last executing test programs: 23.150266843s ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="1a0405", 0x3, 0x4000004, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008e4000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000a87000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) (async, rerun: 32) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (rerun: 32) ioctl$CEC_G_MODE(r3, 0x80046108, &(0x7f0000000180)) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 64) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="016c95c963", 0x5) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) preadv2(r5, &(0x7f0000000180), 0x0, 0x401, 0x7, 0x1) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x8e}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 23.050186997s ago: executing program 1 (id=16): socket$inet6(0xa, 0x80802, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8041, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c091}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c6014780", @ANYRES32, @ANYBLOB="3d3668c91db02d5da40b867662c8238467dec63baa8faa428f086cdffaf2d95157392235c8aaff9de9dcb900a000a166ba80322accf55c0c767755bc1ab7084522b51d536b8940b4090df7caaef7907d665fcc01d1c05cd79956f7779696daafee87331484887e2bae20241cc6af0bef4b7c66968a77b38b22493aabf251316820cac664c5a63d9053fe1fc081f99f965d07a220117c951b534abc8fc79bea699d15e670a9d71eb71da6d56e976f907406551dfe19e03bfb092757792fa8228c28bab6f430cca7e930a1ea4a5dc03e5794e664ad34938ae1dc14440f12392832fff021000000c7002500b16659d73a3e415dfc3286bf8fee575ddc0ef3e6eef9505912b264644cecae2d0368668a5624ab70ae7a488178ff81d41e8c4e0f1b058f0d5e5eca09cf130422285017e5fa8451c635277015f246a6cbda429d5fa753de667ea24b34c7c6ed32fd74a9706e7a65ee41ddcb1ec19e3abf4c37d6c16d77f29d22e4ea088975b9b418b645d43e19a9738809987bcb185e3df3b4839330a01a7c62010c993e48569a225ac133ae44fe5270431128f74670ed7baf3f303d65377c4bbc7f82076cdfacdc1ed6000800e900ac1414bb000005006e000000000008000800", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r6], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 22.99942654s ago: executing program 1 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) lseek(r1, 0x0, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300010000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000001070040008000a006ccb3ab9cc356baad6633880f3b44a216d375b3f3959da13773e65349e024df737510e9a266ed3d99c987855aa057710ad36dd3677bfb7a0b8a83f1e34bec8c2a551ac421d38da1718008907e817429824c6cae6c28bd1560497c4c3123774bc0f004c1bb715b1747f807af68b99", @ANYBLOB="0a000200aaaaaaaaaa1c000008002c000700000008001e00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x2800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0xfffffffd, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x1a8, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x178, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "a2a04eab3448beda3f33209549777bbe7bb974fc37da8b7c84f8630c5f07ac38e601596653be3608c8c774caa24536954479dab75f32f333e6afc7f9b8f97023ca73f2dc5cdc09c937c6f70881c243708598e85020a2d00d688e0f6ca814bb1419ab4e333a7f4c533738644f9a0cebbcec14e288fbce112ee46970cfb954e266324a7186b8abf7fe10610c04850b7455bf64c0b28b027a4e45efbbd95aa2d37b99011531566e0a33c3a200c2ef949559c35bb82837a900ccefdd454e1aec973774073c284d1429c3e79ec2fd3637c86f8d05c70210a6e5410aa94620c0128a157f65140f1a7cd3db1fc352fe2068039ddf865e403d65f5d2fa57997f32dd83ff"}, @TCA_GRED_PARMS={0x38, 0x1, {0x10, 0x1ff, 0x7, 0xd, 0x1, 0x5, 0x0, 0x3, 0x6d2e, 0x7, 0x1a, 0x7, 0x0, 0xa, 0x7}}]}}]}, 0x1a8}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 22.819922817s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe1}}, './file1\x00'}) r1 = syz_open_dev$swradio(&(0x7f00000008c0), 0x0, 0x2) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/137, 0x89}, {&(0x7f00000009c0)=""/22, 0x16}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000200)) (async) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000200)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffffff7f000000005b21002a4315340018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = fanotify_init(0x8, 0x40000) fanotify_mark(r9, 0x1, 0x48000000, r8, 0x0) (async) fanotify_mark(r9, 0x1, 0x48000000, r8, 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) (async) setpgid(r10, r10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) 22.754750344s ago: executing program 1 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 62) 21.069839883s ago: executing program 1 (id=36): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd(r0, &(0x7f0000000100)={[0x401]}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x5}, 0x8) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x67, @scatter={0x0, 0xfeff, 0x0}, 0x0, 0x0, 0x10000, 0x30520cf7f25f0c64, 0x3, 0x0}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x16}, r9}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "45e43f00000000f0", "e6000000000000000000000200", '\x00', "ae7ebf0500e38175"}, 0x28) 21.017351277s ago: executing program 32 (id=36): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd(r0, &(0x7f0000000100)={[0x401]}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x5}, 0x8) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x67, @scatter={0x0, 0xfeff, 0x0}, 0x0, 0x0, 0x10000, 0x30520cf7f25f0c64, 0x3, 0x0}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x16}, r9}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "45e43f00000000f0", "e6000000000000000000000200", '\x00', "ae7ebf0500e38175"}, 0x28) 1.718207374s ago: executing program 2 (id=419): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="21000000470010aaaaaaaaaa00000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000", 0x4d) 1.717780464s ago: executing program 2 (id=421): r0 = io_uring_setup(0x1302, &(0x7f0000000000)={0x0, 0xa14a, 0x8000, 0x2, 0x234}) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x53, [{0x0, 0x0}]}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) r2 = syz_open_procfs(0x0, &(0x7f0000005840)='children\x00') read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) openat(r2, &(0x7f00000004c0)='./bus\x00', 0x900, 0x1e7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f00000002c0)='./file1\x00') ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000480)={0x0, 0x7, 0x6, &(0x7f0000000080)={0x1b, "09e561efd75e32303425a1f6c56c9eee033bff808ec473208c3213479219258486"}}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x6, 0xef, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x2, 0x0, 0xf7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xfa, 0x1ff, 0x7, 0x1002, 0xfd, 0x4, 0x2, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x663c, 0x8, 0xfe, 0x81}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8, 0x70}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x1, 0xf, 0x7, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x0, 0x7f, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x2, 0x97, {0xa, 0x25, 0x25, 0xee, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4b, 0x1, 0xc0, 0x3, "d46216f3b9"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xba, 0x7e, 0x8, 0xc}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7, 0xb, "9a"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x40, 0x7, "50f9e19ca9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x81, 0x6, 0x6, {0xa, 0x25, 0x25, 0x3, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x2, 0x4, 0x3, 0x8, 0x4}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x7, 0xfffa}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x413}}]}) 1.100392798s ago: executing program 2 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) lseek(r1, 0x0, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300010000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000001070040008000a006ccb3ab9cc356baad6633880f3b44a216d375b3f3959da13773e65349e024df737510e9a266ed3d99c987855aa057710ad36dd3677bfb7a0b8a83f1e34bec8c2a551ac421d38da1718008907e817429824c6cae6c28bd1560497c4c3123774bc0f004c1bb715b1747f807af68b", @ANYRES32=r4, @ANYBLOB="0a000200aaaaaaaaaa1c000008002c000700000008001e00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x2800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0xfffffffd, 0x8}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x1a8, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x178, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x10, 0x1ff, 0x7, 0xd, 0x1, 0x5, 0x0, 0x3, 0x6d2e, 0x7, 0x1a, 0x7, 0x0, 0xa, 0x7}}]}}]}, 0x1a8}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.100251678s ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x28000) 1.096723134s ago: executing program 0 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6364, 0xfffffff4, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c024}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = memfd_create(0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@nop, @mptcp=@generic={0x1, 0x2}, @fastopen={0x22, 0x8, "f441d991b453"}, @sack_perm={0x4, 0x2}, @generic={0x3, 0x2}]}}}}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @remote}, 0x14) 779.360529ms ago: executing program 2 (id=440): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r2], 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 710.593468ms ago: executing program 2 (id=441): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea4, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r3, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) fallocate(r3, 0x0, 0x7d, 0x5) setns(r3, 0x10000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000001c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xf219) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805"], 0x88) 707.619934ms ago: executing program 3 (id=443): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000600)=""/239, 0xef) (async) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000600)=""/239, 0xef) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x10001, 0xfffffffffffffbff, 0x4) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x10001, 0xfffffffffffffbff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000200)={0x2, 0x4}) (async) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000200)={0x2, 0x4}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1f, r3, 0x300, 0x70bd25, 0x21dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xb}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24040810) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x406, r6) (async) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = epoll_create1(0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') close(0x3) (async) close(0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x20000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x20000001}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x3c, r3, 0x800, 0x14, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xff}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000000b40)={0x11b4, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xda}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1100, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf0, 0x1, "a595d6c0ee0e564b40140b157055d808a4df7a54f4716c47f6a36eeb542c01303209d9652feea905b90ddaf2fc2a09385dc4030107f21e48dfdfea738e208be1e43e218474c972e2253184fc77e77295ad9c2c6aa196726e6ebd32e3d0f06136c5f0684fa21bbfbdc99c4d69e38d138574c54304a9ac66d111ce76de923a7c45219b99fb75ad659fb522c04a86df58a97d9691a86e1d4ffa7a2315aa9c7ab3ab63dd1c8fc39a5de4f75938c0911409f0fa91f4263ae9aed3a9835620264863c888b565de8a948b4085ecde8106c85e4af94541699573bf2d9facabd31a4a1a67d54289ddae12d738d8919a19"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x71, 0x2, "8b6076adb6984238e7b94d922159d49f672375dbe7402ea714152f9b0aa9b451d334047a4b72f730544aea721107a5058b32ebe06a6fe049497b910592ffc1a174aec4ddf73ab528a30ad3966db19c5e8cbdd7bbab20f8d7b2ea6697090bdc0ed7195ac7c2cbfb4d59bc804093"}}]}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x4c000}, 0x1) 660.390738ms ago: executing program 0 (id=444): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (rerun: 32) ioctl(r5, 0x400c4d07, &(0x7f0000000a00)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001940)=@newchain={0x884, 0x64, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0xb}, {0x1, 0xfff3}, {0xb, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @TCA_RATE={0x6, 0x5, {0xb, 0x9c}}, @filter_kind_options=@f_basic={{0xa}, {0x824, 0x2, [@TCA_BASIC_ACT={0x820, 0x3, [@m_connmark={0x1e4, 0x9, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x96e, 0x8, 0x81, 0x5f}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x2, 0x3febf5d2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6a4, 0xffffffffffffffff, 0x200, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xb, 0x0, 0x0, 0x4}, 0xc3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x3, 0xffffffffffffffff, 0xffff, 0x6}, 0xf8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0xffffffffffffffff, 0xc66000, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xed5, 0x9, 0x3, 0x6, 0x8000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x8, 0x3, 0x9}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x8, 0x7fff, 0x16f}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x32, 0x3ff, 0x4, 0x100, 0x7}, 0x2}}]}, {0x9c, 0x6, "dc2d657afff10ff67c15aa4028081946dfd2d32e43c34c323fd45b4888a3718c13bfb94d2ed6a576a2acf60a6fd9cd46b12f099dd35f15c3f2e4f50686d760bafb70cc0997b410d8a378918c7d12c24c7741b1b34e08544298558c5efc515c7215e3419d41fef7aaa8f35d921f417c5e8743e23ecba03f5146c6186f437d7899590b5712bdc4ab593e62f7b854922c7cef7e10a0c319e399"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_nat={0x198, 0x8, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7, 0x3, 0x8001, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x4, 0x2, 0x8}, @loopback, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff00, 0x5, 0x8, 0x3, 0x8}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x9, 0x3, 0xb73, 0x6}, @private=0xa010102, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x6, 0x7, 0x0, 0x80}, @rand_addr=0x64010101, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x7, 0x40, 0x7}, @private=0xa010100, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffff5, 0x0, 0xffffffff, 0x6}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xff}}]}, {0x57, 0x6, "5c3bf928a051e24205677a506baf93d2598f4d5422a7c80c9d15a0d5b8c21a93abc910ff6c5690342516cb3ef72e407bb2004fbed1fadcf1615026145bb58636e55d01a25f8bc8ec6ec0612c1a3dc6baefca23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x144, 0x1d, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xe5, 0x6, "c182aa42d308240e7a89c85c031d88dcdca9bdef9568af388fa41803cf00e182a3b77885438dc37f432f6bba3b42262d0213af1bbb9c119ba847c0daddd5091613cfb530d1140e9dd3da1d43585b4ad73ae3292d4a8d744a4b6788ebe9b69d59150007b07f95b46d424812c858bf7c5ba698552e8fc5b02db878c593ee59540f36c165810bcf0ed23ee2955681aa4a1830b6c3a83ee3727e69d19e1044f62b9ed344213ca10c6d28172dfe4614a9494b438be461bc739d56ac05d6cd58f32531d394b592015cef59ed411c03e7572fae340e4446172d039d55dbfa64f81fa09199"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0xf8, 0x16, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cdb04514dcbe3959de1717a012928811"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ecc7431695db190b100a215e642688a3"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "3bbe512228829d4dc9fc44432d62cbab"}]}, {0x6a, 0x6, "c3b7e724e104a72309babd2cee83c8225abd815b3df2520015db2cd0669b256128739dcb2588799e395652c37e6e32a8b6b12074c2b9deca37d00d97efd9643034ce6c22027451a24fa272eb946e276723edeec25b99a927e8407a547b5dc12f17fdc511af5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xac, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x69, 0x3, 0x0, 0x7}, @private=0xa010100, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0xffffffffffffffff, 0x7, 0x3}, @rand_addr=0x64010101, @remote, 0xff, 0x1}}]}, {0x32, 0x6, "acb164c7dc4643c56e179bfbdf171806fd028ce85b3031cc8c5c416f4deeea742a42fa178f9b3fea4936bcd0dc0a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x148, 0x7, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x70, 0xc, 0x0, 0x0, {{0x7}, {0x4}, {0x48, 0x6, "a2b9f25023e6982ee7dd4249acd2f4ec74bbbf0f63ea211100c7c8da26bab74d788abd67b09d6952dd4c4b652aafe7af8cf461d740444a229e8f817f96cf53a7525184e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4e, 0xff}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfc}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xde58}]}, 0x884}, 0x1, 0xfffffffffffffffd, 0x0, 0x4010}, 0x0) 600.818041ms ago: executing program 0 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 600.597755ms ago: executing program 2 (id=447): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0x8, 0x42, 0x8, 0x1ff}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x10, @loopback, 0x4}}}, 0x84) socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000007f00000100000000"], 0x18, 0x40}, 0x20048844) recvmsg$can_raw(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40000000) 599.951681ms ago: executing program 3 (id=448): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 64) poll(&(0x7f0000000140)=[{r1, 0x4100}], 0x1, 0x1) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f00000005c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 595.39343ms ago: executing program 0 (id=449): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000040000000001000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000d4680000000000000000875d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r1) r2 = socket$tipc(0x1e, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x920, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000040)=0x920, 0x12) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000008000000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000085be0000850000000600000038b01000ffffffff1861000007000000000000000101000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000001fd4ab321ee3c167a7e475d1be5aab00e200850000008600001cf31fcd5aad07cd908de17ae020b0001801000020756c2500000000002020207b1af8ff00000000bfa10000727755255cf46f3ef8ffffffb702000008000000b70300d6020000b057"], &(0x7f0000000540)='syzkaller\x00', 0x1000, 0x87, &(0x7f0000000580)=""/135, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x90000000, 0x21e}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x1, 0x1, 0x2}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x2, 0xc, 0x8}, {0x1, 0x2, 0x6, 0x5}, {0x3, 0x3, 0x1, 0x2}, {0x0, 0x4, 0x0, 0x2}, {0x3, 0x1, 0x10, 0xa}], 0x10, 0xf1a}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000008000000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000085be0000850000000600000038b01000ffffffff1861000007000000000000000101000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000001fd4ab321ee3c167a7e475d1be5aab00e200850000008600001cf31fcd5aad07cd908de17ae020b0001801000020756c2500000000002020207b1af8ff00000000bfa10000727755255cf46f3ef8ffffffb702000008000000b70300d6020000b057"], &(0x7f0000000540)='syzkaller\x00', 0x1000, 0x87, &(0x7f0000000580)=""/135, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x90000000, 0x21e}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x1, 0x1, 0x2}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x2, 0xc, 0x8}, {0x1, 0x2, 0x6, 0x5}, {0x3, 0x3, 0x1, 0x2}, {0x0, 0x4, 0x0, 0x2}, {0x3, 0x1, 0x10, 0xa}], 0x10, 0xf1a}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) (async) syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x100) (async) socket$inet6(0xa, 0x1, 0x100) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) 508.948872ms ago: executing program 3 (id=450): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c7f0000706f82dc28250e3b045f26aff1e6180785277a60d4f23b33566b8664a61dc165f9dad94f321996e19d701c5b18ede5f3184c2f444e8e7a88034ce3491e158f42866f063577056395277fb3472cd2733ab26a1800afaa29711bb4466b339d8b8b46d753", @ANYRES16=r2, @ANYBLOB="000828bd7000fbdbdf250f0000000c0002800800030004000000080004000800000008000400ff03000008000400080000000800060008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc015) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x6}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 399.867884ms ago: executing program 3 (id=451): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r1 = openat(r0, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1bb) write(r1, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000090000000000") 349.479036ms ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf9800000000000056090000000000008500000085ec0000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500801c0000000000119078000000000000000000142e2100089078"], 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x101902, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc59, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x73, &(0x7f0000000340)=""/115, 0x41100, 0x24, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x42, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r0, r0, r0], &(0x7f0000000500)=[{0x1, 0x1, 0x8, 0x1}, {0x5, 0x2, 0xe, 0xb}, {0x4, 0x3, 0xe}], 0x10, 0xaa9e}, 0x94) syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r0, @ANYBLOB="012acdac2673d20bee251a0000001800e77f00000000000000007a000000"], 0x2c}}, 0x4000000) socket$netlink(0x10, 0x3, 0x15) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6909, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r6, 0x4) 240.8396ms ago: executing program 3 (id=455): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$ublk_bdev(&(0x7f0000000100), 0x0, 0x24000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x2}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 240.489404ms ago: executing program 4 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x41) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x57}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x200000000000000) (async, rerun: 64) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0xff, 0x10, 0x4, &(0x7f00000000c0)={0x21, "f4541331ef08677f050006000000000b0000000610000012000000004000"}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0xa58a541f2df08309, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x2000004) 180.59101ms ago: executing program 4 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 179.932713ms ago: executing program 4 (id=458): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r2], 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 109.588527ms ago: executing program 4 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x5, 0x65e, 0x4, {0x1, @raw_data="6efe948b2beb0d043d8d026ef3d5e41e8af0e9beda960df748c8b95c189c86c7a763eea9168d6ce03c3b82b9356cfd5ae976e17aee4eddcf42c0f24ca2561e45de7244b7e6f699f55929956230c833254d83e9de73035cbe5e0be6619782c0c74d36f5d33cb70eb38bd552d465845915285fe3c2bf8782a739d37411d34d1b958dbdde86b82f66a77dee4d7397d144926fe156974d78a41140440baf5128473d4e6eac72753d7756256357bb589f41cee7ee802618fa0a40c24897c0b56bc602a05b0dfbdc7ad5ed"}, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) bind$inet(r5, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000002000)={0x2, 0x0, [{0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 109.353213ms ago: executing program 0 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="31d1c2f9f9cb6e57a260fb75cd683382b43fffd545aeb1ab8e21d5b8d55e8dab8d6f79c3f2e027ae80105ad17eb09de078b8d74784e4306ea69f1e4ae6f378ac11", 0xfffffd8d) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) fcntl$setlease(r1, 0x400, 0x0) 143.724µs ago: executing program 4 (id=461): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r1 = openat(r0, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1bb) write(r1, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000100000000000") 0s ago: executing program 4 (id=462): timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 45) kernel console output (not intermixed with test programs): :50:50:50:50 [ 50.079385][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.149976][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.149990][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.217996][ T5890] FAULT_INJECTION: forcing a failure. [ 50.217996][ T5890] name failslab, interval 1, probability 0, space 0, times 1 [ 50.218017][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 50.218029][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.218036][ T5890] Call Trace: [ 50.218040][ T5890] [ 50.218044][ T5890] dump_stack_lvl+0x100/0x190 [ 50.218069][ T5890] should_fail_ex.cold+0x5/0xa [ 50.218086][ T5890] should_failslab+0xc2/0x120 [ 50.218101][ T5890] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.218114][ T5890] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.218134][ T5890] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.218154][ T5890] mmu_topup_memory_caches+0x25/0x170 [ 50.218168][ T5890] kvm_mmu_load+0xe8/0x2580 [ 50.218181][ T5890] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 50.218198][ T5890] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.218216][ T5890] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.218228][ T5890] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.218240][ T5890] ? kvm_check_and_inject_events+0x896/0x1050 [ 50.218255][ T5890] vcpu_run+0x395d/0x5e80 [ 50.218269][ T5890] ? mark_held_locks+0x40/0x70 [ 50.218286][ T5890] ? __pfx_vcpu_run+0x10/0x10 [ 50.218302][ T5890] ? lock_acquire+0x1d1/0x380 [ 50.218313][ T5890] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 50.218328][ T5890] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 50.218344][ T5890] ? __local_bh_enable_ip+0xa5/0x120 [ 50.218358][ T5890] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.218372][ T5890] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.218389][ T5890] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.218403][ T5890] ? lock_acquire+0x1d1/0x380 [ 50.218415][ T5890] ? do_raw_write_lock+0x11e/0x260 [ 50.218429][ T5890] ? find_held_lock+0x2b/0x80 [ 50.218444][ T5890] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.218459][ T5890] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.218477][ T5890] kvm_vcpu_ioctl+0x730/0x1700 [ 50.218493][ T5890] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.218509][ T5890] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.218524][ T5890] ? do_vfs_ioctl+0x226/0x13e0 [ 50.218535][ T5890] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.218546][ T5890] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 50.218561][ T5890] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.218577][ T5890] ? __fget_files+0x34/0x3d0 [ 50.218596][ T5890] ? selinux_file_ioctl+0x13b/0x290 [ 50.218608][ T5890] ? selinux_file_ioctl+0xb6/0x290 [ 50.218622][ T5890] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.218638][ T5890] __x64_sys_ioctl+0x18e/0x210 [ 50.218650][ T5890] do_syscall_64+0x123/0x790 [ 50.218668][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.218679][ T5890] RIP: 0033:0x7f24cd19e159 [ 50.218689][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.218699][ T5890] RSP: 002b:00007f24cdfe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.218710][ T5890] RAX: ffffffffffffffda RBX: 00007f24cd426090 RCX: 00007f24cd19e159 [ 50.218717][ T5890] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 50.218723][ T5890] RBP: 00007f24cdfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 50.218729][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.218736][ T5890] R13: 00007f24cd426128 R14: 00007f24cd426090 R15: 00007ffc2d0bdc18 [ 50.218749][ T5890] [ 50.321730][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.327613][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.328134][ T5894] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 50.350789][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.397839][ T5897] Bluetooth: MGMT ver 1.23 [ 50.454940][ T5899] FAULT_INJECTION: forcing a failure. [ 50.454940][ T5899] name failslab, interval 1, probability 0, space 0, times 0 [ 50.454960][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.454973][ T5899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.454980][ T5899] Call Trace: [ 50.454985][ T5899] [ 50.454989][ T5899] dump_stack_lvl+0x100/0x190 [ 50.455011][ T5899] should_fail_ex.cold+0x5/0xa [ 50.455027][ T5899] should_failslab+0xc2/0x120 [ 50.455043][ T5899] __kmalloc_flags_noprof+0x122/0x8e0 [ 50.455061][ T5899] ? find_held_lock+0x2b/0x80 [ 50.455078][ T5899] ? __pcs_replace_empty_main+0x132/0x650 [ 50.455096][ T5899] ? __pcs_replace_empty_main+0x3fa/0x650 [ 50.455121][ T5899] __pcs_replace_empty_main+0x3fa/0x650 [ 50.455141][ T5899] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 50.455155][ T5899] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.455176][ T5899] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.455197][ T5899] mmu_topup_memory_caches+0x25/0x170 [ 50.455212][ T5899] kvm_mmu_load+0xe8/0x2580 [ 50.455226][ T5899] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 50.455244][ T5899] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.455264][ T5899] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.455275][ T5899] ? vmx_nmi_blocked+0x101/0x3a0 [ 50.455289][ T5899] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.455301][ T5899] ? kvm_check_and_inject_events+0x896/0x1050 [ 50.455317][ T5899] vcpu_run+0x395d/0x5e80 [ 50.455330][ T5899] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 50.455345][ T5899] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 50.455366][ T5899] ? __pfx_vcpu_run+0x10/0x10 [ 50.455382][ T5899] ? lock_acquire+0x1d1/0x380 [ 50.455394][ T5899] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 50.455411][ T5899] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 50.455427][ T5899] ? __local_bh_enable_ip+0xa5/0x120 [ 50.455443][ T5899] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.455458][ T5899] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.455476][ T5899] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.455491][ T5899] ? lock_acquire+0x1d1/0x380 [ 50.455503][ T5899] ? do_raw_write_lock+0x11e/0x260 [ 50.455518][ T5899] ? find_held_lock+0x2b/0x80 [ 50.455535][ T5899] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.455550][ T5899] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.455569][ T5899] kvm_vcpu_ioctl+0x730/0x1700 [ 50.455587][ T5899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.455604][ T5899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.455619][ T5899] ? do_vfs_ioctl+0x226/0x13e0 [ 50.455631][ T5899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.455642][ T5899] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 50.455672][ T5899] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.455689][ T5899] ? __fget_files+0x34/0x3d0 [ 50.455710][ T5899] ? selinux_file_ioctl+0x13b/0x290 [ 50.455723][ T5899] ? selinux_file_ioctl+0xb6/0x290 [ 50.455737][ T5899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.455754][ T5899] __x64_sys_ioctl+0x18e/0x210 [ 50.455768][ T5899] do_syscall_64+0x123/0x790 [ 50.455786][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.455799][ T5899] RIP: 0033:0x7f24cd19e159 [ 50.455809][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.455820][ T5899] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.455832][ T5899] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 50.455839][ T5899] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 50.455846][ T5899] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 50.455852][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.455859][ T5899] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 50.455874][ T5899] [ 50.663568][ T5907] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 50.663591][ T5907] device-mapper: ioctl: error adding target to table [ 50.768830][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.801889][ T5937] FAULT_INJECTION: forcing a failure. [ 50.801889][ T5937] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.801918][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 50.801938][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.801949][ T5937] Call Trace: [ 50.801955][ T5937] [ 50.801961][ T5937] dump_stack_lvl+0x100/0x190 [ 50.801992][ T5937] should_fail_ex.cold+0x5/0xa [ 50.802013][ T5937] ? prepare_alloc_pages+0x16d/0x5b0 [ 50.802038][ T5937] should_fail_alloc_page+0xeb/0x140 [ 50.802062][ T5937] prepare_alloc_pages+0x1f0/0x5b0 [ 50.802087][ T5937] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 50.802117][ T5937] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 50.802137][ T5937] ? stack_trace_save+0x8e/0xc0 [ 50.802154][ T5937] ? __pfx_stack_trace_save+0x10/0x10 [ 50.802171][ T5937] ? stack_depot_save_flags+0x27/0x9f0 [ 50.802196][ T5937] ? kasan_save_stack+0x3f/0x50 [ 50.802211][ T5937] ? kasan_save_stack+0x30/0x50 [ 50.802229][ T5937] ? kasan_save_track+0x14/0x30 [ 50.802250][ T5937] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.802267][ T5937] ? mmu_topup_memory_caches+0xbc/0x170 [ 50.802284][ T5937] ? vcpu_run+0x395d/0x5e80 [ 50.802304][ T5937] ? kvm_vcpu_ioctl+0x730/0x1700 [ 50.802327][ T5937] ? __x64_sys_ioctl+0x18e/0x210 [ 50.802341][ T5937] ? do_syscall_64+0x123/0x790 [ 50.802366][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.802406][ T5937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.802430][ T5937] ? policy_nodemask+0xed/0x4f0 [ 50.802457][ T5937] alloc_pages_mpol+0x201/0x550 [ 50.802480][ T5937] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.802503][ T5937] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 50.802528][ T5937] alloc_pages_noprof+0x1a/0x160 [ 50.802555][ T5937] get_free_pages_noprof+0x10/0xb0 [ 50.802573][ T5937] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 50.802606][ T5937] mmu_topup_memory_caches+0xbc/0x170 [ 50.802627][ T5937] kvm_mmu_load+0xe8/0x2580 [ 50.802647][ T5937] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 50.802688][ T5937] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.802707][ T5937] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.802719][ T5937] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.802731][ T5937] ? kvm_check_and_inject_events+0x896/0x1050 [ 50.802746][ T5937] vcpu_run+0x395d/0x5e80 [ 50.802759][ T5937] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 50.802780][ T5937] ? __pfx_vcpu_run+0x10/0x10 [ 50.802795][ T5937] ? lock_acquire+0x1d1/0x380 [ 50.802807][ T5937] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 50.802822][ T5937] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 50.802837][ T5937] ? __local_bh_enable_ip+0xa5/0x120 [ 50.802852][ T5937] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.802866][ T5937] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.802883][ T5937] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.802897][ T5937] ? lock_acquire+0x1d1/0x380 [ 50.802908][ T5937] ? do_raw_write_lock+0x11e/0x260 [ 50.802923][ T5937] ? find_held_lock+0x2b/0x80 [ 50.802938][ T5937] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.802952][ T5937] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.802970][ T5937] kvm_vcpu_ioctl+0x730/0x1700 [ 50.802986][ T5937] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.803002][ T5937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.803016][ T5937] ? do_vfs_ioctl+0x226/0x13e0 [ 50.803027][ T5937] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.803037][ T5937] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 50.803052][ T5937] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.803072][ T5937] ? __fget_files+0x34/0x3d0 [ 50.803091][ T5937] ? selinux_file_ioctl+0x13b/0x290 [ 50.803103][ T5937] ? selinux_file_ioctl+0xb6/0x290 [ 50.803117][ T5937] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.803133][ T5937] __x64_sys_ioctl+0x18e/0x210 [ 50.803145][ T5937] do_syscall_64+0x123/0x790 [ 50.803162][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.803174][ T5937] RIP: 0033:0x7f24cd19e159 [ 50.803184][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.803194][ T5937] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.803206][ T5937] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 50.803213][ T5937] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 50.803219][ T5937] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 50.803225][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.803231][ T5937] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 50.803247][ T5937] [ 50.805006][ T5933] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.826938][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.892205][ T5944] netlink: 'syz.1.16': attribute type 2 has an invalid length. [ 50.892222][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.901246][ T5944] : entered promiscuous mode [ 50.975671][ T5948] FAULT_INJECTION: forcing a failure. [ 50.975671][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 50.975690][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 50.975702][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.975708][ T5948] Call Trace: [ 50.975712][ T5948] [ 50.975716][ T5948] dump_stack_lvl+0x100/0x190 [ 50.975737][ T5948] should_fail_ex.cold+0x5/0xa [ 50.975752][ T5948] should_failslab+0xc2/0x120 [ 50.975767][ T5948] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.975780][ T5948] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.975800][ T5948] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 50.975820][ T5948] mmu_topup_memory_caches+0x25/0x170 [ 50.975834][ T5948] kvm_mmu_load+0xe8/0x2580 [ 50.975846][ T5948] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 50.975863][ T5948] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.975882][ T5948] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.975892][ T5948] ? vmx_nmi_blocked+0x101/0x3a0 [ 50.975906][ T5948] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.975917][ T5948] ? kvm_check_and_inject_events+0x896/0x1050 [ 50.975932][ T5948] vcpu_run+0x395d/0x5e80 [ 50.975945][ T5948] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 50.975965][ T5948] ? __pfx_vcpu_run+0x10/0x10 [ 50.975980][ T5948] ? lock_acquire+0x1d1/0x380 [ 50.975992][ T5948] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 50.976007][ T5948] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 50.976023][ T5948] ? __local_bh_enable_ip+0xa5/0x120 [ 50.976037][ T5948] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.976051][ T5948] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 50.976074][ T5948] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.976088][ T5948] ? lock_acquire+0x1d1/0x380 [ 50.976100][ T5948] ? do_raw_write_lock+0x11e/0x260 [ 50.976114][ T5948] ? find_held_lock+0x2b/0x80 [ 50.976129][ T5948] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.976144][ T5948] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.976166][ T5948] kvm_vcpu_ioctl+0x730/0x1700 [ 50.976182][ T5948] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.976198][ T5948] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.976212][ T5948] ? do_vfs_ioctl+0x226/0x13e0 [ 50.976224][ T5948] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.976234][ T5948] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 50.976249][ T5948] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.976264][ T5948] ? __fget_files+0x34/0x3d0 [ 50.976284][ T5948] ? selinux_file_ioctl+0x13b/0x290 [ 50.976295][ T5948] ? selinux_file_ioctl+0xb6/0x290 [ 50.976309][ T5948] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.976325][ T5948] __x64_sys_ioctl+0x18e/0x210 [ 50.976337][ T5948] do_syscall_64+0x123/0x790 [ 50.976355][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.976367][ T5948] RIP: 0033:0x7f24cd19e159 [ 50.976376][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.976387][ T5948] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.976398][ T5948] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 50.976405][ T5948] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 50.976411][ T5948] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 50.976417][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.976423][ T5948] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 50.976458][ T5948] [ 50.995330][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 51.026779][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.086128][ T5956] device-mapper: ioctl: Invalid ioctl structure: name test, dev 1 [ 51.182160][ T5969] Format for deleting device is "id" (uint). [ 51.247634][ T5734] Bluetooth: hci2: command tx timeout [ 51.286846][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.327772][ T5734] Bluetooth: hci3: command tx timeout [ 51.337277][ T5734] Bluetooth: hci1: command tx timeout [ 51.408220][ T5828] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.417631][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.417781][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.426785][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.447875][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 51.538009][ T9] usb usb8-port1: attempt power cycle [ 51.556680][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 51.557945][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.560607][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.560631][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.560660][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.563299][ T5828] usb 5-1: config 0 descriptor?? [ 51.570430][ T5828] hub 5-1:0.0: USB hub found [ 51.647928][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.648198][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.772570][ T5828] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 51.795958][ T5989] device-mapper: ioctl: Invalid ioctl structure: name test, dev 3 [ 51.876689][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.897231][ T9] usb 8-1: device descriptor read/8, error -71 [ 51.926862][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.136690][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.158068][ T9] usb 8-1: device descriptor read/8, error -71 [ 52.171470][ T43] kauditd_printk_skb: 83 callbacks suppressed [ 52.171480][ T43] audit: type=1400 audit(1790068927.656:251): avc: denied { create } for pid=5961 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.172904][ T43] audit: type=1400 audit(1790068927.656:252): avc: denied { write } for pid=5961 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.172944][ T43] audit: type=1400 audit(1790068927.656:253): avc: denied { nlmsg_read } for pid=5961 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.173510][ T5962] xt_bpf: check failed: parse error [ 52.174366][ T43] audit: type=1400 audit(1790068927.656:254): avc: denied { append } for pid=5961 comm="syz.0.22" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.277407][ T9] usb usb8-port1: unable to enumerate USB device [ 52.294528][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 52.294579][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 52.307693][ T5828] usb 5-1: USB disconnect, device number 2 [ 52.376847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.792739][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.911510][ T43] audit: type=1400 audit(1790068928.396:255): avc: denied { execute } for pid=6008 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 52.911860][ T43] audit: type=1400 audit(1790068928.396:256): avc: denied { execute_no_trans } for pid=6008 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 52.927165][ T43] audit: type=1400 audit(1790068928.406:257): avc: denied { write } for pid=6008 comm="syz-executor" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 52.927512][ T43] audit: type=1400 audit(1790068928.416:258): avc: denied { add_name } for pid=6008 comm="syz-executor" name="syzkaller.H86zcQ" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 52.927780][ T43] audit: type=1400 audit(1790068928.416:259): avc: denied { create } for pid=6008 comm="syz-executor" name="syzkaller.H86zcQ" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.928534][ T43] audit: type=1400 audit(1790068928.416:260): avc: denied { setattr } for pid=6008 comm="syz-executor" name="syzkaller.H86zcQ" dev="sda1" ino=8198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.999488][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.002736][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.003725][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.004404][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.005155][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.044227][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 53.204383][ T6024] Bluetooth: MGMT ver 1.23 [ 53.281190][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.336741][ T5734] Bluetooth: hci2: command tx timeout [ 53.341621][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.352965][ T6030] device-mapper: ioctl: Invalid ioctl structure: name test, dev 5 [ 53.414923][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.417568][ T5086] Bluetooth: hci1: command tx timeout [ 53.417587][ T5086] Bluetooth: hci3: command tx timeout [ 53.429769][ T6034] FAULT_INJECTION: forcing a failure. [ 53.429769][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 53.429793][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.429809][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.429817][ T6034] Call Trace: [ 53.429822][ T6034] [ 53.429828][ T6034] dump_stack_lvl+0x100/0x190 [ 53.429853][ T6034] should_fail_ex.cold+0x5/0xa [ 53.429874][ T6034] should_failslab+0xc2/0x120 [ 53.429894][ T6034] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.429910][ T6034] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 53.429935][ T6034] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 53.429961][ T6034] mmu_topup_memory_caches+0x25/0x170 [ 53.429979][ T6034] kvm_mmu_load+0xe8/0x2580 [ 53.429995][ T6034] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 53.430017][ T6034] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 53.430040][ T6034] ? __pfx_kvm_mmu_load+0x10/0x10 [ 53.430053][ T6034] ? vmx_nmi_blocked+0x101/0x3a0 [ 53.430069][ T6034] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 53.430084][ T6034] ? kvm_check_and_inject_events+0x896/0x1050 [ 53.430104][ T6034] vcpu_run+0x395d/0x5e80 [ 53.430119][ T6034] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 53.430137][ T6034] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 53.430164][ T6034] ? __pfx_vcpu_run+0x10/0x10 [ 53.430183][ T6034] ? lock_acquire+0x1d1/0x380 [ 53.430197][ T6034] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 53.430216][ T6034] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 53.430236][ T6034] ? __local_bh_enable_ip+0xa5/0x120 [ 53.430255][ T6034] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 53.430272][ T6034] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 53.430294][ T6034] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.430311][ T6034] ? lock_acquire+0x1d1/0x380 [ 53.430326][ T6034] ? do_raw_write_lock+0x11e/0x260 [ 53.430344][ T6034] ? find_held_lock+0x2b/0x80 [ 53.430363][ T6034] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.430381][ T6034] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.430404][ T6034] kvm_vcpu_ioctl+0x730/0x1700 [ 53.430425][ T6034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.430445][ T6034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.430462][ T6034] ? do_vfs_ioctl+0x226/0x13e0 [ 53.430477][ T6034] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 53.430490][ T6034] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 53.430535][ T6034] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.430550][ T6034] ? __fget_files+0x34/0x3d0 [ 53.430570][ T6034] ? selinux_file_ioctl+0x13b/0x290 [ 53.430582][ T6034] ? selinux_file_ioctl+0xb6/0x290 [ 53.430595][ T6034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.430611][ T6034] __x64_sys_ioctl+0x18e/0x210 [ 53.430624][ T6034] do_syscall_64+0x123/0x790 [ 53.430642][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.430653][ T6034] RIP: 0033:0x7f4074d9e159 [ 53.430663][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.430673][ T6034] RSP: 002b:00007f4075bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.430684][ T6034] RAX: ffffffffffffffda RBX: 00007f4075025fa0 RCX: 00007f4074d9e159 [ 53.430691][ T6034] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 53.430697][ T6034] RBP: 00007f4075bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.430703][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.430710][ T6034] R13: 00007f4075026038 R14: 00007f4075025fa0 R15: 00007ffce25d5f18 [ 53.430723][ T6034] [ 53.498651][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.498784][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.499058][ T6013] bridge_slave_0: entered allmulticast mode [ 53.500303][ T6013] bridge_slave_0: entered promiscuous mode [ 53.502118][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.502222][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.502585][ T6013] bridge_slave_1: entered allmulticast mode [ 53.503683][ T6013] bridge_slave_1: entered promiscuous mode [ 53.520576][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.522119][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.538212][ T6013] team0: Port device team_slave_0 added [ 53.539847][ T6013] team0: Port device team_slave_1 added [ 53.553153][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.553170][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.553189][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.554248][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.554259][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.554278][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.583219][ T6013] hsr_slave_0: entered promiscuous mode [ 53.583701][ T6013] hsr_slave_1: entered promiscuous mode [ 53.584170][ T6013] debugfs: 'hsr0' already exists in 'hsr' [ 53.584182][ T6013] Cannot create hsr debugfs directory [ 53.671923][ T6044] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 53.724478][ T6048] qnx6: unable to set blocksize [ 53.832864][ T6055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.835985][ T12] bridge_slave_1: left allmulticast mode [ 53.836019][ T12] bridge_slave_1: left promiscuous mode [ 53.837174][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.851047][ T12] bridge_slave_0: left allmulticast mode [ 53.851069][ T12] bridge_slave_0: left promiscuous mode [ 53.851232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.871082][ T6057] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 53.937259][ T6061] device-mapper: ioctl: Invalid ioctl structure: name test, dev 6 [ 54.006550][ T6066] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.008111][ T6066] CIFS: Attempting to mount //127.0.0.1/share [ 54.019116][ T6058] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 54.019134][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.019146][ T6058] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 54.019156][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.019201][ T6058] iwpm_send_hello: Unable to send a nlmsg [ 54.019796][ T6068] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 54.019812][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.019822][ T6068] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 54.019832][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.019872][ T6068] iwpm_send_hello: Unable to send a nlmsg [ 54.077214][ T6066] CIFS: VFS: cifs_mount failed w/return code = -112 [ 54.082245][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.085390][ T6071] cifs: Unknown parameter 'trans' [ 54.091051][ T6074] 9pnet_virtio: no channels available for device syz [ 54.109052][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.125753][ T12] bond0 (unregistering): Released all slaves [ 54.205244][ T12] : left promiscuous mode [ 54.255485][ T6013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.268580][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.269333][ T6013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.271576][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.272141][ T6013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.273948][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.274469][ T6013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.277394][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.327300][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.333632][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.340839][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.340911][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.350295][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.350339][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.392038][ T6086] FAULT_INJECTION: forcing a failure. [ 54.392038][ T6086] name failslab, interval 1, probability 0, space 0, times 0 [ 54.392066][ T6086] CPU: 2 UID: 0 PID: 6086 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 54.392092][ T6086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.392102][ T6086] Call Trace: [ 54.392108][ T6086] [ 54.392115][ T6086] dump_stack_lvl+0x100/0x190 [ 54.392147][ T6086] should_fail_ex.cold+0x5/0xa [ 54.392174][ T6086] should_failslab+0xc2/0x120 [ 54.392197][ T6086] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.392219][ T6086] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 54.392251][ T6086] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 54.392283][ T6086] mmu_topup_memory_caches+0x25/0x170 [ 54.392305][ T6086] kvm_mmu_load+0xe8/0x2580 [ 54.392327][ T6086] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 54.392354][ T6086] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 54.392383][ T6086] ? __pfx_kvm_mmu_load+0x10/0x10 [ 54.392399][ T6086] ? vmx_nmi_blocked+0x101/0x3a0 [ 54.392446][ T6086] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 54.392467][ T6086] ? kvm_check_and_inject_events+0x896/0x1050 [ 54.392492][ T6086] vcpu_run+0x395d/0x5e80 [ 54.392513][ T6086] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 54.392565][ T6086] ? __pfx_vcpu_run+0x10/0x10 [ 54.392590][ T6086] ? lock_acquire+0x1d1/0x380 [ 54.392610][ T6086] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 54.392633][ T6086] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 54.392660][ T6086] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 54.392681][ T6086] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 54.392708][ T6086] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.392729][ T6086] ? lock_acquire+0x1d1/0x380 [ 54.392749][ T6086] ? do_raw_write_lock+0x11e/0x260 [ 54.392769][ T6086] ? find_held_lock+0x2b/0x80 [ 54.392792][ T6086] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 54.392811][ T6086] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 54.392829][ T6086] kvm_vcpu_ioctl+0x730/0x1700 [ 54.392846][ T6086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.392862][ T6086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.392876][ T6086] ? do_vfs_ioctl+0x226/0x13e0 [ 54.392888][ T6086] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.392898][ T6086] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 54.392914][ T6086] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.392929][ T6086] ? __fget_files+0x34/0x3d0 [ 54.392949][ T6086] ? selinux_file_ioctl+0x13b/0x290 [ 54.392960][ T6086] ? selinux_file_ioctl+0xb6/0x290 [ 54.392974][ T6086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.392990][ T6086] __x64_sys_ioctl+0x18e/0x210 [ 54.393002][ T6086] do_syscall_64+0x123/0x790 [ 54.393020][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.393032][ T6086] RIP: 0033:0x7f24cd19e159 [ 54.393042][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.393052][ T6086] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.393063][ T6086] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 54.393075][ T6086] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 54.393081][ T6086] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 54.393087][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.393093][ T6086] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 54.393107][ T6086] [ 54.463349][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.561665][ T6107] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 54.665613][ T12] hsr_slave_0: left promiscuous mode [ 54.666430][ T12] hsr_slave_1: left promiscuous mode [ 54.668168][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.668191][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.678136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.678155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.687511][ T12] veth1_macvtap: left promiscuous mode [ 54.687543][ T12] veth0_macvtap: left promiscuous mode [ 54.687607][ T12] veth1_vlan: left promiscuous mode [ 54.687646][ T12] veth0_vlan: left promiscuous mode [ 54.881456][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.894059][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.918753][ T6109] cgroup: fork rejected by pids controller in /syz3 [ 54.971611][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.088771][ T5734] Bluetooth: hci0: command tx timeout [ 55.129590][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.168285][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.341104][ T6013] veth0_vlan: entered promiscuous mode [ 55.344486][ T6013] veth1_vlan: entered promiscuous mode [ 55.358863][ T6013] veth0_macvtap: entered promiscuous mode [ 55.360876][ T6013] veth1_macvtap: entered promiscuous mode [ 55.367900][ T6195] device-mapper: ioctl: Invalid ioctl structure: name test, dev 9 [ 55.372000][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.376166][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.407369][ T5734] Bluetooth: hci2: command tx timeout [ 55.424351][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.459294][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.459308][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.466055][ T6202] syzkaller0: entered promiscuous mode [ 55.466068][ T6202] syzkaller0: entered allmulticast mode [ 55.486983][ T5734] Bluetooth: hci3: command tx timeout [ 55.487011][ T5734] Bluetooth: hci1: command tx timeout [ 55.505634][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.505647][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.518933][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.518959][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.518984][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.519002][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.603371][ T6209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.686650][ T6223] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 55.686667][ T6223] __nla_validate_parse: 2 callbacks suppressed [ 55.686676][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 55.768233][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.823256][ T6235] FAULT_INJECTION: forcing a failure. [ 55.823256][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 55.823284][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 55.823303][ T6235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.823314][ T6235] Call Trace: [ 55.823320][ T6235] [ 55.823328][ T6235] dump_stack_lvl+0x100/0x190 [ 55.823359][ T6235] should_fail_ex.cold+0x5/0xa [ 55.823385][ T6235] should_failslab+0xc2/0x120 [ 55.823408][ T6235] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.823428][ T6235] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 55.823460][ T6235] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 55.823492][ T6235] mmu_topup_memory_caches+0x25/0x170 [ 55.823513][ T6235] kvm_mmu_load+0xe8/0x2580 [ 55.823533][ T6235] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 55.823561][ T6235] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 55.823590][ T6235] ? __pfx_kvm_mmu_load+0x10/0x10 [ 55.823606][ T6235] ? vmx_nmi_blocked+0x101/0x3a0 [ 55.823627][ T6235] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 55.823653][ T6235] ? kvm_check_and_inject_events+0x896/0x1050 [ 55.823677][ T6235] vcpu_run+0x395d/0x5e80 [ 55.823696][ T6235] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 55.823732][ T6235] ? __pfx_vcpu_run+0x10/0x10 [ 55.823756][ T6235] ? lock_acquire+0x1d1/0x380 [ 55.823774][ T6235] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 55.823798][ T6235] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 55.823846][ T6235] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 55.823866][ T6235] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 55.823893][ T6235] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.823909][ T6235] ? lock_acquire+0x1d1/0x380 [ 55.823921][ T6235] ? do_raw_write_lock+0x11e/0x260 [ 55.823947][ T6235] ? find_held_lock+0x2b/0x80 [ 55.823963][ T6235] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 55.823978][ T6235] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 55.823996][ T6235] kvm_vcpu_ioctl+0x730/0x1700 [ 55.824012][ T6235] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.824028][ T6235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.824042][ T6235] ? do_vfs_ioctl+0x226/0x13e0 [ 55.824054][ T6235] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 55.824067][ T6235] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 55.824090][ T6235] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.824114][ T6235] ? __fget_files+0x34/0x3d0 [ 55.824148][ T6235] ? selinux_file_ioctl+0x13b/0x290 [ 55.824166][ T6235] ? selinux_file_ioctl+0xb6/0x290 [ 55.824187][ T6235] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.824211][ T6235] __x64_sys_ioctl+0x18e/0x210 [ 55.824232][ T6235] do_syscall_64+0x123/0x790 [ 55.824261][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.824278][ T6235] RIP: 0033:0x7f24cd19e159 [ 55.824293][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.824310][ T6235] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.824328][ T6235] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 55.824339][ T6235] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 55.824350][ T6235] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 55.824361][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.824370][ T6235] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 55.824395][ T6235] [ 55.865218][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 55.937757][ T9] hid (null): unknown global tag 0xe [ 55.937770][ T9] hid (null): unknown global tag 0xa4 [ 55.937787][ T9] hid (null): unknown global tag 0xc [ 55.937798][ T9] hid (null): global environment stack underflow [ 55.941201][ T9] hid-generic 0004:7000000:108A.0002: unknown global tag 0xe [ 55.941213][ T9] hid-generic 0004:7000000:108A.0002: item 0 0 1 14 parsing failed [ 55.944871][ T9] hid-generic 0004:7000000:108A.0002: probe with driver hid-generic failed with error -22 [ 55.947240][ T6245] syzkaller0: entered promiscuous mode [ 55.947251][ T6245] syzkaller0: entered allmulticast mode [ 55.960606][ T6246] syzkaller0: entered promiscuous mode [ 55.960626][ T6246] syzkaller0: entered allmulticast mode [ 56.047599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.135743][ T6259] device-mapper: ioctl: Invalid ioctl structure: name test, dev 12 [ 56.231957][ T6272] Zero length message leads to an empty skb [ 56.341178][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 56.456313][ T6289] capability: warning: `syz.4.90' uses deprecated v2 capabilities in a way that may be insecure [ 56.588188][ T6291] device-mapper: ioctl: Invalid ioctl structure: name test, dev 20 [ 56.646132][ T6294] syzkaller0: entered promiscuous mode [ 56.646150][ T6294] syzkaller0: entered allmulticast mode [ 56.775971][ T6306] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 56.965076][ T6315] device-mapper: ioctl: Invalid ioctl structure: name test, dev 40 [ 57.152157][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 57.168757][ T5086] Bluetooth: hci0: command tx timeout [ 57.175286][ T6334] binder: BINDER_SET_CONTEXT_MGR already set [ 57.175295][ T6334] binder: 6333:6334 ioctl 4018620d 200000000040 returned -16 [ 57.250877][ T43] kauditd_printk_skb: 2069 callbacks suppressed [ 57.250895][ T43] audit: type=1400 audit(1790068932.736:2330): avc: denied { create } for pid=6341 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.251955][ T43] audit: type=1400 audit(1790068932.736:2331): avc: denied { watch watch_reads } for pid=6341 comm="syz.0.111" path="/31" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.274426][ T6344] device-mapper: ioctl: Invalid ioctl structure: name test, dev ff [ 57.312695][ T43] audit: type=1400 audit(1790068932.796:2332): avc: denied { bind } for pid=6341 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.367435][ T43] audit: type=1400 audit(1790068932.846:2333): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 57.367804][ T6348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.111'. [ 57.387999][ T43] audit: type=1400 audit(1790068932.876:2334): avc: denied { search } for pid=6356 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 57.388027][ T43] audit: type=1400 audit(1790068932.876:2335): avc: denied { search } for pid=6356 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 57.449321][ T43] audit: type=1400 audit(1790068932.936:2336): avc: denied { mount } for pid=6360 comm="syz.2.115" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.586889][ T6373] jffs2: notice: (6373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.616535][ T43] audit: type=1400 audit(1790068933.096:2337): avc: denied { listen } for pid=6377 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.678104][ T6382] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 57.678121][ T6382] device-mapper: ioctl: error adding target to table [ 57.733760][ T43] audit: type=1400 audit(1790068933.216:2338): avc: denied { write } for pid=6377 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.733788][ T43] audit: type=1400 audit(1790068933.216:2339): avc: denied { nlmsg_read } for pid=6377 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.793083][ T6395] ======================================================= [ 57.793083][ T6395] WARNING: The mand mount option has been deprecated and [ 57.793083][ T6395] and is ignored by this kernel. Remove the mand [ 57.793083][ T6395] option from the mount to silence this warning. [ 57.793083][ T6395] ======================================================= [ 57.793284][ T6395] jffs2: notice: (6395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.897307][ T6403] vers=2.0 not permitted when mounting with smb3 [ 57.897307][ T6403] [ 57.897438][ T6403] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 57.965929][ T6410] FAULT_INJECTION: forcing a failure. [ 57.965929][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 57.965956][ T6410] CPU: 2 UID: 0 PID: 6410 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(full) [ 57.965972][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.965980][ T6410] Call Trace: [ 57.965984][ T6410] [ 57.965988][ T6410] dump_stack_lvl+0x100/0x190 [ 57.966010][ T6410] should_fail_ex.cold+0x5/0xa [ 57.966026][ T6410] should_failslab+0xc2/0x120 [ 57.966042][ T6410] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 57.966057][ T6410] ? kasan_save_track+0x14/0x30 [ 57.966069][ T6410] ? media_pipeline_add_pad+0x6b8/0xa00 [ 57.966087][ T6410] krealloc_node_align_noprof+0x321/0x3e0 [ 57.966101][ T6410] media_pipeline_add_pad+0x6b8/0xa00 [ 57.966118][ T6410] __media_pipeline_start+0x2e6/0x22b0 [ 57.966134][ T6410] ? lock_acquire+0x1d1/0x380 [ 57.966149][ T6410] ? __pfx___media_pipeline_start+0x10/0x10 [ 57.966167][ T6410] ? __mutex_lock+0x26c/0x1bd0 [ 57.966187][ T6410] media_pipeline_start+0x49/0x70 [ 57.966201][ T6410] video_device_pipeline_start+0x79/0xa0 [ 57.966218][ T6410] vimc_capture_start_streaming+0x7d/0x130 [ 57.966236][ T6410] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 57.966254][ T6410] vb2_start_streaming+0x162/0x570 [ 57.966266][ T6410] ? __bitmap_weight+0xd7/0x110 [ 57.966283][ T6410] vb2_core_streamon+0x26a/0x3c0 [ 57.966296][ T6410] vb2_ioctl_streamon+0xd9/0x150 [ 57.966307][ T6410] ? v4l_streamon+0x1a/0xa0 [ 57.966324][ T6410] __video_do_ioctl+0xb2a/0xdf0 [ 57.966341][ T6410] ? __might_fault+0xc5/0x140 [ 57.966357][ T6410] ? __pfx___video_do_ioctl+0x10/0x10 [ 57.966377][ T6410] video_usercopy+0x47a/0x1730 [ 57.966394][ T6410] ? __pfx___video_do_ioctl+0x10/0x10 [ 57.966432][ T6410] ? __pfx_video_usercopy+0x10/0x10 [ 57.966459][ T6410] v4l2_ioctl+0x1bd/0x250 [ 57.966475][ T6410] ? __pfx_v4l2_ioctl+0x10/0x10 [ 57.966494][ T6410] __x64_sys_ioctl+0x18e/0x210 [ 57.966508][ T6410] do_syscall_64+0x123/0x790 [ 57.966526][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.966538][ T6410] RIP: 0033:0x7fee3dd9e159 [ 57.966548][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.966558][ T6410] RSP: 002b:00007fee3eb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.966569][ T6410] RAX: ffffffffffffffda RBX: 00007fee3e025fa0 RCX: 00007fee3dd9e159 [ 57.966575][ T6410] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000003 [ 57.966582][ T6410] RBP: 00007fee3de3506b R08: 0000000000000000 R09: 0000000000000000 [ 57.966588][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.966594][ T6410] R13: 00007fee3e026038 R14: 00007fee3e025fa0 R15: 00007ffcc1c01bf8 [ 57.966608][ T6410] [ 58.097629][ T6412] mmap: syz.2.131 (6412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.120047][ T6412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.291804][ T6436] random: crng reseeded on system resumption [ 58.333933][ T6436] sctp: [Deprecated]: syz.2.139 (pid 6436) Use of int in max_burst socket option deprecated. [ 58.333933][ T6436] Use struct sctp_assoc_value instead [ 58.334636][ T6436] process 'syz.2.139' launched '/dev/fd/9' with NULL argv: empty string added [ 58.410960][ T6451] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 58.410983][ T6451] device-mapper: ioctl: error adding target to table [ 58.471843][ T6461] syzkaller0: entered promiscuous mode [ 58.471860][ T6461] syzkaller0: entered allmulticast mode [ 58.595389][ T6473] omfs: Invalid superblock (0) [ 58.893097][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 58.946495][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 59.248957][ T5086] Bluetooth: hci0: command tx timeout [ 59.433926][ T6499] cgroup: release_agent respecified [ 59.472825][ T6503] FAULT_INJECTION: forcing a failure. [ 59.472825][ T6503] name failslab, interval 1, probability 0, space 0, times 0 [ 59.472852][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT(full) [ 59.472870][ T6503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.472878][ T6503] Call Trace: [ 59.472884][ T6503] [ 59.472891][ T6503] dump_stack_lvl+0x100/0x190 [ 59.472920][ T6503] should_fail_ex.cold+0x5/0xa [ 59.472944][ T6503] should_failslab+0xc2/0x120 [ 59.472965][ T6503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.472986][ T6503] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 59.473005][ T6503] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 59.473025][ T6503] mmu_topup_memory_caches+0x25/0x170 [ 59.473039][ T6503] kvm_mmu_load+0xe8/0x2580 [ 59.473052][ T6503] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 59.473069][ T6503] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 59.473087][ T6503] ? __pfx_kvm_mmu_load+0x10/0x10 [ 59.473098][ T6503] ? vmx_nmi_blocked+0x101/0x3a0 [ 59.473111][ T6503] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 59.473122][ T6503] ? kvm_check_and_inject_events+0x896/0x1050 [ 59.473137][ T6503] vcpu_run+0x395d/0x5e80 [ 59.473153][ T6503] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 59.473188][ T6503] ? __pfx_vcpu_run+0x10/0x10 [ 59.473211][ T6503] ? lock_acquire+0x1d1/0x380 [ 59.473229][ T6503] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 59.473251][ T6503] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 59.473278][ T6503] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 59.473298][ T6503] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 59.473325][ T6503] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 59.473344][ T6503] ? lock_acquire+0x1d1/0x380 [ 59.473362][ T6503] ? do_raw_write_lock+0x11e/0x260 [ 59.473382][ T6503] ? find_held_lock+0x2b/0x80 [ 59.473405][ T6503] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 59.473426][ T6503] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 59.473453][ T6503] kvm_vcpu_ioctl+0x730/0x1700 [ 59.473478][ T6503] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.473501][ T6503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.473522][ T6503] ? do_vfs_ioctl+0x226/0x13e0 [ 59.473540][ T6503] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 59.473554][ T6503] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 59.473576][ T6503] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.473599][ T6503] ? __fget_files+0x34/0x3d0 [ 59.473630][ T6503] ? selinux_file_ioctl+0x13b/0x290 [ 59.473648][ T6503] ? selinux_file_ioctl+0xb6/0x290 [ 59.473669][ T6503] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.473692][ T6503] __x64_sys_ioctl+0x18e/0x210 [ 59.473711][ T6503] do_syscall_64+0x123/0x790 [ 59.473738][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.473755][ T6503] RIP: 0033:0x7f24cd19e159 [ 59.473769][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.473783][ T6503] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.473800][ T6503] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 59.473810][ T6503] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 59.473820][ T6503] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 59.473829][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.473837][ T6503] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 59.473856][ T6503] [ 59.531301][ T6510] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 59.531322][ T6510] device-mapper: ioctl: error adding target to table [ 59.546525][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.161'. [ 59.553761][ T6518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6518 comm=syz.4.161 [ 59.575790][ T6522] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 59.580806][ T6522] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 59.581025][ T6522] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 59.671314][ T6532] gadgetfs: bound to dummy_udc driver [ 59.848591][ T6539] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 59.848608][ T6539] device-mapper: ioctl: error adding target to table [ 59.900826][ T6556] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 59.900852][ T6556] device-mapper: ioctl: error adding target to table [ 59.937984][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 59.945935][ T1131] ata1.00: configured for UDMA/100 [ 59.973183][ T6568] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 59.974372][ T6567] block nbd0: NBD_DISCONNECT [ 59.983939][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 59.985037][ T6564] FAULT_INJECTION: forcing a failure. [ 59.985037][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 59.985061][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 59.985081][ T6564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.985091][ T6564] Call Trace: [ 59.985097][ T6564] [ 59.985104][ T6564] dump_stack_lvl+0x100/0x190 [ 59.985132][ T6564] should_fail_ex.cold+0x5/0xa [ 59.985156][ T6564] should_failslab+0xc2/0x120 [ 59.985178][ T6564] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.985217][ T6564] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 59.985249][ T6564] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 59.985280][ T6564] mmu_topup_memory_caches+0x25/0x170 [ 59.985302][ T6564] kvm_mmu_load+0xe8/0x2580 [ 59.985323][ T6564] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 59.985348][ T6564] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 59.985376][ T6564] ? __pfx_kvm_mmu_load+0x10/0x10 [ 59.985392][ T6564] ? vmx_nmi_blocked+0x101/0x3a0 [ 59.985412][ T6564] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 59.985431][ T6564] ? kvm_check_and_inject_events+0x896/0x1050 [ 59.985455][ T6564] vcpu_run+0x395d/0x5e80 [ 59.985474][ T6564] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 59.985511][ T6564] ? __pfx_vcpu_run+0x10/0x10 [ 59.985534][ T6564] ? lock_acquire+0x1d1/0x380 [ 59.985552][ T6564] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 59.985575][ T6564] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 59.985603][ T6564] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 59.985623][ T6564] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 59.985650][ T6564] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 59.985670][ T6564] ? lock_acquire+0x1d1/0x380 [ 59.985689][ T6564] ? do_raw_write_lock+0x11e/0x260 [ 59.985710][ T6564] ? find_held_lock+0x2b/0x80 [ 59.985733][ T6564] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 59.985755][ T6564] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 59.985783][ T6564] kvm_vcpu_ioctl+0x730/0x1700 [ 59.985808][ T6564] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.985832][ T6564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.985854][ T6564] ? do_vfs_ioctl+0x226/0x13e0 [ 59.985872][ T6564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 59.985888][ T6564] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 59.985911][ T6564] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.985945][ T6564] ? __fget_files+0x34/0x3d0 [ 59.985977][ T6564] ? selinux_file_ioctl+0x13b/0x290 [ 59.985995][ T6564] ? selinux_file_ioctl+0xb6/0x290 [ 59.986016][ T6564] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.986040][ T6564] __x64_sys_ioctl+0x18e/0x210 [ 59.986060][ T6564] do_syscall_64+0x123/0x790 [ 59.986088][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.986105][ T6564] RIP: 0033:0x7f24cd19e159 [ 59.986120][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.986135][ T6564] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.986153][ T6564] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 59.986164][ T6564] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 59.986174][ T6564] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 59.986184][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.986193][ T6564] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 59.986216][ T6564] [ 60.270544][ T6589] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 60.270561][ T6589] device-mapper: ioctl: error adding target to table [ 60.371118][ T6607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.185'. [ 60.450545][ T6615] FAULT_INJECTION: forcing a failure. [ 60.450545][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 60.450569][ T6615] CPU: 3 UID: 0 PID: 6615 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 60.450582][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.450588][ T6615] Call Trace: [ 60.450595][ T6615] [ 60.450600][ T6615] dump_stack_lvl+0x100/0x190 [ 60.450626][ T6615] should_fail_ex.cold+0x5/0xa [ 60.450642][ T6615] should_failslab+0xc2/0x120 [ 60.450660][ T6615] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.450673][ T6615] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 60.450692][ T6615] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 60.450712][ T6615] mmu_topup_memory_caches+0x25/0x170 [ 60.450726][ T6615] kvm_mmu_load+0xe8/0x2580 [ 60.450739][ T6615] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 60.450755][ T6615] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 60.450774][ T6615] ? __pfx_kvm_mmu_load+0x10/0x10 [ 60.450784][ T6615] ? vmx_nmi_blocked+0x101/0x3a0 [ 60.450797][ T6615] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 60.450809][ T6615] ? kvm_check_and_inject_events+0x896/0x1050 [ 60.450824][ T6615] vcpu_run+0x395d/0x5e80 [ 60.450837][ T6615] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 60.450859][ T6615] ? __pfx_vcpu_run+0x10/0x10 [ 60.450874][ T6615] ? lock_acquire+0x1d1/0x380 [ 60.450886][ T6615] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 60.450901][ T6615] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 60.450920][ T6615] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 60.450933][ T6615] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 60.450951][ T6615] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 60.450964][ T6615] ? lock_acquire+0x1d1/0x380 [ 60.450976][ T6615] ? do_raw_write_lock+0x11e/0x260 [ 60.450990][ T6615] ? find_held_lock+0x2b/0x80 [ 60.451005][ T6615] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 60.451019][ T6615] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 60.451037][ T6615] kvm_vcpu_ioctl+0x730/0x1700 [ 60.451054][ T6615] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 60.451069][ T6615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.451083][ T6615] ? do_vfs_ioctl+0x226/0x13e0 [ 60.451095][ T6615] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 60.451105][ T6615] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 60.451121][ T6615] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 60.451136][ T6615] ? __fget_files+0x34/0x3d0 [ 60.451160][ T6615] ? selinux_file_ioctl+0x13b/0x290 [ 60.451172][ T6615] ? selinux_file_ioctl+0xb6/0x290 [ 60.451199][ T6615] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 60.451215][ T6615] __x64_sys_ioctl+0x18e/0x210 [ 60.451227][ T6615] do_syscall_64+0x123/0x790 [ 60.451250][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.451262][ T6615] RIP: 0033:0x7f24cd19e159 [ 60.451271][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.451281][ T6615] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.451295][ T6615] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 60.451302][ T6615] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 60.451308][ T6615] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 60.451314][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.451320][ T6615] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 60.451334][ T6615] [ 60.492434][ T6618] syzkaller0: entered promiscuous mode [ 60.492455][ T6618] syzkaller0: entered allmulticast mode [ 60.730660][ T6624] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 60.730685][ T6624] device-mapper: ioctl: error adding target to table [ 60.766812][ T2085] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 60.797071][ T6636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.194'. [ 60.803232][ T6567] block nbd0: Disconnected due to user request. [ 60.803251][ T6567] block nbd0: shutting down sockets [ 60.837497][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.195'. [ 60.837716][ T6640] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 60.856151][ T6640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.872034][ T6640] bond1: (slave geneve2): making interface the new active one [ 60.873684][ T6640] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.913516][ T6647] tmpfs: Unknown parameter 'ÿÿ' [ 60.940327][ T2085] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 60.942142][ T2085] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 60.942163][ T2085] usb 9-1: config 1 has no interface number 0 [ 60.951210][ T2085] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.951233][ T2085] usb 9-1: Product: syz [ 60.951244][ T2085] usb 9-1: Manufacturer: syz [ 60.951257][ T2085] usb 9-1: SerialNumber: syz [ 61.009546][ T2085] usb 9-1: 3:1 : does not exist [ 61.009560][ T2085] usb 9-1: 3:2 : does not exist [ 61.013086][ T6654] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 61.013103][ T6654] device-mapper: ioctl: error adding target to table [ 61.253748][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 61.256371][ T6658] IPv6: sit1: Disabled Multicast RS [ 61.257391][ T6658] sit1: entered allmulticast mode [ 61.326711][ T5086] Bluetooth: hci0: command tx timeout [ 61.378528][ T6690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6690 comm=syz.0.208 [ 61.383292][ T6690] FAT-fs (nullb0): bogus number of reserved sectors [ 61.383310][ T6690] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 61.416311][ T6693] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 61.524889][ T6702] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 61.524912][ T6702] device-mapper: ioctl: error adding target to table [ 61.636000][ T6722] netlink: 'syz.0.221': attribute type 34 has an invalid length. [ 61.636017][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 61.636351][ T6723] netlink: 'syz.0.221': attribute type 34 has an invalid length. [ 61.636363][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 61.856744][ T5996] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 62.007059][ T5996] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.010845][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.010865][ T5996] usb 8-1: Product: syz [ 62.010878][ T5996] usb 8-1: Manufacturer: syz [ 62.010888][ T5996] usb 8-1: SerialNumber: syz [ 62.059018][ T5593] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.269984][ T5996] usb 8-1: USB disconnect, device number 6 [ 62.374312][ T43] kauditd_printk_skb: 471 callbacks suppressed [ 62.374326][ T43] audit: type=1400 audit(1790069193.909:2811): avc: denied { search } for pid=6740 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 62.374385][ T43] audit: type=1400 audit(1790069193.909:2812): avc: denied { search } for pid=6740 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 62.645179][ T43] audit: type=1400 audit(1790069194.179:2813): avc: denied { create } for pid=6741 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.645732][ T43] audit: type=1400 audit(1790069194.179:2814): avc: denied { bind } for pid=6741 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.699300][ T43] audit: type=1400 audit(1790069194.239:2815): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 62.770365][ T6752] netlink: 14 bytes leftover after parsing attributes in process `syz.2.227'. [ 62.775517][ T43] audit: type=1400 audit(1790069194.309:2816): avc: denied { mount } for pid=6750 comm="syz.2.227" name="/" dev="rpc_pipefs" ino=13145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 62.844498][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 62.856839][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.857755][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.943995][ T43] audit: type=1400 audit(1790069194.479:2817): avc: denied { create } for pid=6767 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.944291][ T43] audit: type=1400 audit(1790069194.479:2818): avc: denied { create } for pid=6767 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.944708][ T43] audit: type=1400 audit(1790069194.479:2819): avc: denied { write } for pid=6767 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.973451][ T6766] FAULT_INJECTION: forcing a failure. [ 62.973451][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 62.973471][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.3.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.973485][ T6766] Tainted: [L]=SOFTLOCKUP [ 62.973489][ T6766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.973496][ T6766] Call Trace: [ 62.973500][ T6766] [ 62.973504][ T6766] dump_stack_lvl+0x100/0x190 [ 62.973524][ T6766] should_fail_ex.cold+0x5/0xa [ 62.973540][ T6766] should_failslab+0xc2/0x120 [ 62.973555][ T6766] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.973580][ T6766] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 62.973601][ T6766] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 62.973621][ T6766] mmu_topup_memory_caches+0x25/0x170 [ 62.973635][ T6766] kvm_mmu_load+0xe8/0x2580 [ 62.973648][ T6766] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 62.973665][ T6766] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 62.973684][ T6766] ? __pfx_kvm_mmu_load+0x10/0x10 [ 62.973694][ T6766] ? vmx_nmi_blocked+0x101/0x3a0 [ 62.973707][ T6766] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 62.973719][ T6766] ? kvm_check_and_inject_events+0x896/0x1050 [ 62.973734][ T6766] vcpu_run+0x395d/0x5e80 [ 62.973746][ T6766] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 62.973769][ T6766] ? __pfx_vcpu_run+0x10/0x10 [ 62.973785][ T6766] ? lock_acquire+0x1d1/0x380 [ 62.973796][ T6766] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 62.973812][ T6766] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 62.973830][ T6766] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 62.973844][ T6766] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 62.973861][ T6766] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 62.973875][ T6766] ? lock_acquire+0x1d1/0x380 [ 62.973887][ T6766] ? do_raw_write_lock+0x11e/0x260 [ 62.973902][ T6766] ? find_held_lock+0x2b/0x80 [ 62.973917][ T6766] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 62.973932][ T6766] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 62.973950][ T6766] kvm_vcpu_ioctl+0x730/0x1700 [ 62.973967][ T6766] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.973983][ T6766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.973997][ T6766] ? do_vfs_ioctl+0x226/0x13e0 [ 62.974009][ T6766] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.974020][ T6766] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 62.974035][ T6766] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.974056][ T6766] ? __fget_files+0x34/0x3d0 [ 62.974076][ T6766] ? selinux_file_ioctl+0x13b/0x290 [ 62.974088][ T6766] ? selinux_file_ioctl+0xb6/0x290 [ 62.974101][ T6766] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.974118][ T6766] __x64_sys_ioctl+0x18e/0x210 [ 62.974130][ T6766] do_syscall_64+0x123/0x790 [ 62.974148][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.974160][ T6766] RIP: 0033:0x7fee3dd9e159 [ 62.974182][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.974193][ T6766] RSP: 002b:00007fee3eb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.974204][ T6766] RAX: ffffffffffffffda RBX: 00007fee3e025fa0 RCX: 00007fee3dd9e159 [ 62.974212][ T6766] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 62.974218][ T6766] RBP: 00007fee3eb80090 R08: 0000000000000000 R09: 0000000000000000 [ 62.974224][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.974231][ T6766] R13: 00007fee3e026038 R14: 00007fee3e025fa0 R15: 00007ffcc1c01bf8 [ 62.974245][ T6766] [ 63.085278][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 63.096912][ T5593] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 63.098288][ T5593] ath9k_htc: Failed to initialize the device [ 63.105173][ T5996] usb 8-1: ath9k_htc: USB layer deinitialized [ 63.183911][ T6791] capability: warning: `syz.0.241' uses 32-bit capabilities (legacy support in use) [ 63.214552][ T43] audit: type=1400 audit(1790069194.749:2820): avc: denied { create } for pid=6785 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.392005][ T6805] syz.0.246 uses obsolete (PF_INET,SOCK_PACKET) [ 63.403401][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 63.429726][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 63.459356][ T6816] openvswitch: netlink: Flow key attr not present in new flow. [ 63.460526][ T6816] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 63.461764][ T6816] VFS: Can't find a romfs filesystem on dev nullb0. [ 63.461764][ T6816] [ 63.471152][ T931] usb 9-1: USB disconnect, device number 2 [ 63.650118][ T6825] FAULT_INJECTION: forcing a failure. [ 63.650118][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 63.650151][ T6825] CPU: 3 UID: 0 PID: 6825 Comm: syz.4.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.650176][ T6825] Tainted: [L]=SOFTLOCKUP [ 63.650183][ T6825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.650194][ T6825] Call Trace: [ 63.650200][ T6825] [ 63.650208][ T6825] dump_stack_lvl+0x100/0x190 [ 63.650239][ T6825] should_fail_ex.cold+0x5/0xa [ 63.650266][ T6825] should_failslab+0xc2/0x120 [ 63.650290][ T6825] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.650311][ T6825] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.650343][ T6825] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.650374][ T6825] mmu_topup_memory_caches+0x25/0x170 [ 63.650396][ T6825] kvm_mmu_load+0xe8/0x2580 [ 63.650418][ T6825] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 63.650446][ T6825] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.650474][ T6825] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.650491][ T6825] ? vmx_nmi_blocked+0x101/0x3a0 [ 63.650512][ T6825] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.650532][ T6825] ? kvm_check_and_inject_events+0x896/0x1050 [ 63.650556][ T6825] vcpu_run+0x395d/0x5e80 [ 63.650576][ T6825] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 63.650619][ T6825] ? __pfx_vcpu_run+0x10/0x10 [ 63.650644][ T6825] ? lock_acquire+0x1d1/0x380 [ 63.650663][ T6825] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 63.650687][ T6825] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 63.650718][ T6825] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 63.650741][ T6825] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 63.650768][ T6825] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 63.650789][ T6825] ? lock_acquire+0x1d1/0x380 [ 63.650809][ T6825] ? do_raw_write_lock+0x11e/0x260 [ 63.650832][ T6825] ? find_held_lock+0x2b/0x80 [ 63.650858][ T6825] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 63.650882][ T6825] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 63.650910][ T6825] kvm_vcpu_ioctl+0x730/0x1700 [ 63.650938][ T6825] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.650963][ T6825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.650986][ T6825] ? do_vfs_ioctl+0x226/0x13e0 [ 63.651007][ T6825] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.651023][ T6825] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 63.651048][ T6825] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.651074][ T6825] ? __fget_files+0x34/0x3d0 [ 63.651125][ T6825] ? selinux_file_ioctl+0x13b/0x290 [ 63.651147][ T6825] ? selinux_file_ioctl+0xb6/0x290 [ 63.651168][ T6825] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.651194][ T6825] __x64_sys_ioctl+0x18e/0x210 [ 63.651215][ T6825] do_syscall_64+0x123/0x790 [ 63.651244][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.651264][ T6825] RIP: 0033:0x7ff1a099e159 [ 63.651279][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.651296][ T6825] RSP: 002b:00007ff1a1912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.651316][ T6825] RAX: ffffffffffffffda RBX: 00007ff1a0c25fa0 RCX: 00007ff1a099e159 [ 63.651327][ T6825] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 63.651338][ T6825] RBP: 00007ff1a1912090 R08: 0000000000000000 R09: 0000000000000000 [ 63.651349][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.651359][ T6825] R13: 00007ff1a0c26038 R14: 00007ff1a0c25fa0 R15: 00007ffc2aa81318 [ 63.651383][ T6825] [ 63.709462][ T6830] kAFS: unable to lookup cell 'syz0' [ 63.731901][ T6835] kAFS: unable to lookup cell 'syz0' [ 63.875607][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.980167][ T6850] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 63.986990][ T6855] overlayfs: failed to resolve './file1': -2 [ 64.059156][ T6866] syzkaller0: entered promiscuous mode [ 64.059170][ T6866] syzkaller0: entered allmulticast mode [ 64.105175][ T6870] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.156364][ T6874] FAULT_INJECTION: forcing a failure. [ 64.156364][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 64.156406][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.0.266 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.156421][ T6874] Tainted: [L]=SOFTLOCKUP [ 64.156425][ T6874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.156432][ T6874] Call Trace: [ 64.156436][ T6874] [ 64.156441][ T6874] dump_stack_lvl+0x100/0x190 [ 64.156470][ T6874] should_fail_ex.cold+0x5/0xa [ 64.156486][ T6874] should_failslab+0xc2/0x120 [ 64.156505][ T6874] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.156518][ T6874] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 64.156537][ T6874] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 64.156558][ T6874] mmu_topup_memory_caches+0x25/0x170 [ 64.156585][ T6874] kvm_mmu_load+0xe8/0x2580 [ 64.156598][ T6874] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 64.156616][ T6874] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 64.156635][ T6874] ? __pfx_kvm_mmu_load+0x10/0x10 [ 64.156645][ T6874] ? vmx_nmi_blocked+0x101/0x3a0 [ 64.156658][ T6874] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 64.156671][ T6874] ? kvm_check_and_inject_events+0x896/0x1050 [ 64.156686][ T6874] vcpu_run+0x395d/0x5e80 [ 64.156711][ T6874] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 64.156735][ T6874] ? __pfx_vcpu_run+0x10/0x10 [ 64.156750][ T6874] ? lock_acquire+0x1d1/0x380 [ 64.156762][ T6874] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 64.156777][ T6874] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 64.156795][ T6874] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 64.156809][ T6874] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 64.156826][ T6874] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 64.156840][ T6874] ? lock_acquire+0x1d1/0x380 [ 64.156852][ T6874] ? do_raw_write_lock+0x11e/0x260 [ 64.156866][ T6874] ? find_held_lock+0x2b/0x80 [ 64.156882][ T6874] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 64.156897][ T6874] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 64.156914][ T6874] kvm_vcpu_ioctl+0x730/0x1700 [ 64.156931][ T6874] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.156947][ T6874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.156961][ T6874] ? do_vfs_ioctl+0x226/0x13e0 [ 64.156973][ T6874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.156983][ T6874] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 64.157002][ T6874] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.157018][ T6874] ? __fget_files+0x34/0x3d0 [ 64.157038][ T6874] ? selinux_file_ioctl+0x13b/0x290 [ 64.157050][ T6874] ? selinux_file_ioctl+0xb6/0x290 [ 64.157064][ T6874] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.157085][ T6874] __x64_sys_ioctl+0x18e/0x210 [ 64.157097][ T6874] do_syscall_64+0x123/0x790 [ 64.157120][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.157132][ T6874] RIP: 0033:0x7f4074d9e159 [ 64.157142][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.157152][ T6874] RSP: 002b:00007f4075bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.157163][ T6874] RAX: ffffffffffffffda RBX: 00007f4075025fa0 RCX: 00007f4074d9e159 [ 64.157171][ T6874] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 64.157177][ T6874] RBP: 00007f4075bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.157183][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.157190][ T6874] R13: 00007f4075026038 R14: 00007f4075025fa0 R15: 00007ffce25d5f18 [ 64.157204][ T6874] [ 64.513520][ T5441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.546995][ T6910] macvlan0: entered promiscuous mode [ 64.644986][ T6916] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 64.645003][ T6916] device-mapper: ioctl: error adding target to table [ 64.649521][ T5593] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 64.766809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.807556][ T5593] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.807969][ T5593] usb 8-1: config 0 has no interfaces? [ 64.807985][ T5593] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.814389][ T5593] usb 8-1: config 0 descriptor?? [ 64.967025][ T6958] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 64.967051][ T6958] device-mapper: ioctl: error adding target to table [ 64.975965][ T6956] syzkaller0: entered promiscuous mode [ 64.975991][ T6956] syzkaller0: entered allmulticast mode [ 65.081764][ T6975] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 65.100328][ T6975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.143681][ T6975] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 65.168599][ T6975] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 65.174302][ T6975] bond4 (unregistering): Released all slaves [ 65.291529][ T6999] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 65.291559][ T6999] device-mapper: ioctl: error adding target to table [ 65.375848][ T7013] FAULT_INJECTION: forcing a failure. [ 65.375848][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 65.375882][ T7013] CPU: 3 UID: 0 PID: 7013 Comm: syz.3.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.375909][ T7013] Tainted: [L]=SOFTLOCKUP [ 65.375916][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.375926][ T7013] Call Trace: [ 65.375934][ T7013] [ 65.375947][ T7013] dump_stack_lvl+0x100/0x190 [ 65.375989][ T7013] should_fail_ex.cold+0x5/0xa [ 65.376012][ T7013] should_failslab+0xc2/0x120 [ 65.376042][ T7013] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.376061][ T7013] ? __kernfs_new_node+0xd2/0xa10 [ 65.376089][ T7013] __kernfs_new_node+0xd2/0xa10 [ 65.376114][ T7013] ? __pfx___kernfs_new_node+0x10/0x10 [ 65.376140][ T7013] ? lock_acquire+0x1d1/0x380 [ 65.376159][ T7013] ? kernfs_root+0x23/0x2a0 [ 65.376183][ T7013] ? find_held_lock+0x2b/0x80 [ 65.376209][ T7013] ? kernfs_root+0xee/0x2a0 [ 65.376229][ T7013] ? kernfs_root+0xee/0x2a0 [ 65.376255][ T7013] kernfs_new_node+0x117/0x150 [ 65.376284][ T7013] __kernfs_create_file+0x53/0x350 [ 65.376306][ T7013] sysfs_add_file_mode_ns+0x207/0x3c0 [ 65.376335][ T7013] sysfs_create_file_ns+0x145/0x1e0 [ 65.376359][ T7013] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 65.376403][ T7013] ? module_add_driver+0x1e2/0x420 [ 65.376426][ T7013] ? sysfs_do_create_link_sd+0xbb/0x140 [ 65.376453][ T7013] driver_create_file+0x4a/0x70 [ 65.376477][ T7013] bus_add_driver+0x446/0x5b0 [ 65.376497][ T7013] driver_register+0x1e2/0x360 [ 65.376516][ T7013] ? rcu_is_watching+0x13/0xc0 [ 65.376539][ T7013] usb_gadget_register_driver_owner+0x132/0x210 [ 65.376583][ T7013] raw_ioctl+0x1a85/0x2b80 [ 65.376608][ T7013] ? __pfx_raw_ioctl+0x10/0x10 [ 65.376627][ T7013] ? selinux_file_ioctl+0x13b/0x290 [ 65.376646][ T7013] ? selinux_file_ioctl+0xb6/0x290 [ 65.376668][ T7013] ? __pfx_raw_ioctl+0x10/0x10 [ 65.376690][ T7013] __x64_sys_ioctl+0x18e/0x210 [ 65.376711][ T7013] do_syscall_64+0x123/0x790 [ 65.376761][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.376777][ T7013] RIP: 0033:0x7fee3dd9ddeb [ 65.376794][ T7013] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 65.376811][ T7013] RSP: 002b:00007fee3bfb1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.376828][ T7013] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007fee3dd9ddeb [ 65.376839][ T7013] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000011 [ 65.376848][ T7013] RBP: 00007fee3bfb2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 65.376858][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.376868][ T7013] R13: 0000200000000200 R14: 0000000000000005 R15: 0000000000000868 [ 65.376888][ T7013] [ 65.379441][ T7013] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 65.380735][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.385350][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.492340][ T7022] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 65.545449][ T7022] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 65.911568][ T7051] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 65.911593][ T7051] device-mapper: ioctl: error adding target to table [ 66.084992][ T7070] __nla_validate_parse: 6 callbacks suppressed [ 66.085010][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 66.264487][ T7074] netlink: 'syz.4.315': attribute type 11 has an invalid length. [ 66.382671][ T7080] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 66.384655][ T7080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.318'. [ 66.393330][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 66.393355][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.318'. [ 66.558358][ T7085] program syz.0.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.745527][ T7098] fuse: Unknown parameter ' ' [ 67.185068][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.327'. [ 67.298787][ T57] usb 8-1: USB disconnect, device number 7 [ 67.385619][ T43] kauditd_printk_skb: 1828 callbacks suppressed [ 67.385636][ T43] audit: type=1400 audit(1790069198.919:4649): avc: denied { mounton } for pid=7125 comm="syz.2.330" path="/122/file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 67.426485][ T43] audit: type=1400 audit(1790069198.959:4650): avc: denied { shutdown } for pid=7120 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.482665][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 67.602493][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 67.626127][ T7138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.676136][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 67.676164][ T5086] CPU: 0 UID: 0 PID: 5086 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.676194][ T5086] Tainted: [L]=SOFTLOCKUP [ 67.676200][ T5086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.676212][ T5086] Workqueue: hci1 hci_rx_work [ 67.676261][ T5086] Call Trace: [ 67.676268][ T5086] [ 67.676275][ T5086] dump_stack_lvl+0x100/0x190 [ 67.676304][ T5086] sysfs_warn_dup.cold+0x1c/0x28 [ 67.676330][ T5086] sysfs_create_dir_ns+0x24b/0x2b0 [ 67.676389][ T5086] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 67.676414][ T5086] ? find_held_lock+0x2b/0x80 [ 67.676441][ T5086] ? kobject_add_internal+0x25f/0x930 [ 67.676466][ T5086] ? kobject_add_internal+0x25f/0x930 [ 67.676488][ T5086] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.676510][ T5086] kobject_add_internal+0x2c8/0x930 [ 67.676533][ T5086] kobject_add+0x16a/0x1e0 [ 67.676561][ T5086] ? __pfx_kobject_add+0x10/0x10 [ 67.676602][ T5086] ? class_to_subsys+0x10f/0x150 [ 67.676636][ T5086] ? kobject_put+0xb9/0x640 [ 67.676653][ T5086] ? _raw_spin_unlock+0x28/0x50 [ 67.676687][ T5086] device_add+0x294/0x1970 [ 67.676711][ T5086] ? __pfx_dev_set_name+0x10/0x10 [ 67.676731][ T5086] ? __pfx_device_add+0x10/0x10 [ 67.676760][ T5086] ? mgmt_send_event_skb+0x2fb/0x460 [ 67.676788][ T5086] hci_conn_add_sysfs+0x1a3/0x260 [ 67.676813][ T5086] le_conn_complete_evt+0x122f/0x2130 [ 67.676843][ T5086] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 67.676899][ T5086] ? hci_event_packet+0x186/0xcd0 [ 67.676923][ T5086] ? hci_event_packet+0x186/0xcd0 [ 67.676945][ T5086] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 67.676966][ T5086] ? skb_pull_data+0x15f/0x1e0 [ 67.676993][ T5086] hci_le_meta_evt+0x34a/0x5f0 [ 67.677013][ T5086] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 67.677036][ T5086] hci_event_packet+0x51c/0xcd0 [ 67.677055][ T5086] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 67.677075][ T5086] ? __pfx_hci_event_packet+0x10/0x10 [ 67.677097][ T5086] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.677129][ T5086] hci_rx_work+0x451/0xfc0 [ 67.677156][ T5086] process_one_work+0xac7/0x1b10 [ 67.677201][ T5086] ? __pfx_process_one_work+0x10/0x10 [ 67.677236][ T5086] ? lock_acquire+0x1d1/0x380 [ 67.677268][ T5086] ? __pfx_hci_rx_work+0x10/0x10 [ 67.677297][ T5086] worker_thread+0x5ef/0xe50 [ 67.677336][ T5086] ? __pfx_worker_thread+0x10/0x10 [ 67.677364][ T5086] ? kthread+0x13a/0x450 [ 67.677388][ T5086] ? __pfx_worker_thread+0x10/0x10 [ 67.677418][ T5086] kthread+0x373/0x450 [ 67.677445][ T5086] ? __pfx_kthread+0x10/0x10 [ 67.677476][ T5086] ret_from_fork+0x730/0xd60 [ 67.677501][ T5086] ? __pfx_ret_from_fork+0x10/0x10 [ 67.677526][ T5086] ? __switch_to+0x800/0x10f0 [ 67.677566][ T5086] ? __pfx_kthread+0x10/0x10 [ 67.677598][ T5086] ret_from_fork_asm+0x1a/0x30 [ 67.677636][ T5086] [ 67.681610][ T5086] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.681648][ T5086] Bluetooth: hci1: failed to register connection device [ 67.698245][ T7143] syzkaller1: entered promiscuous mode [ 67.698264][ T7143] syzkaller1: entered allmulticast mode [ 67.699443][ T43] audit: type=1400 audit(1790069199.239:4651): avc: denied { read append } for pid=7142 comm="syz.0.335" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.699748][ T43] audit: type=1400 audit(1790069199.239:4652): avc: denied { append } for pid=7144 comm="syz.4.336" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.731118][ T43] audit: type=1400 audit(1790069199.269:4653): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.733376][ T43] audit: type=1400 audit(1790069199.269:4654): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.733459][ T43] audit: type=1400 audit(1790069199.269:4655): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.733495][ T43] audit: type=1400 audit(1790069199.269:4656): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.733527][ T43] audit: type=1400 audit(1790069199.269:4657): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.733565][ T43] audit: type=1400 audit(1790069199.269:4658): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.772669][ T7143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.773396][ T7143] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.800891][ T7143] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.814846][ T7143] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.831214][ T7143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.831423][ T7143] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.854189][ T7143] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.869917][ T7143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.870021][ T7143] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.885810][ T7143] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.898808][ T7143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.898889][ T7143] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.918995][ T7143] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.959425][ T7161] tipc: Started in network mode [ 67.959442][ T7161] tipc: Node identity 7f000001, cluster identity 4711 [ 67.960047][ T7161] tipc: Enabled bearer , priority 10 [ 68.135846][ T7177] use of bytesused == 0 is deprecated and will be removed in the future, [ 68.135859][ T7177] use the actual size instead. [ 68.146193][ T7179] cgroup: subsys name conflicts with all [ 68.400775][ T7193] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 68.400806][ T7193] bond3: entered allmulticast mode [ 68.544244][ T7207] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.564081][ T7207] syzkaller0: entered promiscuous mode [ 68.564096][ T7207] syzkaller0: entered allmulticast mode [ 68.607748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.764936][ T7224] ip6t_hbh: Not strict - not implemented [ 68.768571][ T7224] netlink: 'syz.4.358': attribute type 16 has an invalid length. [ 68.768583][ T7224] netlink: 'syz.4.358': attribute type 17 has an invalid length. [ 68.897849][ T7229] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 68.897868][ T7229] device-mapper: ioctl: error adding target to table [ 69.806853][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.838311][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.843432][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.878416][ T6045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.888126][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.888154][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.893542][ T7224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.897862][ T7224] bond3: left allmulticast mode [ 69.898000][ T7224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.906850][ T2085] tipc: Node number set to 2130706433 [ 69.960426][ T7260] nvme_fabrics: unknown parameter or missing value '#! ./file0' in ctrl creation request [ 69.967213][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.977109][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.133029][ T7273] FAULT_INJECTION: forcing a failure. [ 70.133029][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 70.133053][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.4.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.133068][ T7273] Tainted: [L]=SOFTLOCKUP [ 70.133072][ T7273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.133078][ T7273] Call Trace: [ 70.133082][ T7273] [ 70.133086][ T7273] dump_stack_lvl+0x100/0x190 [ 70.133114][ T7273] should_fail_ex.cold+0x5/0xa [ 70.133131][ T7273] should_failslab+0xc2/0x120 [ 70.133149][ T7273] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.133168][ T7273] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 70.133188][ T7273] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 70.133209][ T7273] mmu_topup_memory_caches+0x25/0x170 [ 70.133222][ T7273] kvm_mmu_load+0xe8/0x2580 [ 70.133236][ T7273] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 70.133253][ T7273] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 70.133272][ T7273] ? __pfx_kvm_mmu_load+0x10/0x10 [ 70.133282][ T7273] ? vmx_nmi_blocked+0x101/0x3a0 [ 70.133295][ T7273] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 70.133311][ T7273] ? kvm_check_and_inject_events+0x896/0x1050 [ 70.133331][ T7273] vcpu_run+0x395d/0x5e80 [ 70.133348][ T7273] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 70.133383][ T7273] ? __pfx_vcpu_run+0x10/0x10 [ 70.133407][ T7273] ? lock_acquire+0x1d1/0x380 [ 70.133443][ T7273] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 70.133471][ T7273] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 70.133497][ T7273] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 70.133517][ T7273] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 70.133544][ T7273] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 70.133560][ T7273] ? lock_acquire+0x1d1/0x380 [ 70.133573][ T7273] ? do_raw_write_lock+0x11e/0x260 [ 70.133588][ T7273] ? find_held_lock+0x2b/0x80 [ 70.133604][ T7273] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 70.133620][ T7273] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 70.133639][ T7273] kvm_vcpu_ioctl+0x730/0x1700 [ 70.133657][ T7273] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.133673][ T7273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.133688][ T7273] ? do_vfs_ioctl+0x226/0x13e0 [ 70.133701][ T7273] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.133712][ T7273] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 70.133729][ T7273] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.133745][ T7273] ? __fget_files+0x34/0x3d0 [ 70.133766][ T7273] ? selinux_file_ioctl+0x13b/0x290 [ 70.133778][ T7273] ? selinux_file_ioctl+0xb6/0x290 [ 70.133793][ T7273] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.133810][ T7273] __x64_sys_ioctl+0x18e/0x210 [ 70.133823][ T7273] do_syscall_64+0x123/0x790 [ 70.133848][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.133861][ T7273] RIP: 0033:0x7ff1a099e159 [ 70.133872][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.133883][ T7273] RSP: 002b:00007ff1a1912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.133895][ T7273] RAX: ffffffffffffffda RBX: 00007ff1a0c25fa0 RCX: 00007ff1a099e159 [ 70.133902][ T7273] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 70.133909][ T7273] RBP: 00007ff1a1912090 R08: 0000000000000000 R09: 0000000000000000 [ 70.133916][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.133923][ T7273] R13: 00007ff1a0c26038 R14: 00007ff1a0c25fa0 R15: 00007ffc2aa81318 [ 70.133942][ T7273] [ 70.213644][ T7278] device-mapper: ioctl: Invalid ioctl structure: name test, dev 8 [ 70.281394][ T5086] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 70.403709][ T5086] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 70.459676][ T5086] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 70.694891][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.380'. [ 71.004914][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.004942][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.004954][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.004968][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.004985][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.005001][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.005019][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.005039][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.005057][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.005074][ T2085] hid-generic 0401:0008:00E1.0003: unknown main item tag 0x0 [ 71.010434][ T2085] hid-generic 0401:0008:00E1.0003: hidraw1: HID v0.08 Device [syz1] on syz0 [ 71.051511][ T7323] fido_id[7323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.105086][ T7330] device-mapper: ioctl: Invalid ioctl structure: name test, dev 300 [ 71.150442][ T7335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.389'. [ 71.173766][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173805][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.185636][ T64] cfg80211: failed to load regulatory.db [ 71.229217][ T7343] FAULT_INJECTION: forcing a failure. [ 71.229217][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 71.229239][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.3.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.229254][ T7343] Tainted: [L]=SOFTLOCKUP [ 71.229259][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.229265][ T7343] Call Trace: [ 71.229269][ T7343] [ 71.229274][ T7343] dump_stack_lvl+0x100/0x190 [ 71.229294][ T7343] should_fail_ex.cold+0x5/0xa [ 71.229310][ T7343] should_failslab+0xc2/0x120 [ 71.229325][ T7343] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.229338][ T7343] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.229358][ T7343] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.229378][ T7343] mmu_topup_memory_caches+0x25/0x170 [ 71.229392][ T7343] kvm_mmu_load+0xe8/0x2580 [ 71.229406][ T7343] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 71.229423][ T7343] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 71.229441][ T7343] ? __pfx_kvm_mmu_load+0x10/0x10 [ 71.229457][ T7343] ? vmx_nmi_blocked+0x101/0x3a0 [ 71.229470][ T7343] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 71.229482][ T7343] ? kvm_check_and_inject_events+0x896/0x1050 [ 71.229497][ T7343] vcpu_run+0x395d/0x5e80 [ 71.229510][ T7343] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 71.229532][ T7343] ? __pfx_vcpu_run+0x10/0x10 [ 71.229548][ T7343] ? lock_acquire+0x1d1/0x380 [ 71.229560][ T7343] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 71.229589][ T7343] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 71.229608][ T7343] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.229622][ T7343] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.229640][ T7343] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.229654][ T7343] ? lock_acquire+0x1d1/0x380 [ 71.229666][ T7343] ? do_raw_write_lock+0x11e/0x260 [ 71.229680][ T7343] ? find_held_lock+0x2b/0x80 [ 71.229695][ T7343] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.229710][ T7343] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.229728][ T7343] kvm_vcpu_ioctl+0x730/0x1700 [ 71.229744][ T7343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.229760][ T7343] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.229774][ T7343] ? do_vfs_ioctl+0x226/0x13e0 [ 71.229786][ T7343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.229797][ T7343] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.229812][ T7343] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.229828][ T7343] ? __fget_files+0x34/0x3d0 [ 71.229848][ T7343] ? selinux_file_ioctl+0x13b/0x290 [ 71.229860][ T7343] ? selinux_file_ioctl+0xb6/0x290 [ 71.229873][ T7343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.229890][ T7343] __x64_sys_ioctl+0x18e/0x210 [ 71.229902][ T7343] do_syscall_64+0x123/0x790 [ 71.229920][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.229932][ T7343] RIP: 0033:0x7fee3dd9e159 [ 71.229942][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.229954][ T7343] RSP: 002b:00007fee3eb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.229965][ T7343] RAX: ffffffffffffffda RBX: 00007fee3e025fa0 RCX: 00007fee3dd9e159 [ 71.229973][ T7343] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 71.229979][ T7343] RBP: 00007fee3eb80090 R08: 0000000000000000 R09: 0000000000000000 [ 71.229985][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.229992][ T7343] R13: 00007fee3e026038 R14: 00007fee3e025fa0 R15: 00007ffcc1c01bf8 [ 71.230006][ T7343] [ 71.265413][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 71.322947][ T7352] sd 0:0:0:0: PR command failed: 1026 [ 71.322972][ T7352] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 71.322993][ T7352] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 71.518092][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 71.692448][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 71.692826][ T7400] program syz.3.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.721633][ T7399] bond0: (slave bond_slave_0): Releasing backup interface [ 71.727519][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 71.817851][ T7407] FAULT_INJECTION: forcing a failure. [ 71.817851][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 71.817887][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.2.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.817902][ T7407] Tainted: [L]=SOFTLOCKUP [ 71.817907][ T7407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.817913][ T7407] Call Trace: [ 71.817918][ T7407] [ 71.817922][ T7407] dump_stack_lvl+0x100/0x190 [ 71.817955][ T7407] should_fail_ex.cold+0x5/0xa [ 71.817974][ T7407] should_failslab+0xc2/0x120 [ 71.818000][ T7407] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.818018][ T7407] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.818046][ T7407] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.818071][ T7407] mmu_topup_memory_caches+0x25/0x170 [ 71.818085][ T7407] kvm_mmu_load+0xe8/0x2580 [ 71.818099][ T7407] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 71.818116][ T7407] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 71.818134][ T7407] ? __pfx_kvm_mmu_load+0x10/0x10 [ 71.818145][ T7407] ? vmx_nmi_blocked+0x101/0x3a0 [ 71.818158][ T7407] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 71.818170][ T7407] ? kvm_check_and_inject_events+0x896/0x1050 [ 71.818185][ T7407] vcpu_run+0x395d/0x5e80 [ 71.818198][ T7407] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 71.818221][ T7407] ? __pfx_vcpu_run+0x10/0x10 [ 71.818236][ T7407] ? lock_acquire+0x1d1/0x380 [ 71.818248][ T7407] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 71.818263][ T7407] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 71.818282][ T7407] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.818295][ T7407] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 71.818313][ T7407] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.818327][ T7407] ? lock_acquire+0x1d1/0x380 [ 71.818339][ T7407] ? do_raw_write_lock+0x11e/0x260 [ 71.818353][ T7407] ? find_held_lock+0x2b/0x80 [ 71.818371][ T7407] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.818386][ T7407] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.818404][ T7407] kvm_vcpu_ioctl+0x730/0x1700 [ 71.818421][ T7407] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.818436][ T7407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.818451][ T7407] ? do_vfs_ioctl+0x226/0x13e0 [ 71.818463][ T7407] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.818473][ T7407] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.818489][ T7407] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.818504][ T7407] ? __fget_files+0x34/0x3d0 [ 71.818524][ T7407] ? selinux_file_ioctl+0x13b/0x290 [ 71.818536][ T7407] ? selinux_file_ioctl+0xb6/0x290 [ 71.818550][ T7407] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.818566][ T7407] __x64_sys_ioctl+0x18e/0x210 [ 71.818578][ T7407] do_syscall_64+0x123/0x790 [ 71.818601][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.818613][ T7407] RIP: 0033:0x7f24cd19e159 [ 71.818622][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.818632][ T7407] RSP: 002b:00007f24ce006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.818644][ T7407] RAX: ffffffffffffffda RBX: 00007f24cd425fa0 RCX: 00007f24cd19e159 [ 71.818651][ T7407] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 71.818657][ T7407] RBP: 00007f24ce006090 R08: 0000000000000000 R09: 0000000000000000 [ 71.818664][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.818670][ T7407] R13: 00007f24cd426038 R14: 00007f24cd425fa0 R15: 00007ffc2d0bdc18 [ 71.818684][ T7407] [ 71.886773][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.968430][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.968459][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.057571][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.366315][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 72.430735][ T7456] zram: failed to load dictionary d (err=-2) [ 72.499010][ T7458] kvm: user requested TSC rate below hardware speed [ 72.530661][ T7458] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 72.693063][ T7471] device-mapper: ioctl: Invalid ioctl structure: name test, dev 600 [ 72.735020][ T43] kauditd_printk_skb: 1202 callbacks suppressed [ 72.735039][ T43] audit: type=1400 audit(1790069204.269:5861): avc: denied { remount } for pid=7473 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.756360][ T43] audit: type=1400 audit(1790069204.289:5862): avc: denied { connect } for pid=7473 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.757425][ T43] audit: type=1400 audit(1790069204.299:5863): avc: denied { getopt } for pid=7473 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.850747][ T7482] syzkaller0: entered promiscuous mode [ 72.850761][ T7482] syzkaller0: entered allmulticast mode [ 72.879926][ T43] audit: type=1400 audit(1790069204.419:5864): avc: denied { read write } for pid=7481 comm="syz.0.436" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.879968][ T43] audit: type=1400 audit(1790069204.419:5865): avc: denied { open } for pid=7481 comm="syz.0.436" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.920652][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 73.190981][ T43] audit: type=1400 audit(1790069204.729:5866): avc: denied { create } for pid=7495 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.198064][ T43] audit: type=1400 audit(1790069204.739:5867): avc: denied { ioctl } for pid=7495 comm="syz.2.441" path="socket:[19873]" dev="sockfs" ino=19873 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.201864][ T7498] device-mapper: ioctl: Invalid ioctl structure: name test, dev 800 [ 73.258787][ T43] audit: type=1400 audit(1790069204.799:5868): avc: denied { getopt } for pid=7502 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.266878][ T43] audit: type=1400 audit(1790069204.809:5869): avc: denied { sqpoll } for pid=7502 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.272042][ T43] audit: type=1400 audit(1790069204.809:5870): avc: denied { block_suspend } for pid=7502 comm="syz.3.443" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.334421][ T7508] FAULT_INJECTION: forcing a failure. [ 73.334421][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 73.334443][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.4.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.334458][ T7508] Tainted: [L]=SOFTLOCKUP [ 73.334462][ T7508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.334468][ T7508] Call Trace: [ 73.334472][ T7508] [ 73.334477][ T7508] dump_stack_lvl+0x100/0x190 [ 73.334509][ T7508] should_fail_ex.cold+0x5/0xa [ 73.334526][ T7508] should_failslab+0xc2/0x120 [ 73.334545][ T7508] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.334558][ T7508] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.334593][ T7508] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.334613][ T7508] mmu_topup_memory_caches+0x25/0x170 [ 73.334627][ T7508] kvm_mmu_load+0xe8/0x2580 [ 73.334640][ T7508] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 73.334658][ T7508] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.334677][ T7508] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.334687][ T7508] ? vmx_nmi_blocked+0x101/0x3a0 [ 73.334701][ T7508] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.334714][ T7508] ? kvm_check_and_inject_events+0x896/0x1050 [ 73.334729][ T7508] vcpu_run+0x395d/0x5e80 [ 73.334742][ T7508] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 73.334764][ T7508] ? __pfx_vcpu_run+0x10/0x10 [ 73.334780][ T7508] ? lock_acquire+0x1d1/0x380 [ 73.334791][ T7508] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 73.334807][ T7508] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 73.334826][ T7508] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 73.334840][ T7508] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 73.334857][ T7508] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 73.334871][ T7508] ? lock_acquire+0x1d1/0x380 [ 73.334883][ T7508] ? do_raw_write_lock+0x11e/0x260 [ 73.334897][ T7508] ? find_held_lock+0x2b/0x80 [ 73.334913][ T7508] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 73.334927][ T7508] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 73.334946][ T7508] kvm_vcpu_ioctl+0x730/0x1700 [ 73.334962][ T7508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.334978][ T7508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.334992][ T7508] ? do_vfs_ioctl+0x226/0x13e0 [ 73.335004][ T7508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.335015][ T7508] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 73.335030][ T7508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.335046][ T7508] ? __fget_files+0x34/0x3d0 [ 73.335079][ T7508] ? selinux_file_ioctl+0x13b/0x290 [ 73.335091][ T7508] ? selinux_file_ioctl+0xb6/0x290 [ 73.335105][ T7508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.335121][ T7508] __x64_sys_ioctl+0x18e/0x210 [ 73.335134][ T7508] do_syscall_64+0x123/0x790 [ 73.335155][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.335167][ T7508] RIP: 0033:0x7ff1a099e159 [ 73.335177][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.335188][ T7508] RSP: 002b:00007ff1a1912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.335199][ T7508] RAX: ffffffffffffffda RBX: 00007ff1a0c25fa0 RCX: 00007ff1a099e159 [ 73.335207][ T7508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 73.335213][ T7508] RBP: 00007ff1a1912090 R08: 0000000000000000 R09: 0000000000000000 [ 73.335234][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.335240][ T7508] R13: 00007ff1a0c26038 R14: 00007ff1a0c25fa0 R15: 00007ffc2aa81318 [ 73.335254][ T7508] [ 73.408215][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 73.437614][ T7522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.437742][ T7522] block device autoloading is deprecated and will be removed. [ 73.509189][ T7528] device-mapper: ioctl: Invalid ioctl structure: name test, dev 900 [ 73.803311][ T7543] Console: switching to colour dummy device 80x25 [ 73.889420][ T7543] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 73.913527][ T7562] device-mapper: ioctl: Invalid ioctl structure: name test, dev 1000 [ 73.929965][ T7543] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 73.973256][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.979935][ T7554] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 73.989948][ T7554] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 73.990130][ T7554] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 73.990188][ T7554] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 73.990303][ T7554] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 73.991241][ T7554] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 74.017810][ T7568] FAULT_INJECTION: forcing a failure. [ 74.017810][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 74.017832][ T7568] CPU: 0 UID: 0 PID: 7568 Comm: syz.4.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.017847][ T7568] Tainted: [L]=SOFTLOCKUP [ 74.017851][ T7568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.017858][ T7568] Call Trace: [ 74.017863][ T7568] [ 74.017868][ T7568] dump_stack_lvl+0x100/0x190 [ 74.017926][ T7568] should_fail_ex.cold+0x5/0xa [ 74.017943][ T7568] should_failslab+0xc2/0x120 [ 74.017977][ T7568] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.017990][ T7568] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 74.018010][ T7568] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 74.018030][ T7568] mmu_topup_memory_caches+0x25/0x170 [ 74.018044][ T7568] kvm_mmu_load+0xe8/0x2580 [ 74.018058][ T7568] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 74.018075][ T7568] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 74.018093][ T7568] ? __pfx_kvm_mmu_load+0x10/0x10 [ 74.018104][ T7568] ? vmx_nmi_blocked+0x101/0x3a0 [ 74.018117][ T7568] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 74.018129][ T7568] ? kvm_check_and_inject_events+0x896/0x1050 [ 74.018144][ T7568] vcpu_run+0x395d/0x5e80 [ 74.018156][ T7568] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 74.018178][ T7568] ? __pfx_vcpu_run+0x10/0x10 [ 74.018193][ T7568] ? lock_acquire+0x1d1/0x380 [ 74.018205][ T7568] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 74.018221][ T7568] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 74.018239][ T7568] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 74.018253][ T7568] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 74.018270][ T7568] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 74.018284][ T7568] ? lock_acquire+0x1d1/0x380 [ 74.018296][ T7568] ? do_raw_write_lock+0x11e/0x260 [ 74.018310][ T7568] ? find_held_lock+0x2b/0x80 [ 74.018325][ T7568] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 74.018344][ T7568] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 74.018368][ T7568] kvm_vcpu_ioctl+0x730/0x1700 [ 74.018385][ T7568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.018401][ T7568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.018415][ T7568] ? do_vfs_ioctl+0x226/0x13e0 [ 74.018427][ T7568] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.018437][ T7568] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 74.018456][ T7568] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.018472][ T7568] ? __fget_files+0x34/0x3d0 [ 74.018492][ T7568] ? selinux_file_ioctl+0x13b/0x290 [ 74.018504][ T7568] ? selinux_file_ioctl+0xb6/0x290 [ 74.018518][ T7568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.018534][ T7568] __x64_sys_ioctl+0x18e/0x210 [ 74.018546][ T7568] do_syscall_64+0x123/0x790 [ 74.018583][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.018595][ T7568] RIP: 0033:0x7ff1a099e159 [ 74.018605][ ** replaying previous printk message ** [ 74.018605][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.018616][ T7568] RSP: 002b:00007ff1a18f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.018627][ T7568] RAX: ffffffffffffffda RBX: 00007ff1a0c26090 RCX: 00007ff1a099e159 [ 74.018634][ T7568] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 74.018640][ T7568] RBP: 00007ff1a18f1090 R08: 0000000000000000 R09: 0000000000000000 [ 74.018647][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.018653][ T7568] R13: 00007ff1a0c26128 R14: 00007ff1a0c26090 R15: 00007ffc2aa81318 [ 74.018667][ T7568] [ 74.018761][ T7554] pci 0000:00:01.0: Adding to iommu group 1 [ 74.023612][ T7554] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 74.023626][ T7554] pci 0000:00:01.0: vgaarb: bridge control possible [ 74.023633][ T7554] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 74.036493][ T7554] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 74.041382][ T7554] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 74.047215][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.047276][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.050238][ T7554] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 74.059294][ T7554] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 74.091488][ T7554] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 74.128939][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.130479][ T7554] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 74.130599][ T7554] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 74.133135][ T7554] [drm] features: -virgl +edid -resource_blob -host_visible [ 74.133147][ T7554] [drm] features: -context_init -blob_alignment [ 74.144393][ T7554] ------------[ cut here ]------------ [ 74.144406][ T7554] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 74.144416][ T7554] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#0: syz.3.455/7554 [ 74.219689][ T7554] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 74.220927][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.3.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.224268][ T7554] Tainted: [L]=SOFTLOCKUP [ 74.225631][ T7554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.229068][ T7554] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 74.231018][ T7554] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 74.237446][ T7554] RSP: 0018:ffffc9000c9eef18 EFLAGS: 00010246 [ 74.239570][ T7554] RAX: 0000000000000000 RBX: ffff888101ab3900 RCX: fffff5200193ddbe [ 74.242124][ T7554] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 74.244673][ T7554] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 74.247540][ T7554] R10: ffffc9000c9eef18 R11: 0000000000000001 R12: 0000000000000000 [ 74.250412][ T7554] R13: ffffc9000c9eef88 R14: 00000000000000d8 R15: ffff88805ed54fce [ 74.253075][ T7554] FS: 00007fee3bff66c0(0000) GS:ffff8880d5b53000(0000) knlGS:0000000000000000 [ 74.255864][ T7554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.258335][ T7554] CR2: 0000000000000000 CR3: 0000000056435000 CR4: 0000000000352ef0 [ 74.260728][ T7554] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 74.263515][ T7554] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 74.266442][ T7554] Call Trace: [ 74.267714][ T7554] [ 74.268683][ T7554] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 74.270365][ T7554] ? __pfx__printk+0x10/0x10 [ 74.271833][ T7554] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 74.273716][ T7554] ? lockdep_init_map_type+0x5c/0x250 [ 74.275409][ T7554] virtio_gpu_init.cold+0x40d/0x1293 [ 74.277297][ T7554] ? vga_remove_vgacon.cold+0x1d/0x99 [ 74.278981][ T7554] ? __pfx_virtio_gpu_init+0x10/0x10 [ 74.280823][ T7554] ? is_console_locked+0x9/0x20 [ 74.282352][ T7554] ? con_is_bound+0x141/0x190 [ 74.284038][ T7554] ? vga_remove_vgacon+0x21/0x30 [ 74.285610][ T7554] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 74.288008][ T7554] virtio_gpu_probe+0x21c/0x360 [ 74.289568][ T7554] virtio_dev_probe+0x6a2/0xbe0 [ 74.291263][ T7554] ? __pfx_virtio_dev_probe+0x10/0x10 [ 74.292991][ T7554] ? kernfs_create_link+0x1bd/0x240 [ 74.295076][ T7554] ? kernfs_put+0x3f/0x60 [ 74.296803][ T7554] ? sysfs_do_create_link_sd+0xbb/0x140 [ 74.298602][ T7554] ? sysfs_create_link+0x68/0xc0 [ 74.300121][ T7554] ? __pfx_virtio_dev_probe+0x10/0x10 [ 74.302839][ T7554] really_probe+0x241/0xa60 [ 74.304297][ T7554] __driver_probe_device+0x210/0x460 [ 74.305943][ T7554] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.307869][ T7554] driver_probe_device+0x4a/0x140 [ 74.309491][ T7554] __device_attach_driver+0x1df/0x320 [ 74.311186][ T7554] ? __pfx___device_attach_driver+0x10/0x10 [ 74.313046][ T7554] bus_for_each_drv+0x159/0x1e0 [ 74.314589][ T7554] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.316277][ T7554] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.318033][ T7554] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.319881][ T7554] __device_attach+0x1e4/0x4d0 [ 74.321561][ T7554] ? __pfx___device_attach+0x10/0x10 [ 74.323619][ T7554] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.325352][ T7554] device_initial_probe+0xaf/0xd0 [ 74.327016][ T7554] bus_probe_device+0x64/0x160 [ 74.328539][ T7554] device_add+0x121d/0x1970 [ 74.330127][ T7554] ? __pfx_device_add+0x10/0x10 [ 74.331662][ T7554] ? __pfx___might_resched+0x10/0x10 [ 74.333443][ T7554] ? __init_waitqueue_head+0xca/0x150 [ 74.335144][ T7554] ? ioread8+0x8f/0xd0 [ 74.336460][ T7554] register_virtio_device+0x4f0/0x5d0 [ 74.338205][ T7554] ? __pfx_register_virtio_device+0x10/0x10 [ 74.340084][ T7554] ? __pfx_pcibios_set_master+0x10/0x10 [ 74.341839][ T7554] ? __raw_spin_lock_init+0x3a/0x110 [ 74.343500][ T7554] ? __pfx_virtio_pci_probe+0x10/0x10 [ 74.345222][ T7554] virtio_pci_probe+0x255/0x410 [ 74.346858][ T7554] local_pci_probe+0xdd/0x1b0 [ 74.348384][ T7554] pci_call_probe+0x176/0x800 [ 74.349883][ T7554] ? pci_match_device+0x147/0x7d0 [ 74.351473][ T7554] ? __pfx_pci_call_probe+0x10/0x10 [ 74.353160][ T7554] ? __pfx_pci_match_device+0x10/0x10 [ 74.354885][ T7554] ? pci_find_host_bridge+0x3c/0x80 [ 74.356550][ T7554] ? up_write+0x2dc/0x5b0 [ 74.359052][ T7554] pci_device_probe+0x25b/0x400 [ 74.360611][ T7554] ? __pfx_pci_device_probe+0x10/0x10 [ 74.362295][ T7554] ? kernfs_create_link+0x1bd/0x240 [ 74.363944][ T7554] ? sysfs_create_link+0x68/0xc0 [ 74.365512][ T7554] ? __pfx_pci_device_probe+0x10/0x10 [ 74.367561][ T7554] really_probe+0x241/0xa60 [ 74.369063][ T7554] __driver_probe_device+0x210/0x460 [ 74.370680][ T7554] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.372438][ T7554] driver_probe_device+0x4a/0x140 [ 74.373954][ T7554] __device_attach_driver+0x1df/0x320 [ 74.375542][ T7554] ? __pfx___device_attach_driver+0x10/0x10 [ 74.377583][ T7554] bus_for_each_drv+0x159/0x1e0 [ 74.379115][ T7554] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.380980][ T7554] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.382874][ T7554] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.385051][ T7554] __device_attach+0x1e4/0x4d0 [ 74.386798][ T7554] ? __pfx___device_attach+0x10/0x10 [ 74.388479][ T7554] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.390138][ T7554] device_initial_probe+0xaf/0xd0 [ 74.391716][ T7554] pci_bus_add_device+0xc5/0x100 [ 74.393274][ T7554] pci_bus_add_devices+0x9a/0x1f0 [ 74.394863][ T7554] pci_rescan_bus+0x2a/0x40 [ 74.396294][ T7554] rescan_store+0xfb/0x130 [ 74.397791][ T7554] ? __pfx_rescan_store+0x10/0x10 [ 74.399660][ T7554] ? sysfs_file_kobj+0xe4/0x290 [ 74.401605][ T7554] ? __pfx_rescan_store+0x10/0x10 [ 74.403598][ T7554] bus_attr_store+0x74/0xb0 [ 74.405442][ T7554] ? __pfx_bus_attr_store+0x10/0x10 [ 74.407594][ T7554] sysfs_kf_write+0xf2/0x150 [ 74.409457][ T7554] kernfs_fop_write_iter+0x3e0/0x5f0 [ 74.411535][ T7554] ? __pfx_sysfs_kf_write+0x10/0x10 [ 74.413588][ T7554] vfs_write+0x6af/0x1050 [ 74.415343][ T7554] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 74.417807][ T7554] ? __pfx_vfs_write+0x10/0x10 [ 74.419736][ T7554] ? find_held_lock+0x2b/0x80 [ 74.421606][ T7554] ksys_write+0x12a/0x250 [ 74.423325][ T7554] ? __pfx_ksys_write+0x10/0x10 [ 74.425360][ T7554] do_syscall_64+0x123/0x790 [ 74.427409][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.429874][ T7554] RIP: 0033:0x7fee3dd9e159 [ 74.431725][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.439636][ T7554] RSP: 002b:00007fee3bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.443183][ T7554] RAX: ffffffffffffffda RBX: 00007fee3e026090 RCX: 00007fee3dd9e159 [ 74.446460][ T7554] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 74.449915][ T7554] RBP: 00007fee3de3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.453170][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.456429][ T7554] R13: 00007fee3e026128 R14: 00007fee3e026090 R15: 00007ffcc1c01bf8 [ 74.459873][ T7554] [ 74.461207][ T7554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.464223][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.3.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.468596][ T7554] Tainted: [L]=SOFTLOCKUP [ 74.470422][ T7554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.474516][ T7554] Call Trace: [ 74.475913][ T7554] [ 74.477167][ T7554] dump_stack_lvl+0x100/0x190 [ 74.479141][ T7554] vpanic+0x553/0x970 [ 74.480835][ T7554] ? __pfx_vpanic+0x10/0x10 [ 74.482722][ T7554] panic+0xd1/0xe0 [ 74.484309][ T7554] ? __pfx_panic+0x10/0x10 [ 74.486186][ T7554] check_panic_on_warn.cold+0x19/0x34 [ 74.488396][ T7554] ? __kmem_cache_create_args+0xa9/0x430 [ 74.490724][ T7554] __warn.cold+0x191/0x318 [ 74.492586][ T7554] __report_bug+0x30f/0x440 [ 74.494471][ T7554] ? __kmem_cache_create_args+0xa9/0x430 [ 74.496793][ T7554] ? __pfx___report_bug+0x10/0x10 [ 74.498860][ T7554] ? __mutex_lock+0x26c/0x1bd0 [ 74.500719][ T7554] ? __kmem_cache_create_args+0x44/0x430 [ 74.502614][ T7554] report_bug_entry+0xe2/0x290 [ 74.504141][ T7554] ? __kmem_cache_create_args+0xac/0x430 [ 74.505891][ T7554] handle_bug+0x1cd/0x2a0 [ 74.507204][ T7554] exc_invalid_op+0x17/0x50 [ 74.508619][ T7554] asm_exc_invalid_op+0x1a/0x20 [ 74.510148][ T7554] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 74.512071][ T7554] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 74.518088][ T7554] RSP: 0018:ffffc9000c9eef18 EFLAGS: 00010246 [ 74.520018][ T7554] RAX: 0000000000000000 RBX: ffff888101ab3900 RCX: fffff5200193ddbe [ 74.522498][ T7554] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 74.524988][ T7554] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 74.527450][ T7554] R10: ffffc9000c9eef18 R11: 0000000000000001 R12: 0000000000000000 [ 74.529951][ T7554] R13: ffffc9000c9eef88 R14: 00000000000000d8 R15: ffff88805ed54fce [ 74.532444][ T7554] ? __kmem_cache_create_args+0x9e/0x430 [ 74.534213][ T7554] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 74.535879][ T7554] ? __pfx__printk+0x10/0x10 [ 74.537372][ T7554] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 74.539343][ T7554] ? lockdep_init_map_type+0x5c/0x250 [ 74.541069][ T7554] virtio_gpu_init.cold+0x40d/0x1293 [ 74.542791][ T7554] ? vga_remove_vgacon.cold+0x1d/0x99 [ 74.544535][ T7554] ? __pfx_virtio_gpu_init+0x10/0x10 [ 74.546189][ T7554] ? is_console_locked+0x9/0x20 [ 74.547732][ T7554] ? con_is_bound+0x141/0x190 [ 74.549266][ T7554] ? vga_remove_vgacon+0x21/0x30 [ 74.550870][ T7554] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 74.553088][ T7554] virtio_gpu_probe+0x21c/0x360 [ 74.554612][ T7554] virtio_dev_probe+0x6a2/0xbe0 [ 74.556261][ T7554] ? __pfx_virtio_dev_probe+0x10/0x10 [ 74.557971][ T7554] ? kernfs_create_link+0x1bd/0x240 [ 74.559692][ T7554] ? kernfs_put+0x3f/0x60 [ 74.561536][ T7554] ? sysfs_do_create_link_sd+0xbb/0x140 [ 74.563743][ T7554] ? sysfs_create_link+0x68/0xc0 [ 74.565720][ T7554] ? __pfx_virtio_dev_probe+0x10/0x10 [ 74.567850][ T7554] really_probe+0x241/0xa60 [ 74.569716][ T7554] __driver_probe_device+0x210/0x460 [ 74.571804][ T7554] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.574133][ T7554] driver_probe_device+0x4a/0x140 [ 74.576130][ T7554] __device_attach_driver+0x1df/0x320 [ 74.578262][ T7554] ? __pfx___device_attach_driver+0x10/0x10 [ 74.580617][ T7554] bus_for_each_drv+0x159/0x1e0 [ 74.582548][ T7554] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.584707][ T7554] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.586755][ T7554] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.589085][ T7554] __device_attach+0x1e4/0x4d0 [ 74.591096][ T7554] ? __pfx___device_attach+0x10/0x10 [ 74.593374][ T7554] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.595609][ T7554] device_initial_probe+0xaf/0xd0 [ 74.597799][ T7554] bus_probe_device+0x64/0x160 [ 74.599877][ T7554] device_add+0x121d/0x1970 [ 74.601839][ T7554] ? __pfx_device_add+0x10/0x10 [ 74.603933][ T7554] ? __pfx___might_resched+0x10/0x10 [ 74.606316][ T7554] ? __init_waitqueue_head+0xca/0x150 [ 74.608755][ T7554] ? ioread8+0x8f/0xd0 [ 74.610598][ T7554] register_virtio_device+0x4f0/0x5d0 [ 74.612827][ T7554] ? __pfx_register_virtio_device+0x10/0x10 [ 74.615324][ T7554] ? __pfx_pcibios_set_master+0x10/0x10 [ 74.617661][ T7554] ? __raw_spin_lock_init+0x3a/0x110 [ 74.619947][ T7554] ? __pfx_virtio_pci_probe+0x10/0x10 [ 74.622297][ T7554] virtio_pci_probe+0x255/0x410 [ 74.624470][ T7554] local_pci_probe+0xdd/0x1b0 [ 74.626550][ T7554] pci_call_probe+0x176/0x800 [ 74.628662][ T7554] ? pci_match_device+0x147/0x7d0 [ 74.631123][ T7554] ? __pfx_pci_call_probe+0x10/0x10 [ 74.633564][ T7554] ? __pfx_pci_match_device+0x10/0x10 [ 74.635836][ T7554] ? pci_find_host_bridge+0x3c/0x80 [ 74.638060][ T7554] ? up_write+0x2dc/0x5b0 [ 74.639902][ T7554] pci_device_probe+0x25b/0x400 [ 74.641973][ T7554] ? __pfx_pci_device_probe+0x10/0x10 [ 74.644251][ T7554] ? kernfs_create_link+0x1bd/0x240 [ 74.646458][ T7554] ? sysfs_create_link+0x68/0xc0 [ 74.648567][ T7554] ? __pfx_pci_device_probe+0x10/0x10 [ 74.650724][ T7554] really_probe+0x241/0xa60 [ 74.652549][ T7554] __driver_probe_device+0x210/0x460 [ 74.654707][ T7554] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.657184][ T7554] driver_probe_device+0x4a/0x140 [ 74.659313][ T7554] __device_attach_driver+0x1df/0x320 [ 74.661593][ T7554] ? __pfx___device_attach_driver+0x10/0x10 [ 74.664100][ T7554] bus_for_each_drv+0x159/0x1e0 [ 74.666159][ T7554] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.668429][ T7554] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.670655][ T7554] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.672550][ T7554] __device_attach+0x1e4/0x4d0 [ 74.674246][ T7554] ? __pfx___device_attach+0x10/0x10 [ 74.676478][ T7554] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.678671][ T7554] device_initial_probe+0xaf/0xd0 [ 74.680787][ T7554] pci_bus_add_device+0xc5/0x100 [ 74.682813][ T7554] pci_bus_add_devices+0x9a/0x1f0 [ 74.684986][ T7554] pci_rescan_bus+0x2a/0x40 [ 74.686916][ T7554] rescan_store+0xfb/0x130 [ 74.688822][ T7554] ? __pfx_rescan_store+0x10/0x10 [ 74.690957][ T7554] ? sysfs_file_kobj+0xe4/0x290 [ 74.693048][ T7554] ? __pfx_rescan_store+0x10/0x10 [ 74.695250][ T7554] bus_attr_store+0x74/0xb0 [ 74.697260][ T7554] ? __pfx_bus_attr_store+0x10/0x10 [ 74.699473][ T7554] sysfs_kf_write+0xf2/0x150 [ 74.701323][ T7554] kernfs_fop_write_iter+0x3e0/0x5f0 [ 74.703546][ T7554] ? __pfx_sysfs_kf_write+0x10/0x10 [ 74.705771][ T7554] vfs_write+0x6af/0x1050 [ 74.707602][ T7554] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 74.710101][ T7554] ? __pfx_vfs_write+0x10/0x10 [ 74.712119][ T7554] ? find_held_lock+0x2b/0x80 [ 74.714137][ T7554] ksys_write+0x12a/0x250 [ 74.715973][ T7554] ? __pfx_ksys_write+0x10/0x10 [ 74.718048][ T7554] do_syscall_64+0x123/0x790 [ 74.720045][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.722550][ T7554] RIP: 0033:0x7fee3dd9e159 [ 74.724471][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.732377][ T7554] RSP: 002b:00007fee3bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.735456][ T7554] RAX: ffffffffffffffda RBX: 00007fee3e026090 RCX: 00007fee3dd9e159 [ 74.738632][ T7554] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 74.741961][ T7554] RBP: 00007fee3de3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.745275][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.748573][ T7554] R13: 00007fee3e026128 R14: 00007fee3e026090 R15: 00007ffcc1c01bf8 [ 74.751897][ T7554] [ 74.753926][ T7554] Kernel Offset: disabled [ 74.755758][ T7554] Rebooting in 86400 seconds..