last executing test programs: 1m53.992963109s ago: executing program 3 (id=1048): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000001c0)={0x0, "4f6ca9108dfb5d11d7da2926be514a8aacb2e92c5d96b3d7d64216efba835337", 0x3, 0x1000, 0x8, 0x626, 0x4, 0x3, 0x1, 0x7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000002400)=0x35, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x12f000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffe, 0x50313134, 0x1, @discrete={0x4, 0xa}}) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) r6 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 1m53.992750875s ago: executing program 3 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 1m53.940021388s ago: executing program 3 (id=1050): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x400c404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000600004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m53.937802434s ago: executing program 3 (id=1051): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./bus\x00', 0x40, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x42) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000000)='./file0\x00', 0x400) unlink(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f0000000080), 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, r4}) recvmsg$inet_nvme(r3, &(0x7f0000000300)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/8, 0x8}, 0x2000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2b637075736574202b6e65745f7072696f202b626c6b696f202b6eead59af66c7320"], 0x22) 1m53.83085903s ago: executing program 3 (id=1053): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x0, 0x5, 0x29, 0x9, "0adb3f09"}, 0x5, 0x1, {}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 1m53.220641853s ago: executing program 3 (id=1060): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x3, 0x4, 0x8, 0x2, 0xa, 0x4, 0x6, 0x1}, r2}}, 0x120) r3 = socket(0x28, 0x80000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r4}}, 0x18) listen(r3, 0x0) r5 = socket(0x1, 0x4, 0x101) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x204, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x3, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x81, 0x5, 0x2, 0x40, 0x7, 0x3, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x1, 0x0, 0x6, 0x81, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0xfff7, 0x2, 0x8, 0x1, 0x0]}}, {{0x1c, 0x1, {0x3e, 0x9, 0x40, 0x3, 0x1, 0xfff, 0x41d, 0x2}}, {0x8, 0x2, [0x5a4c, 0x7]}}, {{0x1c, 0x1, {0x10, 0x8, 0x4, 0x7, 0x0, 0x1, 0xfde, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x3, 0x9f, 0x6, 0x3, 0x2, 0x7f6, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x9, 0x9, 0x6, 0x7, 0x2, 0xd, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x49, 0xfffc, 0xbf2, 0x2, 0x4, 0x2, 0x8}}, {0x14, 0x2, [0x7f, 0x3, 0x101, 0x1ff, 0x8, 0x0, 0x5, 0xd0cc]}}, {{0x1c, 0x1, {0x5, 0x10, 0x5, 0xffffffff, 0x0, 0xffffffff, 0x54, 0xa}}, {0x18, 0x2, [0x8, 0x4, 0x5, 0x799, 0x9be, 0x9, 0x3, 0x7, 0x3, 0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x5, 0x1f, 0xc000000, 0x1, 0x3, 0x4, 0x6}}, {0x10, 0x2, [0x8, 0xa, 0x100, 0x6, 0x8, 0xf0f4]}}, {{0x1c, 0x1, {0x6, 0xfc, 0x4, 0x7, 0x2, 0x1, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0x7f, 0x1, 0x9, 0x4, 0x6]}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e28, 0x9, @mcast1, 0xb}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000763000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f000046a000/0x4000)=nil) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, &(0x7f00000000c0)={r9}) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1m53.138784666s ago: executing program 32 (id=1060): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x3, 0x4, 0x8, 0x2, 0xa, 0x4, 0x6, 0x1}, r2}}, 0x120) r3 = socket(0x28, 0x80000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r4}}, 0x18) listen(r3, 0x0) r5 = socket(0x1, 0x4, 0x101) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x204, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x3, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x81, 0x5, 0x2, 0x40, 0x7, 0x3, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x1, 0x0, 0x6, 0x81, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0xfff7, 0x2, 0x8, 0x1, 0x0]}}, {{0x1c, 0x1, {0x3e, 0x9, 0x40, 0x3, 0x1, 0xfff, 0x41d, 0x2}}, {0x8, 0x2, [0x5a4c, 0x7]}}, {{0x1c, 0x1, {0x10, 0x8, 0x4, 0x7, 0x0, 0x1, 0xfde, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x3, 0x9f, 0x6, 0x3, 0x2, 0x7f6, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x9, 0x9, 0x6, 0x7, 0x2, 0xd, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x49, 0xfffc, 0xbf2, 0x2, 0x4, 0x2, 0x8}}, {0x14, 0x2, [0x7f, 0x3, 0x101, 0x1ff, 0x8, 0x0, 0x5, 0xd0cc]}}, {{0x1c, 0x1, {0x5, 0x10, 0x5, 0xffffffff, 0x0, 0xffffffff, 0x54, 0xa}}, {0x18, 0x2, [0x8, 0x4, 0x5, 0x799, 0x9be, 0x9, 0x3, 0x7, 0x3, 0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x5, 0x1f, 0xc000000, 0x1, 0x3, 0x4, 0x6}}, {0x10, 0x2, [0x8, 0xa, 0x100, 0x6, 0x8, 0xf0f4]}}, {{0x1c, 0x1, {0x6, 0xfc, 0x4, 0x7, 0x2, 0x1, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0x7f, 0x1, 0x9, 0x4, 0x6]}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e28, 0x9, @mcast1, 0xb}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000763000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f000046a000/0x4000)=nil) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, &(0x7f00000000c0)={r9}) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1m37.949950595s ago: executing program 0 (id=1332): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x400c404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000d4400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m37.949025246s ago: executing program 0 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, &(0x7f0000000180)=""/85) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x82) renameat2(r4, &(0x7f0000000040)='./file1\x00', r4, &(0x7f00000005c0)='./file7\x00', 0x6) 1m37.031135323s ago: executing program 0 (id=1334): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412e, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000010000d32fffffff0500007c3f6140000d0abb82597740372bdbbf1a9ff37e346c8583a3b5cdb20d38eba426e7ace3d8f27fd1b102773b8b70137341250caf06cd7d64c21e52c603b02b234c18c449b8", @ANYRES32=0x1, @ANYBLOB="33b300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb46e, 0x0, 0x0, 0x0, 0x2b71}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1m37.03086814s ago: executing program 0 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setresgid(0xee00, 0xee01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "07bbc136c963254c66c42afcdd7d26931300e264c4feb642c8c42699f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x6840, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620548b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r6 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) sendmmsg$alg(r6, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1628eb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c63770a62b26265335dc3d4803b8531ea34b5a5fce7dfea9355603005e81c62de17330958ece08817901bc4e7e09000000ce9cfbc2505c09a3fe212d702bd740e60e22d429b15d654a754011f6437dfe43a30de73cfe4c925fcc454cc9e1f4832712710e11edfedd5cbf2ebf51a9cf1c10d89d05a5706a79742d9a5491ef67a868738dfdfea9841751f370ec2738555388f1219b1459eb9c10cb581a3b5f7ca7765d3f815a3b67d3dd9fd2f100e181533dcd30c3a2e6b7c0ff7b8a5150799b5f92e1a2e5016309cf22e8fc1acf33491cd62fc0b6fab8e1", 0x16e}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m36.958693423s ago: executing program 0 (id=1340): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2840) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x33) (async) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x33) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x8000000) (async) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000000) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index, 0x7, 0x0, 0x0, 0x9, 0x0, {0x2, r3}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1410, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x84) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) (async) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000380)={0x20002010}) r6 = signalfd(r4, &(0x7f00000003c0)={[0x401]}, 0x8) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000400)) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000000480)={[0x0, 0x50, 0x3, 0x9, 0x0, 0x101, 0x4, 0x5, 0x8, 0x7fff, 0x9, 0x3ff, 0x89a, 0x6, 0x2, 0x2, 0x5, 0x7, 0x5, 0x8000, 0x0, 0x1, 0x3, 0x1, 0x0, 0xc40, 0x6, 0x34, 0x6, 0x5, 0x7, 0x0, 0x81d, 0x97c2, 0x3, 0x80000000, 0x89, 0xfffffffe, 0xd108, 0x3ff, 0xbe60, 0x0, 0x38000, 0x7, 0x80000001, 0x66, 0x7, 0x2, 0x92, 0xffffff7f, 0xf6000, 0x8, 0x3, 0x8, 0x2, 0x2, 0x9, 0x1ff, 0x9, 0x7, 0x1, 0x0, 0x8, 0x1, 0x6, 0xad2, 0xfffffffc, 0x7, 0xa0, 0x8, 0x6, 0x4, 0xccd9, 0x6, 0x5, 0x4, 0x8, 0x9, 0x0, 0x6a, 0x40, 0x2, 0x200, 0x8, 0x4, 0x0, 0x4, 0x2, 0x7, 0x8, 0xaa, 0x5, 0x0, 0x292e8439, 0x1, 0x10, 0x4, 0x3, 0x2, 0x1, 0x0, 0x1c9, 0x1ff, 0x7, 0x8, 0x9, 0x9, 0x1, 0x940, 0x3, 0x7f, 0x0, 0x80, 0x6, 0x6, 0xc8d, 0x9, 0x6, 0x0, 0x6, 0x9, 0x8, 0x2, 0x7, 0x3, 0xffffff8a, 0xffff, 0x4, 0x5, 0xfff, 0x4, 0x4, 0x8, 0x8001, 0x5, 0x0, 0x1ff, 0xf95, 0x7f, 0x1, 0x200, 0x7, 0x3000, 0x5, 0x400, 0x7, 0x8, 0x3, 0x10000, 0xcc2, 0x6, 0x3, 0x80, 0xffff1fce, 0x7, 0x5, 0x620c, 0x5, 0x0, 0x3, 0x5, 0x100, 0xc6, 0x0, 0x6, 0x1, 0x101, 0x8000, 0x8, 0xffffffff, 0x0, 0xcc28, 0xfffffff0, 0x1, 0x4, 0x3ff, 0xffffffd7, 0xf, 0x7c6f, 0x9, 0x101, 0x2, 0x40, 0x1, 0x6, 0x2, 0x5, 0xffffff7f, 0x7fffffff, 0xe, 0x1, 0xe72, 0x7, 0x94, 0x5, 0x314049d4, 0xfff, 0x7, 0x101, 0x1, 0x7fffffff, 0x0, 0x3, 0xffffffff, 0x4, 0x2, 0x80000001, 0xffffff98, 0x3, 0x8000, 0x36, 0x9, 0x8001, 0x0, 0x2, 0x3, 0x4, 0x36, 0x400, 0x40, 0x5, 0x1, 0x3, 0x2, 0x4200000, 0x9, 0x9, 0x7, 0x6, 0x400, 0x2, 0xffff, 0x5, 0x2, 0x8001, 0xb, 0xed3, 0xe11, 0xfffffffa, 0x5115bfa5, 0x4, 0x4, 0x8, 0x5, 0x0, 0x4, 0x3, 0x8, 0x0, 0x3, 0x4, 0x0, 0x1, 0x1, 0x3, 0x301, 0x2, 0x2, 0xff, 0x1, 0xa0, 0x9, 0x200, 0x2, 0x400, 0x8, 0x800, 0x9c04, 0xfffff801, 0x2, 0x6, 0xac, 0x101, 0x6, 0x1, 0x0, 0x1, 0x3, 0x1, 0xffff5e07, 0x0, 0x2, 0xc9, 0x7f, 0x400, 0x401, 0xf5e, 0x4, 0x9, 0x5, 0x2, 0x80, 0x7, 0x3, 0x1, 0x0, 0x3, 0x81, 0x401, 0x0, 0x66a0000, 0x6, 0x9, 0x1, 0x1cb3, 0x10, 0x0, 0x0, 0x3, 0x7, 0xa, 0x80000001, 0x44, 0x0, 0x0, 0x3, 0x3, 0x5, 0x4b, 0x7, 0x2, 0x5, 0x80, 0x0, 0x3, 0x10000, 0x1, 0x524, 0x80000000, 0x6, 0x1, 0xc60, 0x49, 0x3, 0xfffffeff, 0x9, 0x6, 0x8, 0x10000, 0x1, 0xb83, 0x401, 0x8, 0x9, 0x1, 0xffffffff, 0x3, 0x1, 0x0, 0x8, 0x8, 0x1, 0x5bd, 0x9, 0x7, 0x10, 0x1, 0xd8, 0x8, 0x5, 0x1000, 0x4, 0x3, 0x8, 0x82, 0xfffffffb, 0x8, 0xa, 0x1, 0x1, 0xa, 0x5, 0x30000000, 0x10001, 0x7, 0x4, 0x5, 0x9, 0xe, 0x5, 0x0, 0x401, 0x1ff, 0x4, 0x5, 0xfffffff7, 0x7, 0x3, 0x1ff, 0x4, 0x7, 0xfffffffc, 0x7fc0000, 0xfff, 0x3, 0x3, 0x66, 0x5e5, 0x0, 0x14, 0x2a0, 0xe5, 0x3, 0x6, 0xec, 0xf9c, 0x80000000, 0x4, 0xa, 0x7, 0x3, 0x7fff, 0x39eb0aa2, 0x7, 0x1, 0x8, 0x3ff, 0x40, 0x3ff, 0xffff, 0x3ff, 0x4, 0x6, 0x0, 0x1, 0x3, 0x9, 0x101, 0x8001, 0x81, 0xdf, 0x3, 0x1, 0x8e, 0x9, 0x6, 0x5, 0x400, 0x0, 0x0, 0x0, 0xea, 0x6, 0x2, 0x4, 0xd4, 0x6, 0x10000, 0x200, 0x9, 0x0, 0x6, 0xc, 0xf91, 0x4, 0x8, 0x4, 0x7, 0x6, 0x80000001, 0x6ea3, 0xe, 0x5b2, 0x8, 0x5, 0xffff8001, 0x3ff, 0x6374, 0x1, 0xa, 0x4, 0xb5e6, 0x800, 0x2, 0x4, 0x7ff, 0x9, 0x3, 0xce60, 0x7ff, 0x6, 0x101, 0x72dadb4b, 0x2, 0x200, 0xc, 0xa9b, 0x1000, 0xc, 0x56b, 0x5, 0x931c, 0x6, 0x2, 0x7, 0x9, 0xd68d, 0x5, 0x1, 0x9, 0x9, 0x4, 0x0, 0x6, 0x1, 0xfffffff9, 0x1, 0xffffffff, 0x1, 0x7fff, 0x401, 0x633, 0x400, 0x23, 0x1, 0x1, 0x1, 0x4, 0x0, 0x8001, 0xbb34, 0x400, 0x0, 0x60000000, 0x9, 0x1, 0x8, 0xd405, 0x8000, 0x2, 0xcd9, 0x5, 0x9e, 0x3, 0x0, 0x1, 0xf9, 0x7fff, 0xfffffffb, 0x0, 0x81, 0x0, 0x0, 0x7f1, 0x8, 0x30, 0x10, 0x2, 0x7ff, 0x8001, 0x0, 0x4000, 0x7, 0x3, 0x3ff, 0x9, 0x9, 0xc, 0x0, 0xfffffffd, 0x1, 0x400, 0x65, 0x8, 0x7, 0xa, 0x7, 0x1ff, 0x59, 0xfffffffa, 0x8, 0x6, 0xffffff81, 0x10, 0x5, 0x2, 0xc660, 0x80, 0xffdf, 0x9, 0x6, 0x51, 0x80000001, 0x6, 0x9, 0x3, 0xdd25, 0x8, 0xd84, 0x6, 0x80, 0x2, 0x101, 0x9, 0x0, 0x4, 0xafcd00, 0xc16, 0x4, 0x7a, 0x401, 0x7ff, 0x0, 0x0, 0x2, 0x10000, 0x6, 0xa, 0x6, 0xfff, 0x7, 0x7ff, 0x101, 0xd, 0x6, 0x8, 0x10, 0x3, 0x3ff, 0x8, 0xbb, 0x4, 0x4e, 0x7, 0x71, 0x2, 0x6, 0xb5, 0x4, 0x6, 0xf5b, 0x4, 0xffff, 0x0, 0x3cd, 0xfffffffe, 0xa2ac, 0x5, 0x7, 0x1ffc, 0x9, 0x5, 0x1, 0x6, 0x8, 0x80000001, 0xffff2ef7, 0x3, 0x2, 0x2, 0x8, 0xfffffffc, 0xc8f, 0x9, 0x3, 0x8, 0x3, 0x7, 0x5, 0x1, 0x6, 0x7, 0x4, 0x7, 0x6, 0x1000, 0x0, 0x8001, 0x9, 0x5, 0x8, 0xfffffffe, 0x6, 0x3, 0xc, 0x8, 0xb, 0x7, 0x1, 0x1, 0x48000, 0x2000, 0xf, 0x8, 0x9, 0xb, 0x1, 0x100, 0x9, 0x7f, 0x6b41bd98, 0x3ff, 0x8, 0x1000, 0x6e26, 0x2, 0x0, 0x3, 0x9, 0xf7b, 0x550, 0x9, 0x8, 0x1, 0x401, 0x5, 0x10, 0x9, 0x81, 0x7, 0xff, 0x5, 0x200, 0x5, 0xffffffff, 0x9, 0xfff, 0x7fff, 0x50, 0x6, 0xdb1, 0xff, 0x1, 0x3, 0x2000, 0x2, 0x73, 0x5, 0xd, 0x7, 0x0, 0xffff, 0x2, 0xf, 0x8, 0x7, 0x480000, 0x9, 0x75c66869, 0x6, 0x4, 0x3c80, 0x9, 0xfffffff8, 0x8, 0x8, 0x2, 0x5, 0x0, 0x4, 0xd9b, 0x4, 0x6, 0x400, 0x9, 0xfffffff7, 0x5, 0x1cdc, 0x6, 0x0, 0x1, 0x3ff, 0x4, 0x8, 0x8001, 0x0, 0x8, 0x7fffffff, 0x10001, 0x10, 0x400, 0x7, 0xfffffff7, 0x8, 0xb000, 0x4, 0x6, 0x515, 0x3, 0x0, 0x8c8, 0x80000001, 0x8, 0xfffffffc, 0x0, 0x2, 0xffffffff, 0xd, 0x200, 0x1, 0x1, 0xa9, 0x9, 0xfffffff9, 0x8, 0x1, 0x7, 0xa4, 0x5, 0x7, 0x7, 0x3, 0x2, 0xc0000000, 0x8, 0x7, 0x40, 0xb21, 0x8000000, 0x7, 0x4de87f72, 0xb, 0xf2, 0x1, 0x308095af, 0x49, 0x5dc00000, 0x9, 0x3ff, 0x4, 0x7, 0xf7a, 0x3, 0x1ff, 0x101, 0x0, 0x8, 0x3, 0x3f77, 0x3ce95522, 0x2, 0x8000, 0x7fffffff, 0x7fffffff, 0x200, 0xd618, 0x1, 0x8, 0x7e8, 0x40000, 0x4, 0x1000, 0x7ff, 0x31, 0x5, 0x2, 0x0, 0x9, 0x0, 0x3, 0x1, 0x10, 0xcc, 0x8000, 0x1000, 0x7, 0x6, 0x6, 0x9, 0x9, 0x2, 0xd1c, 0x1, 0x4, 0xf212, 0x1, 0x2, 0x2, 0x40, 0x8, 0x3, 0x2, 0x0, 0x1cc425a, 0x6, 0xa, 0x5, 0x3, 0x9, 0x8, 0x7, 0xd5000000, 0x9754, 0x5, 0x1, 0xfffffff7, 0xffffe74c, 0x7, 0x5, 0x80000000, 0xe98b, 0x3, 0xff, 0x4, 0x7f, 0xfffffff7, 0x166, 0xfffffffc, 0xfff, 0x1, 0x2, 0x4, 0x200, 0x1, 0x1ff, 0x3, 0xa4, 0x9, 0xab7f, 0xfff, 0xa, 0x3, 0xa, 0x5, 0xc0e8, 0x1000, 0x8, 0x3, 0x7fff, 0x6, 0x1, 0x1, 0x2, 0xa2, 0x7, 0x8001, 0x100, 0xe9b, 0x8, 0x6, 0x40, 0x7, 0x0, 0x7, 0xdee7, 0x4, 0xd589, 0x0, 0x6, 0x3, 0x4, 0x4, 0x7f, 0x9, 0x7, 0x5, 0x200, 0x6, 0x2, 0x2, 0x2, 0xa, 0x1, 0x2, 0xa8db, 0xd, 0x3, 0x0, 0xff, 0xf, 0x800, 0xcf4, 0x2, 0x3ff, 0x9, 0x80, 0x10000, 0x8ff4, 0x588, 0x1, 0x3, 0x0, 0x40, 0x9, 0x10000, 0x33, 0x7582, 0x0, 0xc, 0x1, 0x6, 0x2, 0x3, 0x8b5, 0x503, 0x7, 0x100, 0xc51, 0x80000000, 0x2, 0x8001, 0x2, 0x7, 0x9, 0x0, 0x6, 0x1, 0x8cd, 0x4, 0x7fffffff, 0x2, 0x8, 0xb, 0x1000, 0x7, 0x9, 0x7, 0x200, 0xfffffffd, 0xade6, 0x10, 0x2, 0x5, 0xc000000, 0x6, 0x1, 0x538, 0x4, 0x0, 0x10, 0xfffffffc, 0x0, 0x4, 0xfff]}) syz_emit_vhci(&(0x7f0000001480)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x2, 0xff, 0x3}}}, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='rxrpc_transmit\x00', r6, 0x0, 0x5}, 0x18) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000001580)) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000015c0)={0x7, 0x0, 0x7, 0x9, 0x17, "fd8984000538f702"}) write$tcp_congestion(r6, &(0x7f0000001600)='highspeed\x00', 0xa) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) readv(r7, &(0x7f0000001880)=[{&(0x7f0000001680)=""/176, 0xb0}, {&(0x7f0000001740)=""/31, 0x1f}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/21, 0x15}, {&(0x7f0000001840)=""/10, 0xa}], 0x5) (async) readv(r7, &(0x7f0000001880)=[{&(0x7f0000001680)=""/176, 0xb0}, {&(0x7f0000001740)=""/31, 0x1f}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/21, 0x15}, {&(0x7f0000001840)=""/10, 0xa}], 0x5) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000001900)) writev(r5, &(0x7f0000001ac0)=[{&(0x7f0000001940)="78bdbc95316f2156d5f49ea49bdf1d70c275cc64abd405100458b0a388bf86cc88fcf1ee16ab976138959aac03861b64337d324126f19e2fdf559b22b6ef0cf2b3ff3d1615622bec507d2d783c988d1374a2d3bfee8902af322cf8811e750dc51cca", 0x62}, {&(0x7f00000019c0)="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", 0xfa}], 0x2) inotify_add_watch(r6, &(0x7f0000001b00)='./file0\x00', 0x22) 1m36.500836235s ago: executing program 0 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x200000000}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x7, 0x4002004c2, 0x1000, 0x5, 0x104, 0xfffffffffffffffb, 0x4, 0x20000000071dd, 0x0, 0x5, 0x8d], 0x10000, 0x2008c0}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000200)={0x7, 0x4, 0x7fff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0xeb, 0x0, 0x3136564e, [0xfffffffb], [0x7b5], 0x1}}) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000140)={0x0, 0x3d, ""/61}) (async) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000140)={0x0, 0x3d, ""/61}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f00000000c0)) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r9], 0x3c}}, 0x0) close(r9) (async) close(r9) 1m36.415093293s ago: executing program 33 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x200000000}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x7, 0x4002004c2, 0x1000, 0x5, 0x104, 0xfffffffffffffffb, 0x4, 0x20000000071dd, 0x0, 0x5, 0x8d], 0x10000, 0x2008c0}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000200)={0x7, 0x4, 0x7fff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0xeb, 0x0, 0x3136564e, [0xfffffffb], [0x7b5], 0x1}}) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000140)={0x0, 0x3d, ""/61}) (async) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000140)={0x0, 0x3d, ""/61}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f00000000c0)) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r9], 0x3c}}, 0x0) close(r9) (async) close(r9) 5.142385246s ago: executing program 2 (id=2556): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x18000) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfb, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x10, {{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x4, 0x9, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc7, 0x96, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x0, 0x5, 0x1}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x6, &(0x7f0000000480)=@string={0x6, 0x3, "c0010001"}}]}) 2.244857276s ago: executing program 2 (id=2599): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r1, &(0x7f00000001c0)="42b97b71397bffe774a5cf51b598dcaa839bea164433c1d9323617c780b9ad970a3bc64c203118666158bef4f360a801ffb3505cadfb6dae87b32234c013704a348679439ba6b81219261c246bc6136e444af1352356f028681fe43bd1faf346fd749616b8889de5e143b32be818107db6cee0ad3a298c97873c69c5fd96fadf6844fd5be604c0a5e7ca02b49b7f61abc3a139490d76c4d01d0920f080b83f984667f65bf9a4316d8d9f11517061bd6bc3c46fe4fc80a5ff3362271bf6b5dc34b3e2b81c44af92bb2bfea1c9ee0f33a50000000000000000", 0xffffffbd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x22, 0x1, 0x2, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x3436324d}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400d6db7a6e40413f575e61bc010ad6670b3a511a3af074e34fecb9ec2d796b4fed061665366d660f230b5214e2a708423b25de20183ac7f342cb378f23c7cd988412b2a88db1ea174f37d58c876d5ac30e2eb7fe4202a5925e72e1cc796c662cb95d6eabce086b6d257507e0968d8b22b887eb17a61eece8d690fe456f53da33eea4ae9c7c", @ANYRES32=0x0, @ANYBLOB="0000000007500500200012800b0001006272696467650000100002800c002300faffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, {0x3, 0x101, 0x4, 0xa2c}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x3ff}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) faccessat(r7, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x42, &(0x7f0000000ec0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @broadcast, @mcast1}}}}, &(0x7f0000000f40)={0x1, 0x2, [0xf6a, 0x799, 0xad0, 0xbed]}) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000f80)={0x0, 0x1}, &(0x7f0000000fc0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000001000)={r10, 0xfff, 0xa5, "d9ca8720f749d3b8d3ff724e775c72780931ab0752cd83fe9dbf9e6aaf5cd9fdf53c4b4145592d8bd754fba29f03b5fc152f9fb7c25cc53bc584147d2ade323e41d7b2a0de49f2968fab1775e2896922e1a3b276e923d5831335949a3e35cfeb7d869e7c6331507623938f73f897d1f0787b372cf8c3177fecf5b4bad6e32618d901738cf7c5596895f220f0e692a47f24d73a013f47ac84363d2c31af973c25405a5dcee5"}, 0xad) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r11, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r3) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000e40)={{}, {0xffff}, 0x22, 0x0, 0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)="94d16afad1f5a880fc6cd822cfeac8cf0ea5f9b88a1d877c607192771c6948b3a27f38a1246b75c821321d4adeaacebf41d974714c01b555fdc1438bc8aac6a5599c4716d02b9b34b3e539771d27fb561c175033553b64d407f3f7c687e25705d9b8efb24e2600c6b37b39f0566220169d2ed519ba07a0cf7aa7d574cd0c520dd726d4778ba98f14d57398233bd64c938b28bc9eabd498ce1a6a85e1622ec515d4256b09e62a6212376bdfc2d3041699a815e71c50bdd6824165beae35852c26c5cc00a9a0697c2e8064206d9b2ddb560b779b76dcd006b766fb534cb514df10db227083f8c02a2bfdf7087abe8417112882224220401578ac6a58ea2941641cba5210029761b6871bbeb1515a2a6af4c777b70628383966d7d414db1fc4543f1bed71d36a7e9543068b0a312898c9ac978d2d72dfb09c06454cf45273ab5ffd168a0b1d61af16a2ab79955f395a199e19a8df661811a6ea18597ac7bb258dea7f635541918ed4be7b99d3503bb9e933f6797f20a11040b806acf117612e89c4d73fc1990c6d701b14bd8d5c0f9b4597e8b65bc925e25f17ccdaadacb9afb2f6379862c856494c68cddf02d469b3d4407c74df58381a8a3f629297368b82c715aa50cfcc814709eca9cba0484ac62458a735509d4a7cd3203a825e51dd0e2f63178d2d58a3", 0x1e5, 0x0, &(0x7f0000000cc0)={0x2, 0x11e, {0x0, 0xc, 0xd8, "9b20072cd1587c958ffdd6b38e8a74bbf5b350ee043567ac8b4b4f6b710f36008284d16660a9a261cd4659168caa92ee02d7c08897bc2c4e99c7a5ded02d5983abdf282536b28e7e9f6f56c77ad165dd9ac8ea08c7c13f87f4f8cdc8c974f59fac6cbfe0114357d9cd2a6f7e4b2955b289d8adad7083a3b15bc092a357f17c49b283f59c8f791bdf5e180a35300d10f0ba836d8bb32e1aa38b16d862eb24f7cfc130edca9e4cb00e9bc2c26ddc57495607d6409f332fcc2cf4c11713fd0552cbd4b406cf0d88cbb703ba1e535cc4a589b7c1b8adf86c272e", 0x39, "e03dbb9c83ed99ac9864437f6989d4221683947f3f6e549dd4fc7f7caddc47d991a893d2a5992829a2bb8bd42cd92d3c1bf66da5d93d076035"}, 0x51, "3d6263bff1100d1f6e4d47c00b4df903ec52b86962cd91d12fbe6b86aeab9732615342ca4a75da7bac172e1bdd2dccff3233081f9f7f0bda247a0f978af00348a636863eca9b53be824b2362b2d9138aea"}, 0x17b}) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r12, 0x401, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440d0}, 0xc8010) finit_module(r9, 0x0, 0x3) setresuid(0xee01, r8, r8) sendmsg$nl_generic(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240600002c00000225bd7000ffdbdf25160000007a14b8b22847e42a807f1608b0fda4ba41d31d7ec4a712db2adb628b2d95a4fcde9405c95f76d9a1a8127db010a512bd9cfa5de91f09b2ad28ecdb34a995e71b6180b8e67b55182edd6421b2c1ab09652b58b659156b73af8e08a59a022fccf99e433e50a4ecfc00e21916a22415537d7dc1c4674a8d7c8296f98878b9693ddb793b826f03703f9b89774012657a21996d39176a4a4aa6479aebf05a04d68fecf05ffc02d8800400f3800400998046e5bead4f8b7760852f2f9c35fa88ce24ce116f37ae8e2ed07d5f86db9fc94f2dfea27b7f3b39f4c37b86549af544b78f76460d42dde19799462cc705b5b0fbef8a134b3dd47a55e0adf05027ec1bad8734d9041514406675cbdff7a2ccb469111d9e48399aab4f9738c6f7ef2bd3c3c739e123a87ab3acb736c8390d4c176b9ae0a9150c72874747c0afe851093145a5597e36a46a307ebf711801a9f47497e6ddbf9af7dd2ccf96c465bd2a15d7e99e3b936b77a617f45d3cb47b9853d15362d0447e6786db994e626a3b2ef6f576b4b22e3d71af74eb4f659e17a4ced1284d2502e5f5a8d868cd93c576268a6576e3773c8ebd0faa8e81395d1b41b2b10762b0ecab2f3d5fea591f0a562a2526e506000000d0b973ecab301ccb433c4b2b8d8ee2bf888a3bc0b1cac2d997dfbb3dc735f9a76088c86125cd87e08b530343c01f77363ec0ddc8d670c2fe7c8b9ae5bb49cd8c44163ece43ac87dfe2ce789531c0d1bc55c67b31d0c1f37786ac01dd665e897e25ff9dc53866e40b84ee5720b4b61ad49c2ed73a4c5d001dc7b637bcafade0619e048acb1de9f7cea0626025e94687706ebdbbebc89116aa85d18621b88f5ac4590ab908a9dc04001580354e2e3d82daf72b8f72b7cdf75dac44c4eaf315714a8ee390925e247020f5b490f7cdfde33c9bfcb40a8a90ab0734c63209b4762f5273e36a61a3108c275046a0a8a9be354700ea29a6146c18d925db8e0dc669c1af5d150b5d00f153e026c29b6615e984e6167de8e69518772b20525405ecdd537567486d534895ca0bae1a4a2da3af17e930e2ef028c178e61911d5681accb1711454079fc287911c69c677a994f1a7d06c4023e314331654480fec096f205e73bd12ada10d3bff5e27cc8dc2b19c6cc39b84dfd479ba2e388353be71369058bb212905ad0b2c6f0a679a41ed0d2b676a18b5f12676711896f54d9afb4f2be6c21704fc721bb49368dcc701694215ae8c0cc70cb6ea7ef1350a0e90fe698e669b3d7ba777de0afb6760a904c93a8eff9130f52d03d71caea2928346bbd4ff66832499e1ba7ef0a9ac919fa4f5a361fdd3c635d7bb216e526104411e14eb2eecf77d754071cd105c27997fe200c89f7ad668f6a85f494c4b43beb69dbbf5651b429deed52aab8cae864c1373da4d62b63f2234c450c358be054b77a9a1d8d1e3feb02e8809c7380a6d2b0eb0b3ec649b69b66bcf7b832bdd69b460a94a7c1c6bb7ef2170f43d75775ad43af70cbd23a989b211baf03a8687e1d098c582fcd01ca8016006500e75d3a245d5b2c287b7b5c5e2f9a24272100000008005f00", @ANYRES32=r8, @ANYBLOB="1fad622a3d68b7e2cc1119278137a28231bc28c197d38d13dddbf9f71f477d55f4e5645945337d34ddfe88dd4e81d1b1f571055fabfeacc7cdc46e667f4ac140f253e3ba7b40ae3acaeed6e0b746c6ac47da91fc32b27ee925cf45cbe5d5849c07d85d52bc275f480df1c124f9f5ab8fd6a63f801df57c3a5c84c7a8b6d0714c2d2943c617ece53c10d2809ba348005d3b8606087bdd5168cc5ee71a35b2cfb83dc2a19446fe48e3232b0800de00e000000108002c00ffffffff92cfb4333d8813933ad292539ee8952b0a5766db2ec371ff223cd82e91aeea9382b67c38fa5307070def396bce8c2142a5db20899ffb1cf4176b5f0f6d1d4e82a976abe1d8aa8c8c06560c21e37c3556509aa3dc3ef40f6b338c57320fc64b69dd94cb35cabdba5118b17f88051bdec7f029d97559f88027397418f957e9f630a50f4f775279ec57b35e2625c5d1aee4b1ae71d54207176ee694608f3d95ba80960a23a7d2fcd6c99306be5b5608d37e0d405474e3e69c2e6644be56d8a702fcf56a774cdeccdab2f477bb8a2b989eb17b5f64e3ebad393e8b30917c2ac13429cdb52e574831a8f06215ec567cd41c0000000000"], 0x624}, 0x1, 0x0, 0x0, 0x40}, 0x50) 2.106408193s ago: executing program 1 (id=2604): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="e7c53ba1231e56594d910b568a3eb3241b", 0x11}], 0x1}}], 0x1, 0x2000c044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x9) (async) r2 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @multicast2}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000450dd3d0c68dff00020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r1) (async) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) sendmsg$unix(r6, &(0x7f0000000280)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)="334e3286632240b3577d60e51aab0c372585c0c5122ea8ac10f4908877d9b818b79ec6a08fcafde6703f6bfa5375e7ddd17cc175c96953ba44638e04438262da493b73c54a44ce8479c2b16ff41e8ad2c16b894a54673f03356961f1ee69849c59eb1b1957a77b99f31abc2846d7885aac56bcedca04f525cd3f9e39bf650500287aea7be94aa6caad9aabba31783bd3b94106d47f7edd4ed5b7b85d5e1bef829fcc6e9f982fe8c81aac9e30d2817b30d956f4f0cf3496fb7917cb38a87776be", 0xc0}, {&(0x7f0000000600)="eddb2e67f6f43461ee66f72215c82f7aaf9711ce4b1d6ced0197ae00463e1eec5042e3938989354d7885558f526320bb2f3f590d5fcd14d928f20c8a42b0346847abc072157ffb936651a80ad476be3d021c4463c9bb12216e52069e74da1eb01c23a8254af1126c08b2c6e7cf91dd8dda566fb0e4442194883f006ccf0e1c0b8faa972864b9f1460e74139c775b79", 0x8f}, {&(0x7f00000006c0)="d9cefed0b3146a3a8d4c79cbdf065e71c75562cc5db2758bbd7439b59cebaaf626605cec7048156bc4e3fe7b07a134cf3e077995fde7026ff4290b89fa048380d6ef4aced82e0b491a5e0cb8fbe3", 0x4e}, {&(0x7f0000000740)="2657ea393082aae558e3e754706f8c8f92db2f9035b797410fef3fe9b27a9cae8c36087347d9bfadc36874036d2ed4be026f725272b2498c9f1bb9f3f060c9cdb35d971e75958c03dde62938de3be935fc2b1b4101000af9e9790a742fd30bb3eb51b213f10ba40a46e8ece0de7873dd7bcef6d7e16d828d3456e7b502dbc7669bff7b261d9c2b9333ebb7853a2a01bb9ae768aec040", 0x96}, {&(0x7f0000000140)="5df608dcfef73f", 0x7}], 0x5, &(0x7f00000001c0), 0x0, 0x8000}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x2}) 1.986127279s ago: executing program 4 (id=2608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @empty, @void, {@canfd={0xd, {{0x2, 0x1}, 0x1e, 0x1, 0x0, 0x0, "81109e884b39203001afd3a17b0386366adbc75d2fbc1e27824ae235f2ddeaf97d5d9bccf4075ad9e2a4f2732f57722b6bb070b8db2d11dc3d79c1aef6af730c"}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, r2, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000200)={0x0, &(0x7f0000000040)=[@code={0xa, 0x5b, {"b8010000000f01c166baf80cb82e70d68eef66bafc0c66ed2b81090000000fc730c46289bae466baf80cb886836f8aef66bafc0c66b80b0066ef3666420f6d1e2664430f209ef50f2285"}}], 0x5b}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0xdd5f, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, r0, 0xeb8eb66cc8f705b0) 1.847827923s ago: executing program 1 (id=2610): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) syz_emit_ethernet(0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="01801f000000445ef50ad0fe81003e00000d0400000028010000225ab258c4bc3aff34e5f2cbfe8bdcb258a030a278493adbdbfcee160846a4a2854eca9497dd1776f7586bcca1413cf608bc6643528868fac10fc862c779ab27"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x480d9) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="c2c5df26e60c6b30d73de731fd5310668633e46e74ea9b23c7ad193308902668ab", 0x21) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_procfs(0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (async) syz_emit_ethernet(0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="01801f000000445ef50ad0fe81003e00000d0400000028010000225ab258c4bc3aff34e5f2cbfe8bdcb258a030a278493adbdbfcee160846a4a2854eca9497dd1776f7586bcca1413cf608bc6643528868fac10fc862c779ab27"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) (async) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x480d9) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="c2c5df26e60c6b30d73de731fd5310668633e46e74ea9b23c7ad193308902668ab", 0x21) (async) 1.794446681s ago: executing program 1 (id=2611): openat$cdrom(0xffffffffffffff9c, 0x0, 0x4000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x3f) 1.730706697s ago: executing program 4 (id=2613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xff, 0xe, 0xe, 0x101}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x1}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x13, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f00000000c0)='\x00', 0x1, 0xc041, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000100008500000028000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x20000845) 1.657575434s ago: executing program 1 (id=2614): openat$cdrom(0xffffffffffffff9c, 0x0, 0x4000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 38) 1.657408082s ago: executing program 4 (id=2615): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x40, 0xc8) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x2180, 0x9) mount_setattr(r4, &(0x7f0000000040)='./file0/file0/file0\x00', 0x1b00, &(0x7f0000000180)={0x100005, 0x78, 0x0, {r5}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x90, 0x0, 0x10000000000001, {0x6, 0x2, 0xfffffffeffffffff, 0xfffffffffffffffd, 0x400, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x502, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 1.464617728s ago: executing program 1 (id=2616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0xc, &(0x7f00000004c0)=""/118, &(0x7f0000000280)=0x76) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000040)={0xd281722a92e9cfe8, 0x101, "bb7b515413a1e2496874d1f24f3e1f681ae95404c2558efb2541945b996964a2", 0x6, 0x5, 0x401, 0x956a, 0x8, 0x7, 0x80, 0x2, [0x7ff, 0xfffffffa, 0x2, 0x3]}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @empty, 0x3}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.464145849s ago: executing program 5 (id=2617): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x90, 0x0, 0x10000000000001, {0x6, 0x2, 0xfffffffeffffffff, 0xfffffffffffffffd, 0x400, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x502, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) (fail_nth: 17) 1.461283106s ago: executing program 4 (id=2618): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000003c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00', "0300", "fcffffff", ["50d5c2ce9f90c61ad87f27b6", "808e88e2e9f7ffffffffd138", '\f\x00', "fff700000000002b725d5700"]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xf000, 0xd, 0xd, 0x5}, {0x6, 0xfb, 0x7, 0x3}, {0x101, 0x5, 0x0, 0x2}, {0x6, 0x2, 0x8c, 0xf917}]}) 1.409760557s ago: executing program 1 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newqdisc={0x4c, 0x24, 0x8, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x14}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8000, 0x759, 0x8}}}}]}, 0x4c}}, 0x4080) (async) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000500)=@buf={0x37, &(0x7f0000000000)="4e000e6213379d412098606802381e10bdb5611186ef4fb79ed06f700b0cc771c3e33ff54e4a91da18b3822748adab07f71896f94cbf29"}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001080)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) r11 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r11, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4020000", @ANYRES16=r12, @ANYBLOB="000326bd7000fddbdf25170000004c0004800900010073797a31000000002400078008000400030000000800040006000000080001000300000008000400250000100900010073797a30000000000900010073797a310000000048000780080001000300000008000200fbffffff0c0003000c000000000000000c000400f8d60000000000000c000300000000800000000008000100c60200000800020009000000140101804c00028008000200010000000800030009000000080002000200000008000200e4d500000800030009000000080001000300000008000300090000000800044901000000080001001e0000001c00028008000300ff0f000008000400d1030000080004000700000038000400200001000a004e2400000b9fff010000000000000000000000000001fbffffff1400020002004e23e000000200000000000000001200010069623a6970366772657461703000000024000280080003000600000008000200040000000800040004000000080001001a00000038000400200001000a004e2000000008fc010000000000000000000000000000ff0700001400020002004e22ac14142e00000000000000009c000680080006000c0000004400040067636d28616573290000000000000000000000000000000000000000000000001c0000005305be9be273c56b56c2a0ac6987145c004bb6d491b839420b5c1c174200040067636d28616573290000000000000000000000000000000000000000000000001a000000b6f6af7af8d5f8a349c3250660fe8184bb35f089ec005111f3e0000008000100050000004c000980080001000a0000000800020004000000080001000100000008000200010400000800020005000000080001000400000008000200f7000000080002000200000008000200ffffffff"], 0x2a4}}, 0x40000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.32609535s ago: executing program 4 (id=2620): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x400c404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000060000001c005a8018000180140003"], 0x4c}}, 0x0) 1.325415616s ago: executing program 5 (id=2621): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) (async) recvfrom$unix(r4, 0x0, 0x0, 0x10041, 0x0, 0x0) (async) writev(r1, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffc", 0x3}], 0x1) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000040)=0x7fffffff, 0x4) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async, rerun: 32) getpeername$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) (rerun: 32) sendto$packet(r7, &(0x7f0000000440)="5a37a006d799996192da1c9337fdb2111368b0c5fa98bd117a8284c135984fe07883ee847da003e8206b1d61575e70c54528e05f70af96f6cd1b45f5bf2412ec15342c37a80e528733f2c962171c7b8200198d4afa164e31ae9dafd7543ae829f74b6defeb9365cef1c4aad6f1be98b0cc16c810d1ecd3e2161f887639a5a1a65ad1be434b14f639f3446bd9", 0x8c, 0x20000000, &(0x7f0000000580)={0x11, 0x1b, r9, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) (async) setrlimit(0x3, &(0x7f0000000980)={0x0, 0x3}) (async) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00') (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x0, 0xff, 0x0, 0x66}, 0x20) (async) ioctl$NS_GET_USERNS(r10, 0x8008b70d, 0x0) (async) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000380)={0x2, 0x14, 0x4404, 0x1, 0x1e, 0xa, 0x0}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x4008031, r0, 0x1c5ed000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x4, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/132, 0x84}]}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10030, 0x0, 0x0}) 1.324505944s ago: executing program 2 (id=2622): openat$cdrom(0xffffffffffffff9c, 0x0, 0x4000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x300) 1.232671875s ago: executing program 4 (id=2623): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000001100050000000014000f"], 0x30}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x2, 0x26d, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xd1, 0x53, 0x72, 0xff, 0xbb4, 0xa38, 0xe88b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25b, 0x2, 0x9, 0xf4, 0xe0, 0x0, [{{0x9, 0x4, 0xf6, 0xd1, 0xb, 0x86, 0xc5, 0x5f, 0x5, [@hid_hid={0x9, 0x21, 0x80, 0x69, 0x1, {0x22, 0x776}}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x3, 0x2, 0x5, [@generic={0xb, 0x0, "5c289e0962b924cb89"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x5, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x93, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xa}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xb7, 0x5, 0xd1}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0xff, 0x9, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0xf, 0x5b53c48afa2a4715, 0xc0, 0x7, 0x5, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80}, @generic={0x6f, 0x2, "79c5da47138ff4fb500f27dbbd2a8c4de4d620c0410fa92a67edeb34b1836ba94d6f1fc3c2b2adc642a5683d10add664f97ef4742a19763ad810e405a016997ef1a1c8735e91383fe4ba9383f3da9b9891f21b044b012ac5e755956766cafe9ad20cbea8442cc592b15241cc01"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xff, 0x5, 0x8e}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x10, 0xff, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x2, 0xa5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x2a}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x92, 0x1, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x6, 0x5, 0x6, [@generic={0x5b, 0x22, "0e474f2f49c737e66e4b472d5d2fac66238372570bad64af81c2e5c4934842ee97dab8945969822e55633aad0451a10fe13d7746a0f4b8e41e5d7d2da729c8ce490fba32f086fe8017097ab81e9781d93c37174cb2e4b6b1a0"}]}}]}}, {{0x9, 0x4, 0x19, 0xfa, 0xa, 0x1f, 0x99, 0x8e, 0x40, [], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}, @generic={0x18, 0x22, "f356ebac91235b33c75dd74c50bfc9090c89e2b69606"}]}}, {{0x9, 0x5, 0x9, 0x11, 0x200, 0x6, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0xf, 0x8, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x1, 0x2, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x8, 0x8}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x4, 0x9, 0xb5}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x8a, 0x8, 0x1, [@generic={0x47, 0x8, "07fd626fc643cc11098e31e2d29915653f6cdd4eb4999ad18045fc52f20c9db166e2ca5e0cb5fc87f9455e49aaf4be3c55012295bea0f30ba3b9be31aeb7caa7cf517375d8"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0xff, 0x7f, 0x6}}, {{0x9, 0x5, 0x80, 0x8, 0x0, 0x5, 0x81, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x19, 0xb52}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x14, 0xff, 0x0, 0x5}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x3, [@generic={0x7, 0x10, 0xb, "5f2595e4"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9473ccb454359481ca8481c0ca79b4ce"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x0, 0x3, 0x8}]}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x409}}, {0x34, &(0x7f00000004c0)=@string={0x34, 0x3, "54b8e8f8bf45e06bd00f42d291c2d53d7c19a846f09d51bbca9dd09036af8649a96bfa9533df36cb3c559ddf9cc37f8758c3"}}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f00000000c0)) close_range(r4, 0xffffffffffffffff, 0x0) 1.227931802s ago: executing program 5 (id=2624): ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000080)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f00000001c0)={0x3, 0xffffffffffffffff, 0x1, 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x9, 0x2, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x3}, [@NHA_OIF={0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$packet_buf(r6, 0x107, 0x1, 0x0, 0x0) fadvise64(r0, 0x0, 0xffff, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c9"], 0x17) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') socket$inet6_mptcp(0xa, 0x1, 0x106) 1.227325556s ago: executing program 2 (id=2625): openat$cdrom(0xffffffffffffff9c, 0x0, 0x4000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 39) 1.08023679s ago: executing program 2 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={@msf={0x8, 0xd, 0x3}, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x301300, 0x0) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1.079996366s ago: executing program 5 (id=2627): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000140)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d2c00535a753c17187b309ac72be239a1ebfe5899f411829ee74d19832b4934784708158bdd04e40257e6639a10c6e3824ea214af8fecd5497736ae407bb44d035f000000000000eab2341d838977c762800efdd949c1414ea9caa03cd3ebdc62dff283aa8b3368c34ec79d522edad666af26105bcd08626e4706037feb1015adddaaa83e346bc3d70173b9cd95558ffd28ec664858a0293fc1ad68998c370f8c0a85db77a0047edc"]) 940.683997ms ago: executing program 5 (id=2628): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x201000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000140)={0x100106000, 0x116000}) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r6, 0x5392, &(0x7f0000000000)={@msf={0xa, 0xd, 0x3}, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x80) write$binfmt_elf32(r5, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3b, 0x2, 0x6, 0x2cf, 0x2, 0x6, 0x10000, 0x7e, 0x38, 0x3d1, 0x346, 0xc, 0x20, 0x4, 0xb6, 0x1, 0x10e}, [{0x70000000, 0x10000, 0xfff, 0x4, 0x8, 0xfffffffe, 0x80000000, 0x5}, {0x6474e551, 0xe, 0xb, 0x0, 0x8, 0xfae, 0xe, 0xf44c}, {0x60000000, 0x9, 0x24, 0x40, 0x5a36, 0x0, 0x81, 0x3}, {0x60000006, 0x2, 0x7fff, 0x7, 0x0, 0x2, 0x3}], "b5982bfb1fd3534a59dc580fce1817a1eb84fde8f748c31be3d18a8ad472937aa85d3d8c4fe43bf46444335295709361c8d2cd5fa32ceb3b4a9c45634bfa4cb684edf6c3c16e061e24159fc88bb701cc7a3cad9f13a2cab91baba0861cf0ccab7183a8092729700c6ccfebc3576499024f71bd9d0d803cccdc182da9c746f1d84cb0cb281d7b6a20a9646077968ec6e8bd04a2f6f585229ac05f35e41354dbc1fd94d209cebc255d9b2b6395cb9c288a2ccd3cb678c00aa645e1434604a10d210a0717dd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x87c) writev(r7, &(0x7f0000000900)=[{&(0x7f000000ce80)="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", 0x1000}, {&(0x7f0000000400)="6c3d2349513bd8c820bb70057adeea4ddcb933f00fb5ed066440f0ed64c273d290b563454a392875b2d8ab0abb88cb20b63c01b90629c2a194c62f6a95ca6037f40ea4a3c26ce1824e98d7d1d23a4aea1eb30a340193dca4bb01f6f2c204d2d8db521402c8bb99f74915507afcec031f2bfce1c0b9a578b2aecfc0d06fb18a96fe3a51", 0x83}, {&(0x7f00000004c0)="8e076bb66054915a2224dde934afd6817386fec2f7b5254334aaafeade34ea22bc5e7e422f1d26bf33e690acadb3dead426cc5dbfbdad2b6c3148019deab23257a43adc0e43c90f22d6305e435c726cdfdc3cf6bc771804427cf2c864085fef87765f13bf9f4c9e13cb6a940869d9148264a6c5043c07089ecb73796a259bd5d9abc2ea8ce9fe69de6bfb557c0e56f8ebd76d627f9ba2f489020bda40c2dedc77b0884eb9a70c84250803cbec0", 0xad}, {&(0x7f0000000340)="080b15f2da1317a5e141a61c8fd039d4e746a269cf35ae1fe22f9c9d1440756c970b7807b7b7df7b45f7e58fedd93988d3f2c51d8f6b0a85c44c23b87defde1d703f1efe0b0fd41a90d7907ad7", 0x4d}, {&(0x7f0000000580)="e07b8668be0d37827136c3247e8b9a8a337acd70fcc57ed209ea5dd051ee", 0x1e}, {&(0x7f00000005c0)="74011294bbcf5195431815a9e7df1cd4ee91070e60cc98cc701ec911a30f838d7ed8acb5a2b2e50c6c0c7334bf07f44c9a66971021fe759f3d0f38fdb409a18a529341e2be0660846b68bbc031fc51e647771b32f1f7ca1f1f9885e117aa6227df4e3320f7a16c6aa524b19ce1f0c2e7ba658dedc6912edb5cc5029024ac4b97605db822a52ff218d5974a69743042a6b213ee8c061e77f83ed648b4a648db4a92b280bbf06a2786f9", 0xa9}, {&(0x7f0000000680)="07621371d713484cdd5499a34f6dc0e7657c4e34b7c7e80d3196cac821b0197ffc8f268e3833b60af42e7d57550286fdc72807922317c908c6989f3a47149234dd09d8c07541b5d354d797ba664467c741f77b0d8113a542cf00c9bc289d68045381cecd6576f70556bfa12a70962d1772a378131e04e2810a4ccfb7f86d008acb4987363c4e997c24533d7b0ba65dada26d96fcb750c7eba27b21997d2644e7d3367c2789158bf608023a0a34", 0xad}, {&(0x7f0000000840)="54b8af6589a73859b02ab0b0cb46", 0xe}, {&(0x7f000000de80)="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", 0xd01}], 0x9) openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) 662.972375ms ago: executing program 2 (id=2629): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffff}]}}]}, 0x50}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x0, "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"}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x8169, 0x6}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad6623875259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c70232858700", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0xfffe, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r11 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) rt_sigqueueinfo(r11, 0x1, &(0x7f0000001180)={0x2f, 0xe0, 0xffff0001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) (async) dup(r2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6, 0x10) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{0x77359400}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4004550c, &(0x7f00000001c0)) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x800, 0x4, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_MAP={0x24, 0xe, {0x6, 0x3ff, 0x9, 0x18b, 0x7, 0x1}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) r9 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x5}}}, 0x24}}, 0x10) kernel console output (not intermixed with test programs): 2+1 04/01/2014 [ 233.338763][T14611] Call Trace: [ 233.338770][T14611] [ 233.338777][T14611] dump_stack_lvl+0x16c/0x1f0 [ 233.338805][T14611] should_fail_ex+0x512/0x640 [ 233.338832][T14611] ? kmem_cache_alloc_noprof+0x62/0x770 [ 233.338855][T14611] should_failslab+0xc2/0x120 [ 233.338881][T14611] kmem_cache_alloc_noprof+0x83/0x770 [ 233.338899][T14611] ? stack_depot_save_flags+0x29/0x9b0 [ 233.338925][T14611] ? alloc_empty_file+0x55/0x1e0 [ 233.338948][T14611] ? alloc_empty_file+0x55/0x1e0 [ 233.338965][T14611] ? kasan_save_track+0x14/0x30 [ 233.338985][T14611] alloc_empty_file+0x55/0x1e0 [ 233.339003][T14611] path_openat+0xde/0x3140 [ 233.339028][T14611] ? do_syscall_64+0xcd/0xf80 [ 233.339050][T14611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.339077][T14611] ? __pfx_path_openat+0x10/0x10 [ 233.339112][T14611] do_filp_open+0x20b/0x470 [ 233.339138][T14611] ? __pfx_do_filp_open+0x10/0x10 [ 233.339182][T14611] ? alloc_fd+0x471/0x7d0 [ 233.339216][T14611] do_sys_openat2+0x121/0x290 [ 233.339234][T14611] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.339254][T14611] ? __fget_files+0x20e/0x3c0 [ 233.339284][T14611] __x64_sys_openat+0x174/0x210 [ 233.339328][T14611] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.339345][T14611] ? ksys_write+0x1ac/0x250 [ 233.339376][T14611] do_syscall_64+0xcd/0xf80 [ 233.339400][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.339419][T14611] RIP: 0033:0x7f8c5698f7c9 [ 233.339434][T14611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.339452][T14611] RSP: 002b:00007f8c57778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.339470][T14611] RAX: ffffffffffffffda RBX: 00007f8c56be6090 RCX: 00007f8c5698f7c9 [ 233.339482][T14611] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 233.339493][T14611] RBP: 00007f8c57778090 R08: 0000000000000000 R09: 0000000000000000 [ 233.339504][T14611] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 233.339515][T14611] R13: 00007f8c56be6128 R14: 00007f8c56be6090 R15: 00007ffed28941a8 [ 233.339540][T14611] [ 233.356970][T14467] veth0_vlan: entered promiscuous mode [ 233.450337][T14619] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 233.458265][T14467] veth1_vlan: entered promiscuous mode [ 233.458691][ T8577] IPVS: stop unused estimator thread 0... [ 233.479392][T14467] veth0_macvtap: entered promiscuous mode [ 233.484001][T14467] veth1_macvtap: entered promiscuous mode [ 233.499156][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.512432][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.521486][T11075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.525356][T11075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.530720][T11075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.534624][T11075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.547263][T14626] FAULT_INJECTION: forcing a failure. [ 233.547263][T14626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.552560][T14626] CPU: 1 UID: 0 PID: 14626 Comm: syz.2.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.552587][T14626] Tainted: [L]=SOFTLOCKUP [ 233.552593][T14626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.552604][T14626] Call Trace: [ 233.552610][T14626] [ 233.552617][T14626] dump_stack_lvl+0x16c/0x1f0 [ 233.552639][T14626] should_fail_ex+0x512/0x640 [ 233.552667][T14626] _copy_to_iter+0x29f/0x1710 [ 233.552697][T14626] ? __pfx__copy_to_iter+0x10/0x10 [ 233.552720][T14626] ? const_folio_flags+0x5b/0x100 [ 233.552733][T14626] ? folio_mark_accessed+0xc1/0xbf0 [ 233.552752][T14626] ? __pfx_folio_mark_accessed+0x10/0x10 [ 233.552775][T14626] copy_page_to_iter+0x12a/0x1e0 [ 233.552801][T14626] filemap_read+0x6b1/0xe40 [ 233.552824][T14626] ? __pfx_filemap_read+0x10/0x10 [ 233.552859][T14626] ? __pfx_down_read+0x10/0x10 [ 233.552884][T14626] ? avc_policy_seqno+0x9/0x20 [ 233.552908][T14626] ? selinux_file_permission+0x126/0x660 [ 233.552931][T14626] blkdev_read_iter+0x1ac/0x500 [ 233.552951][T14626] ? __pfx_blkdev_read_iter+0x10/0x10 [ 233.552966][T14626] __io_read+0x357/0x14b0 [ 233.552992][T14626] ? __io_import_rw_buffer+0x245/0x6f0 [ 233.553023][T14626] io_read+0x8d/0x1f0 [ 233.553034][T14626] ? __pfx_io_read+0x10/0x10 [ 233.553056][T14626] __io_issue_sqe+0xe8/0x7c0 [ 233.553082][T14626] io_issue_sqe+0x85/0x1410 [ 233.553103][T14626] io_submit_sqes+0xb24/0x28e0 [ 233.553123][T14626] __do_sys_io_uring_enter+0xd6b/0x1630 [ 233.553137][T14626] ? __fget_files+0x20e/0x3c0 [ 233.553153][T14626] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 233.553167][T14626] ? fput+0x70/0xf0 [ 233.553176][T14626] ? ksys_write+0x1ac/0x250 [ 233.553189][T14626] ? __pfx_ksys_write+0x10/0x10 [ 233.553204][T14626] ? fdget+0x187/0x210 [ 233.553220][T14626] do_syscall_64+0xcd/0xf80 [ 233.553236][T14626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.553247][T14626] RIP: 0033:0x7fcf42b8f7c9 [ 233.553257][T14626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.553268][T14626] RSP: 002b:00007fcf43aad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 233.553278][T14626] RAX: ffffffffffffffda RBX: 00007fcf42de5fa0 RCX: 00007fcf42b8f7c9 [ 233.553285][T14626] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 233.553292][T14626] RBP: 00007fcf43aad090 R08: 0000000000000000 R09: 0000000000000000 [ 233.553298][T14626] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 233.553304][T14626] R13: 00007fcf42de6038 R14: 00007fcf42de5fa0 R15: 00007fff46d1ce38 [ 233.553324][T14626] [ 233.606549][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.606595][ T64] Bluetooth: hci2: command 0x0401 tx timeout [ 233.636179][T11075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.640924][T11075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.691680][ T40] audit: type=1400 audit(1767000190.115:1076): avc: denied { connect } for pid=14629 comm="syz.4.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.698502][T11071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.701069][T11071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.703912][T14630] netlink: 'syz.4.2426': attribute type 4 has an invalid length. [ 233.724806][T14630] netlink: 'syz.4.2426': attribute type 4 has an invalid length. [ 233.751661][T14632] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 233.754129][T14632] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2383'. [ 233.877060][T14636] FAULT_INJECTION: forcing a failure. [ 233.877060][T14636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.882882][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.4.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.882912][T14636] Tainted: [L]=SOFTLOCKUP [ 233.882918][T14636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.882930][T14636] Call Trace: [ 233.882937][T14636] [ 233.882944][T14636] dump_stack_lvl+0x16c/0x1f0 [ 233.882974][T14636] should_fail_ex+0x512/0x640 [ 233.883006][T14636] _copy_to_iter+0x29f/0x1710 [ 233.883040][T14636] ? __pfx__copy_to_iter+0x10/0x10 [ 233.883067][T14636] ? const_folio_flags+0x5b/0x100 [ 233.883087][T14636] ? folio_mark_accessed+0xc1/0xbf0 [ 233.883107][T14636] ? __pfx_folio_mark_accessed+0x10/0x10 [ 233.883133][T14636] copy_page_to_iter+0x12a/0x1e0 [ 233.883163][T14636] filemap_read+0x6b1/0xe40 [ 233.883195][T14636] ? __pfx_filemap_read+0x10/0x10 [ 233.883233][T14636] ? __pfx_down_read+0x10/0x10 [ 233.883261][T14636] ? avc_policy_seqno+0x9/0x20 [ 233.883310][T14636] ? selinux_file_permission+0x126/0x660 [ 233.883350][T14636] blkdev_read_iter+0x1ac/0x500 [ 233.883372][T14636] ? __pfx_blkdev_read_iter+0x10/0x10 [ 233.883390][T14636] __io_read+0x357/0x14b0 [ 233.883419][T14636] ? __io_import_rw_buffer+0x245/0x6f0 [ 233.883454][T14636] io_read+0x8d/0x1f0 [ 233.883471][T14636] ? __pfx_io_read+0x10/0x10 [ 233.883496][T14636] __io_issue_sqe+0xe8/0x7c0 [ 233.883524][T14636] io_issue_sqe+0x85/0x1410 [ 233.883548][T14636] io_submit_sqes+0xb24/0x28e0 [ 233.883582][T14636] __do_sys_io_uring_enter+0xd6b/0x1630 [ 233.883607][T14636] ? __fget_files+0x20e/0x3c0 [ 233.883634][T14636] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 233.883658][T14636] ? fput+0x70/0xf0 [ 233.883674][T14636] ? ksys_write+0x1ac/0x250 [ 233.883697][T14636] ? __pfx_ksys_write+0x10/0x10 [ 233.883721][T14636] ? fdget+0x187/0x210 [ 233.883750][T14636] do_syscall_64+0xcd/0xf80 [ 233.883776][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.883795][T14636] RIP: 0033:0x7f4ea7b8f7c9 [ 233.883811][T14636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.883829][T14636] RSP: 002b:00007f4ea8aca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 233.883847][T14636] RAX: ffffffffffffffda RBX: 00007f4ea7de5fa0 RCX: 00007f4ea7b8f7c9 [ 233.883859][T14636] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 233.883870][T14636] RBP: 00007f4ea8aca090 R08: 0000000000000000 R09: 0000000000000000 [ 233.883882][T14636] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 233.883892][T14636] R13: 00007f4ea7de6038 R14: 00007f4ea7de5fa0 R15: 00007fffc2f15e98 [ 233.883919][T14636] [ 233.929556][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.008994][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.009294][ T5945] Bluetooth: hci0: command tx timeout [ 234.015961][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.018859][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.022794][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.025515][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.028768][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.032823][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.035819][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.038994][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.042074][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: unknown main item tag 0x0 [ 234.049294][ T6021] hid-generic 0004:FFFFFFFF:FFFFFFFD.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 234.090259][T14649] futex_wake_op: syz.2.2433 tries to shift op by 32; fix this program [ 234.139596][T14654] random: crng reseeded on system resumption [ 234.155999][T14654] tipc: Started in network mode [ 234.157952][T14654] tipc: Node identity 0647de93995b, cluster identity 4711 [ 234.161230][T14654] tipc: Enabled bearer , priority 0 [ 234.164246][T14654] syzkaller0: entered promiscuous mode [ 234.166499][T14654] syzkaller0: entered allmulticast mode [ 234.173365][T14654] tipc: Resetting bearer [ 234.184989][T14651] tipc: Resetting bearer [ 234.195962][T14651] tipc: Disabling bearer [ 234.261991][ T4000] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 234.282839][T14662] netlink: 'syz.2.2437': attribute type 16 has an invalid length. [ 234.285370][T14662] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2437'. [ 234.402345][ T4000] usb 9-1: device descriptor read/64, error -71 [ 234.483822][T14679] FAULT_INJECTION: forcing a failure. [ 234.483822][T14679] name failslab, interval 1, probability 0, space 0, times 0 [ 234.488730][T14679] CPU: 2 UID: 0 PID: 14679 Comm: syz.2.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.488749][T14679] Tainted: [L]=SOFTLOCKUP [ 234.488752][T14679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.488759][T14679] Call Trace: [ 234.488763][T14679] [ 234.488767][T14679] dump_stack_lvl+0x16c/0x1f0 [ 234.488785][T14679] should_fail_ex+0x512/0x640 [ 234.488802][T14679] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 234.488816][T14679] should_failslab+0xc2/0x120 [ 234.488831][T14679] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 234.488843][T14679] ? __d_alloc+0x35/0xa80 [ 234.488856][T14679] ? __d_alloc+0x35/0xa80 [ 234.488864][T14679] __d_alloc+0x35/0xa80 [ 234.488875][T14679] d_alloc_parallel+0x111/0x1510 [ 234.488892][T14679] ? find_held_lock+0x2b/0x80 [ 234.488910][T14679] ? __pfx_d_alloc_parallel+0x10/0x10 [ 234.488925][T14679] ? __d_lookup+0x266/0x4a0 [ 234.488942][T14679] lookup_open.isra.0+0x66c/0x1780 [ 234.488959][T14679] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 234.488980][T14679] ? mnt_get_write_access+0x1e9/0x2f0 [ 234.488995][T14679] path_openat+0x12bb/0x3140 [ 234.489015][T14679] ? __pfx_path_openat+0x10/0x10 [ 234.489036][T14679] do_filp_open+0x20b/0x470 [ 234.489052][T14679] ? __pfx_do_filp_open+0x10/0x10 [ 234.489078][T14679] ? alloc_fd+0x471/0x7d0 [ 234.489098][T14679] do_sys_openat2+0x121/0x290 [ 234.489108][T14679] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.489120][T14679] ? __fget_files+0x20e/0x3c0 [ 234.489138][T14679] __x64_sys_openat+0x174/0x210 [ 234.489148][T14679] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.489158][T14679] ? ksys_write+0x1ac/0x250 [ 234.489177][T14679] do_syscall_64+0xcd/0xf80 [ 234.489193][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.489204][T14679] RIP: 0033:0x7fcf42b8f7c9 [ 234.489213][T14679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.489223][T14679] RSP: 002b:00007fcf43a8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.489234][T14679] RAX: ffffffffffffffda RBX: 00007fcf42de6090 RCX: 00007fcf42b8f7c9 [ 234.489241][T14679] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 234.489248][T14679] RBP: 00007fcf43a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.489254][T14679] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 234.489260][T14679] R13: 00007fcf42de6128 R14: 00007fcf42de6090 R15: 00007fff46d1ce38 [ 234.489281][T14679] [ 234.509871][ T40] audit: type=1400 audit(1767000190.929:1077): avc: denied { listen } for pid=14680 comm="syz.5.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 234.561210][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 234.587255][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 234.643845][ T4000] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 234.654343][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.784945][ T4000] usb 9-1: device descriptor read/64, error -71 [ 234.905732][ T4000] usb usb9-port1: attempt power cycle [ 234.989038][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.125765][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.129199][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.132737][ T40] audit: type=1400 audit(1767000191.545:1078): avc: denied { read } for pid=14711 comm="syz.5.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.248161][ T4000] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 235.268798][ T4000] usb 9-1: device descriptor read/8, error -71 [ 235.369439][ T6021] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 235.479869][ T6024] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 235.520070][ T4000] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 235.520640][ T6021] usb 10-1: no configurations [ 235.524539][ T6021] usb 10-1: can't read configurations, error -22 [ 235.540756][ T4000] usb 9-1: device descriptor read/8, error -71 [ 235.640917][ T6024] usb 6-1: Invalid ep0 maxpacket: 64 [ 235.661218][ T6021] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 235.664815][ T4000] usb usb9-port1: unable to enumerate USB device [ 235.701386][ T5945] Bluetooth: hci2: command 0x0401 tx timeout [ 235.711517][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.771944][ T6024] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 235.842782][ T6021] usb 10-1: no configurations [ 235.844410][ T6021] usb 10-1: can't read configurations, error -22 [ 235.850676][ T6021] usb usb10-port1: attempt power cycle [ 235.865689][T14737] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 235.869512][T14737] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 235.875333][T14737] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 235.878815][T14737] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 235.882223][T14737] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 235.885782][T14737] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 235.891405][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'. [ 235.932762][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2464'. [ 235.932935][ T6024] usb 6-1: Invalid ep0 maxpacket: 64 [ 235.935896][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2464'. [ 235.938000][ T6024] usb usb6-port1: attempt power cycle [ 236.010414][T14741] ntfs3(sr0): try to read out of volume at offset 0x0 [ 236.034079][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.104211][ T5945] Bluetooth: hci0: command tx timeout [ 236.112318][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'. [ 236.115723][T14741] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.204856][ T6021] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 236.226519][ T6021] usb 10-1: no configurations [ 236.228247][ T6021] usb 10-1: can't read configurations, error -22 [ 236.285460][ T6024] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 236.306012][ T6024] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.355949][ T6021] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 236.377138][ T6021] usb 10-1: no configurations [ 236.378696][ T6021] usb 10-1: can't read configurations, error -22 [ 236.380841][ T6021] usb usb10-port1: unable to enumerate USB device [ 236.436568][ T6024] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 236.457481][ T6024] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.459512][ T6024] usb usb6-port1: unable to enumerate USB device [ 236.851296][T14745] FAULT_INJECTION: forcing a failure. [ 236.851296][T14745] name failslab, interval 1, probability 0, space 0, times 0 [ 236.855289][T14745] CPU: 1 UID: 0 PID: 14745 Comm: syz.2.2465 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.855306][T14745] Tainted: [L]=SOFTLOCKUP [ 236.855310][T14745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.855317][T14745] Call Trace: [ 236.855321][T14745] [ 236.855325][T14745] dump_stack_lvl+0x16c/0x1f0 [ 236.855346][T14745] should_fail_ex+0x512/0x640 [ 236.855363][T14745] ? __kmalloc_cache_noprof+0x5f/0x800 [ 236.855383][T14745] should_failslab+0xc2/0x120 [ 236.855398][T14745] __kmalloc_cache_noprof+0x80/0x800 [ 236.855416][T14745] ? trace_kmem_cache_alloc+0x28/0xb0 [ 236.855429][T14745] ? fuse_dentry_init+0x45/0x100 [ 236.855445][T14745] ? __pfx_fuse_dentry_init+0x10/0x10 [ 236.855461][T14745] ? fuse_dentry_init+0x45/0x100 [ 236.855476][T14745] fuse_dentry_init+0x45/0x100 [ 236.855490][T14745] ? __pfx_fuse_dentry_init+0x10/0x10 [ 236.855505][T14745] __d_alloc+0x628/0xa80 [ 236.855517][T14745] d_alloc_parallel+0x111/0x1510 [ 236.855534][T14745] ? find_held_lock+0x2b/0x80 [ 236.855553][T14745] ? __pfx_d_alloc_parallel+0x10/0x10 [ 236.855568][T14745] ? __d_lookup+0x266/0x4a0 [ 236.855584][T14745] lookup_open.isra.0+0x66c/0x1780 [ 236.855602][T14745] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 236.855623][T14745] ? mnt_get_write_access+0x1e9/0x2f0 [ 236.855638][T14745] path_openat+0x12bb/0x3140 [ 236.855658][T14745] ? __pfx_path_openat+0x10/0x10 [ 236.855679][T14745] do_filp_open+0x20b/0x470 [ 236.855695][T14745] ? __pfx_do_filp_open+0x10/0x10 [ 236.855721][T14745] ? alloc_fd+0x471/0x7d0 [ 236.855741][T14745] do_sys_openat2+0x121/0x290 [ 236.855752][T14745] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.855764][T14745] ? __fget_files+0x20e/0x3c0 [ 236.855782][T14745] __x64_sys_openat+0x174/0x210 [ 236.855792][T14745] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.855802][T14745] ? ksys_write+0x1ac/0x250 [ 236.855821][T14745] do_syscall_64+0xcd/0xf80 [ 236.855837][T14745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.855848][T14745] RIP: 0033:0x7fcf42b8f7c9 [ 236.855857][T14745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.855868][T14745] RSP: 002b:00007fcf43a8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.855878][T14745] RAX: ffffffffffffffda RBX: 00007fcf42de6090 RCX: 00007fcf42b8f7c9 [ 236.855885][T14745] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 236.855892][T14745] RBP: 00007fcf43a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.855898][T14745] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 236.855904][T14745] R13: 00007fcf42de6128 R14: 00007fcf42de6090 R15: 00007fff46d1ce38 [ 236.855919][T14745] [ 237.081786][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.304739][T14756] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2469'. [ 237.307871][T14756] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2469'. [ 237.715563][ T4000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.728388][T14767] Illegal XDP return value 1320642069 on prog (id 250) dev syz_tun, expect packet loss! [ 237.763094][T14777] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 238.118798][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.170139][T14797] FAULT_INJECTION: forcing a failure. [ 238.170139][T14797] name failslab, interval 1, probability 0, space 0, times 0 [ 238.175616][T14797] CPU: 3 UID: 0 PID: 14797 Comm: syz.4.2481 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.175634][T14797] Tainted: [L]=SOFTLOCKUP [ 238.175638][T14797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.175645][T14797] Call Trace: [ 238.175649][T14797] [ 238.175654][T14797] dump_stack_lvl+0x16c/0x1f0 [ 238.175672][T14797] should_fail_ex+0x512/0x640 [ 238.175690][T14797] ? __kmalloc_cache_noprof+0x5f/0x800 [ 238.175710][T14797] should_failslab+0xc2/0x120 [ 238.175725][T14797] __kmalloc_cache_noprof+0x80/0x800 [ 238.175742][T14797] ? lookup_open.isra.0+0x66c/0x1780 [ 238.175755][T14797] ? path_openat+0x12bb/0x3140 [ 238.175770][T14797] ? do_filp_open+0x20b/0x470 [ 238.175784][T14797] ? fuse_lookup_name+0x19f/0x780 [ 238.175801][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.175815][T14797] ? fuse_lookup_name+0x19f/0x780 [ 238.175831][T14797] fuse_lookup_name+0x19f/0x780 [ 238.175850][T14797] ? __pfx_fuse_lookup_name+0x10/0x10 [ 238.175880][T14797] fuse_lookup+0x26a/0x560 [ 238.175898][T14797] ? __pfx_fuse_lookup+0x10/0x10 [ 238.175915][T14797] ? d_alloc_parallel+0x864/0x1510 [ 238.175934][T14797] ? __pfx_d_alloc_parallel+0x10/0x10 [ 238.175951][T14797] fuse_atomic_open+0x2fc/0x460 [ 238.175969][T14797] ? __pfx_fuse_atomic_open+0x10/0x10 [ 238.175986][T14797] lookup_open.isra.0+0x844/0x1780 [ 238.176002][T14797] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 238.176024][T14797] ? mnt_get_write_access+0x1e9/0x2f0 [ 238.176039][T14797] path_openat+0x12bb/0x3140 [ 238.176059][T14797] ? __pfx_path_openat+0x10/0x10 [ 238.176080][T14797] do_filp_open+0x20b/0x470 [ 238.176096][T14797] ? __pfx_do_filp_open+0x10/0x10 [ 238.176122][T14797] ? alloc_fd+0x471/0x7d0 [ 238.176142][T14797] do_sys_openat2+0x121/0x290 [ 238.176152][T14797] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.176164][T14797] ? __fget_files+0x20e/0x3c0 [ 238.176181][T14797] __x64_sys_openat+0x174/0x210 [ 238.176192][T14797] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.176202][T14797] ? ksys_write+0x1ac/0x250 [ 238.176220][T14797] do_syscall_64+0xcd/0xf80 [ 238.176236][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.176247][T14797] RIP: 0033:0x7f4ea7b8f7c9 [ 238.176255][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.176266][T14797] RSP: 002b:00007f4ea8aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.176276][T14797] RAX: ffffffffffffffda RBX: 00007f4ea7de6090 RCX: 00007f4ea7b8f7c9 [ 238.176283][T14797] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 238.176290][T14797] RBP: 00007f4ea8aa9090 R08: 0000000000000000 R09: 0000000000000000 [ 238.176296][T14797] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 238.176302][T14797] R13: 00007f4ea7de6128 R14: 00007f4ea7de6090 R15: 00007fffc2f15e98 [ 238.176316][T14797] [ 238.271217][ T5945] Bluetooth: hci0: command tx timeout [ 238.579457][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 238.583580][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 238.713105][T14833] openvswitch: netlink: Key type 31 is not supported [ 238.764658][T14838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3438862494 (440174399232 ns) > initial count (403030782080 ns). Using initial count to start timer. [ 238.996723][T14843] FAULT_INJECTION: forcing a failure. [ 238.996723][T14843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.001251][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.2.2493 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.001268][T14843] Tainted: [L]=SOFTLOCKUP [ 239.001272][T14843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.001279][T14843] Call Trace: [ 239.001290][T14843] [ 239.001294][T14843] dump_stack_lvl+0x16c/0x1f0 [ 239.001327][T14843] should_fail_ex+0x512/0x640 [ 239.001351][T14843] _copy_to_iter+0x29f/0x1710 [ 239.001372][T14843] ? __pfx__copy_to_iter+0x10/0x10 [ 239.001388][T14843] ? const_folio_flags+0x5b/0x100 [ 239.001399][T14843] ? folio_mark_accessed+0xc1/0xbf0 [ 239.001411][T14843] ? __pfx_folio_mark_accessed+0x10/0x10 [ 239.001426][T14843] copy_page_to_iter+0x12a/0x1e0 [ 239.001444][T14843] filemap_read+0x6b1/0xe40 [ 239.001462][T14843] ? __pfx_filemap_read+0x10/0x10 [ 239.001483][T14843] ? __pfx_down_read+0x10/0x10 [ 239.001500][T14843] ? avc_policy_seqno+0x9/0x20 [ 239.001517][T14843] ? selinux_file_permission+0x126/0x660 [ 239.001534][T14843] blkdev_read_iter+0x1ac/0x500 [ 239.001548][T14843] ? __pfx_blkdev_read_iter+0x10/0x10 [ 239.001558][T14843] __io_read+0x357/0x14b0 [ 239.001575][T14843] ? __io_import_rw_buffer+0x245/0x6f0 [ 239.001596][T14843] io_read+0x8d/0x1f0 [ 239.001605][T14843] ? __pfx_io_read+0x10/0x10 [ 239.001619][T14843] __io_issue_sqe+0xe8/0x7c0 [ 239.001637][T14843] io_issue_sqe+0x85/0x1410 [ 239.001650][T14843] io_submit_sqes+0xb24/0x28e0 [ 239.001669][T14843] __do_sys_io_uring_enter+0xd6b/0x1630 [ 239.001682][T14843] ? __fget_files+0x20e/0x3c0 [ 239.001698][T14843] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 239.001712][T14843] ? fput+0x70/0xf0 [ 239.001802][T14843] ? ksys_write+0x1ac/0x250 [ 239.001816][T14843] ? __pfx_ksys_write+0x10/0x10 [ 239.001830][T14843] ? fdget+0x187/0x210 [ 239.001848][T14843] do_syscall_64+0xcd/0xf80 [ 239.001863][T14843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.001875][T14843] RIP: 0033:0x7fcf42b8f7c9 [ 239.001885][T14843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.001895][T14843] RSP: 002b:00007fcf43aad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 239.001906][T14843] RAX: ffffffffffffffda RBX: 00007fcf42de5fa0 RCX: 00007fcf42b8f7c9 [ 239.001913][T14843] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 239.001919][T14843] RBP: 00007fcf43aad090 R08: 0000000000000000 R09: 0000000000000000 [ 239.001925][T14843] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 239.001932][T14843] R13: 00007fcf42de6038 R14: 00007fcf42de5fa0 R15: 00007fff46d1ce38 [ 239.001946][T14843] [ 239.134705][T14848] FAULT_INJECTION: forcing a failure. [ 239.134705][T14848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.140062][T14848] CPU: 2 UID: 0 PID: 14848 Comm: syz.4.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.140080][T14848] Tainted: [L]=SOFTLOCKUP [ 239.140084][T14848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.140091][T14848] Call Trace: [ 239.140095][T14848] [ 239.140099][T14848] dump_stack_lvl+0x16c/0x1f0 [ 239.140117][T14848] should_fail_ex+0x512/0x640 [ 239.140137][T14848] should_fail_alloc_page+0xe7/0x130 [ 239.140153][T14848] prepare_alloc_pages+0x401/0x670 [ 239.140169][T14848] ? rcu_is_watching+0x12/0xc0 [ 239.140181][T14848] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 239.140197][T14848] ? __pfx_mas_split+0x10/0x10 [ 239.140215][T14848] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 239.140239][T14848] ? __lock_acquire+0x436/0x2890 [ 239.140254][T14848] ? __lock_acquire+0x436/0x2890 [ 239.140266][T14848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.140280][T14848] ? policy_nodemask+0xea/0x4e0 [ 239.140296][T14848] alloc_pages_mpol+0x1fb/0x550 [ 239.140311][T14848] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 239.140329][T14848] folio_alloc_mpol_noprof+0x36/0x2f0 [ 239.140347][T14848] vma_alloc_folio_noprof+0xed/0x1e0 [ 239.140364][T14848] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 239.140385][T14848] do_anonymous_page+0xc81/0x2190 [ 239.140408][T14848] __handle_mm_fault+0x1ecf/0x2bb0 [ 239.140429][T14848] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.140455][T14848] ? find_vma+0xbf/0x140 [ 239.140467][T14848] ? __pfx_find_vma+0x10/0x10 [ 239.140481][T14848] handle_mm_fault+0x3fe/0xad0 [ 239.140501][T14848] do_user_addr_fault+0x7a6/0x1370 [ 239.140517][T14848] ? rcu_is_watching+0x12/0xc0 [ 239.140529][T14848] exc_page_fault+0x64/0xc0 [ 239.140543][T14848] asm_exc_page_fault+0x26/0x30 [ 239.140554][T14848] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 239.140570][T14848] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 3d 5e 14 fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 ce 3f 7e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 239.140581][T14848] RSP: 0018:ffffc9000d7f76c0 EFLAGS: 00050246 [ 239.140590][T14848] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 239.140597][T14848] RDX: 0000000000000000 RSI: ffff888062c65000 RDI: 00002000000e5000 [ 239.140603][T14848] RBP: 00002000000e5000 R08: 0000000000000000 R09: ffffed100c58cbff [ 239.140610][T14848] R10: ffff888062c65fff R11: 0000000000000000 R12: ffff88803e113e20 [ 239.140616][T14848] R13: 00002000000e6000 R14: ffff888062c65000 R15: 00007ffffffff000 [ 239.140635][T14848] ? __pfx__copy_to_iter+0x10/0x10 [ 239.140652][T14848] ? const_folio_flags+0x5b/0x100 [ 239.140662][T14848] ? folio_mark_accessed+0xc1/0xbf0 [ 239.140674][T14848] ? __pfx_folio_mark_accessed+0x10/0x10 [ 239.140689][T14848] copy_page_to_iter+0x12a/0x1e0 [ 239.140707][T14848] filemap_read+0x6b1/0xe40 [ 239.140725][T14848] ? __pfx_filemap_read+0x10/0x10 [ 239.140747][T14848] ? __pfx_down_read+0x10/0x10 [ 239.140763][T14848] ? avc_policy_seqno+0x9/0x20 [ 239.140780][T14848] ? selinux_file_permission+0x126/0x660 [ 239.140798][T14848] blkdev_read_iter+0x1ac/0x500 [ 239.140812][T14848] ? __pfx_blkdev_read_iter+0x10/0x10 [ 239.140822][T14848] __io_read+0x357/0x14b0 [ 239.140839][T14848] ? __io_import_rw_buffer+0x245/0x6f0 [ 239.140860][T14848] io_read+0x8d/0x1f0 [ 239.140869][T14848] ? __pfx_io_read+0x10/0x10 [ 239.140883][T14848] __io_issue_sqe+0xe8/0x7c0 [ 239.140900][T14848] io_issue_sqe+0x85/0x1410 [ 239.140914][T14848] io_submit_sqes+0xb24/0x28e0 [ 239.140933][T14848] __do_sys_io_uring_enter+0xd6b/0x1630 [ 239.140947][T14848] ? __fget_files+0x20e/0x3c0 [ 239.140963][T14848] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 239.140976][T14848] ? fput+0x70/0xf0 [ 239.140986][T14848] ? ksys_write+0x1ac/0x250 [ 239.140999][T14848] ? __pfx_ksys_write+0x10/0x10 [ 239.141014][T14848] ? fdget+0x187/0x210 [ 239.141031][T14848] do_syscall_64+0xcd/0xf80 [ 239.141046][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.141056][T14848] RIP: 0033:0x7f4ea7b8f7c9 [ 239.141065][T14848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.141075][T14848] RSP: 002b:00007f4ea8aca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 239.141084][T14848] RAX: ffffffffffffffda RBX: 00007f4ea7de5fa0 RCX: 00007f4ea7b8f7c9 [ 239.141091][T14848] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 239.141097][T14848] RBP: 00007f4ea8aca090 R08: 0000000000000000 R09: 0000000000000000 [ 239.141104][T14848] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 239.141110][T14848] R13: 00007f4ea7de6038 R14: 00007f4ea7de5fa0 R15: 00007fffc2f15e98 [ 239.141124][T14848] [ 239.300952][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.511866][T14873] FAULT_INJECTION: forcing a failure. [ 239.511866][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 239.516067][T14873] CPU: 2 UID: 0 PID: 14873 Comm: syz.2.2502 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.516090][T14873] Tainted: [L]=SOFTLOCKUP [ 239.516097][T14873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.516106][T14873] Call Trace: [ 239.516112][T14873] [ 239.516118][T14873] dump_stack_lvl+0x16c/0x1f0 [ 239.516145][T14873] should_fail_ex+0x512/0x640 [ 239.516169][T14873] ? kmem_cache_alloc_noprof+0x62/0x770 [ 239.516190][T14873] should_failslab+0xc2/0x120 [ 239.516212][T14873] kmem_cache_alloc_noprof+0x83/0x770 [ 239.516236][T14873] ? path_openat+0x12bb/0x3140 [ 239.516259][T14873] ? do_filp_open+0x20b/0x470 [ 239.516282][T14873] ? fuse_request_alloc+0x22/0x200 [ 239.516306][T14873] ? fuse_request_alloc+0x22/0x200 [ 239.516324][T14873] fuse_request_alloc+0x22/0x200 [ 239.516343][T14873] fuse_get_req+0x748/0xff0 [ 239.516370][T14873] ? __pfx_fuse_get_req+0x10/0x10 [ 239.516403][T14873] __fuse_simple_request+0xb5/0xe20 [ 239.516424][T14873] ? __asan_memset+0x23/0x50 [ 239.516445][T14873] fuse_lookup_name+0x2ad/0x780 [ 239.516477][T14873] ? __pfx_fuse_lookup_name+0x10/0x10 [ 239.516528][T14873] fuse_lookup+0x26a/0x560 [ 239.516557][T14873] ? __pfx_fuse_lookup+0x10/0x10 [ 239.516584][T14873] ? d_alloc_parallel+0x864/0x1510 [ 239.516617][T14873] ? __pfx_d_alloc_parallel+0x10/0x10 [ 239.516645][T14873] fuse_atomic_open+0x2fc/0x460 [ 239.516674][T14873] ? __pfx_fuse_atomic_open+0x10/0x10 [ 239.516702][T14873] lookup_open.isra.0+0x844/0x1780 [ 239.516730][T14873] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 239.516784][T14873] ? mnt_get_write_access+0x1e9/0x2f0 [ 239.516810][T14873] path_openat+0x12bb/0x3140 [ 239.516843][T14873] ? __pfx_path_openat+0x10/0x10 [ 239.516878][T14873] do_filp_open+0x20b/0x470 [ 239.516904][T14873] ? __pfx_do_filp_open+0x10/0x10 [ 239.516946][T14873] ? alloc_fd+0x471/0x7d0 [ 239.516967][T14873] do_sys_openat2+0x121/0x290 [ 239.516978][T14873] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.516990][T14873] ? __fget_files+0x20e/0x3c0 [ 239.517008][T14873] __x64_sys_openat+0x174/0x210 [ 239.517019][T14873] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.517029][T14873] ? ksys_write+0x1ac/0x250 [ 239.517048][T14873] do_syscall_64+0xcd/0xf80 [ 239.517063][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.517075][T14873] RIP: 0033:0x7fcf42b8f7c9 [ 239.517085][T14873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.517095][T14873] RSP: 002b:00007fcf43a8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.517106][T14873] RAX: ffffffffffffffda RBX: 00007fcf42de6090 RCX: 00007fcf42b8f7c9 [ 239.517113][T14873] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 239.517120][T14873] RBP: 00007fcf43a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.517126][T14873] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 239.517132][T14873] R13: 00007fcf42de6128 R14: 00007fcf42de6090 R15: 00007fff46d1ce38 [ 239.517147][T14873] [ 239.663203][T14881] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 239.667470][ T40] audit: type=1400 audit(1767000195.992:1079): avc: denied { relabelto } for pid=14880 comm="syz.5.2506" name="269" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.679202][ T40] audit: type=1400 audit(1767000196.001:1080): avc: denied { associate } for pid=14880 comm="syz.5.2506" name="269" dev="tmpfs" ino=1450 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.698926][T14883] vivid-000: ================= START STATUS ================= [ 239.701497][ T40] audit: type=1400 audit(1767000196.020:1081): avc: denied { remove_name } for pid=11142 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.702575][T14883] vivid-000: Test Pattern: [ 239.711698][ T40] audit: type=1400 audit(1767000196.029:1082): avc: denied { rmdir } for pid=11142 comm="syz-executor" name="269" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.725538][T14883] 75% Colorbar [ 239.726653][T14883] vivid-000: Fill Percentage of Frame: 100 [ 239.728557][T14883] vivid-000: Horizontal Movement: No Movement [ 239.730525][T14883] vivid-000: Vertical Movement: No Movement [ 239.732452][T14883] vivid-000: OSD Text Mode: Counters Only [ 239.734310][T14883] vivid-000: Show Border: true [ 239.736006][T14883] vivid-000: Show Square: true [ 239.737527][T14883] vivid-000: Sensor Flipped Horizontally: true [ 239.739496][T14883] vivid-000: Sensor Flipped Vertically: false [ 239.741433][T14883] vivid-000: Insert SAV Code in Image: false [ 239.743384][T14883] vivid-000: Insert EAV Code in Image: false [ 239.745356][T14883] vivid-000: Insert Video Guard Band: false [ 239.747813][T14883] vivid-000: Reduced Framerate: false [ 239.749530][T14883] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 239.751918][T14883] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 239.754526][T14883] vivid-000: Enable Capture Cropping: true [ 239.756686][T14883] vivid-000: Enable Capture Composing: true [ 239.758599][T14883] vivid-000: Enable Capture Scaler: true [ 239.760388][T14883] vivid-000: Timestamp Source: End of Frame [ 239.762281][T14883] vivid-000: Colorspace: sRGB [ 239.763832][T14883] vivid-000: Transfer Function: Default [ 239.765594][T14883] vivid-000: Y'CbCr Encoding: Default [ 239.767366][T14883] vivid-000: HSV Encoding: Hue 0-179 [ 239.769056][T14883] vivid-000: Quantization: Default [ 239.771273][T14883] vivid-000: Apply Alpha To Red Only: true [ 239.773098][T14883] vivid-000: Standard Aspect Ratio: 4x3 [ 239.774876][T14883] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 239.777360][T14883] vivid-000: DV Timings: 640x480p59 inactive [ 239.779370][T14883] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 239.781706][T14883] vivid-000: Maximum EDID Blocks: 2 [ 239.783409][T14883] vivid-000: Limited RGB Range (16-235): false [ 239.785429][T14883] vivid-000: Rx RGB Quantization Range: Automatic [ 239.787481][T14883] vivid-000: Power Present: 0x00000001 [ 239.789386][T14883] tpg source WxH: 320x240 (Y'CbCr) [ 239.791033][T14883] tpg field: 1 [ 239.792158][T14883] tpg crop: (0,0)/320x240 [ 239.793555][T14883] tpg compose: (0,0)/320x240 [ 239.795069][T14883] tpg colorspace: 8 [ 239.796335][T14883] tpg transfer function: 0/2 [ 239.797847][T14883] tpg Y'CbCr encoding: 0/1 [ 239.799330][T14883] tpg quantization: 0/1 [ 239.800786][T14883] tpg RGB range: 0/2 [ 239.802080][T14883] vivid-000: ================== END STATUS ================== [ 239.824995][T14889] netlink: 'syz.5.2508': attribute type 1 has an invalid length. [ 239.884486][T14895] FAULT_INJECTION: forcing a failure. [ 239.884486][T14895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.889150][T14895] CPU: 3 UID: 0 PID: 14895 Comm: syz.4.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.889168][T14895] Tainted: [L]=SOFTLOCKUP [ 239.889171][T14895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.889179][T14895] Call Trace: [ 239.889182][T14895] [ 239.889187][T14895] dump_stack_lvl+0x16c/0x1f0 [ 239.889205][T14895] should_fail_ex+0x512/0x640 [ 239.889224][T14895] _copy_to_iter+0x29f/0x1710 [ 239.889244][T14895] ? __pfx__copy_to_iter+0x10/0x10 [ 239.889260][T14895] ? const_folio_flags+0x5b/0x100 [ 239.889271][T14895] ? folio_mark_accessed+0xc1/0xbf0 [ 239.889284][T14895] ? __pfx_folio_mark_accessed+0x10/0x10 [ 239.889299][T14895] copy_page_to_iter+0x12a/0x1e0 [ 239.889317][T14895] filemap_read+0x6b1/0xe40 [ 239.889336][T14895] ? __pfx_filemap_read+0x10/0x10 [ 239.889357][T14895] ? __pfx_down_read+0x10/0x10 [ 239.889374][T14895] ? avc_policy_seqno+0x9/0x20 [ 239.889391][T14895] ? selinux_file_permission+0x126/0x660 [ 239.889409][T14895] blkdev_read_iter+0x1ac/0x500 [ 239.889422][T14895] ? __pfx_blkdev_read_iter+0x10/0x10 [ 239.889432][T14895] __io_read+0x357/0x14b0 [ 239.889449][T14895] ? __io_import_rw_buffer+0x245/0x6f0 [ 239.889469][T14895] io_read+0x8d/0x1f0 [ 239.889479][T14895] ? __pfx_io_read+0x10/0x10 [ 239.889493][T14895] __io_issue_sqe+0xe8/0x7c0 [ 239.889510][T14895] io_issue_sqe+0x85/0x1410 [ 239.889523][T14895] io_submit_sqes+0xb24/0x28e0 [ 239.889547][T14895] __do_sys_io_uring_enter+0xd6b/0x1630 [ 239.889573][T14895] ? __fget_files+0x20e/0x3c0 [ 239.889599][T14895] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 239.889623][T14895] ? fput+0x70/0xf0 [ 239.889639][T14895] ? ksys_write+0x1ac/0x250 [ 239.889660][T14895] ? __pfx_ksys_write+0x10/0x10 [ 239.889674][T14895] ? fdget+0x187/0x210 [ 239.889691][T14895] do_syscall_64+0xcd/0xf80 [ 239.889707][T14895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.889719][T14895] RIP: 0033:0x7f4ea7b8f7c9 [ 239.889728][T14895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.889739][T14895] RSP: 002b:00007f4ea8aca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 239.889749][T14895] RAX: ffffffffffffffda RBX: 00007f4ea7de5fa0 RCX: 00007f4ea7b8f7c9 [ 239.889756][T14895] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 239.889763][T14895] RBP: 00007f4ea8aca090 R08: 0000000000000000 R09: 0000000000000000 [ 239.889769][T14895] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 239.889775][T14895] R13: 00007f4ea7de6038 R14: 00007f4ea7de5fa0 R15: 00007fffc2f15e98 [ 239.889790][T14895] [ 240.131988][T14903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.135546][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.139662][T14903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.143843][ T8577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.146986][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.204413][T14905] netlink: 'syz.4.2513': attribute type 2 has an invalid length. [ 240.409953][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.502649][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2518'. [ 240.514163][T14915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.521624][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 240.633461][ T6021] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 240.648134][ T40] audit: type=1400 audit(1767000196.908:1083): avc: denied { ioctl } for pid=14919 comm="syz.1.2519" path="socket:[61657]" dev="sockfs" ino=61657 ioctlcmd=0xab scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 240.776271][ T6021] usb 7-1: device descriptor read/64, error -71 [ 240.922442][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.029083][ T6021] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 241.096104][ T40] audit: type=1400 audit(1767000197.329:1084): avc: denied { map } for pid=14923 comm="syz.4.2520" path="socket:[61661]" dev="sockfs" ino=61661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 241.137071][T14926] input: syz0 as /devices/virtual/input/input24 [ 241.178869][ T6021] usb 7-1: device descriptor read/64, error -71 [ 241.307888][ T6021] usb usb7-port1: attempt power cycle [ 241.619825][T14936] netlink: 'syz.5.2524': attribute type 15 has an invalid length. [ 241.623241][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2524'. [ 241.634081][T14936] netlink: 'syz.5.2524': attribute type 15 has an invalid length. [ 241.634205][ T8787] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 241.636651][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2524'. [ 241.643924][ T8787] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 241.647399][ T8787] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 241.651581][ T8787] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 241.670683][ T6021] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 241.692418][ T6021] usb 7-1: device descriptor read/8, error -71 [ 241.761841][T14939] FAULT_INJECTION: forcing a failure. [ 241.761841][T14939] name failslab, interval 1, probability 0, space 0, times 0 [ 241.765805][T14939] CPU: 1 UID: 0 PID: 14939 Comm: syz.5.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.765822][T14939] Tainted: [L]=SOFTLOCKUP [ 241.765826][T14939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.765833][T14939] Call Trace: [ 241.765838][T14939] [ 241.765843][T14939] dump_stack_lvl+0x16c/0x1f0 [ 241.765860][T14939] should_fail_ex+0x512/0x640 [ 241.765877][T14939] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 241.765890][T14939] ? __pfx_fuse_inode_eq+0x10/0x10 [ 241.765906][T14939] ? __pfx_fuse_inode_set+0x10/0x10 [ 241.765920][T14939] should_failslab+0xc2/0x120 [ 241.765935][T14939] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 241.765947][T14939] ? _raw_spin_unlock+0x28/0x50 [ 241.765959][T14939] ? fuse_alloc_inode+0x2c/0x1e0 [ 241.765976][T14939] ? __pfx_fuse_inode_eq+0x10/0x10 [ 241.765990][T14939] ? __pfx_fuse_inode_set+0x10/0x10 [ 241.766005][T14939] ? fuse_alloc_inode+0x2c/0x1e0 [ 241.766020][T14939] fuse_alloc_inode+0x2c/0x1e0 [ 241.766036][T14939] ? kasan_quarantine_put+0x10a/0x240 [ 241.766048][T14939] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 241.766063][T14939] alloc_inode+0x64/0x240 [ 241.766076][T14939] iget5_locked+0x67/0xb0 [ 241.766090][T14939] fuse_iget+0x200/0x8d0 [ 241.766102][T14939] ? __pfx_fuse_iget+0x10/0x10 [ 241.766113][T14939] ? __fuse_simple_request+0x60c/0xe20 [ 241.766129][T14939] fuse_lookup_name+0x481/0x780 [ 241.766149][T14939] ? __pfx_fuse_lookup_name+0x10/0x10 [ 241.766179][T14939] fuse_lookup+0x26a/0x560 [ 241.766197][T14939] ? __pfx_fuse_lookup+0x10/0x10 [ 241.766214][T14939] ? d_alloc_parallel+0x864/0x1510 [ 241.766233][T14939] ? __pfx_d_alloc_parallel+0x10/0x10 [ 241.766250][T14939] fuse_atomic_open+0x2fc/0x460 [ 241.766268][T14939] ? __pfx_fuse_atomic_open+0x10/0x10 [ 241.766285][T14939] lookup_open.isra.0+0x844/0x1780 [ 241.766307][T14939] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 241.766328][T14939] ? mnt_get_write_access+0x1e9/0x2f0 [ 241.766343][T14939] path_openat+0x12bb/0x3140 [ 241.766363][T14939] ? __pfx_path_openat+0x10/0x10 [ 241.766384][T14939] do_filp_open+0x20b/0x470 [ 241.766400][T14939] ? __pfx_do_filp_open+0x10/0x10 [ 241.766426][T14939] ? alloc_fd+0x471/0x7d0 [ 241.766445][T14939] do_sys_openat2+0x121/0x290 [ 241.766456][T14939] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.766468][T14939] ? __fget_files+0x20e/0x3c0 [ 241.766485][T14939] __x64_sys_openat+0x174/0x210 [ 241.766496][T14939] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.766506][T14939] ? ksys_write+0x1ac/0x250 [ 241.766524][T14939] do_syscall_64+0xcd/0xf80 [ 241.766540][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.766552][T14939] RIP: 0033:0x7f8c5698f7c9 [ 241.766561][T14939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.766571][T14939] RSP: 002b:00007f8c57778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.766582][T14939] RAX: ffffffffffffffda RBX: 00007f8c56be6090 RCX: 00007f8c5698f7c9 [ 241.766589][T14939] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 241.766595][T14939] RBP: 00007f8c57778090 R08: 0000000000000000 R09: 0000000000000000 [ 241.766601][T14939] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 241.766608][T14939] R13: 00007f8c56be6128 R14: 00007f8c56be6090 R15: 00007ffed28941a8 [ 241.766622][T14939] [ 241.959560][ T6021] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 241.992359][ T6021] usb 7-1: device descriptor read/8, error -71 [ 242.102812][T14946] FAULT_INJECTION: forcing a failure. [ 242.102812][T14946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.107106][T14946] CPU: 2 UID: 0 PID: 14946 Comm: syz.1.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.107124][T14946] Tainted: [L]=SOFTLOCKUP [ 242.107129][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.107135][T14946] Call Trace: [ 242.107140][T14946] [ 242.107144][T14946] dump_stack_lvl+0x16c/0x1f0 [ 242.107163][T14946] should_fail_ex+0x512/0x640 [ 242.107182][T14946] _copy_to_iter+0x29f/0x1710 [ 242.107203][T14946] ? __pfx__copy_to_iter+0x10/0x10 [ 242.107245][T14946] ? const_folio_flags+0x5b/0x100 [ 242.107256][T14946] ? folio_mark_accessed+0xc1/0xbf0 [ 242.107269][T14946] ? __pfx_folio_mark_accessed+0x10/0x10 [ 242.107283][T14946] copy_page_to_iter+0x12a/0x1e0 [ 242.107301][T14946] filemap_read+0x6b1/0xe40 [ 242.107319][T14946] ? __pfx_filemap_read+0x10/0x10 [ 242.107340][T14946] ? __pfx_down_read+0x10/0x10 [ 242.107357][T14946] ? avc_policy_seqno+0x9/0x20 [ 242.107374][T14946] ? selinux_file_permission+0x126/0x660 [ 242.107392][T14946] blkdev_read_iter+0x1ac/0x500 [ 242.107405][T14946] ? __pfx_blkdev_read_iter+0x10/0x10 [ 242.107415][T14946] __io_read+0x357/0x14b0 [ 242.107436][T14946] ? __io_import_rw_buffer+0x245/0x6f0 [ 242.107457][T14946] io_read+0x8d/0x1f0 [ 242.107466][T14946] ? __pfx_io_read+0x10/0x10 [ 242.107480][T14946] __io_issue_sqe+0xe8/0x7c0 [ 242.107497][T14946] io_issue_sqe+0x85/0x1410 [ 242.107510][T14946] io_submit_sqes+0xb24/0x28e0 [ 242.107530][T14946] __do_sys_io_uring_enter+0xd6b/0x1630 [ 242.107543][T14946] ? __fget_files+0x20e/0x3c0 [ 242.107559][T14946] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 242.107573][T14946] ? fput+0x70/0xf0 [ 242.107582][T14946] ? ksys_write+0x1ac/0x250 [ 242.107595][T14946] ? __pfx_ksys_write+0x10/0x10 [ 242.107613][T14946] do_syscall_64+0xcd/0xf80 [ 242.107629][T14946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.107640][T14946] RIP: 0033:0x7fc691b8f7c9 [ 242.107649][T14946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.107660][T14946] RSP: 002b:00007fc69297b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 242.107671][T14946] RAX: ffffffffffffffda RBX: 00007fc691de5fa0 RCX: 00007fc691b8f7c9 [ 242.107677][T14946] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 242.107684][T14946] RBP: 00007fc69297b090 R08: 0000000000000000 R09: 0000000000000000 [ 242.107690][T14946] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 242.107696][T14946] R13: 00007fc691de6038 R14: 00007fc691de5fa0 R15: 00007fff0ea2e0d8 [ 242.107711][T14946] [ 242.109742][ T6021] usb usb7-port1: unable to enumerate USB device [ 242.130640][T14952] Cannot find del_set index 2 as target [ 242.160965][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 242.198887][T14960] FAULT_INJECTION: forcing a failure. [ 242.198887][T14960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.208263][T14960] CPU: 2 UID: 0 PID: 14960 Comm: syz.5.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.208281][T14960] Tainted: [L]=SOFTLOCKUP [ 242.208284][T14960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.208291][T14960] Call Trace: [ 242.208295][T14960] [ 242.208300][T14960] dump_stack_lvl+0x16c/0x1f0 [ 242.208318][T14960] should_fail_ex+0x512/0x640 [ 242.208337][T14960] _copy_to_iter+0x29f/0x1710 [ 242.208357][T14960] ? __pfx__copy_to_iter+0x10/0x10 [ 242.208373][T14960] ? const_folio_flags+0x5b/0x100 [ 242.208384][T14960] ? folio_mark_accessed+0xc1/0xbf0 [ 242.208396][T14960] ? __pfx_folio_mark_accessed+0x10/0x10 [ 242.208411][T14960] copy_page_to_iter+0x12a/0x1e0 [ 242.208428][T14960] filemap_read+0x6b1/0xe40 [ 242.208446][T14960] ? __pfx_filemap_read+0x10/0x10 [ 242.208467][T14960] ? __pfx_down_read+0x10/0x10 [ 242.208484][T14960] ? avc_policy_seqno+0x9/0x20 [ 242.208507][T14960] ? selinux_file_permission+0x126/0x660 [ 242.208525][T14960] blkdev_read_iter+0x1ac/0x500 [ 242.208538][T14960] ? __pfx_blkdev_read_iter+0x10/0x10 [ 242.208549][T14960] __io_read+0x357/0x14b0 [ 242.208566][T14960] ? __io_import_rw_buffer+0x245/0x6f0 [ 242.208586][T14960] io_read+0x8d/0x1f0 [ 242.208596][T14960] ? __pfx_io_read+0x10/0x10 [ 242.208610][T14960] __io_issue_sqe+0xe8/0x7c0 [ 242.208628][T14960] io_issue_sqe+0x85/0x1410 [ 242.208641][T14960] io_submit_sqes+0xb24/0x28e0 [ 242.208661][T14960] __do_sys_io_uring_enter+0xd6b/0x1630 [ 242.208675][T14960] ? __fget_files+0x20e/0x3c0 [ 242.208690][T14960] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 242.208704][T14960] ? fput+0x70/0xf0 [ 242.208714][T14960] ? ksys_write+0x1ac/0x250 [ 242.208727][T14960] ? __pfx_ksys_write+0x10/0x10 [ 242.208745][T14960] do_syscall_64+0xcd/0xf80 [ 242.208760][T14960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.208772][T14960] RIP: 0033:0x7f8c5698f7c9 [ 242.208782][T14960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.208793][T14960] RSP: 002b:00007f8c57799038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 242.208803][T14960] RAX: ffffffffffffffda RBX: 00007f8c56be5fa0 RCX: 00007f8c5698f7c9 [ 242.208810][T14960] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 242.208816][T14960] RBP: 00007f8c57799090 R08: 0000000000000000 R09: 0000000000000000 [ 242.208822][T14960] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 242.208828][T14960] R13: 00007f8c56be6038 R14: 00007f8c56be5fa0 R15: 00007ffed28941a8 [ 242.208843][T14960] [ 242.283140][T14965] FAULT_INJECTION: forcing a failure. [ 242.283140][T14965] name failslab, interval 1, probability 0, space 0, times 0 [ 242.308541][T14965] CPU: 0 UID: 0 PID: 14965 Comm: syz.1.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.308571][T14965] Tainted: [L]=SOFTLOCKUP [ 242.308577][T14965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.308588][T14965] Call Trace: [ 242.308594][T14965] [ 242.308601][T14965] dump_stack_lvl+0x16c/0x1f0 [ 242.308630][T14965] should_fail_ex+0x512/0x640 [ 242.308657][T14965] ? __kmalloc_cache_noprof+0x5f/0x800 [ 242.308690][T14965] should_failslab+0xc2/0x120 [ 242.308715][T14965] __kmalloc_cache_noprof+0x80/0x800 [ 242.308742][T14965] ? lockdep_init_map_type+0x5c/0x270 [ 242.308765][T14965] ? fuse_alloc_inode+0xf7/0x1e0 [ 242.308796][T14965] ? __pfx_fuse_inode_set+0x10/0x10 [ 242.308821][T14965] ? fuse_alloc_inode+0xf7/0x1e0 [ 242.308846][T14965] ? __pfx_fuse_inode_eq+0x10/0x10 [ 242.308869][T14965] fuse_alloc_inode+0xf7/0x1e0 [ 242.308894][T14965] ? kasan_quarantine_put+0x10a/0x240 [ 242.308913][T14965] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 242.308939][T14965] alloc_inode+0x64/0x240 [ 242.308961][T14965] iget5_locked+0x67/0xb0 [ 242.308984][T14965] fuse_iget+0x200/0x8d0 [ 242.309006][T14965] ? __pfx_fuse_iget+0x10/0x10 [ 242.309025][T14965] ? __fuse_simple_request+0x60c/0xe20 [ 242.309052][T14965] fuse_lookup_name+0x481/0x780 [ 242.309085][T14965] ? __pfx_fuse_lookup_name+0x10/0x10 [ 242.309139][T14965] fuse_lookup+0x26a/0x560 [ 242.309169][T14965] ? __pfx_fuse_lookup+0x10/0x10 [ 242.309197][T14965] ? d_alloc_parallel+0x864/0x1510 [ 242.309230][T14965] ? __pfx_d_alloc_parallel+0x10/0x10 [ 242.309259][T14965] fuse_atomic_open+0x2fc/0x460 [ 242.309288][T14965] ? __pfx_fuse_atomic_open+0x10/0x10 [ 242.309316][T14965] lookup_open.isra.0+0x844/0x1780 [ 242.309345][T14965] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 242.309382][T14965] ? mnt_get_write_access+0x1e9/0x2f0 [ 242.309408][T14965] path_openat+0x12bb/0x3140 [ 242.309442][T14965] ? __pfx_path_openat+0x10/0x10 [ 242.309477][T14965] do_filp_open+0x20b/0x470 [ 242.309503][T14965] ? __pfx_do_filp_open+0x10/0x10 [ 242.309556][T14965] ? alloc_fd+0x471/0x7d0 [ 242.309591][T14965] do_sys_openat2+0x121/0x290 [ 242.309608][T14965] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.309630][T14965] ? __fget_files+0x20e/0x3c0 [ 242.309660][T14965] __x64_sys_openat+0x174/0x210 [ 242.309678][T14965] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.309695][T14965] ? ksys_write+0x1ac/0x250 [ 242.309727][T14965] do_syscall_64+0xcd/0xf80 [ 242.309752][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.309771][T14965] RIP: 0033:0x7fc691b8f7c9 [ 242.309786][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.309803][T14965] RSP: 002b:00007fc69295a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.309820][T14965] RAX: ffffffffffffffda RBX: 00007fc691de6090 RCX: 00007fc691b8f7c9 [ 242.309832][T14965] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 242.309843][T14965] RBP: 00007fc69295a090 R08: 0000000000000000 R09: 0000000000000000 [ 242.309854][T14965] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 242.309865][T14965] R13: 00007fc691de6128 R14: 00007fc691de6090 R15: 00007fff0ea2e0d8 [ 242.309891][T14965] [ 242.485290][T14801] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 242.564265][T14977] FAULT_INJECTION: forcing a failure. [ 242.564265][T14977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.568442][T14977] CPU: 1 UID: 0 PID: 14977 Comm: syz.5.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.568459][T14977] Tainted: [L]=SOFTLOCKUP [ 242.568463][T14977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.568470][T14977] Call Trace: [ 242.568475][T14977] [ 242.568479][T14977] dump_stack_lvl+0x16c/0x1f0 [ 242.568498][T14977] should_fail_ex+0x512/0x640 [ 242.568521][T14977] _copy_to_iter+0x29f/0x1710 [ 242.568541][T14977] ? __pfx__copy_to_iter+0x10/0x10 [ 242.568557][T14977] ? const_folio_flags+0x5b/0x100 [ 242.568568][T14977] ? folio_mark_accessed+0xc1/0xbf0 [ 242.568581][T14977] ? __pfx_folio_mark_accessed+0x10/0x10 [ 242.568595][T14977] copy_page_to_iter+0x12a/0x1e0 [ 242.568613][T14977] filemap_read+0x6b1/0xe40 [ 242.568631][T14977] ? __pfx_filemap_read+0x10/0x10 [ 242.568652][T14977] ? __pfx_down_read+0x10/0x10 [ 242.568668][T14977] ? avc_policy_seqno+0x9/0x20 [ 242.568696][T14977] ? selinux_file_permission+0x126/0x660 [ 242.568715][T14977] blkdev_read_iter+0x1ac/0x500 [ 242.568729][T14977] ? __pfx_blkdev_read_iter+0x10/0x10 [ 242.568739][T14977] __io_read+0x357/0x14b0 [ 242.568756][T14977] ? __io_import_rw_buffer+0x245/0x6f0 [ 242.568777][T14977] io_read+0x8d/0x1f0 [ 242.568786][T14977] ? __pfx_io_read+0x10/0x10 [ 242.568800][T14977] __io_issue_sqe+0xe8/0x7c0 [ 242.568818][T14977] io_issue_sqe+0x85/0x1410 [ 242.568831][T14977] io_submit_sqes+0xb24/0x28e0 [ 242.568851][T14977] __do_sys_io_uring_enter+0xd6b/0x1630 [ 242.568865][T14977] ? __fget_files+0x20e/0x3c0 [ 242.568880][T14977] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 242.568894][T14977] ? fput+0x70/0xf0 [ 242.568903][T14977] ? ksys_write+0x1ac/0x250 [ 242.568917][T14977] ? __pfx_ksys_write+0x10/0x10 [ 242.568931][T14977] ? fdget+0x187/0x210 [ 242.568948][T14977] do_syscall_64+0xcd/0xf80 [ 242.568963][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.568975][T14977] RIP: 0033:0x7f8c5698f7c9 [ 242.568983][T14977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.568994][T14977] RSP: 002b:00007f8c57799038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 242.569004][T14977] RAX: ffffffffffffffda RBX: 00007f8c56be5fa0 RCX: 00007f8c5698f7c9 [ 242.569011][T14977] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 242.569017][T14977] RBP: 00007f8c57799090 R08: 0000000000000000 R09: 0000000000000000 [ 242.569023][T14977] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 242.569030][T14977] R13: 00007f8c56be6038 R14: 00007f8c56be5fa0 R15: 00007ffed28941a8 [ 242.569044][T14977] [ 242.644911][T14801] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 242.657514][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.660370][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.664084][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.667524][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.670374][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.674015][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.677258][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.680253][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.683745][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.697491][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.700383][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.704196][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.707603][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.714964][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.722272][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.725257][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.728246][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.731948][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.735158][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.738071][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.742345][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.745431][T14801] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.748420][T14801] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.752883][T14801] usb 9-1: config 0 interface 0 has no altsetting 0 [ 242.756892][T14801] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 242.759838][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 242.762682][T14801] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 242.765352][T14801] usb 9-1: Product: syz [ 242.766763][T14801] usb 9-1: Manufacturer: syz [ 242.768371][T14801] usb 9-1: SerialNumber: syz [ 242.771536][T14801] usb 9-1: config 0 descriptor?? [ 242.776871][T14801] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 242.813821][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 242.843767][T14998] FAULT_INJECTION: forcing a failure. [ 242.843767][T14998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.850733][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.5.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.850752][T14998] Tainted: [L]=SOFTLOCKUP [ 242.850756][T14998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.850778][T14998] Call Trace: [ 242.850784][T14998] [ 242.850789][T14998] dump_stack_lvl+0x16c/0x1f0 [ 242.850808][T14998] should_fail_ex+0x512/0x640 [ 242.850828][T14998] should_fail_alloc_page+0xe7/0x130 [ 242.850845][T14998] prepare_alloc_pages+0x401/0x670 [ 242.850861][T14998] ? rcu_is_watching+0x12/0xc0 [ 242.850874][T14998] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 242.850891][T14998] ? __pfx_mas_split+0x10/0x10 [ 242.850908][T14998] ? rcu_is_watching+0x12/0xc0 [ 242.850919][T14998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 242.850931][T14998] ? __mod_zone_page_state+0xcc/0x1a0 [ 242.850949][T14998] ? lru_gen_add_folio+0x1a4/0xef0 [ 242.850963][T14998] ? __lock_acquire+0x436/0x2890 [ 242.850978][T14998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.850993][T14998] ? policy_nodemask+0xea/0x4e0 [ 242.851010][T14998] alloc_pages_mpol+0x1fb/0x550 [ 242.851026][T14998] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 242.851045][T14998] folio_alloc_mpol_noprof+0x36/0x2f0 [ 242.851063][T14998] vma_alloc_folio_noprof+0xed/0x1e0 [ 242.851081][T14998] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 242.851102][T14998] do_anonymous_page+0xc81/0x2190 [ 242.851125][T14998] __handle_mm_fault+0x1ecf/0x2bb0 [ 242.851147][T14998] ? __pfx___handle_mm_fault+0x10/0x10 [ 242.851173][T14998] ? find_vma+0xbf/0x140 [ 242.851186][T14998] ? __pfx_find_vma+0x10/0x10 [ 242.851217][T14998] handle_mm_fault+0x3fe/0xad0 [ 242.851239][T14998] do_user_addr_fault+0x7a6/0x1370 [ 242.851256][T14998] ? rcu_is_watching+0x12/0xc0 [ 242.851268][T14998] exc_page_fault+0x64/0xc0 [ 242.851282][T14998] asm_exc_page_fault+0x26/0x30 [ 242.851294][T14998] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 242.851311][T14998] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 3d 5e 14 fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 ce 3f 7e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 242.851322][T14998] RSP: 0018:ffffc900048776c0 EFLAGS: 00050246 [ 242.851332][T14998] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 242.851339][T14998] RDX: 0000000000000000 RSI: ffff88805dff1000 RDI: 00002000000e7000 [ 242.851346][T14998] RBP: 00002000000e7000 R08: 0000000000000000 R09: ffffed100bbfe3ff [ 242.851353][T14998] R10: ffff88805dff1fff R11: 0000000000000000 R12: ffff888036d47e20 [ 242.851360][T14998] R13: 00002000000e8000 R14: ffff88805dff1000 R15: 00007ffffffff000 [ 242.851379][T14998] ? __pfx__copy_to_iter+0x10/0x10 [ 242.851396][T14998] ? const_folio_flags+0x5b/0x100 [ 242.851406][T14998] ? folio_mark_accessed+0xc1/0xbf0 [ 242.851419][T14998] ? __pfx_folio_mark_accessed+0x10/0x10 [ 242.851434][T14998] copy_page_to_iter+0x12a/0x1e0 [ 242.851452][T14998] filemap_read+0x6b1/0xe40 [ 242.851471][T14998] ? __pfx_filemap_read+0x10/0x10 [ 242.851493][T14998] ? __pfx_down_read+0x10/0x10 [ 242.851529][T14998] ? avc_policy_seqno+0x9/0x20 [ 242.851547][T14998] ? selinux_file_permission+0x126/0x660 [ 242.851565][T14998] blkdev_read_iter+0x1ac/0x500 [ 242.851579][T14998] ? __pfx_blkdev_read_iter+0x10/0x10 [ 242.851590][T14998] __io_read+0x357/0x14b0 [ 242.851607][T14998] ? __io_import_rw_buffer+0x245/0x6f0 [ 242.851628][T14998] io_read+0x8d/0x1f0 [ 242.851638][T14998] ? __pfx_io_read+0x10/0x10 [ 242.851652][T14998] __io_issue_sqe+0xe8/0x7c0 [ 242.851669][T14998] io_issue_sqe+0x85/0x1410 [ 242.851683][T14998] io_submit_sqes+0xb24/0x28e0 [ 242.851703][T14998] __do_sys_io_uring_enter+0xd6b/0x1630 [ 242.851717][T14998] ? __fget_files+0x20e/0x3c0 [ 242.851734][T14998] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 242.851748][T14998] ? fput+0x70/0xf0 [ 242.851762][T14998] ? ksys_write+0x1ac/0x250 [ 242.851776][T14998] ? __pfx_ksys_write+0x10/0x10 [ 242.851794][T14998] do_syscall_64+0xcd/0xf80 [ 242.851810][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.851821][T14998] RIP: 0033:0x7f8c5698f7c9 [ 242.851830][T14998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.851841][T14998] RSP: 002b:00007f8c57799038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 242.851851][T14998] RAX: ffffffffffffffda RBX: 00007f8c56be5fa0 RCX: 00007f8c5698f7c9 [ 242.851858][T14998] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 242.851865][T14998] RBP: 00007f8c57799090 R08: 0000000000000000 R09: 0000000000000000 [ 242.851872][T14998] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 242.851879][T14998] R13: 00007f8c56be6038 R14: 00007f8c56be5fa0 R15: 00007ffed28941a8 [ 242.851894][T14998] [ 242.995278][T14801] usb 9-1: USB disconnect, device number 18 [ 243.019917][T14801] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 243.147570][T15004] FAULT_INJECTION: forcing a failure. [ 243.147570][T15004] name failslab, interval 1, probability 0, space 0, times 0 [ 243.151789][T15004] CPU: 3 UID: 0 PID: 15004 Comm: syz.1.2548 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.151815][T15004] Tainted: [L]=SOFTLOCKUP [ 243.151821][T15004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.151832][T15004] Call Trace: [ 243.151838][T15004] [ 243.151845][T15004] dump_stack_lvl+0x16c/0x1f0 [ 243.151872][T15004] should_fail_ex+0x512/0x640 [ 243.151899][T15004] ? fs_reclaim_acquire+0xae/0x150 [ 243.151926][T15004] should_failslab+0xc2/0x120 [ 243.151952][T15004] kmem_cache_alloc_noprof+0x83/0x770 [ 243.151970][T15004] ? __pfx_map_id_range_down+0x10/0x10 [ 243.151989][T15004] ? security_inode_alloc+0x3b/0x2b0 [ 243.152016][T15004] ? security_inode_alloc+0x3b/0x2b0 [ 243.152034][T15004] security_inode_alloc+0x3b/0x2b0 [ 243.152056][T15004] inode_init_always_gfp+0xced/0x1040 [ 243.152085][T15004] ? __pfx_fuse_inode_eq+0x10/0x10 [ 243.152109][T15004] ? __pfx_fuse_inode_set+0x10/0x10 [ 243.152132][T15004] alloc_inode+0x86/0x240 [ 243.152153][T15004] iget5_locked+0x67/0xb0 [ 243.152176][T15004] fuse_iget+0x200/0x8d0 [ 243.152204][T15004] ? __pfx_fuse_iget+0x10/0x10 [ 243.152223][T15004] ? __fuse_simple_request+0x60c/0xe20 [ 243.152250][T15004] fuse_lookup_name+0x481/0x780 [ 243.152282][T15004] ? __pfx_fuse_lookup_name+0x10/0x10 [ 243.152335][T15004] fuse_lookup+0x26a/0x560 [ 243.152363][T15004] ? __pfx_fuse_lookup+0x10/0x10 [ 243.152389][T15004] ? d_alloc_parallel+0x864/0x1510 [ 243.152422][T15004] ? __pfx_d_alloc_parallel+0x10/0x10 [ 243.152502][T15004] fuse_atomic_open+0x2fc/0x460 [ 243.152530][T15004] ? __pfx_fuse_atomic_open+0x10/0x10 [ 243.152557][T15004] lookup_open.isra.0+0x844/0x1780 [ 243.152583][T15004] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 243.152619][T15004] ? mnt_get_write_access+0x1e9/0x2f0 [ 243.152645][T15004] path_openat+0x12bb/0x3140 [ 243.152678][T15004] ? __pfx_path_openat+0x10/0x10 [ 243.152713][T15004] do_filp_open+0x20b/0x470 [ 243.152739][T15004] ? __pfx_do_filp_open+0x10/0x10 [ 243.152784][T15004] ? alloc_fd+0x471/0x7d0 [ 243.152818][T15004] do_sys_openat2+0x121/0x290 [ 243.152837][T15004] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.152858][T15004] ? __fget_files+0x20e/0x3c0 [ 243.152888][T15004] __x64_sys_openat+0x174/0x210 [ 243.152907][T15004] ? __pfx___x64_sys_openat+0x10/0x10 [ 243.152924][T15004] ? ksys_write+0x1ac/0x250 [ 243.152956][T15004] do_syscall_64+0xcd/0xf80 [ 243.152983][T15004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.153002][T15004] RIP: 0033:0x7fc691b8f7c9 [ 243.153017][T15004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.153035][T15004] RSP: 002b:00007fc69295a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.153053][T15004] RAX: ffffffffffffffda RBX: 00007fc691de6090 RCX: 00007fc691b8f7c9 [ 243.153066][T15004] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 243.153077][T15004] RBP: 00007fc69295a090 R08: 0000000000000000 R09: 0000000000000000 [ 243.153089][T15004] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 243.153100][T15004] R13: 00007fc691de6128 R14: 00007fc691de6090 R15: 00007fff0ea2e0d8 [ 243.153127][T15004] [ 243.289597][T15007] Cannot find add_set index 0 as target [ 243.392355][T15010] FAULT_INJECTION: forcing a failure. [ 243.392355][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.396841][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.1.2551 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.396859][T15010] Tainted: [L]=SOFTLOCKUP [ 243.396863][T15010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.396870][T15010] Call Trace: [ 243.396875][T15010] [ 243.396880][T15010] dump_stack_lvl+0x16c/0x1f0 [ 243.396899][T15010] should_fail_ex+0x512/0x640 [ 243.396918][T15010] _copy_to_iter+0x29f/0x1710 [ 243.396938][T15010] ? __pfx__copy_to_iter+0x10/0x10 [ 243.396955][T15010] ? const_folio_flags+0x5b/0x100 [ 243.396966][T15010] ? folio_mark_accessed+0xc1/0xbf0 [ 243.396979][T15010] ? __pfx_folio_mark_accessed+0x10/0x10 [ 243.396994][T15010] copy_page_to_iter+0x12a/0x1e0 [ 243.397012][T15010] filemap_read+0x6b1/0xe40 [ 243.397030][T15010] ? __pfx_filemap_read+0x10/0x10 [ 243.397051][T15010] ? __pfx_down_read+0x10/0x10 [ 243.397068][T15010] ? avc_policy_seqno+0x9/0x20 [ 243.397086][T15010] ? selinux_file_permission+0x126/0x660 [ 243.397104][T15010] blkdev_read_iter+0x1ac/0x500 [ 243.397118][T15010] ? __pfx_blkdev_read_iter+0x10/0x10 [ 243.397128][T15010] __io_read+0x357/0x14b0 [ 243.397145][T15010] ? __io_import_rw_buffer+0x245/0x6f0 [ 243.397166][T15010] io_read+0x8d/0x1f0 [ 243.397176][T15010] ? __pfx_io_read+0x10/0x10 [ 243.397190][T15010] __io_issue_sqe+0xe8/0x7c0 [ 243.397207][T15010] io_issue_sqe+0x85/0x1410 [ 243.397221][T15010] io_submit_sqes+0xb24/0x28e0 [ 243.397241][T15010] __do_sys_io_uring_enter+0xd6b/0x1630 [ 243.397255][T15010] ? __fget_files+0x20e/0x3c0 [ 243.397272][T15010] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 243.397285][T15010] ? fput+0x70/0xf0 [ 243.397295][T15010] ? ksys_write+0x1ac/0x250 [ 243.397309][T15010] ? __pfx_ksys_write+0x10/0x10 [ 243.397323][T15010] ? fdget+0x187/0x210 [ 243.397341][T15010] do_syscall_64+0xcd/0xf80 [ 243.397357][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.397369][T15010] RIP: 0033:0x7fc691b8f7c9 [ 243.397378][T15010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.397389][T15010] RSP: 002b:00007fc69297b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 243.397400][T15010] RAX: ffffffffffffffda RBX: 00007fc691de5fa0 RCX: 00007fc691b8f7c9 [ 243.397407][T15010] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 243.397413][T15010] RBP: 00007fc69297b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.397420][T15010] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 243.397426][T15010] R13: 00007fc691de6038 R14: 00007fc691de5fa0 R15: 00007fff0ea2e0d8 [ 243.397441][T15010] [ 243.632261][T15027] FAULT_INJECTION: forcing a failure. [ 243.632261][T15027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.637933][T15027] CPU: 3 UID: 0 PID: 15027 Comm: syz.5.2557 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.637976][T15027] Tainted: [L]=SOFTLOCKUP [ 243.637984][T15027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.637995][T15027] Call Trace: [ 243.638002][T15027] [ 243.638011][T15027] dump_stack_lvl+0x16c/0x1f0 [ 243.638040][T15027] should_fail_ex+0x512/0x640 [ 243.638072][T15027] _copy_to_iter+0x29f/0x1710 [ 243.638107][T15027] ? __pfx__copy_to_iter+0x10/0x10 [ 243.638135][T15027] ? const_folio_flags+0x5b/0x100 [ 243.638154][T15027] ? folio_mark_accessed+0xc1/0xbf0 [ 243.638176][T15027] ? __pfx_folio_mark_accessed+0x10/0x10 [ 243.638203][T15027] copy_page_to_iter+0x12a/0x1e0 [ 243.638232][T15027] filemap_read+0x6b1/0xe40 [ 243.638263][T15027] ? __pfx_filemap_read+0x10/0x10 [ 243.638301][T15027] ? __pfx_down_read+0x10/0x10 [ 243.638329][T15027] ? avc_policy_seqno+0x9/0x20 [ 243.638357][T15027] ? selinux_file_permission+0x126/0x660 [ 243.638388][T15027] blkdev_read_iter+0x1ac/0x500 [ 243.638412][T15027] ? __pfx_blkdev_read_iter+0x10/0x10 [ 243.638429][T15027] __io_read+0x357/0x14b0 [ 243.638458][T15027] ? __io_import_rw_buffer+0x245/0x6f0 [ 243.638500][T15027] io_read+0x8d/0x1f0 [ 243.638518][T15027] ? __pfx_io_read+0x10/0x10 [ 243.638543][T15027] __io_issue_sqe+0xe8/0x7c0 [ 243.638573][T15027] io_issue_sqe+0x85/0x1410 [ 243.638596][T15027] io_submit_sqes+0xb24/0x28e0 [ 243.638632][T15027] __do_sys_io_uring_enter+0xd6b/0x1630 [ 243.638657][T15027] ? __fget_files+0x20e/0x3c0 [ 243.638683][T15027] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 243.638708][T15027] ? fput+0x70/0xf0 [ 243.638724][T15027] ? ksys_write+0x1ac/0x250 [ 243.638747][T15027] ? __pfx_ksys_write+0x10/0x10 [ 243.638791][T15027] do_syscall_64+0xcd/0xf80 [ 243.638819][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.638838][T15027] RIP: 0033:0x7f8c5698f7c9 [ 243.638853][T15027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.638872][T15027] RSP: 002b:00007f8c57799038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 243.638890][T15027] RAX: ffffffffffffffda RBX: 00007f8c56be5fa0 RCX: 00007f8c5698f7c9 [ 243.638903][T15027] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 243.638913][T15027] RBP: 00007f8c57799090 R08: 0000000000000000 R09: 0000000000000000 [ 243.638923][T15027] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 243.638932][T15027] R13: 00007f8c56be6038 R14: 00007f8c56be5fa0 R15: 00007ffed28941a8 [ 243.638957][T15027] [ 243.762714][ T6011] net_ratelimit: 3 callbacks suppressed [ 243.762726][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.892512][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.896283][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.899737][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.903483][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.910856][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.914517][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.918205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.921802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.924833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.966876][T15039] FAULT_INJECTION: forcing a failure. [ 243.966876][T15039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.973696][T15039] CPU: 0 UID: 0 PID: 15039 Comm: syz.1.2561 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.973715][T15039] Tainted: [L]=SOFTLOCKUP [ 243.973720][T15039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.973727][T15039] Call Trace: [ 243.973731][T15039] [ 243.973735][T15039] dump_stack_lvl+0x16c/0x1f0 [ 243.973753][T15039] should_fail_ex+0x512/0x640 [ 243.973773][T15039] _copy_to_iter+0x29f/0x1710 [ 243.973794][T15039] ? __pfx__copy_to_iter+0x10/0x10 [ 243.973811][T15039] ? const_folio_flags+0x5b/0x100 [ 243.973823][T15039] ? folio_mark_accessed+0xc1/0xbf0 [ 243.973835][T15039] ? __pfx_folio_mark_accessed+0x10/0x10 [ 243.973850][T15039] copy_page_to_iter+0x12a/0x1e0 [ 243.973868][T15039] filemap_read+0x6b1/0xe40 [ 243.973886][T15039] ? __pfx_filemap_read+0x10/0x10 [ 243.973907][T15039] ? __pfx_down_read+0x10/0x10 [ 243.973925][T15039] ? avc_policy_seqno+0x9/0x20 [ 243.973942][T15039] ? selinux_file_permission+0x126/0x660 [ 243.973960][T15039] blkdev_read_iter+0x1ac/0x500 [ 243.973973][T15039] ? __pfx_blkdev_read_iter+0x10/0x10 [ 243.973984][T15039] __io_read+0x357/0x14b0 [ 243.974001][T15039] ? __io_import_rw_buffer+0x245/0x6f0 [ 243.974022][T15039] io_read+0x8d/0x1f0 [ 243.974032][T15039] ? __pfx_io_read+0x10/0x10 [ 243.974046][T15039] __io_issue_sqe+0xe8/0x7c0 [ 243.974063][T15039] io_issue_sqe+0x85/0x1410 [ 243.974077][T15039] io_submit_sqes+0xb24/0x28e0 [ 243.974097][T15039] __do_sys_io_uring_enter+0xd6b/0x1630 [ 243.974111][T15039] ? __fget_files+0x20e/0x3c0 [ 243.974127][T15039] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 243.974141][T15039] ? fput+0x70/0xf0 [ 243.974151][T15039] ? ksys_write+0x1ac/0x250 [ 243.974164][T15039] ? __pfx_ksys_write+0x10/0x10 [ 243.974182][T15039] do_syscall_64+0xcd/0xf80 [ 243.974198][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.974210][T15039] RIP: 0033:0x7fc691b8f7c9 [ 243.974219][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.974230][T15039] RSP: 002b:00007fc69297b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 243.974241][T15039] RAX: ffffffffffffffda RBX: 00007fc691de5fa0 RCX: 00007fc691b8f7c9 [ 243.974248][T15039] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 243.974254][T15039] RBP: 00007fc69297b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.974261][T15039] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 243.974267][T15039] R13: 00007fc691de6038 R14: 00007fc691de5fa0 R15: 00007fff0ea2e0d8 [ 243.974282][T15039] [ 244.003666][T15049] syzkaller0: entered promiscuous mode [ 244.044326][ T6021] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 244.044660][T15049] syzkaller0: entered allmulticast mode [ 244.207267][ T6021] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 244.210773][ T6021] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 244.214937][ T6021] usb 7-1: config 0 interface 0 has no altsetting 0 [ 244.229449][ T6021] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.233364][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.240079][ T6021] usb 7-1: Product: syz [ 244.241879][ T6021] usb 7-1: Manufacturer: syz [ 244.243826][ T6021] usb 7-1: SerialNumber: syz [ 244.249075][ T6021] usb 7-1: config 0 descriptor?? [ 244.258897][ T6021] hub 7-1:0.0: bad descriptor, ignoring hub [ 244.264916][ T6021] hub 7-1:0.0: probe with driver hub failed with error -5 [ 244.271993][ T6021] usb 7-1: selecting invalid altsetting 0 [ 244.326808][T15066] FAULT_INJECTION: forcing a failure. [ 244.326808][T15066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.331242][T15066] CPU: 2 UID: 0 PID: 15066 Comm: syz.4.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.331261][T15066] Tainted: [L]=SOFTLOCKUP [ 244.331265][T15066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.331272][T15066] Call Trace: [ 244.331276][T15066] [ 244.331281][T15066] dump_stack_lvl+0x16c/0x1f0 [ 244.331299][T15066] should_fail_ex+0x512/0x640 [ 244.331319][T15066] should_fail_alloc_page+0xe7/0x130 [ 244.331336][T15066] prepare_alloc_pages+0x401/0x670 [ 244.331352][T15066] ? rcu_is_watching+0x12/0xc0 [ 244.331365][T15066] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 244.331382][T15066] ? __lock_acquire+0x436/0x2890 [ 244.331398][T15066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.331413][T15066] ? lock_acquire+0x179/0x330 [ 244.331427][T15066] ? __lock_acquire+0x436/0x2890 [ 244.331441][T15066] ? __lock_acquire+0x436/0x2890 [ 244.331454][T15066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.331468][T15066] ? policy_nodemask+0xea/0x4e0 [ 244.331487][T15066] alloc_pages_mpol+0x1fb/0x550 [ 244.331503][T15066] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 244.331522][T15066] folio_alloc_mpol_noprof+0x36/0x2f0 [ 244.331540][T15066] vma_alloc_folio_noprof+0xed/0x1e0 [ 244.331557][T15066] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 244.331578][T15066] do_anonymous_page+0xc81/0x2190 [ 244.331601][T15066] __handle_mm_fault+0x1ecf/0x2bb0 [ 244.331622][T15066] ? __pfx___handle_mm_fault+0x10/0x10 [ 244.331648][T15066] ? find_vma+0xbf/0x140 [ 244.331661][T15066] ? __pfx_find_vma+0x10/0x10 [ 244.331687][T15066] handle_mm_fault+0x3fe/0xad0 [ 244.331709][T15066] do_user_addr_fault+0x7a6/0x1370 [ 244.331726][T15066] ? rcu_is_watching+0x12/0xc0 [ 244.331738][T15066] exc_page_fault+0x64/0xc0 [ 244.331753][T15066] asm_exc_page_fault+0x26/0x30 [ 244.331764][T15066] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 244.331781][T15066] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 3d 5e 14 fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 ce 3f 7e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 244.331792][T15066] RSP: 0018:ffffc900049e76c0 EFLAGS: 00050246 [ 244.331801][T15066] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 244.331808][T15066] RDX: 0000000000000000 RSI: ffff88805dff2000 RDI: 00002000000e8000 [ 244.331815][T15066] RBP: 00002000000e8000 R08: 0000000000000000 R09: ffffed100bbfe5ff [ 244.331821][T15066] R10: ffff88805dff2fff R11: 0000000000000000 R12: ffff888025163820 [ 244.331828][T15066] R13: 00002000000e9000 R14: ffff88805dff2000 R15: 00007ffffffff000 [ 244.331848][T15066] ? __pfx__copy_to_iter+0x10/0x10 [ 244.331864][T15066] ? const_folio_flags+0x5b/0x100 [ 244.331876][T15066] ? folio_mark_accessed+0xc1/0xbf0 [ 244.331888][T15066] ? __pfx_folio_mark_accessed+0x10/0x10 [ 244.331903][T15066] copy_page_to_iter+0x12a/0x1e0 [ 244.331921][T15066] filemap_read+0x6b1/0xe40 [ 244.331940][T15066] ? __pfx_filemap_read+0x10/0x10 [ 244.331962][T15066] ? __pfx_down_read+0x10/0x10 [ 244.331979][T15066] ? avc_policy_seqno+0x9/0x20 [ 244.331996][T15066] ? selinux_file_permission+0x126/0x660 [ 244.332014][T15066] blkdev_read_iter+0x1ac/0x500 [ 244.332027][T15066] ? __pfx_blkdev_read_iter+0x10/0x10 [ 244.332038][T15066] __io_read+0x357/0x14b0 [ 244.332055][T15066] ? __io_import_rw_buffer+0x245/0x6f0 [ 244.332076][T15066] io_read+0x8d/0x1f0 [ 244.332086][T15066] ? __pfx_io_read+0x10/0x10 [ 244.332101][T15066] __io_issue_sqe+0xe8/0x7c0 [ 244.332118][T15066] io_issue_sqe+0x85/0x1410 [ 244.332132][T15066] io_submit_sqes+0xb24/0x28e0 [ 244.332151][T15066] __do_sys_io_uring_enter+0xd6b/0x1630 [ 244.332166][T15066] ? __fget_files+0x20e/0x3c0 [ 244.332183][T15066] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 244.332197][T15066] ? fput+0x70/0xf0 [ 244.332206][T15066] ? ksys_write+0x1ac/0x250 [ 244.332220][T15066] ? __pfx_ksys_write+0x10/0x10 [ 244.332244][T15066] ? fdget+0x187/0x210 [ 244.332270][T15066] do_syscall_64+0xcd/0xf80 [ 244.332292][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.332311][T15066] RIP: 0033:0x7f4ea7b8f7c9 [ 244.332327][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.332342][T15066] RSP: 002b:00007f4ea8aca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 244.332352][T15066] RAX: ffffffffffffffda RBX: 00007f4ea7de5fa0 RCX: 00007f4ea7b8f7c9 [ 244.332359][T15066] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 244.332366][T15066] RBP: 00007f4ea8aca090 R08: 0000000000000000 R09: 0000000000000000 [ 244.332372][T15066] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 244.332379][T15066] R13: 00007f4ea7de6038 R14: 00007f4ea7de5fa0 R15: 00007fffc2f15e98 [ 244.332394][T15066] [ 244.345465][T15068] netlink: 'syz.5.2567': attribute type 7 has an invalid length. [ 244.485356][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 244.579599][T15074] FAULT_INJECTION: forcing a failure. [ 244.579599][T15074] name failslab, interval 1, probability 0, space 0, times 0 [ 244.585103][T15074] CPU: 1 UID: 0 PID: 15074 Comm: syz.5.2569 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.585131][T15074] Tainted: [L]=SOFTLOCKUP [ 244.585138][T15074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.585149][T15074] Call Trace: [ 244.585156][T15074] [ 244.585164][T15074] dump_stack_lvl+0x16c/0x1f0 [ 244.585198][T15074] should_fail_ex+0x512/0x640 [ 244.585249][T15074] ? fs_reclaim_acquire+0xae/0x150 [ 244.585276][T15074] should_failslab+0xc2/0x120 [ 244.585300][T15074] __kmalloc_noprof+0xeb/0x910 [ 244.585324][T15074] ? tomoyo_encode2+0x100/0x3e0 [ 244.585343][T15074] ? tomoyo_encode2+0x100/0x3e0 [ 244.585357][T15074] tomoyo_encode2+0x100/0x3e0 [ 244.585374][T15074] tomoyo_encode+0x29/0x50 [ 244.585388][T15074] tomoyo_realpath_from_path+0x18f/0x6e0 [ 244.585408][T15074] tomoyo_check_open_permission+0x2ab/0x3c0 [ 244.585422][T15074] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 244.585449][T15074] ? do_raw_spin_lock+0x12c/0x2b0 [ 244.585469][T15074] tomoyo_file_open+0x6b/0x90 [ 244.585488][T15074] security_file_open+0x84/0x1e0 [ 244.585504][T15074] do_dentry_open+0x597/0x1590 [ 244.585520][T15074] ? security_inode_permission+0xbf/0x260 [ 244.585537][T15074] vfs_open+0x82/0x3f0 [ 244.585549][T15074] path_openat+0x2078/0x3140 [ 244.585570][T15074] ? __pfx_path_openat+0x10/0x10 [ 244.585591][T15074] do_filp_open+0x20b/0x470 [ 244.585607][T15074] ? __pfx_do_filp_open+0x10/0x10 [ 244.585633][T15074] ? alloc_fd+0x471/0x7d0 [ 244.585653][T15074] do_sys_openat2+0x121/0x290 [ 244.585664][T15074] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.585676][T15074] ? __fget_files+0x20e/0x3c0 [ 244.585694][T15074] __x64_sys_openat+0x174/0x210 [ 244.585705][T15074] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.585715][T15074] ? ksys_write+0x1ac/0x250 [ 244.585733][T15074] do_syscall_64+0xcd/0xf80 [ 244.585749][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.585761][T15074] RIP: 0033:0x7f8c5698f7c9 [ 244.585771][T15074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.585782][T15074] RSP: 002b:00007f8c57778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.585794][T15074] RAX: ffffffffffffffda RBX: 00007f8c56be6090 RCX: 00007f8c5698f7c9 [ 244.585801][T15074] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 244.585808][T15074] RBP: 00007f8c57778090 R08: 0000000000000000 R09: 0000000000000000 [ 244.585814][T15074] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 244.585821][T15074] R13: 00007f8c56be6128 R14: 00007f8c56be6090 R15: 00007ffed28941a8 [ 244.585836][T15074] [ 244.585848][T15074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.022356][ T40] audit: type=1400 audit(1767000200.995:1085): avc: denied { getopt } for pid=15094 comm="syz.1.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.221383][T15024] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 245.403810][T15024] usb 7-1: device firmware changed [ 245.407403][ T6024] usb 7-1: USB disconnect, device number 24 [ 245.426627][T15103] FAULT_INJECTION: forcing a failure. [ 245.426627][T15103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.430757][T15103] CPU: 3 UID: 0 PID: 15103 Comm: syz.1.2578 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.430774][T15103] Tainted: [L]=SOFTLOCKUP [ 245.430778][T15103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.430785][T15103] Call Trace: [ 245.430790][T15103] [ 245.430794][T15103] dump_stack_lvl+0x16c/0x1f0 [ 245.430811][T15103] should_fail_ex+0x512/0x640 [ 245.430831][T15103] _copy_to_iter+0x29f/0x1710 [ 245.430852][T15103] ? __pfx__copy_to_iter+0x10/0x10 [ 245.430868][T15103] ? const_folio_flags+0x5b/0x100 [ 245.430880][T15103] ? folio_mark_accessed+0xc1/0xbf0 [ 245.430893][T15103] ? __pfx_folio_mark_accessed+0x10/0x10 [ 245.430908][T15103] copy_page_to_iter+0x12a/0x1e0 [ 245.430926][T15103] filemap_read+0x6b1/0xe40 [ 245.430944][T15103] ? __pfx_filemap_read+0x10/0x10 [ 245.430966][T15103] ? __pfx_down_read+0x10/0x10 [ 245.430983][T15103] ? avc_policy_seqno+0x9/0x20 [ 245.430999][T15103] ? selinux_file_permission+0x126/0x660 [ 245.431017][T15103] blkdev_read_iter+0x1ac/0x500 [ 245.431031][T15103] ? __pfx_blkdev_read_iter+0x10/0x10 [ 245.431041][T15103] __io_read+0x357/0x14b0 [ 245.431059][T15103] ? __io_import_rw_buffer+0x245/0x6f0 [ 245.431079][T15103] io_read+0x8d/0x1f0 [ 245.431090][T15103] ? __pfx_io_read+0x10/0x10 [ 245.431104][T15103] __io_issue_sqe+0xe8/0x7c0 [ 245.431122][T15103] io_issue_sqe+0x85/0x1410 [ 245.431136][T15103] io_submit_sqes+0xb24/0x28e0 [ 245.431156][T15103] __do_sys_io_uring_enter+0xd6b/0x1630 [ 245.431170][T15103] ? __fget_files+0x20e/0x3c0 [ 245.431203][T15103] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 245.431218][T15103] ? fput+0x70/0xf0 [ 245.431232][T15103] ? ksys_write+0x1ac/0x250 [ 245.431245][T15103] ? __pfx_ksys_write+0x10/0x10 [ 245.431260][T15103] ? fdget+0x187/0x210 [ 245.431277][T15103] do_syscall_64+0xcd/0xf80 [ 245.431293][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.431305][T15103] RIP: 0033:0x7fc691b8f7c9 [ 245.431314][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.431325][T15103] RSP: 002b:00007fc69297b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 245.431336][T15103] RAX: ffffffffffffffda RBX: 00007fc691de5fa0 RCX: 00007fc691b8f7c9 [ 245.431343][T15103] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 245.431350][T15103] RBP: 00007fc69297b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.431356][T15103] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 245.431362][T15103] R13: 00007fc691de6038 R14: 00007fc691de5fa0 R15: 00007fff0ea2e0d8 [ 245.431377][T15103] [ 245.552448][ T6024] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 245.699080][T15117] FAULT_INJECTION: forcing a failure. [ 245.699080][T15117] name failslab, interval 1, probability 0, space 0, times 0 [ 245.703901][T15117] CPU: 2 UID: 0 PID: 15117 Comm: syz.5.2580 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.703931][T15117] Tainted: [L]=SOFTLOCKUP [ 245.703935][T15117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.703942][T15117] Call Trace: [ 245.703946][T15117] [ 245.703951][T15117] dump_stack_lvl+0x16c/0x1f0 [ 245.703969][T15117] should_fail_ex+0x512/0x640 [ 245.703987][T15117] ? __kmalloc_cache_noprof+0x5f/0x800 [ 245.704007][T15117] should_failslab+0xc2/0x120 [ 245.704022][T15117] __kmalloc_cache_noprof+0x80/0x800 [ 245.704040][T15117] ? tty_alloc_file+0x3f/0xa0 [ 245.704056][T15117] ? tty_alloc_file+0x3f/0xa0 [ 245.704067][T15117] ? __pfx_ptmx_open+0x10/0x10 [ 245.704084][T15117] tty_alloc_file+0x3f/0xa0 [ 245.704096][T15117] ptmx_open+0x61/0x3c0 [ 245.704113][T15117] ? __pfx_ptmx_open+0x10/0x10 [ 245.704130][T15117] chrdev_open+0x234/0x6a0 [ 245.704147][T15117] ? __pfx_chrdev_open+0x10/0x10 [ 245.704164][T15117] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 245.704185][T15117] do_dentry_open+0x748/0x1590 [ 245.704201][T15117] ? __pfx_chrdev_open+0x10/0x10 [ 245.704221][T15117] vfs_open+0x82/0x3f0 [ 245.704232][T15117] path_openat+0x2078/0x3140 [ 245.704252][T15117] ? __pfx_path_openat+0x10/0x10 [ 245.704273][T15117] do_filp_open+0x20b/0x470 [ 245.704290][T15117] ? __pfx_do_filp_open+0x10/0x10 [ 245.704315][T15117] ? alloc_fd+0x471/0x7d0 [ 245.704339][T15117] do_sys_openat2+0x121/0x290 [ 245.704349][T15117] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.704361][T15117] ? __fget_files+0x20e/0x3c0 [ 245.704379][T15117] __x64_sys_openat+0x174/0x210 [ 245.704390][T15117] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.704400][T15117] ? ksys_write+0x1ac/0x250 [ 245.704419][T15117] do_syscall_64+0xcd/0xf80 [ 245.704434][T15117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.704450][T15117] RIP: 0033:0x7f8c5698f7c9 [ 245.704459][T15117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.704470][T15117] RSP: 002b:00007f8c57778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.704480][T15117] RAX: ffffffffffffffda RBX: 00007f8c56be6090 RCX: 00007f8c5698f7c9 [ 245.704488][T15117] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 245.704495][T15117] RBP: 00007f8c57778090 R08: 0000000000000000 R09: 0000000000000000 [ 245.704501][T15117] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 245.704507][T15117] R13: 00007f8c56be6128 R14: 00007f8c56be6090 R15: 00007ffed28941a8 [ 245.704522][T15117] [ 245.797347][ T6024] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 245.800188][ T6024] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.803366][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.809147][ T6024] usb 7-1: string descriptor 0 read error: -22 [ 245.811246][ T6024] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.814183][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 245.815904][T15118] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2582'. [ 245.819851][ T6024] usb 7-1: config 0 descriptor?? [ 245.820908][ T6024] hub 7-1:0.0: bad descriptor, ignoring hub [ 245.823521][ T6024] hub 7-1:0.0: probe with driver hub failed with error -5 [ 245.827170][ T6024] usb 7-1: selecting invalid altsetting 0 [ 245.920982][ T40] audit: type=1326 audit(1767000201.837:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.929457][ T40] audit: type=1326 audit(1767000201.846:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.941162][ T40] audit: type=1326 audit(1767000201.846:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.946396][T15124] netlink: 'syz.5.2584': attribute type 10 has an invalid length. [ 245.950640][ T40] audit: type=1326 audit(1767000201.856:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.962257][ T40] audit: type=1326 audit(1767000201.856:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c569c2085 code=0x7ffc0000 [ 245.969773][ T40] audit: type=1326 audit(1767000201.856:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.977169][ T40] audit: type=1326 audit(1767000201.856:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.984718][ T40] audit: type=1326 audit(1767000201.856:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5698f7c9 code=0x7ffc0000 [ 245.992105][ T40] audit: type=1326 audit(1767000201.856:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c5698e010 code=0x7ffc0000 [ 245.993716][T15124] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.012957][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.018793][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.150975][ T6011] usb 7-1: USB disconnect, device number 25 [ 246.243922][T15141] FAULT_INJECTION: forcing a failure. [ 246.243922][T15141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.250494][T15141] CPU: 1 UID: 0 PID: 15141 Comm: syz.5.2589 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.250512][T15141] Tainted: [L]=SOFTLOCKUP [ 246.250516][T15141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.250523][T15141] Call Trace: [ 246.250527][T15141] [ 246.250532][T15141] dump_stack_lvl+0x16c/0x1f0 [ 246.250550][T15141] should_fail_ex+0x512/0x640 [ 246.250570][T15141] _copy_to_iter+0x29f/0x1710 [ 246.250590][T15141] ? __pfx__copy_to_iter+0x10/0x10 [ 246.250606][T15141] ? const_folio_flags+0x5b/0x100 [ 246.250618][T15141] ? folio_mark_accessed+0xc1/0xbf0 [ 246.250630][T15141] ? __pfx_folio_mark_accessed+0x10/0x10 [ 246.250645][T15141] copy_page_to_iter+0x12a/0x1e0 [ 246.250663][T15141] filemap_read+0x6b1/0xe40 [ 246.250681][T15141] ? __pfx_filemap_read+0x10/0x10 [ 246.250703][T15141] ? __pfx_down_read+0x10/0x10 [ 246.250720][T15141] ? avc_policy_seqno+0x9/0x20 [ 246.250737][T15141] ? selinux_file_permission+0x126/0x660 [ 246.250756][T15141] blkdev_read_iter+0x1ac/0x500 [ 246.250769][T15141] ? __pfx_blkdev_read_iter+0x10/0x10 [ 246.250780][T15141] __io_read+0x357/0x14b0 [ 246.250798][T15141] ? __io_import_rw_buffer+0x245/0x6f0 [ 246.250818][T15141] io_read+0x8d/0x1f0 [ 246.250828][T15141] ? __pfx_io_read+0x10/0x10 [ 246.250843][T15141] __io_issue_sqe+0xe8/0x7c0 [ 246.250860][T15141] io_issue_sqe+0x85/0x1410 [ 246.250874][T15141] io_submit_sqes+0xb24/0x28e0 [ 246.250894][T15141] __do_sys_io_uring_enter+0xd6b/0x1630 [ 246.250908][T15141] ? __fget_files+0x20e/0x3c0 [ 246.250924][T15141] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 246.250939][T15141] ? fput+0x70/0xf0 [ 246.250948][T15141] ? ksys_write+0x1ac/0x250 [ 246.250962][T15141] ? __pfx_ksys_write+0x10/0x10 [ 246.250981][T15141] ? fdget+0x187/0x210 [ 246.251007][T15141] do_syscall_64+0xcd/0xf80 [ 246.251032][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.251052][T15141] RIP: 0033:0x7f8c5698f7c9 [ 246.251069][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.251085][T15141] RSP: 002b:00007f8c57799038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 246.251096][T15141] RAX: ffffffffffffffda RBX: 00007f8c56be5fa0 RCX: 00007f8c5698f7c9 [ 246.251103][T15141] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 246.251110][T15141] RBP: 00007f8c57799090 R08: 0000000000000000 R09: 0000000000000000 [ 246.251116][T15141] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 246.251123][T15141] R13: 00007f8c56be6038 R14: 00007f8c56be5fa0 R15: 00007ffed28941a8 [ 246.251138][T15141] [ 246.452640][T15154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'. [ 246.507342][T15159] input: syz1 as /devices/virtual/input/input25 [ 246.525226][T15159] overlayfs: failed to resolve '/es.allow': -2 [ 246.530454][T15159] ocfs2: Unknown parameter 'usrquotaput' [ 246.664271][T15169] fuse: Bad value for 'rootmode' [ 246.676265][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.682890][T15169] bond0: (slave rose0): Enslaving as an active interface with an up link [ 246.693384][T15169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.708495][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2601'. [ 246.713229][T15171] FAULT_INJECTION: forcing a failure. [ 246.713229][T15171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.718811][T15171] CPU: 0 UID: 0 PID: 15171 Comm: syz.4.2602 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.718829][T15171] Tainted: [L]=SOFTLOCKUP [ 246.718833][T15171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.718841][T15171] Call Trace: [ 246.718845][T15171] [ 246.718849][T15171] dump_stack_lvl+0x16c/0x1f0 [ 246.718868][T15171] should_fail_ex+0x512/0x640 [ 246.718888][T15171] _copy_to_iter+0x29f/0x1710 [ 246.718908][T15171] ? __pfx__copy_to_iter+0x10/0x10 [ 246.718925][T15171] ? const_folio_flags+0x5b/0x100 [ 246.718936][T15171] ? folio_mark_accessed+0xc1/0xbf0 [ 246.718949][T15171] ? __pfx_folio_mark_accessed+0x10/0x10 [ 246.718964][T15171] copy_page_to_iter+0x12a/0x1e0 [ 246.718982][T15171] filemap_read+0x6b1/0xe40 [ 246.719000][T15171] ? __pfx_filemap_read+0x10/0x10 [ 246.719022][T15171] ? __pfx_down_read+0x10/0x10 [ 246.719039][T15171] ? avc_policy_seqno+0x9/0x20 [ 246.719056][T15171] ? selinux_file_permission+0x126/0x660 [ 246.719074][T15171] blkdev_read_iter+0x1ac/0x500 [ 246.719087][T15171] ? __pfx_blkdev_read_iter+0x10/0x10 [ 246.719098][T15171] __io_read+0x357/0x14b0 [ 246.719115][T15171] ? __io_import_rw_buffer+0x245/0x6f0 [ 246.719136][T15171] io_read+0x8d/0x1f0 [ 246.719146][T15171] ? __pfx_io_read+0x10/0x10 [ 246.719160][T15171] __io_issue_sqe+0xe8/0x7c0 [ 246.719206][T15171] io_issue_sqe+0x85/0x1410 [ 246.719222][T15171] io_submit_sqes+0xb24/0x28e0 [ 246.719241][T15171] __do_sys_io_uring_enter+0xd6b/0x1630 [ 246.719256][T15171] ? __fget_files+0x20e/0x3c0 [ 246.719271][T15171] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 246.719285][T15171] ? fput+0x70/0xf0 [ 246.719295][T15171] ? ksys_write+0x1ac/0x250 [ 246.719309][T15171] ? __pfx_ksys_write+0x10/0x10 [ 246.719323][T15171] ? fdget+0x187/0x210 [ 246.719341][T15171] do_syscall_64+0xcd/0xf80 [ 246.719356][T15171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.719368][T15171] RIP: 0033:0x7f4ea7b8f7c9 [ 246.719377][T15171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.719388][T15171] RSP: 002b:00007f4ea8aca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 246.719399][T15171] RAX: ffffffffffffffda RBX: 00007f4ea7de5fa0 RCX: 00007f4ea7b8f7c9 [ 246.719406][T15171] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 246.719413][T15171] RBP: 00007f4ea8aca090 R08: 0000000000000000 R09: 0000000000000000 [ 246.719419][T15171] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 246.719426][T15171] R13: 00007f4ea7de6038 R14: 00007f4ea7de5fa0 R15: 00007fffc2f15e98 [ 246.719440][T15171] [ 246.723026][T15176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2599'. [ 246.956113][T15198] option changes via remount are deprecated (pid=15195 comm=syz.5.2609) [ 246.960547][T15193] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 247.013740][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 247.018755][T15209] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2610'. [ 247.026550][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 247.029836][T15212] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2610'. [ 247.128603][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 247.131880][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 247.153429][T15223] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2613'. [ 247.226272][T15225] FAULT_INJECTION: forcing a failure. [ 247.226272][T15225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.231132][T15225] CPU: 3 UID: 0 PID: 15225 Comm: syz.1.2614 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.231150][T15225] Tainted: [L]=SOFTLOCKUP [ 247.231155][T15225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.231183][T15225] Call Trace: [ 247.231195][T15225] [ 247.231202][T15225] dump_stack_lvl+0x16c/0x1f0 [ 247.231220][T15225] should_fail_ex+0x512/0x640 [ 247.231240][T15225] _copy_to_iter+0x29f/0x1710 [ 247.231260][T15225] ? __pfx__copy_to_iter+0x10/0x10 [ 247.231277][T15225] ? const_folio_flags+0x5b/0x100 [ 247.231288][T15225] ? folio_mark_accessed+0xc1/0xbf0 [ 247.231301][T15225] ? __pfx_folio_mark_accessed+0x10/0x10 [ 247.231316][T15225] copy_page_to_iter+0x12a/0x1e0 [ 247.231334][T15225] filemap_read+0x6b1/0xe40 [ 247.231352][T15225] ? __pfx_filemap_read+0x10/0x10 [ 247.231373][T15225] ? __pfx_down_read+0x10/0x10 [ 247.231390][T15225] ? avc_policy_seqno+0x9/0x20 [ 247.231407][T15225] ? selinux_file_permission+0x126/0x660 [ 247.231426][T15225] blkdev_read_iter+0x1ac/0x500 [ 247.231439][T15225] ? __pfx_blkdev_read_iter+0x10/0x10 [ 247.231450][T15225] __io_read+0x357/0x14b0 [ 247.231468][T15225] ? __io_import_rw_buffer+0x245/0x6f0 [ 247.231488][T15225] io_read+0x8d/0x1f0 [ 247.231499][T15225] ? __pfx_io_read+0x10/0x10 [ 247.231513][T15225] __io_issue_sqe+0xe8/0x7c0 [ 247.231530][T15225] io_issue_sqe+0x85/0x1410 [ 247.231544][T15225] io_submit_sqes+0xb24/0x28e0 [ 247.231564][T15225] __do_sys_io_uring_enter+0xd6b/0x1630 [ 247.231578][T15225] ? __fget_files+0x20e/0x3c0 [ 247.231595][T15225] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 247.231608][T15225] ? fput+0x70/0xf0 [ 247.231618][T15225] ? ksys_write+0x1ac/0x250 [ 247.231632][T15225] ? __pfx_ksys_write+0x10/0x10 [ 247.231650][T15225] do_syscall_64+0xcd/0xf80 [ 247.231666][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.231678][T15225] RIP: 0033:0x7fc691b8f7c9 [ 247.231687][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.231698][T15225] RSP: 002b:00007fc69297b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 247.231709][T15225] RAX: ffffffffffffffda RBX: 00007fc691de5fa0 RCX: 00007fc691b8f7c9 [ 247.231716][T15225] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 247.231722][T15225] RBP: 00007fc69297b090 R08: 0000000000000000 R09: 0000000000000000 [ 247.231729][T15225] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 247.231735][T15225] R13: 00007fc691de6038 R14: 00007fc691de5fa0 R15: 00007fff0ea2e0d8 [ 247.231750][T15225] [ 247.480016][T15245] FAULT_INJECTION: forcing a failure. [ 247.480016][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.486426][T15245] CPU: 2 UID: 0 PID: 15245 Comm: syz.5.2617 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.486456][T15245] Tainted: [L]=SOFTLOCKUP [ 247.486464][T15245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.486476][T15245] Call Trace: [ 247.486483][T15245] [ 247.486491][T15245] dump_stack_lvl+0x16c/0x1f0 [ 247.486521][T15245] should_fail_ex+0x512/0x640 [ 247.486555][T15245] _copy_from_user+0x2e/0xd0 [ 247.486585][T15245] kstrtouint_from_user+0xd6/0x1d0 [ 247.486608][T15245] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 247.486629][T15245] ? __lock_acquire+0x436/0x2890 [ 247.486655][T15245] ? lock_acquire+0x179/0x330 [ 247.486682][T15245] proc_fail_nth_write+0x83/0x220 [ 247.486704][T15245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.486732][T15245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.486752][T15245] vfs_write+0x2a0/0x11d0 [ 247.486779][T15245] ? __pfx___mutex_lock+0x10/0x10 [ 247.486808][T15245] ? __pfx_vfs_write+0x10/0x10 [ 247.486839][T15245] ? __fget_files+0x20e/0x3c0 [ 247.486862][T15245] ? __kvm_handle_async_pf+0x20/0xa0 [ 247.486895][T15245] ksys_write+0x12a/0x250 [ 247.486917][T15245] ? __pfx_ksys_write+0x10/0x10 [ 247.486949][T15245] do_syscall_64+0xcd/0xf80 [ 247.486975][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.486995][T15245] RIP: 0033:0x7f8c5698e27f [ 247.487011][T15245] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 247.487029][T15245] RSP: 002b:00007f8c57778030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 247.487049][T15245] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c5698e27f [ 247.487061][T15245] RDX: 0000000000000001 RSI: 00007f8c577780a0 RDI: 0000000000000004 [ 247.487073][T15245] RBP: 00007f8c57778090 R08: 0000000000000000 R09: 0000000000000000 [ 247.487084][T15245] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000002 [ 247.487096][T15245] R13: 00007f8c56be6128 R14: 00007f8c56be6090 R15: 00007ffed28941a8 [ 247.487123][T15245] [ 247.489159][T15241] syzkaller0: entered promiscuous mode [ 247.565604][T15241] syzkaller0: entered allmulticast mode [ 247.599870][T15254] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 247.697532][T15262] FAULT_INJECTION: forcing a failure. [ 247.697532][T15262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.702258][T15262] CPU: 3 UID: 0 PID: 15262 Comm: syz.2.2625 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.702277][T15262] Tainted: [L]=SOFTLOCKUP [ 247.702281][T15262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.702288][T15262] Call Trace: [ 247.702292][T15262] [ 247.702297][T15262] dump_stack_lvl+0x16c/0x1f0 [ 247.702316][T15262] should_fail_ex+0x512/0x640 [ 247.702336][T15262] _copy_to_iter+0x29f/0x1710 [ 247.702356][T15262] ? __pfx__copy_to_iter+0x10/0x10 [ 247.702373][T15262] ? const_folio_flags+0x5b/0x100 [ 247.702384][T15262] ? folio_mark_accessed+0xc1/0xbf0 [ 247.702396][T15262] ? __pfx_folio_mark_accessed+0x10/0x10 [ 247.702411][T15262] copy_page_to_iter+0x12a/0x1e0 [ 247.702430][T15262] filemap_read+0x6b1/0xe40 [ 247.702448][T15262] ? __pfx_filemap_read+0x10/0x10 [ 247.702470][T15262] ? __pfx_down_read+0x10/0x10 [ 247.702487][T15262] ? avc_policy_seqno+0x9/0x20 [ 247.702504][T15262] ? selinux_file_permission+0x126/0x660 [ 247.702522][T15262] blkdev_read_iter+0x1ac/0x500 [ 247.702536][T15262] ? __pfx_blkdev_read_iter+0x10/0x10 [ 247.702546][T15262] __io_read+0x357/0x14b0 [ 247.702563][T15262] ? __io_import_rw_buffer+0x245/0x6f0 [ 247.702584][T15262] io_read+0x8d/0x1f0 [ 247.702594][T15262] ? __pfx_io_read+0x10/0x10 [ 247.702608][T15262] __io_issue_sqe+0xe8/0x7c0 [ 247.702626][T15262] io_issue_sqe+0x85/0x1410 [ 247.702640][T15262] io_submit_sqes+0xb24/0x28e0 [ 247.702659][T15262] __do_sys_io_uring_enter+0xd6b/0x1630 [ 247.702673][T15262] ? __fget_files+0x20e/0x3c0 [ 247.702689][T15262] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 247.702703][T15262] ? fput+0x70/0xf0 [ 247.702713][T15262] ? ksys_write+0x1ac/0x250 [ 247.702727][T15262] ? __pfx_ksys_write+0x10/0x10 [ 247.702745][T15262] do_syscall_64+0xcd/0xf80 [ 247.702760][T15262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.702772][T15262] RIP: 0033:0x7fcf42b8f7c9 [ 247.702781][T15262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.702792][T15262] RSP: 002b:00007fcf43aad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 247.702803][T15262] RAX: ffffffffffffffda RBX: 00007fcf42de5fa0 RCX: 00007fcf42b8f7c9 [ 247.702810][T15262] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 247.702816][T15262] RBP: 00007fcf43aad090 R08: 0000000000000000 R09: 0000000000000000 [ 247.702823][T15262] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 247.702829][T15262] R13: 00007fcf42de6038 R14: 00007fcf42de5fa0 R15: 00007fff46d1ce38 [ 247.702844][T15262] [ 247.716935][T15260] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd5": -EINTR [ 247.760020][T15270] FAULT_INJECTION: forcing a failure. [ 247.760020][T15270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.821966][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.2.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.821985][T15270] Tainted: [L]=SOFTLOCKUP [ 247.821989][T15270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.821996][T15270] Call Trace: [ 247.822000][T15270] [ 247.822005][T15270] dump_stack_lvl+0x16c/0x1f0 [ 247.822024][T15270] should_fail_ex+0x512/0x640 [ 247.822044][T15270] should_fail_alloc_page+0xe7/0x130 [ 247.822061][T15270] prepare_alloc_pages+0x401/0x670 [ 247.822076][T15270] ? rcu_is_watching+0x12/0xc0 [ 247.822089][T15270] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 247.822105][T15270] ? __pfx_mas_split+0x10/0x10 [ 247.822124][T15270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.822142][T15270] ? __lock_acquire+0x436/0x2890 [ 247.822157][T15270] ? __lock_acquire+0x436/0x2890 [ 247.822169][T15270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.822184][T15270] ? policy_nodemask+0xea/0x4e0 [ 247.822205][T15270] alloc_pages_mpol+0x1fb/0x550 [ 247.822220][T15270] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 247.822240][T15270] folio_alloc_mpol_noprof+0x36/0x2f0 [ 247.822258][T15270] vma_alloc_folio_noprof+0xed/0x1e0 [ 247.822274][T15270] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 247.822296][T15270] do_anonymous_page+0xc81/0x2190 [ 247.822319][T15270] __handle_mm_fault+0x1ecf/0x2bb0 [ 247.822340][T15270] ? __pfx___handle_mm_fault+0x10/0x10 [ 247.822365][T15270] ? find_vma+0xbf/0x140 [ 247.822378][T15270] ? __pfx_find_vma+0x10/0x10 [ 247.822393][T15270] handle_mm_fault+0x3fe/0xad0 [ 247.822412][T15270] do_user_addr_fault+0x7a6/0x1370 [ 247.822430][T15270] ? rcu_is_watching+0x12/0xc0 [ 247.822443][T15270] exc_page_fault+0x64/0xc0 [ 247.822457][T15270] asm_exc_page_fault+0x26/0x30 [ 247.822469][T15270] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 247.822485][T15270] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 3d 5e 14 fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 ce 3f 7e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 247.822496][T15270] RSP: 0018:ffffc9000d6276c0 EFLAGS: 00050246 [ 247.822506][T15270] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 247.822513][T15270] RDX: 0000000000000000 RSI: ffff888059694000 RDI: 00002000000e9000 [ 247.822520][T15270] RBP: 00002000000e9000 R08: 0000000000000000 R09: ffffed100b2d29ff [ 247.822527][T15270] R10: ffff888059694fff R11: 0000000000000000 R12: ffff88803de30c20 [ 247.822533][T15270] R13: 00002000000ea000 R14: ffff888059694000 R15: 00007ffffffff000 [ 247.822552][T15270] ? __pfx__copy_to_iter+0x10/0x10 [ 247.822569][T15270] ? const_folio_flags+0x5b/0x100 [ 247.822580][T15270] ? folio_mark_accessed+0xc1/0xbf0 [ 247.822593][T15270] ? __pfx_folio_mark_accessed+0x10/0x10 [ 247.822608][T15270] copy_page_to_iter+0x12a/0x1e0 [ 247.822626][T15270] filemap_read+0x6b1/0xe40 [ 247.822645][T15270] ? __pfx_filemap_read+0x10/0x10 [ 247.822666][T15270] ? __pfx_down_read+0x10/0x10 [ 247.822684][T15270] ? avc_policy_seqno+0x9/0x20 [ 247.822701][T15270] ? selinux_file_permission+0x126/0x660 [ 247.822719][T15270] blkdev_read_iter+0x1ac/0x500 [ 247.822732][T15270] ? __pfx_blkdev_read_iter+0x10/0x10 [ 247.822742][T15270] __io_read+0x357/0x14b0 [ 247.822760][T15270] ? __io_import_rw_buffer+0x245/0x6f0 [ 247.822780][T15270] io_read+0x8d/0x1f0 [ 247.822790][T15270] ? __pfx_io_read+0x10/0x10 [ 247.822804][T15270] __io_issue_sqe+0xe8/0x7c0 [ 247.822822][T15270] io_issue_sqe+0x85/0x1410 [ 247.822835][T15270] io_submit_sqes+0xb24/0x28e0 [ 247.822855][T15270] __do_sys_io_uring_enter+0xd6b/0x1630 [ 247.822869][T15270] ? __fget_files+0x20e/0x3c0 [ 247.822886][T15270] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 247.822900][T15270] ? fput+0x70/0xf0 [ 247.822909][T15270] ? ksys_write+0x1ac/0x250 [ 247.822923][T15270] ? __pfx_ksys_write+0x10/0x10 [ 247.822941][T15270] do_syscall_64+0xcd/0xf80 [ 247.822957][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.822967][T15270] RIP: 0033:0x7fcf42b8f7c9 [ 247.822976][T15270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.822986][T15270] RSP: 002b:00007fcf43aad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 247.822996][T15270] RAX: ffffffffffffffda RBX: 00007fcf42de5fa0 RCX: 00007fcf42b8f7c9 [ 247.823003][T15270] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 247.823009][T15270] RBP: 00007fcf43aad090 R08: 0000000000000000 R09: 0000000000000000 [ 247.823016][T15270] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 247.823022][T15270] R13: 00007fcf42de6038 R14: 00007fcf42de5fa0 R15: 00007fff46d1ce38 [ 247.823037][T15270] [ 247.843023][T15274] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 247.872211][ T850] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 248.152522][ T850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.156447][ T850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.159542][ T850] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.164249][ T850] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 248.167586][ T850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.172747][ T850] usb 9-1: config 0 descriptor?? [ 248.624350][ T850] hid_parser_main: 22 callbacks suppressed [ 248.624363][ T850] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 248.629017][ T850] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 248.631261][ T850] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 248.633705][ T850] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 248.636052][ T850] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 248.654317][ T850] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 248.711339][ T850] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 248.714101][ T850] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 248.852055][T15284] netlink: 'syz.5.2630': attribute type 1 has an invalid length. [ 248.893835][T15285] random: crng reseeded on system resumption [ 248.916415][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.921681][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.934182][ T6024] usb 9-1: USB disconnect, device number 19 [ 248.937435][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 248.941585][ T6024] ------------[ cut here ]------------ [ 248.941602][ T6024] workqueue: work disable count underflowed [ 248.941609][ T6024] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#2: kworker/2:4/6024 [ 248.941647][ T6024] Modules linked in: [ 248.943847][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.946463][ T6024] CPU: 2 UID: 0 PID: 6024 Comm: kworker/2:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.949585][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.950968][ T6024] Tainted: [L]=SOFTLOCKUP [ 248.957468][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.958845][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.971183][ T6024] Workqueue: usb_hub_wq hub_event [ 248.972916][ T6024] RIP: 0010:enable_work+0x2ca/0x310 [ 248.974609][ T6024] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 ce 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 248.981065][ T6024] RSP: 0018:ffffc90004b47348 EFLAGS: 00010093 [ 248.983122][ T6024] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 248.985793][ T6024] RDX: ffff888028248000 RSI: ffffffff8184d8b3 RDI: ffffffff908ba6f0 [ 248.988566][ T6024] RBP: ffff88802ce76738 R08: 0000000000000005 R09: 0000000000000000 [ 248.991238][ T6024] R10: 0000000000000000 R11: ffff888028248b30 R12: 1ffff92000968e6a [ 248.993927][ T6024] R13: ffffffff8fc4e8bf R14: ffff88802ce76698 R15: ffff88802ce76730 [ 248.996578][ T6024] FS: 0000000000000000(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 248.999719][ T6024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.002004][ T6024] CR2: 000000110c342a27 CR3: 000000003349b000 CR4: 0000000000352ef0 [ 249.004679][ T6024] DR0: 0000000000000007 DR1: 00000000000001ff DR2: 0000000000010000 [ 249.007439][ T6024] DR3: 000000000000006a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.010113][ T6024] Call Trace: [ 249.011224][ T6024] [ 249.012317][ T6024] ? __pfx_enable_work+0x10/0x10 [ 249.013986][ T6024] cancel_delayed_work_sync+0x96/0xf0 [ 249.015831][ T6024] thermal_zone_device_unregister+0x28e/0x4d0 [ 249.017871][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 249.019661][ T6024] power_supply_unregister+0x10a/0x150 [ 249.021508][ T6024] shield_remove+0x75/0x130 [ 249.023022][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 249.024734][ T6024] hid_device_remove+0xd1/0x260 [ 249.026380][ T6024] ? __pfx_hid_device_remove+0x10/0x10 [ 249.028305][ T6024] device_remove+0xcb/0x170 [ 249.029991][ T6024] device_release_driver_internal+0x44b/0x620 [ 249.032227][ T6024] bus_remove_device+0x22f/0x450 [ 249.034355][ T6024] device_del+0x396/0x9f0 [ 249.036313][ T6024] ? __pfx_device_del+0x10/0x10 [ 249.037974][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 249.039695][ T6024] hid_destroy_device+0x19c/0x240 [ 249.041459][ T6024] usbhid_disconnect+0xa0/0xe0 [ 249.043071][ T6024] usb_unbind_interface+0x1dd/0x9e0 [ 249.044895][ T6024] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 249.046760][ T6024] ? __pfx_usb_unbind_interface+0x10/0x10 [ 249.048707][ T6024] device_remove+0x125/0x170 [ 249.050340][ T6024] device_release_driver_internal+0x44b/0x620 [ 249.052389][ T6024] bus_remove_device+0x22f/0x450 [ 249.054040][ T6024] device_del+0x396/0x9f0 [ 249.055529][ T6024] ? __pfx_device_del+0x10/0x10 [ 249.057243][ T6024] ? kobject_put+0x218/0x6f0 [ 249.058819][ T6024] usb_disable_device+0x355/0x820 [ 249.060527][ T6024] usb_disconnect+0x2e1/0x9e0 [ 249.062163][ T6024] hub_event+0x1d84/0x52f0 [ 249.063703][ T6024] ? __lock_acquire+0x436/0x2890 [ 249.065565][ T6024] ? do_raw_spin_unlock+0x172/0x230 [ 249.067877][ T6024] ? __pfx_hub_event+0x10/0x10 [ 249.070077][ T6024] ? debug_objects_fill_pool+0x3a0/0x660 [ 249.072640][ T6024] ? finish_task_switch.isra.0+0x202/0xbd0 [ 249.075292][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.077428][ T6024] process_one_work+0x9ba/0x1b20 [ 249.079765][ T6024] ? __pfx_process_one_work+0x10/0x10 [ 249.082217][ T6024] ? assign_work+0x1a0/0x250 [ 249.084265][ T6024] worker_thread+0x6c8/0xf10 [ 249.086404][ T6024] ? __kthread_parkme+0x19e/0x250 [ 249.088641][ T6024] ? __pfx_worker_thread+0x10/0x10 [ 249.090971][ T6024] kthread+0x3c5/0x780 [ 249.092695][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.094842][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.096942][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.099100][ T6024] ret_from_fork+0x983/0xb10 [ 249.101152][ T6024] ? __pfx_ret_from_fork+0x10/0x10 [ 249.103485][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.105590][ T6024] ? __switch_to+0x7af/0x10d0 [ 249.107654][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.109703][ T6024] ret_from_fork_asm+0x1a/0x30 [ 249.111808][ T6024] [ 249.113253][ T6024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.116431][ T6024] CPU: 2 UID: 0 PID: 6024 Comm: kworker/2:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.120824][ T6024] Tainted: [L]=SOFTLOCKUP [ 249.122689][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.127049][ T6024] Workqueue: usb_hub_wq hub_event [ 249.129127][ T6024] Call Trace: [ 249.130540][ T6024] [ 249.131907][ T6024] dump_stack_lvl+0x3d/0x1f0 [ 249.134085][ T6024] vpanic+0x640/0x6f0 [ 249.135937][ T6024] ? enable_work+0x2ca/0x310 [ 249.138123][ T6024] panic+0xca/0xd0 [ 249.139841][ T6024] ? __pfx_panic+0x10/0x10 [ 249.141937][ T6024] ? check_panic_on_warn+0x1f/0xb0 [ 249.143850][ T6024] check_panic_on_warn+0xab/0xb0 [ 249.145484][ T6024] __warn+0x108/0x3c0 [ 249.146844][ T6024] __report_bug+0x2a0/0x520 [ 249.148374][ T6024] ? enable_work+0x2ca/0x310 [ 249.149957][ T6024] ? __pfx___report_bug+0x10/0x10 [ 249.151923][ T6024] ? __wait_for_common+0x1e0/0x4e0 [ 249.153686][ T6024] ? enable_work+0x2c3/0x310 [ 249.155333][ T6024] ? enable_work+0xf3/0x310 [ 249.156871][ T6024] ? find_held_lock+0x2b/0x80 [ 249.158523][ T6024] report_bug_entry+0xe1/0x290 [ 249.160167][ T6024] ? enable_work+0x2ca/0x310 [ 249.161816][ T6024] handle_bug+0x18a/0x260 [ 249.163307][ T6024] exc_invalid_op+0x17/0x50 [ 249.164828][ T6024] asm_exc_invalid_op+0x1a/0x20 [ 249.166455][ T6024] RIP: 0010:enable_work+0x2ca/0x310 [ 249.168247][ T6024] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 ce 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 249.174707][ T6024] RSP: 0018:ffffc90004b47348 EFLAGS: 00010093 [ 249.176778][ T6024] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 249.179636][ T6024] RDX: ffff888028248000 RSI: ffffffff8184d8b3 RDI: ffffffff908ba6f0 [ 249.182378][ T6024] RBP: ffff88802ce76738 R08: 0000000000000005 R09: 0000000000000000 [ 249.185080][ T6024] R10: 0000000000000000 R11: ffff888028248b30 R12: 1ffff92000968e6a [ 249.187944][ T6024] R13: ffffffff8fc4e8bf R14: ffff88802ce76698 R15: ffff88802ce76730 [ 249.190639][ T6024] ? enable_work+0xf3/0x310 [ 249.192233][ T6024] ? enable_work+0x2c3/0x310 [ 249.193818][ T6024] ? enable_work+0x2c3/0x310 [ 249.195407][ T6024] ? __pfx_enable_work+0x10/0x10 [ 249.197074][ T6024] cancel_delayed_work_sync+0x96/0xf0 [ 249.198906][ T6024] thermal_zone_device_unregister+0x28e/0x4d0 [ 249.200928][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 249.202720][ T6024] power_supply_unregister+0x10a/0x150 [ 249.204601][ T6024] shield_remove+0x75/0x130 [ 249.206142][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 249.207852][ T6024] hid_device_remove+0xd1/0x260 [ 249.209493][ T6024] ? __pfx_hid_device_remove+0x10/0x10 [ 249.211433][ T6024] device_remove+0xcb/0x170 [ 249.212964][ T6024] device_release_driver_internal+0x44b/0x620 [ 249.214986][ T6024] bus_remove_device+0x22f/0x450 [ 249.216640][ T6024] device_del+0x396/0x9f0 [ 249.218042][ T6024] ? __pfx_device_del+0x10/0x10 [ 249.219704][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 249.221439][ T6024] hid_destroy_device+0x19c/0x240 [ 249.223183][ T6024] usbhid_disconnect+0xa0/0xe0 [ 249.224795][ T6024] usb_unbind_interface+0x1dd/0x9e0 [ 249.226540][ T6024] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 249.228486][ T6024] ? __pfx_usb_unbind_interface+0x10/0x10 [ 249.230401][ T6024] device_remove+0x125/0x170 [ 249.232036][ T6024] device_release_driver_internal+0x44b/0x620 [ 249.234122][ T6024] bus_remove_device+0x22f/0x450 [ 249.235786][ T6024] device_del+0x396/0x9f0 [ 249.237629][ T6024] ? __pfx_device_del+0x10/0x10 [ 249.239947][ T6024] ? kobject_put+0x218/0x6f0 [ 249.242197][ T6024] usb_disable_device+0x355/0x820 [ 249.244497][ T6024] usb_disconnect+0x2e1/0x9e0 [ 249.246754][ T6024] hub_event+0x1d84/0x52f0 [ 249.248933][ T6024] ? __lock_acquire+0x436/0x2890 [ 249.251234][ T6024] ? do_raw_spin_unlock+0x172/0x230 [ 249.253697][ T6024] ? __pfx_hub_event+0x10/0x10 [ 249.255926][ T6024] ? debug_objects_fill_pool+0x3a0/0x660 [ 249.258355][ T6024] ? finish_task_switch.isra.0+0x202/0xbd0 [ 249.260978][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.263245][ T6024] process_one_work+0x9ba/0x1b20 [ 249.265452][ T6024] ? __pfx_process_one_work+0x10/0x10 [ 249.267955][ T6024] ? assign_work+0x1a0/0x250 [ 249.270089][ T6024] worker_thread+0x6c8/0xf10 [ 249.272094][ T6024] ? __kthread_parkme+0x19e/0x250 [ 249.274151][ T6024] ? __pfx_worker_thread+0x10/0x10 [ 249.275920][ T6024] kthread+0x3c5/0x780 [ 249.277289][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.278876][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.280500][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.282319][ T6024] ret_from_fork+0x983/0xb10 [ 249.283892][ T6024] ? __pfx_ret_from_fork+0x10/0x10 [ 249.286074][ T6024] ? rcu_is_watching+0x12/0xc0 [ 249.288231][ T6024] ? __switch_to+0x7af/0x10d0 [ 249.290107][ T6024] ? __pfx_kthread+0x10/0x10 [ 249.291716][ T6024] ret_from_fork_asm+0x1a/0x30 [ 249.293427][ T6024] [ 249.295167][ T6024] Kernel Offset: disabled [ 249.296650][ T6024] Rebooting in 86400 seconds..