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.212459][T13639] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 276.212467][T13639] RDX: 0000000000000009 RSI: 00002000000005c0 RDI: 0000000000000004 [ 276.212474][T13639] RBP: 00007f6012d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.212481][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.212487][T13639] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 276.212502][T13639] [ 276.245990][T13641] FAULT_INJECTION: forcing a failure. [ 276.245990][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 276.246018][T13641] CPU: 3 UID: 0 PID: 13641 Comm: syz.6.2438 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 276.246045][T13641] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 276.246053][T13641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.246064][T13641] Call Trace: [ 276.246071][T13641] [ 276.246079][T13641] dump_stack_lvl+0x100/0x190 [ 276.246112][T13641] should_fail_ex.cold+0x5/0xa [ 276.246134][T13641] ? __netlink_lookup+0x692/0x950 [ 276.246164][T13641] should_failslab+0xc2/0x120 [ 276.246217][T13641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 276.246245][T13641] ? netlink_deliver_tap+0x103/0xb50 [ 276.246271][T13641] ? skb_clone+0x187/0x3f0 [ 276.246320][T13641] skb_clone+0x187/0x3f0 [ 276.246348][T13641] netlink_deliver_tap+0x82f/0xb50 [ 276.246382][T13641] netlink_unicast+0x708/0x950 [ 276.246428][T13641] ? __pfx_netlink_unicast+0x10/0x10 [ 276.246466][T13641] netlink_sendmsg+0x9ac/0x10c0 [ 276.246498][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.246533][T13641] ? selinux_socket_sendmsg+0x198/0x2f0 [ 276.246563][T13641] ? ____sys_sendmsg+0xa99/0xc30 [ 276.246583][T13641] ____sys_sendmsg+0xa99/0xc30 [ 276.246601][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.246632][T13641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.246659][T13641] ? lock_acquire+0x1d1/0x380 [ 276.246680][T13641] ? get_pid_task+0x2a/0x250 [ 276.246707][T13641] ___sys_sendmsg+0x190/0x1e0 [ 276.246729][T13641] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.246757][T13641] ? get_pid_task+0x106/0x250 [ 276.246790][T13641] ? find_held_lock+0x2b/0x80 [ 276.246821][T13641] __sys_sendmsg+0x160/0x210 [ 276.246839][T13641] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.246864][T13641] do_syscall_64+0x123/0x790 [ 276.246880][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.246893][T13641] RIP: 0033:0x7f6011f9f559 [ 276.246903][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.246914][T13641] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.246926][T13641] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 276.246934][T13641] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 276.246941][T13641] RBP: 00007f6012d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.246948][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.246954][T13641] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 276.246969][T13641] [ 276.395589][ T5139] Bluetooth: hci5: command tx timeout [ 276.402784][T13647] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 276.427116][T13647] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 276.458976][T13649] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 276.468410][T13649] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref] [ 276.468539][T13649] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 276.468591][T13649] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 276.468677][T13649] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 276.468973][T13649] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 276.491241][ T7926] usb 14-1: USB disconnect, device number 2 [ 276.506891][ T7926] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 276.518576][ T7926] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 276.521267][ T7926] keyspan 14-1:1.0: device disconnected [ 276.542584][T13649] pci 0000:00:01.0: Adding to iommu group 1 [ 276.578029][T13649] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 276.578054][T13649] pci 0000:00:01.0: vgaarb: bridge control possible [ 276.578067][T13649] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 276.594332][T13649] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 276.595102][T13649] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 276.604562][T13649] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 276.608160][T13649] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 276.655100][T13649] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 276.671110][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 276.677151][T13649] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 276.677184][T13649] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 276.678124][T13649] [drm] features: -virgl +edid -resource_blob -host_visible [ 276.678136][T13649] [drm] features: -context_init -blob_alignment [ 276.692201][T13649] [drm] number of scanouts: 1 [ 276.692237][T13649] [drm] number of cap sets: 0 [ 276.738109][T13649] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 276.828340][T13649] Console: switching to colour frame buffer device 160x50 [ 276.847563][T13649] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 277.009872][T13684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13684 comm=syz.6.2444 [ 277.035415][ T5139] Bluetooth: hci4: command 0x0405 tx timeout [ 277.062100][T13689] netlink: 'syz.2.2449': attribute type 4 has an invalid length. [ 277.091843][T13687] netlink: 'syz.6.2446': attribute type 1 has an invalid length. [ 277.130118][T13687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.159152][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 277.159164][ T43] audit: type=1400 audit(1792766658.126:1324): avc: denied { write } for pid=13697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.159784][T13687] bond4: (slave geneve2): making interface the new active one [ 277.160321][T13700] FAULT_INJECTION: forcing a failure. [ 277.160321][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 277.160352][T13700] CPU: 0 UID: 0 PID: 13700 Comm: syz.1.2450 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 277.160370][T13700] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 277.160375][T13700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.160382][T13700] Call Trace: [ 277.160387][T13700] [ 277.160393][T13700] dump_stack_lvl+0x100/0x190 [ 277.160471][T13700] should_fail_ex.cold+0x5/0xa [ 277.160496][T13700] should_failslab+0xc2/0x120 [ 277.160534][T13700] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 277.160550][T13700] ? alloc_vmap_area+0x17b9/0x2bc0 [ 277.160566][T13700] ? alloc_vmap_area+0x643/0x2bc0 [ 277.160585][T13700] alloc_vmap_area+0x643/0x2bc0 [ 277.160605][T13700] ? kasan_save_track+0x14/0x30 [ 277.160621][T13700] ? __kasan_kmalloc+0xaa/0xb0 [ 277.160637][T13700] ? __pfx_alloc_vmap_area+0x10/0x10 [ 277.160654][T13700] ? __get_vm_area_node+0x124/0x350 [ 277.160672][T13700] __get_vm_area_node+0x1ed/0x350 [ 277.160692][T13700] __vmalloc_node_range_noprof+0x268/0x1420 [ 277.160710][T13700] ? kernel_clone+0x176/0x9d0 [ 277.160741][T13700] ? lock_acquire+0x1d1/0x380 [ 277.160766][T13700] ? kernel_clone+0x176/0x9d0 [ 277.160777][T13700] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 277.160793][T13700] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 277.160813][T13700] ? rcu_is_watching+0x13/0xc0 [ 277.160830][T13700] ? trace_kmem_cache_alloc+0xdd/0x100 [ 277.160850][T13700] ? kernel_clone+0x176/0x9d0 [ 277.160861][T13700] __vmalloc_node_noprof+0xad/0xf0 [ 277.160880][T13700] ? kernel_clone+0x176/0x9d0 [ 277.160893][T13700] copy_process+0x80b/0x84c0 [ 277.160906][T13700] ? __pfx___futex_wait+0x10/0x10 [ 277.160918][T13700] ? futex_hash+0x311/0x400 [ 277.160938][T13700] ? __pfx_copy_process+0x10/0x10 [ 277.160949][T13700] ? __pfx_get_futex_key+0x10/0x10 [ 277.160982][T13700] kernel_clone+0x176/0x9d0 [ 277.160994][T13700] ? find_held_lock+0x2b/0x80 [ 277.161011][T13700] ? __pfx_kernel_clone+0x10/0x10 [ 277.161025][T13700] ? ksys_write+0x190/0x250 [ 277.161044][T13700] __do_sys_clone+0xd9/0x120 [ 277.161055][T13700] ? __pfx___do_sys_clone+0x10/0x10 [ 277.161066][T13700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.161117][T13700] do_syscall_64+0x123/0x790 [ 277.161136][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.161149][T13700] RIP: 0033:0x7fe44859f559 [ 277.161160][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.161173][T13700] RSP: 002b:00007fe449427fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 277.161186][T13700] RAX: ffffffffffffffda RBX: 00007fe448825fa0 RCX: 00007fe44859f559 [ 277.161194][T13700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006a00400 [ 277.161201][T13700] RBP: 00007fe448636b20 R08: 0000000000000000 R09: 0000000000000000 [ 277.161207][T13700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.161214][T13700] R13: 00007fe448826038 R14: 00007fe448825fa0 R15: 00007fff4f800d78 [ 277.161230][T13700] [ 277.161368][T13687] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 277.238216][ T43] audit: type=1400 audit(1792766658.206:1325): avc: denied { write } for pid=13707 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.274732][T13687] __nla_validate_parse: 7 callbacks suppressed [ 277.274744][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2446'. [ 277.298044][ T43] audit: type=1326 audit(1792766658.266:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298080][ T43] audit: type=1326 audit(1792766658.266:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298104][ T43] audit: type=1326 audit(1792766658.266:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298126][ T43] audit: type=1326 audit(1792766658.266:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298148][ T43] audit: type=1326 audit(1792766658.266:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298169][ T43] audit: type=1326 audit(1792766658.266:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298208][ T43] audit: type=1326 audit(1792766658.266:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.298232][ T43] audit: type=1326 audit(1792766658.266:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.6.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6011f9f559 code=0x7fc00000 [ 277.335352][ T8018] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 277.355360][ T5139] Bluetooth: hci1: command tx timeout [ 277.374240][T13716] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 277.385072][ T9561] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 277.495640][ T8018] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.499801][ T8018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.499831][ T8018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.499852][ T8018] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.499886][ T8018] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.501083][ T8018] usb 14-1: config 0 descriptor?? [ 277.555774][ T9561] usb 7-1: Using ep0 maxpacket: 8 [ 277.556416][ T9561] usb 7-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 277.558390][ T9561] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.558408][ T9561] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.558426][ T9561] usb 7-1: config 1 interface 0 has no altsetting 0 [ 277.560095][ T9561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.560108][ T9561] usb 7-1: Product: 混昶柰柙ꋽ髳鰄岲曂뎸á–輕៘䳚ëƒê¬±ä†¤á˜¿å„¼á“Šæ©ï¨–沦縳秱㶦㌼꺜沲뛠㾆뤞éƒïŠºî¼³î§®ë”‹è—¤å£¯à¿†ç™°îžŸå¼ï¹¤æ ‰è•€ì•—ആ⥊龲衢줵澃샘裹㸌 [ 277.560123][ T9561] usb 7-1: Manufacturer: ꇌॷﲑç£ç§•â´ä¥î°’빣ꂷ柊ɓ⫦需鞲ဓ羉蕖褡ï»ã¬¹ä–£à ã¡¦ì­¦ìˆ‹ê´€êˆŠè¤–೺传녢⃺粇ìŠê‡…䣻۵郹棺ᷖ㯭⹬ᮆ⮩㽫ꇞê¥ë€ æ™‘飌â„䳪檵邢貰ë¢í°ä³ê£žê€¼æ»…á˜é¡¤ä«·ë¿”臄ꑜá·ã¡ä±¹ä¢—ఋ봇 [ 277.560140][ T9561] usb 7-1: SerialNumber: Ð [ 277.657686][T13734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13734 comm=syz.6.2454 [ 277.658923][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 277.658935][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2454'. [ 277.732897][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2456'. [ 277.896552][T13759] bad cache= option: noe [ 277.896552][T13759] [ 277.896748][T13759] CIFS: VFS: bad cache= option: noe [ 277.898203][T13760] bad cache= option: noe [ 277.898203][T13760] [ 277.898213][T13760] CIFS: VFS: bad cache= option: noe [ 277.917975][ T8018] usbhid 14-1:0.0: can't add hid device: -71 [ 277.918036][ T8018] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 277.923366][ T8018] usb 14-1: USB disconnect, device number 3 [ 277.977906][ T9561] usbhid 7-1:1.0: can't add hid device: -71 [ 277.977957][ T9561] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 277.979808][ T9561] usb 7-1: USB disconnect, device number 4 [ 277.982572][ T5799] udevd[5799]: setting mode of /dev/bus/usb/007/004 to 020664 failed: No such file or directory [ 277.982670][ T5799] udevd[5799]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory [ 278.002808][T13769] FAULT_INJECTION: forcing a failure. [ 278.002808][T13769] name failslab, interval 1, probability 0, space 0, times 0 [ 278.002827][T13769] CPU: 3 UID: 0 PID: 13769 Comm: syz.6.2460 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 278.002843][T13769] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 278.002849][T13769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.002856][T13769] Call Trace: [ 278.002860][T13769] [ 278.002864][T13769] dump_stack_lvl+0x100/0x190 [ 278.002885][T13769] should_fail_ex.cold+0x5/0xa [ 278.002902][T13769] should_failslab+0xc2/0x120 [ 278.002920][T13769] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 278.002936][T13769] ? __d_alloc+0x34/0xad0 [ 278.002950][T13769] __d_alloc+0x34/0xad0 [ 278.002963][T13769] d_alloc+0x4a/0x1e0 [ 278.002975][T13769] lookup_one_qstr_excl+0x171/0x250 [ 278.002990][T13769] start_dirop+0x59/0xb0 [ 278.003006][T13769] simple_start_creating+0xf9/0x110 [ 278.003025][T13769] ? __pfx_simple_start_creating+0x10/0x10 [ 278.003043][T13769] ? mntput+0x70/0xa0 [ 278.003059][T13769] ? simple_pin_fs+0xa3/0x190 [ 278.003076][T13769] debugfs_start_creating.part.0+0x7b/0x150 [ 278.003094][T13769] __debugfs_create_file+0xa9/0x500 [ 278.003110][T13769] debugfs_create_file_full+0x41/0x60 [ 278.003127][T13769] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 278.003146][T13769] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 278.003177][T13769] ? lockdep_init_map_type+0x5c/0x250 [ 278.003192][T13769] ? __pfx_gtp_link_setup+0x10/0x10 [ 278.003242][T13769] alloc_netdev_mqs+0x314/0x1540 [ 278.003265][T13769] rtnl_create_link+0xc13/0xf80 [ 278.003279][T13769] rtnl_newlink+0x15bc/0x2620 [ 278.003301][T13769] ? __pfx_rtnl_newlink+0x10/0x10 [ 278.003317][T13769] ? avc_has_perm_noaudit+0x56/0x470 [ 278.003336][T13769] ? find_held_lock+0x2b/0x80 [ 278.003358][T13769] ? avc_has_perm_noaudit+0x11e/0x470 [ 278.003373][T13769] ? avc_has_perm_noaudit+0x11e/0x470 [ 278.003401][T13769] ? lock_acquire+0x1d1/0x380 [ 278.003427][T13769] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 278.003440][T13769] ? find_held_lock+0x2b/0x80 [ 278.003456][T13769] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 278.003467][T13769] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 278.003480][T13769] ? __pfx_rtnl_newlink+0x10/0x10 [ 278.003492][T13769] rtnetlink_rcv_msg+0x95e/0xe90 [ 278.003505][T13769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.003525][T13769] netlink_rcv_skb+0x159/0x420 [ 278.003543][T13769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.003556][T13769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.003579][T13769] ? netlink_deliver_tap+0x1ae/0xb50 [ 278.003599][T13769] netlink_unicast+0x668/0x950 [ 278.003618][T13769] ? __pfx_netlink_unicast+0x10/0x10 [ 278.003640][T13769] netlink_sendmsg+0x9ac/0x10c0 [ 278.003660][T13769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.003681][T13769] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.003699][T13769] ? ____sys_sendmsg+0xa99/0xc30 [ 278.003711][T13769] ____sys_sendmsg+0xa99/0xc30 [ 278.003722][T13769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.003746][T13769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.003762][T13769] ? lock_acquire+0x1d1/0x380 [ 278.003774][T13769] ? get_pid_task+0x2a/0x250 [ 278.003799][T13769] ___sys_sendmsg+0x190/0x1e0 [ 278.003813][T13769] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.003826][T13769] ? get_pid_task+0x106/0x250 [ 278.003847][T13769] ? find_held_lock+0x2b/0x80 [ 278.003872][T13769] __sys_sendmsg+0x160/0x210 [ 278.003890][T13769] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.003915][T13769] do_syscall_64+0x123/0x790 [ 278.003932][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.003944][T13769] RIP: 0033:0x7f6011f9f559 [ 278.003954][T13769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.003965][T13769] RSP: 002b:00007f6012d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.003976][T13769] RAX: ffffffffffffffda RBX: 00007f6012226090 RCX: 00007f6011f9f559 [ 278.003983][T13769] RDX: 00000000200080c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 278.003990][T13769] RBP: 00007f6012d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.003999][T13769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.004005][T13769] R13: 00007f6012226128 R14: 00007f6012226090 R15: 00007ffffdc02348 [ 278.004021][T13769] [ 278.086438][T13772] FAULT_INJECTION: forcing a failure. [ 278.086438][T13772] name failslab, interval 1, probability 0, space 0, times 0 [ 278.086461][T13772] CPU: 3 UID: 0 PID: 13772 Comm: syz.6.2462 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 278.086480][T13772] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 278.086485][T13772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.086493][T13772] Call Trace: [ 278.086498][T13772] [ 278.086503][T13772] dump_stack_lvl+0x100/0x190 [ 278.086523][T13772] should_fail_ex.cold+0x5/0xa [ 278.086556][T13772] should_failslab+0xc2/0x120 [ 278.086575][T13772] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 278.086592][T13772] ? do_syscall_64+0x123/0x790 [ 278.086607][T13772] ? selinux_socket_create+0xe7/0x590 [ 278.086622][T13772] ? sock_alloc_inode+0x26/0x2c0 [ 278.086635][T13772] ? __pfx_sock_alloc_inode+0x10/0x10 [ 278.086648][T13772] sock_alloc_inode+0x26/0x2c0 [ 278.086661][T13772] ? __pfx_sock_alloc_inode+0x10/0x10 [ 278.086672][T13772] alloc_inode+0x68/0x250 [ 278.086687][T13772] sock_alloc+0x42/0x240 [ 278.086698][T13772] __sock_create+0xc2/0x860 [ 278.086713][T13772] p9_fd_create_unix+0x20a/0x350 [ 278.086732][T13772] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 278.086753][T13772] ? lockdep_init_map_type+0x5c/0x250 [ 278.086770][T13772] p9_client_create+0x563/0xd40 [ 278.086789][T13772] ? __pfx_p9_client_create+0x10/0x10 [ 278.086811][T13772] ? lockdep_init_map_type+0x5c/0x250 [ 278.086825][T13772] ? __raw_spin_lock_init+0x3a/0x110 [ 278.086843][T13772] v9fs_session_init+0x3c/0xdd0 [ 278.086856][T13772] ? v9fs_get_tree+0x9c/0xb50 [ 278.086874][T13772] v9fs_get_tree+0xb8/0xb50 [ 278.086887][T13772] ? rcu_is_watching+0x13/0xc0 [ 278.086904][T13772] ? __pfx_v9fs_get_tree+0x10/0x10 [ 278.086920][T13772] ? bpf_lsm_capable+0x9/0x10 [ 278.086932][T13772] ? security_capable+0x80/0x260 [ 278.086948][T13772] vfs_get_tree+0x92/0x320 [ 278.086960][T13772] path_mount+0x7d0/0x2850 [ 278.086975][T13772] ? __pfx_path_mount+0x10/0x10 [ 278.086987][T13772] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.087003][T13772] ? putname+0xb1/0x110 [ 278.087013][T13772] ? kmem_cache_free+0x127/0x6c0 [ 278.087030][T13772] ? __x64_sys_mount+0x293/0x310 [ 278.087042][T13772] __x64_sys_mount+0x293/0x310 [ 278.087056][T13772] ? __pfx___x64_sys_mount+0x10/0x10 [ 278.087073][T13772] do_syscall_64+0x123/0x790 [ 278.087089][T13772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.087101][T13772] RIP: 0033:0x7f6011f9f559 [ 278.087112][T13772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.087124][T13772] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.087135][T13772] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 278.087143][T13772] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000200000000380 [ 278.087150][T13772] RBP: 00007f6012036b20 R08: 0000200000000440 R09: 0000000000000000 [ 278.087157][T13772] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 278.087164][T13772] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 278.087179][T13772] [ 278.088566][T13772] socket: no more sockets [ 278.088573][T13772] 9pnet_fd: p9_fd_create_unix (13772): problem creating socket [ 278.148624][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13779 comm=syz.6.2463 [ 278.152125][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 278.152137][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2463'. [ 278.238266][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 278.406344][T13800] kvm [13799]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 278.406974][T13800] kvm [13799]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 278.475739][ T5783] Bluetooth: hci5: command tx timeout [ 278.489095][ T8018] usb 11-1: new full-speed USB device number 33 using dummy_hcd [ 278.663783][ T8018] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.664896][ T8018] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.664921][ T8018] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.664942][ T8018] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 278.664959][ T8018] usb 11-1: config 0 interface 0 has no altsetting 0 [ 278.670452][ T8018] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 278.670465][ T8018] usb 11-1: Product: syz [ 278.670473][ T8018] usb 11-1: Manufacturer: syz [ 278.670481][ T8018] usb 11-1: SerialNumber: syz [ 278.672273][ T8018] usb 11-1: config 0 descriptor?? [ 278.674758][T13827] tipc: Started in network mode [ 278.674773][T13827] tipc: Node identity 76f9624db60d, cluster identity 4711 [ 278.674881][T13827] tipc: Enabled bearer , priority 0 [ 278.675766][T13827] syzkaller0: entered promiscuous mode [ 278.675778][T13827] syzkaller0: entered allmulticast mode [ 278.682310][ T8018] usb 11-1: selecting invalid altsetting 0 [ 278.732019][T13827] syzkaller0: mtu less than device minimum [ 278.732651][T13826] tipc: Resetting bearer [ 278.768323][T13829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13829 comm=syz.2.2472 [ 278.771436][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 278.771448][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 278.773178][T13826] tipc: Disabling bearer [ 278.806787][T13834] FAULT_INJECTION: forcing a failure. [ 278.806787][T13834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.806807][T13834] CPU: 0 UID: 0 PID: 13834 Comm: syz.1.2473 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 278.806824][T13834] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 278.806829][T13834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.806836][T13834] Call Trace: [ 278.806841][T13834] [ 278.806845][T13834] dump_stack_lvl+0x100/0x190 [ 278.806865][T13834] should_fail_ex.cold+0x5/0xa [ 278.806882][T13834] _copy_from_user+0x2e/0xd0 [ 278.806896][T13834] bpf_test_init.isra.0+0xaf/0x100 [ 278.806914][T13834] bpf_prog_test_run_skb+0x48e/0x3510 [ 278.806933][T13834] ? lock_acquire+0x1d1/0x380 [ 278.806945][T13834] ? __fget_files+0x34/0x3d0 [ 278.806962][T13834] ? find_held_lock+0x2b/0x80 [ 278.806979][T13834] ? __fget_files+0x1c1/0x3d0 [ 278.806999][T13834] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 278.807018][T13834] ? fput+0x7c/0x100 [ 278.807029][T13834] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 278.807046][T13834] __sys_bpf+0x2265/0x4a30 [ 278.807063][T13834] ? __pfx___sys_bpf+0x10/0x10 [ 278.807075][T13834] ? find_held_lock+0x2b/0x80 [ 278.807091][T13834] ? get_pid_task+0xfc/0x250 [ 278.807104][T13834] ? get_pid_task+0xfc/0x250 [ 278.807123][T13834] ? find_held_lock+0x2b/0x80 [ 278.807142][T13834] ? rcu_read_lock_any_held+0x6a/0x90 [ 278.807159][T13834] ? find_held_lock+0x2b/0x80 [ 278.807175][T13834] ? ksys_write+0x190/0x250 [ 278.807188][T13834] ? ksys_write+0x190/0x250 [ 278.807208][T13834] ? lock_acquire+0x1d1/0x380 [ 278.807229][T13834] ? fput+0x7c/0x100 [ 278.807238][T13834] ? ksys_write+0x1ac/0x250 [ 278.807254][T13834] ? __x64_sys_bpf+0xce/0x140 [ 278.807266][T13834] __x64_sys_bpf+0xce/0x140 [ 278.807280][T13834] ? do_syscall_64+0xae/0x790 [ 278.807296][T13834] do_syscall_64+0x123/0x790 [ 278.807311][T13834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.807324][T13834] RIP: 0033:0x7fe44859f559 [ 278.807333][T13834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.807344][T13834] RSP: 002b:00007fe449428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.807356][T13834] RAX: ffffffffffffffda RBX: 00007fe448825fa0 RCX: 00007fe44859f559 [ 278.807363][T13834] RDX: 0000000000000050 RSI: 0000200000001180 RDI: 000000000000000a [ 278.807370][T13834] RBP: 00007fe449428090 R08: 0000000000000000 R09: 0000000000000000 [ 278.807377][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.807383][T13834] R13: 00007fe448826038 R14: 00007fe448825fa0 R15: 00007fff4f800d78 [ 278.807398][T13834] [ 278.884284][T12103] usb 11-1: USB disconnect, device number 33 [ 278.947198][T13846] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 278.958030][T13849] lo: entered allmulticast mode [ 279.085216][ T41] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 279.209510][T13862] device-mapper: table: 248:11: multipath: unknown path selector type (-EINVAL) [ 279.209528][T13862] device-mapper: ioctl: error adding target to table [ 279.211690][T13848] lo: left allmulticast mode [ 279.235655][ T41] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.236503][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.236519][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.236531][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.236550][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.237700][ T41] usb 6-1: config 0 descriptor?? [ 279.243136][T13867] FAULT_INJECTION: forcing a failure. [ 279.243136][T13867] name failslab, interval 1, probability 0, space 0, times 0 [ 279.243201][T13867] CPU: 3 UID: 0 PID: 13867 Comm: syz.2.2481 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 279.243219][T13867] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 279.243224][T13867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.243236][T13867] Call Trace: [ 279.243240][T13867] [ 279.243245][T13867] dump_stack_lvl+0x100/0x190 [ 279.243266][T13867] should_fail_ex.cold+0x5/0xa [ 279.243282][T13867] should_failslab+0xc2/0x120 [ 279.243300][T13867] __kmalloc_noprof+0xfc/0x840 [ 279.243328][T13867] ? tomoyo_encode2+0xfb/0x3c0 [ 279.243343][T13867] tomoyo_encode2+0xfb/0x3c0 [ 279.243357][T13867] tomoyo_encode+0x29/0x50 [ 279.243368][T13867] tomoyo_realpath_from_path+0x18c/0x690 [ 279.243384][T13867] tomoyo_path_number_perm+0x23c/0x580 [ 279.243400][T13867] ? tomoyo_path_number_perm+0x22e/0x580 [ 279.243418][T13867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.243440][T13867] ? __lock_acquire+0x5c0/0x1f40 [ 279.243460][T13867] ? __fget_files+0x34/0x3d0 [ 279.243477][T13867] ? find_held_lock+0x2b/0x80 [ 279.243493][T13867] ? hook_file_ioctl_common+0x140/0x440 [ 279.243509][T13867] ? __fget_files+0x21f/0x3d0 [ 279.243529][T13867] security_file_ioctl+0xd3/0x230 [ 279.243547][T13867] __x64_sys_ioctl+0xb7/0x210 [ 279.243568][T13867] do_syscall_64+0x123/0x790 [ 279.243592][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.243612][T13867] RIP: 0033:0x7f45df79f559 [ 279.243627][T13867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.243645][T13867] RSP: 002b:00007f45dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.243665][T13867] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 279.243677][T13867] RDX: 0000200000000040 RSI: 0000000000002271 RDI: 0000000000000003 [ 279.243691][T13867] RBP: 00007f45dd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.243703][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.243714][T13867] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 279.243736][T13867] [ 279.243784][T13867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.299183][T13870] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2482'. [ 279.436763][ T5783] Bluetooth: hci1: command tx timeout [ 279.467202][T13879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13879 comm=syz.9.2483 [ 279.469160][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2483'. [ 279.514324][T13884] batadv_slave_1: entered promiscuous mode [ 279.514422][T13884] batadv_slave_1: left promiscuous mode [ 279.571990][T13893] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 279.644822][ C3] raw-gadget.1 gadget.1: ignoring, device is not running [ 279.648151][ T41] usbhid 6-1:0.0: can't add hid device: -71 [ 279.648201][ T41] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 279.652546][ T41] usb 6-1: USB disconnect, device number 11 [ 280.467772][ T9561] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 280.636480][ T9561] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 280.637350][ T9561] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.637379][ T9561] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 280.637393][ T9561] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 280.637412][ T9561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.652883][T13927] XFS (nbd9): SB validate failed with error -5. [ 280.660890][T13926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13926 comm=syz.6.2496 [ 280.696864][T13927] FAULT_INJECTION: forcing a failure. [ 280.696864][T13927] name failslab, interval 1, probability 0, space 0, times 0 [ 280.696888][T13927] CPU: 2 UID: 0 PID: 13927 Comm: syz.9.2497 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 280.696910][T13927] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 280.696916][T13927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.696922][T13927] Call Trace: [ 280.696927][T13927] [ 280.696933][T13927] dump_stack_lvl+0x100/0x190 [ 280.696954][T13927] should_fail_ex.cold+0x5/0xa [ 280.696972][T13927] should_failslab+0xc2/0x120 [ 280.696991][T13927] kmem_cache_alloc_noprof+0x92/0x6a0 [ 280.697008][T13927] ? alloc_vfsmnt+0x25/0x840 [ 280.697025][T13927] alloc_vfsmnt+0x25/0x840 [ 280.697041][T13927] clone_mnt+0x4b/0x9c0 [ 280.697055][T13927] ? is_subdir+0x1a8/0x3e0 [ 280.697069][T13927] copy_tree+0x327/0xc50 [ 280.697084][T13927] __do_loopback+0x338/0x540 [ 280.697098][T13927] vfs_open_tree+0x651/0xb60 [ 280.697111][T13927] ? _raw_spin_unlock+0x28/0x50 [ 280.697124][T13927] ? __pfx_vfs_open_tree+0x10/0x10 [ 280.697141][T13927] __x64_sys_open_tree+0xbe/0x150 [ 280.697155][T13927] do_syscall_64+0x123/0x790 [ 280.697171][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.697184][T13927] RIP: 0033:0x7fef8c19f559 [ 280.697194][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.697205][T13927] RSP: 002b:00007fef8d06f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 280.697217][T13927] RAX: ffffffffffffffda RBX: 00007fef8c425fa0 RCX: 00007fef8c19f559 [ 280.697226][T13927] RDX: 0000000000089901 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 280.697235][T13927] RBP: 00007fef8c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 280.697242][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.697249][T13927] R13: 00007fef8c426038 R14: 00007fef8c425fa0 R15: 00007ffc01f61de8 [ 280.697264][T13927] [ 280.781152][T13941] xfs: Unknown parameter 'di(mßlYãAC™[«`¤_†¦Rd²ÐI¢gÌçãö^Gq×9¶¼©úgvjÇÚáÏÎ]wLˆb%WB !HÁ"  €' [ 280.790931][T13941] FAULT_INJECTION: forcing a failure. [ 280.790931][T13941] name failslab, interval 1, probability 0, space 0, times 0 [ 280.790962][T13941] CPU: 3 UID: 0 PID: 13941 Comm: syz.9.2501 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 280.790991][T13941] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 280.790999][T13941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.791012][T13941] Call Trace: [ 280.791020][T13941] [ 280.791028][T13941] dump_stack_lvl+0x100/0x190 [ 280.791083][T13941] should_fail_ex.cold+0x5/0xa [ 280.791112][T13941] should_failslab+0xc2/0x120 [ 280.791141][T13941] __kmalloc_cache_noprof+0x91/0x6d0 [ 280.791161][T13941] ? __kasan_kmalloc+0xaa/0xb0 [ 280.791185][T13941] ? nci_allocate_device+0x105/0x410 [ 280.791209][T13941] nci_allocate_device+0x105/0x410 [ 280.791231][T13941] virtual_ncidev_open+0x6f/0x220 [ 280.791254][T13941] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 280.791276][T13941] misc_open+0x26d/0x450 [ 280.791301][T13941] ? __pfx_misc_open+0x10/0x10 [ 280.791326][T13941] chrdev_open+0x234/0x6a0 [ 280.791354][T13941] ? __pfx_chrdev_open+0x10/0x10 [ 280.791380][T13941] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 280.791408][T13941] do_dentry_open+0x674/0x1470 [ 280.791433][T13941] ? __pfx_chrdev_open+0x10/0x10 [ 280.791463][T13941] vfs_open_consume+0xcc/0x460 [ 280.791486][T13941] path_openat+0x1547/0x23f0 [ 280.791517][T13941] ? __pfx_path_openat+0x10/0x10 [ 280.791552][T13941] do_file_open+0x20e/0x430 [ 280.791579][T13941] ? __pfx_do_file_open+0x10/0x10 [ 280.791625][T13941] ? _raw_spin_unlock+0x28/0x50 [ 280.791645][T13941] ? alloc_fd+0x471/0x7a0 [ 280.791680][T13941] do_sys_openat2+0x163/0x1d0 [ 280.791699][T13941] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.791719][T13941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.791751][T13941] __x64_sys_openat+0x12d/0x210 [ 280.791770][T13941] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.791787][T13941] ? ksys_write+0x1ac/0x250 [ 280.791819][T13941] do_syscall_64+0x123/0x790 [ 280.791844][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.791864][T13941] RIP: 0033:0x7fef8c19f559 [ 280.791886][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.791904][T13941] RSP: 002b:00007fef8d06f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.791924][T13941] RAX: ffffffffffffffda RBX: 00007fef8c425fa0 RCX: 00007fef8c19f559 [ 280.791937][T13941] RDX: 0000000000000002 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 280.791950][T13941] RBP: 00007fef8c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 280.791963][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.791976][T13941] R13: 00007fef8c426038 R14: 00007fef8c425fa0 R15: 00007ffc01f61de8 [ 280.792003][T13941] [ 280.793136][T13941] comedi: valid board names for 8255 driver are: [ 280.793146][T13941] 8255 [ 280.793153][T13941] comedi: valid board names for vmk80xx driver are: [ 280.793159][T13941] vmk80xx [ 280.793166][T13941] comedi: valid board names for usbduxsigma driver are: [ 280.793173][T13941] usbduxsigma [ 280.793179][T13941] comedi: valid board names for usbduxfast driver are: [ 280.793187][T13941] usbduxfast [ 280.793193][T13941] comedi: valid board names for usbdux driver are: [ 280.793200][T13941] usbdux [ 280.793206][T13941] comedi: valid board names for ni6501 driver are: [ 280.793214][T13941] ni6501 [ 280.793220][T13941] comedi: valid board names for dt9812 driver are: [ 280.793227][T13941] dt9812 [ 280.793233][T13941] comedi: valid board names for ni_labpc_cs driver are: [ 280.793240][T13941] ni_labpc_cs [ 280.793247][T13941] comedi: valid board names for ni_daq_700 driver are: [ 280.793254][T13941] ni_daq_700 [ 280.793261][T13941] comedi: valid board names for labpc_pci driver are: [ 280.793268][T13941] labpc_pci [ 280.793274][T13941] comedi: valid board names for adl_pci9118 driver are: [ 280.793282][T13941] pci9118dg [ 280.793288][T13941] pci9118hg [ 280.793294][T13941] pci9118hr [ 280.793300][T13941] comedi: valid board names for 8255_pci driver are: [ 280.793308][T13941] 8255_pci [ 280.793314][T13941] comedi: valid board names for s526 driver are: [ 280.793321][T13941] s526 [ 280.793327][T13941] comedi: valid board names for multiq3 driver are: [ 280.793334][T13941] multiq3 [ 280.793340][T13941] comedi: valid board names for pcmuio driver are: [ 280.793348][T13941] pcmuio48 [ 280.793354][T13941] pcmuio96 [ 280.793360][T13941] comedi: valid board names for pcmmio driver are: [ 280.793367][T13941] pcmmio [ 280.793373][T13941] comedi: valid board names for pcmda12 driver are: [ 280.793380][T13941] pcmda12 [ 280.793386][T13941] comedi: valid board names for pcmad driver are: [ 280.793394][T13941] pcmad12 [ 280.793400][T13941] pcmad16 [ 280.793406][T13941] comedi: valid board names for ni_labpc driver are: [ 280.793413][T13941] lab-pc-1200 [ 280.793419][T13941] lab-pc-1200ai [ 280.793425][T13941] lab-pc+ [ 280.793432][T13941] comedi: valid board names for atmio16 driver are: [ 280.793439][T13941] atmio16 [ 280.793445][T13941] atmio16d [ 280.793451][T13941] comedi: valid board names for ni_at_ao driver are: [ 280.793458][T13941] at-ao-6 [ 280.793463][T13941] at-ao-10 [ 280.793469][T13941] comedi: valid board names for ni_at_a2150 driver are: [ 280.793477][T13941] ni_at_a2150 [ 280.793484][T13941] comedi: valid board names for adq12b driver are: [ 280.793491][T13941] adq12b [ 280.793496][T13941] comedi: valid board names for mpc624 driver are: [ 280.793503][T13941] mpc624 [ 280.793510][T13941] comedi: valid board names for c6xdigio driver are: [ 280.793517][T13941] c6xdigio [ 280.793523][T13941] comedi: valid board names for aio_iiro_16 driver are: [ 280.793531][T13941] aio_iiro_16 [ 280.793537][T13941] comedi: valid board names for aio_aio12_8 driver are: [ 280.793544][T13941] aio_aio12_8 [ 280.793551][T13941] aio_ai12_8 [ 280.793557][T13941] aio_ao12_4 [ 280.793563][T13941] comedi: valid board names for fl512 driver are: [ 280.793570][T13941] fl512 [ 280.793575][T13941] comedi: valid board names for dmm32at driver are: [ 280.793582][T13941] dmm32at [ 280.793589][T13941] comedi: valid board names for dt282x driver are: [ 280.793596][T13941] dt2821 [ 280.793602][T13941] dt2821-f [ 280.793608][T13941] dt2821-g [ 280.793614][T13941] dt2823 [ 280.793619][T13941] dt2824-pgh [ 280.793626][T13941] dt2824-pgl [ 280.793632][T13941] dt2825 [ 280.793638][T13941] dt2827 [ 280.793643][T13941] dt2828 [ 280.793650][T13941] dt2829 [ 280.793655][T13941] dt21-ez [ 280.793661][T13941] dt23-ez [ 280.793667][T13941] dt24-ez [ 280.793673][T13941] dt24-ez-pgl [ 280.793679][T13941] comedi: valid board names for dt2817 driver are: [ 280.793687][T13941] dt2817 [ 280.793692][T13941] comedi: valid board names for dt2815 driver are: [ 280.793699][T13941] dt2815 [ 280.793705][T13941] comedi: valid board names for dt2814 driver are: [ 280.793712][T13941] dt2814 [ 280.793718][T13941] comedi: valid board names for dt2811 driver are: [ 280.793725][T13941] dt2811-pgh [ 280.793731][T13941] dt2811-pgl [ 280.793737][T13941] comedi: valid board names for dt2801 driver are: [ 280.793744][T13941] dt2801 [ 280.793749][T13941] comedi: valid board names for das6402 driver are: [ 280.793756][T13941] das6402-12 [ 280.793762][T13941] das6402-16 [ 280.793768][T13941] comedi: valid board names for das1800 driver are: [ 280.793776][T13941] das-1701st [ 280.793781][T13941] das-1701st-da [ 280.793787][T13941] das-1702st [ 280.793793][T13941] das-1702st-da [ 280.793799][T13941] das-1702hr [ 280.793805][T13941] das-1702hr-da [ 280.793811][T13941] das-1701ao [ 280.793817][T13941] das-1702ao [ 280.793823][T13941] das-1801st [ 280.793829][T13941] das-1801st-da [ 280.793835][T13941] das-1802st [ 280.793841][T13941] das-1802st-da [ 280.793847][T13941] das-1802hr [ 280.793853][T13941] das-1802hr-da [ 280.793859][T13941] das-1801hc [ 280.793864][T13941] das-1802hc [ 280.793871][T13941] das-1801ao [ 280.793877][T13941] das-1802ao [ 280.793890][T13941] comedi: valid board names for das800 driver are: [ 280.793897][T13941] das-800 [ 280.793903][T13941] cio-das800 [ 280.793909][T13941] das-801 [ 280.793915][T13941] cio-das801 [ 280.793922][T13941] das-802 [ 280.793928][T13941] cio-das802 [ 280.793934][T13941] cio-das802/16 [ 280.793941][T13941] comedi: valid board names for isa-das08 driver are: [ 280.793947][T13941] isa-das08 [ 280.793954][T13941] das08-pgm [ 280.793960][T13941] das08-pgh [ 280.793967][T13941] das08-pgl [ 280.793973][T13941] das08-aoh [ 280.793980][T13941] das08-aol [ 280.793985][T13941] das08-aom [ 280.793991][T13941] das08/jr-ao [ 280.793997][T13941] das08jr-16-ao [ 280.794004][T13941] pc104-das08 [ 280.794010][T13941] das08jr/16 [ 280.794020][T13941] comedi: valid board names for das16m1 driver are: [ 280.794027][T13941] das16m1 [ 280.794033][T13941] comedi: valid board names for dac02 driver are: [ 280.794041][T13941] dac02 [ 280.794047][T13941] comedi: valid board names for rti802 driver are: [ 280.794054][T13941] rti802 [ 280.794060][T13941] comedi: valid board names for rti800 driver are: [ 280.794067][T13941] rti800 [ 280.794073][T13941] rti815 [ 280.794079][T13941] comedi: valid board names for pcm3724 driver are: [ 280.794086][T13941] pcm3724 [ 280.794093][T13941] comedi: valid board names for pcl818 driver are: [ 280.794100][T13941] pcl818l [ 280.794106][T13941] pcl818h [ 280.794112][T13941] pcl818hd [ 280.794118][T13941] pcl818hg [ 280.794124][T13941] pcl818 [ 280.794130][T13941] pcl718 [ 280.794136][T13941] pcm3718 [ 280.794143][T13941] comedi: valid board names for pcl816 driver are: [ 280.794150][T13941] pcl816 [ 280.794156][T13941] pcl814b [ 280.794188][T13941] comedi: valid board names for pcl812 driver are: [ 280.794196][T13941] pcl812 [ 280.794202][T13941] pcl812pg [ 280.794209][T13941] acl8112pg [ 280.794215][T13941] acl8112dg [ 280.794221][T13941] acl8112hg [ 280.794228][T13941] a821pgl [ 280.794234][T13941] a821pglnda [ 280.794240][T13941] a821pgh [ 280.794246][T13941] a822pgl [ 280.794252][T13941] a822pgh [ 280.794258][T13941] a823pgl [ 280.794264][T13941] a823pgh [ 280.794270][T13941] pcl813 [ 280.794276][T13941] pcl813b [ 280.794282][T13941] acl8113 [ 280.794288][T13941] iso813 [ 280.794294][T13941] acl8216 [ 280.794301][T13941] a826pg [ 280.794308][T13941] comedi: valid board names for pcl730 driver are: [ 280.794315][T13941] pcl730 [ 280.794322][T13941] iso730 [ 280.794327][T13941] acl7130 [ 280.794332][T13941] pcm3730 [ 280.794339][T13941] pcl725 [ 280.794344][T13941] p8r8dio [ 280.794350][T13941] acl7225b [ 280.794356][T13941] p16r16dio [ 280.794362][T13941] pcl733 [ 280.794367][T13941] pcl734 [ 280.794373][T13941] opmm-1616-xt [ 280.794379][T13941] pearl-mm-p [ 280.794385][T13941] ir104-pbf [ 280.794391][T13941] comedi: valid board names for pcl726 driver are: [ 280.794399][T13941] pcl726 [ 280.794404][T13941] pcl727 [ 280.794410][T13941] pcl728 [ 280.794415][T13941] acl6126 [ 280.794421][T13941] acl6128 [ 280.794427][T13941] comedi: valid board names for pcl724 driver are: [ 280.794434][T13941] pcl724 [ 280.794440][T13941] pcl722 [ 280.794446][T13941] pcl731 [ 280.794452][T13941] acl7122 [ 280.794456][T13941] acl7124 [ 280.794462][T13941] pet48dio [ 280.794468][T13941] pcmio48 [ 280.794474][T13941] onyx-mm-dio [ 280.794480][T13941] comedi: valid board names for pcl711 driver are: [ 280.794488][T13941] pcl711 [ 280.794493][T13941] pcl711b [ 280.794498][T13941] acl8112hg [ 280.794504][T13941] acl8112dg [ 280.794511][T13941] comedi: valid board names for amplc_pc263 driver are: [ 280.794520][T13941] pc263 [ 280.794525][T13941] comedi: valid board names for amplc_pc236 driver are: [ 280.794533][T13941] pc36at [ 280.794539][T13941] comedi: valid board names for amplc_dio200 driver are: [ 280.794547][T13941] pc212e [ 280.794554][T13941] pc214e [ 280.794560][T13941] pc215e [ 280.794566][T13941] pc218e [ 280.794572][T13941] pc272e [ 280.794578][T13941] comedi: valid board names for comedi_parport driver are: [ 280.794585][T13941] comedi_parport [ 280.794592][T13941] comedi: valid board names for comedi_test driver are: [ 280.794600][T13941] comedi_test [ 280.794606][T13941] comedi: valid board names for comedi_bond driver are: [ 280.794614][T13941] comedi_bond [ 280.869327][T13944] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 280.976837][T13945] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 280.986193][T12103] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 280.989989][ T41] kernel read not supported for file /swradio9 (pid: 41 comm: kworker/3:1) [ 281.015319][ T50] usb 11-1: new full-speed USB device number 34 using dummy_hcd [ 281.138340][T12103] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.139616][T12103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.139634][T12103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.139646][T12103] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.139667][T12103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.141266][T12103] usb 7-1: config 0 descriptor?? [ 281.144956][ T9561] usb 6-1: USB disconnect, device number 12 [ 281.185815][ T50] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.189188][ T50] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.189206][ T50] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 281.189219][ T50] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 281.189230][ T50] usb 11-1: config 0 interface 0 has no altsetting 0 [ 281.191787][ T50] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.191801][ T50] usb 11-1: Product: syz [ 281.191808][ T50] usb 11-1: Manufacturer: syz [ 281.191816][ T50] usb 11-1: SerialNumber: syz [ 281.253867][ T50] usb 11-1: config 0 descriptor?? [ 281.266481][ T50] usb 11-1: selecting invalid altsetting 0 [ 281.458961][ T34] usb 11-1: USB disconnect, device number 34 [ 281.547348][ C3] raw-gadget.1 gadget.2: ignoring, device is not running [ 281.550755][T12103] usbhid 7-1:0.0: can't add hid device: -71 [ 281.550817][T12103] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 281.555173][T12103] usb 7-1: USB disconnect, device number 5 [ 281.773030][T13955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13955 comm=syz.1.2507 [ 281.813576][T13957] No source specified [ 281.813616][T13957] FAULT_INJECTION: forcing a failure. [ 281.813616][T13957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.813632][T13957] CPU: 3 UID: 0 PID: 13957 Comm: syz.1.2508 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 281.813649][T13957] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 281.813654][T13957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.813661][T13957] Call Trace: [ 281.813666][T13957] [ 281.813670][T13957] dump_stack_lvl+0x100/0x190 [ 281.813692][T13957] should_fail_ex.cold+0x5/0xa [ 281.813709][T13957] _copy_to_user+0x32/0xd0 [ 281.813724][T13957] simple_read_from_buffer+0xcb/0x170 [ 281.813743][T13957] proc_fail_nth_read+0x1af/0x230 [ 281.813762][T13957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.813781][T13957] ? rw_verify_area+0xce/0x6d0 [ 281.813794][T13957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.813811][T13957] vfs_read+0x1e4/0xb40 [ 281.813826][T13957] ? lock_acquire+0x1d1/0x380 [ 281.813839][T13957] ? __fget_files+0x34/0x3d0 [ 281.813876][T13957] ? __pfx_vfs_read+0x10/0x10 [ 281.813889][T13957] ? find_held_lock+0x2b/0x80 [ 281.813906][T13957] ? __fget_files+0x215/0x3d0 [ 281.813925][T13957] ? __fget_files+0x21f/0x3d0 [ 281.813946][T13957] ksys_read+0x12a/0x250 [ 281.813960][T13957] ? __pfx_ksys_read+0x10/0x10 [ 281.813978][T13957] do_syscall_64+0x123/0x790 [ 281.813995][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.814007][T13957] RIP: 0033:0x7fe44855fd8e [ 281.814016][T13957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.814030][T13957] RSP: 002b:00007fe449427fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.814041][T13957] RAX: ffffffffffffffda RBX: 00007fe4494286c0 RCX: 00007fe44855fd8e [ 281.814048][T13957] RDX: 000000000000000f RSI: 00007fe4494280a0 RDI: 0000000000000003 [ 281.814055][T13957] RBP: 00007fe449428090 R08: 0000000000000000 R09: 0000000000000000 [ 281.814062][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.814069][T13957] R13: 00007fe448826038 R14: 00007fe448825fa0 R15: 00007fff4f800d78 [ 281.814084][T13957] [ 282.231816][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 282.231830][ T43] audit: type=1800 audit(1792766663.196:1410): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2511" name="file0" dev="overlay" ino=382 res=0 errno=-22 [ 282.253014][ T5850] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.253040][ T5850] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.253058][ T5850] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.253076][ T5850] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.281317][T13966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.290012][T13966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.294282][T13966] bond0 (unregistering): Released all slaves [ 282.309006][ T43] audit: type=1400 audit(1792766663.276:1411): avc: denied { connect } for pid=13983 comm="syz.6.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.372805][T13985] device-mapper: table: 248:12: crypt: Error decoding and setting key (-EINVAL) [ 282.372821][T13985] device-mapper: ioctl: error adding target to table [ 282.386624][T13985] device-mapper: table: 248:13: multipath: error getting device (-ENOENT) [ 282.386641][T13985] device-mapper: ioctl: error adding target to table [ 282.472276][T13997] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 282.473320][T13997] __nla_validate_parse: 10 callbacks suppressed [ 282.473331][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 282.484507][T13997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=13997 comm=syz.1.2520 [ 282.517367][T14002] FAULT_INJECTION: forcing a failure. [ 282.517367][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 282.517389][T14002] CPU: 3 UID: 0 PID: 14002 Comm: syz.6.2522 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 282.517406][T14002] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 282.517411][T14002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.517418][T14002] Call Trace: [ 282.517422][T14002] [ 282.517427][T14002] dump_stack_lvl+0x100/0x190 [ 282.517448][T14002] should_fail_ex.cold+0x5/0xa [ 282.517465][T14002] should_failslab+0xc2/0x120 [ 282.517483][T14002] __kmalloc_cache_noprof+0x91/0x6d0 [ 282.517496][T14002] ? nfnetlink_rcv_batch+0x780/0x2880 [ 282.517514][T14002] nfnetlink_rcv_batch+0x780/0x2880 [ 282.517535][T14002] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 282.517552][T14002] ? lock_acquire+0x1d1/0x380 [ 282.517585][T14002] ? avc_has_perm_noaudit+0x56/0x470 [ 282.517605][T14002] ? avc_has_perm_noaudit+0x145/0x470 [ 282.517633][T14002] ? __nla_parse+0x40/0x60 [ 282.517648][T14002] nfnetlink_rcv+0x3bd/0x440 [ 282.517661][T14002] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 282.517679][T14002] netlink_unicast+0x668/0x950 [ 282.517699][T14002] ? __pfx_netlink_unicast+0x10/0x10 [ 282.517721][T14002] netlink_sendmsg+0x9ac/0x10c0 [ 282.517741][T14002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.517762][T14002] ? selinux_socket_sendmsg+0x198/0x2f0 [ 282.517779][T14002] ? ____sys_sendmsg+0xa99/0xc30 [ 282.517791][T14002] ____sys_sendmsg+0xa99/0xc30 [ 282.517803][T14002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.517825][T14002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.517842][T14002] ? lock_acquire+0x1d1/0x380 [ 282.517853][T14002] ? get_pid_task+0x2a/0x250 [ 282.517869][T14002] ___sys_sendmsg+0x190/0x1e0 [ 282.517884][T14002] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.517897][T14002] ? get_pid_task+0x106/0x250 [ 282.517917][T14002] ? find_held_lock+0x2b/0x80 [ 282.517942][T14002] __sys_sendmsg+0x160/0x210 [ 282.517960][T14002] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.517984][T14002] do_syscall_64+0x123/0x790 [ 282.518001][T14002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.518016][T14002] RIP: 0033:0x7f6011f9f559 [ 282.518029][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.518045][T14002] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.518061][T14002] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 282.518073][T14002] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 282.518083][T14002] RBP: 00007f6012d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.518094][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.518104][T14002] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 282.518127][T14002] [ 282.620813][T14013] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2527'. [ 282.621018][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 282.621028][T14013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2527'. [ 282.646577][T14015] netlink: 'syz.9.2529': attribute type 10 has an invalid length. [ 282.646735][ T43] audit: type=1400 audit(1792766663.616:1412): avc: denied { accept } for pid=14014 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 282.647068][T14015] syz_tun: entered promiscuous mode [ 282.675758][T14015] syzkaller0: entered promiscuous mode [ 282.675774][T14015] syzkaller0: entered allmulticast mode [ 282.721459][ T226] IPVS: starting estimator thread 0... [ 282.736981][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 282.785159][ T50] usb 11-1: new full-speed USB device number 35 using dummy_hcd [ 282.805118][T14026] IPVS: using max 43 ests per chain, 103200 per kthread [ 282.948852][ T50] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.959163][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.959182][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.959193][ T50] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.959214][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.967719][ T50] usb 11-1: config 0 descriptor?? [ 283.377031][ T50] usbhid 11-1:0.0: can't add hid device: -71 [ 283.377112][ T50] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 283.380554][ T50] usb 11-1: USB disconnect, device number 35 [ 283.748794][ T43] audit: type=1400 audit(1792766664.716:1413): avc: denied { shutdown } for pid=14033 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.990930][T14039] netlink: 'syz.6.2538': attribute type 28 has an invalid length. [ 283.990951][T14039] netlink: 'syz.6.2538': attribute type 3 has an invalid length. [ 283.990962][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2538'. [ 284.485893][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 284.487988][ T5931] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.488015][ T5931] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.489537][T14041] dummy0: left promiscuous mode [ 284.489549][T14041] dummy0: left allmulticast mode [ 284.498004][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.498086][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.576857][T14053] FAULT_INJECTION: forcing a failure. [ 284.576857][T14053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.576889][T14053] CPU: 0 UID: 0 PID: 14053 Comm: syz.6.2542 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 284.576916][T14053] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 284.576924][T14053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.576936][T14053] Call Trace: [ 284.576943][T14053] [ 284.576950][T14053] dump_stack_lvl+0x100/0x190 [ 284.576983][T14053] should_fail_ex.cold+0x5/0xa [ 284.577010][T14053] _copy_from_user+0x2e/0xd0 [ 284.577033][T14053] x25_setsockopt+0x1e8/0x230 [ 284.577060][T14053] ? __pfx_x25_setsockopt+0x10/0x10 [ 284.577086][T14053] ? selinux_socket_setsockopt+0x6a/0x80 [ 284.577108][T14053] ? __pfx_x25_setsockopt+0x10/0x10 [ 284.577134][T14053] do_sock_setsockopt+0xf3/0x1d0 [ 284.577156][T14053] __sys_setsockopt+0x195/0x220 [ 284.577188][T14053] __x64_sys_setsockopt+0xbd/0x160 [ 284.577213][T14053] ? do_syscall_64+0xae/0x790 [ 284.577237][T14053] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.577261][T14053] do_syscall_64+0x123/0x790 [ 284.577287][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.577306][T14053] RIP: 0033:0x7f6011f9f559 [ 284.577321][T14053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.577338][T14053] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.577356][T14053] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 284.577369][T14053] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 284.577380][T14053] RBP: 00007f6012d9f090 R08: 0000000000000004 R09: 0000000000000000 [ 284.577392][T14053] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 284.577403][T14053] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 284.577430][T14053] [ 284.602406][T14058] tmpfs: Invalid gid '0x00000000ffffffff' [ 284.605128][ T43] audit: type=1400 audit(1792766665.556:1414): avc: denied { audit_control } for pid=14054 comm="syz.2.2543" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 284.605176][ T43] audit: type=1400 audit(1792766665.566:1415): avc: denied { mounton } for pid=14055 comm="syz.1.2544" path="/31/proc/81/task/82/fail-nth" dev="proc" ino=59899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 284.670861][ T5189] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 284.671004][ T5189] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 284.671102][ T5189] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 284.671111][ T5189] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 284.671221][ T5189] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 284.671231][ T5189] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 284.671239][ T5189] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 284.671246][ T5189] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 284.671253][ T5189] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 284.671276][ T5189] loop0: [ 284.739763][ T43] audit: type=1400 audit(1792766665.706:1416): avc: denied { map } for pid=14063 comm="syz.6.2547" path="socket:[60514]" dev="sockfs" ino=60514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 284.833790][ T43] audit: type=1400 audit(1792766665.796:1417): avc: denied { getopt } for pid=14071 comm="syz.9.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.865127][ T34] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 284.886403][ T43] audit: type=1400 audit(1792766665.856:1418): avc: denied { connect } for pid=14073 comm="syz.1.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.894051][T14081] fuse: Unknown parameter '9òÿ<üg’R]²&Xn×KKNBÂã´BE„QÖá\ÜËÛ¥Ýå• [ 289.374904][T14189] dump_stack_lvl+0x100/0x190 [ 289.374946][T14189] should_fail_ex.cold+0x5/0xa [ 289.374969][T14189] should_failslab+0xc2/0x120 [ 289.375007][T14189] __kmalloc_noprof+0xfc/0x840 [ 289.375022][T14189] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 289.375043][T14189] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 289.375060][T14189] genl_family_rcv_msg_doit+0xc7/0x300 [ 289.375073][T14189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.375091][T14189] ? bpf_lsm_capable+0x9/0x10 [ 289.375103][T14189] ? security_capable+0x80/0x260 [ 289.375121][T14189] genl_rcv_msg+0x560/0x800 [ 289.375135][T14189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.375146][T14189] ? __lock_acquire+0x5c0/0x1f40 [ 289.375165][T14189] ? __pfx_nfc_genl_fw_download+0x10/0x10 [ 289.375188][T14189] ? __lock_acquire+0x5c0/0x1f40 [ 289.375203][T14189] netlink_rcv_skb+0x159/0x420 [ 289.375220][T14189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.375233][T14189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.375256][T14189] ? netlink_deliver_tap+0x1ae/0xb50 [ 289.375275][T14189] genl_rcv+0x28/0x40 [ 289.375285][T14189] netlink_unicast+0x668/0x950 [ 289.375305][T14189] ? __pfx_netlink_unicast+0x10/0x10 [ 289.375326][T14189] netlink_sendmsg+0x9ac/0x10c0 [ 289.375346][T14189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.375367][T14189] ? selinux_socket_sendmsg+0x198/0x2f0 [ 289.375386][T14189] ? ____sys_sendmsg+0xa99/0xc30 [ 289.375398][T14189] ____sys_sendmsg+0xa99/0xc30 [ 289.375410][T14189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.375429][T14189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.375445][T14189] ? lock_acquire+0x1d1/0x380 [ 289.375457][T14189] ? get_pid_task+0x2a/0x250 [ 289.375480][T14189] ___sys_sendmsg+0x190/0x1e0 [ 289.375494][T14189] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.375507][T14189] ? get_pid_task+0x106/0x250 [ 289.375527][T14189] ? find_held_lock+0x2b/0x80 [ 289.375553][T14189] __sys_sendmsg+0x160/0x210 [ 289.375571][T14189] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.375596][T14189] do_syscall_64+0x123/0x790 [ 289.375612][T14189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.375624][T14189] RIP: 0033:0x7f6011f9f559 [ 289.375634][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.375646][T14189] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.375657][T14189] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 289.375665][T14189] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 289.375671][T14189] RBP: 00007f6012d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.375678][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.375685][T14189] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 289.375700][T14189] [ 289.425713][ T43] audit: type=1400 audit(1792766670.396:1435): avc: denied { read } for pid=14184 comm="syz.9.2586" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 289.425883][ T43] audit: type=1400 audit(1792766670.396:1436): avc: denied { open } for pid=14184 comm="syz.9.2586" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 289.435729][T13661] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.436532][T13661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.436549][T13661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.436561][T13661] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.436582][T13661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.438137][T13661] usb 7-1: config 0 descriptor?? [ 289.486165][T14194] uhci_hcd 0000:00:1d.0: remove, state 4 [ 289.486240][T14194] usb usb1: USB disconnect, device number 1 [ 289.568864][T14194] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 289.585826][T14194] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 289.602423][T14198] syzkaller0: entered promiscuous mode [ 289.602444][T14198] syzkaller0: entered allmulticast mode [ 289.619751][T14194] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 289.851897][T13661] usbhid 7-1:0.0: can't add hid device: -71 [ 289.851949][T13661] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 289.857247][T13661] usb 7-1: USB disconnect, device number 7 [ 289.869247][T14209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14209 comm=syz.1.2591 [ 289.870844][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 289.870862][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 290.422549][T14213] FAULT_INJECTION: forcing a failure. [ 290.422549][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 290.422581][T14213] CPU: 2 UID: 0 PID: 14213 Comm: syz.2.2593 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 290.422610][T14213] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 290.422619][T14213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.422630][T14213] Call Trace: [ 290.422638][T14213] [ 290.422646][T14213] dump_stack_lvl+0x100/0x190 [ 290.422701][T14213] should_fail_ex.cold+0x5/0xa [ 290.422731][T14213] should_failslab+0xc2/0x120 [ 290.422759][T14213] __kmalloc_cache_noprof+0x91/0x6d0 [ 290.422781][T14213] ? sel_netport_sid+0x589/0xba0 [ 290.422814][T14213] sel_netport_sid+0x589/0xba0 [ 290.422848][T14213] selinux_socket_connect_helper+0x354/0x520 [ 290.422872][T14213] ? __pfx_selinux_socket_connect_helper+0x10/0x10 [ 290.422889][T14213] ? __lock_acquire+0x5c0/0x1f40 [ 290.422918][T14213] ? lock_acquire+0x1d1/0x380 [ 290.422937][T14213] ? __might_fault+0xc5/0x140 [ 290.422963][T14213] selinux_sctp_bind_connect+0x192/0x230 [ 290.422986][T14213] security_sctp_bind_connect+0xa5/0x260 [ 290.423004][T14213] __sctp_setsockopt_connectx+0x50/0x190 [ 290.423034][T14213] sctp_getsockopt+0x3f06/0x7160 [ 290.423060][T14213] ? avc_has_perm_noaudit+0x56/0x470 [ 290.423084][T14213] ? find_held_lock+0x2b/0x80 [ 290.423109][T14213] ? avc_has_perm_noaudit+0x11e/0x470 [ 290.423132][T14213] ? avc_has_perm_noaudit+0x11e/0x470 [ 290.423157][T14213] ? __pfx_sctp_getsockopt+0x10/0x10 [ 290.423185][T14213] ? __lock_acquire+0x5c0/0x1f40 [ 290.423202][T14213] ? avc_has_perm+0x135/0x1e0 [ 290.423225][T14213] ? __pfx_avc_has_perm+0x10/0x10 [ 290.423246][T14213] ? __might_fault+0xc5/0x140 [ 290.423269][T14213] ? lock_acquire+0x1d1/0x380 [ 290.423285][T14213] ? __might_fault+0xc5/0x140 [ 290.423302][T14213] ? find_held_lock+0x2b/0x80 [ 290.423327][T14213] ? __might_fault+0xc5/0x140 [ 290.423346][T14213] ? __might_fault+0xc5/0x140 [ 290.423373][T14213] ? _copy_from_user+0x59/0xd0 [ 290.423396][T14213] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 290.423419][T14213] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 290.423447][T14213] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 290.423467][T14213] do_sock_getsockopt+0x415/0x570 [ 290.423492][T14213] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 290.423525][T14213] ? __fget_files+0x34/0x3d0 [ 290.423553][T14213] ? find_held_lock+0x2b/0x80 [ 290.423580][T14213] ? __fget_files+0x21f/0x3d0 [ 290.423631][T14213] __sys_getsockopt+0x148/0x260 [ 290.423670][T14213] ? __x64_sys_getsockopt+0xbd/0x160 [ 290.423698][T14213] __x64_sys_getsockopt+0xbd/0x160 [ 290.423724][T14213] ? do_syscall_64+0xae/0x790 [ 290.423748][T14213] ? lockdep_hardirqs_on+0x7d/0x110 [ 290.423767][T14213] do_syscall_64+0x123/0x790 [ 290.423791][T14213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.423811][T14213] RIP: 0033:0x7f45df79f559 [ 290.423828][T14213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.423845][T14213] RSP: 002b:00007f45dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 290.423861][T14213] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 290.423871][T14213] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 290.423882][T14213] RBP: 00007f45dd9f6090 R08: 0000200000000080 R09: 0000000000000000 [ 290.423894][T14213] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.423906][T14213] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 290.423933][T14213] [ 290.800816][T14220] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 290.800831][T14220] block device autoloading is deprecated and will be removed. [ 290.855129][T14221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2596'. [ 291.475124][T14231] @0Ù: renamed from bond_slave_1 [ 291.706258][T14251] veth0_vlan: entered allmulticast mode [ 291.835386][T13661] usb 11-1: new full-speed USB device number 37 using dummy_hcd [ 291.986337][T13661] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.987444][T13661] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.987469][T13661] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.987485][T13661] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.987515][T13661] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.992209][T13661] usb 11-1: config 0 descriptor?? [ 292.404751][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 292.405055][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 292.405356][T13661] usbhid 11-1:0.0: can't add hid device: -71 [ 292.405403][T13661] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 292.409701][T13661] usb 11-1: USB disconnect, device number 37 [ 292.455970][T14246] veth0_vlan: left allmulticast mode [ 292.519861][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.519970][T14274] batadv_slave_0: entered promiscuous mode [ 292.519989][T14274] batadv_slave_0: entered allmulticast mode [ 292.543144][T14274] syzkaller0: entered promiscuous mode [ 292.543157][T14274] syzkaller0: entered allmulticast mode [ 292.544562][T14274] FAULT_INJECTION: forcing a failure. [ 292.544562][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 292.544581][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.2.2606 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 292.544598][T14274] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 292.544603][T14274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.544610][T14274] Call Trace: [ 292.544614][T14274] [ 292.544619][T14274] dump_stack_lvl+0x100/0x190 [ 292.544640][T14274] should_fail_ex.cold+0x5/0xa [ 292.544667][T14274] should_failslab+0xc2/0x120 [ 292.544690][T14274] __kmalloc_node_noprof+0xff/0x870 [ 292.544709][T14274] ? mempool_init_node+0x11b/0x6f0 [ 292.544731][T14274] ? __pfx_mempool_free_slab+0x10/0x10 [ 292.544747][T14274] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 292.544769][T14274] mempool_init_node+0x11b/0x6f0 [ 292.544797][T14274] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 292.544812][T14274] ? __pfx_mempool_free_slab+0x10/0x10 [ 292.544824][T14274] mempool_init_noprof+0x3a/0x50 [ 292.544839][T14274] bioset_init+0x37e/0x8a0 [ 292.544856][T14274] ? __pfx_bioset_init+0x10/0x10 [ 292.544870][T14274] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 292.544883][T14274] ? percpu_ref_init+0xec/0x3f0 [ 292.544903][T14274] ? percpu_ref_init+0x244/0x3f0 [ 292.544922][T14274] mddev_init+0x102/0x820 [ 292.544937][T14274] md_alloc+0xc7/0x10a0 [ 292.544956][T14274] md_alloc_and_put+0x16/0xb0 [ 292.544993][T14274] add_named_array+0x27d/0x3a0 [ 292.545022][T14274] ? __pfx_add_named_array+0x10/0x10 [ 292.545061][T14274] param_attr_store+0x199/0x300 [ 292.545081][T14274] ? __pfx_param_attr_store+0x10/0x10 [ 292.545100][T14274] module_attr_store+0x58/0x80 [ 292.545126][T14274] ? __pfx_module_attr_store+0x10/0x10 [ 292.545152][T14274] sysfs_kf_write+0xf2/0x150 [ 292.545173][T14274] kernfs_fop_write_iter+0x3e0/0x5f0 [ 292.545198][T14274] ? __pfx_sysfs_kf_write+0x10/0x10 [ 292.545227][T14274] vfs_write+0x6af/0x1050 [ 292.545254][T14274] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 292.545281][T14274] ? __pfx_vfs_write+0x10/0x10 [ 292.545303][T14274] ? find_held_lock+0x2b/0x80 [ 292.545349][T14274] ksys_write+0x12a/0x250 [ 292.545372][T14274] ? __pfx_ksys_write+0x10/0x10 [ 292.545405][T14274] do_syscall_64+0x123/0x790 [ 292.545434][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.545454][T14274] RIP: 0033:0x7f45df79f559 [ 292.545471][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.545489][T14274] RSP: 002b:00007f45dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.545507][T14274] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 292.545520][T14274] RDX: 0000000000000003 RSI: 0000200000002200 RDI: 0000000000000006 [ 292.545532][T14274] RBP: 00007f45df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 292.545543][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.545554][T14274] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 292.545582][T14274] [ 292.545830][T14274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 293.028942][T14291] kvm: apic: phys broadcast and lowest prio [ 293.105196][T13711] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 293.185292][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 293.266158][T13711] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 293.267012][T13711] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.267029][T13711] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.267042][T13711] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 293.267053][T13711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 293.268561][T13711] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 293.268574][T13711] usb 6-1: Product: syz [ 293.268582][T13711] usb 6-1: Manufacturer: syz [ 293.268589][T13711] usb 6-1: SerialNumber: syz [ 293.270147][T13711] usb 6-1: config 0 descriptor?? [ 293.274345][T13711] usb 6-1: selecting invalid altsetting 0 [ 293.346152][ T24] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 293.347085][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.347108][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.347121][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.348775][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.348788][ T24] usb 7-1: Product: syz [ 293.348797][ T24] usb 7-1: Manufacturer: syz [ 293.348805][ T24] usb 7-1: SerialNumber: syz [ 293.472671][T13711] usb 6-1: USB disconnect, device number 14 [ 293.764826][ T24] usb 7-1: Cannot retrieve CPort count: -71 [ 293.764850][ T24] usb 7-1: Cannot retrieve CPort count: -71 [ 293.764865][ T24] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 293.768054][ T24] usb 7-1: USB disconnect, device number 8 [ 293.898627][T14299] fuse: Unknown parameter 'rootmOde' [ 293.901447][T14299] No source specified [ 293.994025][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 293.994039][ T43] audit: type=1400 audit(2000000004.510:1455): avc: denied { transition } for pid=14303 comm="syz.6.2616" path="/466/file0" dev="tmpfs" ino=2602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 293.994565][ T43] audit: type=1400 audit(2000000004.510:1456): avc: denied { entrypoint } for pid=14303 comm="syz.6.2616" path="/466/file0" dev="tmpfs" ino=2602 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 293.994701][ T43] audit: type=1400 audit(2000000004.510:1457): avc: denied { noatsecure } for pid=14303 comm="syz.6.2616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 294.094199][ T43] audit: type=1400 audit(2000000004.610:1458): avc: denied { write } for pid=14305 comm="syz.6.2617" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 294.096654][T14307] veth0_vlan: entered allmulticast mode [ 294.492386][ T43] audit: type=1400 audit(2000000005.010:1459): avc: denied { unmount } for pid=13347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 294.775242][T13711] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 294.863988][T14305] veth0_vlan: left allmulticast mode [ 294.936069][T13711] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.937874][ T43] audit: type=1804 audit(2000000005.460:1460): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2627" name="/newroot/468/file0" dev="tmpfs" ino=2614 res=1 errno=0 [ 294.940264][T13711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.940283][T13711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.940295][T13711] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.940316][T13711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.942929][T13711] usb 7-1: config 0 descriptor?? [ 295.055192][ T5857] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 295.088091][T14344] trusted_key: encrypted_key: insufficient parameters specified [ 295.118934][ T43] audit: type=1400 audit(2000000005.640:1461): avc: denied { create } for pid=14343 comm="syz.6.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 295.205980][ T5857] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.206860][ T5857] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.206876][ T5857] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.206893][ T5857] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.206910][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.208562][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.208574][ T5857] usb 6-1: Product: syz [ 295.208581][ T5857] usb 6-1: Manufacturer: syz [ 295.208589][ T5857] usb 6-1: SerialNumber: syz [ 295.209903][ T5857] usb 6-1: config 0 descriptor?? [ 295.213237][ T5857] usb 6-1: selecting invalid altsetting 0 [ 295.355591][T13711] hid_parser_main: 5 callbacks suppressed [ 295.355606][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355621][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355634][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355646][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355658][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355670][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355683][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355695][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.355708][T13711] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 295.359316][T13711] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 295.414150][ T5857] usb 6-1: USB disconnect, device number 15 [ 295.555984][ T8018] usb 7-1: USB disconnect, device number 9 [ 295.928510][T14354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14354 comm=syz.6.2632 [ 295.930247][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2632'. [ 295.930260][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2632'. [ 296.187598][T14372] FAULT_INJECTION: forcing a failure. [ 296.187598][T14372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.187621][T14372] CPU: 3 UID: 0 PID: 14372 Comm: syz.6.2639 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 296.187639][T14372] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 296.187644][T14372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.187651][T14372] Call Trace: [ 296.187655][T14372] [ 296.187659][T14372] dump_stack_lvl+0x100/0x190 [ 296.187680][T14372] should_fail_ex.cold+0x5/0xa [ 296.187697][T14372] _copy_from_user+0x2e/0xd0 [ 296.187711][T14372] kvm_dev_ioctl_get_cpuid+0x47a/0x710 [ 296.187738][T14372] ? __might_fault+0xc5/0x140 [ 296.187751][T14372] ? __might_fault+0xc5/0x140 [ 296.187762][T14372] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 296.187779][T14372] kvm_arch_dev_ioctl+0x303/0x490 [ 296.187797][T14372] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 296.187815][T14372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.187832][T14372] ? do_vfs_ioctl+0x226/0x13e0 [ 296.187846][T14372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.187862][T14372] kvm_dev_ioctl+0x730/0x1b50 [ 296.187883][T14372] ? __fget_files+0x34/0x3d0 [ 296.187903][T14372] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 296.187919][T14372] ? selinux_file_ioctl+0x1e0/0x290 [ 296.187930][T14372] ? selinux_file_ioctl+0x1e7/0x290 [ 296.187941][T14372] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 296.187955][T14372] __x64_sys_ioctl+0x18e/0x210 [ 296.187970][T14372] do_syscall_64+0x123/0x790 [ 296.187993][T14372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.188010][T14372] RIP: 0033:0x7f6011f9f559 [ 296.188024][T14372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.188038][T14372] RSP: 002b:00007f6012d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.188049][T14372] RAX: ffffffffffffffda RBX: 00007f6012225fa0 RCX: 00007f6011f9f559 [ 296.188057][T14372] RDX: 0000200000000940 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 296.188064][T14372] RBP: 00007f6012d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 296.188070][T14372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.188077][T14372] R13: 00007f6012226038 R14: 00007f6012225fa0 R15: 00007ffffdc02348 [ 296.188091][T14372] [ 296.279385][T14370] kvm: apic: phys broadcast and lowest prio [ 296.304358][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 296.358637][T14377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.425557][ T43] audit: type=1400 audit(2000000006.950:1462): avc: denied { write } for pid=14393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.452974][T14396] netlink: 'syz.1.2647': attribute type 7 has an invalid length. [ 296.452989][T14396] netlink: 'syz.1.2647': attribute type 5 has an invalid length. [ 296.452996][T14396] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2647'. [ 296.492118][ T43] audit: type=1400 audit(2000000007.010:1463): avc: denied { write } for pid=14397 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.525127][ T34] usb 11-1: new full-speed USB device number 38 using dummy_hcd [ 296.565121][T13661] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 296.640791][ T43] audit: type=1400 audit(2000000007.150:1464): avc: denied { write } for pid=14400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.648109][T14403] macsec1: entered promiscuous mode [ 296.648123][T14403] bridge0: entered promiscuous mode [ 296.648217][T14403] macsec1: entered allmulticast mode [ 296.648225][T14403] bridge0: entered allmulticast mode [ 296.653828][T14403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14403 comm=syz.1.2648 [ 296.695707][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.696693][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.696718][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.696736][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.696769][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.701014][ T34] usb 11-1: config 0 descriptor?? [ 296.738161][T13661] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.739766][T13661] usb 14-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.739784][T13661] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.739797][T13661] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 296.739809][T13661] usb 14-1: config 0 interface 0 has no altsetting 0 [ 296.748423][T13661] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 296.748438][T13661] usb 14-1: Product: syz [ 296.748445][T13661] usb 14-1: Manufacturer: syz [ 296.748453][T13661] usb 14-1: SerialNumber: syz [ 296.749583][T13661] usb 14-1: config 0 descriptor?? [ 296.754529][T13661] usb 14-1: selecting invalid altsetting 0 [ 296.953406][T13661] usb 14-1: USB disconnect, device number 5 [ 297.066904][T14417] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 297.083517][T14417] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 297.089226][T14417] ------------[ cut here ]------------ [ 297.089234][T14417] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 297.089244][T14417] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: syz.2.2651/14417 [ 297.098575][T14417] Modules linked in: [ 297.099797][T14417] CPU: 2 UID: 0 PID: 14417 Comm: syz.2.2651 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 297.103031][T14417] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 297.104805][T14417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.107895][ T34] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 297.110159][T14417] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 297.111906][T14417] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 59 68 a8 0f 49 8b 95 d0 00 00 00 48 c7 c6 c0 9c 2b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 0c 00 48 ff 48 8d 7d 18 48 b8 00 [ 297.117902][T14417] RSP: 0018:ffffc90005c876c0 EFLAGS: 00010246 [ 297.119785][T14417] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88802564111c [ 297.120619][ T34] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 297.126049][T14417] RDX: ffff88801dfac5dc RSI: ffffffff8c2b9cc0 RDI: ffffffff926e1b20 [ 297.128466][T14417] RBP: ffff8880256410f8 R08: ffff8880256419dc R09: ffffed1004ac820b [ 297.130850][T14417] R10: ffff88802564105b R11: 0000000000000000 R12: ffff888025641040 [ 297.133183][T14417] R13: ffff88801dfac500 R14: ffff8880256419b8 R15: dffffc0000000000 [ 297.135854][T14417] FS: 00007f45dd9f66c0(0000) GS:ffff8880d46e2000(0000) knlGS:0000000000000000 [ 297.138598][T14417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.140563][T14417] CR2: 000000110c30f04d CR3: 00000000516c8000 CR4: 0000000000352ef0 [ 297.142970][T14417] Call Trace: [ 297.143982][T14417] [ 297.144886][T14417] ? __pfx_remove_proc_entry+0x10/0x10 [ 297.146902][T14417] ? mtree_load+0x3a4/0xb50 [ 297.148321][T14417] ? __pfx_mtree_load+0x10/0x10 [ 297.149816][T14417] ? rcu_is_watching+0x13/0xc0 [ 297.151298][T14417] unregister_irq_proc+0x206/0x2a0 [ 297.152840][T14417] ? __pfx_unregister_irq_proc+0x10/0x10 [ 297.154520][T14417] free_desc+0x89/0x330 [ 297.155797][T14417] ? __pfx_free_desc+0x10/0x10 [ 297.157259][T14417] ? kasan_quarantine_put+0x104/0x240 [ 297.158906][T14417] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.160453][T14417] ? irq_domain_free_irqs+0x420/0x5c0 [ 297.162047][T14417] irq_free_descs+0x84/0xc0 [ 297.163440][T14417] irq_domain_free_irqs+0x46a/0x5c0 [ 297.165009][T14417] mp_unmap_irq+0xf8/0x130 [ 297.166389][T14417] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 297.168265][T14417] acpi_unregister_gsi_ioapic+0x40/0x60 [ 297.169920][T14417] acpi_unregister_gsi+0x25/0x40 [ 297.171399][T14417] acpi_pci_irq_disable+0x275/0x360 [ 297.173067][T14417] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 297.174740][T14417] pcibios_disable_device+0x89/0xb0 [ 297.176339][T14417] do_pci_disable_device+0x9f/0x100 [ 297.177904][T14417] ? __pfx_do_pci_disable_device+0x10/0x10 [ 297.179710][T14417] pci_disable_device+0x130/0x270 [ 297.181274][T14417] pci_device_remove+0xb2/0x1d0 [ 297.182769][T14417] ? __pfx_pci_device_remove+0x10/0x10 [ 297.184413][T14417] device_remove+0xcb/0x180 [ 297.185867][T14417] device_release_driver_internal+0x44e/0x620 [ 297.187778][T14417] pci_stop_bus_device+0x120/0x160 [ 297.189342][T14417] pci_stop_and_remove_bus_device+0x58/0xa0 [ 297.191161][T14417] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 297.193144][T14417] remove_store+0x123/0x140 [ 297.194559][T14417] ? __pfx_remove_store+0x10/0x10 [ 297.196307][T14417] ? find_held_lock+0x2b/0x80 [ 297.197783][T14417] ? sysfs_file_kobj+0xe4/0x290 [ 297.199284][T14417] ? sysfs_file_kobj+0xe4/0x290 [ 297.200768][T14417] ? __pfx_remove_store+0x10/0x10 [ 297.202358][T14417] dev_attr_store+0x58/0x80 [ 297.203814][T14417] ? __pfx_dev_attr_store+0x10/0x10 [ 297.205670][T14417] sysfs_kf_write+0xf2/0x150 [ 297.207151][T14417] kernfs_fop_write_iter+0x3e0/0x5f0 [ 297.209090][T14417] ? __pfx_sysfs_kf_write+0x10/0x10 [ 297.210768][T14417] vfs_write+0x6af/0x1050 [ 297.212124][T14417] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 297.213902][T14417] ? __pfx_vfs_write+0x10/0x10 [ 297.215431][T14417] ? find_held_lock+0x2b/0x80 [ 297.216904][T14417] ksys_write+0x12a/0x250 [ 297.218234][T14417] ? __pfx_ksys_write+0x10/0x10 [ 297.219729][T14417] do_syscall_64+0x123/0x790 [ 297.221128][T14417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.222913][T14417] RIP: 0033:0x7f45df79f559 [ 297.224283][T14417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.230203][T14417] RSP: 002b:00007f45dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.232654][T14417] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 297.235067][T14417] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 297.237463][T14417] RBP: 00007f45df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 297.239812][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.242101][T14417] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 297.244476][T14417] [ 297.245526][T14417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.247718][T14417] CPU: 2 UID: 0 PID: 14417 Comm: syz.2.2651 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 297.250892][T14417] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 297.252615][T14417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.255643][T14417] Call Trace: [ 297.256649][T14417] [ 297.257577][T14417] dump_stack_lvl+0x100/0x190 [ 297.258993][T14417] vpanic+0x553/0x970 [ 297.260205][T14417] ? __pfx_vpanic+0x10/0x10 [ 297.261578][T14417] panic+0xd1/0xe0 [ 297.262716][T14417] ? __pfx_panic+0x10/0x10 [ 297.264049][T14417] check_panic_on_warn.cold+0x19/0x34 [ 297.265631][T14417] ? remove_proc_entry+0x4e7/0x610 [ 297.267187][T14417] __warn.cold+0x191/0x318 [ 297.268531][T14417] __report_bug+0x30f/0x440 [ 297.269902][T14417] ? remove_proc_entry+0x4e7/0x610 [ 297.271476][T14417] ? __pfx___report_bug+0x10/0x10 [ 297.272984][T14417] ? do_syscall_64+0x123/0x790 [ 297.274442][T14417] ? do_raw_spin_lock+0x128/0x260 [ 297.275929][T14417] ? find_held_lock+0x2b/0x80 [ 297.277405][T14417] ? proc_entry_rundown+0x158/0x1e0 [ 297.278993][T14417] ? proc_entry_rundown+0x158/0x1e0 [ 297.280531][T14417] report_bug_entry+0xe2/0x290 [ 297.281949][T14417] ? remove_proc_entry+0x4f5/0x610 [ 297.283470][T14417] handle_bug+0x1cd/0x2a0 [ 297.284754][T14417] exc_invalid_op+0x17/0x50 [ 297.286106][T14417] asm_exc_invalid_op+0x1a/0x20 [ 297.287604][T14417] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 297.289308][T14417] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 59 68 a8 0f 49 8b 95 d0 00 00 00 48 c7 c6 c0 9c 2b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 0c 00 48 ff 48 8d 7d 18 48 b8 00 [ 297.294945][T14417] RSP: 0018:ffffc90005c876c0 EFLAGS: 00010246 [ 297.296746][T14417] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88802564111c [ 297.299125][T14417] RDX: ffff88801dfac5dc RSI: ffffffff8c2b9cc0 RDI: ffffffff926e1b20 [ 297.301483][T14417] RBP: ffff8880256410f8 R08: ffff8880256419dc R09: ffffed1004ac820b [ 297.303884][T14417] R10: ffff88802564105b R11: 0000000000000000 R12: ffff888025641040 [ 297.306356][T14417] R13: ffff88801dfac500 R14: ffff8880256419b8 R15: dffffc0000000000 [ 297.308831][T14417] ? __pfx_remove_proc_entry+0x10/0x10 [ 297.310554][T14417] ? mtree_load+0x3a4/0xb50 [ 297.311988][T14417] ? __pfx_mtree_load+0x10/0x10 [ 297.313513][T14417] ? rcu_is_watching+0x13/0xc0 [ 297.315034][T14417] unregister_irq_proc+0x206/0x2a0 [ 297.316642][T14417] ? __pfx_unregister_irq_proc+0x10/0x10 [ 297.318462][T14417] free_desc+0x89/0x330 [ 297.319775][T14417] ? __pfx_free_desc+0x10/0x10 [ 297.321375][T14417] ? kasan_quarantine_put+0x104/0x240 [ 297.323086][T14417] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.324723][T14417] ? irq_domain_free_irqs+0x420/0x5c0 [ 297.326432][T14417] irq_free_descs+0x84/0xc0 [ 297.327939][T14417] irq_domain_free_irqs+0x46a/0x5c0 [ 297.329577][T14417] mp_unmap_irq+0xf8/0x130 [ 297.331059][T14417] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 297.333015][T14417] acpi_unregister_gsi_ioapic+0x40/0x60 [ 297.334779][T14417] acpi_unregister_gsi+0x25/0x40 [ 297.336339][T14417] acpi_pci_irq_disable+0x275/0x360 [ 297.337986][T14417] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 297.339793][T14417] pcibios_disable_device+0x89/0xb0 [ 297.341429][T14417] do_pci_disable_device+0x9f/0x100 [ 297.343073][T14417] ? __pfx_do_pci_disable_device+0x10/0x10 [ 297.344910][T14417] pci_disable_device+0x130/0x270 [ 297.346477][T14417] pci_device_remove+0xb2/0x1d0 [ 297.347958][T14417] ? __pfx_pci_device_remove+0x10/0x10 [ 297.349637][T14417] device_remove+0xcb/0x180 [ 297.351347][T14417] device_release_driver_internal+0x44e/0x620 [ 297.353266][T14417] pci_stop_bus_device+0x120/0x160 [ 297.354842][T14417] pci_stop_and_remove_bus_device+0x58/0xa0 [ 297.356645][T14417] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 297.358636][T14417] remove_store+0x123/0x140 [ 297.360039][T14417] ? __pfx_remove_store+0x10/0x10 [ 297.361557][T14417] ? find_held_lock+0x2b/0x80 [ 297.362970][T14417] ? sysfs_file_kobj+0xe4/0x290 [ 297.364460][T14417] ? sysfs_file_kobj+0xe4/0x290 [ 297.365916][T14417] ? __pfx_remove_store+0x10/0x10 [ 297.367435][T14417] dev_attr_store+0x58/0x80 [ 297.368769][T14417] ? __pfx_dev_attr_store+0x10/0x10 [ 297.370352][T14417] sysfs_kf_write+0xf2/0x150 [ 297.371763][T14417] kernfs_fop_write_iter+0x3e0/0x5f0 [ 297.373351][T14417] ? __pfx_sysfs_kf_write+0x10/0x10 [ 297.374963][T14417] vfs_write+0x6af/0x1050 [ 297.376268][T14417] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 297.378009][T14417] ? __pfx_vfs_write+0x10/0x10 [ 297.379432][T14417] ? find_held_lock+0x2b/0x80 [ 297.380850][T14417] ksys_write+0x12a/0x250 [ 297.382151][T14417] ? __pfx_ksys_write+0x10/0x10 [ 297.383603][T14417] do_syscall_64+0x123/0x790 [ 297.384977][T14417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.386717][T14417] RIP: 0033:0x7f45df79f559 [ 297.388054][T14417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.393635][T14417] RSP: 002b:00007f45dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.396028][T14417] RAX: ffffffffffffffda RBX: 00007f45dfa25fa0 RCX: 00007f45df79f559 [ 297.398329][T14417] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 297.400590][T14417] RBP: 00007f45df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 297.402946][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.405280][T14417] R13: 00007f45dfa26038 R14: 00007f45dfa25fa0 R15: 00007ffedf9e08f8 [ 297.407607][T14417] [ 297.409096][T14417] Kernel Offset: disabled [ 297.410368][T14417] Rebooting in 86400 seconds..