last executing test programs: 1.670559046s ago: executing program 0 (id=95): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000000c0)=@filename='./cgroup\x00', r0, &(0x7f0000000240)) 1.668086711s ago: executing program 0 (id=96): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x40085500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000020c0)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x0, 0x0) write(r3, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000440)={0x2, 0x10, 0xa, 0x0, 0xb, "aecc1a4d374f590d448c19245042a5e6ecb203"}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) (async) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002dbd7000fcdbdf25040000000c000f00000000000000000005000d00000000000c000f0000000000000000000c001000030000000000000008000c000000000008001800e000000105000700020000001e02e82d6e8e13a7bca6b0ac707b4261fc3a6db5272ce8037c10842f541f7bae210a2359f424b0c86ee5e8690880fba57e8a280f7bbfa595b02a9599f3e209f1b701cfe8d315cf16290bf36d6cb44a1d2a1fb23b24"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) write(r4, &(0x7f0000000200)='1', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol-prefer,\x00']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r10, &(0x7f0000000280)='0', 0x1) (async) read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) 1.504425793s ago: executing program 0 (id=97): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000439df481c0012800b00010067656e65766500000c00028008000b40000003ff"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x394, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x364, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x394}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a3100000000110003"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601010000000000000046503b39842deac9000a0000000900020073797a3000000000050001000700000005000400000000000c000780080011400000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) 1.441417771s ago: executing program 0 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.175055798s ago: executing program 3 (id=103): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="f30fc73445c95e2e740f01de0f01cb0f08db9ab48e00002e0f01ca36a466ba210066edc744240007000000c7442402b0000000c7442406000000000f0114248fc9380108", 0x44}], 0x1, 0x62, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f00000e2000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x34001817}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000104000000000000", @ANYRES32=0x1, @ANYBLOB="0180000000000000000000002200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0xb, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x2, r7}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x10000, 0x0}, 0x8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x14, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0x0, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @generic={0x2, 0x5, 0x9, 0xff80, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc6a514d71d5f91b9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r4, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0xe, 0x1}, {0x3, 0x4, 0xe, 0x9}, {0x5, 0x4, 0x7}, {0x5, 0x3, 0x1, 0xa}], 0x10, 0xa}, 0x94) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000180)=[{r10, 0xd20c}], 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x9, 0xe}, 0x10, r8, r9, 0x5, 0x0, &(0x7f0000000800)=[{0x5, 0x2, 0x5, 0xa}, {0x5, 0x5, 0x3, 0xb}, {0x4, 0x2, 0xa, 0x4}, {0x4, 0x1, 0x8, 0x3}, {0x3, 0x2, 0xb}], 0x10, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.000822849s ago: executing program 3 (id=106): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000439df481c0012800b00010067656e65766500000c00028008000b40000003ff"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x394, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x364, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x394}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a3100000000110003"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601010000000000000046503b39842deac9000a0000000900020073797a3000000000050001000700000005000400000000000c000780080011400000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) 934.813758ms ago: executing program 3 (id=108): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002c6000/0x4000)=nil, 0x4000, &(0x7f0000000200)='\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f00000000c0)=""/85, 0x55}], 0x2, &(0x7f0000000480)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/101, 0x65}], 0x3, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000200)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="d5cf54bba91a", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0x4, 0x6, 0x0, @local, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x1, 0x2, 0x4c12, 0x0, 0x1, 0x8, 0x3, 0x1, 0x5f4, 0x6, 0xfffffffd, 0x4e20, 0x4e20}, 0x1, 0x4}, 0x3, 0x1}, 0x2}}}}}}}}, 0x52) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x10, 0x5e}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x1, 0xfffffffffffffffe, 0x3, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400801, 0x9, 0x2}, {0x1cb00000, 0x301, 0xfffffffc}, 0x0, 0x0, 0xa, 0x5, 0x0, 0x2c}, [@sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x144}}, 0x44050) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) ptrace$getenv(0x4201, r9, 0x8, &(0x7f00000001c0)) 725.947299ms ago: executing program 1 (id=111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 32) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (rerun: 32) 640.118869ms ago: executing program 3 (id=112): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYBLOB="01002bbd7000000000001400000018000180391e02006e657464657673696d300000000000000500190003"], 0x2f}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x13c, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x32}, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x4c, 0x2, {{'cbc(blowfish)\x00'}, 0x20, "72f01afe"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x2, {0x4000046, 0xffffffe6, 0xfffb, 0xf7168000}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) kexec_load(0x3, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0xea369000) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3e19, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9522}, 0x1c) 638.963023ms ago: executing program 1 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x1c, r2, 0x5, 0x70bd25, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 557.195889ms ago: executing program 0 (id=115): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000e0)='./file0\x00', 0x1ed) r0 = socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x30b040, 0x0) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='add syz0 127.0.0.1+7003\n\x00', 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./proc/fs/afs/rootcell\x00', 0x1, 0x0) write(r2, &(0x7f0000000350)='syz0:127.0.0.1+7003\n\x00', 0x14) mount$afs(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000700)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/syz0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 556.842571ms ago: executing program 1 (id=116): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000439df481c0012800b00010067656e65766500000c00028008000b40000003ff"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x394, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x364, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x394}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a3100000000110003"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601010000000000000046503b39842deac9000a0000000900020073797a3000000000050001000700000005000400000000000c000780080011400000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) 556.557414ms ago: executing program 3 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x401, 0x100400) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x9, [0x6, 0x276, 0x2, 0x8, 0x4, 0x7, 0x3, 0x4ae, 0x8000, 0x1, 0x8, 0x4, 0x1, 0xe5, 0xa00, 0x92, 0x24d9, 0xe7a, 0xa55a, 0x2, 0xd9c, 0xa107, 0x7, 0x1c, 0x6, 0x0, 0x9, 0xf6c3, 0x6, 0x0, 0x9, 0x1, 0x0, 0x5, 0xc, 0x8, 0x3, 0x4, 0x8000, 0x9, 0x2, 0x5, 0x7, 0xb, 0x6f5, 0x5, 0xa, 0x1ff], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 424.1481ms ago: executing program 2 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2, r3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x806, 0xc, 0xffffffda, 0x1, 0x0, 0x7ff, 0x44380e5e, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x40) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000040000000600128008cc000073697400b5dd40a563c8c11ced3c5635dfe099a9", @ANYRES32=r13, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x42ad3191d18a511a}, 0x0) 423.301667ms ago: executing program 1 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x11}]}, 0x3c}}, 0x0) 351.959145ms ago: executing program 1 (id=120): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10005) r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000050) r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000005e40)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/80, 0x50}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/240, 0xf0}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000a80)=""/120, 0x78}], 0x7}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/11, 0xb}], 0x3, &(0x7f0000000e40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/143, 0x8f}, {&(0x7f0000000fc0)=""/203, 0xcb}], 0x2, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001240)=""/140, 0x8c}], 0x1, &(0x7f0000001340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000013c0)=""/104, 0x68}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/204, 0xcc}, {&(0x7f0000001580)=""/2, 0x2}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f00000016c0)=""/139, 0x8b}, {&(0x7f0000001780)=""/3, 0x3}, {&(0x7f00000017c0)=""/131, 0x83}, {&(0x7f0000001880)=""/94, 0x5e}, {&(0x7f0000001900)=""/33, 0x21}], 0xa}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001a80)=""/57, 0x39}, {&(0x7f0000001ac0)=""/236, 0xec}, {&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/220, 0xdc}, {&(0x7f0000001f00)=""/70, 0x46}, {&(0x7f0000001f80)=""/175, 0xaf}, {&(0x7f0000002040)=""/158, 0x9e}, {&(0x7f0000002100)=""/186, 0xba}], 0xa}}, {{&(0x7f0000002280)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002300)=""/133, 0x85}, {&(0x7f00000023c0)=""/184, 0xb8}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/38, 0x26}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/214, 0xd6}], 0x6, &(0x7f0000003700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003800)=""/65, 0x41}, {&(0x7f0000003880)=""/108, 0x6c}, {&(0x7f0000003900)=""/7, 0x7}], 0x3, &(0x7f0000003980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/141, 0x8d}, {&(0x7f0000005b40)=""/241, 0xf1}, {&(0x7f0000005c40)=""/242, 0xf2}, {&(0x7f0000005d40)=""/97, 0x61}], 0x6}}], 0x9, 0x40, &(0x7f0000006080)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x3, 0x2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 351.650191ms ago: executing program 0 (id=121): socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getrandom(&(0x7f0000002680)=""/197, 0xfffffffffffffe68, 0x2) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x16) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000001c0)={{0x0, 0xea60}, 0x16, 0x5, 0x84000003}, 0x18) (async) write$input_event(r1, &(0x7f00000001c0)={{0x0, 0xea60}, 0x16, 0x5, 0x84000003}, 0x18) writev(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000002640), 0x1004) (async) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000002640), 0x1004) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0x3, 0x1, "4620f63a4e6b5c12020e589e0e549fcfdeb92566761ad1c34caca1abe476fa96"}) (async) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0x3, 0x1, "4620f63a4e6b5c12020e589e0e549fcfdeb92566761ad1c34caca1abe476fa96"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) 280.243705ms ago: executing program 3 (id=122): r0 = fanotify_init(0x4, 0x800) fanotify_mark(r0, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x100000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000640)=0xe8) mount$binder(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000500), 0x4600a, &(0x7f0000000680)={[{@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}], [{@dont_appraise}, {@permit_directio}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '{+\x00*'}}, {@uid_lt={'uid<', r4}}, {@subj_type={'subj_type', 0x3d, 'pipefs\x00'}}, {@subj_type={'subj_type', 0x3d, '-'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/66, 0x42}, {&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/130, 0x82}], 0x4, &(0x7f00000003c0)=""/177, 0xb1}, 0x0) 279.731294ms ago: executing program 1 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r11], 0x54}}, 0x0) syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 85.076496ms ago: executing program 2 (id=124): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x10, &(0x7f0000000100)='noprefix') mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x10, &(0x7f0000000100)='noprefix') (async) 72.470277ms ago: executing program 2 (id=125): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5010) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x1, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0xffffffff, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast}}}}}, 0x0) fstatfs(r0, &(0x7f0000000700)=""/4096) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10000090) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x401, 0x0, 0x76, 0x4, 0x40, 0xc6, 0x0, 0x0, 0x80, 0x401}}, 0x50) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c000000130001002cbd70000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000580140005800800020000000000080001"], 0x3c}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x460, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r10 = dup(0xffffffffffffffff) read$FUSE(r10, &(0x7f0000003c40)={0x2020}, 0x67ec255e) 71.110086ms ago: executing program 2 (id=126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf256300000008000300", @ANYRES32=r3, @ANYBLOB="5ae096b5d62bba1a5e1e59a5af41dcada9b652c27aceb404b2faabca951e1432036f8ca5ec0cde9555426757957128d9b0d2e43d08a62ed5ef7c7ee309a6fc778bb48319358b3fdb90b5e2a0cef95c620880497b991943ff87e08ce320d9b24d612604e93e3fa103feb84f5c3713f5100356463d609371f2d24383af0bd01e2828973a738efb86abd9f346d19b8d165b5dafbbdfb5159729630cf2f353034b12d7b0b7e5a1217eed1c2e00c2614d9583682cdadde261c16f43c4b4"], 0x1c}, 0x1, 0x0, 0x0, 0x200048c1}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETNSID={0x1c, 0x5a, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.727755ms ago: executing program 2 (id=127): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002040), 0x101000, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mq_open(&(0x7f0000000140)='&\x00', 0x1, 0x28, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vcan0\x00'}) 0s ago: executing program 2 (id=128): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000439df481c0012800b00010067656e65766500000c00028008000b40000003ff"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x2a4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x274, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x2a4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a3100000000110003"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601010000000000000046503b39842deac9000a0000000900020073797a3000000000050001000700000005000400000000000c000780080011400000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) kernel console output (not intermixed with test programs): [ 38.044143][ T42] audit: type=1400 audit(1787891194.588:116): avc: denied { rlimitinh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.052205][ T42] audit: type=1400 audit(1787891194.588:117): avc: denied { siginh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.421432][ T42] audit: type=1400 audit(1787891195.978:118): avc: denied { write } for pid=5641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.464754][ T42] audit: type=1400 audit(1787891196.028:119): avc: denied { write } for pid=5644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.521471][ T42] audit: type=1400 audit(1787891196.078:120): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:39593' (ED25519) to the list of known hosts. [ 42.028945][ T5664] cgroup: Unknown subsys name 'net' [ 42.160178][ T5664] cgroup: Unknown subsys name 'cpuset' [ 42.164985][ T5664] cgroup: Unknown subsys name 'rlimit' [ 42.374684][ T5716] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.049339][ T5664] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.495377][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 46.495399][ T42] audit: type=1400 audit(1787891203.058:156): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.701209][ T42] audit: type=1400 audit(1787891203.258:157): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.712853][ T42] audit: type=1400 audit(1787891203.258:158): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.723427][ T42] audit: type=1400 audit(1787891203.258:159): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.730717][ T42] audit: type=1400 audit(1787891203.268:160): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[2523]" dev="sockfs" ino=2523 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.745961][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.749758][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.755381][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.758638][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.758891][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.759335][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.759595][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.759920][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.766461][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.768381][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.768489][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.769716][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.771765][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.772411][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.772557][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.774458][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.774821][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.781285][ T42] audit: type=1400 audit(1787891203.338:161): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.784972][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.787758][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.788215][ T42] audit: type=1400 audit(1787891203.338:162): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.788241][ T42] audit: type=1400 audit(1787891203.338:163): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.791125][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.793175][ T42] audit: type=1400 audit(1787891203.348:164): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.827437][ T42] audit: type=1400 audit(1787891203.368:165): avc: denied { sys_module } for pid=5723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.333772][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.336720][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.339620][ T5728] bridge_slave_0: entered allmulticast mode [ 47.342336][ T5728] bridge_slave_0: entered promiscuous mode [ 47.365344][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.368053][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.370756][ T5723] bridge_slave_0: entered allmulticast mode [ 47.373960][ T5723] bridge_slave_0: entered promiscuous mode [ 47.377238][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.379914][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.382324][ T5728] bridge_slave_1: entered allmulticast mode [ 47.385764][ T5728] bridge_slave_1: entered promiscuous mode [ 47.409575][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.411843][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.414723][ T5723] bridge_slave_1: entered allmulticast mode [ 47.417561][ T5723] bridge_slave_1: entered promiscuous mode [ 47.434337][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.461786][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.465124][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.467709][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.470024][ T5725] bridge_slave_0: entered allmulticast mode [ 47.472943][ T5725] bridge_slave_0: entered promiscuous mode [ 47.475856][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.478685][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.481012][ T5734] bridge_slave_0: entered allmulticast mode [ 47.484143][ T5734] bridge_slave_0: entered promiscuous mode [ 47.487502][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.489844][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.494298][ T5734] bridge_slave_1: entered allmulticast mode [ 47.497921][ T5734] bridge_slave_1: entered promiscuous mode [ 47.502136][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.512777][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.521885][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.525549][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.528398][ T5725] bridge_slave_1: entered allmulticast mode [ 47.531387][ T5725] bridge_slave_1: entered promiscuous mode [ 47.569602][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.573987][ T5728] team0: Port device team_slave_0 added [ 47.577506][ T5728] team0: Port device team_slave_1 added [ 47.581068][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.587038][ T5723] team0: Port device team_slave_0 added [ 47.590405][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.607868][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.619651][ T5723] team0: Port device team_slave_1 added [ 47.645506][ T5734] team0: Port device team_slave_0 added [ 47.653641][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.655880][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.664378][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.669439][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.671690][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.679799][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.685010][ T5725] team0: Port device team_slave_0 added [ 47.688609][ T5725] team0: Port device team_slave_1 added [ 47.692851][ T5734] team0: Port device team_slave_1 added [ 47.695274][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.697517][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.705339][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.732898][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.735103][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.743424][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.757527][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.760632][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.769698][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.787729][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.790068][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.797880][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.802735][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.805018][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.813379][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.820909][ T5728] hsr_slave_0: entered promiscuous mode [ 47.823774][ T5728] hsr_slave_1: entered promiscuous mode [ 47.832186][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.834413][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.843018][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.859576][ T5723] hsr_slave_0: entered promiscuous mode [ 47.861783][ T5723] hsr_slave_1: entered promiscuous mode [ 47.864508][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 47.866308][ T5723] Cannot create hsr debugfs directory [ 47.929178][ T5734] hsr_slave_0: entered promiscuous mode [ 47.931822][ T5734] hsr_slave_1: entered promiscuous mode [ 47.934424][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.937410][ T5734] Cannot create hsr debugfs directory [ 47.968682][ T5725] hsr_slave_0: entered promiscuous mode [ 47.971396][ T5725] hsr_slave_1: entered promiscuous mode [ 47.974022][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 47.976257][ T5725] Cannot create hsr debugfs directory [ 48.220607][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.229789][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.232789][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.236491][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.239051][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.248767][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.252614][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.257714][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.303229][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.309651][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.313503][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.320029][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.326113][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.333242][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.337569][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.343934][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.427074][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.433020][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.435966][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.440568][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.454589][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.461465][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.470930][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.477190][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.539621][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.544538][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.547704][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.551713][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.556999][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.561707][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.567707][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.570429][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.574578][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.593924][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.619145][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.634882][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.637785][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.653583][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.660133][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.663728][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.677854][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.680287][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.707675][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.710023][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.721643][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.763793][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.773837][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.776153][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.788540][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.791222][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.804037][ T5739] Bluetooth: hci1: command tx timeout [ 48.804045][ T5084] Bluetooth: hci0: command tx timeout [ 48.820057][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.841753][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.851322][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.853858][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.870020][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.872351][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.884203][ T5739] Bluetooth: hci3: command tx timeout [ 48.884225][ T5084] Bluetooth: hci2: command tx timeout [ 49.018328][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.046399][ T5728] veth0_vlan: entered promiscuous mode [ 49.053695][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.061933][ T5728] veth1_vlan: entered promiscuous mode [ 49.081837][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.100561][ T5728] veth0_macvtap: entered promiscuous mode [ 49.104732][ T5723] veth0_vlan: entered promiscuous mode [ 49.110390][ T5723] veth1_vlan: entered promiscuous mode [ 49.113979][ T5728] veth1_macvtap: entered promiscuous mode [ 49.133910][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.146260][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.148803][ T5725] veth0_vlan: entered promiscuous mode [ 49.155829][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.170282][ T5725] veth1_vlan: entered promiscuous mode [ 49.205623][ T5723] veth0_macvtap: entered promiscuous mode [ 49.213541][ T5723] veth1_macvtap: entered promiscuous mode [ 49.234911][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.247823][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.255705][ T5725] veth0_macvtap: entered promiscuous mode [ 49.268228][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.274979][ T5734] veth0_vlan: entered promiscuous mode [ 49.280172][ T5725] veth1_macvtap: entered promiscuous mode [ 49.311402][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.312065][ T5734] veth1_vlan: entered promiscuous mode [ 49.315332][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.345739][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.349370][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.349543][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.367458][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.379674][ T5734] veth0_macvtap: entered promiscuous mode [ 49.389432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.391906][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.397341][ T5734] veth1_macvtap: entered promiscuous mode [ 49.402140][ T5728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.431155][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.434942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.449614][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.502151][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.509234][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.514355][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.543372][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.549574][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.617153][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.619884][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.633854][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.639933][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.641894][ T5885] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 49.646457][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.660956][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.662950][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.668158][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.668840][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.732998][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.736061][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.739028][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.741906][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.745308][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783428][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.787237][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.790464][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.795664][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.803327][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807918][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.898574][ T5905] Zero length message leads to an empty skb [ 49.900789][ T5905] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7'. [ 50.352845][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.514289][ T5819] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 50.525379][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 50.529076][ T5819] usb 5-1: Product: syz [ 50.531021][ T5819] usb 5-1: Manufacturer: syz [ 50.550217][ T5819] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input5 [ 50.554359][ T5915] overlayfs: failed to resolve './file0': -2 [ 50.788105][ T5923] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 50.845338][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16'. [ 50.851205][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 50.893545][ T5084] Bluetooth: hci1: command tx timeout [ 50.904872][ T5932] hfsplus: unable to find HFS+ superblock [ 50.914204][ T5932] [U]  [ 50.949146][ T5934] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.953308][ T5934] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.962819][ T5084] Bluetooth: hci3: command tx timeout [ 50.962838][ T5739] Bluetooth: hci2: command tx timeout [ 51.045856][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.048649][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.096531][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.101229][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.174102][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 51.179405][ T1129] ata1.00: configured for UDMA/100 [ 51.343131][ T5812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.356603][ T5956] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 51.360689][ T5956] netlink: 244 bytes leftover after parsing attributes in process `syz.1.24'. [ 51.382756][ T5955] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25'. [ 51.481060][ T5969] 9pnet_fd: p9_fd_create_unix (5969): problem connecting socket: ./file0: -111 [ 51.504374][ T5812] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 51.516210][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.520260][ T5812] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.529378][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.532671][ T5812] usb 7-1: Product: syz [ 51.534073][ T5812] usb 7-1: Manufacturer: syz [ 51.535613][ T5812] usb 7-1: SerialNumber: syz [ 51.537262][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 51.537271][ T42] audit: type=1400 audit(1787891208.098:245): avc: denied { read write } for pid=5972 comm="syz.1.29" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.548600][ T42] audit: type=1400 audit(1787891208.098:246): avc: denied { open } for pid=5972 comm="syz.1.29" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.559125][ T42] audit: type=1400 audit(1787891208.098:247): avc: denied { map } for pid=5972 comm="syz.1.29" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.664494][ T42] audit: type=1400 audit(1787891208.228:248): avc: denied { create } for pid=5972 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.672145][ T42] audit: type=1400 audit(1787891208.228:249): avc: denied { getopt } for pid=5972 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.822707][ T37] IPVS: starting estimator thread 0... [ 51.826472][ T5991] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 51.833601][ T42] audit: type=1400 audit(1787891208.388:250): avc: denied { create } for pid=5990 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.912643][ T5992] IPVS: using max 45 ests per chain, 108000 per kthread [ 51.999654][ T42] audit: type=1400 audit(1787891208.558:251): avc: denied { mount } for pid=5948 comm="syz.2.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.043785][ T6010] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 52.046269][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.32'. [ 52.076976][ T10] usb 7-1: USB disconnect, device number 2 [ 52.286827][ T42] audit: type=1400 audit(1787891208.848:252): avc: denied { read } for pid=6021 comm="syz.3.33" name="0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.294632][ T42] audit: type=1400 audit(1787891208.848:253): avc: denied { open } for pid=6021 comm="syz.3.33" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.302620][ T42] audit: type=1400 audit(1787891208.848:254): avc: denied { ioctl } for pid=6021 comm="syz.3.33" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.376100][ T6024] kvm: kvm [6023]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 52.420093][ T6026] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 52.877643][ T6032] netlink: 72 bytes leftover after parsing attributes in process `syz.3.36'. [ 52.926213][ T5084] Bluetooth: Wrong link type (-71) [ 52.972667][ T5084] Bluetooth: hci1: command tx timeout [ 53.045337][ T5084] Bluetooth: hci2: command tx timeout [ 53.045392][ T5739] Bluetooth: hci3: command tx timeout [ 53.056380][ T6055] netlink: 'syz.2.40': attribute type 29 has an invalid length. [ 53.136137][ T56] usb 5-1: USB disconnect, device number 2 [ 53.191830][ T6075] UBIFS error (pid: 6075): cannot open "ubi0_0", error -19 [ 53.215194][ T164] IPVS: starting estimator thread 0... [ 53.239366][ T6066] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 53.249695][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.252586][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.256393][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.264884][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.281291][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.290424][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.300255][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.305899][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.310613][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.312811][ T6077] IPVS: using max 45 ests per chain, 108000 per kthread [ 53.317984][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.322889][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.325464][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.329802][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.335823][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.342643][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.356407][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.361852][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.377960][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.384375][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.395296][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.399503][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.404580][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.411612][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.415839][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.429583][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.438117][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.445061][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.452112][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.456865][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.460337][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.465302][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.470012][ T6069] overlayfs: failed to resolve './file1': -2 [ 53.474039][ T6102] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 53.478985][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.482665][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.516350][ T6107] Unsupported ieee802154 address type: 0 [ 53.581200][ T5832] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.677300][ T6102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.945396][ T6123] xt_hashlimit: size too large, truncated to 1048576 [ 54.146973][ T6136] syz_tun: entered allmulticast mode [ 54.149782][ T6136] lo: entered allmulticast mode [ 54.254898][ T6135] syz_tun: left allmulticast mode [ 54.565898][ T5084] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 54.571298][ T5084] Bluetooth: hci0: Injecting HCI hardware error event [ 54.576026][ T5084] Bluetooth: hci0: hardware error 0x00 [ 54.979926][ T6168] __nla_validate_parse: 4 callbacks suppressed [ 54.979938][ T6168] netlink: 72 bytes leftover after parsing attributes in process `syz.3.66'. [ 55.021491][ T6170] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 55.042813][ T5737] Bluetooth: hci1: command tx timeout [ 55.123939][ T5737] Bluetooth: hci2: command tx timeout [ 55.142690][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 55.184243][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 55.187442][ T6180] netlink: 'syz.3.71': attribute type 30 has an invalid length. [ 55.205964][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 55.208767][ T6180] netlink: 'syz.3.71': attribute type 30 has an invalid length. [ 55.223828][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.227453][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.230982][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.235424][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.256474][ T6188] netlink: 'syz.3.73': attribute type 15 has an invalid length. [ 55.257299][ T6187] netlink: 'syz.3.73': attribute type 15 has an invalid length. [ 55.526399][ T5737] Bluetooth: hci4: command 0x1003 tx timeout [ 55.526957][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.554121][ T6194] netlink: 72 bytes leftover after parsing attributes in process `syz.3.75'. [ 55.584508][ T6200] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 55.614325][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 55.616883][ T6207] netlink: 112 bytes leftover after parsing attributes in process `syz.2.80'. [ 55.628971][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 55.644431][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 55.669699][ T5832] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.672486][ T5832] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.675287][ T5832] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.678253][ T5832] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.725938][ T6219] nvme_rdma: malformed address passed: 1:4420 [ 55.729471][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 55.907804][ T6231] bridge_slave_1: left allmulticast mode [ 55.909833][ T6231] bridge_slave_1: left promiscuous mode [ 55.912808][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.920840][ T6231] bridge_slave_0: left allmulticast mode [ 55.922894][ T6231] bridge_slave_0: left promiscuous mode [ 55.924876][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.934915][ T6233] netlink: 'syz.2.89': attribute type 21 has an invalid length. [ 56.095731][ T6239] input: syz1 as /devices/virtual/input/input6 [ 56.299148][ T6254] Can't find a SQUASHFS superblock on nullb0 [ 56.360851][ T6256] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.363722][ T6258] tmpfs: Unknown parameter 'mpol-prefer' [ 56.542208][ T6263] Bluetooth: MGMT ver 1.23 [ 56.683691][ T5084] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 56.766108][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 56.766121][ T42] audit: type=1400 audit(1788415501.288:344): avc: denied { write } for pid=6230 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.781870][ T42] audit: type=1400 audit(1788415501.298:345): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.819875][ T42] audit: type=1400 audit(1788415501.336:346): avc: denied { read } for pid=6277 comm="syz.3.103" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.827864][ T42] audit: type=1400 audit(1788415501.336:347): avc: denied { open } for pid=6277 comm="syz.3.103" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.884131][ T42] audit: type=1400 audit(1788415501.404:348): avc: denied { mounton } for pid=6284 comm="syz.1.104" path="/22/my_sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 56.916712][ T42] audit: type=1400 audit(1788415501.433:349): avc: denied { lock } for pid=6287 comm="syz.1.105" path="socket:[12475]" dev="sockfs" ino=12475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 56.929808][ T6288] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 57.058132][ T6296] xt_hashlimit: size too large, truncated to 1048576 [ 57.104670][ T6300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6300 comm=syz.1.109 [ 57.116223][ T42] audit: type=1400 audit(1788415501.628:350): avc: denied { ioctl } for pid=6291 comm="syz.2.107" path="socket:[12117]" dev="sockfs" ino=12117 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.117030][ T6300] Illegal XDP return value 4232790016 on prog (id 77) dev N/A, expect packet loss! [ 57.137219][ T6302] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 57.137519][ T42] audit: type=1400 audit(1788415501.647:351): avc: denied { name_bind } for pid=6294 comm="syz.3.108" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.184361][ T6300] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 57.187564][ T6300] dummy0: entered promiscuous mode [ 57.189373][ T42] audit: type=1400 audit(1788415501.696:352): avc: denied { write } for pid=6294 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.197824][ T42] audit: type=1400 audit(1788415501.696:353): avc: denied { nlmsg_write } for pid=6294 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.233732][ T6307] netlink: 'syz.1.110': attribute type 7 has an invalid length. [ 57.416668][ T6319] bridge2: entered allmulticast mode [ 57.474785][ T6330] kAFS: unable to lookup cell 'syz0' [ 57.591077][ T6340] syzkaller0: entered promiscuous mode [ 57.593696][ T6340] syzkaller0: entered allmulticast mode [ 57.632485][ T6350] ======================================================= [ 57.632485][ T6350] WARNING: The mand mount option has been deprecated and [ 57.632485][ T6350] and is ignored by this kernel. Remove the mand [ 57.632485][ T6350] option from the mount to silence this warning. [ 57.632485][ T6350] ======================================================= [ 57.648072][ T6350] overlayfs: overlapping lowerdir path [ 57.727489][ T6356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.733947][ T6356] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 57.736766][ T5805] bond_slave_0: entered promiscuous mode [ 57.738577][ T5805] bond_slave_1: entered promiscuous mode [ 57.747912][ T6356] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 57.756086][ T6356] bond_slave_0: left promiscuous mode [ 57.757879][ T6356] bond_slave_1: left promiscuous mode [ 57.763900][ T6351] Console: switching to colour dummy device 80x25 [ 57.770411][ T6356] bond1: (slave macvlan2): Releasing backup interface [ 57.773238][ T6356] bond1: (slave macvlan2): the permanent HWaddr of slave - 42:b2:4b:3c:be:8c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 57.788664][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.797271][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.808656][ T6356] bond0 (unregistering): Released all slaves [ 57.853104][ T6361] cgroup: noprefix used incorrectly [ 57.859003][ T6361] cgroup: noprefix used incorrectly [ 58.009915][ T6351] ============================================================================= [ 58.012110][ T6351] [ 58.012116][ T6351] ====================================================== [ 58.012119][ T6351] WARNING: possible circular locking dependency detected [ 58.012124][ T6351] syzkaller #0 Not tainted [ 58.012129][ T6351] ------------------------------------------------------ [ 58.012132][ T6351] syz.0.121/6351 is trying to acquire lock: [ 58.012138][ T6351] ffffffff8ecf5cc0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 58.012218][ T6351] [ 58.012218][ T6351] but task is already holding lock: [ 58.012222][ T6351] ffff888028613618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 58.012267][ T6351] [ 58.012267][ T6351] which lock already depends on the new lock. [ 58.012267][ T6351] [ 58.012271][ T6351] [ 58.012271][ T6351] the existing dependency chain (in reverse order) is: [ 58.012274][ T6351] [ 58.012274][ T6351] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 58.012287][ T6351] lock_acquire+0x1b9/0x370 [ 58.012302][ T6351] _raw_spin_lock_irqsave+0x3a/0x60 [ 58.012335][ T6351] __refill_objects_node+0x120/0xaa0 [ 58.012347][ T6351] refill_objects+0x58/0x410 [ 58.012358][ T6351] __pcs_replace_empty_main+0x372/0x680 [ 58.012370][ T6351] __kmalloc_noprof+0x66b/0x820 [ 58.012382][ T6351] tty_buffer_alloc+0x29f/0x320 [ 58.012398][ T6351] __tty_buffer_request_room+0x129/0x2c0 [ 58.012413][ T6351] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 58.012429][ T6351] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 58.012446][ T6351] pty_write+0xd2/0x100 [ 58.012458][ T6351] n_tty_write+0xa9e/0x1160 [ 58.012468][ T6351] file_tty_write.isra.0+0x4d2/0x890 [ 58.012478][ T6351] vfs_write+0x6af/0x1050 [ 58.012491][ T6351] ksys_write+0x12a/0x250 [ 58.012503][ T6351] do_syscall_64+0x123/0x790 [ 58.012512][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.012522][ T6351] [ 58.012522][ T6351] -> #2 (&port->lock#2){-...}-{3:3}: [ 58.012537][ T6351] lock_acquire+0x1b9/0x370 [ 58.012551][ T6351] _raw_spin_lock_irq_disable+0x5e/0x90 [ 58.012567][ T6351] tty_port_tty_get+0x1f/0xf0 [ 58.012576][ T6351] tty_port_default_wakeup+0x15/0x60 [ 58.012585][ T6351] serial8250_tx_chars+0x68f/0x860 [ 58.012595][ T6351] __start_tx+0x3e4/0x490 [ 58.012605][ T6351] serial8250_start_tx+0x368/0x540 [ 58.012614][ T6351] __uart_start+0x295/0x510 [ 58.012627][ T6351] uart_write+0x211/0xb20 [ 58.012635][ T6351] n_tty_write+0x431/0x1160 [ 58.012646][ T6351] file_tty_write.isra.0+0x4d2/0x890 [ 58.012654][ T6351] redirected_tty_write+0xd4/0x120 [ 58.012662][ T6351] vfs_write+0x6af/0x1050 [ 58.012673][ T6351] ksys_write+0x12a/0x250 [ 58.012685][ T6351] do_syscall_64+0x123/0x790 [ 58.012695][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.012705][ T6351] [ 58.012705][ T6351] -> #1 (&port_lock_key){-...}-{3:3}: [ 58.012717][ T6351] lock_acquire+0x1b9/0x370 [ 58.012731][ T6351] _raw_spin_lock_irqsave+0x3a/0x60 [ 58.012746][ T6351] serial8250_console_write+0x177/0x1a50 [ 58.012757][ T6351] console_flush_one_record+0x78e/0xf10 [ 58.012768][ T6351] console_unlock+0x103/0x260 [ 58.012778][ T6351] vprintk_emit+0x407/0x6b0 [ 58.012788][ T6351] _printk+0xcf/0x110 [ 58.012796][ T6351] register_console.cold+0xc0/0x248 [ 58.012806][ T6351] univ8250_console_init+0x6f/0x80 [ 58.012816][ T6351] console_init+0x3d5/0x5b0 [ 58.012830][ T6351] start_kernel+0x314/0x490 [ 58.012840][ T6351] x86_64_start_reservations+0x24/0x30 [ 58.012851][ T6351] x86_64_start_kernel+0x12b/0x130 [ 58.012861][ T6351] common_startup_64+0x13e/0x158 [ 58.012872][ T6351] [ 58.012872][ T6351] -> #0 (console_owner){....}-{0:0}: [ 58.012884][ T6351] check_prev_add+0xeb/0xe60 [ 58.012898][ T6351] __lock_acquire+0x1492/0x1ec0 [ 58.012912][ T6351] lock_acquire+0x1b9/0x370 [ 58.012926][ T6351] console_lock_spinning_enable+0x72/0x80 [ 58.012936][ T6351] console_flush_one_record+0x737/0xf10 [ 58.012947][ T6351] console_unlock+0x103/0x260 [ 58.012956][ T6351] vprintk_emit+0x407/0x6b0 [ 58.012967][ T6351] _printk+0xcf/0x110 [ 58.012975][ T6351] __slab_bug+0x4f/0xb0 [ 58.012990][ T6351] slab_bug+0x5d/0x80 [ 58.012999][ T6351] __kmem_cache_shutdown.cold+0x39/0x177 [ 58.013010][ T6351] kmem_cache_destroy+0x73/0x190 [ 58.013020][ T6351] virtio_gpu_free_vbufs+0x38/0x80 [ 58.013034][ T6351] virtio_gpu_release+0x5c/0x1c0 [ 58.013044][ T6351] drm_dev_put.part.0+0xbd/0x140 [ 58.013053][ T6351] drm_dev_put+0x1f/0x30 [ 58.013061][ T6351] virtio_dev_remove+0xb8/0x170 [ 58.013070][ T6351] device_remove+0xcb/0x180 [ 58.013078][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.013089][ T6351] bus_remove_device+0x2bc/0x560 [ 58.013104][ T6351] device_del+0x376/0x9b0 [ 58.013112][ T6351] device_unregister+0x1d/0xe0 [ 58.013120][ T6351] unregister_virtio_device+0x39/0x60 [ 58.013129][ T6351] virtio_pci_remove+0x7c/0x110 [ 58.013142][ T6351] pci_device_remove+0xb2/0x1d0 [ 58.013155][ T6351] device_remove+0xcb/0x180 [ 58.013163][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.013174][ T6351] pci_stop_bus_device+0x120/0x160 [ 58.013189][ T6351] pci_stop_and_remove_bus_device+0x58/0xa0 [ 58.013204][ T6351] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 58.013220][ T6351] remove_store+0x123/0x140 [ 58.013230][ T6351] dev_attr_store+0x58/0x80 [ 58.013241][ T6351] sysfs_kf_write+0xf2/0x150 [ 58.013254][ T6351] kernfs_fop_write_iter+0x3e0/0x5f0 [ 58.013266][ T6351] vfs_write+0x6af/0x1050 [ 58.013277][ T6351] ksys_write+0x12a/0x250 [ 58.013289][ T6351] do_syscall_64+0x123/0x790 [ 58.013298][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.013308][ T6351] [ 58.013308][ T6351] other info that might help us debug this: [ 58.013308][ T6351] [ 58.013311][ T6351] Chain exists of: [ 58.013311][ T6351] console_owner --> &port->lock#2 --> &n->list_lock [ 58.013311][ T6351] [ 58.013327][ T6351] Possible unsafe locking scenario: [ 58.013327][ T6351] [ 58.013330][ T6351] CPU0 CPU1 [ 58.013333][ T6351] ---- ---- [ 58.013335][ T6351] lock(&n->list_lock); [ 58.013341][ T6351] lock(&port->lock#2); [ 58.013350][ T6351] lock(&n->list_lock); [ 58.013356][ T6351] lock(console_owner); [ 58.013362][ T6351] [ 58.013362][ T6351] *** DEADLOCK *** [ 58.013362][ T6351] [ 58.013364][ T6351] locks held by syz.0.121/6351: 11, last CPU#2: [ 58.013372][ T6351] #0: ffff8880398daef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 58.013393][ T6351] #1: ffff888027be4460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 58.013420][ T6351] #2: ffff888057477880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 58.013445][ T6351] #3: ffffffff8fa7d5e0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 58.013475][ T6351] #4: ffff8880232aa1f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 58.013499][ T6351] #5: ffff8880234d41b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 58.013523][ T6351] #6: ffffffff8ec7a830 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 58.013545][ T6351] #7: ffffffff8ef940c0 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 58.013568][ T6351] #8: ffff888028613618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 58.013596][ T6351] #9: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 58.013618][ T6351] #10: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 58.013642][ T6351] [ 58.013642][ T6351] stack backtrace: [ 58.013647][ T6351] CPU: 2 UID: 0 PID: 6351 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) [ 58.013659][ T6351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.013665][ T6351] Call Trace: [ 58.013669][ T6351] [ 58.013673][ T6351] dump_stack_lvl+0x100/0x190 [ 58.013687][ T6351] print_circular_bug.cold+0x178/0x1be [ 58.013704][ T6351] check_noncircular+0x146/0x160 [ 58.013720][ T6351] check_prev_add+0xeb/0xe60 [ 58.013735][ T6351] __lock_acquire+0x1492/0x1ec0 [ 58.013752][ T6351] lock_acquire+0x1b9/0x370 [ 58.013767][ T6351] ? console_lock_spinning_enable+0x61/0x80 [ 58.013778][ T6351] ? console_lock_spinning_enable+0x4a/0x80 [ 58.013790][ T6351] console_lock_spinning_enable+0x72/0x80 [ 58.013801][ T6351] ? console_lock_spinning_enable+0x61/0x80 [ 58.013812][ T6351] console_flush_one_record+0x737/0xf10 [ 58.013824][ T6351] ? __pfx_console_flush_one_record+0x10/0x10 [ 58.013838][ T6351] ? is_printk_cpu_sync_owner+0x32/0x40 [ 58.013851][ T6351] console_unlock+0x103/0x260 [ 58.013864][ T6351] ? __pfx_console_unlock+0x10/0x10 [ 58.013875][ T6351] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.013886][ T6351] ? _printk+0xcf/0x110 [ 58.013896][ T6351] vprintk_emit+0x407/0x6b0 [ 58.013908][ T6351] ? __pfx_vprintk_emit+0x10/0x10 [ 58.013921][ T6351] _printk+0xcf/0x110 [ 58.013930][ T6351] ? __pfx__printk+0x10/0x10 [ 58.013940][ T6351] ? do_raw_spin_lock+0x128/0x260 [ 58.013951][ T6351] __slab_bug+0x4f/0xb0 [ 58.013962][ T6351] slab_bug+0x5d/0x80 [ 58.013972][ T6351] __kmem_cache_shutdown.cold+0x39/0x177 [ 58.013990][ T6351] kmem_cache_destroy+0x73/0x190 [ 58.014001][ T6351] virtio_gpu_free_vbufs+0x38/0x80 [ 58.014014][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.014025][ T6351] virtio_gpu_release+0x5c/0x1c0 [ 58.014035][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.014046][ T6351] drm_dev_put.part.0+0xbd/0x140 [ 58.014055][ T6351] drm_dev_put+0x1f/0x30 [ 58.014064][ T6351] virtio_dev_remove+0xb8/0x170 [ 58.014073][ T6351] ? __pfx_virtio_dev_remove+0x10/0x10 [ 58.014083][ T6351] device_remove+0xcb/0x180 [ 58.014092][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.014105][ T6351] bus_remove_device+0x2bc/0x560 [ 58.014121][ T6351] ? __pfx_bus_remove_device+0x10/0x10 [ 58.014136][ T6351] ? __pfx_device_remove_attrs+0x10/0x10 [ 58.014153][ T6351] device_del+0x376/0x9b0 [ 58.014163][ T6351] ? __pfx_device_del+0x10/0x10 [ 58.014172][ T6351] ? __pfx___might_resched+0x10/0x10 [ 58.014186][ T6351] ? __pfx_pci_device_is_present+0x10/0x10 [ 58.014199][ T6351] device_unregister+0x1d/0xe0 [ 58.014208][ T6351] unregister_virtio_device+0x39/0x60 [ 58.014218][ T6351] virtio_pci_remove+0x7c/0x110 [ 58.014232][ T6351] pci_device_remove+0xb2/0x1d0 [ 58.014246][ T6351] ? __pfx_pci_device_remove+0x10/0x10 [ 58.014261][ T6351] device_remove+0xcb/0x180 [ 58.014270][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.014283][ T6351] pci_stop_bus_device+0x120/0x160 [ 58.014299][ T6351] pci_stop_and_remove_bus_device+0x58/0xa0 [ 58.014315][ T6351] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 58.014332][ T6351] remove_store+0x123/0x140 [ 58.014342][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.014352][ T6351] ? find_held_lock+0x2b/0x80 [ 58.014363][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.014378][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.014392][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.014402][ T6351] dev_attr_store+0x58/0x80 [ 58.014413][ T6351] ? __pfx_dev_attr_store+0x10/0x10 [ 58.014425][ T6351] sysfs_kf_write+0xf2/0x150 [ 58.014439][ T6351] kernfs_fop_write_iter+0x3e0/0x5f0 [ 58.014452][ T6351] ? __pfx_sysfs_kf_write+0x10/0x10 [ 58.014467][ T6351] vfs_write+0x6af/0x1050 [ 58.014479][ T6351] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.014493][ T6351] ? __pfx_vfs_write+0x10/0x10 [ 58.014505][ T6351] ? find_held_lock+0x2b/0x80 [ 58.014520][ T6351] ksys_write+0x12a/0x250 [ 58.014532][ T6351] ? __pfx_ksys_write+0x10/0x10 [ 58.014546][ T6351] do_syscall_64+0x123/0x790 [ 58.014557][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.014569][ T6351] RIP: 0033:0x7f719c39e159 [ 58.014577][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.014587][ T6351] RSP: 002b:00007f719a5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.014596][ T6351] RAX: ffffffffffffffda RBX: 00007f719c626090 RCX: 00007f719c39e159 [ 58.014602][ T6351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 58.014608][ T6351] RBP: 00007f719c435024 R08: 0000000000000000 R09: 0000000000000000 [ 58.014614][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.014620][ T6351] R13: 00007f719c626128 R14: 00007f719c626090 R15: 00007fff5f462fa8 [ 58.014629][ T6351] [ 58.416946][ T6351] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 58.421158][ T6351] ----------------------------------------------------------------------------- [ 58.421158][ T6351] [ 58.425812][ T6351] Object 0xffff88802b720f50 @offset=3920 [ 58.427826][ T6351] Object 0xffff88802b721068 @offset=4200 [ 58.429975][ T6351] Object 0xffff88802b721180 @offset=4480 [ 58.432200][ T6351] Object 0xffff88802b721298 @offset=4760 [ 58.434454][ T6351] Object 0xffff88802b7213b0 @offset=5040 [ 58.437185][ T6351] Object 0xffff88802b7214c8 @offset=5320 [ 58.439668][ T6351] Slab 0xffffea0000adc800 objects=29 used=6 fp=0xffff88802b721810 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 58.445146][ T6351] ------------[ cut here ]------------ [ 58.447581][ T6351] 1 [ 58.447591][ T6351] WARNING: mm/slub.c:1245 at __slab_err+0x15/0x20, CPU#2: syz.0.121/6351 [ 58.451571][ T6351] Modules linked in: [ 58.453303][ T6351] CPU: 2 UID: 0 PID: 6351 Comm: syz.0.121 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.458101][ T6351] Tainted: [B]=BAD_PAGE [ 58.460475][ T6351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.464988][ T6351] RIP: 0010:__slab_err+0x15/0x20 [ 58.466908][ T6351] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 58.475123][ T6351] RSP: 0018:ffffc90003647740 EFLAGS: 00010093 [ 58.477389][ T6351] RAX: 0000000000000000 RBX: ffffc90003647790 RCX: 0000000000000001 [ 58.480917][ T6351] RDX: ffff88802ee00000 RSI: ffffffff81c769bd RDI: ffff88802ee00000 [ 58.484399][ T6351] RBP: ffff888028613618 R08: 0000000000000007 R09: 0000000000000000 [ 58.487882][ T6351] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 58.491323][ T6351] R13: ffff88802b721fb8 R14: ffff888028613600 R15: ffffea0000adc800 [ 58.495500][ T6351] FS: 00007f719a5d56c0(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000 [ 58.500660][ T6351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.503722][ T6351] CR2: 000000110c45636b CR3: 000000005d5f5000 CR4: 0000000000352ef0 [ 58.506783][ T6351] Call Trace: [ 58.508419][ T6351] [ 58.509653][ T6351] __kmem_cache_shutdown.cold+0x16e/0x177 [ 58.511791][ T6351] kmem_cache_destroy+0x73/0x190 [ 58.513530][ T6351] virtio_gpu_free_vbufs+0x38/0x80 [ 58.515521][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.517730][ T6351] virtio_gpu_release+0x5c/0x1c0 [ 58.520008][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.522736][ T6351] drm_dev_put.part.0+0xbd/0x140 [ 58.525798][ T6351] drm_dev_put+0x1f/0x30 [ 58.527592][ T6351] virtio_dev_remove+0xb8/0x170 [ 58.529838][ T6351] ? __pfx_virtio_dev_remove+0x10/0x10 [ 58.532320][ T6351] device_remove+0xcb/0x180 [ 58.534324][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.536981][ T6351] bus_remove_device+0x2bc/0x560 [ 58.538743][ T6351] ? __pfx_bus_remove_device+0x10/0x10 [ 58.540550][ T6351] ? __pfx_device_remove_attrs+0x10/0x10 [ 58.542627][ T6351] device_del+0x376/0x9b0 [ 58.544194][ T6351] ? __pfx_device_del+0x10/0x10 [ 58.545793][ T6351] ? __pfx___might_resched+0x10/0x10 [ 58.547466][ T6351] ? __pfx_pci_device_is_present+0x10/0x10 [ 58.549280][ T6351] device_unregister+0x1d/0xe0 [ 58.550775][ T6351] unregister_virtio_device+0x39/0x60 [ 58.552469][ T6351] virtio_pci_remove+0x7c/0x110 [ 58.554017][ T6351] pci_device_remove+0xb2/0x1d0 [ 58.555539][ T6351] ? __pfx_pci_device_remove+0x10/0x10 [ 58.557307][ T6351] device_remove+0xcb/0x180 [ 58.558827][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.560874][ T6351] pci_stop_bus_device+0x120/0x160 [ 58.562854][ T6351] pci_stop_and_remove_bus_device+0x58/0xa0 [ 58.564864][ T6351] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 58.566944][ T6351] remove_store+0x123/0x140 [ 58.568371][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.569926][ T6351] ? find_held_lock+0x2b/0x80 [ 58.571381][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.572978][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.574737][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.576572][ T6351] dev_attr_store+0x58/0x80 [ 58.578163][ T6351] ? __pfx_dev_attr_store+0x10/0x10 [ 58.579868][ T6351] sysfs_kf_write+0xf2/0x150 [ 58.581314][ T6351] kernfs_fop_write_iter+0x3e0/0x5f0 [ 58.582961][ T6351] ? __pfx_sysfs_kf_write+0x10/0x10 [ 58.584584][ T6351] vfs_write+0x6af/0x1050 [ 58.585934][ T6351] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.587969][ T6351] ? __pfx_vfs_write+0x10/0x10 [ 58.589538][ T6351] ? find_held_lock+0x2b/0x80 [ 58.591084][ T6351] ksys_write+0x12a/0x250 [ 58.592572][ T6351] ? __pfx_ksys_write+0x10/0x10 [ 58.594172][ T6351] do_syscall_64+0x123/0x790 [ 58.595691][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.597627][ T6351] RIP: 0033:0x7f719c39e159 [ 58.599186][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.605201][ T6351] RSP: 002b:00007f719a5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.607870][ T6351] RAX: ffffffffffffffda RBX: 00007f719c626090 RCX: 00007f719c39e159 [ 58.610451][ T6351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 58.613205][ T6351] RBP: 00007f719c435024 R08: 0000000000000000 R09: 0000000000000000 [ 58.615790][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.618287][ T6351] R13: 00007f719c626128 R14: 00007f719c626090 R15: 00007fff5f462fa8 [ 58.620747][ T6351] [ 58.621746][ T6351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.624100][ T6351] CPU: 2 UID: 0 PID: 6351 Comm: syz.0.121 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.627564][ T6351] Tainted: [B]=BAD_PAGE [ 58.629042][ T6351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.632651][ T6351] Call Trace: [ 58.633776][ T6351] [ 58.634762][ T6351] dump_stack_lvl+0x100/0x190 [ 58.636405][ T6351] vpanic+0x553/0x970 [ 58.637736][ T6351] ? __pfx_vpanic+0x10/0x10 [ 58.639145][ T6351] ? lock_release+0x24d/0x310 [ 58.640752][ T6351] panic+0xd1/0xe0 [ 58.642049][ T6351] ? __pfx_panic+0x10/0x10 [ 58.643663][ T6351] check_panic_on_warn.cold+0x19/0x34 [ 58.645484][ T6351] ? __slab_err+0x15/0x20 [ 58.646833][ T6351] __warn.cold+0x191/0x318 [ 58.648214][ T6351] __report_bug+0x30f/0x440 [ 58.649606][ T6351] ? __slab_err+0x15/0x20 [ 58.651076][ T6351] ? __pfx___report_bug+0x10/0x10 [ 58.652656][ T6351] ? irq_work_queue+0xd1/0x100 [ 58.654166][ T6351] ? __wake_up_klogd+0xe5/0x140 [ 58.655745][ T6351] ? vprintk_emit+0x1c9/0x6b0 [ 58.657325][ T6351] ? __pfx_vprintk_emit+0x10/0x10 [ 58.658990][ T6351] ? __pfx_vprintk_emit+0x10/0x10 [ 58.660787][ T6351] ? __slab_err+0x15/0x20 [ 58.662146][ T6351] report_bug+0xb3/0x220 [ 58.663464][ T6351] ? __slab_err+0x15/0x20 [ 58.664822][ T6351] handle_bug+0x16a/0x2a0 [ 58.666168][ T6351] exc_invalid_op+0x17/0x50 [ 58.667758][ T6351] asm_exc_invalid_op+0x1a/0x20 [ 58.669360][ T6351] RIP: 0010:__slab_err+0x15/0x20 [ 58.670948][ T6351] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 58.677245][ T6351] RSP: 0018:ffffc90003647740 EFLAGS: 00010093 [ 58.679201][ T6351] RAX: 0000000000000000 RBX: ffffc90003647790 RCX: 0000000000000001 [ 58.681785][ T6351] RDX: ffff88802ee00000 RSI: ffffffff81c769bd RDI: ffff88802ee00000 [ 58.684337][ T6351] RBP: ffff888028613618 R08: 0000000000000007 R09: 0000000000000000 [ 58.686762][ T6351] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 58.689258][ T6351] R13: ffff88802b721fb8 R14: ffff888028613600 R15: ffffea0000adc800 [ 58.692131][ T6351] ? add_taint+0x6d/0xb0 [ 58.693591][ T6351] __kmem_cache_shutdown.cold+0x16e/0x177 [ 58.695512][ T6351] kmem_cache_destroy+0x73/0x190 [ 58.697054][ T6351] virtio_gpu_free_vbufs+0x38/0x80 [ 58.698758][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.700465][ T6351] virtio_gpu_release+0x5c/0x1c0 [ 58.702011][ T6351] ? __pfx_virtio_gpu_release+0x10/0x10 [ 58.703847][ T6351] drm_dev_put.part.0+0xbd/0x140 [ 58.705397][ T6351] drm_dev_put+0x1f/0x30 [ 58.706801][ T6351] virtio_dev_remove+0xb8/0x170 [ 58.708408][ T6351] ? __pfx_virtio_dev_remove+0x10/0x10 [ 58.710339][ T6351] device_remove+0xcb/0x180 [ 58.711813][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.713845][ T6351] bus_remove_device+0x2bc/0x560 [ 58.715376][ T6351] ? __pfx_bus_remove_device+0x10/0x10 [ 58.717065][ T6351] ? __pfx_device_remove_attrs+0x10/0x10 [ 58.718934][ T6351] device_del+0x376/0x9b0 [ 58.720326][ T6351] ? __pfx_device_del+0x10/0x10 [ 58.721883][ T6351] ? __pfx___might_resched+0x10/0x10 [ 58.723696][ T6351] ? __pfx_pci_device_is_present+0x10/0x10 [ 58.725559][ T6351] device_unregister+0x1d/0xe0 [ 58.727092][ T6351] unregister_virtio_device+0x39/0x60 [ 58.728937][ T6351] virtio_pci_remove+0x7c/0x110 [ 58.730442][ T6351] pci_device_remove+0xb2/0x1d0 [ 58.731985][ T6351] ? __pfx_pci_device_remove+0x10/0x10 [ 58.733790][ T6351] device_remove+0xcb/0x180 [ 58.735193][ T6351] device_release_driver_internal+0x44e/0x620 [ 58.737070][ T6351] pci_stop_bus_device+0x120/0x160 [ 58.738785][ T6351] pci_stop_and_remove_bus_device+0x58/0xa0 [ 58.740632][ T6351] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 58.742885][ T6351] remove_store+0x123/0x140 [ 58.744669][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.746429][ T6351] ? find_held_lock+0x2b/0x80 [ 58.747954][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.749504][ T6351] ? sysfs_file_kobj+0xe4/0x290 [ 58.751215][ T6351] ? __pfx_remove_store+0x10/0x10 [ 58.752880][ T6351] dev_attr_store+0x58/0x80 [ 58.754484][ T6351] ? __pfx_dev_attr_store+0x10/0x10 [ 58.756090][ T6351] sysfs_kf_write+0xf2/0x150 [ 58.757522][ T6351] kernfs_fop_write_iter+0x3e0/0x5f0 [ 58.759295][ T6351] ? __pfx_sysfs_kf_write+0x10/0x10 [ 58.760920][ T6351] vfs_write+0x6af/0x1050 [ 58.762292][ T6351] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.764323][ T6351] ? __pfx_vfs_write+0x10/0x10 [ 58.766221][ T6351] ? find_held_lock+0x2b/0x80 [ 58.768031][ T6351] ksys_write+0x12a/0x250 [ 58.769716][ T6351] ? __pfx_ksys_write+0x10/0x10 [ 58.771312][ T6351] do_syscall_64+0x123/0x790 [ 58.772914][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.774757][ T6351] RIP: 0033:0x7f719c39e159 [ 58.776169][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.782364][ T6351] RSP: 002b:00007f719a5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.784936][ T6351] RAX: ffffffffffffffda RBX: 00007f719c626090 RCX: 00007f719c39e159 [ 58.787515][ T6351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 58.790600][ T6351] RBP: 00007f719c435024 R08: 0000000000000000 R09: 0000000000000000 [ 58.793267][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.795756][ T6351] R13: 00007f719c626128 R14: 00007f719c626090 R15: 00007fff5f462fa8 [ 58.798246][ T6351] [ 58.799853][ T6351] Kernel Offset: disabled [ 58.801204][ T6351] Rebooting in 86400 seconds..