last executing test programs: 34.037854675s ago: executing program 0 (id=206): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) write$fault_inject(r3, &(0x7f0000000340)='0\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x4788, &(0x7f0000000280)={&(0x7f00000002c0)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f00000001c0)=""/28, 0xffd2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x101002, 0x40) write$cgroup_pid(r6, &(0x7f0000000540), 0x12) 34.037589414s ago: executing program 0 (id=207): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102010100000000000000000a"], 0x50}}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x3, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'pim6reg0\x00', 0x400}) (async, rerun: 64) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x200}) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000002b00)='./proc/thread-self/fail-nth\x00', 0x2, 0x98) write(r2, &(0x7f0000002b40)='3', 0x4e) (async) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000002b80)={'bond_slave_1\x00', 0x400}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000002600)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000002640)='GPL\x00'}, 0x80) (rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) (async, rerun: 32) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) (async, rerun: 32) r3 = fanotify_init(0xef0, 0x2) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/144, 0x90}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) (async) read$watch_queue(r5, &(0x7f0000002540)=""/148, 0xffffffc0) (async) sendmsg$vsock_stream(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002680)="704957b318d9331424a370e6d4b0377dbf520343e79055bc818b2c985922ce4a311d278dda45d094163884f32e57c7d41747b9654972887c8c3756e60c4dabd67d56fa68a7ef79af3f19c64147ecf257c7b8b3a9013d45b05cdf82f346d285ccfa0cebb29f66ff4183a9bbd7974f9eeda8ce0d8b65cd6fe5b45fa2d486a3", 0x7e}, {&(0x7f0000002700)="c37a3bef562df053cca664ffc308ac505cd027aae66a18ef6528d7856d970396224a61d6782a9a7ae681f5215a094dc1a48b34f427d9819bcc1fb5be5ab7244d0d4bdcb732049c2555289a3fc49bff9208f63d38f4af715f805a8a9f81dbda5afec78730b02b8b4c43731b8a000cdab86ad5d447ac6136f8209d9602b154c07d749597baeb89de57ce4d43497d8abe64d1e249d30497a617bf3c6303", 0x9c}, {&(0x7f00000027c0)="3df56a7674f873f1d66b42c185a8550ea4672a2b74943cfb71ca53f42246f735786023620b029f2c41752e9237f3269364210c5c5227a1fb69bbf20e9f70183096457f76eee353d8093a51f830c3bc7f5e5b125d0304ae7d748079ac187b", 0x5e}, {&(0x7f0000002840)="ab54a2ce2e07a53d8115b106979b91ee84c59780be3dd33bbee1048155ae5b69d74cce7a3b721f9b23c36ebf834bc6b49e49543d2e356fa5211ee0c4b4b5d67dea8b6e2688dc6689db1e144d0d4a4cd87d98ef2d679eb61ebac0678eca4f63201fb89021a24afb5411a5d11cdd6539f06272c7bb045e8aa4eb2ded99d7054a47", 0x80}, {&(0x7f00000028c0)="532dabce39c5ecbf338b42701af025fe1dfb9cf202d009fe76baedcd5dba0ddb5ad4d5f5013c0b2cea3911c2dcda44d3b92625625c732f186cc7c6e5b3f01f28855067835cc1bb6a738bccfbeb5c8760d43819f23cf2edf422037196dcbbd42535853bc59fd9a1c6bf", 0x69}, {&(0x7f0000002940)="829a89670743a0d56435d3ab1bfe0dee9d86e8eda2d498c4b6f973a804df508eef3a109e1456aa93dc946822ffb26d19e8e8ed6c86f96d7ded020029f174ac76131c814e0cc0ebceff1e160a41444f45d39f50e9ba3c70b91961f9b52f62a25ea48b76f13b966d91c62cb0a4b7d81be60f52b888455b57f283c51ebf2a96769fbff14663778bbb39617de82a3eb3e1fb5b3bc4483fe59ed97025e14f47a324c6eed3e136912cae469b597aaa1aebaf8f7d66cddd312197c2482a6b49c211b980d653f845cf0a4635755bc7abaec5136cc1a4617583e4b271", 0xd8}], 0x6}, 0x2040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000006f5b3db800"/28], 0x48) 33.058113782s ago: executing program 0 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004b00)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000200)={'ip6gre0\x00', 0xe65582}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x800) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x2, 0x2, @stop_pts=0x90}) sendmsg$nl_route_sched(r1, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004bc0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004c80)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xfeffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) mknod$loop(0x0, 0xfff, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1c3cadf1d7eb755d}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x26}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "db3a333dd9b085a91b2ae4986c0623e82b2cd0b6b073f917"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e9c94ccf5103c1ededc698ae21c047ebc99c3a7e9578350"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000045c0)={0x1, &(0x7f0000004600)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) close_range(r9, 0xffffffffffffffff, 0x0) 32.93813562s ago: executing program 0 (id=223): pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2010040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020}, 0xfffffed9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r2 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x6) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000004c0)={r2, 0x1, 0x0, 0x2000}) r3 = io_uring_setup(0x1757, &(0x7f00000001c0)={0x0, 0x2c3f, 0x4, 0x23, 0x400000ab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket(0x18, 0x1, 0xc) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000740)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000780)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000880), &(0x7f0000000140)=r4}, 0x20) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000940)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x42, 0x4, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8a], 0x8000000, 0x3c4210}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r7) 32.875995889s ago: executing program 0 (id=227): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x21c0, 0x103) open(&(0x7f00000008c0)='./file0\x00', 0x108843, 0x98) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000b80)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000c40)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000300)) r10 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000340)={0x0, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000400)={0x0, r10}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000480)={@my=0x1}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}) connect$vsock_stream(r11, &(0x7f0000000540)={0x28, 0x0, 0x0, @my=0x1, 0x1}, 0xfffffffffffffc52) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) syz_emit_ethernet(0x3b6, &(0x7f00000006c0)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f", @ANYBLOB="4ce5230688e887be518cb8ec197f9647115e134e484a1958082605bc83bc8060a24aa22bc29fd0"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="7b87f2e1d253c5feb1a763f6b592df5e078b54f3f1efcaeb3781756097b27d717e79d0e10e9e058439008f51b9a7378519c04426c6daa9ef574d9ebb3ab74972dd25742c54299ae63a8cbb"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r5, &(0x7f0000000c80)={0x0, 0x1, 0x0, 0x7, 0x255}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x4, 0x2, 0x100032b0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x2003e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x10, 0x2, 0x250}}], 0x1, &(0x7f0000000f80)={0x2e, 0x40, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x3, 0x288, 0x0, 0x0}}, 0x0) 32.567682466s ago: executing program 0 (id=231): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="7911a800000000005501020000000000b700000000000000950000003f0000008500000088000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.486513621s ago: executing program 32 (id=231): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="7911a800000000005501020000000000b700000000000000950000003f0000008500000088000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.919868305s ago: executing program 2 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r0, 0x84df}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000800)={0x10, 0x16c2, 0xfffffffb, 0x4, 0x1a, "9dfdff8de9b282aa1d99a0e9f90d8e78c59a09"}) 29.030487189s ago: executing program 2 (id=275): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x40000000015, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') sendfile(r3, r3, 0x0, 0x3) cachestat(r2, &(0x7f00000000c0)={0x95}, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x7, 0x40, 0x10, 0xffff, 0x5, 0x2, 0xfffff800, 0x8001, 0x9, 0x81, 0x12804b33, 0xc, 0x4d22, 0x80000000, 0x5b7, 0xffffffc0, 0x2000d527, 0x6, 0xb, 0x4}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) pread64(r4, &(0x7f0000000700)=""/102400, 0x19000, 0x1000000300) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) fcntl$setpipe(r6, 0x407, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYBLOB="875db835d0f582e2cf880fe69c60536869cff8be7e8c4c9f5ad29841d9559838f87f645b547ef652b5fadee6eaa0669399e3c9ec8acd0ed68f0e810ca5879d60932bc603776e53268a1c467366144a7e405449c51b706213c6", @ANYBLOB="00000000000000007900d8000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0xfffffff9}, 0x94) 28.809749431s ago: executing program 2 (id=279): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0xfffffffffffffe50}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd5000f8dbdf2555000000080001000100000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2800) r7 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000173494a1c3277ae722754089e5fb84e8110789ad6b879c749f8abe80e2ce7b7fcb33d63016b479356aafee4f403402095b70106219bce169fd8dfec1e4e80caf269b0f76b83f56dc5ff2ef9e20114a74a7bd3d896521fce7bcbc1cee885627b891f2c02285ce58148050eb7d7c60b58c19f5ba98a9f3bb231ff", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000004c0)={@remote, @local}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x11, 0x8847, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) socket$inet(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0xfffffffffffffe50}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd5000f8dbdf2555000000080001000100000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2800) (async) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000173494a1c3277ae722754089e5fb84e8110789ad6b879c749f8abe80e2ce7b7fcb33d63016b479356aafee4f403402095b70106219bce169fd8dfec1e4e80caf269b0f76b83f56dc5ff2ef9e20114a74a7bd3d896521fce7bcbc1cee885627b891f2c02285ce58148050eb7d7c60b58c19f5ba98a9f3bb231ff", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000004c0)={@remote, @local}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x11, 0x8847, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) 28.298029152s ago: executing program 2 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0282d2d20009059f0240000700ff0805010240"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x5, "acdb955c0c"}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x8000cc, @mcast2, 0x3}, {0xa, 0x4e23, 0x8ae5, @remote}, r3, 0x27}}, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x1000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) 26.647105938s ago: executing program 2 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b0201003110"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) unshare(0x26020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x20000) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x972, 0x100, 0x3, 0x9d}) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 26.228870087s ago: executing program 2 (id=330): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./mydev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002540)={0x1, &(0x7f0000002580)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) (async) syz_emit_ethernet(0x172, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "74144c", 0x13c, 0x11, 0xfe, @remote, @loopback, {[@routing={0x29, 0x2, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}]}, @srh={0x2e, 0x2, 0x4, 0x3, 0x0, 0x0, 0x3, {@mcast1}}, @dstopts={0x0, 0x0, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x7}]}, @srh={0x16, 0x2, 0x4, 0x1, 0x0, 0x8, 0xdd2, {@mcast1}}, @routing={0x73, 0xa, 0x0, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @dstopts={0x2b, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x6c}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}]}, @fragment={0x89, 0x0, 0x4, 0x1, 0x0, 0xc, 0x66}, @hopopts={0x2b, 0x3, '\x00', [@generic={0xfb}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x20}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x100}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6c, 0x100, @void}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mkdir(&(0x7f00000025c0)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000002600)='./bus\x00', &(0x7f0000002640)='system.posix_acl_access\x00', &(0x7f0000002680)={{}, {0x1, 0x2}, [{}], {0x4, 0x1}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x2c, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000002880)='./sys\x00', &(0x7f00000028c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) (rerun: 32) write(r3, &(0x7f0000002940)='3', 0x1) getxattr(&(0x7f00000026c0)='./bus\x00', &(0x7f0000002700)=@known='system.posix_acl_access\x00', &(0x7f0000002740)=""/245, 0x71) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) 26.145331182s ago: executing program 33 (id=330): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./mydev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002540)={0x1, &(0x7f0000002580)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) (async) syz_emit_ethernet(0x172, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "74144c", 0x13c, 0x11, 0xfe, @remote, @loopback, {[@routing={0x29, 0x2, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}]}, @srh={0x2e, 0x2, 0x4, 0x3, 0x0, 0x0, 0x3, {@mcast1}}, @dstopts={0x0, 0x0, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x7}]}, @srh={0x16, 0x2, 0x4, 0x1, 0x0, 0x8, 0xdd2, {@mcast1}}, @routing={0x73, 0xa, 0x0, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @dstopts={0x2b, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x6c}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}]}, @fragment={0x89, 0x0, 0x4, 0x1, 0x0, 0xc, 0x66}, @hopopts={0x2b, 0x3, '\x00', [@generic={0xfb}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x20}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x100}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6c, 0x100, @void}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mkdir(&(0x7f00000025c0)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000002600)='./bus\x00', &(0x7f0000002640)='system.posix_acl_access\x00', &(0x7f0000002680)={{}, {0x1, 0x2}, [{}], {0x4, 0x1}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x2c, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000002880)='./sys\x00', &(0x7f00000028c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) (rerun: 32) write(r3, &(0x7f0000002940)='3', 0x1) getxattr(&(0x7f00000026c0)='./bus\x00', &(0x7f0000002700)=@known='system.posix_acl_access\x00', &(0x7f0000002740)=""/245, 0x71) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) 12.700252838s ago: executing program 1 (id=554): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x19, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e200000200000000000000000200010000ffffff8200fb0200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 12.699951234s ago: executing program 1 (id=555): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000001c0)={0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@deltfilter={0x668, 0x2d, 0x100, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xd, 0xa}, {0xf, 0xffe0}, {0xc, 0xbcc872277eab799c}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xf, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x624, 0x2, [@TCA_FW_ACT={0x230, 0x4, [@m_csum={0x124, 0xa, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0x8, 0x8000}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x71, 0x8, 0x8, 0xe, 0x4}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbe, 0x100, 0x6, 0xfffffbff, 0x10000}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x10000000, 0x7f, 0x2de8}, 0x36}}]}, {0x87, 0x6, "38ef5aeae7ff6f41006e3adb97929ad4dbd21aa00d6bf103f0b8ff56e3e4bd814710b74fb1524c53c8b095ad71124b72bd973dc96c0b6fd61526dd147ac415ce2f02b2f3b07e350594533aadfdc6c09afe7529ad56ae9c1aceb1766c4d733a580d83747b5e3b0cc5072423a671155ae3df18985a1592bc2e549fea3ee3f6d7fe54f851"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x50, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20000, 0x0, 0x8, 0x6}}]}, {0x10, 0x6, "6d3c447dfacd15350cd88392"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "3e0bed017bae3821d32e44510c65c649"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_ACTION={0x6, 0x3, 0x37}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x200, 0x20000000, 0x9, 0x4}}]}, {0x51, 0x6, "b33c8f7dcfcf9dd84b814e52071c075204573574005d55645e05083db2a03603cb2ce274b903792bfa2d1782e6f12677b167af1827209ada96989a435cbb08047dc909ba3cbae4a926d2561442"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_ACT={0x3e8, 0x4, [@m_ctinfo={0x178, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x1, 0x2, 0x9, 0x5}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x4, 0x2, 0xfffffc00, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x3, 0x3, 0x5}}]}, {0xdc, 0x6, "b396dc5799a1e81d6edaa00090572d647c0eeb96f40ce944e6745e742e4a9bde72d02873d4373f6593e782003277c8f3b077f2bac715f80f9e7d254e817dc99d8de84dd1f1a8c7d137663f8a8e11de5f6056be81b6362cda2f2fa1c8d4a6b01064d65d1f5b7906a06af77187220f8b9c024ded9c381e28f640bf11cf811f19980060331b265870664f30267c438a233cea1174c72552e6ad6089d27a4a384951a4115debe271414132b421fb4e912c0c03623d3fb5a1eaa1904871e5cd75a17b6a2dc392bd3619aedbbffa8abb11b2b98fdd6085ea11ad30"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xc0, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x8b, 0x6, "395e92fcee95aa0953a78e9f24a7e1b7ddfab0eda89abffed44317e59b519ccb2cb50ecd26ee7eb4106e109dab7a616993bf7c5116644e02b7f259bc5bda7c9628ffa7a857c7ef1eeaa3cf075de07c38abd80dd3bd53342d3386d73dd5040674c3db665c0d193da4352354fbdc1205c8fd7b041e1f0f4f6df126c0e8a83fb47396f9ce5e831379"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x98, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x5, 0x8, 0xfd, 0x10002}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8001, 0x6, 0x1}}}]}, {0x30, 0x6, "637bef62f33607b6b98d1a9d885f941d6cfa529e0777eb1e54fe4fd387fa1d4181da28749997ea7f5d9ceece"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x114, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0x1, 0x5, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xb6, 0x6, "46cd9cc167ea7626544adfaa56874015dfa65fa4929a010843552e5f3505cb3c80c412160bc8fbffd2ffc3696b772290237dee6a28d6a83e1bd8ac1979b4f2a9facd99bfc156d0b61fd8aa85fe73464336ca72dbb4e9329b7fd77091313776d6898e143be66c2fbd624f4eecff4051dac7e7bbb4e1c6dcb1709ccf18bdde712e24075deff538267ba212c7b044482c4f41ee727ef2e4634b389c5fb859e663d5a595c9a3323658b0b11f8f24c6b3434ba5d5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x668}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa1}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000001c0)={0x0, 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@deltfilter={0x668, 0x2d, 0x100, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xd, 0xa}, {0xf, 0xffe0}, {0xc, 0xbcc872277eab799c}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xf, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x624, 0x2, [@TCA_FW_ACT={0x230, 0x4, [@m_csum={0x124, 0xa, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0x8, 0x8000}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x71, 0x8, 0x8, 0xe, 0x4}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbe, 0x100, 0x6, 0xfffffbff, 0x10000}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x10000000, 0x7f, 0x2de8}, 0x36}}]}, {0x87, 0x6, "38ef5aeae7ff6f41006e3adb97929ad4dbd21aa00d6bf103f0b8ff56e3e4bd814710b74fb1524c53c8b095ad71124b72bd973dc96c0b6fd61526dd147ac415ce2f02b2f3b07e350594533aadfdc6c09afe7529ad56ae9c1aceb1766c4d733a580d83747b5e3b0cc5072423a671155ae3df18985a1592bc2e549fea3ee3f6d7fe54f851"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x50, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20000, 0x0, 0x8, 0x6}}]}, {0x10, 0x6, "6d3c447dfacd15350cd88392"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "3e0bed017bae3821d32e44510c65c649"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_ACTION={0x6, 0x3, 0x37}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x200, 0x20000000, 0x9, 0x4}}]}, {0x51, 0x6, "b33c8f7dcfcf9dd84b814e52071c075204573574005d55645e05083db2a03603cb2ce274b903792bfa2d1782e6f12677b167af1827209ada96989a435cbb08047dc909ba3cbae4a926d2561442"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_ACT={0x3e8, 0x4, [@m_ctinfo={0x178, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x1, 0x2, 0x9, 0x5}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x4, 0x2, 0xfffffc00, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x3, 0x3, 0x5}}]}, {0xdc, 0x6, "b396dc5799a1e81d6edaa00090572d647c0eeb96f40ce944e6745e742e4a9bde72d02873d4373f6593e782003277c8f3b077f2bac715f80f9e7d254e817dc99d8de84dd1f1a8c7d137663f8a8e11de5f6056be81b6362cda2f2fa1c8d4a6b01064d65d1f5b7906a06af77187220f8b9c024ded9c381e28f640bf11cf811f19980060331b265870664f30267c438a233cea1174c72552e6ad6089d27a4a384951a4115debe271414132b421fb4e912c0c03623d3fb5a1eaa1904871e5cd75a17b6a2dc392bd3619aedbbffa8abb11b2b98fdd6085ea11ad30"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xc0, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x8b, 0x6, "395e92fcee95aa0953a78e9f24a7e1b7ddfab0eda89abffed44317e59b519ccb2cb50ecd26ee7eb4106e109dab7a616993bf7c5116644e02b7f259bc5bda7c9628ffa7a857c7ef1eeaa3cf075de07c38abd80dd3bd53342d3386d73dd5040674c3db665c0d193da4352354fbdc1205c8fd7b041e1f0f4f6df126c0e8a83fb47396f9ce5e831379"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x98, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x5, 0x8, 0xfd, 0x10002}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8001, 0x6, 0x1}}}]}, {0x30, 0x6, "637bef62f33607b6b98d1a9d885f941d6cfa529e0777eb1e54fe4fd387fa1d4181da28749997ea7f5d9ceece"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x114, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0x1, 0x5, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xb6, 0x6, "46cd9cc167ea7626544adfaa56874015dfa65fa4929a010843552e5f3505cb3c80c412160bc8fbffd2ffc3696b772290237dee6a28d6a83e1bd8ac1979b4f2a9facd99bfc156d0b61fd8aa85fe73464336ca72dbb4e9329b7fd77091313776d6898e143be66c2fbd624f4eecff4051dac7e7bbb4e1c6dcb1709ccf18bdde712e24075deff538267ba212c7b044482c4f41ee727ef2e4634b389c5fb859e663d5a595c9a3323658b0b11f8f24c6b3434ba5d5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x668}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'netdevsim0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa1}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) 12.589744147s ago: executing program 1 (id=557): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000380)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r1, 0x0, 0x1, 0x400001) r2 = memfd_create(&(0x7f0000000240)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c4) ftruncate(r2, 0x2000000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x1b, 0x4000, 0x1000000}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3800006, 0x40010, r2, 0x73c30000) 12.490391325s ago: executing program 1 (id=558): syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x1}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r1, 0x400452c8, &(0x7f0000000680)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/rfcomm0\x00', 0x802, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x400000a, 0x5d030, 0xffffffffffffffff, 0x0) syz_create_resource$futex(0x0) socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x5402, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r3], 0x4c}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x300}}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="000096000a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000480)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x2, @mcast2, 0x70e}}, {{0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8}}}, 0x108) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000040)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f911, 0x8000, '\x00', @string=&(0x7f0000000180)=0x4}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x1, 0x12, r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r11, 0x10e, 0xa, &(0x7f00000000c0), 0x4) 12.410251692s ago: executing program 1 (id=560): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000240)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x1b, 0x1000fff, 0x1000000}) 12.059485815s ago: executing program 1 (id=565): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x19, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e20000020000000000000000020001000082ffffff00fb0200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 12.004253784s ago: executing program 34 (id=565): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x19, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e20000020000000000000000020001000082ffffff00fb0200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 10.612488378s ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.54056196s ago: executing program 3 (id=574): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000240)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x1b, 0x7fffffff00, 0x1000000}) 10.539082532s ago: executing program 3 (id=575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x19, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e2000002000000000000000002000100000019000000fb0200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 10.459682175s ago: executing program 3 (id=576): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x800, 0x6) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x83, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000100)={0x66666666666648c, 0x0, [{0x80000008, 0x0, 0x2, 0x100, 0x8b0, 0xf0d6, 0x193}]}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f00000000c0)=0x7, 0x4) 10.389333123s ago: executing program 3 (id=579): syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001010000000000000040000085000000d000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r2}, &(0x7f0000000f00), &(0x7f0000000f40)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r3}, 0xc) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x4e00, 0x0) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r4, 0x2284, &(0x7f0000000440)=@type=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000104008000002000000000000010", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300627269646765300000000000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x50}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000104008000002000000000000010", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300627269646765300000000000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000fc0)={'bridge0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r8, &(0x7f0000000cc0)='n', 0x1) ioctl$COMEDI_SETWSUBD(r8, 0x6411) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)=@bridge_getlink={0x54, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x44800}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_WEIGHT={0x8, 0xf, 0x80000000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x54}}, 0x4000000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)=@bridge_getlink={0x54, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x44800}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_WEIGHT={0x8, 0xf, 0x80000000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x54}}, 0x4000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/syz_tun/brport/root_block\x00', 0x2, 0x0) setresgid(0xee01, 0x0, 0xee00) syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') fchdir(r10) (async) fchdir(r10) mount(0x0, &(0x7f0000001000)='.\x00', &(0x7f0000001040)='proc\x00', 0x800000, 0x0) r11 = syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r11, &(0x7f0000001080)='syscall\x00') (async) r12 = syz_open_procfs(r11, &(0x7f0000001080)='syscall\x00') pread64(r12, &(0x7f00000010c0)=""/31, 0x1f, 0x6677) write(r9, &(0x7f0000000380)='1\n', 0x2) syz_emit_ethernet(0x35, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000020000000001002642420300000000000000000000000100000000000000000000000180010000140002000f00"], 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 10.269834106s ago: executing program 3 (id=580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'bbc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000000)) r2 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x7, @mcast1, 0x1}, 0x1c) fchdir(r3) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x6) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) 2.310178888s ago: executing program 6 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f000000, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.309991441s ago: executing program 6 (id=680): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000240)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x1b, 0x1000, 0x40000000}) 2.214923255s ago: executing program 6 (id=681): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x5, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2.214753715s ago: executing program 6 (id=682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0xd) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x7) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0xffffffffffffffff, 0x2, 0x0, 0x2000000000000, 0x5, 0xfffffffffffffdfd, 0x4000000050}, {0x5, 0x0, 0x100000000, 0x8000000000000000}, 0x6, 0x40000000, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000000c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r6, 0x80044d76, &(0x7f0000000140)) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 399.407211ms ago: executing program 4 (id=708): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x11, 0x572, 0x8000, 0x29, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) r2 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x0, {0xd84, 0xfffffffc, 0x8}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8, 0x0, 0x8, 0xb3, 0xb, "8b14d4570100"}) 338.868411ms ago: executing program 4 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x70, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 260.199255ms ago: executing program 4 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0xffff0000, 0xe, 0x0, &(0x7f0000000280)="ddff00001a748296f3d62a7200d7", 0x0, 0x7, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) write(r0, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 258.116669ms ago: executing program 4 (id=714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x4}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x9c, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @esp={{0x20, 0x4, 0x0, 0x0, 0x8e, 0x64, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @cipso={0x86, 0x16, 0x3, [{0x6, 0x10, "4f78d9e95680fe0e0a9f12707076"}]}, @timestamp_prespec={0x44, 0x14, 0xaa, 0x3, 0x5, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}}]}, @ra={0x94, 0x4, 0x7ff}, @generic={0x44, 0x10, "34ee18c13ba09c8b5c0ce126baeb"}, @ssrr={0x89, 0x1f, 0xc1, [@private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @local, @multicast2]}, @ssrr={0x89, 0xb, 0xb4, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}]}}}}}}, 0x0) 210.093712ms ago: executing program 5 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82900, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000001640), 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) keyctl$instantiate(0xc, 0x0, &(0x7f00000012c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000001680)={0x1f4e, 0x8, 0x2}, 0x30, 0x0) landlock_restrict_self(r4, 0x5) (async) r5 = fsopen(&(0x7f0000001480)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) (async, rerun: 64) r7 = fsmount(r5, 0x1, 0x0) (rerun: 64) fchdir(r7) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001580)=@generic={&(0x7f00000015c0)='./file0\x00', r6}, 0x18) (async) add_key(&(0x7f0000001300)='encrypted\x00', &(0x7f0000001340), &(0x7f0000001380), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f00000013c0)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) (async) add_key(&(0x7f0000001400)='encrypted\x00', &(0x7f0000001440), &(0x7f0000001480), 0xca, 0xfffffffffffffffe) (async) add_key(&(0x7f0000001380)='rxrpc\x00', 0x0, &(0x7f00000016c0)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1}, 0x48) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') readv(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) (async) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r10, 0x84, 0x84, &(0x7f00000011c0)={0x2, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x4e23}, &(0x7f0000001280)=0x90) (async, rerun: 32) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0xa98, 0x0, 0x101}, {0x2d9, 0x0, 0x5}]}) (rerun: 32) 209.87898ms ago: executing program 4 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x80) syz_io_uring_setup(0x9e2, &(0x7f0000001b00)={0x0, 0xfb33, 0x1, 0x6000, 0x1000004e}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000001c00)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000001c40)=@IORING_OP_FUTEX_WAIT={0x33, 0x12, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) 209.501948ms ago: executing program 4 (id=717): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x10106, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x0) sync_file_range(r1, 0x2, 0x10000000000002, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff}, 0xc) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='3', 0x1) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) (async) r6 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000740)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r6, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) (async) syz_usb_connect$uac2(0x0, 0x10e, &(0x7f0000001800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x2d05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x8, 0xc0, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff, 0x2, 0x48, 0xda}, [@effect_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0x3, [0x2, 0x3]}, @processing_unit={0xf, 0x24, 0x8, 0x1, 0x2, [0x2, 0x3, 0x2, 0x1, 0x0]}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x10, "ac8c0623"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, [0x4, 0x6, 0x2, 0xa]}, @source_unit={0x8, 0x24, 0xa, 0x80, 0x3, 0x3, 0x2, 0x1}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0x81, 0xfc, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x10, 0x4, 0xc0, {0x8, 0x25, 0x1, 0x0, 0x3, 0x1, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x2, 0x9, "450ea7e33b0803"}, @as_header={0x10, 0x24, 0x1, 0x3, 0x3, 0x0, 0x2, 0x7, 0x3, 0x9b}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd4, 0x1, 0x8, 0x27, "58b6f2859313ef5045"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3c18, 0x1, 0x9, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0xc3, 0x1, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x1800, 0x0, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfb, 0xf, 0x3, {0x8, 0x25, 0x1, 0x0, 0xa, 0x5, 0xa}}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x310, 0xc, 0xb, 0x8, 0x8, 0x1}, 0x42, &(0x7f0000001980)={0x5, 0xf, 0x42, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x90, 0x6, 0xb906, 0x0, 0x1, [0x3f00, 0x0, 0xc000, 0xf, 0x3ff0, 0x807d655fdb952aaf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x4, 0x81, 0x8, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xd, 0x2, 0x3, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x406}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000002240)) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000022c0)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect$uac2(0x4, 0x112, &(0x7f0000001a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x2, 0x80, 0xb, {0x8, 0xb, 0x2, 0x0, 0x1, 0x4, 0x20, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x6, 0x2e, 0x1}, [@multiply_unit={0x7, 0x24, 0xc, 0x8, 0xe7, 0x4, 0x6}, @processing_unit={0xf, 0x24, 0x8, 0x5, 0x3, [0x0, 0x3, 0x0, 0x0, 0x1]}, @extension_unit={0x7, 0x24, 0x9, 0x2, 0x7, 0x6}, @source_unit={0x8, 0x24, 0xa, 0x7, 0x2, 0x3, 0x55, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0x5, 0x7, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfc, 0x1, 0x6, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffb, 0x9e5, 0x7, "b7cb1c225c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x8, 0x74, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x3, 0x5, {0x8, 0x25, 0x1, 0x2, 0x0, 0xfb, 0xea40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0xe, "86a38a51dc0f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0xfb, 0x0, 0x8, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x5, 0xd, 0xa3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x10, 0x6, 0xa3, "fddf59"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x8, "fd6f"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6, 0x1, "309dc401ff6f50cf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb, 0xe, 0xf5, {0x8, 0x25, 0x1, 0x82, 0x30, 0xa, 0xff00}}}}}}}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x200, 0xc8, 0x7, 0x2, 0xff, 0xfc}, 0x30, &(0x7f0000001c00)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x7fffff7, 0xf0f, 0xf0c2, [0x30, 0xc0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "040539d4905409b54ece4525d4502ee2"}]}, 0xa, [{0x66, &(0x7f0000001c40)=@string={0x66, 0x3, "824bba2a17127a18d520464f8e0852bb7fdb7e2aee3d53390eea7080c2fa076392f65633623a7e7f79d1afaaf6ecb0f288ebc6a1a46a6ce4ea9bee858f9ecee8881d5a336a9eeef7f85f80817169dfbcaf9978baef6b40521257cfdc742563ea9360a278"}}, {0xa5, &(0x7f0000001cc0)=@string={0xa5, 0x3, "61d37ed38bea4b09a0c1c0d278732269f39cc6d901f57ffa80da7b79befa808f73f8d67b997c6a68c2f1849b1a1d2979180d73af8fbec5543afda46358eb22e65f3810a3bc0a148f80b747b0ba1fdcb74d0dbc861ac9c02360e4bf8c628a8eeca5f3fd5daa603049f86dd0ba30adebb2931f2364dbff335833488f955cf845f2fdd0ce3502d98ed4bf8c429116997fe9f91ca70cd6472ae19749d73436200c7d85faca"}}, {0xac, &(0x7f0000001d80)=@string={0xac, 0x3, "2833eab572cc9eb50469b13011d4ca6b11820a7cdbbb7cd79da91c4f44179893d11da404313d78699c0736b479904e17fae3f57d78fa48f81382eca27a43125e6b541f307339ec82ff87a4a9655186619c226e91eeb8cfc450a8930d4f71e32e0cb5d88ba06708d36d4c3fda979289598742e952219dc855996614038406336e6362ed4a14238a1d46afa4959b7c98ebba382ff2f7f8969e5735531dabae33196b9f8b8ae8aa421b368b"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x407}}, {0x49, &(0x7f0000001ec0)=@string={0x49, 0x3, "998e599a0dd08f16f86f0be3b9036621241bae825661d8891917c12962ead2d21668b8de9824f49534e0ae569fae54c13299a9d40c2d6ffcfa667750f04739c494e7e5b483204f"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x2074}}, {0xef, &(0x7f0000001f80)=@string={0xef, 0x3, "b853bc2f30cdd868032a0196da19594bf07d91c63ab9b265de6c0499444cbd201d494165406bf9feb6e1b60f4a4885b404571fcef3376ea342e078a199802b0b08d23a1913d0497947c1020b0beddbe6884d3ffce9d084437be173098af68c09ac3f35559a9222d41cf781bc20b4b3128115a5302607055b549b53b0e9e26238e9b1af043092d0121daccb4103585758fb7c090af653947bbdbe52d5b882ed81a2143554339b03508a96d2ea85a2b483f5951cf1291cd2cb414b0a9c5c4380144bea23db686e57e949d0318412af8bd03a216aa94d901742ff7cb1ae280a1024f112a1a36cce4ce073746e589a"}}, {0xa3, &(0x7f0000002080)=@string={0xa3, 0x3, "7dc3798e56e622768a6af5ed7e8888fe4640872b9d15a661885f4474e585599db6238b6532a6673dc2b64327f0b2d934ea9a38d31001dd4676b5dcce7a6dca9da2440c7312b7c226e9cc6c8216e63bb96e0950dfc802d9b4c5eaf47d55fd03a9b2ee8a5e2b68dc4a6465063d496544828f83f4767a1e9c3e5fd7f081853f841c2f2bd7cfdda5813f7117b2305aa0351209ba4e96778e66f8770ae59fa2b1268991"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io$uac2(r10, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000840), 0x3, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, &(0x7f0000000300)=0x60) 108.85562ms ago: executing program 6 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 108.330251ms ago: executing program 5 (id=719): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet(0x2, 0x2, 0x11) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/pppol2tp\x00', 0x242882, 0xc0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)="28616d65207e20221d22", 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r4, &(0x7f0000000680), 0x1) read(r4, &(0x7f00000006c0), 0x120) close_range(r0, 0xffffffffffffffff, 0x0) 107.93693ms ago: executing program 6 (id=720): r0 = syz_usbip_server_init(0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x1, 0xfffffffffffffffb, 0x0, 0x8, 0x64fe, 0xb, 0x10001, 0xb, 0x9657, 0x7, 0x80000001, 0xfffffffffffffffb, 0x1000000000000020, 0xc, 0x40, 0xcc0, 0x6, 0x3, 0x10000094d6, 0x10, 0x2, 0x10000000010000c, 0x2, 0xbc0, 0x7, 0x2000000000000}) (async) syz_usbip_server_init(0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x40000000) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) (async, rerun: 32) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x3, 0x1, 0x18, "654ac9770f4cf240b284b69c3059b75dcf4daa88c9ed22c4e0fef7b5228b8fb2ba1ef8f40b1891be16aba9e44361d08628f41d83400746507d465998f1852ed0", "b56cbdcc2394fcdfbac64d8f540a85b36ec6bb3cf88bd5ba262d105ca8cc6e4f61f9c03e3894ff4ef7a0240cc8a17cd08d2a3bd293c7050b76d854c43726e527", "bc82c6607200751ef0a460aae5ba822e44b22c750a972a37f43a106a6c9334ae", [0x2, 0x7]}) 60.140384ms ago: executing program 5 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x4c044}, 0x4040800) 59.936662ms ago: executing program 5 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11b01}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x6}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) 321.247µs ago: executing program 5 (id=723): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="df33c9f7b9862300000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=724): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000240)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x1d9) r4 = socket(0x10, 0x3, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) tkill(r5, 0x7) wait4(r5, 0x0, 0x2, 0x0) sendmsg$netlink(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="100000002a000002265ac7d7573d3b50"], 0x10}], 0x1, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x40040c0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x0, 0x3fe, 0x1000002, r6, 0xc}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000003c0)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000400)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracefs\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs/instances/foo\x00', 0x1ff) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x149002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000800)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) unlinkat(0xffffffffffffff9c, 0x0, 0x200) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x1b, 0x1000, 0x1000000}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xc, 0x0, r0}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000580)={r8, 0x0, 0x1000, 0x1000000000000}) kernel console output (not intermixed with test programs): _SYSCALL_64_after_hwframe+0x77/0x7f [ 59.135452][ T7103] RIP: 0033:0x7f95c9ba94d9 [ 59.135462][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.135472][ T7103] RSP: 002b:00007f95cab14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.135492][ T7103] RAX: ffffffffffffffda RBX: 00007f95c9e25fa0 RCX: 00007f95c9ba94d9 [ 59.135499][ T7103] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 59.135505][ T7103] RBP: 00007f95c9c3804e R08: 0000000000000000 R09: 0000000000000000 [ 59.135512][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.135518][ T7103] R13: 00007f95c9e26038 R14: 00007f95c9e25fa0 R15: 00007ffe8f72cbd8 [ 59.135534][ T7103] [ 59.291005][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.353710][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 59.369141][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.369173][ T5782] Bluetooth: hci3: command 0x040f tx timeout [ 59.369279][ T5773] Bluetooth: hci1: command 0x041b tx timeout [ 59.370840][ T43] audit: type=1400 audit(1794632631.530:500): avc: denied { setopt } for pid=7132 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.456469][ T7145] kAFS: Invalid Command on /proc/fs/afs/cells file [ 59.555080][ T43] audit: type=1804 audit(1794632631.710:501): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.317" name="/newroot/68/file0" dev="fuse" ino=1 res=1 errno=0 [ 59.574280][ T7156] fuse: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 59.576242][ T43] audit: type=1400 audit(1794632631.730:502): avc: denied { unmount } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 59.578833][ T43] audit: type=1400 audit(1794632631.730:503): avc: denied { getopt } for pid=7155 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.614944][ T7158] bond1: entered promiscuous mode [ 59.615196][ T7158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.645870][ T64] IPVS: starting estimator thread 0... [ 59.646344][ T7163] xt_hashlimit: max too large, truncated to 1048576 [ 59.731624][ T7164] IPVS: using max 45 ests per chain, 108000 per kthread [ 59.832845][ T5865] usb 7-1: USB disconnect, device number 4 [ 59.853003][ T5865] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 59.853346][ T5865] cypress_m8 7-1:142.251: device disconnected [ 59.924929][ T7174] geneve2: entered promiscuous mode [ 59.981606][ T5851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.013940][ T7179] only policy match revision 0 supported [ 60.013948][ T7179] unable to load match [ 60.026720][ T43] audit: type=1400 audit(1794632632.180:504): avc: denied { getopt } for pid=7180 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.048438][ T5851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.135758][ T5851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.197981][ T5851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.280955][ T5851] bridge_slave_1: left allmulticast mode [ 60.280980][ T5851] bridge_slave_1: left promiscuous mode [ 60.281262][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.285476][ T5851] bridge_slave_0: left allmulticast mode [ 60.285498][ T5851] bridge_slave_0: left promiscuous mode [ 60.285718][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.339372][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.341484][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.342242][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.343414][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.343808][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.355242][ T7195] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 60.357680][ T7195] exFAT-fs (nbd3): unable to read boot sector [ 60.357692][ T7195] exFAT-fs (nbd3): failed to read boot sector [ 60.357699][ T7195] exFAT-fs (nbd3): failed to recognize exfat type [ 60.423828][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.425018][ T5851] bond0 (unregistering): Released all slaves [ 60.430677][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.333'. [ 60.623937][ T7192] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.640244][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 60.711962][ T7233] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 60.824131][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7 [ 60.843619][ T5851] hsr_slave_0: left promiscuous mode [ 60.844032][ T5851] hsr_slave_1: left promiscuous mode [ 60.844383][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.844394][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.844869][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.844879][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.855826][ T5851] veth1_macvtap: left promiscuous mode [ 60.855848][ T5851] veth0_macvtap: left promiscuous mode [ 60.855966][ T5851] veth1_vlan: left promiscuous mode [ 60.855994][ T5851] veth0_vlan: left promiscuous mode [ 60.866385][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 60.896158][ T7247] overlayfs: missing 'workdir' [ 60.980767][ T7251] FAULT_INJECTION: forcing a failure. [ 60.980767][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 60.980784][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 60.980796][ T7251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.980801][ T7251] Call Trace: [ 60.980805][ T7251] [ 60.980810][ T7251] dump_stack_lvl+0x100/0x190 [ 60.980856][ T7251] should_fail_ex.cold+0x5/0xa [ 60.980879][ T7251] should_failslab+0xc2/0x120 [ 60.980893][ T7251] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 60.980903][ T7251] ? vfs_write+0x2aa/0x1040 [ 60.980914][ T7251] ? do_syscall_64+0x123/0x7b0 [ 60.980928][ T7251] ? kvasprintf_const+0x66/0x1a0 [ 60.980946][ T7251] kvasprintf+0xbc/0x150 [ 60.980960][ T7251] ? __pfx_kvasprintf+0x10/0x10 [ 60.980979][ T7251] kvasprintf_const+0x66/0x1a0 [ 60.980993][ T7251] kobject_set_name_vargs+0x5a/0x140 [ 60.981005][ T7251] kobject_init_and_add+0xe7/0x180 [ 60.981017][ T7251] ? __pfx_kobject_init_and_add+0x10/0x10 [ 60.981029][ T7251] ? __kasan_kmalloc+0xaa/0xb0 [ 60.981040][ T7251] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 60.981054][ T7251] ? rpc_sysfs_xprt_setup+0xe1/0x300 [ 60.981070][ T7251] rpc_sysfs_xprt_setup+0x187/0x300 [ 60.981084][ T7251] xprt_switch_alloc+0x2ce/0x3c0 [ 60.981100][ T7251] rpc_create_xprt+0x2dc/0x440 [ 60.981116][ T7251] rpc_create+0x4a0/0x840 [ 60.981126][ T7251] ? __pfx_rpc_create+0x10/0x10 [ 60.981140][ T7251] ? finish_task_switch.isra.0+0x149/0x10d0 [ 60.981182][ T7251] ? rcu_is_watching+0x13/0xc0 [ 60.981195][ T7251] ? trace_contention_end+0x126/0x160 [ 60.981212][ T7251] gssp_rpc_create+0xf5/0x1a0 [ 60.981226][ T7251] ? __pfx_gssp_rpc_create+0x10/0x10 [ 60.981246][ T7251] ? net_generic+0xea/0x2a0 [ 60.981258][ T7251] ? net_generic+0xea/0x2a0 [ 60.981274][ T7251] set_gssp_clnt+0xc3/0x1b0 [ 60.981287][ T7251] ? __pfx_set_gssp_clnt+0x10/0x10 [ 60.981303][ T7251] write_gssp+0x387/0x9a0 [ 60.981314][ T7251] ? __pfx_write_gssp+0x10/0x10 [ 60.981328][ T7251] ? lock_acquire+0x1d1/0x380 [ 60.981342][ T7251] ? ksys_write+0x12a/0x250 [ 60.981354][ T7251] ? __pfx_write_gssp+0x10/0x10 [ 60.981364][ T7251] proc_reg_write+0x240/0x330 [ 60.981377][ T7251] vfs_write+0x2aa/0x1040 [ 60.981388][ T7251] ? __pfx_proc_reg_write+0x10/0x10 [ 60.981398][ T7251] ? lock_acquire+0x1d1/0x380 [ 60.981411][ T7251] ? __fget_files+0x34/0x3d0 [ 60.981424][ T7251] ? __pfx_vfs_write+0x10/0x10 [ 60.981433][ T7251] ? find_held_lock+0x2b/0x80 [ 60.981444][ T7251] ? __fget_files+0x215/0x3d0 [ 60.981460][ T7251] ? __fget_files+0x21f/0x3d0 [ 60.981477][ T7251] ksys_write+0x12a/0x250 [ 60.981487][ T7251] ? __pfx_ksys_write+0x10/0x10 [ 60.981502][ T7251] do_syscall_64+0x123/0x7b0 [ 60.981517][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.981528][ T7251] RIP: 0033:0x7f7c5c3a94d9 [ 60.981538][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.981548][ T7251] RSP: 002b:00007f7c5d277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.981558][ T7251] RAX: ffffffffffffffda RBX: 00007f7c5c625fa0 RCX: 00007f7c5c3a94d9 [ 60.981565][ T7251] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000007 [ 60.981571][ T7251] RBP: 00007f7c5c43804e R08: 0000000000000000 R09: 0000000000000000 [ 60.981577][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.981582][ T7251] R13: 00007f7c5c626038 R14: 00007f7c5c625fa0 R15: 00007ffe546c0f68 [ 60.981597][ T7251] [ 60.981602][ T7251] kobject: can not set name properly! [ 61.038805][ T5851] team0 (unregistering): Port device team_slave_1 removed [ 61.045209][ T5851] team0 (unregistering): Port device team_slave_0 removed [ 61.070563][ T7253] random: crng reseeded on system resumption [ 61.151301][ T7257] overlayfs: failed to resolve './file0': -2 [ 61.196341][ T7264] i8042 kbd 00:00: in use; can't configure [ 61.196377][ T7263] i8042 kbd 00:00: in use; can't configure [ 61.237918][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.238013][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.238067][ T7192] bridge_slave_0: entered allmulticast mode [ 61.238773][ T7192] bridge_slave_0: entered promiscuous mode [ 61.241015][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.241120][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.241171][ T7192] bridge_slave_1: entered allmulticast mode [ 61.241838][ T7192] bridge_slave_1: entered promiscuous mode [ 61.254506][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.255943][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.270600][ T7192] team0: Port device team_slave_0 added [ 61.271808][ T7192] team0: Port device team_slave_1 added [ 61.285016][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.285038][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.285060][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.288274][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.288289][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.288309][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.342354][ T7192] hsr_slave_0: entered promiscuous mode [ 61.343108][ T7192] hsr_slave_1: entered promiscuous mode [ 61.343693][ T7192] debugfs: 'hsr0' already exists in 'hsr' [ 61.343706][ T7192] Cannot create hsr debugfs directory [ 61.369493][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.391012][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8 [ 61.459169][ T5773] Bluetooth: hci1: command 0x041b tx timeout [ 61.459187][ T67] Bluetooth: hci3: command 0x040f tx timeout [ 61.484083][ T7192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.485765][ T7192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.486168][ T7192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.488420][ T7192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.488806][ T7192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.493515][ T7192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.493903][ T7192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.496732][ T7192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.512626][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.512671][ T7192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.512770][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.512814][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.549370][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.561666][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.564312][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.576600][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.583141][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.583186][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.585360][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.585401][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.656877][ T5490] 8021q: adding VLAN 0 to HW filter on device eth9 [ 61.735318][ T7308] tmpfs: Using encoding : utf8-12.1.0 [ 61.736794][ T7308] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.769392][ T7312] net_ratelimit: 43 callbacks suppressed [ 61.769404][ T7312] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 61.843178][ T7320] netlink: 14 bytes leftover after parsing attributes in process `syz.4.355'. [ 61.846685][ T7320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.848699][ T7320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.854020][ T7320] bond0 (unregistering): Released all slaves [ 61.872896][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.015847][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 62.020113][ T7192] veth0_vlan: entered promiscuous mode [ 62.024071][ T7192] veth1_vlan: entered promiscuous mode [ 62.048150][ T7192] veth0_macvtap: entered promiscuous mode [ 62.052628][ T7192] veth1_macvtap: entered promiscuous mode [ 62.060227][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.062142][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.149395][ T5851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.177199][ T7342] netlink: 184 bytes leftover after parsing attributes in process `syz.1.359'. [ 62.177222][ T7342] netlink: 13 bytes leftover after parsing attributes in process `syz.1.359'. [ 62.177230][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 62.177237][ T7342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.359'. [ 62.217811][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.217824][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.232283][ T7342] bond0: entered allmulticast mode [ 62.247961][ T1485] libceph: connect (1)127.0.0.1:6789 error -101 [ 62.248152][ T1485] libceph: mon0 (1)127.0.0.1:6789 connect error [ 62.250972][ T5823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.251552][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.251562][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.275560][ T7340] Process accounting resumed [ 62.279194][ T5851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.279219][ T5851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.409322][ T67] Bluetooth: hci2: command tx timeout [ 62.478432][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 62.511132][ T1485] libceph: connect (1)127.0.0.1:6789 error -101 [ 62.511278][ T1485] libceph: mon0 (1)127.0.0.1:6789 connect error [ 62.687771][ T5874] bond0: (slave bond_slave_0): interface is now down [ 62.687786][ T5874] bond0: (slave bond_slave_1): interface is now down [ 62.696549][ T5874] bond0: now running without any active interface! [ 62.696997][ T7393] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 62.703842][ T7393] overlayfs: missing 'workdir' [ 62.708818][ T7392] bond0: (slave bond_slave_0): Releasing backup interface [ 62.716225][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 62.716530][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 62.725883][ T7392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.946573][ T7409] FAULT_INJECTION: forcing a failure. [ 62.946573][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 62.946592][ T7409] CPU: 2 UID: 0 PID: 7409 Comm: syz.4.377 Not tainted syzkaller #0 PREEMPT(full) [ 62.946604][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.946609][ T7409] Call Trace: [ 62.946619][ T7409] [ 62.946624][ T7409] dump_stack_lvl+0x100/0x190 [ 62.946684][ T7409] should_fail_ex.cold+0x5/0xa [ 62.946714][ T7409] should_failslab+0xc2/0x120 [ 62.946731][ T7409] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.946748][ T7409] ? __mpol_dup+0x74/0x390 [ 62.946765][ T7409] __mpol_dup+0x74/0x390 [ 62.946780][ T7409] ? __pfx___mpol_dup+0x10/0x10 [ 62.946795][ T7409] ? anon_vma_name+0x5a/0x250 [ 62.946811][ T7409] vma_dup_policy+0x42/0xb0 [ 62.946825][ T7409] __split_vma+0x468/0xce0 [ 62.946842][ T7409] ? __pfx___split_vma+0x10/0x10 [ 62.946858][ T7409] ? __pfx_mas_prev_range+0x10/0x10 [ 62.946876][ T7409] vma_modify+0x1d06/0x2aa0 [ 62.946894][ T7409] ? __pfx_vma_modify+0x10/0x10 [ 62.946907][ T7409] ? walk_page_test+0x78/0x180 [ 62.946927][ T7409] vma_modify_policy+0x2a4/0x390 [ 62.946941][ T7409] ? __pfx_vma_modify_policy+0x10/0x10 [ 62.946963][ T7409] ? mas_next_slot+0xc05/0x13a0 [ 62.946985][ T7409] mbind_range+0x175/0x550 [ 62.947003][ T7409] do_mbind+0x81a/0x1030 [ 62.947022][ T7409] ? __pfx_do_mbind+0x10/0x10 [ 62.947038][ T7409] ? find_held_lock+0x2b/0x80 [ 62.947062][ T7409] ? ksys_write+0x190/0x250 [ 62.947079][ T7409] ? __pfx_get_nodes+0x10/0x10 [ 62.947091][ T7409] ? __fget_files+0x215/0x3d0 [ 62.947109][ T7409] kernel_mbind+0x1b7/0x200 [ 62.947144][ T7409] ? __pfx_kernel_mbind+0x10/0x10 [ 62.947165][ T7409] do_syscall_64+0x123/0x7b0 [ 62.947183][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.947195][ T7409] RIP: 0033:0x7fa23ada94d9 [ 62.947206][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.947216][ T7409] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 62.947227][ T7409] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 62.947234][ T7409] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 62.947240][ T7409] RBP: 00007fa23ae3804e R08: 0000000000000000 R09: 0000000000000000 [ 62.947246][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.947252][ T7409] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 62.947266][ T7409] [ 62.948728][ T7409] overlayfs: missing 'lowerdir' [ 62.949894][ T7409] FAULT_INJECTION: forcing a failure. [ 62.949894][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 62.949910][ T7409] CPU: 3 UID: 0 PID: 7409 Comm: syz.4.377 Not tainted syzkaller #0 PREEMPT(full) [ 62.949922][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.949927][ T7409] Call Trace: [ 62.949931][ T7409] [ 62.949935][ T7409] dump_stack_lvl+0x100/0x190 [ 62.949983][ T7409] should_fail_ex.cold+0x5/0xa [ 62.950000][ T7409] should_failslab+0xc2/0x120 [ 62.950012][ T7409] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.950029][ T7409] ? vm_area_dup+0x27/0xb60 [ 62.950042][ T7409] vm_area_dup+0x27/0xb60 [ 62.950059][ T7409] dup_mmap+0x526/0x2180 [ 62.950074][ T7409] ? __pfx_dup_mmap+0x10/0x10 [ 62.950083][ T7409] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.950098][ T7409] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.950115][ T7409] ? do_raw_spin_lock+0x128/0x260 [ 62.950129][ T7409] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.950142][ T7409] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.950157][ T7409] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 62.950177][ T7409] ? mm_init+0xc17/0xeb0 [ 62.950191][ T7409] copy_process+0x7c5c/0x88e0 [ 62.950212][ T7409] ? __pfx_copy_process+0x10/0x10 [ 62.950225][ T7409] ? futex_wake+0x4ea/0x5e0 [ 62.950245][ T7409] kernel_clone+0x176/0x9d0 [ 62.950259][ T7409] ? __pfx_kernel_clone+0x10/0x10 [ 62.950275][ T7409] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.950292][ T7409] __do_sys_clone+0xd9/0x120 [ 62.950305][ T7409] ? __pfx___do_sys_clone+0x10/0x10 [ 62.950330][ T7409] do_syscall_64+0x123/0x7b0 [ 62.950345][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.950356][ T7409] RIP: 0033:0x7fa23ada94d9 [ 62.950365][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.950374][ T7409] RSP: 002b:00007fa23bce0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 62.950384][ T7409] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 62.950391][ T7409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 62.950396][ T7409] RBP: 00007fa23ae3804e R08: 0000000000000000 R09: 0000000000000000 [ 62.950402][ T7409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.950408][ T7409] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 62.950422][ T7409] [ 63.018745][ T7342] ceph: No mds server is up or the cluster is laggy [ 63.028721][ T1485] libceph: connect (1)127.0.0.1:6789 error -101 [ 63.028818][ T1485] libceph: mon0 (1)127.0.0.1:6789 connect error [ 63.092634][ T7414] evm: overlay not supported [ 63.208773][ T7430] ip_tables: iptables: counters copy to user failed while replacing table [ 63.220380][ T7430] /dev/sr0: Can't open blockdev [ 63.262066][ T7436] Invalid source name [ 63.262077][ T7436] UBIFS error (pid: 7436): cannot open "./file0", error -22 [ 63.390730][ T7451] key id 00000004 not found [ 63.451136][ T7446] kvm: pic: non byte write [ 63.516079][ T7458] FAULT_INJECTION: forcing a failure. [ 63.516079][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 63.516098][ T7458] CPU: 2 UID: 0 PID: 7458 Comm: syz.4.395 Not tainted syzkaller #0 PREEMPT(full) [ 63.516110][ T7458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.516116][ T7458] Call Trace: [ 63.516129][ T7458] [ 63.516133][ T7458] dump_stack_lvl+0x100/0x190 [ 63.516202][ T7458] should_fail_ex.cold+0x5/0xa [ 63.516220][ T7458] should_failslab+0xc2/0x120 [ 63.516234][ T7458] __kmalloc_noprof+0xfc/0x840 [ 63.516243][ T7458] ? tc_setup_action+0x16e/0xac0 [ 63.516273][ T7458] ? flow_action_cookie_create+0x21/0x80 [ 63.516292][ T7458] flow_action_cookie_create+0x21/0x80 [ 63.516309][ T7458] tc_setup_action+0x22e/0xac0 [ 63.516325][ T7458] ? find_held_lock+0x2b/0x80 [ 63.516341][ T7458] ? __pfx_tc_setup_action+0x10/0x10 [ 63.516357][ T7458] ? __local_bh_enable_ip+0xa5/0x120 [ 63.516372][ T7458] tcf_action_offload_add_ex+0x38c/0x7b0 [ 63.516388][ T7458] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 63.516413][ T7458] ? tcf_action_fill_size+0x110/0x340 [ 63.516428][ T7458] ? tcf_action_fill_size+0x110/0x340 [ 63.516447][ T7458] tcf_action_init+0x7b5/0xb50 [ 63.516466][ T7458] ? __pfx_tcf_action_init+0x10/0x10 [ 63.516492][ T7458] ? __kernel_text_address+0xd/0x30 [ 63.516505][ T7458] ? unwind_get_return_address+0x59/0xa0 [ 63.516517][ T7458] ? arch_stack_walk+0xa6/0xf0 [ 63.516552][ T7458] ? __lock_acquire+0x5c0/0x1f40 [ 63.516571][ T7458] tcf_action_add+0xef/0x750 [ 63.516584][ T7458] ? __pfx_tcf_action_add+0x10/0x10 [ 63.516615][ T7458] ? __nla_parse+0x40/0x60 [ 63.516632][ T7458] tc_ctl_action+0x2e3/0x470 [ 63.516643][ T7458] ? __pfx_tc_ctl_action+0x10/0x10 [ 63.516658][ T7458] ? __pfx_tc_ctl_action+0x10/0x10 [ 63.516670][ T7458] rtnetlink_rcv_msg+0x3c9/0xe90 [ 63.516687][ T7458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.516710][ T7458] netlink_rcv_skb+0x159/0x420 [ 63.516724][ T7458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.516741][ T7458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.516755][ T7458] ? __asan_memcpy+0x3c/0x60 [ 63.516774][ T7458] ? netlink_deliver_tap+0x1ae/0xb50 [ 63.516791][ T7458] netlink_unicast+0x668/0x950 [ 63.516807][ T7458] ? __pfx_netlink_unicast+0x10/0x10 [ 63.516825][ T7458] netlink_sendmsg+0x9ac/0x10c0 [ 63.516841][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.516859][ T7458] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.516876][ T7458] ? ____sys_sendmsg+0xa13/0xb90 [ 63.516886][ T7458] ____sys_sendmsg+0xa13/0xb90 [ 63.516895][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.516911][ T7458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.516927][ T7458] ___sys_sendmsg+0x208/0x270 [ 63.516938][ T7458] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.516949][ T7458] ? futex_wait+0x11e/0x370 [ 63.516968][ T7458] ? find_held_lock+0x2b/0x80 [ 63.516987][ T7458] __sys_sendmsg+0x160/0x210 [ 63.517001][ T7458] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.517022][ T7458] do_syscall_64+0x123/0x7b0 [ 63.517061][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.517073][ T7458] RIP: 0033:0x7fa23ada94d9 [ 63.517083][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.517094][ T7458] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.517114][ T7458] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 63.517121][ T7458] RDX: 0000000024008800 RSI: 0000200000000200 RDI: 0000000000000004 [ 63.517128][ T7458] RBP: 00007fa23ae3804e R08: 0000000000000000 R09: 0000000000000000 [ 63.517134][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.517141][ T7458] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 63.517155][ T7458] [ 63.532917][ T67] Bluetooth: hci1: command 0x041b tx timeout [ 63.540078][ T5766] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.572655][ T7462] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 63.572696][ T7462] device-mapper: table: 248:7: crypt: Error decoding and setting key (-EINVAL) [ 63.572706][ T7462] device-mapper: ioctl: error adding target to table [ 63.578913][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 63.578922][ T43] audit: type=1400 audit(1794632635.730:559): avc: denied { read } for pid=7460 comm="syz.4.396" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.579293][ T43] audit: type=1400 audit(1794632635.730:560): avc: denied { open } for pid=7460 comm="syz.4.396" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.579695][ T43] audit: type=1400 audit(1794632635.730:561): avc: denied { ioctl } for pid=7460 comm="syz.4.396" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.719378][ T7473] openvswitch: netlink: Flow actions attr not present in new flow. [ 63.759072][ T5766] usb 6-1: Using ep0 maxpacket: 32 [ 63.761929][ T5766] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.762830][ T5766] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.764915][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.764929][ T5766] usb 6-1: Product: syz [ 63.764937][ T5766] usb 6-1: Manufacturer: syz [ 63.764945][ T5766] usb 6-1: SerialNumber: syz [ 63.766745][ T5766] usb 6-1: config 0 descriptor?? [ 63.767683][ T7438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.768422][ T5766] hub 6-1:0.0: bad descriptor, ignoring hub [ 63.768434][ T5766] hub 6-1:0.0: probe with driver hub failed with error -5 [ 63.830683][ T43] audit: type=1400 audit(1794632635.980:562): avc: denied { ioctl } for pid=7478 comm="syz.3.401" path="socket:[20516]" dev="sockfs" ino=20516 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.835932][ T43] audit: type=1400 audit(1794632635.990:563): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 63.916466][ T43] audit: type=1400 audit(1794632636.070:564): avc: denied { write } for pid=7486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.964696][ T43] audit: type=1400 audit(1794632636.120:565): avc: denied { write } for pid=7489 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.000054][ T7495] erofs (device loop3): cannot find valid erofs superblock [ 64.035675][ T43] audit: type=1400 audit(1794632636.190:566): avc: denied { write } for pid=7496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.089750][ T5766] usb 6-1: USB disconnect, device number 4 [ 64.101732][ T7507] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 64.111015][ T43] audit: type=1400 audit(1794632636.260:567): avc: denied { write } for pid=7505 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.111176][ T7508] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 64.312904][ T43] audit: type=1400 audit(1794632636.470:568): avc: denied { ioctl } for pid=7514 comm="syz.3.407" path="socket:[19137]" dev="sockfs" ino=19137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.395394][ T7521] x_tables: duplicate underflow at hook 1 [ 64.411417][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.499146][ T5773] Bluetooth: hci2: command tx timeout [ 64.652672][ T7543] xt_hashlimit: size too large, truncated to 1048576 [ 64.703028][ T7550] xt_hashlimit: size too large, truncated to 1048576 [ 64.739158][ T7555] input: syz0 as /devices/virtual/input/input15 [ 64.901247][ T7569] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 64.904775][ T7569] overlayfs: missing 'workdir' [ 64.948327][ C0] sd 0:0:0:0: [sda] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 64.948356][ C0] sd 0:0:0:0: [sda] tag#0 CDB: Test Unit Ready [ 64.965427][ T7578] TC_ACT_REPEAT abuse ? [ 65.025427][ T7585] bond1 (unregistering): Released all slaves [ 65.067994][ T7595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.129815][ T7602] fuse: Bad value for 'fd' [ 65.129957][ T7602] fuse: Bad value for 'fd' [ 65.130070][ T7602] fuse: Bad value for 'fd' [ 65.130169][ T7602] fuse: Bad value for 'fd' [ 65.130268][ T7602] fuse: Bad value for 'fd' [ 65.130367][ T7602] fuse: Bad value for 'fd' [ 65.130469][ T7602] fuse: Bad value for 'fd' [ 65.130573][ T7602] fuse: Bad value for 'fd' [ 65.130671][ T7602] fuse: Bad value for 'fd' [ 65.130812][ T7602] fuse: Bad value for 'fd' [ 65.130932][ T7602] fuse: Bad value for 'fd' [ 65.131041][ T7602] fuse: Bad value for 'fd' [ 65.131142][ T7602] fuse: Bad value for 'fd' [ 65.131241][ T7602] fuse: Bad value for 'fd' [ 65.131339][ T7602] fuse: Bad value for 'fd' [ 65.131438][ T7602] fuse: Bad value for 'fd' [ 65.131541][ T7602] fuse: Bad value for 'fd' [ 65.131639][ T7602] fuse: Bad value for 'fd' [ 65.131748][ T7602] fuse: Bad value for 'fd' [ 65.131925][ T7602] fuse: Bad value for 'fd' [ 65.132545][ T7602] fuse: Bad value for 'fd' [ 65.132666][ T7602] fuse: Bad value for 'fd' [ 65.132770][ T7602] fuse: Bad value for 'fd' [ 65.132870][ T7602] fuse: Bad value for 'fd' [ 65.132973][ T7602] fuse: Bad value for 'fd' [ 65.133079][ T7602] fuse: Bad value for 'fd' [ 65.133180][ T7602] fuse: Bad value for 'fd' [ 65.133277][ T7602] fuse: Bad value for 'fd' [ 65.133375][ T7602] fuse: Bad value for 'fd' [ 65.133481][ T7602] fuse: Bad value for 'fd' [ 65.133588][ T7602] fuse: Bad value for 'fd' [ 65.133689][ T7602] fuse: Bad value for 'fd' [ 65.133788][ T7602] fuse: Bad value for 'fd' [ 65.153262][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 65.205132][ T7601] netlink: 'syz.4.436': attribute type 11 has an invalid length. [ 65.498413][ T7642] could not allocate digest TFM handle cmac(aes-ce) [ 65.619311][ T5773] Bluetooth: hci1: command 0x041b tx timeout [ 65.834963][ T7673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.015041][ T7685] FAULT_INJECTION: forcing a failure. [ 66.015041][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 66.015059][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(full) [ 66.015071][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.015077][ T7685] Call Trace: [ 66.015081][ T7685] [ 66.015086][ T7685] dump_stack_lvl+0x100/0x190 [ 66.015107][ T7685] should_fail_ex.cold+0x5/0xa [ 66.015124][ T7685] should_failslab+0xc2/0x120 [ 66.015138][ T7685] __kmalloc_noprof+0xfc/0x840 [ 66.015147][ T7685] ? rcu_is_watching+0x13/0xc0 [ 66.015159][ T7685] ? tomoyo_realpath_from_path+0xb6/0x690 [ 66.015175][ T7685] tomoyo_realpath_from_path+0xb6/0x690 [ 66.015191][ T7685] tomoyo_path_number_perm+0x23c/0x580 [ 66.015207][ T7685] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.015224][ T7685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.015246][ T7685] ? __lock_acquire+0x5c0/0x1f40 [ 66.015268][ T7685] ? __fget_files+0x34/0x3d0 [ 66.015282][ T7685] ? find_held_lock+0x2b/0x80 [ 66.015293][ T7685] ? hook_file_ioctl_common+0x140/0x440 [ 66.015310][ T7685] ? __fget_files+0x21f/0x3d0 [ 66.015325][ T7685] security_file_ioctl+0xd3/0x230 [ 66.015337][ T7685] __x64_sys_ioctl+0xb7/0x210 [ 66.015350][ T7685] do_syscall_64+0x123/0x7b0 [ 66.015365][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.015378][ T7685] RIP: 0033:0x7f95c9ba94d9 [ 66.015392][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.015407][ T7685] RSP: 002b:00007f95cab14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.015423][ T7685] RAX: ffffffffffffffda RBX: 00007f95c9e25fa0 RCX: 00007f95c9ba94d9 [ 66.015433][ T7685] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 66.015441][ T7685] RBP: 00007f95cab14090 R08: 0000000000000000 R09: 0000000000000000 [ 66.015458][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.015468][ T7685] R13: 00007f95c9e26038 R14: 00007f95c9e25fa0 R15: 00007ffe8f72cbd8 [ 66.015491][ T7685] [ 66.015498][ T7685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.164499][ T7697] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 66.368964][ T7710] FAULT_INJECTION: forcing a failure. [ 66.368964][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 66.369093][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 66.369106][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.369115][ T7710] Call Trace: [ 66.369119][ T7710] [ 66.369123][ T7710] dump_stack_lvl+0x100/0x190 [ 66.369145][ T7710] should_fail_ex.cold+0x5/0xa [ 66.369162][ T7710] should_failslab+0xc2/0x120 [ 66.369175][ T7710] __kmalloc_noprof+0xfc/0x840 [ 66.369186][ T7710] ? tomoyo_encode2+0xfb/0x3c0 [ 66.369201][ T7710] tomoyo_encode2+0xfb/0x3c0 [ 66.369215][ T7710] tomoyo_encode+0x29/0x50 [ 66.369226][ T7710] tomoyo_realpath_from_path+0x18c/0x690 [ 66.369242][ T7710] tomoyo_path_number_perm+0x23c/0x580 [ 66.369258][ T7710] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.369275][ T7710] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.369297][ T7710] ? __lock_acquire+0x5c0/0x1f40 [ 66.369319][ T7710] ? __fget_files+0x34/0x3d0 [ 66.369333][ T7710] ? find_held_lock+0x2b/0x80 [ 66.369344][ T7710] ? hook_file_ioctl_common+0x140/0x440 [ 66.369361][ T7710] ? __fget_files+0x21f/0x3d0 [ 66.369376][ T7710] security_file_ioctl+0xd3/0x230 [ 66.369388][ T7710] __x64_sys_ioctl+0xb7/0x210 [ 66.369400][ T7710] do_syscall_64+0x123/0x7b0 [ 66.369416][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.369427][ T7710] RIP: 0033:0x7f7c5c3a94d9 [ 66.369436][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.369445][ T7710] RSP: 002b:00007f7c5d277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.369456][ T7710] RAX: ffffffffffffffda RBX: 00007f7c5c625fa0 RCX: 00007f7c5c3a94d9 [ 66.369462][ T7710] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 66.369468][ T7710] RBP: 00007f7c5d277090 R08: 0000000000000000 R09: 0000000000000000 [ 66.369474][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.369480][ T7710] R13: 00007f7c5c626038 R14: 00007f7c5c625fa0 R15: 00007ffe546c0f68 [ 66.369514][ T7710] [ 66.369588][ T7710] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.519269][ T5149] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.569344][ T5773] Bluetooth: hci2: command tx timeout [ 66.669164][ T5149] usb 6-1: Using ep0 maxpacket: 8 [ 66.670939][ T5149] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 66.671899][ T5149] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 66.671923][ T5149] usb 6-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.671948][ T5149] usb 6-1: config 1 interface 0 has no altsetting 0 [ 66.673843][ T5149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.673863][ T5149] usb 6-1: Product: syz [ 66.673877][ T5149] usb 6-1: Manufacturer: à Œ [ 66.673890][ T5149] usb 6-1: SerialNumber: syz [ 66.679879][ T7706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.680118][ T7706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.884397][ T5149] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 67.093705][ T5149] usb 6-1: USB disconnect, device number 5 [ 67.299372][ T855] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 67.460613][ T855] usb 10-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 67.462777][ T855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 254, changing to 11 [ 67.462802][ T855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26176, setting to 1024 [ 67.462834][ T855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.465957][ T7723] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 67.575800][ T7742] __nla_validate_parse: 10 callbacks suppressed [ 67.575857][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 67.577938][ T7742] xt_l2tp: invalid flags combination: 8 [ 67.669477][ T7723] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 67.673211][ T855] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device [ 67.674797][ T7750] FAULT_INJECTION: forcing a failure. [ 67.674797][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.674822][ T7750] CPU: 3 UID: 0 PID: 7750 Comm: syz.1.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.674845][ T7750] Tainted: [L]=SOFTLOCKUP [ 67.674851][ T7750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.674861][ T7750] Call Trace: [ 67.674868][ T7750] [ 67.674874][ T7750] dump_stack_lvl+0x100/0x190 [ 67.674908][ T7750] should_fail_ex.cold+0x5/0xa [ 67.674935][ T7750] _copy_from_user+0x2e/0xd0 [ 67.674961][ T7750] udmabuf_ioctl+0x112/0x300 [ 67.674980][ T7750] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 67.675003][ T7750] ? selinux_file_ioctl+0x1e0/0x290 [ 67.675021][ T7750] ? selinux_file_ioctl+0x1e7/0x290 [ 67.675041][ T7750] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 67.675059][ T7750] __x64_sys_ioctl+0x18e/0x210 [ 67.675080][ T7750] do_syscall_64+0x123/0x7b0 [ 67.675105][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.675123][ T7750] RIP: 0033:0x7f95c9ba94d9 [ 67.675137][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.675154][ T7750] RSP: 002b:00007f95cab14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.675171][ T7750] RAX: ffffffffffffffda RBX: 00007f95c9e25fa0 RCX: 00007f95c9ba94d9 [ 67.675182][ T7750] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 67.675193][ T7750] RBP: 00007f95cab14090 R08: 0000000000000000 R09: 0000000000000000 [ 67.675203][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.675212][ T7750] R13: 00007f95c9e26038 R14: 00007f95c9e25fa0 R15: 00007ffe8f72cbd8 [ 67.675236][ T7750] [ 67.677838][ T855] wwan wwan0: port wwan0qmi0 attached [ 67.689180][ T5773] Bluetooth: hci1: command 0x041b tx timeout [ 67.802966][ T7759] ip6t_REJECT: ECHOREPLY is not supported [ 67.873899][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.873980][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.874173][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.874182][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.874356][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.874365][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.874546][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.874555][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.874736][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.874745][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.874918][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.874927][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.875099][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.875108][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.875279][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.875288][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.875491][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.875499][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 67.875670][ C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71 [ 67.875679][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes [ 68.062355][ T7777] netlink: 'syz.3.483': attribute type 30 has an invalid length. [ 68.072231][ T7777] bond3: option arp_missed_max: invalid value (0) [ 68.072245][ T7777] bond3: option arp_missed_max: allowed values 1 - 255 [ 68.073371][ T7777] bond3 (unregistering): Released all slaves [ 68.119094][ T1485] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.280487][ T1485] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 68.282191][ T1485] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 68.282206][ T1485] usb 6-1: config 1 has no interface number 0 [ 68.286206][ T1485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.286221][ T1485] usb 6-1: Product: syz [ 68.286229][ T1485] usb 6-1: Manufacturer: syz [ 68.286237][ T1485] usb 6-1: SerialNumber: syz [ 68.295890][ T1485] usb 6-1: 3:242 : does not exist [ 68.295904][ T1485] usb 6-1: 3:255 : does not exist [ 68.449045][ T5873] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 68.491534][ T7787] zonefs (loop4) ERROR: Not a zoned block device [ 68.495969][ T5864] usb 6-1: USB disconnect, device number 6 [ 68.528243][ T7790] FAULT_INJECTION: forcing a failure. [ 68.528243][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 68.528271][ T7790] CPU: 2 UID: 0 PID: 7790 Comm: syz.4.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.528295][ T7790] Tainted: [L]=SOFTLOCKUP [ 68.528301][ T7790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.528311][ T7790] Call Trace: [ 68.528317][ T7790] [ 68.528324][ T7790] dump_stack_lvl+0x100/0x190 [ 68.528358][ T7790] should_fail_ex.cold+0x5/0xa [ 68.528386][ T7790] should_failslab+0xc2/0x120 [ 68.528408][ T7790] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.528455][ T7790] ? udmabuf_create+0xbd/0x10c0 [ 68.528479][ T7790] udmabuf_create+0xbd/0x10c0 [ 68.528496][ T7790] ? __lock_acquire+0x5c0/0x1f40 [ 68.528531][ T7790] ? lock_acquire+0x1d1/0x380 [ 68.528555][ T7790] ? __pfx_udmabuf_create+0x10/0x10 [ 68.528571][ T7790] ? find_held_lock+0x2b/0x80 [ 68.528600][ T7790] ? __might_fault+0xc5/0x140 [ 68.528620][ T7790] ? __might_fault+0xc5/0x140 [ 68.528649][ T7790] udmabuf_ioctl+0x18f/0x300 [ 68.528666][ T7790] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.528692][ T7790] ? selinux_file_ioctl+0x1e0/0x290 [ 68.528711][ T7790] ? selinux_file_ioctl+0x1e7/0x290 [ 68.528731][ T7790] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 68.528750][ T7790] __x64_sys_ioctl+0x18e/0x210 [ 68.528771][ T7790] do_syscall_64+0x123/0x7b0 [ 68.528796][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.528814][ T7790] RIP: 0033:0x7fa23ada94d9 [ 68.528829][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.528846][ T7790] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.528863][ T7790] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 68.528875][ T7790] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 68.528885][ T7790] RBP: 00007fa23bce1090 R08: 0000000000000000 R09: 0000000000000000 [ 68.528896][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.528906][ T7790] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 68.528929][ T7790] [ 68.604068][ T5873] usb 8-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 68.606919][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.606933][ T5873] usb 8-1: Product: syz [ 68.606940][ T5873] usb 8-1: Manufacturer: syz [ 68.606947][ T5873] usb 8-1: SerialNumber: syz [ 68.649865][ T5773] Bluetooth: hci2: command tx timeout [ 68.703154][ T7801] »»»»»»: renamed from vlan0 (while UP) [ 68.706432][ T7801] ucma_write: process 204 (syz.4.491) changed security contexts after opening file descriptor, this is not allowed. [ 68.828857][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 68.828869][ T43] audit: type=1400 audit(1794632640.980:620): avc: denied { map } for pid=7805 comm="syz.4.493" path="socket:[22603]" dev="sockfs" ino=22603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 68.832786][ T43] audit: type=1400 audit(1794632640.990:621): avc: denied { cmd } for pid=7805 comm="iou-wrk-7806" path="socket:[22603]" dev="sockfs" ino=22603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.946475][ T7817] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 68.946491][ T7817] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 69.029753][ T5873] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 69.040774][ T43] audit: type=1400 audit(1794632641.200:622): avc: denied { mounton } for pid=7816 comm="syz.4.495" path="/75/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 69.263933][ T43] audit: type=1400 audit(1794632641.420:623): avc: denied { create } for pid=7836 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.339628][ T7835] syzkaller0: entered promiscuous mode [ 69.339650][ T7835] syzkaller0: entered allmulticast mode [ 69.374881][ T43] audit: type=1400 audit(1794632641.530:624): avc: denied { bind } for pid=7847 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.375369][ T43] audit: type=1400 audit(1794632641.530:625): avc: denied { listen } for pid=7847 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.379627][ T43] audit: type=1400 audit(1794632641.540:626): avc: denied { accept } for pid=7847 comm="syz.1.504" lport=60041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.097088][ T43] audit: type=1400 audit(1794632642.250:627): avc: denied { setopt } for pid=7863 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.097350][ T43] audit: type=1400 audit(1794632642.250:628): avc: denied { connect } for pid=7863 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.152461][ T7865] 9p: Bad value for 'dfltgid' [ 70.152474][ T7865] 9p: Bad value for 'dfltgid' [ 70.154407][ T43] audit: type=1400 audit(1794632642.310:629): avc: denied { getopt } for pid=7863 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.232685][ T7866] Invalid source name [ 70.232701][ T7866] UBIFS error (pid: 7866): cannot open "./file0", error -22 [ 70.378022][ T855] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 0e:93:f1:71:b5:37 [ 70.380980][ C1] qmi_wwan 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 70.380996][ T855] usb 10-1: USB disconnect, device number 2 [ 70.382780][ T855] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 70.473967][ T855] wwan wwan0: port wwan0qmi0 disconnected [ 70.560304][ T7870] syz.4.507 (7870): drop_caches: 2 [ 70.672949][ T7886] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 70.837548][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 70.909093][ T5766] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 71.069040][ T5766] usb 9-1: Using ep0 maxpacket: 8 [ 71.069988][ T5766] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.070800][ T5766] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 71.070822][ T5766] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.070833][ T5766] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.070844][ T5766] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.070855][ T5766] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.070873][ T5766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.182543][ T855] usb 8-1: USB disconnect, device number 8 [ 71.184983][ T855] usblp1: removed [ 71.214251][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214292][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.214970][ T35] cfg80211: failed to load regulatory.db [ 71.274226][ T5766] usb 9-1: GET_CAPABILITIES returned 0 [ 71.274252][ T5766] usbtmc 9-1:16.0: can't read capabilities [ 71.372491][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 71.479775][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480171][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480204][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480232][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480258][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480283][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480309][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480528][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480558][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480586][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480611][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480660][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480919][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480949][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.480978][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.481007][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.481962][ T855] usb 9-1: USB disconnect, device number 2 [ 72.019995][ T7938] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 72.020009][ T7938] netlink: 55 bytes leftover after parsing attributes in process `syz.1.528'. [ 72.092336][ T7944] ip_tables: iptables: counters copy to user failed while replacing table [ 72.260371][ T7950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.534'. [ 72.319450][ T7954] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 72.367779][ T7960] FAULT_INJECTION: forcing a failure. [ 72.367779][ T7960] name failslab, interval 1, probability 0, space 0, times 0 [ 72.367799][ T7960] CPU: 3 UID: 0 PID: 7960 Comm: syz.4.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.367813][ T7960] Tainted: [L]=SOFTLOCKUP [ 72.367817][ T7960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.367823][ T7960] Call Trace: [ 72.367827][ T7960] [ 72.367832][ T7960] dump_stack_lvl+0x100/0x190 [ 72.367853][ T7960] should_fail_ex.cold+0x5/0xa [ 72.367869][ T7960] should_failslab+0xc2/0x120 [ 72.367882][ T7960] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.367898][ T7960] ? allocate_file_region_entries+0x15d/0x630 [ 72.367909][ T7960] ? allocate_file_region_entries+0x1a0/0x630 [ 72.367923][ T7960] allocate_file_region_entries+0x1a0/0x630 [ 72.367937][ T7960] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 72.367953][ T7960] region_chg+0x85/0x140 [ 72.367964][ T7960] hugetlb_reserve_pages+0x2ad/0x1610 [ 72.367981][ T7960] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 72.367998][ T7960] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 72.368017][ T7960] memfd_alloc_folio+0x1f5/0x670 [ 72.368035][ T7960] memfd_pin_folios+0x12e3/0x1630 [ 72.368055][ T7960] ? kasan_save_stack+0x30/0x50 [ 72.368072][ T7960] ? __pfx_memfd_pin_folios+0x10/0x10 [ 72.368087][ T7960] ? __lock_acquire+0x5c0/0x1f40 [ 72.368104][ T7960] ? __lock_acquire+0x5c0/0x1f40 [ 72.368128][ T7960] ? __pfx_down_read+0x10/0x10 [ 72.368144][ T7960] ? __fget_files+0x21f/0x3d0 [ 72.368157][ T7960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.368171][ T7960] udmabuf_create+0x631/0x10c0 [ 72.368189][ T7960] ? lock_acquire+0x1d1/0x380 [ 72.368202][ T7960] ? __pfx_udmabuf_create+0x10/0x10 [ 72.368212][ T7960] ? find_held_lock+0x2b/0x80 [ 72.368223][ T7960] ? __might_fault+0xc5/0x140 [ 72.368235][ T7960] ? __might_fault+0xc5/0x140 [ 72.368253][ T7960] udmabuf_ioctl+0x18f/0x300 [ 72.368262][ T7960] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 72.368277][ T7960] ? selinux_file_ioctl+0x1e0/0x290 [ 72.368289][ T7960] ? selinux_file_ioctl+0x1e7/0x290 [ 72.368300][ T7960] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 72.368311][ T7960] __x64_sys_ioctl+0x18e/0x210 [ 72.368323][ T7960] do_syscall_64+0x123/0x7b0 [ 72.368338][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.368349][ T7960] RIP: 0033:0x7fa23ada94d9 [ 72.368358][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.368368][ T7960] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.368379][ T7960] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 72.368385][ T7960] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 72.368391][ T7960] RBP: 00007fa23bce1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.368397][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.368403][ T7960] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 72.368417][ T7960] [ 72.463109][ T7969] FAULT_INJECTION: forcing a failure. [ 72.463109][ T7969] name failslab, interval 1, probability 0, space 0, times 0 [ 72.463137][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.4.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.463162][ T7969] Tainted: [L]=SOFTLOCKUP [ 72.463168][ T7969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.463178][ T7969] Call Trace: [ 72.463185][ T7969] [ 72.463191][ T7969] dump_stack_lvl+0x100/0x190 [ 72.463224][ T7969] should_fail_ex.cold+0x5/0xa [ 72.463252][ T7969] should_failslab+0xc2/0x120 [ 72.463275][ T7969] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.463301][ T7969] ? input_alloc_absinfo+0x84/0xf0 [ 72.463333][ T7969] input_alloc_absinfo+0x84/0xf0 [ 72.463360][ T7969] uinput_write+0x529/0x10e0 [ 72.463387][ T7969] ? avc_policy_seqno+0x9/0x20 [ 72.463409][ T7969] ? selinux_file_permission+0x30/0x6a0 [ 72.463427][ T7969] ? __pfx_uinput_write+0x10/0x10 [ 72.463449][ T7969] ? bpf_lsm_file_permission+0x9/0x10 [ 72.463481][ T7969] ? security_file_permission+0x76/0x210 [ 72.463504][ T7969] ? rw_verify_area+0xce/0x6d0 [ 72.463535][ T7969] vfs_write+0x2aa/0x1040 [ 72.463556][ T7969] ? __pfx_uinput_write+0x10/0x10 [ 72.463575][ T7969] ? lock_acquire+0x1d1/0x380 [ 72.463600][ T7969] ? __fget_files+0x34/0x3d0 [ 72.463623][ T7969] ? __pfx_vfs_write+0x10/0x10 [ 72.463640][ T7969] ? find_held_lock+0x2b/0x80 [ 72.463659][ T7969] ? __fget_files+0x215/0x3d0 [ 72.463680][ T7969] ? __fget_files+0x215/0x3d0 [ 72.463708][ T7969] ? __fget_files+0x21f/0x3d0 [ 72.463738][ T7969] ksys_write+0x1f8/0x250 [ 72.463757][ T7969] ? __pfx_ksys_write+0x10/0x10 [ 72.463784][ T7969] do_syscall_64+0x123/0x7b0 [ 72.463812][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.463831][ T7969] RIP: 0033:0x7fa23ada94d9 [ 72.463846][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.463864][ T7969] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.463883][ T7969] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 72.463894][ T7969] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000006 [ 72.463905][ T7969] RBP: 00007fa23ae3804e R08: 0000000000000000 R09: 0000000000000000 [ 72.463915][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.463925][ T7969] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 72.463951][ T7969] [ 72.463961][ T7969] input input16: input_alloc_absinfo: unable to allocate memory [ 72.465987][ T7969] xt_hashlimit: size too large, truncated to 1048576 [ 72.522738][ T7971] FAULT_INJECTION: forcing a failure. [ 72.522738][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.522757][ T7971] CPU: 2 UID: 0 PID: 7971 Comm: syz.4.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.522773][ T7971] Tainted: [L]=SOFTLOCKUP [ 72.522777][ T7971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.522783][ T7971] Call Trace: [ 72.522787][ T7971] [ 72.522792][ T7971] dump_stack_lvl+0x100/0x190 [ 72.522815][ T7971] should_fail_ex.cold+0x5/0xa [ 72.522834][ T7971] _copy_from_user+0x2e/0xd0 [ 72.522849][ T7971] csum_and_copy_from_iter_full+0x21a/0x1fe0 [ 72.522863][ T7971] ? rcu_is_watching+0x13/0xc0 [ 72.522892][ T7971] ? trace_kmalloc+0xeb/0x110 [ 72.522904][ T7971] ? __kasan_kmalloc+0xaa/0xb0 [ 72.522916][ T7971] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 72.522929][ T7971] ? trace_kmem_cache_alloc+0xdd/0x100 [ 72.522941][ T7971] ? __alloc_skb+0x185/0x710 [ 72.522958][ T7971] ? kmalloc_reserve+0xf9/0x350 [ 72.522971][ T7971] ip_generic_getfrag+0x172/0x270 [ 72.522985][ T7971] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 72.522998][ T7971] ? __ip6_append_data+0x26f4/0x4b30 [ 72.523014][ T7971] __ip6_append_data+0x29a6/0x4b30 [ 72.523030][ T7971] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 72.523048][ T7971] ? __pfx___ip6_append_data+0x10/0x10 [ 72.523060][ T7971] ? lock_acquire+0x1d1/0x380 [ 72.523075][ T7971] ? do_raw_spin_lock+0x128/0x260 [ 72.523086][ T7971] ip6_append_data+0x10b/0x410 [ 72.523099][ T7971] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 72.523113][ T7971] udpv6_sendmsg+0x14cb/0x2c20 [ 72.523124][ T7971] ? avc_has_perm_noaudit+0x56/0x470 [ 72.523143][ T7971] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 72.523152][ T7971] ? avc_has_perm_noaudit+0x145/0x470 [ 72.523170][ T7971] ? __pfx_avc_has_perm+0x10/0x10 [ 72.523188][ T7971] ? sock_has_perm+0x254/0x320 [ 72.523214][ T7971] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 72.523225][ T7971] ? inet6_sendmsg+0x105/0x140 [ 72.523235][ T7971] inet6_sendmsg+0x105/0x140 [ 72.523245][ T7971] ____sys_sendmsg+0x65c/0xb90 [ 72.523258][ T7971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.523270][ T7971] ? rcu_is_watching+0x13/0xc0 [ 72.523281][ T7971] ? ___sys_sendmsg+0x215/0x270 [ 72.523290][ T7971] ? kfree+0x1e5/0x6d0 [ 72.523305][ T7971] ___sys_sendmsg+0x208/0x270 [ 72.523317][ T7971] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.523333][ T7971] ? __fget_files+0x34/0x3d0 [ 72.523353][ T7971] ? __pfx___might_resched+0x10/0x10 [ 72.523369][ T7971] __sys_sendmmsg+0x20c/0x440 [ 72.523385][ T7971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 72.523397][ T7971] ? file_init_path+0x48e/0x670 [ 72.523416][ T7971] ? __pfx_do_futex+0x10/0x10 [ 72.523435][ T7971] ? __sys_socket+0xac/0x260 [ 72.523445][ T7971] ? xfd_validate_state+0x129/0x190 [ 72.523462][ T7971] __x64_sys_sendmmsg+0x9c/0x100 [ 72.523476][ T7971] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.523490][ T7971] do_syscall_64+0x123/0x7b0 [ 72.523506][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.523516][ T7971] RIP: 0033:0x7fa23ada94d9 [ 72.523526][ T7971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.523542][ T7971] RSP: 002b:00007fa23bcc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.523553][ T7971] RAX: ffffffffffffffda RBX: 00007fa23b026090 RCX: 00007fa23ada94d9 [ 72.523560][ T7971] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000009 [ 72.523567][ T7971] RBP: 00007fa23ae3804e R08: 0000000000000000 R09: 0000000000000000 [ 72.523574][ T7971] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000000 [ 72.523581][ T7971] R13: 00007fa23b026128 R14: 00007fa23b026090 R15: 00007ffe6f310208 [ 72.523596][ T7971] [ 72.643985][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 72.679712][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.679977][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.915420][ T8004] configfs: Unknown parameter 'huge' [ 72.920156][ T5766] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.079901][ T5766] usb 9-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 73.080970][ T5766] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1636, setting to 1024 [ 73.080985][ T5766] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 73.082130][ T5766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 73.082141][ T5766] usb 9-1: Product: syz [ 73.082149][ T5766] usb 9-1: Manufacturer: syz [ 73.085090][ T7980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 73.088338][ T5766] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected [ 73.092905][ T5766] usb 9-1: iuu_phoenix converter now attached to ttyUSB0 [ 73.485082][ T8021] FAULT_INJECTION: forcing a failure. [ 73.485082][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 73.485102][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.5.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.485117][ T8021] Tainted: [L]=SOFTLOCKUP [ 73.485120][ T8021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.485126][ T8021] Call Trace: [ 73.485130][ T8021] [ 73.485135][ T8021] dump_stack_lvl+0x100/0x190 [ 73.485157][ T8021] should_fail_ex.cold+0x5/0xa [ 73.485174][ T8021] should_failslab+0xc2/0x120 [ 73.485188][ T8021] __kmalloc_cache_noprof+0x91/0x6d0 [ 73.485216][ T8021] ? allocate_file_region_entries+0x15d/0x630 [ 73.485227][ T8021] ? allocate_file_region_entries+0x1a0/0x630 [ 73.485241][ T8021] allocate_file_region_entries+0x1a0/0x630 [ 73.485255][ T8021] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 73.485271][ T8021] region_chg+0x85/0x140 [ 73.485283][ T8021] hugetlb_reserve_pages+0x2ad/0x1610 [ 73.485300][ T8021] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 73.485318][ T8021] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 73.485338][ T8021] memfd_alloc_folio+0x1f5/0x670 [ 73.485355][ T8021] memfd_pin_folios+0x12e3/0x1630 [ 73.485372][ T8021] ? kasan_save_stack+0x30/0x50 [ 73.485389][ T8021] ? __pfx_memfd_pin_folios+0x10/0x10 [ 73.485405][ T8021] ? __lock_acquire+0x5c0/0x1f40 [ 73.485421][ T8021] ? __lock_acquire+0x5c0/0x1f40 [ 73.485452][ T8021] ? __pfx_down_read+0x10/0x10 [ 73.485468][ T8021] ? __fget_files+0x21f/0x3d0 [ 73.485481][ T8021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.485494][ T8021] udmabuf_create+0x631/0x10c0 [ 73.485513][ T8021] ? lock_acquire+0x1d1/0x380 [ 73.485527][ T8021] ? __pfx_udmabuf_create+0x10/0x10 [ 73.485537][ T8021] ? find_held_lock+0x2b/0x80 [ 73.485548][ T8021] ? __might_fault+0xc5/0x140 [ 73.485560][ T8021] ? __might_fault+0xc5/0x140 [ 73.485578][ T8021] udmabuf_ioctl+0x18f/0x300 [ 73.485589][ T8021] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 73.485604][ T8021] ? selinux_file_ioctl+0x1e0/0x290 [ 73.485615][ T8021] ? selinux_file_ioctl+0x1e7/0x290 [ 73.485627][ T8021] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 73.485638][ T8021] __x64_sys_ioctl+0x18e/0x210 [ 73.485650][ T8021] do_syscall_64+0x123/0x7b0 [ 73.485666][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.485677][ T8021] RIP: 0033:0x7faec3ba94d9 [ 73.485687][ T8021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.485697][ T8021] RSP: 002b:00007faec49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.485707][ T8021] RAX: ffffffffffffffda RBX: 00007faec3e25fa0 RCX: 00007faec3ba94d9 [ 73.485714][ T8021] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 73.485720][ T8021] RBP: 00007faec49d1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.485726][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.485732][ T8021] R13: 00007faec3e26038 R14: 00007faec3e25fa0 R15: 00007ffe72f4af38 [ 73.485746][ T8021] [ 73.532318][ T8023] xt_hashlimit: max too large, truncated to 1048576 [ 73.532520][ T8023] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 73.871085][ T8043] fuse: Unknown parameter '0x0000000000000006' [ 73.871113][ T8044] fuse: Unknown parameter '0x0000000000000006' [ 73.871691][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 73.871699][ T43] audit: type=1326 audit(2000000003.219:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.871854][ T43] audit: type=1326 audit(2000000003.219:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872269][ T43] audit: type=1326 audit(2000000003.219:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872291][ T43] audit: type=1326 audit(2000000003.219:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872311][ T43] audit: type=1326 audit(2000000003.219:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872465][ T43] audit: type=1326 audit(2000000003.219:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872597][ T43] audit: type=1326 audit(2000000003.219:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872774][ T43] audit: type=1326 audit(2000000003.219:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.872906][ T43] audit: type=1326 audit(2000000003.219:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.873049][ T43] audit: type=1326 audit(2000000003.219:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec3ba94d9 code=0x7ffc0000 [ 73.982786][ T8048] FAULT_INJECTION: forcing a failure. [ 73.982786][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 73.982816][ T8048] CPU: 2 UID: 0 PID: 8048 Comm: syz.5.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.982838][ T8048] Tainted: [L]=SOFTLOCKUP [ 73.982844][ T8048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.982853][ T8048] Call Trace: [ 73.982859][ T8048] [ 73.982884][ T8048] dump_stack_lvl+0x100/0x190 [ 73.982920][ T8048] should_fail_ex.cold+0x5/0xa [ 73.982946][ T8048] should_failslab+0xc2/0x120 [ 73.982966][ T8048] __kmalloc_cache_noprof+0x91/0x6d0 [ 73.982987][ T8048] ? allocate_file_region_entries+0x15d/0x630 [ 73.983005][ T8048] ? allocate_file_region_entries+0x1a0/0x630 [ 73.983032][ T8048] allocate_file_region_entries+0x1a0/0x630 [ 73.983059][ T8048] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 73.983087][ T8048] region_chg+0x85/0x140 [ 73.983104][ T8048] hugetlb_reserve_pages+0x2ad/0x1610 [ 73.983131][ T8048] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 73.983156][ T8048] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 73.983187][ T8048] memfd_alloc_folio+0x1f5/0x670 [ 73.983219][ T8048] memfd_pin_folios+0x12e3/0x1630 [ 73.983246][ T8048] ? kasan_save_stack+0x30/0x50 [ 73.983274][ T8048] ? __pfx_memfd_pin_folios+0x10/0x10 [ 73.983297][ T8048] ? __lock_acquire+0x5c0/0x1f40 [ 73.983323][ T8048] ? __lock_acquire+0x5c0/0x1f40 [ 73.983365][ T8048] ? __pfx_down_read+0x10/0x10 [ 73.983391][ T8048] ? __fget_files+0x21f/0x3d0 [ 73.983410][ T8048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.983430][ T8048] udmabuf_create+0x631/0x10c0 [ 73.983458][ T8048] ? lock_acquire+0x1d1/0x380 [ 73.983480][ T8048] ? __pfx_udmabuf_create+0x10/0x10 [ 73.983496][ T8048] ? find_held_lock+0x2b/0x80 [ 73.983515][ T8048] ? __might_fault+0xc5/0x140 [ 73.983537][ T8048] ? __might_fault+0xc5/0x140 [ 73.983566][ T8048] udmabuf_ioctl+0x18f/0x300 [ 73.983581][ T8048] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 73.983602][ T8048] ? selinux_file_ioctl+0x1e0/0x290 [ 73.983619][ T8048] ? selinux_file_ioctl+0x1e7/0x290 [ 73.983637][ T8048] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 73.983658][ T8048] __x64_sys_ioctl+0x18e/0x210 [ 73.983680][ T8048] do_syscall_64+0x123/0x7b0 [ 73.983708][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.983727][ T8048] RIP: 0033:0x7faec3ba94d9 [ 73.983739][ T8048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.983755][ T8048] RSP: 002b:00007faec49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.983773][ T8048] RAX: ffffffffffffffda RBX: 00007faec3e25fa0 RCX: 00007faec3ba94d9 [ 73.983783][ T8048] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 73.983793][ T8048] RBP: 00007faec49d1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.983802][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.983811][ T8048] R13: 00007faec3e26038 R14: 00007faec3e25fa0 R15: 00007ffe72f4af38 [ 73.983837][ T8048] [ 74.289104][ T1485] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 74.335209][ T35] usb 9-1: USB disconnect, device number 3 [ 74.342552][ T35] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 74.343145][ T35] iuu_phoenix 9-1:1.0: device disconnected [ 74.421298][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.423719][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.424307][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.425564][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.426084][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.442758][ T1485] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.446961][ T1485] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.446974][ T1485] usb 10-1: config 0 has no interface number 0 [ 74.446991][ T1485] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 74.447003][ T1485] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 74.447022][ T1485] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.448346][ T1485] usb 10-1: config 0 descriptor?? [ 74.449363][ T8053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 74.457710][ T1485] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 74.628838][ T8055] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.899647][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.899691][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.899745][ T8055] bridge_slave_0: entered allmulticast mode [ 74.900399][ T8055] bridge_slave_0: entered promiscuous mode [ 74.901924][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.901999][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.902051][ T8055] bridge_slave_1: entered allmulticast mode [ 74.902670][ T8055] bridge_slave_1: entered promiscuous mode [ 74.918784][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.921346][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.938223][ T8055] team0: Port device team_slave_0 added [ 74.939744][ T8055] team0: Port device team_slave_1 added [ 74.950703][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.950711][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.950724][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.951778][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.951786][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.951797][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.970697][ T8055] hsr_slave_0: entered promiscuous mode [ 74.971107][ T8055] hsr_slave_1: entered promiscuous mode [ 74.971431][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 74.971439][ T8055] Cannot create hsr debugfs directory [ 75.073564][ T8055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.075538][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.076344][ T8055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.077905][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.078286][ T8055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.080144][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.080517][ T8055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.085148][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.098145][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.098191][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.098294][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.098337][ T8055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.126479][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.132656][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.134866][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.135148][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.138865][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.138907][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.144182][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.144405][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.351629][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.484279][ T8055] veth0_vlan: entered promiscuous mode [ 75.487749][ T8055] veth1_vlan: entered promiscuous mode [ 75.502233][ T8055] veth0_macvtap: entered promiscuous mode [ 75.504573][ T8055] veth1_macvtap: entered promiscuous mode [ 75.512105][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.517354][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.566909][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.566922][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.588212][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.588225][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.590343][ T5874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590367][ T5874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590383][ T5874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590399][ T5874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.657702][ T8121] block nbd3: shutting down sockets [ 75.674735][ T8118] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 4294705151 [ 75.710634][ T8123] FAULT_INJECTION: forcing a failure. [ 75.710634][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 75.710664][ T8123] CPU: 2 UID: 0 PID: 8123 Comm: syz.4.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.710686][ T8123] Tainted: [L]=SOFTLOCKUP [ 75.710693][ T8123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.710703][ T8123] Call Trace: [ 75.710709][ T8123] [ 75.710716][ T8123] dump_stack_lvl+0x100/0x190 [ 75.710751][ T8123] should_fail_ex.cold+0x5/0xa [ 75.710776][ T8123] should_failslab+0xc2/0x120 [ 75.710811][ T8123] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.710827][ T8123] ? allocate_file_region_entries+0x15d/0x630 [ 75.710838][ T8123] ? allocate_file_region_entries+0x1a0/0x630 [ 75.710852][ T8123] allocate_file_region_entries+0x1a0/0x630 [ 75.710866][ T8123] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 75.710882][ T8123] region_chg+0x85/0x140 [ 75.710893][ T8123] hugetlb_reserve_pages+0x2ad/0x1610 [ 75.710910][ T8123] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 75.710927][ T8123] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 75.710947][ T8123] memfd_alloc_folio+0x1f5/0x670 [ 75.710964][ T8123] memfd_pin_folios+0x12e3/0x1630 [ 75.710981][ T8123] ? kasan_save_stack+0x30/0x50 [ 75.710998][ T8123] ? __pfx_memfd_pin_folios+0x10/0x10 [ 75.711014][ T8123] ? __lock_acquire+0x5c0/0x1f40 [ 75.711031][ T8123] ? __lock_acquire+0x5c0/0x1f40 [ 75.711056][ T8123] ? __pfx_down_read+0x10/0x10 [ 75.711072][ T8123] ? __fget_files+0x21f/0x3d0 [ 75.711085][ T8123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.711102][ T8123] udmabuf_create+0x631/0x10c0 [ 75.711120][ T8123] ? lock_acquire+0x1d1/0x380 [ 75.711134][ T8123] ? __pfx_udmabuf_create+0x10/0x10 [ 75.711144][ T8123] ? find_held_lock+0x2b/0x80 [ 75.711155][ T8123] ? __might_fault+0xc5/0x140 [ 75.711166][ T8123] ? __might_fault+0xc5/0x140 [ 75.711185][ T8123] udmabuf_ioctl+0x18f/0x300 [ 75.711195][ T8123] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.711210][ T8123] ? selinux_file_ioctl+0x1e0/0x290 [ 75.711222][ T8123] ? selinux_file_ioctl+0x1e7/0x290 [ 75.711233][ T8123] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.711244][ T8123] __x64_sys_ioctl+0x18e/0x210 [ 75.711256][ T8123] do_syscall_64+0x123/0x7b0 [ 75.711271][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.711282][ T8123] RIP: 0033:0x7fa23ada94d9 [ 75.711292][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.711302][ T8123] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.711313][ T8123] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 75.711320][ T8123] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 75.711326][ T8123] RBP: 00007fa23bce1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.711332][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.711338][ T8123] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 75.711352][ T8123] [ 75.763948][ T8131] 0x000000000000-0x00000001001f : "" [ 75.808189][ T8131] ftl_cs: FTL header corrupt! [ 75.828540][ T8125] overlayfs: failed to verify index (index/00fb21000138262c4b596c48bb8b61c6745cf5a2e9889af9661600000000000000, ftype=8000, err=-61) [ 75.828578][ T8125] overlayfs: failed index dir cleanup (-61) [ 75.828584][ T8125] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 76.443384][ T8154] FAULT_INJECTION: forcing a failure. [ 76.443384][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 76.443404][ T8154] CPU: 2 UID: 0 PID: 8154 Comm: syz.6.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.443420][ T8154] Tainted: [L]=SOFTLOCKUP [ 76.443423][ T8154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.443429][ T8154] Call Trace: [ 76.443433][ T8154] [ 76.443437][ T8154] dump_stack_lvl+0x100/0x190 [ 76.443460][ T8154] should_fail_ex.cold+0x5/0xa [ 76.443478][ T8154] should_failslab+0xc2/0x120 [ 76.443492][ T8154] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.443509][ T8154] ? security_file_alloc+0x34/0x2c0 [ 76.443525][ T8154] security_file_alloc+0x34/0x2c0 [ 76.443536][ T8154] init_file+0x95/0x480 [ 76.443555][ T8154] alloc_empty_file+0x79/0x1c0 [ 76.443571][ T8154] alloc_file_pseudo+0x17e/0x290 [ 76.443587][ T8154] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 76.443604][ T8154] ? __kasan_kmalloc+0xaa/0xb0 [ 76.443618][ T8154] __anon_inode_getfile+0xe8/0x280 [ 76.443633][ T8154] sync_file_alloc+0x65/0x160 [ 76.443649][ T8154] sync_file_create+0x17/0xf0 [ 76.443665][ T8154] sw_sync_ioctl+0x3b4/0x13f0 [ 76.443683][ T8154] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 76.443703][ T8154] ? selinux_file_ioctl+0x1e0/0x290 [ 76.443713][ T8154] ? selinux_file_ioctl+0x1e7/0x290 [ 76.443725][ T8154] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 76.443742][ T8154] __x64_sys_ioctl+0x18e/0x210 [ 76.443755][ T8154] do_syscall_64+0x123/0x7b0 [ 76.443771][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.443781][ T8154] RIP: 0033:0x7f182c5a94d9 [ 76.443791][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.443800][ T8154] RSP: 002b:00007f182a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.443812][ T8154] RAX: ffffffffffffffda RBX: 00007f182c825fa0 RCX: 00007f182c5a94d9 [ 76.443818][ T8154] RDX: 0000200000000240 RSI: 00000000c0285700 RDI: 0000000000000008 [ 76.443824][ T8154] RBP: 00007f182c63804e R08: 0000000000000000 R09: 0000000000000000 [ 76.443830][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.443836][ T8154] R13: 00007f182c826038 R14: 00007f182c825fa0 R15: 00007ffdeb05c538 [ 76.443849][ T8154] [ 76.445441][ T8154] netlink: 40 bytes leftover after parsing attributes in process `syz.6.581'. [ 76.489300][ T67] Bluetooth: hci3: command tx timeout [ 76.769209][ T35] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 76.837149][ T8159] FAULT_INJECTION: forcing a failure. [ 76.837149][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 76.837171][ T8159] CPU: 3 UID: 0 PID: 8159 Comm: syz.4.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.837185][ T8159] Tainted: [L]=SOFTLOCKUP [ 76.837189][ T8159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.837195][ T8159] Call Trace: [ 76.837199][ T8159] [ 76.837204][ T8159] dump_stack_lvl+0x100/0x190 [ 76.837225][ T8159] should_fail_ex.cold+0x5/0xa [ 76.837242][ T8159] should_failslab+0xc2/0x120 [ 76.837255][ T8159] __kmalloc_cache_noprof+0x91/0x6d0 [ 76.837270][ T8159] ? allocate_file_region_entries+0x15d/0x630 [ 76.837281][ T8159] ? allocate_file_region_entries+0x1a0/0x630 [ 76.837295][ T8159] allocate_file_region_entries+0x1a0/0x630 [ 76.837309][ T8159] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 76.837325][ T8159] region_chg+0x85/0x140 [ 76.837336][ T8159] hugetlb_reserve_pages+0x2ad/0x1610 [ 76.837353][ T8159] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 76.837370][ T8159] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 76.837390][ T8159] memfd_alloc_folio+0x1f5/0x670 [ 76.837421][ T8159] memfd_pin_folios+0x12e3/0x1630 [ 76.837437][ T8159] ? kasan_save_stack+0x30/0x50 [ 76.837454][ T8159] ? __pfx_memfd_pin_folios+0x10/0x10 [ 76.837470][ T8159] ? __lock_acquire+0x5c0/0x1f40 [ 76.837486][ T8159] ? __lock_acquire+0x5c0/0x1f40 [ 76.837510][ T8159] ? __pfx_down_read+0x10/0x10 [ 76.837531][ T8159] ? __fget_files+0x21f/0x3d0 [ 76.837544][ T8159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.837557][ T8159] udmabuf_create+0x631/0x10c0 [ 76.837575][ T8159] ? lock_acquire+0x1d1/0x380 [ 76.837589][ T8159] ? __pfx_udmabuf_create+0x10/0x10 [ 76.837599][ T8159] ? find_held_lock+0x2b/0x80 [ 76.837609][ T8159] ? __might_fault+0xc5/0x140 [ 76.837621][ T8159] ? __might_fault+0xc5/0x140 [ 76.837639][ T8159] udmabuf_ioctl+0x18f/0x300 [ 76.837649][ T8159] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 76.837664][ T8159] ? selinux_file_ioctl+0x1e0/0x290 [ 76.837676][ T8159] ? selinux_file_ioctl+0x1e7/0x290 [ 76.837687][ T8159] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 76.837698][ T8159] __x64_sys_ioctl+0x18e/0x210 [ 76.837711][ T8159] do_syscall_64+0x123/0x7b0 [ 76.837726][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.837738][ T8159] RIP: 0033:0x7fa23ada94d9 [ 76.837747][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.837757][ T8159] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.837768][ T8159] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 76.837774][ T8159] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 76.837780][ T8159] RBP: 00007fa23bce1090 R08: 0000000000000000 R09: 0000000000000000 [ 76.837786][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.837792][ T8159] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 76.837806][ T8159] [ 76.883819][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 76.949597][ T35] usb 11-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 76.950602][ T35] usb 11-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 76.950618][ T35] usb 11-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 76.950630][ T35] usb 11-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.950642][ T35] usb 11-1: config 1 interface 0 has no altsetting 0 [ 76.951485][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.951496][ T35] usb 11-1: SerialNumber: syz [ 76.955121][ T8157] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 76.955208][ T8157] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.068653][ T8114] usb 10-1: USB disconnect, device number 3 [ 77.160013][ T8188] overlay: ./trace/events/irq/irq_handler_entry/filter is not a directory [ 77.160336][ T8183] overlay: ./trace/events/irq/irq_handler_entry/filter is not a directory [ 77.160710][ T8157] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.160808][ T8157] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 77.235332][ T8191] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.236881][ T54] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.570381][ T35] cdc_ether 11-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 77.772683][ T5930] usb 11-1: USB disconnect, device number 2 [ 77.774999][ T5930] cdc_ether 11-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 78.311162][ T8216] FAULT_INJECTION: forcing a failure. [ 78.311162][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 78.311257][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.6.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.311282][ T8216] Tainted: [L]=SOFTLOCKUP [ 78.311288][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.311298][ T8216] Call Trace: [ 78.311304][ T8216] [ 78.311311][ T8216] dump_stack_lvl+0x100/0x190 [ 78.311346][ T8216] should_fail_ex.cold+0x5/0xa [ 78.311373][ T8216] should_failslab+0xc2/0x120 [ 78.311395][ T8216] __kmalloc_cache_noprof+0x91/0x6d0 [ 78.311419][ T8216] ? allocate_file_region_entries+0x15d/0x630 [ 78.311438][ T8216] ? allocate_file_region_entries+0x1a0/0x630 [ 78.311462][ T8216] allocate_file_region_entries+0x1a0/0x630 [ 78.311485][ T8216] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 78.311513][ T8216] region_chg+0x85/0x140 [ 78.311532][ T8216] hugetlb_reserve_pages+0x2ad/0x1610 [ 78.311562][ T8216] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 78.311598][ T8216] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 78.311631][ T8216] memfd_alloc_folio+0x1f5/0x670 [ 78.311660][ T8216] memfd_pin_folios+0x12e3/0x1630 [ 78.311687][ T8216] ? kasan_save_stack+0x30/0x50 [ 78.311718][ T8216] ? __pfx_memfd_pin_folios+0x10/0x10 [ 78.311744][ T8216] ? __lock_acquire+0x5c0/0x1f40 [ 78.311772][ T8216] ? __lock_acquire+0x5c0/0x1f40 [ 78.311817][ T8216] ? __pfx_down_read+0x10/0x10 [ 78.311843][ T8216] ? __fget_files+0x21f/0x3d0 [ 78.311865][ T8216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.311888][ T8216] udmabuf_create+0x631/0x10c0 [ 78.311919][ T8216] ? lock_acquire+0x1d1/0x380 [ 78.311944][ T8216] ? __pfx_udmabuf_create+0x10/0x10 [ 78.311960][ T8216] ? find_held_lock+0x2b/0x80 [ 78.311978][ T8216] ? __might_fault+0xc5/0x140 [ 78.311999][ T8216] ? __might_fault+0xc5/0x140 [ 78.312031][ T8216] udmabuf_ioctl+0x18f/0x300 [ 78.312048][ T8216] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 78.312075][ T8216] ? selinux_file_ioctl+0x1e0/0x290 [ 78.312093][ T8216] ? selinux_file_ioctl+0x1e7/0x290 [ 78.312113][ T8216] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 78.312132][ T8216] __x64_sys_ioctl+0x18e/0x210 [ 78.312152][ T8216] do_syscall_64+0x123/0x7b0 [ 78.312179][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.312197][ T8216] RIP: 0033:0x7f182c5a94d9 [ 78.312212][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.312229][ T8216] RSP: 002b:00007f182a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.312246][ T8216] RAX: ffffffffffffffda RBX: 00007f182c825fa0 RCX: 00007f182c5a94d9 [ 78.312258][ T8216] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 78.312269][ T8216] RBP: 00007f182a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.312280][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.312290][ T8216] R13: 00007f182c826038 R14: 00007f182c825fa0 R15: 00007ffdeb05c538 [ 78.312315][ T8216] [ 78.579133][ T5773] Bluetooth: hci3: command tx timeout [ 78.799068][ T5149] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 78.959539][ T5149] usb 11-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 78.959564][ T5149] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 78.960698][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.961003][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.961016][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.961807][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.961836][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.961847][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.962598][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.962626][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.962645][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.963362][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.963382][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.963393][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.964133][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.964167][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.964185][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.964940][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.964960][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.964971][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.965706][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.965737][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.965758][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.966497][ T5149] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.966517][ T5149] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.966529][ T5149] usb 11-1: config 0 interface 0 has no altsetting 0 [ 78.968411][ T5149] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 78.968423][ T5149] usb 11-1: Product: syz [ 78.968430][ T5149] usb 11-1: Manufacturer: syz [ 78.968437][ T5149] usb 11-1: SerialNumber: syz [ 78.970536][ T5149] usb 11-1: config 0 descriptor?? [ 78.973508][ T5149] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.174487][ T5930] usb 11-1: USB disconnect, device number 3 [ 79.182516][ T5930] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 79.289067][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 79.555064][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 79.555081][ T43] audit: type=1400 audit(2000000008.899:706): avc: denied { validate_trans } for pid=8242 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.811220][ T5149] hid-generic 0005:10CF:4155.0002: unknown main item tag 0x0 [ 79.816273][ T5149] hid-generic 0005:10CF:4155.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 79.865231][ T43] audit: type=1400 audit(2000000009.209:707): avc: denied { setopt } for pid=8255 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.203151][ T43] audit: type=1400 audit(2000000009.549:708): avc: denied { shutdown } for pid=8264 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.204450][ T8265] FAULT_INJECTION: forcing a failure. [ 80.204450][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 80.204469][ T8265] CPU: 2 UID: 0 PID: 8265 Comm: syz.4.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.204484][ T8265] Tainted: [L]=SOFTLOCKUP [ 80.204488][ T8265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.204494][ T8265] Call Trace: [ 80.204504][ T8265] [ 80.204508][ T8265] dump_stack_lvl+0x100/0x190 [ 80.204584][ T8265] should_fail_ex.cold+0x5/0xa [ 80.204615][ T8265] should_failslab+0xc2/0x120 [ 80.204632][ T8265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.204649][ T8265] ? security_file_alloc+0x34/0x2c0 [ 80.204664][ T8265] security_file_alloc+0x34/0x2c0 [ 80.204676][ T8265] init_file+0x95/0x480 [ 80.204690][ T8265] alloc_empty_file+0x79/0x1c0 [ 80.204706][ T8265] alloc_file_pseudo+0x17e/0x290 [ 80.204722][ T8265] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.204739][ T8265] ? alloc_fd+0x471/0x7a0 [ 80.204764][ T8265] sock_alloc_file+0x50/0x210 [ 80.204794][ T8265] sctp_getsockopt_peeloff_common.constprop.0+0x378/0x640 [ 80.204825][ T8265] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 80.204852][ T8265] sctp_getsockopt+0x2fb2/0x7160 [ 80.204873][ T8265] ? avc_has_perm_noaudit+0x56/0x470 [ 80.204894][ T8265] ? find_held_lock+0x2b/0x80 [ 80.204930][ T8265] ? avc_has_perm_noaudit+0x11e/0x470 [ 80.204951][ T8265] ? avc_has_perm_noaudit+0x11e/0x470 [ 80.204972][ T8265] ? __pfx_sctp_getsockopt+0x10/0x10 [ 80.205004][ T8265] ? __pfx_avc_has_perm+0x10/0x10 [ 80.205021][ T8265] ? futex_unqueue+0x13d/0x2c0 [ 80.205044][ T8265] ? lock_acquire+0x1d1/0x380 [ 80.205066][ T8265] ? __might_fault+0xc5/0x140 [ 80.205087][ T8265] ? find_held_lock+0x2b/0x80 [ 80.205104][ T8265] ? __might_fault+0xc5/0x140 [ 80.205119][ T8265] ? __might_fault+0xc5/0x140 [ 80.205144][ T8265] ? _copy_from_user+0x59/0xd0 [ 80.205168][ T8265] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 80.205194][ T8265] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 80.205216][ T8265] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 80.205232][ T8265] do_sock_getsockopt+0x415/0x570 [ 80.205248][ T8265] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 80.205264][ T8265] ? __fget_files+0x34/0x3d0 [ 80.205277][ T8265] ? find_held_lock+0x2b/0x80 [ 80.205292][ T8265] ? __fget_files+0x21f/0x3d0 [ 80.205309][ T8265] __sys_getsockopt+0x148/0x260 [ 80.205326][ T8265] ? __x64_sys_getsockopt+0xbd/0x160 [ 80.205340][ T8265] __x64_sys_getsockopt+0xbd/0x160 [ 80.205352][ T8265] ? do_syscall_64+0xae/0x7b0 [ 80.205366][ T8265] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.205380][ T8265] do_syscall_64+0x123/0x7b0 [ 80.205399][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.205411][ T8265] RIP: 0033:0x7fa23ada94d9 [ 80.205420][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.205430][ T8265] RSP: 002b:00007fa23bce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 80.205441][ T8265] RAX: ffffffffffffffda RBX: 00007fa23b025fa0 RCX: 00007fa23ada94d9 [ 80.205448][ T8265] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000005 [ 80.205454][ T8265] RBP: 00007fa23ae3804e R08: 0000200000000440 R09: 0000000000000000 [ 80.205460][ T8265] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 80.205466][ T8265] R13: 00007fa23b026038 R14: 00007fa23b025fa0 R15: 00007ffe6f310208 [ 80.205479][ T8265] [ 80.549962][ T8286] FAULT_INJECTION: forcing a failure. [ 80.549962][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 80.549991][ T8286] CPU: 3 UID: 0 PID: 8286 Comm: syz.5.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.550015][ T8286] Tainted: [L]=SOFTLOCKUP [ 80.550022][ T8286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.550032][ T8286] Call Trace: [ 80.550038][ T8286] [ 80.550046][ T8286] dump_stack_lvl+0x100/0x190 [ 80.550079][ T8286] should_fail_ex.cold+0x5/0xa [ 80.550106][ T8286] should_failslab+0xc2/0x120 [ 80.550124][ T8286] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.550138][ T8286] ? allocate_file_region_entries+0x15d/0x630 [ 80.550150][ T8286] ? allocate_file_region_entries+0x1a0/0x630 [ 80.550164][ T8286] allocate_file_region_entries+0x1a0/0x630 [ 80.550178][ T8286] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 80.550193][ T8286] region_chg+0x85/0x140 [ 80.550205][ T8286] hugetlb_reserve_pages+0x2ad/0x1610 [ 80.550222][ T8286] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 80.550239][ T8286] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 80.550258][ T8286] memfd_alloc_folio+0x1f5/0x670 [ 80.550276][ T8286] memfd_pin_folios+0x12e3/0x1630 [ 80.550292][ T8286] ? kasan_save_stack+0x30/0x50 [ 80.550309][ T8286] ? __pfx_memfd_pin_folios+0x10/0x10 [ 80.550324][ T8286] ? __lock_acquire+0x5c0/0x1f40 [ 80.550341][ T8286] ? __lock_acquire+0x5c0/0x1f40 [ 80.550366][ T8286] ? __pfx_down_read+0x10/0x10 [ 80.550381][ T8286] ? __fget_files+0x21f/0x3d0 [ 80.550394][ T8286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.550407][ T8286] udmabuf_create+0x631/0x10c0 [ 80.550425][ T8286] ? lock_acquire+0x1d1/0x380 [ 80.550439][ T8286] ? __pfx_udmabuf_create+0x10/0x10 [ 80.550449][ T8286] ? find_held_lock+0x2b/0x80 [ 80.550460][ T8286] ? __might_fault+0xc5/0x140 [ 80.550472][ T8286] ? __might_fault+0xc5/0x140 [ 80.550490][ T8286] udmabuf_ioctl+0x18f/0x300 [ 80.550500][ T8286] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 80.550515][ T8286] ? selinux_file_ioctl+0x1e0/0x290 [ 80.550531][ T8286] ? selinux_file_ioctl+0x1e7/0x290 [ 80.550543][ T8286] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 80.550554][ T8286] __x64_sys_ioctl+0x18e/0x210 [ 80.550566][ T8286] do_syscall_64+0x123/0x7b0 [ 80.550582][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.550593][ T8286] RIP: 0033:0x7faec3ba94d9 [ 80.550603][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.550613][ T8286] RSP: 002b:00007faec49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.550624][ T8286] RAX: ffffffffffffffda RBX: 00007faec3e25fa0 RCX: 00007faec3ba94d9 [ 80.550630][ T8286] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 80.550636][ T8286] RBP: 00007faec49d1090 R08: 0000000000000000 R09: 0000000000000000 [ 80.550642][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.550648][ T8286] R13: 00007faec3e26038 R14: 00007faec3e25fa0 R15: 00007ffe72f4af38 [ 80.550662][ T8286] [ 80.593883][ T43] audit: type=1400 audit(2000000009.939:709): avc: denied { getopt } for pid=8287 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.650026][ T67] Bluetooth: hci3: command tx timeout [ 80.710491][ T8297] fuse: Unknown parameter 'grou' [ 80.710634][ T8297] fuse: Unknown parameter 'grou' [ 80.710683][ T43] audit: type=1400 audit(2000000010.059:710): avc: denied { mounton } for pid=8293 comm="syz.6.618" path="/12/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.710759][ T8297] fuse: Unknown parameter 'grou' [ 80.713202][ T8297] fuse: Unknown parameter 'grou' [ 80.713350][ T8297] fuse: Unknown parameter 'grou' [ 80.713481][ T8297] fuse: Unknown parameter 'grou' [ 80.713605][ T8297] fuse: Unknown parameter 'grou' [ 80.713852][ T8297] fuse: Unknown parameter 'grou' [ 80.713930][ T43] audit: type=1400 audit(2000000010.059:711): avc: denied { getopt } for pid=8293 comm="syz.6.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.714004][ T8297] fuse: Unknown parameter 'grou' [ 80.714126][ T8297] fuse: Unknown parameter 'grou' [ 80.714256][ T8297] fuse: Unknown parameter 'grou' [ 80.714379][ T8297] fuse: Unknown parameter 'grou' [ 80.714508][ T8297] fuse: Unknown parameter 'grou' [ 80.714632][ T8297] fuse: Unknown parameter 'grou' [ 80.714756][ T8297] fuse: Unknown parameter 'grou' [ 80.714882][ T8297] fuse: Unknown parameter 'grou' [ 80.715010][ T8297] fuse: Unknown parameter 'grou' [ 80.715133][ T8297] fuse: Unknown parameter 'grou' [ 80.715258][ T8297] fuse: Unknown parameter 'grou' [ 80.715381][ T8297] fuse: Unknown parameter 'grou' [ 80.715839][ T8297] fuse: Unknown parameter 'grou' [ 80.715974][ T8297] fuse: Unknown parameter 'grou' [ 80.716103][ T8297] fuse: Unknown parameter 'grou' [ 80.716393][ T8297] fuse: Unknown parameter 'grou' [ 80.716525][ T8297] fuse: Unknown parameter 'grou' [ 80.716666][ T8297] fuse: Unknown parameter 'grou' [ 80.716798][ T8297] fuse: Unknown parameter 'grou' [ 80.716924][ T8297] fuse: Unknown parameter 'grou' [ 80.717047][ T8297] fuse: Unknown parameter 'grou' [ 80.717168][ T8297] fuse: Unknown parameter 'grou' [ 80.717293][ T8297] fuse: Unknown parameter 'grou' [ 80.717432][ T8297] fuse: Unknown parameter 'grou' [ 80.717562][ T8297] fuse: Unknown parameter 'grou' [ 81.216005][ T43] audit: type=1400 audit(2000000010.559:712): avc: denied { watch } for pid=8332 comm="syz.6.626" path="/15/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 81.218908][ T8333] netlink: 4100 bytes leftover after parsing attributes in process `syz.6.626'. [ 81.272199][ T8336] netlink: 'syz.6.627': attribute type 3 has an invalid length. [ 81.274138][ T8336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8336 comm=syz.6.627 [ 81.366180][ T8343] netlink: 140 bytes leftover after parsing attributes in process `syz.6.630'. [ 81.485957][ T8347] FAULT_INJECTION: forcing a failure. [ 81.485957][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 81.485987][ T8347] CPU: 2 UID: 0 PID: 8347 Comm: syz.6.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.486010][ T8347] Tainted: [L]=SOFTLOCKUP [ 81.486018][ T8347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.486027][ T8347] Call Trace: [ 81.486047][ T8347] [ 81.486060][ T8347] dump_stack_lvl+0x100/0x190 [ 81.486150][ T8347] should_fail_ex.cold+0x5/0xa [ 81.486173][ T8347] should_failslab+0xc2/0x120 [ 81.486195][ T8347] __kmalloc_cache_noprof+0x91/0x6d0 [ 81.486218][ T8347] ? allocate_file_region_entries+0x15d/0x630 [ 81.486235][ T8347] ? allocate_file_region_entries+0x1a0/0x630 [ 81.486257][ T8347] allocate_file_region_entries+0x1a0/0x630 [ 81.486281][ T8347] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 81.486308][ T8347] region_chg+0x85/0x140 [ 81.486328][ T8347] hugetlb_reserve_pages+0x2ad/0x1610 [ 81.486358][ T8347] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 81.486385][ T8347] ? __pfx_filemap_get_folios_contig+0x10/0x10 [ 81.486418][ T8347] memfd_alloc_folio+0x1f5/0x670 [ 81.486444][ T8347] memfd_pin_folios+0x12e3/0x1630 [ 81.486471][ T8347] ? kasan_save_stack+0x30/0x50 [ 81.486500][ T8347] ? __pfx_memfd_pin_folios+0x10/0x10 [ 81.486525][ T8347] ? __lock_acquire+0x5c0/0x1f40 [ 81.486553][ T8347] ? __lock_acquire+0x5c0/0x1f40 [ 81.486598][ T8347] ? __pfx_down_read+0x10/0x10 [ 81.486654][ T8347] ? __fget_files+0x21f/0x3d0 [ 81.486676][ T8347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.486699][ T8347] udmabuf_create+0x631/0x10c0 [ 81.486743][ T8347] ? lock_acquire+0x1d1/0x380 [ 81.486766][ T8347] ? __pfx_udmabuf_create+0x10/0x10 [ 81.486783][ T8347] ? find_held_lock+0x2b/0x80 [ 81.486802][ T8347] ? __might_fault+0xc5/0x140 [ 81.486821][ T8347] ? __might_fault+0xc5/0x140 [ 81.486846][ T8347] udmabuf_ioctl+0x18f/0x300 [ 81.486861][ T8347] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.486888][ T8347] ? selinux_file_ioctl+0x1e0/0x290 [ 81.486910][ T8347] ? selinux_file_ioctl+0x1e7/0x290 [ 81.486929][ T8347] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.486948][ T8347] __x64_sys_ioctl+0x18e/0x210 [ 81.486966][ T8347] do_syscall_64+0x123/0x7b0 [ 81.486991][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.487009][ T8347] RIP: 0033:0x7f182c5a94d9 [ 81.487026][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.487042][ T8347] RSP: 002b:00007f182a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.487078][ T8347] RAX: ffffffffffffffda RBX: 00007f182c825fa0 RCX: 00007f182c5a94d9 [ 81.487090][ T8347] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000003 [ 81.487101][ T8347] RBP: 00007f182a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 81.487111][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.487119][ T8347] R13: 00007f182c826038 R14: 00007f182c825fa0 R15: 00007ffdeb05c538 [ 81.487139][ T8347] [ 81.556583][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.633'. [ 81.611287][ T8351] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.611302][ T8351] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 81.611344][ T8351] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.611353][ T8351] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 82.217798][ T8359] netlink: 'syz.5.636': attribute type 30 has an invalid length. [ 82.241123][ T43] audit: type=1400 audit(2000000011.589:713): avc: denied { checkpoint_restore } for pid=8358 comm="syz.5.636" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.322377][ T43] audit: type=1400 audit(2000000011.669:714): avc: denied { write } for pid=8369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.372399][ T43] audit: type=1400 audit(2000000011.719:715): avc: denied { write } for pid=8374 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.413807][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.523021][ T8389] FAULT_INJECTION: forcing a failure. [ 82.523021][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 82.523040][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.6.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.523055][ T8389] Tainted: [L]=SOFTLOCKUP [ 82.523058][ T8389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.523064][ T8389] Call Trace: [ 82.523068][ T8389] [ 82.523072][ T8389] dump_stack_lvl+0x100/0x190 [ 82.523094][ T8389] should_fail_ex.cold+0x5/0xa [ 82.523112][ T8389] should_failslab+0xc2/0x120 [ 82.523126][ T8389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.523143][ T8389] ? do_getname+0x35/0x390 [ 82.523160][ T8389] do_getname+0x35/0x390 [ 82.523176][ T8389] do_sys_openat2+0xc3/0x1d0 [ 82.523191][ T8389] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.523206][ T8389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.523225][ T8389] __x64_sys_openat+0x12d/0x210 [ 82.523239][ T8389] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.523259][ T8389] do_syscall_64+0x123/0x7b0 [ 82.523274][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.523284][ T8389] RIP: 0033:0x7f182c5a94d9 [ 82.523293][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.523303][ T8389] RSP: 002b:00007f182a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.523314][ T8389] RAX: ffffffffffffffda RBX: 00007f182c825fa0 RCX: 00007f182c5a94d9 [ 82.523322][ T8389] RDX: 0000000000082002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 82.523329][ T8389] RBP: 00007f182c63804e R08: 0000000000000000 R09: 0000000000000000 [ 82.523335][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.523341][ T8389] R13: 00007f182c826038 R14: 00007f182c825fa0 R15: 00007ffdeb05c538 [ 82.523354][ T8389] [ 82.524424][ T8389] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 82.524435][ T8389] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 82.524442][ T8389] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.524447][ T8389] One or more global auth toks could not properly register; rc = [-22] [ 82.524462][ T8389] Error validating options; rc = [-22] [ 82.744528][ T67] Bluetooth: hci3: command tx timeout [ 83.106294][ T8414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8414 comm=syz.6.652 [ 83.154442][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.654'. [ 83.154519][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.654'. [ 83.314363][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.661'. [ 83.374219][ T8437] capability: warning: `syz.6.662' uses 32-bit capabilities (legacy support in use) [ 83.578587][ T8450] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 83.924789][ T8468] netlink: 'syz.5.675': attribute type 17 has an invalid length. [ 84.072065][ T8472] gfs2: path_lookup on c::: returned error -2 [ 84.132894][ T8484] Bluetooth: hci4: Frame reassembly failed (-90) [ 84.137562][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.137613][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.143243][ T8480] netlink: 'syz.5.677': attribute type 2 has an invalid length. [ 84.443113][ T8501] netlink: 'syz.5.687': attribute type 11 has an invalid length. [ 84.527994][ T8508] process 'syz.5.690' launched './file0' with NULL argv: empty string added [ 84.562536][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 84.562547][ T43] audit: type=1400 audit(2000000013.909:728): avc: denied { getopt } for pid=8509 comm="syz.5.691" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.059282][ T8114] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 85.209706][ T8114] usb 10-1: Using ep0 maxpacket: 8 [ 85.210348][ T8114] usb 10-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.211361][ T8114] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 85.211403][ T8114] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.211436][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.211459][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.211479][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.211499][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.211520][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.211541][ T8114] usb 10-1: config 168 interface 0 has no altsetting 0 [ 85.212435][ T8114] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 85.212461][ T8114] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.212489][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.212511][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.212530][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.212550][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.212570][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.212588][ T8114] usb 10-1: config 168 interface 0 has no altsetting 0 [ 85.213437][ T8114] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 85.213462][ T8114] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.213489][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.213510][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.213528][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.213548][ T8114] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.213568][ T8114] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.213589][ T8114] usb 10-1: config 168 interface 0 has no altsetting 0 [ 85.216706][ T8114] usb 10-1: string descriptor 0 read error: -22 [ 85.216833][ T8114] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.232467][ T8114] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.427808][ T8114] usb 10-1: USB disconnect, device number 4 [ 85.605135][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 85.605149][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 85.605161][ T8538] netlink: 'syz.4.702': attribute type 7 has an invalid length. [ 85.605168][ T8538] netlink: 'syz.4.702': attribute type 18 has an invalid length. [ 85.720240][ T8542] overlayfs: overlapping lowerdir path [ 85.721630][ T8540] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 85.721658][ T8540] overlayfs: overlapping lowerdir path [ 85.835954][ T43] audit: type=1400 audit(2000000015.179:729): avc: granted { setsecparam } for pid=8547 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 85.836455][ T43] audit: type=1400 audit(2000000015.179:730): avc: granted { setsecparam } for pid=8547 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 86.028747][ T8560] capability: warning: `syz.4.711' uses deprecated v2 capabilities in a way that may be insecure [ 86.092587][ T8567] ip_tables: iptables: counters copy to user failed while replacing table [ 86.120324][ T8577] trusted_key: encrypted_key: insufficient parameters specified [ 86.120772][ T8572] trusted_key: encrypted_key: insufficient parameters specified [ 86.169300][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 86.172253][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.246993][ T8590] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 86.247009][ T8590] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.249539][ T8590] vhci_hcd vhci_hcd.0: Device attached [ 86.257235][ T8588] vhci_hcd vhci_hcd.0: port 0 already used [ 86.265389][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 86.283549][ T8591] vhci_hcd: connection closed [ 86.285754][ T5874] vhci_hcd vhci_hcd.6: stop threads [ 86.286274][ T5874] vhci_hcd vhci_hcd.6: release socket [ 86.286294][ T5874] vhci_hcd vhci_hcd.6: disconnect device [ 86.288494][ T8598] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 86.384152][ T43] audit: type=1400 audit(1700000001.490:731): avc: denied { write } for pid=8602 comm="syz.5.724" name="instances" dev="tracefs" ino=7221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.384633][ T43] audit: type=1400 audit(1700000001.490:732): avc: denied { add_name } for pid=8602 comm="syz.5.724" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.385390][ T43] audit: type=1400 audit(1700000001.490:733): avc: denied { create } for pid=8602 comm="syz.5.724" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 86.391614][ T5865] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 86.438599][ T8605] ------------[ cut here ]------------ [ 86.438608][ T8605] !(flags & __GFP_NOWARN) [ 86.438613][ T8605] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#2: syz.5.724/8605 [ 86.444824][ T8605] Modules linked in: [ 86.446471][ T8605] CPU: 2 UID: 0 PID: 8605 Comm: syz.5.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.450080][ T8605] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.451487][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.454958][ T8605] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 86.457221][ T8605] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 86.463729][ T8605] RSP: 0018:ffffc9000368fb78 EFLAGS: 00010246 [ 86.465677][ T8605] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 86.468197][ T8605] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8fa930 [ 86.470730][ T8605] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 86.473239][ T8605] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 86.475820][ T8605] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 86.478385][ T8605] FS: 00007faec49b06c0(0000) GS:ffff8880d466e000(0000) knlGS:0000000000000000 [ 86.481230][ T8605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.483360][ T8605] CR2: 0000000000000000 CR3: 0000000047912000 CR4: 0000000000352ef0 [ 86.485955][ T8605] Call Trace: [ 86.487063][ T8605] [ 86.488048][ T8605] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 86.489887][ T8605] ? udmabuf_create+0x2e5/0x10c0 [ 86.491503][ T8605] udmabuf_create+0x2e5/0x10c0 [ 86.493063][ T8605] ? lock_acquire+0x1d1/0x380 [ 86.494628][ T8605] ? __pfx_udmabuf_create+0x10/0x10 [ 86.496330][ T8605] ? find_held_lock+0x2b/0x80 [ 86.497878][ T8605] ? __might_fault+0xc5/0x140 [ 86.499500][ T8605] ? __might_fault+0xc5/0x140 [ 86.501061][ T8605] udmabuf_ioctl+0x18f/0x300 [ 86.502583][ T8605] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 86.504239][ T8605] ? selinux_file_ioctl+0x1e0/0x290 [ 86.505930][ T8605] ? selinux_file_ioctl+0x1e7/0x290 [ 86.507628][ T8605] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 86.509663][ T8605] __x64_sys_ioctl+0x18e/0x210 [ 86.511374][ T8605] do_syscall_64+0x123/0x7b0 [ 86.512918][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.514819][ T8605] RIP: 0033:0x7faec3ba94d9 [ 86.516772][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.523276][ T8605] RSP: 002b:00007faec49b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.526066][ T8605] RAX: ffffffffffffffda RBX: 00007faec3e26090 RCX: 00007faec3ba94d9 [ 86.528716][ T8605] RDX: 0000200000000580 RSI: 0000000040187542 RDI: 0000000000000003 [ 86.531663][ T8605] RBP: 00007faec3c3804e R08: 0000000000000000 R09: 0000000000000000 [ 86.534334][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.537285][ T8605] R13: 00007faec3e26128 R14: 00007faec3e26090 R15: 00007ffe72f4af38 [ 86.540639][ T8605] [ 86.541848][ T8605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.544122][ T8605] CPU: 2 UID: 0 PID: 8605 Comm: syz.5.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.548679][ T8605] Tainted: [L]=SOFTLOCKUP [ 86.550614][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.555127][ T8605] Call Trace: [ 86.556660][ T8605] [ 86.558031][ T8605] dump_stack_lvl+0x100/0x190 [ 86.559614][ T8605] vpanic+0x2dc/0x6f8 [ 86.560929][ T8605] panic+0xd1/0xe0 [ 86.562131][ T8605] ? __pfx_panic+0x10/0x10 [ 86.563554][ T8605] check_panic_on_warn.cold+0x19/0x34 [ 86.565277][ T8605] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 86.567009][ T8605] __warn.cold+0x191/0x321 [ 86.568420][ T8605] __report_bug+0x30f/0x440 [ 86.569804][ T8605] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 86.571460][ T8605] ? __pfx___report_bug+0x10/0x10 [ 86.572979][ T8605] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 86.574716][ T8605] report_bug+0xb3/0x220 [ 86.576064][ T8605] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 86.577811][ T8605] handle_bug+0x16a/0x2a0 [ 86.579206][ T8605] exc_invalid_op+0x17/0x50 [ 86.580656][ T8605] asm_exc_invalid_op+0x1a/0x20 [ 86.582200][ T8605] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 86.584143][ T8605] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 86.591241][ T8605] RSP: 0018:ffffc9000368fb78 EFLAGS: 00010246 [ 86.594025][ T8605] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 86.597622][ T8605] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8fa930 [ 86.600921][ T8605] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 86.603411][ T8605] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 86.605928][ T8605] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 86.608433][ T8605] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 86.610185][ T8605] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 86.611919][ T8605] ? udmabuf_create+0x2e5/0x10c0 [ 86.613475][ T8605] udmabuf_create+0x2e5/0x10c0 [ 86.615079][ T8605] ? lock_acquire+0x1d1/0x380 [ 86.616816][ T8605] ? __pfx_udmabuf_create+0x10/0x10 [ 86.618940][ T8605] ? find_held_lock+0x2b/0x80 [ 86.620837][ T8605] ? __might_fault+0xc5/0x140 [ 86.622715][ T8605] ? __might_fault+0xc5/0x140 [ 86.624683][ T8605] udmabuf_ioctl+0x18f/0x300 [ 86.626617][ T8605] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 86.628709][ T8605] ? selinux_file_ioctl+0x1e0/0x290 [ 86.630965][ T8605] ? selinux_file_ioctl+0x1e7/0x290 [ 86.632770][ T8605] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 86.634436][ T8605] __x64_sys_ioctl+0x18e/0x210 [ 86.636264][ T8605] do_syscall_64+0x123/0x7b0 [ 86.637703][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.639628][ T8605] RIP: 0033:0x7faec3ba94d9 [ 86.641030][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.646943][ T8605] RSP: 002b:00007faec49b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.649486][ T8605] RAX: ffffffffffffffda RBX: 00007faec3e26090 RCX: 00007faec3ba94d9 [ 86.651842][ T8605] RDX: 0000200000000580 RSI: 0000000040187542 RDI: 0000000000000003 [ 86.654392][ T8605] RBP: 00007faec3c3804e R08: 0000000000000000 R09: 0000000000000000 [ 86.657102][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.659477][ T8605] R13: 00007faec3e26128 R14: 00007faec3e26090 R15: 00007ffe72f4af38 [ 86.661959][ T8605] [ 86.663610][ T8605] Kernel Offset: disabled [ 86.665154][ T8605] Rebooting in 86400 seconds..