last executing test programs: 1.371429481s ago: executing program 1 (id=2083): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$KVM_RUN(r0, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setitimer(0x1, 0x0, &(0x7f0000000080)) 1.371290431s ago: executing program 1 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e640000000014"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.328386939s ago: executing program 3 (id=2085): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xdc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.327520138s ago: executing program 1 (id=2086): setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) r1 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7}) ppoll(&(0x7f00000004c0)=[{r0, 0x6049}], 0x1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100039df2500"/20, @ANYRES32=r4, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000300ac1414bb0500050001000000"], 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x40008c0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006500000011907800010000e000000100004e210008907840e9b753dd92adf6806fdc50c5ed46d862420c81527099a274a151731936a2371bcc90b8af39251ad9df58754117"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.120494523s ago: executing program 0 (id=2087): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xe4ff) 1.118565322s ago: executing program 3 (id=2088): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000100)) 940.950229ms ago: executing program 0 (id=2089): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f7", 0x68}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xf000) 820.875338ms ago: executing program 0 (id=2090): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r2 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 731.825542ms ago: executing program 0 (id=2091): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) personality(0x8) uname(&(0x7f0000000000)=""/67) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000dc0)={0x3, 0x993, 0xcb, &(0x7f0000000cc0)=""/203}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086e11bcb653e00083a00fe800000000000000000000000000035fe8000000000000000000000000000aa8000907800000000"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) unlinkat(r1, &(0x7f0000000bc0)='./file0\x00', 0x200) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r4 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f7", 0x68}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x341400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000940)="c4a2f483901e177f5b6372356904ad36826e2e41ea9216594c21f134", 0x1c) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0], 0x0, 0x58, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 581.427176ms ago: executing program 3 (id=2094): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x1, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200faff14000e0005000024c10200000088", 0x14}, {&(0x7f00000022c0)="ffc9bce87aade11690dd52a100e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000) 581.13901ms ago: executing program 0 (id=2095): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0x7}, 0x5}}}, 0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4243, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) 431.313171ms ago: executing program 1 (id=2097): r0 = syz_io_uring_setup(0x4, &(0x7f0000000200)={0x0, 0x894b, 0xee78db18ac8a9a3f, 0x1, 0x3d4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) (async) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) setresgid(r1, r1, r1) (async) setresgid(r1, r1, r1) syz_io_uring_setup(0xc92, &(0x7f0000000080)={0x0, 0x7876, 0x1000, 0x3, 0x3, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000040)) (async) syz_io_uring_setup(0xc92, &(0x7f0000000080)={0x0, 0x7876, 0x1000, 0x3, 0x3, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_TIMEOUT={0xb, 0xb, 0x0, 0x0, 0x200000000006, &(0x7f0000000140), 0x1, 0x1, 0x1}) r5 = syz_ublk_setup_io_uring(0x39bc, &(0x7f0000000480)={0x0, 0x6257, 0x400, 0x3, 0x176, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_enter(r5, 0x26aa, 0xe387, 0x1c5, 0x0, 0x0) (async) io_uring_enter(r5, 0x26aa, 0xe387, 0x1c5, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f00000000c0)=0xf6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x24040000) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x24040000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x0, 0x40000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0xff, 0xf6, 0x5, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0xc2, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) epoll_create1(0x0) (async) r9 = epoll_create1(0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mq_open(&(0x7f0000000140)='&\x00', 0x1, 0x28, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000009}) 430.564271ms ago: executing program 0 (id=2098): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0xf4240, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 430.234342ms ago: executing program 2 (id=2099): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r2 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 279.449062ms ago: executing program 1 (id=2100): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x160, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r0}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x20000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b52b, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x5f, 0x771b2e637bc98daf}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x64e1a18b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x1000, 0x45, &(0x7f0000000440)=""/69, 0x40f00, 0x4, '\x00', r5, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0x4}, {0x1, 0x3, 0xc, 0x1}, {0x3, 0x4, 0xe, 0x1}, {0x1, 0x4, 0x4, 0x9}, {0x5, 0x4, 0x5, 0x9}, {0x4, 0x1, 0x5, 0x1}], 0x10, 0x1}, 0x94) 279.249069ms ago: executing program 1 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 279.051413ms ago: executing program 3 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 275.478835ms ago: executing program 2 (id=2103): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) 244.19948ms ago: executing program 3 (id=2104): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 242.062723ms ago: executing program 2 (id=2105): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0xf, {{0x2, 0x4e21, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x43, @multicast2}}, {{0x2, 0xfffc, @broadcast}}}, 0x108) fremovexattr(r2, &(0x7f0000000180)=@known='security.apparmor\x00') sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000002100010025bd7000fddbdf250200001400000000010001001400030069703665727370616e3000000089a454"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r6 = socket(0x28, 0x3, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)={0x10}, 0x10) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r7, &(0x7f0000000600)="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", 0x4d7) write$UHID_INPUT(r7, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x282, 0x0) 131.351393ms ago: executing program 2 (id=2106): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xff0f) 78.894208ms ago: executing program 3 (id=2107): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0x7}, 0x5}}}, 0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4243, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) 381.476µs ago: executing program 2 (id=2108): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x10, 0xe1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x7}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r1}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0x9765}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="bb29a6b952"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0xa, 0x0, "0aa47bddc1d76c5dabcb927dd405e4ee2b837808a68af0cf164ed78204d6bf0a8000325d89f03f6bd5da38209cad6f991e7365fdd23fb64ab646b7750c6380ead261b3cb07b9d2fc76c4efff65dec5ba"}, 0xd8) kernel console output (not intermixed with test programs): 0721] Tainted: [L]=SOFTLOCKUP [ 151.528793][T10721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.528799][T10721] Call Trace: [ 151.528803][T10721] [ 151.528808][T10721] dump_stack_lvl+0x100/0x190 [ 151.528825][T10721] should_fail_ex.cold+0x5/0xa [ 151.528863][T10721] should_failslab+0xc2/0x120 [ 151.528879][T10721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 151.528894][T10721] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 151.528911][T10721] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 151.528928][T10721] mmu_topup_memory_caches+0x25/0x170 [ 151.528945][T10721] kvm_mmu_load+0xe2/0x2570 [ 151.528961][T10721] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 151.528972][T10721] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 151.528985][T10721] ? __pfx_kvm_mmu_load+0x10/0x10 [ 151.529000][T10721] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 151.529013][T10721] ? kvm_check_and_inject_events+0x873/0x12a0 [ 151.529029][T10721] ? record_steal_time+0x3a0/0xbb0 [ 151.529043][T10721] vcpu_run+0x3aaa/0x5de0 [ 151.529064][T10721] ? __pfx_vcpu_run+0x10/0x10 [ 151.529085][T10721] ? rcu_is_watching+0x12/0xc0 [ 151.529104][T10721] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 151.529121][T10721] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 151.529141][T10721] kvm_vcpu_ioctl+0x730/0x1700 [ 151.529155][T10721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.529168][T10721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.529182][T10721] ? do_vfs_ioctl+0x226/0x13e0 [ 151.529199][T10721] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.529216][T10721] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.529239][T10721] ? __fget_files+0x215/0x3d0 [ 151.529250][T10721] ? hook_file_ioctl_common+0x140/0x440 [ 151.529266][T10721] ? selinux_file_ioctl+0x13b/0x290 [ 151.529283][T10721] ? selinux_file_ioctl+0xb6/0x290 [ 151.529301][T10721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.529314][T10721] __x64_sys_ioctl+0x18e/0x210 [ 151.529332][T10721] do_syscall_64+0x115/0x870 [ 151.529344][T10721] ? clear_bhb_loop+0x40/0x90 [ 151.529358][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.529370][T10721] RIP: 0033:0x7f009c19de99 [ 151.529380][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.529391][T10721] RSP: 002b:00007f009d14b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.529402][T10721] RAX: ffffffffffffffda RBX: 00007f009c425fa0 RCX: 00007f009c19de99 [ 151.529409][T10721] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 151.529415][T10721] RBP: 00007f009d14b090 R08: 0000000000000000 R09: 0000000000000000 [ 151.529422][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.529428][T10721] R13: 00007f009c426038 R14: 00007f009c425fa0 R15: 00007ffe5d14dd68 [ 151.529442][T10721] [ 151.752017][T10736] netlink: 'syz.0.1592': attribute type 11 has an invalid length. [ 151.855888][T10745] FAULT_INJECTION: forcing a failure. [ 151.855888][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 151.860911][T10745] CPU: 3 UID: 0 PID: 10745 Comm: syz.1.1595 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.860930][T10745] Tainted: [L]=SOFTLOCKUP [ 151.860934][T10745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.860941][T10745] Call Trace: [ 151.860945][T10745] [ 151.860950][T10745] dump_stack_lvl+0x100/0x190 [ 151.860968][T10745] should_fail_ex.cold+0x5/0xa [ 151.860983][T10745] should_failslab+0xc2/0x120 [ 151.860999][T10745] kmem_cache_alloc_noprof+0x91/0x6a0 [ 151.861013][T10745] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 151.861030][T10745] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 151.861048][T10745] mmu_topup_memory_caches+0x25/0x170 [ 151.861070][T10745] kvm_mmu_load+0xe2/0x2570 [ 151.861086][T10745] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 151.861097][T10745] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 151.861111][T10745] ? __pfx_kvm_mmu_load+0x10/0x10 [ 151.861125][T10745] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 151.861139][T10745] ? kvm_check_and_inject_events+0x873/0x12a0 [ 151.861155][T10745] ? record_steal_time+0x3a0/0xbb0 [ 151.861168][T10745] vcpu_run+0x3aaa/0x5de0 [ 151.861184][T10745] ? mark_held_locks+0x40/0x70 [ 151.861203][T10745] ? __pfx_vcpu_run+0x10/0x10 [ 151.861224][T10745] ? rcu_is_watching+0x12/0xc0 [ 151.861243][T10745] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 151.861260][T10745] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 151.861281][T10745] kvm_vcpu_ioctl+0x730/0x1700 [ 151.861295][T10745] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.861308][T10745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.861322][T10745] ? do_vfs_ioctl+0x226/0x13e0 [ 151.861339][T10745] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.861356][T10745] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.861380][T10745] ? __fget_files+0x215/0x3d0 [ 151.861391][T10745] ? hook_file_ioctl_common+0x140/0x440 [ 151.861407][T10745] ? selinux_file_ioctl+0x13b/0x290 [ 151.861424][T10745] ? selinux_file_ioctl+0xb6/0x290 [ 151.861442][T10745] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.861456][T10745] __x64_sys_ioctl+0x18e/0x210 [ 151.861473][T10745] do_syscall_64+0x115/0x870 [ 151.861487][T10745] ? clear_bhb_loop+0x40/0x90 [ 151.861500][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.861513][T10745] RIP: 0033:0x7ff43699de99 [ 151.861522][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.861533][T10745] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.861544][T10745] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 151.861553][T10745] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 151.861560][T10745] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.861567][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.861573][T10745] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 151.861587][T10745] [ 152.380676][T10765] 9p: Could not find request transport: virtiSr„Γ‘qL [ 152.536336][T10778] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.961706][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 152.975255][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20490 ms [ 152.977907][ C1] sl0: transmit timed out, driver error? [ 153.205312][ T7376] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.284768][T10825] FAULT_INJECTION: forcing a failure. [ 153.284768][T10825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.288901][T10825] CPU: 3 UID: 0 PID: 10825 Comm: syz.3.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.288919][T10825] Tainted: [L]=SOFTLOCKUP [ 153.288923][T10825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.288930][T10825] Call Trace: [ 153.288933][T10825] [ 153.288938][T10825] dump_stack_lvl+0x100/0x190 [ 153.288955][T10825] should_fail_ex.cold+0x5/0xa [ 153.288970][T10825] _copy_from_user+0x2e/0xd0 [ 153.288986][T10825] copy_msghdr_from_user+0x9f/0x4c0 [ 153.289006][T10825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 153.289031][T10825] ___sys_sendmsg+0x106/0x1e0 [ 153.289049][T10825] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.289067][T10825] ? __lock_acquire+0x49f/0x1a40 [ 153.289081][T10825] ? get_pid_task+0x106/0x250 [ 153.289114][T10825] __sys_sendmsg+0x160/0x210 [ 153.289128][T10825] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.289150][T10825] do_syscall_64+0x115/0x870 [ 153.289162][T10825] ? clear_bhb_loop+0x40/0x90 [ 153.289176][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.289188][T10825] RIP: 0033:0x7f693e19de99 [ 153.289198][T10825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.289208][T10825] RSP: 002b:00007f693c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.289220][T10825] RAX: ffffffffffffffda RBX: 00007f693e425fa0 RCX: 00007f693e19de99 [ 153.289227][T10825] RDX: 0000000000000010 RSI: 0000200000003f40 RDI: 0000000000000003 [ 153.289233][T10825] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.289240][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.289246][T10825] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 153.289264][T10825] [ 153.367111][ T7376] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.373341][ T7376] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.382460][ T7376] usb 5-1: string descriptor 0 read error: -22 [ 153.384328][ T7376] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 153.391523][ T7376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.522527][T10841] syzkaller0: entered promiscuous mode [ 153.524341][T10841] syzkaller0: entered allmulticast mode [ 153.530696][T10843] FAULT_INJECTION: forcing a failure. [ 153.530696][T10843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.534855][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.3.1628 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.534872][T10843] Tainted: [L]=SOFTLOCKUP [ 153.534876][T10843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.534883][T10843] Call Trace: [ 153.534886][T10843] [ 153.534891][T10843] dump_stack_lvl+0x100/0x190 [ 153.534909][T10843] should_fail_ex.cold+0x5/0xa [ 153.534923][T10843] _copy_from_user+0x2e/0xd0 [ 153.534939][T10843] snd_seq_ioctl+0x1bf/0x410 [ 153.534955][T10843] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 153.534969][T10843] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 153.534997][T10843] ? selinux_file_ioctl+0x13b/0x290 [ 153.535014][T10843] ? selinux_file_ioctl+0xb6/0x290 [ 153.535032][T10843] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 153.535047][T10843] __x64_sys_ioctl+0x18e/0x210 [ 153.535065][T10843] do_syscall_64+0x115/0x870 [ 153.535078][T10843] ? clear_bhb_loop+0x40/0x90 [ 153.535092][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.535104][T10843] RIP: 0033:0x7f693e19de99 [ 153.535114][T10843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.535124][T10843] RSP: 002b:00007f693c3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.535135][T10843] RAX: ffffffffffffffda RBX: 00007f693e425fa0 RCX: 00007f693e19de99 [ 153.535142][T10843] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003 [ 153.535149][T10843] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.535155][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.535161][T10843] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 153.535175][T10843] [ 153.762697][T10854] FAULT_INJECTION: forcing a failure. [ 153.762697][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 153.768363][T10854] CPU: 3 UID: 0 PID: 10854 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.768382][T10854] Tainted: [L]=SOFTLOCKUP [ 153.768386][T10854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.768392][T10854] Call Trace: [ 153.768396][T10854] [ 153.768400][T10854] dump_stack_lvl+0x100/0x190 [ 153.768417][T10854] should_fail_ex.cold+0x5/0xa [ 153.768432][T10854] should_failslab+0xc2/0x120 [ 153.768447][T10854] __kmalloc_cache_noprof+0x91/0x6c0 [ 153.768465][T10854] ? cap_capable+0x107/0x430 [ 153.768479][T10854] ? rfcomm_dlc_alloc+0x96/0x2b0 [ 153.768495][T10854] rfcomm_dlc_alloc+0x96/0x2b0 [ 153.768507][T10854] rfcomm_dev_ioctl+0xa52/0x1db0 [ 153.768525][T10854] ? bt_sock_ioctl+0x1df/0x580 [ 153.768536][T10854] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 153.768547][T10854] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 153.768568][T10854] ? tomoyo_path_number_perm+0x188/0x580 [ 153.768587][T10854] rfcomm_sock_ioctl+0xcc/0xf0 [ 153.768602][T10854] sock_do_ioctl+0x118/0x280 [ 153.768620][T10854] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.768640][T10854] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 153.768657][T10854] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 153.768679][T10854] sock_ioctl+0x599/0x6b0 [ 153.768689][T10854] ? __pfx_sock_ioctl+0x10/0x10 [ 153.768699][T10854] ? hook_file_ioctl_common+0x140/0x440 [ 153.768715][T10854] ? selinux_file_ioctl+0x13b/0x290 [ 153.768732][T10854] ? selinux_file_ioctl+0xb6/0x290 [ 153.768750][T10854] ? __pfx_sock_ioctl+0x10/0x10 [ 153.768761][T10854] __x64_sys_ioctl+0x18e/0x210 [ 153.768778][T10854] do_syscall_64+0x115/0x870 [ 153.768791][T10854] ? clear_bhb_loop+0x40/0x90 [ 153.768804][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.768816][T10854] RIP: 0033:0x7fd86459de99 [ 153.768856][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.768871][T10854] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.768886][T10854] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 153.768893][T10854] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 153.768900][T10854] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 153.768906][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.768912][T10854] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 153.768927][T10854] [ 154.312888][T10887] FAULT_INJECTION: forcing a failure. [ 154.312888][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 154.316953][T10887] CPU: 2 UID: 0 PID: 10887 Comm: syz.3.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.316970][T10887] Tainted: [L]=SOFTLOCKUP [ 154.316974][T10887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.316981][T10887] Call Trace: [ 154.316985][T10887] [ 154.316990][T10887] dump_stack_lvl+0x100/0x190 [ 154.317008][T10887] should_fail_ex.cold+0x5/0xa [ 154.317022][T10887] should_failslab+0xc2/0x120 [ 154.317037][T10887] __kmalloc_noprof+0xfc/0x820 [ 154.317051][T10887] ? lsm_blob_alloc+0x68/0x90 [ 154.317067][T10887] lsm_blob_alloc+0x68/0x90 [ 154.317079][T10887] security_task_alloc+0x2a/0x260 [ 154.317092][T10887] copy_process+0x2b94/0x8030 [ 154.317116][T10887] ? __pfx_copy_process+0x10/0x10 [ 154.317132][T10887] ? __kasan_kmalloc+0xaa/0xb0 [ 154.317146][T10887] ? lockdep_init_map_type+0x5c/0x250 [ 154.317162][T10887] ? lockdep_init_map_type+0x5c/0x250 [ 154.317177][T10887] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 154.317192][T10887] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 154.317212][T10887] vhost_task_create+0x1db/0x370 [ 154.317225][T10887] ? __pfx_vhost_task_create+0x10/0x10 [ 154.317246][T10887] ? __pfx_vhost_task_fn+0x10/0x10 [ 154.317261][T10887] ? __pfx___mutex_lock+0x10/0x10 [ 154.317274][T10887] ? kasan_quarantine_put+0x104/0x240 [ 154.317290][T10887] kvm_mmu_post_init_vm+0x1b3/0x360 [ 154.317310][T10887] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 154.317328][T10887] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 154.317344][T10887] kvm_vcpu_ioctl+0x730/0x1700 [ 154.317357][T10887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.317370][T10887] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.317385][T10887] ? do_vfs_ioctl+0x226/0x13e0 [ 154.317402][T10887] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.317419][T10887] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.317443][T10887] ? __fget_files+0x215/0x3d0 [ 154.317454][T10887] ? hook_file_ioctl_common+0x140/0x440 [ 154.317471][T10887] ? selinux_file_ioctl+0x13b/0x290 [ 154.317488][T10887] ? selinux_file_ioctl+0xb6/0x290 [ 154.317506][T10887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.317520][T10887] __x64_sys_ioctl+0x18e/0x210 [ 154.317537][T10887] do_syscall_64+0x115/0x870 [ 154.317549][T10887] ? clear_bhb_loop+0x40/0x90 [ 154.317563][T10887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.317575][T10887] RIP: 0033:0x7f693e19de99 [ 154.317585][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.317596][T10887] RSP: 002b:00007f693c3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.317607][T10887] RAX: ffffffffffffffda RBX: 00007f693e425fa0 RCX: 00007f693e19de99 [ 154.317614][T10887] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 154.317621][T10887] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.317627][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.317634][T10887] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 154.317648][T10887] [ 154.320646][T10889] FAULT_INJECTION: forcing a failure. [ 154.320646][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 154.410666][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1647'. [ 154.413659][T10889] CPU: 3 UID: 0 PID: 10889 Comm: syz.2.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.413677][T10889] Tainted: [L]=SOFTLOCKUP [ 154.413681][T10889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.413688][T10889] Call Trace: [ 154.413691][T10889] [ 154.413696][T10889] dump_stack_lvl+0x100/0x190 [ 154.413714][T10889] should_fail_ex.cold+0x5/0xa [ 154.413729][T10889] should_failslab+0xc2/0x120 [ 154.413744][T10889] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 154.413758][T10889] ? start_dirop+0x79/0xb0 [ 154.413768][T10889] ? alloc_inode+0x68/0x250 [ 154.413785][T10889] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 154.413803][T10889] alloc_inode+0x68/0x250 [ 154.413819][T10889] new_inode+0x22/0x1c0 [ 154.413836][T10889] __debugfs_create_file+0x105/0x4f0 [ 154.413857][T10889] debugfs_create_file_full+0x41/0x60 [ 154.413878][T10889] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 154.413895][T10889] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 154.413925][T10889] ? lockdep_init_map_type+0x5c/0x250 [ 154.413942][T10889] ? __pfx_sl_setup+0x10/0x10 [ 154.413953][T10889] alloc_netdev_mqs+0x314/0x15c0 [ 154.413971][T10889] slip_open+0x367/0x1120 [ 154.413983][T10889] ? __pfx___might_resched+0x10/0x10 [ 154.413996][T10889] ? tty_ldisc_close+0x114/0x1a0 [ 154.414010][T10889] ? __pfx_slip_open+0x10/0x10 [ 154.414021][T10889] ? down_write+0x146/0x1f0 [ 154.414037][T10889] ? __pfx_slip_open+0x10/0x10 [ 154.414048][T10889] tty_ldisc_open+0xa2/0x120 [ 154.414060][T10889] tty_set_ldisc+0x325/0x740 [ 154.414074][T10889] tty_ioctl+0x5b2/0x1640 [ 154.414088][T10889] ? __pfx_tty_ioctl+0x10/0x10 [ 154.414102][T10889] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.414125][T10889] ? __fget_files+0x215/0x3d0 [ 154.414136][T10889] ? hook_file_ioctl_common+0x140/0x440 [ 154.414159][T10889] ? selinux_file_ioctl+0x13b/0x290 [ 154.414180][T10889] ? selinux_file_ioctl+0xb6/0x290 [ 154.414198][T10889] ? __pfx_tty_ioctl+0x10/0x10 [ 154.414212][T10889] __x64_sys_ioctl+0x18e/0x210 [ 154.414231][T10889] do_syscall_64+0x115/0x870 [ 154.414243][T10889] ? clear_bhb_loop+0x40/0x90 [ 154.414257][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.414268][T10889] RIP: 0033:0x7fd86459de99 [ 154.414278][T10889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.414289][T10889] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.414300][T10889] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 154.414307][T10889] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 154.414314][T10889] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.414320][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.414327][T10889] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 154.414342][T10889] [ 154.414346][T10889] debugfs: out of free dentries, can not create file 'netdev@ffff8880391c8700' [ 154.592627][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 154.621724][T10903] IPVS: persistence engine module ip_vs_pe_s not found [ 154.653904][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 154.653915][ T42] audit: type=1400 audit(1785148276.096:693): avc: denied { write } for pid=10908 comm="syz.3.1651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.038911][T10924] sctp: [Deprecated]: syz.1.1656 (pid 10924) Use of int in max_burst socket option. [ 155.038911][T10924] Use struct sctp_assoc_value instead [ 155.417963][T10938] FAULT_INJECTION: forcing a failure. [ 155.417963][T10938] name failslab, interval 1, probability 0, space 0, times 0 [ 155.423200][T10938] CPU: 0 UID: 0 PID: 10938 Comm: syz.2.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.423227][T10938] Tainted: [L]=SOFTLOCKUP [ 155.423233][T10938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.423243][T10938] Call Trace: [ 155.423250][T10938] [ 155.423256][T10938] dump_stack_lvl+0x100/0x190 [ 155.423284][T10938] should_fail_ex.cold+0x5/0xa [ 155.423308][T10938] should_failslab+0xc2/0x120 [ 155.423331][T10938] kmem_cache_alloc_noprof+0x91/0x6a0 [ 155.423353][T10938] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 155.423381][T10938] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 155.423411][T10938] mmu_topup_memory_caches+0x25/0x170 [ 155.423438][T10938] kvm_mmu_load+0xe2/0x2570 [ 155.423463][T10938] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 155.423482][T10938] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 155.423504][T10938] ? __pfx_kvm_mmu_load+0x10/0x10 [ 155.423533][T10938] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 155.423554][T10938] ? kvm_check_and_inject_events+0x873/0x12a0 [ 155.423579][T10938] ? record_steal_time+0x3a0/0xbb0 [ 155.423602][T10938] vcpu_run+0x3aaa/0x5de0 [ 155.423638][T10938] ? __pfx_vcpu_run+0x10/0x10 [ 155.423672][T10938] ? rcu_is_watching+0x12/0xc0 [ 155.423702][T10938] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 155.423728][T10938] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 155.423762][T10938] kvm_vcpu_ioctl+0x730/0x1700 [ 155.423784][T10938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.423805][T10938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.423828][T10938] ? do_vfs_ioctl+0x226/0x13e0 [ 155.423854][T10938] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.423880][T10938] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.423916][T10938] ? __fget_files+0x215/0x3d0 [ 155.423933][T10938] ? hook_file_ioctl_common+0x140/0x440 [ 155.423961][T10938] ? selinux_file_ioctl+0x13b/0x290 [ 155.423986][T10938] ? selinux_file_ioctl+0xb6/0x290 [ 155.424013][T10938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.424034][T10938] __x64_sys_ioctl+0x18e/0x210 [ 155.424061][T10938] do_syscall_64+0x115/0x870 [ 155.424081][T10938] ? clear_bhb_loop+0x40/0x90 [ 155.424103][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.424121][T10938] RIP: 0033:0x7fd86459de99 [ 155.424136][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.424153][T10938] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.424171][T10938] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 155.424182][T10938] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 155.424193][T10938] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 155.424204][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.424214][T10938] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 155.424240][T10938] [ 155.513869][T10945] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1665'. [ 155.841848][ T42] audit: type=1400 audit(1785148277.286:694): avc: denied { mmap_zero } for pid=10968 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 155.869185][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 155.871843][T10969] netlink: 'syz.3.1673': attribute type 30 has an invalid length. [ 155.874148][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 155.877680][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 155.880278][T10969] netlink: 'syz.3.1673': attribute type 30 has an invalid length. [ 155.882508][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 156.188466][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 156.191980][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 156.448435][ T42] audit: type=1400 audit(1785148277.896:695): avc: denied { wake_alarm } for pid=11007 comm="syz.3.1686" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.648919][T11027] FAULT_INJECTION: forcing a failure. [ 156.648919][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 156.652825][T11027] CPU: 3 UID: 0 PID: 11027 Comm: syz.1.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.652842][T11027] Tainted: [L]=SOFTLOCKUP [ 156.652847][T11027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.652853][T11027] Call Trace: [ 156.652858][T11027] [ 156.652862][T11027] dump_stack_lvl+0x100/0x190 [ 156.652880][T11027] should_fail_ex.cold+0x5/0xa [ 156.652895][T11027] should_failslab+0xc2/0x120 [ 156.652910][T11027] kmem_cache_alloc_noprof+0x91/0x6a0 [ 156.652924][T11027] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.652941][T11027] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.652958][T11027] mmu_topup_memory_caches+0x25/0x170 [ 156.652975][T11027] kvm_mmu_load+0xe2/0x2570 [ 156.652991][T11027] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 156.653003][T11027] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 156.653016][T11027] ? __pfx_kvm_mmu_load+0x10/0x10 [ 156.653031][T11027] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 156.653044][T11027] ? kvm_check_and_inject_events+0x873/0x12a0 [ 156.653061][T11027] ? record_steal_time+0x3a0/0xbb0 [ 156.653074][T11027] vcpu_run+0x3aaa/0x5de0 [ 156.653096][T11027] ? __pfx_vcpu_run+0x10/0x10 [ 156.653117][T11027] ? rcu_is_watching+0x12/0xc0 [ 156.653141][T11027] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 156.653159][T11027] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 156.653180][T11027] kvm_vcpu_ioctl+0x730/0x1700 [ 156.653193][T11027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.653206][T11027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.653221][T11027] ? do_vfs_ioctl+0x226/0x13e0 [ 156.653238][T11027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.653255][T11027] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 156.653279][T11027] ? __fget_files+0x215/0x3d0 [ 156.653290][T11027] ? hook_file_ioctl_common+0x140/0x440 [ 156.653307][T11027] ? selinux_file_ioctl+0x13b/0x290 [ 156.653324][T11027] ? selinux_file_ioctl+0xb6/0x290 [ 156.653342][T11027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.653356][T11027] __x64_sys_ioctl+0x18e/0x210 [ 156.653375][T11027] do_syscall_64+0x115/0x870 [ 156.653392][T11027] ? clear_bhb_loop+0x40/0x90 [ 156.653406][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.653417][T11027] RIP: 0033:0x7ff43699de99 [ 156.653428][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.653439][T11027] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.653451][T11027] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 156.653458][T11027] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 156.653465][T11027] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 156.653471][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.653478][T11027] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 156.653492][T11027] [ 156.758083][T11032] netlink: 'syz.3.1692': attribute type 21 has an invalid length. [ 156.760566][T11032] netlink: 'syz.3.1692': attribute type 7 has an invalid length. [ 156.899022][T11054] FAULT_INJECTION: forcing a failure. [ 156.899022][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.903536][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.3.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.903555][T11054] Tainted: [L]=SOFTLOCKUP [ 156.903559][T11054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.903566][T11054] Call Trace: [ 156.903570][T11054] [ 156.903574][T11054] dump_stack_lvl+0x100/0x190 [ 156.903591][T11054] should_fail_ex.cold+0x5/0xa [ 156.903606][T11054] _copy_to_user+0x32/0xd0 [ 156.903624][T11054] simple_read_from_buffer+0xcb/0x170 [ 156.903637][T11054] proc_fail_nth_read+0x1af/0x230 [ 156.903655][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.903674][T11054] ? rw_verify_area+0xce/0x6d0 [ 156.903689][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.903707][T11054] vfs_read+0x1e4/0xb40 [ 156.903737][T11054] ? __pfx_vfs_read+0x10/0x10 [ 156.903756][T11054] ? __fget_files+0x215/0x3d0 [ 156.903771][T11054] ? __fget_files+0x21f/0x3d0 [ 156.903786][T11054] ksys_read+0x12a/0x250 [ 156.903803][T11054] ? __pfx_ksys_read+0x10/0x10 [ 156.903825][T11054] do_syscall_64+0x115/0x870 [ 156.903838][T11054] ? clear_bhb_loop+0x40/0x90 [ 156.903852][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.903864][T11054] RIP: 0033:0x7f693e15e6ce [ 156.903874][T11054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.903885][T11054] RSP: 002b:00007f693c3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.903896][T11054] RAX: ffffffffffffffda RBX: 00007f693c3f66c0 RCX: 00007f693e15e6ce [ 156.903903][T11054] RDX: 000000000000000f RSI: 00007f693c3f60a0 RDI: 0000000000000004 [ 156.903909][T11054] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.903915][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.903921][T11054] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 156.903935][T11054] [ 156.989531][T11052] FAULT_INJECTION: forcing a failure. [ 156.989531][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 156.993409][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.2.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.993427][T11052] Tainted: [L]=SOFTLOCKUP [ 156.993430][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.993437][T11052] Call Trace: [ 156.993441][T11052] [ 156.993445][T11052] dump_stack_lvl+0x100/0x190 [ 156.993463][T11052] should_fail_ex.cold+0x5/0xa [ 156.993478][T11052] should_failslab+0xc2/0x120 [ 156.993493][T11052] kmem_cache_alloc_noprof+0x91/0x6a0 [ 156.993507][T11052] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.993523][T11052] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.993541][T11052] mmu_topup_memory_caches+0x25/0x170 [ 156.993558][T11052] kvm_mmu_load+0xe2/0x2570 [ 156.993573][T11052] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 156.993585][T11052] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 156.993598][T11052] ? __pfx_kvm_mmu_load+0x10/0x10 [ 156.993613][T11052] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 156.993627][T11052] ? kvm_check_and_inject_events+0x873/0x12a0 [ 156.993643][T11052] ? record_steal_time+0x3a0/0xbb0 [ 156.993656][T11052] vcpu_run+0x3aaa/0x5de0 [ 156.993672][T11052] ? mark_held_locks+0x40/0x70 [ 156.993695][T11052] ? __pfx_vcpu_run+0x10/0x10 [ 156.993716][T11052] ? rcu_is_watching+0x12/0xc0 [ 156.993735][T11052] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 156.993752][T11052] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 156.993773][T11052] kvm_vcpu_ioctl+0x730/0x1700 [ 156.993787][T11052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.993800][T11052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.993815][T11052] ? do_vfs_ioctl+0x226/0x13e0 [ 156.993832][T11052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.993849][T11052] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 156.993873][T11052] ? __fget_files+0x215/0x3d0 [ 156.993883][T11052] ? hook_file_ioctl_common+0x140/0x440 [ 156.993900][T11052] ? selinux_file_ioctl+0x13b/0x290 [ 156.993917][T11052] ? selinux_file_ioctl+0xb6/0x290 [ 156.993935][T11052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.993949][T11052] __x64_sys_ioctl+0x18e/0x210 [ 156.993967][T11052] do_syscall_64+0x115/0x870 [ 156.993979][T11052] ? clear_bhb_loop+0x40/0x90 [ 156.993994][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.994005][T11052] RIP: 0033:0x7fd86459de99 [ 156.994015][T11052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.994026][T11052] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.994037][T11052] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 156.994044][T11052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 156.994050][T11052] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 156.994057][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.994063][T11052] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 156.994077][T11052] [ 157.121816][T11062] tipc: Started in network mode [ 157.123299][T11062] tipc: Node identity 8a4ee16522a6, cluster identity 4711 [ 157.126056][T11062] tipc: Enabled bearer , priority 0 [ 157.129536][T11061] tipc: Disabling bearer [ 157.400603][T11077] FAULT_INJECTION: forcing a failure. [ 157.400603][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 157.405808][T11077] CPU: 0 UID: 0 PID: 11077 Comm: syz.2.1709 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.405826][T11077] Tainted: [L]=SOFTLOCKUP [ 157.405830][T11077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.405837][T11077] Call Trace: [ 157.405841][T11077] [ 157.405845][T11077] dump_stack_lvl+0x100/0x190 [ 157.405863][T11077] should_fail_ex.cold+0x5/0xa [ 157.405878][T11077] should_failslab+0xc2/0x120 [ 157.405893][T11077] __kmalloc_cache_noprof+0x91/0x6c0 [ 157.405911][T11077] ? lockdep_init_map_type+0x5c/0x250 [ 157.405926][T11077] ? rfcomm_dev_ioctl+0xaa4/0x1db0 [ 157.405946][T11077] rfcomm_dev_ioctl+0xaa4/0x1db0 [ 157.405963][T11077] ? bt_sock_ioctl+0x1df/0x580 [ 157.405974][T11077] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 157.405985][T11077] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 157.406007][T11077] ? tomoyo_path_number_perm+0x188/0x580 [ 157.406026][T11077] rfcomm_sock_ioctl+0xcc/0xf0 [ 157.406041][T11077] sock_do_ioctl+0x118/0x280 [ 157.406060][T11077] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.406080][T11077] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.406097][T11077] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.406119][T11077] sock_ioctl+0x599/0x6b0 [ 157.406130][T11077] ? __pfx_sock_ioctl+0x10/0x10 [ 157.406140][T11077] ? hook_file_ioctl_common+0x140/0x440 [ 157.406156][T11077] ? selinux_file_ioctl+0x13b/0x290 [ 157.406173][T11077] ? selinux_file_ioctl+0xb6/0x290 [ 157.406192][T11077] ? __pfx_sock_ioctl+0x10/0x10 [ 157.406203][T11077] __x64_sys_ioctl+0x18e/0x210 [ 157.406221][T11077] do_syscall_64+0x115/0x870 [ 157.406233][T11077] ? clear_bhb_loop+0x40/0x90 [ 157.406247][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.406259][T11077] RIP: 0033:0x7fd86459de99 [ 157.406268][T11077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.406279][T11077] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.406290][T11077] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 157.406297][T11077] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 157.406303][T11077] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.406309][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.406316][T11077] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 157.406330][T11077] [ 157.528748][T11085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.531968][T11085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.542006][T11085] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 157.548314][T11085] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 157.551414][T11085] overlayfs: d_ino too big (452, ino=9223372036854778156, xinobits=3) [ 157.554217][T11085] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 157.557089][T11085] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 157.559765][T11085] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 157.562361][T11085] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 157.565109][T11085] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 157.569274][T11085] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 157.572350][T11085] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 157.582451][T11085] lo: Caught tx_queue_len zero misconfig [ 157.764499][T11090] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.780573][T11091] tipc: Started in network mode [ 157.782530][T11091] tipc: Node identity 6ef81e4e026a, cluster identity 4711 [ 157.786636][T11091] tipc: Enabled bearer , priority 0 [ 157.790986][T11089] tipc: Disabling bearer [ 157.930112][T11104] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 157.964841][ T42] audit: type=1400 audit(1785148279.406:696): avc: denied { connect } for pid=11106 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.971717][ T42] audit: type=1400 audit(1785148279.416:697): avc: denied { shutdown } for pid=11106 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.058094][T11110] ceph: Path missing in source [ 158.193663][ T42] audit: type=1400 audit(1785148279.636:698): avc: denied { read } for pid=11117 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.243287][ T42] audit: type=1400 audit(1785148279.686:699): avc: denied { getopt } for pid=11123 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.872940][T11110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.911378][T11135] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 158.916854][T11135] ipvlan0: entered allmulticast mode [ 158.918539][T11135] veth0_vlan: entered allmulticast mode [ 158.923298][T11135] team0: Device ipvlan0 failed to register rx_handler [ 158.931275][T11135] __nla_validate_parse: 2 callbacks suppressed [ 158.931285][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 158.939702][ T42] audit: type=1400 audit(1785148280.386:700): avc: denied { write } for pid=11134 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.126880][T11143] FAULT_INJECTION: forcing a failure. [ 159.126880][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 159.132557][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.2.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.132586][T11143] Tainted: [L]=SOFTLOCKUP [ 159.132593][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.132603][T11143] Call Trace: [ 159.132610][T11143] [ 159.132617][T11143] dump_stack_lvl+0x100/0x190 [ 159.132645][T11143] should_fail_ex.cold+0x5/0xa [ 159.132668][T11143] should_failslab+0xc2/0x120 [ 159.132691][T11143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 159.132710][T11143] ? vhost_task_create+0x1db/0x370 [ 159.132730][T11143] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 159.132754][T11143] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 159.132780][T11143] ? alloc_pid+0x1bd/0x1910 [ 159.132822][T11143] alloc_pid+0x1bd/0x1910 [ 159.132847][T11143] ? __pfx_alloc_pid+0x10/0x10 [ 159.132875][T11143] ? __lock_acquire+0x49f/0x1a40 [ 159.132898][T11143] ? avc_has_perm_noaudit+0x145/0x3b0 [ 159.132930][T11143] ? fpu_clone+0x226/0x7a0 [ 159.132951][T11143] ? copy_thread+0x729/0xbe0 [ 159.132979][T11143] copy_process+0x5485/0x8030 [ 159.133019][T11143] ? __pfx_copy_process+0x10/0x10 [ 159.133043][T11143] ? __kasan_kmalloc+0xaa/0xb0 [ 159.133065][T11143] ? lockdep_init_map_type+0x5c/0x250 [ 159.133090][T11143] ? lockdep_init_map_type+0x5c/0x250 [ 159.133113][T11143] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 159.133136][T11143] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 159.133171][T11143] vhost_task_create+0x1db/0x370 [ 159.133191][T11143] ? __pfx_vhost_task_create+0x10/0x10 [ 159.133219][T11143] ? __pfx_vhost_task_fn+0x10/0x10 [ 159.133242][T11143] ? __pfx___mutex_lock+0x10/0x10 [ 159.133263][T11143] ? kasan_quarantine_put+0x104/0x240 [ 159.133290][T11143] kvm_mmu_post_init_vm+0x1b3/0x360 [ 159.133317][T11143] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 159.133342][T11143] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 159.133368][T11143] kvm_vcpu_ioctl+0x730/0x1700 [ 159.133390][T11143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.133411][T11143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.133434][T11143] ? do_vfs_ioctl+0x226/0x13e0 [ 159.133460][T11143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 159.133485][T11143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.133523][T11143] ? __fget_files+0x215/0x3d0 [ 159.133539][T11143] ? hook_file_ioctl_common+0x140/0x440 [ 159.133682][T11143] ? selinux_file_ioctl+0x13b/0x290 [ 159.133708][T11143] ? selinux_file_ioctl+0xb6/0x290 [ 159.133736][T11143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.133757][T11143] __x64_sys_ioctl+0x18e/0x210 [ 159.133784][T11143] do_syscall_64+0x115/0x870 [ 159.133804][T11143] ? clear_bhb_loop+0x40/0x90 [ 159.133826][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.133845][T11143] RIP: 0033:0x7fd86459de99 [ 159.133862][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.133878][T11143] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.133896][T11143] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 159.133907][T11143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 159.133917][T11143] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.133928][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.133938][T11143] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 159.133963][T11143] [ 159.287012][T10795] usb 5-1: 1:1: usb_set_interface failed (-110) [ 159.292055][ T41] usb 5-1: USB disconnect, device number 14 [ 159.446806][T11151] netlink: 'syz.2.1738': attribute type 39 has an invalid length. [ 159.456394][T11151] hsr_slave_0 (unregistering): left promiscuous mode [ 159.775317][ T42] audit: type=1400 audit(1785148281.216:701): avc: denied { relabelfrom } for pid=11176 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 159.781753][ T42] audit: type=1400 audit(1785148281.226:702): avc: denied { relabelto } for pid=11176 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 159.895302][ T5841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 160.059395][ T5841] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.062979][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.066210][ T5841] usb 6-1: Product: syz [ 160.067936][ T5841] usb 6-1: Manufacturer: syz [ 160.069858][ T5841] usb 6-1: SerialNumber: syz [ 160.220349][T11198] Device name not specified. [ 160.220349][T11198] [ 160.286001][ T5841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 160.290919][ T5841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 160.295376][ T5841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.309123][ T5841] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 160.318191][ T5841] usb 6-1: USB disconnect, device number 9 [ 160.334954][T11203] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 160.336590][ T42] audit: type=1400 audit(1785148281.776:703): avc: denied { getopt } for pid=11192 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.405336][ T42] audit: type=1400 audit(1785148281.846:704): avc: denied { accept } for pid=11205 comm="syz.0.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.502597][T11209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1755'. [ 160.777644][T11216] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 160.969575][T11232] FAULT_INJECTION: forcing a failure. [ 160.969575][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 160.974188][T11232] CPU: 3 UID: 0 PID: 11232 Comm: syz.1.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.974206][T11232] Tainted: [L]=SOFTLOCKUP [ 160.974210][T11232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.974217][T11232] Call Trace: [ 160.974221][T11232] [ 160.974226][T11232] dump_stack_lvl+0x100/0x190 [ 160.974254][T11232] should_fail_ex.cold+0x5/0xa [ 160.974271][T11232] should_failslab+0xc2/0x120 [ 160.974286][T11232] kmem_cache_alloc_noprof+0x91/0x6a0 [ 160.974301][T11232] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 160.974318][T11232] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 160.974336][T11232] mmu_topup_memory_caches+0x25/0x170 [ 160.974353][T11232] kvm_mmu_load+0xe2/0x2570 [ 160.974369][T11232] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 160.974380][T11232] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 160.974394][T11232] ? __pfx_kvm_mmu_load+0x10/0x10 [ 160.974409][T11232] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 160.974423][T11232] ? kvm_check_and_inject_events+0x873/0x12a0 [ 160.974439][T11232] ? record_steal_time+0x3a0/0xbb0 [ 160.974452][T11232] vcpu_run+0x3aaa/0x5de0 [ 160.974474][T11232] ? __pfx_vcpu_run+0x10/0x10 [ 160.974495][T11232] ? rcu_is_watching+0x12/0xc0 [ 160.974514][T11232] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 160.974531][T11232] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 160.974555][T11232] kvm_vcpu_ioctl+0x730/0x1700 [ 160.974568][T11232] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.974581][T11232] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.974596][T11232] ? do_vfs_ioctl+0x226/0x13e0 [ 160.974613][T11232] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 160.974629][T11232] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 160.974654][T11232] ? __fget_files+0x215/0x3d0 [ 160.974664][T11232] ? hook_file_ioctl_common+0x140/0x440 [ 160.974682][T11232] ? selinux_file_ioctl+0x13b/0x290 [ 160.974701][T11232] ? selinux_file_ioctl+0xb6/0x290 [ 160.974719][T11232] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.974732][T11232] __x64_sys_ioctl+0x18e/0x210 [ 160.974750][T11232] do_syscall_64+0x115/0x870 [ 160.974763][T11232] ? clear_bhb_loop+0x40/0x90 [ 160.974776][T11232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.974788][T11232] RIP: 0033:0x7ff43699de99 [ 160.974799][T11232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.974810][T11232] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.974821][T11232] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 160.974828][T11232] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 160.974834][T11232] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 160.974840][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.974847][T11232] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 160.974861][T11232] [ 161.243819][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1769'. [ 161.273887][T11250] fuse: Bad value for 'user_id' [ 161.275961][T11250] fuse: Bad value for 'user_id' [ 161.279542][T11250] devpts: Unknown parameter 'wlan0' [ 161.353189][T11252] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 161.525417][ T5835] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 161.588594][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.696722][ T5835] usb 6-1: not running at top speed; connect to a high speed hub [ 161.700700][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 161.705004][ T5835] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 161.708010][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.717280][ T5835] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 161.735753][ T5835] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 161.782278][T11265] process 'syz.2.1776' launched './file1' with NULL argv: empty string added [ 161.785948][ T42] audit: type=1400 audit(1785148283.226:705): avc: denied { execute_no_trans } for pid=11264 comm="syz.2.1776" path="/478/file1" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.918295][T11250] tmpfs: Bad value for 'uid' [ 161.920488][T11250] tmpfs: Bad value for 'uid' [ 161.923341][ T5835] usb 6-1: USB disconnect, device number 10 [ 161.937833][ T5835] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 161.941217][ T5835] garmin_gps 6-1:1.0: device disconnected [ 162.290710][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1784'. [ 162.480706][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.536145][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.567739][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 162.584205][T11304] overlayfs: workdir and upperdir must reside under the same mount [ 162.590089][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.787563][ T42] audit: type=1400 audit(1785148284.236:706): avc: denied { connect } for pid=11315 comm="syz.2.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.035667][T11323] IPVS: length: 139 != 8 [ 163.169949][T11331] FAULT_INJECTION: forcing a failure. [ 163.169949][T11331] name failslab, interval 1, probability 0, space 0, times 0 [ 163.173856][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.2.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.173875][T11331] Tainted: [L]=SOFTLOCKUP [ 163.173878][T11331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.173885][T11331] Call Trace: [ 163.173890][T11331] [ 163.173895][T11331] dump_stack_lvl+0x100/0x190 [ 163.173913][T11331] should_fail_ex.cold+0x5/0xa [ 163.173927][T11331] should_failslab+0xc2/0x120 [ 163.173942][T11331] kmem_cache_alloc_noprof+0x91/0x6a0 [ 163.173956][T11331] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 163.173974][T11331] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 163.173991][T11331] mmu_topup_memory_caches+0x25/0x170 [ 163.174008][T11331] kvm_mmu_load+0xe2/0x2570 [ 163.174027][T11331] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 163.174039][T11331] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 163.174052][T11331] ? __pfx_kvm_mmu_load+0x10/0x10 [ 163.174069][T11331] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 163.174083][T11331] ? kvm_check_and_inject_events+0x873/0x12a0 [ 163.174099][T11331] ? record_steal_time+0x3a0/0xbb0 [ 163.174113][T11331] vcpu_run+0x3aaa/0x5de0 [ 163.174134][T11331] ? __pfx_vcpu_run+0x10/0x10 [ 163.174155][T11331] ? rcu_is_watching+0x12/0xc0 [ 163.174175][T11331] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 163.174192][T11331] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 163.174212][T11331] kvm_vcpu_ioctl+0x730/0x1700 [ 163.174226][T11331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.174239][T11331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.174253][T11331] ? do_vfs_ioctl+0x226/0x13e0 [ 163.174270][T11331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.174286][T11331] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.174312][T11331] ? __fget_files+0x215/0x3d0 [ 163.174323][T11331] ? hook_file_ioctl_common+0x140/0x440 [ 163.174340][T11331] ? selinux_file_ioctl+0x13b/0x290 [ 163.174357][T11331] ? selinux_file_ioctl+0xb6/0x290 [ 163.174375][T11331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.174388][T11331] __x64_sys_ioctl+0x18e/0x210 [ 163.174409][T11331] do_syscall_64+0x115/0x870 [ 163.174421][T11331] ? clear_bhb_loop+0x40/0x90 [ 163.174435][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.174447][T11331] RIP: 0033:0x7fd86459de99 [ 163.174459][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.174470][T11331] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.174481][T11331] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 163.174488][T11331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 163.174495][T11331] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.174501][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.174508][T11331] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 163.174522][T11331] [ 163.655425][ T41] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.837029][ T41] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 163.839773][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.843276][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.846859][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.850973][ T41] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.853923][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.858641][ T41] usb 7-1: config 0 descriptor?? [ 164.091480][ T42] audit: type=1400 audit(1785148285.536:707): avc: denied { getopt } for pid=11355 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.195329][T11360] FAULT_INJECTION: forcing a failure. [ 164.195329][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 164.199199][T11360] CPU: 2 UID: 0 PID: 11360 Comm: syz.3.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.199218][T11360] Tainted: [L]=SOFTLOCKUP [ 164.199222][T11360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.199228][T11360] Call Trace: [ 164.199233][T11360] [ 164.199239][T11360] dump_stack_lvl+0x100/0x190 [ 164.199256][T11360] should_fail_ex.cold+0x5/0xa [ 164.199270][T11360] should_failslab+0xc2/0x120 [ 164.199286][T11360] kmem_cache_alloc_noprof+0x91/0x6a0 [ 164.199300][T11360] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.199317][T11360] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.199334][T11360] mmu_topup_memory_caches+0x25/0x170 [ 164.199351][T11360] kvm_mmu_load+0xe2/0x2570 [ 164.199368][T11360] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 164.199380][T11360] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 164.199393][T11360] ? __pfx_kvm_mmu_load+0x10/0x10 [ 164.199408][T11360] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 164.199422][T11360] ? kvm_check_and_inject_events+0x873/0x12a0 [ 164.199439][T11360] ? record_steal_time+0x3a0/0xbb0 [ 164.199453][T11360] vcpu_run+0x3aaa/0x5de0 [ 164.199475][T11360] ? __pfx_vcpu_run+0x10/0x10 [ 164.199496][T11360] ? rcu_is_watching+0x12/0xc0 [ 164.199515][T11360] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 164.199532][T11360] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 164.199553][T11360] kvm_vcpu_ioctl+0x730/0x1700 [ 164.199567][T11360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.199580][T11360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.199594][T11360] ? do_vfs_ioctl+0x226/0x13e0 [ 164.199612][T11360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.199629][T11360] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 164.199652][T11360] ? __fget_files+0x215/0x3d0 [ 164.199663][T11360] ? hook_file_ioctl_common+0x140/0x440 [ 164.199680][T11360] ? selinux_file_ioctl+0x13b/0x290 [ 164.199696][T11360] ? selinux_file_ioctl+0xb6/0x290 [ 164.199715][T11360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.199728][T11360] __x64_sys_ioctl+0x18e/0x210 [ 164.199746][T11360] do_syscall_64+0x115/0x870 [ 164.199759][T11360] ? clear_bhb_loop+0x40/0x90 [ 164.199773][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.199784][T11360] RIP: 0033:0x7f693e19de99 [ 164.199795][T11360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.199806][T11360] RSP: 002b:00007f693c3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.199817][T11360] RAX: ffffffffffffffda RBX: 00007f693e425fa0 RCX: 00007f693e19de99 [ 164.199824][T11360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 164.199831][T11360] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.199837][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.199844][T11360] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 164.199858][T11360] [ 164.271905][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.297189][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.299782][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.302382][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.304685][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.309309][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.311846][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.314161][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.316675][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 164.331019][ T41] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 164.470149][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.473652][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.554385][ T41] usb 7-1: USB disconnect, device number 4 [ 164.663947][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 164.713270][T11374] lo speed is unknown, defaulting to 1000 [ 164.863622][T11379] netlink: 'syz.3.1815': attribute type 2 has an invalid length. [ 164.867336][ T42] audit: type=1400 audit(1785148286.316:708): avc: denied { mount } for pid=11378 comm="syz.3.1815" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 165.125739][T11388] FAULT_INJECTION: forcing a failure. [ 165.125739][T11388] name failslab, interval 1, probability 0, space 0, times 0 [ 165.129464][T11388] CPU: 3 UID: 0 PID: 11388 Comm: syz.2.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.129482][T11388] Tainted: [L]=SOFTLOCKUP [ 165.129486][T11388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.129492][T11388] Call Trace: [ 165.129497][T11388] [ 165.129501][T11388] dump_stack_lvl+0x100/0x190 [ 165.129519][T11388] should_fail_ex.cold+0x5/0xa [ 165.129533][T11388] should_failslab+0xc2/0x120 [ 165.129549][T11388] kmem_cache_alloc_noprof+0x91/0x6a0 [ 165.129564][T11388] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.129581][T11388] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.129598][T11388] mmu_topup_memory_caches+0x25/0x170 [ 165.129615][T11388] kvm_mmu_load+0xe2/0x2570 [ 165.129630][T11388] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 165.129641][T11388] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 165.129655][T11388] ? __pfx_kvm_mmu_load+0x10/0x10 [ 165.129669][T11388] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 165.129683][T11388] ? kvm_check_and_inject_events+0x873/0x12a0 [ 165.129700][T11388] ? record_steal_time+0x3a0/0xbb0 [ 165.129713][T11388] vcpu_run+0x3aaa/0x5de0 [ 165.129729][T11388] ? mark_held_locks+0x40/0x70 [ 165.129748][T11388] ? __pfx_vcpu_run+0x10/0x10 [ 165.129769][T11388] ? rcu_is_watching+0x12/0xc0 [ 165.129788][T11388] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 165.129804][T11388] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 165.129825][T11388] kvm_vcpu_ioctl+0x730/0x1700 [ 165.129838][T11388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.129851][T11388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.129866][T11388] ? do_vfs_ioctl+0x226/0x13e0 [ 165.129883][T11388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.129900][T11388] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.129922][T11388] ? __fget_files+0x215/0x3d0 [ 165.129933][T11388] ? hook_file_ioctl_common+0x140/0x440 [ 165.129949][T11388] ? selinux_file_ioctl+0x13b/0x290 [ 165.129966][T11388] ? selinux_file_ioctl+0xb6/0x290 [ 165.129989][T11388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.130002][T11388] __x64_sys_ioctl+0x18e/0x210 [ 165.130020][T11388] do_syscall_64+0x115/0x870 [ 165.130032][T11388] ? clear_bhb_loop+0x40/0x90 [ 165.130047][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.130058][T11388] RIP: 0033:0x7fd86459de99 [ 165.130068][T11388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.130079][T11388] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.130090][T11388] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 165.130097][T11388] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 165.130103][T11388] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 165.130110][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.130116][T11388] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 165.130130][T11388] [ 165.338211][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 165.386514][T11401] FAULT_INJECTION: forcing a failure. [ 165.386514][T11401] name failslab, interval 1, probability 0, space 0, times 0 [ 165.390905][T11401] CPU: 2 UID: 0 PID: 11401 Comm: syz.1.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.390923][T11401] Tainted: [L]=SOFTLOCKUP [ 165.390927][T11401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.390934][T11401] Call Trace: [ 165.390938][T11401] [ 165.390943][T11401] dump_stack_lvl+0x100/0x190 [ 165.390961][T11401] should_fail_ex.cold+0x5/0xa [ 165.390975][T11401] should_failslab+0xc2/0x120 [ 165.390990][T11401] kmem_cache_alloc_noprof+0x91/0x6a0 [ 165.391003][T11401] ? vhost_task_create+0x1db/0x370 [ 165.391015][T11401] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 165.391031][T11401] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 165.391048][T11401] ? alloc_pid+0x1bd/0x1910 [ 165.391062][T11401] alloc_pid+0x1bd/0x1910 [ 165.391075][T11401] ? __pfx_alloc_pid+0x10/0x10 [ 165.391091][T11401] ? __lock_acquire+0x49f/0x1a40 [ 165.391106][T11401] ? avc_has_perm_noaudit+0x145/0x3b0 [ 165.391127][T11401] ? fpu_clone+0x226/0x7a0 [ 165.391140][T11401] ? copy_thread+0x729/0xbe0 [ 165.391157][T11401] copy_process+0x5485/0x8030 [ 165.391180][T11401] ? __pfx_copy_process+0x10/0x10 [ 165.391196][T11401] ? __kasan_kmalloc+0xaa/0xb0 [ 165.391210][T11401] ? lockdep_init_map_type+0x5c/0x250 [ 165.391225][T11401] ? lockdep_init_map_type+0x5c/0x250 [ 165.391240][T11401] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 165.391254][T11401] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 165.391289][T11401] vhost_task_create+0x1db/0x370 [ 165.391302][T11401] ? __pfx_vhost_task_create+0x10/0x10 [ 165.391319][T11401] ? __pfx_vhost_task_fn+0x10/0x10 [ 165.391333][T11401] ? __pfx___mutex_lock+0x10/0x10 [ 165.391346][T11401] ? kasan_quarantine_put+0x104/0x240 [ 165.391362][T11401] kvm_mmu_post_init_vm+0x1b3/0x360 [ 165.391380][T11401] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 165.391397][T11401] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 165.391413][T11401] kvm_vcpu_ioctl+0x730/0x1700 [ 165.391426][T11401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.391439][T11401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.391454][T11401] ? do_vfs_ioctl+0x226/0x13e0 [ 165.391471][T11401] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.391487][T11401] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.391511][T11401] ? __fget_files+0x215/0x3d0 [ 165.391522][T11401] ? hook_file_ioctl_common+0x140/0x440 [ 165.391538][T11401] ? selinux_file_ioctl+0x13b/0x290 [ 165.391555][T11401] ? selinux_file_ioctl+0xb6/0x290 [ 165.391573][T11401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.391587][T11401] __x64_sys_ioctl+0x18e/0x210 [ 165.391609][T11401] do_syscall_64+0x115/0x870 [ 165.391621][T11401] ? clear_bhb_loop+0x40/0x90 [ 165.391635][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.391647][T11401] RIP: 0033:0x7ff43699de99 [ 165.391657][T11401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.391667][T11401] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.391678][T11401] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 165.391686][T11401] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 165.391692][T11401] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 165.391698][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.391705][T11401] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 165.391719][T11401] [ 165.553625][ T42] audit: type=1400 audit(1785148286.996:709): avc: denied { setopt } for pid=11405 comm="syz.3.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.776620][T11424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1830'. [ 165.840114][T11433] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 165.842579][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 165.867761][ T5811] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.869680][T11433] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 165.871706][ T5811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.876027][ T5811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.876071][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 165.878631][ T5811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.050748][ T42] audit: type=1400 audit(1785148287.496:710): avc: denied { write } for pid=11458 comm="syz.2.1843" name="/" dev="9p" ino=73414145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.058249][ T42] audit: type=1400 audit(1785148287.496:711): avc: denied { create } for pid=11458 comm="syz.2.1843" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 166.275321][ T847] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 166.432096][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1846'. [ 166.447311][ T847] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.450690][ T847] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.455881][ T847] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 166.462893][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.467587][ T847] usb 8-1: config 0 descriptor?? [ 166.473215][ T847] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 166.475935][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 166.481986][ T847] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 166.484979][ T847] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 166.487589][ T847] usb 8-1: media controller created [ 166.490798][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.497066][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 166.499550][ T847] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.505933][ T847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input15 [ 166.511501][ T847] dvb-usb: schedule remote query interval to 150 msecs. [ 166.513652][ T847] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.575317][ T5824] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 166.679379][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 166.681301][ T847] dvb-usb: error while querying for an remote control event. [ 166.725414][ T5824] usb 5-1: device descriptor read/64, error -71 [ 166.847136][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 166.849655][ T847] dvb-usb: error while querying for an remote control event. [ 166.985316][ T5824] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.005304][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.009237][ T847] dvb-usb: error while querying for an remote control event. [ 167.018167][T11492] tmpfs: Bad value for 'mpol' [ 167.115322][ T5824] usb 5-1: device descriptor read/64, error -71 [ 167.165366][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.167696][ T847] dvb-usb: error while querying for an remote control event. [ 167.225581][ T5824] usb usb5-port1: attempt power cycle [ 167.325337][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.327143][ T847] dvb-usb: error while querying for an remote control event. [ 167.485422][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.487372][ T847] dvb-usb: error while querying for an remote control event. [ 167.585322][ T5824] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.605995][ T5824] usb 5-1: device descriptor read/8, error -71 [ 167.645400][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.647441][ T847] dvb-usb: error while querying for an remote control event. [ 167.815351][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.817264][ T847] dvb-usb: error while querying for an remote control event. [ 167.846623][ T42] audit: type=1400 audit(1785148289.296:712): avc: denied { nlmsg_read } for pid=11525 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.854623][ T42] audit: type=1400 audit(1785148289.296:713): avc: denied { create } for pid=11525 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.865365][ T5824] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.886580][ T5824] usb 5-1: device descriptor read/8, error -71 [ 167.896056][ T42] audit: type=1400 audit(1785148289.346:714): avc: denied { bind } for pid=11527 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.988253][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 167.990411][ T847] dvb-usb: error while querying for an remote control event. [ 167.996673][ T5824] usb usb5-port1: unable to enumerate USB device [ 168.004380][T11532] FAULT_INJECTION: forcing a failure. [ 168.004380][T11532] name failslab, interval 1, probability 0, space 0, times 0 [ 168.008541][T11532] CPU: 2 UID: 0 PID: 11532 Comm: syz.2.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.008560][T11532] Tainted: [L]=SOFTLOCKUP [ 168.008564][T11532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.008571][T11532] Call Trace: [ 168.008580][T11532] [ 168.008584][T11532] dump_stack_lvl+0x100/0x190 [ 168.008610][T11532] should_fail_ex.cold+0x5/0xa [ 168.008625][T11532] should_failslab+0xc2/0x120 [ 168.008640][T11532] kmem_cache_alloc_noprof+0x91/0x6a0 [ 168.008654][T11532] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 168.008672][T11532] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 168.008689][T11532] mmu_topup_memory_caches+0x25/0x170 [ 168.008706][T11532] kvm_mmu_load+0xe2/0x2570 [ 168.008722][T11532] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 168.008734][T11532] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 168.008747][T11532] ? __pfx_kvm_mmu_load+0x10/0x10 [ 168.008784][T11532] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 168.008798][T11532] ? kvm_check_and_inject_events+0x873/0x12a0 [ 168.008814][T11532] ? record_steal_time+0x3a0/0xbb0 [ 168.008828][T11532] vcpu_run+0x3aaa/0x5de0 [ 168.008843][T11532] ? mark_held_locks+0x40/0x70 [ 168.008862][T11532] ? __pfx_vcpu_run+0x10/0x10 [ 168.008883][T11532] ? rcu_is_watching+0x12/0xc0 [ 168.008902][T11532] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 168.008919][T11532] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 168.008940][T11532] kvm_vcpu_ioctl+0x730/0x1700 [ 168.008954][T11532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.008967][T11532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.008987][T11532] ? do_vfs_ioctl+0x226/0x13e0 [ 168.009004][T11532] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.009021][T11532] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 168.009049][T11532] ? __fget_files+0x215/0x3d0 [ 168.009059][T11532] ? hook_file_ioctl_common+0x140/0x440 [ 168.009076][T11532] ? selinux_file_ioctl+0x13b/0x290 [ 168.009093][T11532] ? selinux_file_ioctl+0xb6/0x290 [ 168.009111][T11532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.009124][T11532] __x64_sys_ioctl+0x18e/0x210 [ 168.009142][T11532] do_syscall_64+0x115/0x870 [ 168.009159][T11532] ? clear_bhb_loop+0x40/0x90 [ 168.009172][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.009185][T11532] RIP: 0033:0x7fd86459de99 [ 168.009195][T11532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.009205][T11532] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.009221][T11532] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 168.009228][T11532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 168.009234][T11532] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.009241][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.009247][T11532] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 168.009261][T11532] [ 168.145318][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.147319][ T5824] dvb-usb: error while querying for an remote control event. [ 168.192216][T11539] tipc: Enabled bearer , priority 0 [ 168.199498][T11538] tipc: Disabling bearer [ 168.315377][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.317659][ T5824] dvb-usb: error while querying for an remote control event. [ 168.475380][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.477271][ T5824] dvb-usb: error while querying for an remote control event. [ 168.635677][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.637603][ T5824] dvb-usb: error while querying for an remote control event. [ 168.795353][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.797137][ T5824] dvb-usb: error while querying for an remote control event. [ 168.965312][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 168.967675][ T5824] dvb-usb: error while querying for an remote control event. [ 168.971757][ T5835] usb 8-1: USB disconnect, device number 8 [ 168.991877][ T5835] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 169.010623][T11569] syzkaller0: entered promiscuous mode [ 169.014080][T11569] syzkaller0: entered allmulticast mode [ 169.186382][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1890'. [ 169.365179][ T42] audit: type=1400 audit(1785148290.806:715): avc: denied { name_bind } for pid=11594 comm="syz.0.1896" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 169.379670][T11593] FAULT_INJECTION: forcing a failure. [ 169.379670][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 169.383784][T11593] CPU: 0 UID: 0 PID: 11593 Comm: syz.2.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.383802][T11593] Tainted: [L]=SOFTLOCKUP [ 169.383806][T11593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.383813][T11593] Call Trace: [ 169.383817][T11593] [ 169.383821][T11593] dump_stack_lvl+0x100/0x190 [ 169.383839][T11593] should_fail_ex.cold+0x5/0xa [ 169.383853][T11593] should_failslab+0xc2/0x120 [ 169.383868][T11593] kmem_cache_alloc_noprof+0x91/0x6a0 [ 169.383882][T11593] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 169.383894][T11593] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 169.383911][T11593] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 169.383928][T11593] mmu_topup_memory_caches+0x25/0x170 [ 169.383946][T11593] kvm_mmu_load+0xe2/0x2570 [ 169.383962][T11593] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 169.383973][T11593] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 169.383987][T11593] ? __pfx_kvm_mmu_load+0x10/0x10 [ 169.384001][T11593] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 169.384015][T11593] ? kvm_check_and_inject_events+0x873/0x12a0 [ 169.384032][T11593] ? record_steal_time+0x3a0/0xbb0 [ 169.384045][T11593] vcpu_run+0x3aaa/0x5de0 [ 169.384067][T11593] ? __pfx_vcpu_run+0x10/0x10 [ 169.384087][T11593] ? rcu_is_watching+0x12/0xc0 [ 169.384107][T11593] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 169.384124][T11593] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 169.384145][T11593] kvm_vcpu_ioctl+0x730/0x1700 [ 169.384158][T11593] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.384171][T11593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.384186][T11593] ? do_vfs_ioctl+0x226/0x13e0 [ 169.384204][T11593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.384221][T11593] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 169.384244][T11593] ? __fget_files+0x215/0x3d0 [ 169.384255][T11593] ? hook_file_ioctl_common+0x140/0x440 [ 169.384272][T11593] ? selinux_file_ioctl+0x13b/0x290 [ 169.384289][T11593] ? selinux_file_ioctl+0xb6/0x290 [ 169.384307][T11593] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.384320][T11593] __x64_sys_ioctl+0x18e/0x210 [ 169.384338][T11593] do_syscall_64+0x115/0x870 [ 169.384351][T11593] ? clear_bhb_loop+0x40/0x90 [ 169.384365][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.384376][T11593] RIP: 0033:0x7fd86459de99 [ 169.384386][T11593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.384397][T11593] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.384409][T11593] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 169.384416][T11593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 169.384422][T11593] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.384429][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.384435][T11593] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 169.384449][T11593] [ 169.389611][T11599] FAULT_INJECTION: forcing a failure. [ 169.389611][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 169.481775][T11599] CPU: 2 UID: 0 PID: 11599 Comm: syz.1.1897 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.481795][T11599] Tainted: [L]=SOFTLOCKUP [ 169.481799][T11599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.481805][T11599] Call Trace: [ 169.481810][T11599] [ 169.481815][T11599] dump_stack_lvl+0x100/0x190 [ 169.481833][T11599] should_fail_ex.cold+0x5/0xa [ 169.481848][T11599] should_failslab+0xc2/0x120 [ 169.481864][T11599] __kmalloc_cache_noprof+0x91/0x6c0 [ 169.481883][T11599] ? __pfx___debug_object_init+0x10/0x10 [ 169.481899][T11599] ? device_add+0xd3f/0x1970 [ 169.481917][T11599] device_add+0xd3f/0x1970 [ 169.481933][T11599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.481947][T11599] ? lockdep_init_map_type+0x5c/0x250 [ 169.481962][T11599] ? __pfx_device_add+0x10/0x10 [ 169.481976][T11599] ? lockdep_init_map_type+0x5c/0x250 [ 169.481991][T11599] ? __init_waitqueue_head+0xca/0x150 [ 169.482011][T11599] tty_register_device_attr+0x388/0x7f0 [ 169.482026][T11599] ? __pfx_tty_register_device_attr+0x10/0x10 [ 169.482042][T11599] ? lockdep_init_map_type+0x5c/0x250 [ 169.482059][T11599] rfcomm_dev_ioctl+0x179d/0x1db0 [ 169.482081][T11599] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 169.482102][T11599] ? tomoyo_path_number_perm+0x188/0x580 [ 169.482121][T11599] rfcomm_sock_ioctl+0xcc/0xf0 [ 169.482142][T11599] sock_do_ioctl+0x118/0x280 [ 169.482160][T11599] ? __pfx_sock_do_ioctl+0x10/0x10 [ 169.482180][T11599] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.482197][T11599] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 169.482219][T11599] sock_ioctl+0x599/0x6b0 [ 169.482229][T11599] ? __pfx_sock_ioctl+0x10/0x10 [ 169.482239][T11599] ? hook_file_ioctl_common+0x140/0x440 [ 169.482255][T11599] ? selinux_file_ioctl+0x13b/0x290 [ 169.482272][T11599] ? selinux_file_ioctl+0xb6/0x290 [ 169.482290][T11599] ? __pfx_sock_ioctl+0x10/0x10 [ 169.482301][T11599] __x64_sys_ioctl+0x18e/0x210 [ 169.482319][T11599] do_syscall_64+0x115/0x870 [ 169.482331][T11599] ? clear_bhb_loop+0x40/0x90 [ 169.482344][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.482357][T11599] RIP: 0033:0x7ff43699de99 [ 169.482367][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.482377][T11599] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.482388][T11599] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 169.482395][T11599] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 169.482402][T11599] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 169.482408][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.482414][T11599] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 169.482428][T11599] [ 169.798095][T11620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1903'. [ 169.811764][T11620] syzkaller1: entered promiscuous mode [ 169.813440][T11620] syzkaller1: entered allmulticast mode [ 169.892214][ T42] audit: type=1400 audit(1785148291.336:716): avc: denied { write } for pid=11624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.937522][ T42] audit: type=1400 audit(1785148291.386:717): avc: denied { write } for pid=11635 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.009439][ T10] IPVS: starting estimator thread 0... [ 170.039265][ T42] audit: type=1400 audit(1785148291.486:718): avc: denied { write } for pid=11644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.094734][ T42] audit: type=1400 audit(1785148291.536:719): avc: denied { write } for pid=11649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.105871][T11645] IPVS: using max 43 ests per chain, 103200 per kthread [ 170.111780][T11652] FAULT_INJECTION: forcing a failure. [ 170.111780][T11652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.116967][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.0.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.116993][T11652] Tainted: [L]=SOFTLOCKUP [ 170.116999][T11652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.117008][T11652] Call Trace: [ 170.117014][T11652] [ 170.117021][T11652] dump_stack_lvl+0x100/0x190 [ 170.117044][T11652] should_fail_ex.cold+0x5/0xa [ 170.117056][T11652] ? prepare_alloc_pages+0x16d/0x5f0 [ 170.117074][T11652] should_fail_alloc_page+0xeb/0x140 [ 170.117090][T11652] prepare_alloc_pages+0x1f0/0x5f0 [ 170.117110][T11652] ? rcu_is_watching+0x12/0xc0 [ 170.117150][T11652] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 170.117179][T11652] ? find_held_lock+0x2b/0x80 [ 170.117202][T11652] ? process_measurement+0x4c8/0x2350 [ 170.117219][T11652] ? process_measurement+0x4c8/0x2350 [ 170.117235][T11652] ? down_write+0x146/0x1f0 [ 170.117258][T11652] ? up_write+0x2e5/0x5c0 [ 170.117280][T11652] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.117297][T11652] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.117324][T11652] ? find_held_lock+0x2b/0x80 [ 170.117348][T11652] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 170.117372][T11652] ? __lock_acquire+0x49f/0x1a40 [ 170.117391][T11652] ? __css_rstat_updated+0x1ce/0x5a0 [ 170.117415][T11652] ? __lock_acquire+0x49f/0x1a40 [ 170.117432][T11652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.117453][T11652] ? policy_nodemask+0xed/0x4f0 [ 170.117477][T11652] alloc_pages_mpol+0x1fb/0x540 [ 170.117500][T11652] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 170.117522][T11652] ? find_held_lock+0x2b/0x80 [ 170.117545][T11652] ? __pud_alloc+0x4f6/0x690 [ 170.117566][T11652] ? __pud_alloc+0x4f6/0x690 [ 170.117590][T11652] alloc_pages_noprof+0x1a/0x160 [ 170.117624][T11652] __pmd_alloc+0x3b/0x950 [ 170.117643][T11652] ? __pud_alloc+0x4fb/0x690 [ 170.117662][T11652] __handle_mm_fault+0xa9c/0x2a00 [ 170.117683][T11652] ? mt_find+0x45e/0x8e0 [ 170.117698][T11652] ? __pfx___handle_mm_fault+0x10/0x10 [ 170.117715][T11652] ? __pfx_mt_find+0x10/0x10 [ 170.117737][T11652] ? find_vma+0xbf/0x140 [ 170.117750][T11652] ? __pfx_find_vma+0x10/0x10 [ 170.117765][T11652] handle_mm_fault+0x37b/0xa30 [ 170.117785][T11652] do_user_addr_fault+0x74c/0x12f0 [ 170.117807][T11652] exc_page_fault+0x6f/0xd0 [ 170.117819][T11652] asm_exc_page_fault+0x26/0x30 [ 170.117830][T11652] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 170.117847][T11652] Code: 89 ee 48 89 ef e8 11 2a ec fc 4d 85 ff 75 26 e8 27 30 ec fc 89 de 4c 89 e7 e8 8d bc 5c fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 01 30 ec fc 48 89 d8 5b 5d 41 [ 170.117857][T11652] RSP: 0018:ffffc90006557cf0 EFLAGS: 00050246 [ 170.117867][T11652] RAX: 0000000000000001 RBX: 0000000000000048 RCX: 0000000000000048 [ 170.117873][T11652] RDX: 0000000000000001 RSI: ffffc90006557db0 RDI: 0000200000000040 [ 170.117880][T11652] RBP: 0000200000000040 R08: 0000000000000000 R09: fffff52000caafbe [ 170.117889][T11652] R10: ffffc90006557df7 R11: 0000000000000000 R12: ffffc90006557db0 [ 170.117899][T11652] R13: 0000200000000088 R14: 00007ffffffff000 R15: 0000000000000000 [ 170.117924][T11652] ksys_shmctl.constprop.0+0x2f1/0x390 [ 170.117943][T11652] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 170.117962][T11652] ? __mutex_unlock_slowpath+0x35d/0x930 [ 170.118000][T11652] do_syscall_64+0x115/0x870 [ 170.118013][T11652] ? clear_bhb_loop+0x40/0x90 [ 170.118026][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.118038][T11652] RIP: 0033:0x7f009c19de99 [ 170.118048][T11652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.118058][T11652] RSP: 002b:00007f009d14b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 170.118068][T11652] RAX: ffffffffffffffda RBX: 00007f009c425fa0 RCX: 00007f009c19de99 [ 170.118075][T11652] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 170.118081][T11652] RBP: 00007f009d14b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.118088][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.118094][T11652] R13: 00007f009c426038 R14: 00007f009c425fa0 R15: 00007ffe5d14dd68 [ 170.118110][T11652] [ 170.175458][ T5835] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 170.405518][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.406730][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 170.415567][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 170.431765][ T42] audit: type=1326 audit(1785148291.876:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009c19de99 code=0x7ffc0000 [ 170.438745][ T5835] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.442048][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.444505][ T42] audit: type=1326 audit(1785148291.886:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009c19de99 code=0x7ffc0000 [ 170.444609][ T5835] usb 7-1: Product: syz [ 170.453413][ T42] audit: type=1326 audit(1785148291.886:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f009c19de99 code=0x7ffc0000 [ 170.457983][ T5835] usb 7-1: Manufacturer: syz [ 170.463586][ T42] audit: type=1326 audit(1785148291.886:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009c19de99 code=0x7ffc0000 [ 170.466894][ T5835] usb 7-1: SerialNumber: syz [ 170.473622][ T42] audit: type=1326 audit(1785148291.886:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f009c15e6ce code=0x7ffc0000 [ 170.484911][ T42] audit: type=1326 audit(1785148291.886:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009c19de99 code=0x7ffc0000 [ 170.498210][T11663] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 170.536916][T11663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.540775][T11663] bond2: (slave bond3): making interface the new active one [ 170.543501][T11663] bond2: (slave bond3): Enslaving as an active interface with an up link [ 170.599006][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1914'. [ 170.605778][T11670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.736737][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 170.742623][ T5835] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 170.749007][ T5835] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 170.752317][ T5835] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.758785][ T5835] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 170.764597][ T5835] usb 7-1: USB disconnect, device number 5 [ 170.891807][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880347ab400: rx timeout, send abort [ 171.392109][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880347a9800: rx timeout, send abort [ 171.395570][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880347ab400: abort rx timeout. Force session deactivation [ 171.894722][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880347a9800: abort rx timeout. Force session deactivation [ 172.658356][T11719] dwc3 pcspkr: missing memory resource [ 172.797328][T11724] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 172.799613][T11724] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 173.157830][T11752] syzkaller0: entered promiscuous mode [ 173.159640][T11752] syzkaller0: entered allmulticast mode [ 173.927670][T11791] pim6reg1: entered promiscuous mode [ 173.929311][T11791] pim6reg1: entered allmulticast mode [ 173.948397][T11787] FAULT_INJECTION: forcing a failure. [ 173.948397][T11787] name failslab, interval 1, probability 0, space 0, times 0 [ 173.953126][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.1.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.953151][T11787] Tainted: [L]=SOFTLOCKUP [ 173.953157][T11787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.953167][T11787] Call Trace: [ 173.953180][T11787] [ 173.953186][T11787] dump_stack_lvl+0x100/0x190 [ 173.953222][T11787] should_fail_ex.cold+0x5/0xa [ 173.953243][T11787] should_failslab+0xc2/0x120 [ 173.953262][T11787] kmem_cache_alloc_noprof+0x91/0x6a0 [ 173.953282][T11787] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 173.953307][T11787] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 173.953333][T11787] mmu_topup_memory_caches+0x25/0x170 [ 173.953353][T11787] kvm_mmu_load+0xe2/0x2570 [ 173.953376][T11787] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 173.953392][T11787] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 173.953412][T11787] ? __pfx_kvm_mmu_load+0x10/0x10 [ 173.953432][T11787] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 173.953451][T11787] ? kvm_check_and_inject_events+0x873/0x12a0 [ 173.953470][T11787] ? record_steal_time+0x3a0/0xbb0 [ 173.953491][T11787] vcpu_run+0x3aaa/0x5de0 [ 173.953523][T11787] ? __pfx_vcpu_run+0x10/0x10 [ 173.953554][T11787] ? rcu_is_watching+0x12/0xc0 [ 173.953578][T11787] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 173.953601][T11787] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 173.953630][T11787] kvm_vcpu_ioctl+0x730/0x1700 [ 173.953650][T11787] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.953665][T11787] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.953686][T11787] ? do_vfs_ioctl+0x226/0x13e0 [ 173.953710][T11787] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.953732][T11787] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 173.953769][T11787] ? __fget_files+0x215/0x3d0 [ 173.953785][T11787] ? hook_file_ioctl_common+0x140/0x440 [ 173.953811][T11787] ? selinux_file_ioctl+0x13b/0x290 [ 173.953834][T11787] ? selinux_file_ioctl+0xb6/0x290 [ 173.953857][T11787] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.953876][T11787] __x64_sys_ioctl+0x18e/0x210 [ 173.953902][T11787] do_syscall_64+0x115/0x870 [ 173.953925][T11787] ? clear_bhb_loop+0x40/0x90 [ 173.953944][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.953957][T11787] RIP: 0033:0x7ff43699de99 [ 173.953971][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.953986][T11787] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.954009][T11787] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 173.954025][T11787] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 173.954034][T11787] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.954044][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.954053][T11787] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 173.954075][T11787] [ 174.232798][T11801] FAULT_INJECTION: forcing a failure. [ 174.232798][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 174.236511][T11801] CPU: 3 UID: 0 PID: 11801 Comm: syz.1.1960 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.236530][T11801] Tainted: [L]=SOFTLOCKUP [ 174.236534][T11801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.236540][T11801] Call Trace: [ 174.236545][T11801] [ 174.236549][T11801] dump_stack_lvl+0x100/0x190 [ 174.236568][T11801] should_fail_ex.cold+0x5/0xa [ 174.236582][T11801] should_failslab+0xc2/0x120 [ 174.236599][T11801] kmem_cache_alloc_noprof+0x91/0x6a0 [ 174.236612][T11801] ? __pud_alloc+0x4f6/0x690 [ 174.236627][T11801] ? __pmd_alloc+0xbf/0x950 [ 174.236645][T11801] __pmd_alloc+0xbf/0x950 [ 174.236659][T11801] ? __pud_alloc+0x4fb/0x690 [ 174.236675][T11801] __handle_mm_fault+0xa9c/0x2a00 [ 174.236696][T11801] ? mt_find+0x45e/0x8e0 [ 174.236711][T11801] ? __pfx___handle_mm_fault+0x10/0x10 [ 174.236748][T11801] ? __pfx_mt_find+0x10/0x10 [ 174.236771][T11801] ? find_vma+0xbf/0x140 [ 174.236784][T11801] ? __pfx_find_vma+0x10/0x10 [ 174.236799][T11801] handle_mm_fault+0x37b/0xa30 [ 174.236819][T11801] do_user_addr_fault+0x74c/0x12f0 [ 174.236841][T11801] exc_page_fault+0x6f/0xd0 [ 174.236854][T11801] asm_exc_page_fault+0x26/0x30 [ 174.236866][T11801] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 174.236882][T11801] Code: 89 ee 48 89 ef e8 11 2a ec fc 4d 85 ff 75 26 e8 27 30 ec fc 89 de 4c 89 e7 e8 8d bc 5c fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 01 30 ec fc 48 89 d8 5b 5d 41 [ 174.236893][T11801] RSP: 0018:ffffc9000695fcf0 EFLAGS: 00050246 [ 174.236903][T11801] RAX: 0000000000000001 RBX: 0000000000000048 RCX: 0000000000000048 [ 174.236910][T11801] RDX: 0000000000000001 RSI: ffffc9000695fdb0 RDI: 0000200000000040 [ 174.236917][T11801] RBP: 0000200000000040 R08: 0000000000000000 R09: fffff52000d2bfbe [ 174.236924][T11801] R10: ffffc9000695fdf7 R11: 0000000000000000 R12: ffffc9000695fdb0 [ 174.236930][T11801] R13: 0000200000000088 R14: 00007ffffffff000 R15: 0000000000000000 [ 174.236946][T11801] ksys_shmctl.constprop.0+0x2f1/0x390 [ 174.236959][T11801] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 174.236971][T11801] ? __mutex_unlock_slowpath+0x35d/0x930 [ 174.237003][T11801] do_syscall_64+0x115/0x870 [ 174.237014][T11801] ? clear_bhb_loop+0x40/0x90 [ 174.237028][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.237039][T11801] RIP: 0033:0x7ff43699de99 [ 174.237048][T11801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.237058][T11801] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 174.237067][T11801] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 174.237074][T11801] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 174.237080][T11801] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 174.237086][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.237093][T11801] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 174.237107][T11801] [ 174.351632][T11808] Bluetooth: MGMT ver 1.23 [ 174.831510][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1968'. [ 175.027740][ T42] kauditd_printk_skb: 521 callbacks suppressed [ 175.027751][ T42] audit: type=1400 audit(1785148296.476:1247): avc: denied { map } for pid=11845 comm="syz.1.1974" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.040780][ T42] audit: type=1400 audit(1785148296.486:1248): avc: denied { execute } for pid=11845 comm="syz.1.1974" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.051734][T11846] kernel read not supported for file /sg0 (pid: 11846 comm: syz.1.1974) [ 175.129128][T11851] Invalid ELF header type: 2 != 1 [ 175.249849][T11862] FAULT_INJECTION: forcing a failure. [ 175.249849][T11862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.265565][T11862] CPU: 2 UID: 0 PID: 11862 Comm: syz.1.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.265595][T11862] Tainted: [L]=SOFTLOCKUP [ 175.265601][T11862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.265610][T11862] Call Trace: [ 175.265616][T11862] [ 175.265622][T11862] dump_stack_lvl+0x100/0x190 [ 175.265659][T11862] should_fail_ex.cold+0x5/0xa [ 175.265679][T11862] _copy_from_user+0x2e/0xd0 [ 175.265705][T11862] copy_msghdr_from_user+0x9f/0x4c0 [ 175.265737][T11862] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 175.265773][T11862] ___sys_sendmsg+0x106/0x1e0 [ 175.265800][T11862] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.265823][T11862] ? __lock_acquire+0x49f/0x1a40 [ 175.265840][T11862] ? get_pid_task+0x106/0x250 [ 175.265890][T11862] __sys_sendmsg+0x160/0x210 [ 175.265911][T11862] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.265943][T11862] do_syscall_64+0x115/0x870 [ 175.265960][T11862] ? clear_bhb_loop+0x40/0x90 [ 175.265976][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.265993][T11862] RIP: 0033:0x7ff43699de99 [ 175.266013][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.266027][T11862] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.266044][T11862] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 175.266055][T11862] RDX: 0000000000040000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 175.266064][T11862] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.266073][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.266082][T11862] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 175.266099][T11862] [ 175.662514][ T42] audit: type=1400 audit(1785148297.106:1249): avc: denied { write } for pid=11888 comm="syz.2.1991" name="/" dev="9p" ino=73414145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.678272][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11892 comm=syz.1.1992 [ 175.690119][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 176.117919][T11916] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64512 sclass=netlink_xfrm_socket pid=11916 comm=syz.3.1997 [ 176.148651][T11918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1999'. [ 176.340884][ T42] audit: type=1400 audit(1785148297.786:1250): avc: denied { call } for pid=11927 comm="syz.2.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.347934][ T42] audit: type=1400 audit(1785148297.786:1251): avc: denied { transfer } for pid=11927 comm="syz.2.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.389966][ T42] audit: type=1400 audit(1785148297.836:1252): avc: denied { write } for pid=11929 comm="syz.2.2004" name="/" dev="9p" ino=73414145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.365344][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 177.515296][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 177.519084][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 177.522214][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 177.528478][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.532390][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 177.539141][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 177.541983][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.544315][ T10] usb 5-1: Product: syz [ 177.545614][ T10] usb 5-1: Manufacturer: syz [ 177.547004][ T10] usb 5-1: SerialNumber: syz [ 177.555402][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 177.561743][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input16 [ 177.753368][T11948] overlayfs: statfs failed on './file0' [ 177.776126][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 177.779923][ T10] (id 0x00) [ 177.825303][ T10] rc_core: IR keymap rc-imon-pad not found [ 177.827068][ T10] Registered IR keymap rc-empty [ 177.828897][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 177.833074][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 177.964598][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.979665][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.007076][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 178.013138][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input17 [ 178.019120][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:19> initialized [ 178.192435][T11955] imon:vfd_write: invalid payload size [ 178.201436][ T1350] usb 5-1: USB disconnect, device number 19 [ 178.230581][T12010] syzkaller0: entered promiscuous mode [ 178.232440][T12010] syzkaller0: entered allmulticast mode [ 178.362026][T12014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.368616][ T42] audit: type=1400 audit(1785148299.816:1253): avc: denied { write } for pid=12012 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.520179][T12021] FAULT_INJECTION: forcing a failure. [ 178.520179][T12021] name failslab, interval 1, probability 0, space 0, times 0 [ 178.525129][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.1.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.525154][T12021] Tainted: [L]=SOFTLOCKUP [ 178.525160][T12021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.525169][T12021] Call Trace: [ 178.525176][T12021] [ 178.525182][T12021] dump_stack_lvl+0x100/0x190 [ 178.525240][T12021] should_fail_ex.cold+0x5/0xa [ 178.525261][T12021] should_failslab+0xc2/0x120 [ 178.525282][T12021] kmem_cache_alloc_noprof+0x91/0x6a0 [ 178.525303][T12021] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.525328][T12021] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.525350][T12021] mmu_topup_memory_caches+0x25/0x170 [ 178.525371][T12021] kvm_mmu_load+0xe2/0x2570 [ 178.525390][T12021] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 178.525404][T12021] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.525421][T12021] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.525439][T12021] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 178.525456][T12021] ? kvm_check_and_inject_events+0x873/0x12a0 [ 178.525476][T12021] ? record_steal_time+0x3a0/0xbb0 [ 178.525493][T12021] vcpu_run+0x3aaa/0x5de0 [ 178.525520][T12021] ? __pfx_vcpu_run+0x10/0x10 [ 178.525547][T12021] ? rcu_is_watching+0x12/0xc0 [ 178.525570][T12021] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 178.525590][T12021] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 178.525616][T12021] kvm_vcpu_ioctl+0x730/0x1700 [ 178.525633][T12021] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.525649][T12021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.525668][T12021] ? do_vfs_ioctl+0x226/0x13e0 [ 178.525689][T12021] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.525710][T12021] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.525749][T12021] ? __fget_files+0x215/0x3d0 [ 178.525763][T12021] ? hook_file_ioctl_common+0x140/0x440 [ 178.525785][T12021] ? selinux_file_ioctl+0x13b/0x290 [ 178.525807][T12021] ? selinux_file_ioctl+0xb6/0x290 [ 178.525830][T12021] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.525847][T12021] __x64_sys_ioctl+0x18e/0x210 [ 178.525870][T12021] do_syscall_64+0x115/0x870 [ 178.525893][T12021] ? clear_bhb_loop+0x40/0x90 [ 178.525911][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.525927][T12021] RIP: 0033:0x7ff43699de99 [ 178.525940][T12021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.525954][T12021] RSP: 002b:00007ff4377a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.525970][T12021] RAX: ffffffffffffffda RBX: 00007ff436c25fa0 RCX: 00007ff43699de99 [ 178.525979][T12021] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 178.525988][T12021] RBP: 00007ff4377a5090 R08: 0000000000000000 R09: 0000000000000000 [ 178.525997][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.526006][T12021] R13: 00007ff436c26038 R14: 00007ff436c25fa0 R15: 00007ffc3106d4d8 [ 178.526032][T12021] [ 178.683400][ T42] audit: type=1400 audit(1785148300.126:1254): avc: denied { append } for pid=12026 comm="syz.3.2034" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.691588][ T42] audit: type=1400 audit(1785148300.126:1255): avc: denied { connect } for pid=12026 comm="syz.3.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.773852][T12042] binder: BC_ACQUIRE_RESULT not supported [ 178.777040][T12042] binder: 12041:12042 ioctl c0306201 2000000003c0 returned -22 [ 178.807248][T12045] FAULT_INJECTION: forcing a failure. [ 178.807248][T12045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.812726][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.3.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.812746][T12045] Tainted: [L]=SOFTLOCKUP [ 178.812750][T12045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.812756][T12045] Call Trace: [ 178.812761][T12045] [ 178.812766][T12045] dump_stack_lvl+0x100/0x190 [ 178.812785][T12045] should_fail_ex.cold+0x5/0xa [ 178.812797][T12045] ? prepare_alloc_pages+0x16d/0x5f0 [ 178.812815][T12045] should_fail_alloc_page+0xeb/0x140 [ 178.812831][T12045] prepare_alloc_pages+0x1f0/0x5f0 [ 178.812847][T12045] ? is_bpf_text_address+0x8a/0x1a0 [ 178.812864][T12045] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 178.812877][T12045] ? is_bpf_text_address+0x94/0x1a0 [ 178.812892][T12045] ? kernel_text_address+0x8d/0x100 [ 178.812905][T12045] ? find_held_lock+0x2b/0x80 [ 178.812923][T12045] ? __kernel_text_address+0xd/0x30 [ 178.812935][T12045] ? unwind_get_return_address+0x59/0xa0 [ 178.812947][T12045] ? arch_stack_walk+0xa6/0xf0 [ 178.812982][T12045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 178.812997][T12045] ? __pfx_stack_trace_save+0x10/0x10 [ 178.813010][T12045] ? stack_depot_save_flags+0x27/0x9d0 [ 178.813044][T12045] ? process_measurement+0x4c8/0x2350 [ 178.813057][T12045] ? process_measurement+0x4c8/0x2350 [ 178.813070][T12045] ? kasan_save_stack+0x3f/0x50 [ 178.813088][T12045] ? kasan_save_stack+0x30/0x50 [ 178.813102][T12045] ? handle_mm_fault+0x37b/0xa30 [ 178.813119][T12045] ? do_user_addr_fault+0x74c/0x12f0 [ 178.813136][T12045] ? exc_page_fault+0x6f/0xd0 [ 178.813148][T12045] ? asm_exc_page_fault+0x26/0x30 [ 178.813159][T12045] ? _copy_to_user+0x9f/0xd0 [ 178.813173][T12045] ? ksys_shmctl.constprop.0+0x2f1/0x390 [ 178.813184][T12045] ? do_syscall_64+0x115/0x870 [ 178.813196][T12045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.813209][T12045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.813224][T12045] ? policy_nodemask+0xed/0x4f0 [ 178.813241][T12045] alloc_pages_mpol+0x1fb/0x540 [ 178.813257][T12045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 178.813290][T12045] alloc_pages_noprof+0x1a/0x160 [ 178.813308][T12045] pte_alloc_one+0x1c/0x3d0 [ 178.813320][T12045] __pte_alloc+0x6d/0x3e0 [ 178.813334][T12045] ? __pfx___pte_alloc+0x10/0x10 [ 178.813348][T12045] ? do_raw_spin_lock+0x128/0x260 [ 178.813365][T12045] ? find_held_lock+0x2b/0x80 [ 178.813384][T12045] do_anonymous_page+0x13ae/0x2080 [ 178.813404][T12045] ? __pmd_alloc+0x3fb/0x950 [ 178.813425][T12045] __handle_mm_fault+0x1d2c/0x2a00 [ 178.813445][T12045] ? mt_find+0x45e/0x8e0 [ 178.813460][T12045] ? __pfx___handle_mm_fault+0x10/0x10 [ 178.813477][T12045] ? __pfx_mt_find+0x10/0x10 [ 178.813499][T12045] ? find_vma+0xbf/0x140 [ 178.813512][T12045] ? __pfx_find_vma+0x10/0x10 [ 178.813527][T12045] handle_mm_fault+0x37b/0xa30 [ 178.813548][T12045] do_user_addr_fault+0x74c/0x12f0 [ 178.813570][T12045] exc_page_fault+0x6f/0xd0 [ 178.813584][T12045] asm_exc_page_fault+0x26/0x30 [ 178.813595][T12045] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 178.813611][T12045] Code: 89 ee 48 89 ef e8 11 2a ec fc 4d 85 ff 75 26 e8 27 30 ec fc 89 de 4c 89 e7 e8 8d bc 5c fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 01 30 ec fc 48 89 d8 5b 5d 41 [ 178.813625][T12045] RSP: 0018:ffffc90006567cf0 EFLAGS: 00050246 [ 178.813635][T12045] RAX: 0000000000000001 RBX: 0000000000000048 RCX: 0000000000000048 [ 178.813641][T12045] RDX: 0000000000000001 RSI: ffffc90006567db0 RDI: 0000200000000040 [ 178.813648][T12045] RBP: 0000200000000040 R08: 0000000000000000 R09: fffff52000cacfbe [ 178.813654][T12045] R10: ffffc90006567df7 R11: 0000000000000000 R12: ffffc90006567db0 [ 178.813661][T12045] R13: 0000200000000088 R14: 00007ffffffff000 R15: 0000000000000000 [ 178.813676][T12045] ksys_shmctl.constprop.0+0x2f1/0x390 [ 178.813688][T12045] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 178.813701][T12045] ? __mutex_unlock_slowpath+0x35d/0x930 [ 178.813728][T12045] do_syscall_64+0x115/0x870 [ 178.813740][T12045] ? clear_bhb_loop+0x40/0x90 [ 178.813753][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.813765][T12045] RIP: 0033:0x7f693e19de99 [ 178.813775][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.813785][T12045] RSP: 002b:00007f693c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 178.813794][T12045] RAX: ffffffffffffffda RBX: 00007f693e425fa0 RCX: 00007f693e19de99 [ 178.813801][T12045] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 178.813807][T12045] RBP: 00007f693c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.813813][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.813819][T12045] R13: 00007f693e426038 R14: 00007f693e425fa0 R15: 00007ffd42a28708 [ 178.813833][T12045] [ 179.006230][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 179.013592][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 179.075831][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2044'. [ 179.196797][T12072] FAULT_INJECTION: forcing a failure. [ 179.196797][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 179.200677][T12072] CPU: 2 UID: 0 PID: 12072 Comm: syz.2.2047 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.200703][T12072] Tainted: [L]=SOFTLOCKUP [ 179.200730][T12072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.200740][T12072] Call Trace: [ 179.200754][T12072] [ 179.200761][T12072] dump_stack_lvl+0x100/0x190 [ 179.200798][T12072] should_fail_ex.cold+0x5/0xa [ 179.200819][T12072] should_failslab+0xc2/0x120 [ 179.200842][T12072] kmem_cache_alloc_noprof+0x91/0x6a0 [ 179.200863][T12072] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 179.200889][T12072] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 179.200915][T12072] mmu_topup_memory_caches+0x25/0x170 [ 179.200940][T12072] kvm_mmu_load+0xe2/0x2570 [ 179.200962][T12072] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 179.200981][T12072] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 179.201001][T12072] ? __pfx_kvm_mmu_load+0x10/0x10 [ 179.201024][T12072] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 179.201045][T12072] ? kvm_check_and_inject_events+0x873/0x12a0 [ 179.201066][T12072] ? record_steal_time+0x3a0/0xbb0 [ 179.201079][T12072] vcpu_run+0x3aaa/0x5de0 [ 179.201101][T12072] ? __pfx_vcpu_run+0x10/0x10 [ 179.201122][T12072] ? rcu_is_watching+0x12/0xc0 [ 179.201142][T12072] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 179.201159][T12072] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 179.201179][T12072] kvm_vcpu_ioctl+0x730/0x1700 [ 179.201193][T12072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.201206][T12072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.201221][T12072] ? do_vfs_ioctl+0x226/0x13e0 [ 179.201237][T12072] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.201254][T12072] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.201284][T12072] ? __fget_files+0x215/0x3d0 [ 179.201295][T12072] ? hook_file_ioctl_common+0x140/0x440 [ 179.201311][T12072] ? selinux_file_ioctl+0x13b/0x290 [ 179.201328][T12072] ? selinux_file_ioctl+0xb6/0x290 [ 179.201347][T12072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.201360][T12072] __x64_sys_ioctl+0x18e/0x210 [ 179.201377][T12072] do_syscall_64+0x115/0x870 [ 179.201394][T12072] ? clear_bhb_loop+0x40/0x90 [ 179.201408][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.201420][T12072] RIP: 0033:0x7fd86459de99 [ 179.201430][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.201441][T12072] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.201457][T12072] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 179.201464][T12072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 179.201471][T12072] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 179.201478][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.201484][T12072] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 179.201499][T12072] [ 179.342813][T12078] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2049'. [ 179.352436][T12081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2050'. [ 179.362966][T12078] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 179.467393][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2053'. [ 179.615990][ T42] audit: type=1400 audit(1785148301.066:1256): avc: denied { write } for pid=12096 comm="syz.2.2056" name="/" dev="9p" ino=73414145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.617743][T12105] 9pnet_virtio: no channels available for device syz [ 179.804755][T12116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.966348][T12127] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.009220][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2061'. [ 180.089843][ T5745] Bluetooth: hci0: unexpected event for opcode 0x200a [ 180.111329][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 180.280389][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 180.298118][T12156] overlayfs: workdir and upperdir must reside under the same mount [ 180.371020][T12162] FAULT_INJECTION: forcing a failure. [ 180.371020][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 180.374660][T12162] CPU: 3 UID: 0 PID: 12162 Comm: syz.2.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.374677][T12162] Tainted: [L]=SOFTLOCKUP [ 180.374681][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.374688][T12162] Call Trace: [ 180.374692][T12162] [ 180.374700][T12162] dump_stack_lvl+0x100/0x190 [ 180.374718][T12162] should_fail_ex.cold+0x5/0xa [ 180.374732][T12162] should_failslab+0xc2/0x120 [ 180.374748][T12162] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 180.374762][T12162] ? __alloc_skb+0x5b7/0x710 [ 180.374775][T12162] ? __alloc_skb+0x140/0x710 [ 180.374789][T12162] __alloc_skb+0x140/0x710 [ 180.374801][T12162] ? __alloc_skb+0x5b7/0x710 [ 180.374813][T12162] ? __pfx___alloc_skb+0x10/0x10 [ 180.374830][T12162] netlink_alloc_large_skb+0x69/0x150 [ 180.374843][T12162] netlink_sendmsg+0x680/0xda0 [ 180.374856][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.374869][T12162] ? selinux_socket_sendmsg+0x198/0x2f0 [ 180.374889][T12162] ____sys_sendmsg+0xa4d/0xbe0 [ 180.374905][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.374917][T12162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.374941][T12162] ___sys_sendmsg+0x190/0x1e0 [ 180.374959][T12162] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.374977][T12162] ? __lock_acquire+0x49f/0x1a40 [ 180.374990][T12162] ? get_pid_task+0x106/0x250 [ 180.375023][T12162] __sys_sendmsg+0x160/0x210 [ 180.375037][T12162] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.375058][T12162] do_syscall_64+0x115/0x870 [ 180.375071][T12162] ? clear_bhb_loop+0x40/0x90 [ 180.375084][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.375095][T12162] RIP: 0033:0x7fd86459de99 [ 180.375105][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.375115][T12162] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.375126][T12162] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 180.375134][T12162] RDX: 0000000000040000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 180.375140][T12162] RBP: 00007fd86547d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.375146][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.375153][T12162] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 180.375167][T12162] [ 180.494284][T12165] IPv4: Oversized IP packet from 127.202.26.0 [ 180.602382][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 180.602394][ T42] audit: type=1400 audit(1785148302.046:1260): avc: denied { write } for pid=12170 comm="syz.2.2080" name="/" dev="9p" ino=73414145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.672038][T12183] syz.1.2083 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.706850][T12186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.401638][T12217] syzkaller0: entered promiscuous mode [ 181.403511][T12217] syzkaller0: entered allmulticast mode [ 181.485378][ T5745] Bluetooth: hci0: unexpected event for opcode 0x200a [ 181.604994][ T42] audit: type=1400 audit(1785148303.046:1261): avc: denied { map } for pid=12223 comm="syz.1.2097" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.626447][ T42] audit: type=1400 audit(1785148303.046:1262): avc: denied { read write } for pid=12223 comm="syz.1.2097" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.636818][T12224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.790706][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 181.833474][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.890890][T12256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.950253][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.995907][ T5745] Bluetooth: hci2: unexpected event for opcode 0x200a [ 182.068388][T12265] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.2109/12265 [ 182.071710][T12265] caller is bpf_mem_cache_free_rcu+0x41/0xb0 [ 182.073914][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.2.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.073933][T12265] Tainted: [L]=SOFTLOCKUP [ 182.073937][T12265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.073944][T12265] Call Trace: [ 182.073949][T12265] [ 182.073953][T12265] dump_stack_lvl+0x100/0x190 [ 182.073970][T12265] check_preemption_disabled+0xd8/0xe0 [ 182.073987][T12265] bpf_mem_cache_free_rcu+0x41/0xb0 [ 182.074004][T12265] rhtab_delete_elem+0x96f/0x24e0 [ 182.074025][T12265] __rhtab_map_lookup_and_delete_batch+0x925/0xf40 [ 182.074052][T12265] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 182.074070][T12265] bpf_map_do_batch+0x2b2/0x6d0 [ 182.074087][T12265] __sys_bpf+0xeb8/0x4e80 [ 182.074101][T12265] ? __pfx___sys_bpf+0x10/0x10 [ 182.074111][T12265] ? find_held_lock+0x2b/0x80 [ 182.074128][T12265] ? futex_wake+0x4ea/0x5e0 [ 182.074142][T12265] ? futex_wait+0x11e/0x370 [ 182.074153][T12265] ? __pfx_futex_wait+0x10/0x10 [ 182.074167][T12265] ? putname+0xb1/0x110 [ 182.074179][T12265] ? kmem_cache_free+0x127/0x6b0 [ 182.074198][T12265] ? __x64_sys_futex+0x34f/0x4d0 [ 182.074215][T12265] ? __x64_sys_futex+0x358/0x4d0 [ 182.074237][T12265] ? __x64_sys_openat+0x12d/0x210 [ 182.074257][T12265] ? __pfx___x64_sys_futex+0x10/0x10 [ 182.074283][T12265] ? __x64_sys_bpf+0xce/0x140 [ 182.074299][T12265] __x64_sys_bpf+0xce/0x140 [ 182.074315][T12265] ? do_syscall_64+0x90/0x870 [ 182.074336][T12265] do_syscall_64+0x115/0x870 [ 182.074353][T12265] ? clear_bhb_loop+0x40/0x90 [ 182.074374][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.074387][T12265] RIP: 0033:0x7fd86459de99 [ 182.074397][T12265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.074408][T12265] RSP: 002b:00007fd86547d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.074419][T12265] RAX: ffffffffffffffda RBX: 00007fd864825fa0 RCX: 00007fd86459de99 [ 182.074426][T12265] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 0000000000000019 [ 182.074433][T12265] RBP: 00007fd864633eaf R08: 0000000000000000 R09: 0000000000000000 [ 182.074439][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.074445][T12265] R13: 00007fd864826038 R14: 00007fd864825fa0 R15: 00007fff38804748 [ 182.074458][T12265]