last executing test programs: 2m26.314610495s ago: executing program 1 (id=2): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) 2m10.835345711s ago: executing program 32 (id=2): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) 1m42.910574617s ago: executing program 4 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x2c, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 1m42.850294285s ago: executing program 4 (id=356): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b9d}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x1000002, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0xfffffffc, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x3, 0x4], [0x9, 0x3, 0x6, 0x9, 0x24, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0xa, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x96f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d26, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0x80, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x0, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x272, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x100000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000002090102000000000000000001000001040002002c00020037000180080001006401010008000200ac1414aa1400018008000100ac1e010108000200ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x25dfdbfd, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, r2}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x3504, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1m42.609944498s ago: executing program 4 (id=357): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000500)=@userptr={0x5, 0x5, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xd1, 0x6, 0xc, 0x6, '\t\x00'}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(r0, &(0x7f00000001c0)='./bus\x00', 0x1cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x800, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2820, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write(r3, &(0x7f0000000000)='3', 0x4e) socket$alg(0x26, 0x5, 0x0) connect(r3, 0x0, 0x0) 1m42.539808567s ago: executing program 4 (id=358): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x20001080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @loopback}}, [0x9, 0x4, 0xffffffff80000001, 0x1, 0x3, 0xe, 0x7fff, 0xc18, 0x9, 0x2, 0x2, 0x728, 0x82, 0x1, 0x3ff]}, &(0x7f0000000140)=0x100) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x2000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000640)=[{0x0, 0x1, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x6}, 0x1, 0xfe}], 0x20) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) close(r3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x20001080) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @loopback}}, [0x9, 0x4, 0xffffffff80000001, 0x1, 0x3, 0xe, 0x7fff, 0xc18, 0x9, 0x2, 0x2, 0x728, 0x82, 0x1, 0x3ff]}, &(0x7f0000000140)=0x100) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x2000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000640)=[{0x0, 0x1, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x6}, 0x1, 0xfe}], 0x20) (async) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000400)=0xb8e7) (async) 1m41.660131409s ago: executing program 4 (id=361): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d8, 0x320, 0x320, 0x258, 0x198, 0x198, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, &(0x7f0000000200), {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010102, 0xff000000, 0x0, 'veth1_vlan\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x15, 0x1, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_0\x00', 'veth1\x00', {}, {}, 0x16, 0x3, 0x50}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @loopback, 0xff000000, 0x0, 'dvmrp0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x62, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0xffffffff, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x20000000, 0x6, @local, 0x4e22}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x49d75f7587eec508, 0x400, 0x1, 0x1}}, @common=@inet=@set3={{0x50}, {{0xffffffffffffffff, 0x6, 0x5}, {0x4, 0x10}, {0xcf, 0x62c}, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1abbc377, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@multicast2, 0x4d2, 0xa, 0x2b}, @in=@multicast2, 0x4, 0x34ff}}, 0x40}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="60d8a0c95fbfc68418192d2790890927e0f0b17f3346a0423c8a66449a2340f1a53775cd95f3663cadeccf028d0e3bb7584a6e641a4d7ef344fb1005be616932969ee5439b9320ebdb82be60dfe1f93938b352e3c76c21e7423677371118bcafeaef2408fe5daeb77037a4a993d7954119096337a4aea207227e31e7ddee38fd3a95512a77afc99250ca4b249ca26d65a723c7d3aa56223a9d9eb84d52e8aa62f10b9835917c2272a49dba8b27cf404a8b3b8a546d9b76c7012151af313afe93f3fbfbae291605171697", @ANYRES32=0x0, @ANYBLOB="0000000100b291b94f001d00", @ANYBLOB="f15b39"], 0x5c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 1m41.599302127s ago: executing program 4 (id=362): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x7fff, 0x2}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="fe0000000100005c8000000000000000"], 0x44201) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$USBDEVFS_GET_SPEED(r10, 0x5459) listen(r8, 0x5) recvmsg(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffda3, 0x0}, 0x3) r11 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r5, 0xdd) 1m30.630383696s ago: executing program 2 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a80000000050a010100000000000000000a00000a0900010073797a31000021000c0002"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1m30.630198913s ago: executing program 2 (id=415): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000008000080000000000000600aad84f897785010ce3c3557853ff4561973704087e3f143ab35c7e9473fdbbebc628ea7c538dd63d04dc62a1a1f6cb24e74f9e8f422cfa3fb136e878d06921c04b66eec8ba0f19"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000280)=0x80000a2c, 0x4) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40542, 0x0) readv(r5, &(0x7f0000000940)=[{&(0x7f00000010c0)=""/3, 0x3}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, 0x0, 0x0}, 0x20) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x100, @multicast, 'wg2\x00'}}, 0x1e) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@getpolicy={0x5700, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0x0, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0x21}, 0x6e6bb7}}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 1m30.520251795s ago: executing program 2 (id=416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r0, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 1m30.519929834s ago: executing program 2 (id=417): syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m30.440359963s ago: executing program 2 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 1m29.830358593s ago: executing program 2 (id=419): gettid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') syz_usb_connect$cdc_ecm(0x5, 0x54, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x80000001, 0x60, &(0x7f0000000140)="ac", 0x1, 0x0, 0x5, 0x0, 0x80, 0x6, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m26.538451549s ago: executing program 33 (id=362): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x7fff, 0x2}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="fe0000000100005c8000000000000000"], 0x44201) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$USBDEVFS_GET_SPEED(r10, 0x5459) listen(r8, 0x5) recvmsg(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffda3, 0x0}, 0x3) r11 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r5, 0xdd) 1m25.740272143s ago: executing program 3 (id=433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x9, 0x202000, 0x0, 0x1f) 1m25.734945512s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) (async) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0xa8681, 0x0) r4 = signalfd4(r3, 0x0, 0x0, 0x80800) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000001c0)={0x3, 0x1, 'client0\x00', 0x3, "9fc2bf17e18146e1", "5f86498287f3e2ae9922ddb23ad17e554bf7f4a70252e6305cd092f87dd594ca", 0x6, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) close(0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r4, 0xa5c) (async, rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x30}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x2000}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20018010}, 0x0) 1m24.965268125s ago: executing program 3 (id=443): syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m21.889499898s ago: executing program 3 (id=461): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x20007, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x20007, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0xfffffffffffffffd, 0x10, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) (async) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:04.0/uevent\x00', 0x0, 0x0) read(r5, &(0x7f0000000000)=""/256, 0x100) (async) read(r5, &(0x7f0000000000)=""/256, 0x100) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000001440)={&(0x7f0000001400)=[{&(0x7f00000002c0)="16cd0832d53eeaf926d475521a12f14830458343458feeef40e714eb452cf163dfa495a47c68edf2e6565efeeccf61413894b9886aa4", 0x36}, {&(0x7f0000000400)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4, 0xf, 0x9, 0x6, 0xfc}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/122, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/122, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) dup(r4) (async) r6 = dup(r4) write$UHID_INPUT(r6, 0x0, 0x23) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r6}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x28, [0x4d47, 0xff, 0xfffffffffffff001, 0x101, 0x8, 0x1], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/40}, &(0x7f0000000280)=0x78) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000050000001400038004000400080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) 1m21.818582249s ago: executing program 3 (id=462): preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x9, 0x202000, 0x0, 0x1f) 1m21.815355084s ago: executing program 3 (id=464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) fallocate(0xffffffffffffffff, 0x12, 0xffff, 0xed3e) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=@delchain={0x44, 0x65, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xa, 0xfff2}, {0x8, 0xfff4}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9a, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x20080000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/p0/cpuset.cpus\x00', 0xa01, 0x0) write(r6, &(0x7f0000000380)='0\n', 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x6, 0x8000010, r6, 0xce328000) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x5) listen(r9, 0x80000006) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1012200}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="0600f2ac3e43ea8ee56d78fd09a3fde955cf14f45af92927c282587e5e0f48d0be2dcee8540236a4b96a0bca4bb23c7400002356faf35b1bd7a034b45ea376209dffcd6930c9056dc1f70508569fc574107de39e141a5a5d72c2625871b56cd132f115b22177f9d94a6d51c5d93eb6a61216aff26731d9806daab919f29a53d66d59cecb00408e8dcd23b9471615cc4fc3eda7637a08bd283ccd10e0fb3d07bbefb79df33bffe8cde50452c73657f42d98f1c8d7ae9f", @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf0800000a00060008021100000100800a00060050505050505000000a0006005050505050500000", @ANYRES16=0x0], 0x44}}, 0x4008808) writev(r3, &(0x7f0000000180), 0x0) 1m14.619843768s ago: executing program 34 (id=419): gettid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') syz_usb_connect$cdc_ecm(0x5, 0x54, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x80000001, 0x60, &(0x7f0000000140)="ac", 0x1, 0x0, 0x5, 0x0, 0x80, 0x6, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m6.539749776s ago: executing program 35 (id=464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) fallocate(0xffffffffffffffff, 0x12, 0xffff, 0xed3e) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=@delchain={0x44, 0x65, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xa, 0xfff2}, {0x8, 0xfff4}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9a, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x20080000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/p0/cpuset.cpus\x00', 0xa01, 0x0) write(r6, &(0x7f0000000380)='0\n', 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x6, 0x8000010, r6, 0xce328000) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x5) listen(r9, 0x80000006) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1012200}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="0600f2ac3e43ea8ee56d78fd09a3fde955cf14f45af92927c282587e5e0f48d0be2dcee8540236a4b96a0bca4bb23c7400002356faf35b1bd7a034b45ea376209dffcd6930c9056dc1f70508569fc574107de39e141a5a5d72c2625871b56cd132f115b22177f9d94a6d51c5d93eb6a61216aff26731d9806daab919f29a53d66d59cecb00408e8dcd23b9471615cc4fc3eda7637a08bd283ccd10e0fb3d07bbefb79df33bffe8cde50452c73657f42d98f1c8d7ae9f", @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf0800000a00060008021100000100800a00060050505050505000000a0006005050505050500000", @ANYRES16=0x0], 0x44}}, 0x4008808) writev(r3, &(0x7f0000000180), 0x0) 29.012817198s ago: executing program 0 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0xfffffffffffffffa, 0x1) (async) unshare(0x100000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x7e}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000100)='./proc\x00', 0x200200, 0x1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000ac0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xef, 0x44e, 0x121e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0xa9, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x8, 0x59, 0x1, {0x22, 0xc19}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xe, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x2, 0x4}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xf, 0x1, 0x8, 0x20, 0x7}, 0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="050f560006141004cf3ff896b100ffa95a8b9273097289238614100407636705e87ff7e1f0a5d5233ee2d8a10403100b0b10010200000b03ffff08071002005c05001410047f1846dfa1c18e2709088c8a67ee3dc60f"], 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x843}}, {0xd0, &(0x7f0000000480)=@string={0xd0, 0x3, "0b790f6f316c1e862d772c1ddc14245c45f61b81f5a621498d692d132c00727ec4bc093b1216ae2f149c12f7a8eec87a18f57ed415daf98c0dab1d5a533b93ad0f070e812194845b25f9adbd289bfea86b674819cb3c857c9f8b02f2aa6b8eed00ebbf3175386bff589a38c494c2b375223e3803b242e2b05a1ab2861ca867c26f64b6c39de093e8aeb51b06e1634c5ef3ac43c7531d853f9135ddc8d60b5c0459c38110755a1b67acfc52059e532e78b344072f4c1cbbf4501595abd268c2116bc5d4ab3a303d0c5d4b7e830f09"}}, {0x2e, &(0x7f0000000580)=@string={0x2e, 0x3, "3ba72886a3e1abdbfbdbac160e2377d715e90fd4575e174236d72601382703de193b0b9e74c0a2150f352c99"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x438}}, {0x72, &(0x7f0000000600)=@string={0x72, 0x3, "d1ff26d12d61e73c6defc57de71a789e63d50c88cf381128bbc30714a9da6efbed080ec4011db1a2624570f8a97d8bacad43b6b72ede8114c62f8b74146e5baadb0b604555474006c3b2b71d7b1519d3ee160fc9323597687db70ada2f4224ea2c7b9415bce0f65255a46ca4702a998e"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000880)={0x24, &(0x7f0000000700)={0xa0, 0x11, 0xb0, {0xb0, 0x2, "4b581ebbdbe9f462df2f24e3f2bb15860fae8517c037a84eea6e404e793d833c90799b203d4303fbc81d8b3527e26899b249a388db931f8d512ce73efe8dd57e0361b7dd5722ff677f3993acdba43538a8812de9603870f591e333b9e2ca7e8a683e0f83d5fb3ab17398fe85eeb139a7a4ef0a2b0965309af27d4a4f7aa7186907659629a89b9c054b2c862da913171d26284748800f88c7b5e51122c2138a3275d665776dbfd395d18c4f0445de"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000800)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x1, 0x0, 0x8, "d0"}, @main=@item_4={0x3, 0x0, 0x8, "52741711"}, @local, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x9, "6cf83637"}, @local=@item_012={0x1, 0x2, 0x1, "b7"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x19, 0x1, {0x22, 0x2ca}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="600e64000000e103448ffea92ec644546aabf129283f85a7106f7074b130923c0145affa030000e63cdf"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000980)={0x20, 0x1, 0x72, "b5dfd644956da750c9c8d28ab1edca9510d1d1d02140e6f6088108562926419dff5c318fe3e025cd2847f9e815c35979b47eb2795d485674a25f3971788e37bf51b9c303c4692afb29fbbd1584b02207d7bba942c68697750dee1165b76f14b6b5887b663ed25176865aa9c6f35fb5b98709"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x89}}) (async) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x860) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x100, @empty, 0x3}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x5a0}], 0x1, &(0x7f0000001d80)=ANY=[@ANYBLOB="14f9ffffffffff0000000000e700000000"], 0x18}, 0x40000) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20, 0x25, 0x0, 0x1, 0xfffffffc, 'syz1\x00', &(0x7f0000000100)=['\xcc\xaf\x18\xed\xe7LQ\x80\xc8u%\xc1\x1e\xc1N\x1f\x12>c\x0fP\xf8\xefM\x10\xbb\xbe\x8d\xbcr\xaa\xf1o\x99\x85A\x00\x90\xe2\xa6r&\x16\x16\x05\xad\\\xc8\x02\xe9&\x83\xec\x81^N}N\xb9\xa2\xfd\xc9\x92\n\xe4:v'], 0x43}) (async) timer_create(0x8, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) 28.459786196s ago: executing program 0 (id=1060): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0x4611, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4018, r0}, 0x18) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r2) write$char_usb(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x80403b}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000080) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="840000000107010200020000000000000000000708000540000000000c00024000000000000000080c00034000000000000000000c00024000000000000000020900010073797a31000000000c000640000000000000000603ca0c0006407fffffffffffffff0c00024000000000000092f443e3dc3e945e0240000000350800024080000000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4040805) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x2000000000002, 0x637, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffff7, 0x7fff, 0x3, 0xb3, 0x48d], 0x1000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 27.20877635s ago: executing program 0 (id=1074): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6264, &(0x7f0000000280)={0x0, 0x4c7c, 0x400, 0x1, 0xfa}) r4 = io_uring_setup(0x46ee, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xcc, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000100)=""/152) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 27.112167943s ago: executing program 0 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5415, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev/nvme0n1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/235, 0xeb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a320000000078000480640001800900010068617368000000005400028008000740000000010800054000000007080002"], 0xcc}}, 0x24000840) recvfrom(r1, &(0x7f0000000a40)=""/4096, 0x1000, 0x12002, &(0x7f0000001a40)=@in6={0xa, 0x4e24, 0x9ec2, @empty, 0x7}, 0x80) ioctl(r1, 0xc0101282, &(0x7f0000000a00)="000000000000000001") 27.0185652s ago: executing program 0 (id=1076): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000740)={r4, 0x3ff}, &(0x7f0000000000)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000480)="5400000012000100"/24, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bind$unix(r5, &(0x7f0000000340)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 26.819698441s ago: executing program 0 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, 0xffffffffffffffff, &(0x7f0000000d80)=0x47) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25010000000000000008410000004c001800"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x50) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:netcontrol_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x101}, 0x4d) socket$kcm(0x29, 0x7, 0x0) 11.817225302s ago: executing program 36 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, 0xffffffffffffffff, &(0x7f0000000d80)=0x47) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25010000000000000008410000004c001800"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x50) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:netcontrol_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x101}, 0x4d) socket$kcm(0x29, 0x7, 0x0) 8.837177764s ago: executing program 5 (id=1249): r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x80, 0x3, 0x277}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8.749046313s ago: executing program 5 (id=1250): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000580)=""/4096, 0x1000) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) 7.828076997s ago: executing program 5 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) (fail_nth: 6) 7.741294736s ago: executing program 5 (id=1263): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0xfffffffffffffdc7, 0x8, 0x0}) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x2, 0x0) read(r3, &(0x7f0000000040)=""/43, 0x2b) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000200), 0x6) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) (async) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0xfffffffffffffdc7, 0x8, 0x0}) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) fanotify_init(0x2, 0x0) (async) read(r3, &(0x7f0000000040)=""/43, 0x2b) (async) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$UHID_CREATE2(r5, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) (async) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) (async) write$UHID_INPUT2(r5, &(0x7f0000000200), 0x6) (async) 4.648898541s ago: executing program 6 (id=1300): syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) 1.959227975s ago: executing program 8 (id=1301): syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x318, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xab, 0x1, 0x3, 0x1, 0x0, 0xf9, {0x9, 0x21, 0xc400, 0x7, 0x1, {0x22, 0x146}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfa, 0x4}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x53, 0x1, 0x10, 0x7}, 0xa1, &(0x7f0000000080)={0x5, 0xf, 0xa1, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0xfff8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d58e886cf53f14c68260fcf39250cc6a"}, @generic={0x77, 0x10, 0xb, "75b1d3a6d9ce1c6bb85553e5cccc3968b57938fe3ae0d338ce1d5b2a4ed76b875f0a37eb3d4536ac910f7f4ce5f2e5f66fc57ac154204f08f0021eeb2967ea3012c1fb3c4b93d7f284d09fe3efb15894ddf626bb37be3602c9024993867c0ec8e73561412048749457bd632f25fe724168358bf4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0x5c9f}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}, {0x7, &(0x7f0000000180)=@string={0x7, 0x3, "e6ff796a6d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.609563571s ago: executing program 6 (id=1305): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="18002800000004000098000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.609187727s ago: executing program 6 (id=1306): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r0, &(0x7f0000000900)='transport=loop,nqn=testsubsys', 0x1d) (fail_nth: 58) 1.498957246s ago: executing program 6 (id=1308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r1, 0x301, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x54}}, 0x0) 1.389283708s ago: executing program 6 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x62044804}, 0x4000000) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) 1.209697715s ago: executing program 6 (id=1310): syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 759.823141ms ago: executing program 8 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup2(r1, r1) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(r2, 0x7, 0x0, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8000000) r3 = dup2(r1, r1) read$usbmon(r3, &(0x7f0000000240)=""/166, 0xa6) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x1000000) 707.987603ms ago: executing program 8 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xee00, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) r3 = pidfd_getfd(r1, r1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7fffffff, 0x1, 0x4, 0x40, 0x8, {r4, r5/1000+10000}, {0x3, 0x1, 0x9, 0x6, 0x0, 0x2, "d6825f97"}, 0x6b2, 0x1, {&(0x7f0000000200)=[{0x1ff, 0x0, {0xcb}, 0x5}, {0x7ff, 0x4, {}, 0x7}]}, 0xfffffff7, 0x0, r3}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r6, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}}, 0x4044) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@isofs_parent={0x14, 0x2, {0x7f, 0x72, 0x80, 0x0, 0x2, 0xa761}}, &(0x7f0000000100), 0x1000) 589.650862ms ago: executing program 8 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x180}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000a0004000000"], 0x20}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x16}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x795000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 589.137498ms ago: executing program 8 (id=1315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040054, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) r1 = epoll_create(0x7) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='fdinfo/3\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) syz_emit_vhci(&(0x7f0000000a80)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x12) ioctl(r3, 0x40480923, 0x0) ioctl(r3, 0x40140921, &(0x7f0000000420)="010000000100") ioctl(r3, 0x400c0930, 0x0) ioctl(r3, 0x40140921, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x80, 0x0, 0x6, 0x400, 0xf, 0x1, 0x6}, &(0x7f0000000100)={0x5, 0x2, 0xf, 0x19, 0x1a72, 0x6, 0x8, 0x81}, &(0x7f0000000140)={0xb9a, 0x3ff, 0x100000001, 0xe, 0x8, 0x3, 0x2, 0x401}, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000200)={[0x1]}, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r5, &(0x7f00000072c0)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/202, 0xca}], 0x5, &(0x7f0000007680)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f00000029c0)=@phonet, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/82, 0x52}, {&(0x7f0000003c00)=""/101, 0x65}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)}, {&(0x7f0000003e00)=""/82, 0x52}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/192, 0xc0}], 0x9, &(0x7f00000040c0)=""/221, 0xdd}, 0x488d022a}, {{&(0x7f00000041c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004240)=""/22, 0x16}], 0x1, &(0x7f00000042c0)=""/121, 0x79}, 0x80000000}, {{&(0x7f0000002a40)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000043c0)=""/36, 0x24}, {&(0x7f0000002ac0)=""/119, 0x77}], 0x2, &(0x7f00000044c0)=""/14, 0xe}, 0xfffffff8}, {{&(0x7f0000004500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000004680)=""/31, 0x1f}, {&(0x7f0000004580)=""/252, 0xfc}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f0000004980)=""/174, 0xae}, {&(0x7f00000047c0)=""/132, 0x84}, {&(0x7f0000004a40)=""/126, 0x7e}, {&(0x7f0000004880)=""/229, 0xe5}, {&(0x7f0000004340)=""/114, 0x72}, {&(0x7f0000007480)=""/148, 0x94}, {&(0x7f0000007540)=""/26, 0x1a}, {&(0x7f0000007580)=""/25, 0x19}], 0xb, &(0x7f0000004b40)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000005b40)=@nfc_llcp, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/246, 0xf6}], 0x1, &(0x7f0000005d00)=""/56, 0x38}, 0x8001}, {{&(0x7f0000005d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007180)=[{&(0x7f0000005dc0)=""/97, 0x61}, {&(0x7f0000005e40)=""/77, 0x4d}, {&(0x7f0000005ec0)}, {&(0x7f0000005f00)=""/188, 0xbc}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/179, 0xb3}, {&(0x7f0000007080)=""/199, 0xc7}], 0x7, &(0x7f0000007200)=""/132, 0x84}, 0x4}], 0x7, 0x10162, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x0) 218.933311ms ago: executing program 7 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x2}, [@IFLA_MTU={0x8, 0x4, 0xc}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 218.458333ms ago: executing program 5 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000001080)='devtmpfs\x00', 0x20c000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) lseek(r0, 0x40, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002480)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0xffff, 0x5, 0x9c8, 0x0, {0x0, 0x7ffffffffffffffd, 0xffffffff, 0x7, 0x3, 0x6, 0x5, 0xd, 0x400, 0xa000, 0xab2, 0x0, 0x0, 0xa00, 0x3}}, {0x0, 0x8}}}, 0xa0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000001040)={0x6, 0x3, 0xa, 0x7, 0x6, "fb6b155a28a58c069f4015b6b82d07d1854fa6"}) write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000200), 0x4) ioctl$TIOCSETD(r0, 0x5423, 0x0) 217.140743ms ago: executing program 7 (id=1322): setns(0xc9, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) 108.808819ms ago: executing program 7 (id=1323): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0x1000a238, 0x1, 0x1, 0xfb, 0x5}}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)="39b718b2aca1dd371a503479632c4196330d8d2672b39f7d3b2fc1462edfac1f7cb59ef3227604176144c975c30a75", 0x2f) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x1000e82e, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000400)={0x0, 0x2710}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r6, 0x1, 0x0, 0x4c15, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)}, 0x40) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000640)=@IORING_OP_CLOSE) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r7}) 108.526732ms ago: executing program 7 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r0, 0xc0101282, &(0x7f0000000a00)="000000000100000001") 48.845264ms ago: executing program 7 (id=1325): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r0, &(0x7f0000000900)='transport=loop,nqn=testsubsys', 0x1d) (fail_nth: 60) 48.569892ms ago: executing program 8 (id=1326): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000df000000000000000900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)=@delqdisc={0x264, 0x25, 0x301, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xc, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb23, 0x7, 0xb, 0x1, 0xa, 0x9, 0x2, 0x6, 0xc, 0x15, 0x12, 0x16, 0xfe, 0xbfa0, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x8000, 0x5, 0x1, 0xf1a0, 0x4, 0x9}}, {0x16, 0x2, [0x1000, 0x2, 0x2, 0xc8a, 0x5, 0x5, 0x5, 0x5, 0x1]}}, {{0x1c, 0x1, {0xfd, 0x7f, 0x3, 0x61be, 0x2, 0x5, 0x6942, 0x1}}, {0x6, 0x2, [0x40]}}]}, @qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x9, 0x7, 0x1, 0x0, 0x1ff, 0x5}}, {0xe, 0x2, [0x2, 0x3ff, 0x0, 0x40, 0x9]}}, {{0x1c, 0x1, {0xd9, 0x8, 0x3, 0x401, 0x2, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0x2, 0x4, 0x5b8b578, 0x1, 0x3, 0x80000001, 0x2}}, {0x8, 0x2, [0x2, 0xa]}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x225, 0x0, &(0x7f0000000180)="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", 0x0, 0xd10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c00662f00002bcaa667df72f533cb565df7d21802e2f97981d4f556ed234acb4bd5eea4ad112c3ef29b3df878b41294c5ccf1bb6e22bddd5f1d86e177ebcb305d6e478b0fe93249b0cff6e26905e97c29940df6d28443dacdf5573c869457c5c139d3abaa862c7fdbb1426c2c6356b9a03d033136f3c86abb5aae4ec1649a9a44ab894e0c8e3643089025173f258e74be2b763e0b8035522ae74131a2b057c3a92f71fe8a25502338dc722dabaf2c49c0916ea01b2814c8df280bfbad19f9d74133fe49b536774373517ef7", @ANYRES16=r6, @ANYBLOB="000826bd7000fddbdf250600000008000c0002000000080007000000000408000700ac14142e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.62616ms ago: executing program 7 (id=1327): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x81, 0x80800}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) write(r1, &(0x7f0000000400)='base', 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='e:mygroup/my!vent s', 0x13) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 5 (id=1328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000340)) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000100)={{0x400, 0x7}, 0x100, './tracefs\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbef, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000894}, 0x884) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) io_uring_enter(r1, 0x46a1, 0x4aea, 0x81, &(0x7f0000000240), 0x8) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)={0x50, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040801}, 0x400c850) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000004000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000100000000000000000000000a000100e2000000000000001c001700000000000000000029bd700000000000000000000400000008000b00010000000500210001000000"], 0x11c}}, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) 0s ago: executing program 8 (id=1329): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x90, r6, 0x5, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x11, @random="fb93544f05f7d5e680fd46f3af01b29544"}, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x3, 0x7, 0x0, {0x1fd, 0x10, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x3, 0x5}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b160000000000000000020000083400048018000180080001006f7366000c00028008000140000000041800018008000100647570000c000280080001400000001609000100737900020073797a3200000000140000001100010000000000000000000000000a000000000000000fa489274599a2e7f012f00fd907633059044698a2f4cca7b90fa6eed502a9"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) kernel console output (not intermixed with test programs): ber=0 [ 153.028836][ T9510] fuse: Unknown parameter ' ' [ 153.159418][ T9523] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1012'. [ 153.161319][ T9516] ip6t_srh: unknown srh match flags 7700 [ 153.226089][ T6275] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 153.323445][ T9528] FAULT_INJECTION: forcing a failure. [ 153.323445][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 153.323468][ T9528] CPU: 2 UID: 0 PID: 9528 Comm: syz.6.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.323484][ T9528] Tainted: [L]=SOFTLOCKUP [ 153.323488][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.323494][ T9528] Call Trace: [ 153.323498][ T9528] [ 153.323502][ T9528] dump_stack_lvl+0x100/0x190 [ 153.323524][ T9528] should_fail_ex.cold+0x5/0xa [ 153.323540][ T9528] should_failslab+0xc2/0x120 [ 153.323558][ T9528] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.323571][ T9528] ? __kernfs_new_node+0xd2/0xa10 [ 153.323591][ T9528] __kernfs_new_node+0xd2/0xa10 [ 153.323609][ T9528] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.323628][ T9528] ? lock_acquire+0x1d1/0x380 [ 153.323639][ T9528] ? kernfs_root+0x23/0x2a0 [ 153.323654][ T9528] ? find_held_lock+0x2b/0x80 [ 153.323670][ T9528] ? kernfs_root+0xee/0x2a0 [ 153.323684][ T9528] ? kernfs_root+0xee/0x2a0 [ 153.323702][ T9528] kernfs_new_node+0x117/0x150 [ 153.323721][ T9528] __kernfs_create_file+0x53/0x350 [ 153.323735][ T9528] sysfs_add_file_mode_ns+0x207/0x3c0 [ 153.323753][ T9528] internal_create_group+0x593/0xfb0 [ 153.323773][ T9528] ? __pfx_internal_create_group+0x10/0x10 [ 153.323791][ T9528] ? kernfs_create_link+0x1bd/0x240 [ 153.323806][ T9528] internal_create_groups+0x9d/0x150 [ 153.323823][ T9528] device_add+0xf60/0x1970 [ 153.323840][ T9528] ? __pfx_device_add+0x10/0x10 [ 153.323858][ T9528] ? kobject_get+0xbb/0x150 [ 153.323870][ T9528] cdev_device_add+0x12b/0x270 [ 153.323885][ T9528] nvme_add_ctrl+0x15c/0x320 [ 153.323902][ T9528] nvme_loop_create_ctrl+0x201/0xee0 [ 153.323918][ T9528] nvmf_dev_write+0x4ee/0xb60 [ 153.323936][ T9528] vfs_write+0x2aa/0x1050 [ 153.323947][ T9528] ? __pfx_nvmf_dev_write+0x10/0x10 [ 153.323962][ T9528] ? lock_acquire+0x1d1/0x380 [ 153.323972][ T9528] ? __fget_files+0x34/0x3d0 [ 153.323986][ T9528] ? __pfx_vfs_write+0x10/0x10 [ 153.323997][ T9528] ? find_held_lock+0x2b/0x80 [ 153.324012][ T9528] ? __fget_files+0x215/0x3d0 [ 153.324024][ T9528] ? __fget_files+0x215/0x3d0 [ 153.324040][ T9528] ? __fget_files+0x21f/0x3d0 [ 153.324062][ T9528] ksys_write+0x12a/0x250 [ 153.324073][ T9528] ? __pfx_ksys_write+0x10/0x10 [ 153.324084][ T9528] ? trace_syscall_enter+0xcc/0x120 [ 153.324101][ T9528] do_syscall_64+0x123/0x790 [ 153.324118][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.324130][ T9528] RIP: 0033:0x7f0a2f19e159 [ 153.324140][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.324151][ T9528] RSP: 002b:00007f0a2fff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.324162][ T9528] RAX: ffffffffffffffda RBX: 00007f0a2f425fa0 RCX: 00007f0a2f19e159 [ 153.324169][ T9528] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 153.324176][ T9528] RBP: 00007f0a2fff1090 R08: 0000000000000000 R09: 0000000000000000 [ 153.324182][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.324188][ T9528] R13: 00007f0a2f426038 R14: 00007f0a2f425fa0 R15: 00007ffeed0087a8 [ 153.324202][ T9528] [ 153.417896][ T9538] netlink: Unknown conntrack attr (type=53, max=9) [ 153.417914][ T9538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.418639][ T9538] vlan1: default FDB implementation only supports local addresses [ 153.443738][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.443987][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.503401][ T10] usb 10-1: USB disconnect, device number 4 [ 153.574656][ T9553] erspan0: entered promiscuous mode [ 153.595327][ T9547] Console: switching to colour dummy device 80x25 [ 153.730767][ T5812] usb usb48-port1: unable to enumerate USB device [ 153.769459][ T25] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 153.930362][ T25] usb 11-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 153.931384][ T25] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 153.931398][ T25] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 153.933320][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.933333][ T25] usb 11-1: Product: syz [ 153.933340][ T25] usb 11-1: Manufacturer: syz [ 153.933347][ T25] usb 11-1: SerialNumber: syz [ 153.939499][ T25] usb 11-1: USB2VGA dongle found at address 18 [ 153.943375][ T25] usb 11-1: Allocated 8 output buffers [ 154.190935][ T9564] ip_tables: iptables: counters copy to user failed while replacing table [ 154.280571][ T9567] CIFS: iocharset name too long [ 154.422458][ T9575] team0: entered allmulticast mode [ 154.422477][ T9575] xfrm0: entered allmulticast mode [ 154.423640][ T7500] tipc: Resetting bearer [ 154.492204][ T9582] netlink: 'syz.5.1036': attribute type 2 has an invalid length. [ 154.552359][ T9587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9587 comm=syz.5.1036 [ 154.849635][ T9601] bridge_slave_0: left allmulticast mode [ 154.849652][ T9601] bridge_slave_0: left promiscuous mode [ 154.849752][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.852376][ T9601] bridge_slave_1: left allmulticast mode [ 154.852390][ T9601] bridge_slave_1: left promiscuous mode [ 154.852607][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.861682][ T9601] bond0: (slave bond_slave_0): Releasing backup interface [ 154.876119][ T9601] bond0: (slave bond_slave_1): Releasing backup interface [ 154.891645][ T9601] team0: Port device team_slave_0 removed [ 154.894798][ T9601] team0: Port device team_slave_1 removed [ 154.895168][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.895179][ T9601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.897273][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.897290][ T9601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.900015][ T9601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.905371][ T9603] team0: Port device xfrm0 added [ 155.224154][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1043'. [ 156.153055][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1044'. [ 156.153074][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1044'. [ 156.153084][ T9628] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 156.586858][ T43] kauditd_printk_skb: 123 callbacks suppressed [ 156.586873][ T43] audit: type=1400 audit(1789731734.842:953): avc: denied { write } for pid=9629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.633146][ T43] audit: type=1400 audit(1789731734.892:954): avc: denied { write } for pid=9632 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.894818][ T43] audit: type=1400 audit(1789731735.152:955): avc: denied { write } for pid=9635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.946463][ T43] audit: type=1400 audit(1789731735.202:956): avc: denied { write } for pid=9638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.028071][ T43] audit: type=1400 audit(1789731735.282:957): avc: denied { write } for pid=9641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.069205][ T43] audit: type=1400 audit(1789731735.322:958): avc: denied { write } for pid=9644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.489941][ T9582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.530023][ T43] audit: type=1400 audit(1789731735.792:959): avc: denied { bind } for pid=9647 comm="syz.7.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.567573][ T43] audit: type=1400 audit(1789731735.822:960): avc: denied { bind } for pid=9649 comm="syz.5.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.594767][ T9652] FAULT_INJECTION: forcing a failure. [ 157.594767][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 157.594800][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.7.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.594818][ T9652] Tainted: [L]=SOFTLOCKUP [ 157.594822][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.594828][ T9652] Call Trace: [ 157.594832][ T9652] [ 157.594837][ T9652] dump_stack_lvl+0x100/0x190 [ 157.594864][ T9652] should_fail_ex.cold+0x5/0xa [ 157.594881][ T9652] should_failslab+0xc2/0x120 [ 157.594898][ T9652] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.594911][ T9652] ? __kernfs_new_node+0xd2/0xa10 [ 157.594930][ T9652] __kernfs_new_node+0xd2/0xa10 [ 157.594948][ T9652] ? __pfx___kernfs_new_node+0x10/0x10 [ 157.594966][ T9652] ? lock_acquire+0x1d1/0x380 [ 157.594983][ T9652] ? kernfs_root+0x23/0x2a0 [ 157.594998][ T9652] ? find_held_lock+0x2b/0x80 [ 157.595013][ T9652] ? kernfs_root+0xee/0x2a0 [ 157.595027][ T9652] ? kernfs_root+0xee/0x2a0 [ 157.595045][ T9652] kernfs_new_node+0x117/0x150 [ 157.595064][ T9652] __kernfs_create_file+0x53/0x350 [ 157.595078][ T9652] sysfs_add_file_mode_ns+0x207/0x3c0 [ 157.595096][ T9652] internal_create_group+0x593/0xfb0 [ 157.595116][ T9652] ? __pfx_internal_create_group+0x10/0x10 [ 157.595134][ T9652] ? kernfs_create_link+0x1bd/0x240 [ 157.595149][ T9652] internal_create_groups+0x9d/0x150 [ 157.595166][ T9652] device_add+0xf60/0x1970 [ 157.595183][ T9652] ? __pfx_device_add+0x10/0x10 [ 157.595201][ T9652] ? kobject_get+0xbb/0x150 [ 157.595216][ T9652] cdev_device_add+0x12b/0x270 [ 157.595231][ T9652] nvme_add_ctrl+0x15c/0x320 [ 157.595252][ T9652] nvme_loop_create_ctrl+0x201/0xee0 [ 157.595268][ T9652] nvmf_dev_write+0x4ee/0xb60 [ 157.595291][ T9652] vfs_write+0x2aa/0x1050 [ 157.595303][ T9652] ? __pfx_nvmf_dev_write+0x10/0x10 [ 157.595317][ T9652] ? lock_acquire+0x1d1/0x380 [ 157.595328][ T9652] ? __fget_files+0x34/0x3d0 [ 157.595343][ T9652] ? __pfx_vfs_write+0x10/0x10 [ 157.595353][ T9652] ? find_held_lock+0x2b/0x80 [ 157.595368][ T9652] ? __fget_files+0x215/0x3d0 [ 157.595381][ T9652] ? __fget_files+0x215/0x3d0 [ 157.595396][ T9652] ? __fget_files+0x21f/0x3d0 [ 157.595414][ T9652] ksys_write+0x12a/0x250 [ 157.595425][ T9652] ? __pfx_ksys_write+0x10/0x10 [ 157.595435][ T9652] ? trace_syscall_enter+0xcc/0x120 [ 157.595453][ T9652] do_syscall_64+0x123/0x790 [ 157.595470][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.595481][ T9652] RIP: 0033:0x7fec7c79e159 [ 157.595492][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.595503][ T9652] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.595514][ T9652] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 157.595521][ T9652] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 157.595528][ T9652] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 157.595534][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.595540][ T9652] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 157.595555][ T9652] [ 157.608645][ T43] audit: type=1400 audit(1789731735.862:961): avc: denied { create } for pid=9657 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.610896][ T43] audit: type=1400 audit(1789731735.872:962): avc: denied { setopt } for pid=9657 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.888763][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.888939][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.889092][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.889204][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.889311][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.891153][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.891265][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.891371][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.891477][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.891586][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 157.917820][ T9693] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 157.937887][ T9699] ªªªªªª: renamed from lo (while UP) [ 158.320689][ T9709] netlink: 'syz.7.1058': attribute type 23 has an invalid length. [ 158.719476][ T5811] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.879481][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 158.880007][ T5811] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.881135][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.881148][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.881177][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 158.881191][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 158.881209][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.885185][ T5811] hub 5-1:1.0: bad descriptor, ignoring hub [ 158.885198][ T5811] hub 5-1:1.0: probe with driver hub failed with error -5 [ 158.885636][ T5811] cdc_wdm 5-1:1.0: skipping garbage [ 158.885644][ T5811] cdc_wdm 5-1:1.0: skipping garbage [ 158.887291][ T5811] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 158.887301][ T5811] cdc_wdm 5-1:1.0: Unknown control protocol [ 159.029501][ T10] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 159.180019][ T10] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.183212][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.183228][ T10] usb 12-1: Product: syz [ 159.183235][ T10] usb 12-1: Manufacturer: syz [ 159.183243][ T10] usb 12-1: SerialNumber: syz [ 159.413745][ T1045] usb 5-1: USB disconnect, device number 6 [ 161.732814][ T10] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 161.732844][ T10] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 161.732855][ T10] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.738155][ T10] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 161.751315][ T10] usb 12-1: USB disconnect, device number 9 [ 161.760693][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 161.760706][ T43] audit: type=1400 audit(1789731740.022:1026): avc: denied { write } for pid=9785 comm="syz.7.1084" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 161.760829][ T43] audit: type=1400 audit(1789731740.022:1027): avc: denied { open } for pid=9785 comm="syz.7.1084" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 161.848837][ T9788] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.849122][ T43] audit: type=1400 audit(1789731740.102:1028): avc: denied { setopt } for pid=9787 comm="syz.7.1085" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.386900][ T43] audit: type=1400 audit(1789731740.642:1029): avc: denied { create } for pid=9790 comm="syz.7.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.387664][ T43] audit: type=1400 audit(1789731740.642:1030): avc: denied { bind } for pid=9790 comm="syz.7.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.389545][ T43] audit: type=1400 audit(1789731740.642:1031): avc: denied { setopt } for pid=9790 comm="syz.7.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.431374][ T43] audit: type=1400 audit(1789731740.692:1032): avc: denied { read } for pid=9792 comm="syz.5.1088" name="0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.431499][ T43] audit: type=1400 audit(1789731740.692:1033): avc: denied { open } for pid=9792 comm="syz.5.1088" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.432054][ T43] audit: type=1400 audit(1789731740.692:1034): avc: denied { ioctl } for pid=9792 comm="syz.5.1088" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.438663][ T43] audit: type=1400 audit(1789731740.692:1035): avc: denied { ioctl } for pid=9793 comm="syz.7.1087" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45301 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.607577][ T9812] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.607593][ T9812] overlayfs: failed to set xattr on upper [ 162.607597][ T9812] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.607601][ T9812] overlayfs: ...falling back to index=off. [ 162.607605][ T9812] overlayfs: ...falling back to uuid=null. [ 163.834464][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.379596][ T30] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 164.403503][ T9863] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 164.530356][ T30] usb 10-1: Using ep0 maxpacket: 32 [ 164.530830][ T30] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.531719][ T30] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.531732][ T30] usb 10-1: config 0 has no interface number 0 [ 164.531760][ T30] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.531776][ T30] usb 10-1: config 0 interface 196 has no altsetting 0 [ 164.533415][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.533428][ T30] usb 10-1: Product: syz [ 164.533435][ T30] usb 10-1: Manufacturer: syz [ 164.533442][ T30] usb 10-1: SerialNumber: syz [ 164.551521][ T30] usb 10-1: config 0 descriptor?? [ 164.556163][ T9859] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 164.699590][ T10] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 164.849653][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 164.851067][ T10] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.852141][ T10] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.852159][ T10] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.852194][ T10] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 164.852216][ T10] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 164.852248][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.887565][ T10] hub 12-1:1.0: bad descriptor, ignoring hub [ 164.887587][ T10] hub 12-1:1.0: probe with driver hub failed with error -5 [ 164.888217][ T10] cdc_wdm 12-1:1.0: skipping garbage [ 164.888230][ T10] cdc_wdm 12-1:1.0: skipping garbage [ 164.904670][ T10] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 164.904689][ T10] cdc_wdm 12-1:1.0: Unknown control protocol [ 164.952469][ T9859] pim6reg: entered allmulticast mode [ 164.964116][ T30] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 164.964306][ T30] ipheth 10-1:0.196: probe with driver ipheth failed with error -71 [ 164.975509][ T30] usb 10-1: USB disconnect, device number 5 [ 165.327098][ T9877] __nla_validate_parse: 58 callbacks suppressed [ 165.327116][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1110'. [ 165.342015][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1110'. [ 165.379703][ T5812] usb 12-1: USB disconnect, device number 10 [ 165.625219][ T9895] bond0: option mode: unable to set because the bond device is up [ 165.674774][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 165.674790][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'. [ 165.674811][ T9899] netlink: 'syz.5.1117': attribute type 12 has an invalid length. [ 165.895920][ T9906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.896789][ T9904] i2c i2c-0: delete_device: Can't find device in list [ 165.911355][ T9908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.964526][ T9916] 9p: Bad value for 'rfdno' [ 166.153739][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 166.153762][ T9931] netlink: 'syz.6.1127': attribute type 21 has an invalid length. [ 166.153770][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1127'. [ 166.164993][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 166.165024][ T9931] netlink: 'syz.6.1127': attribute type 21 has an invalid length. [ 166.165036][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1127'. [ 166.179585][ T5820] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.179626][ T5820] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.179649][ T5820] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.179666][ T5820] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.591077][ T9941] FAULT_INJECTION: forcing a failure. [ 166.591077][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 166.591100][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: syz.5.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.591116][ T9941] Tainted: [L]=SOFTLOCKUP [ 166.591120][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.591127][ T9941] Call Trace: [ 166.591131][ T9941] [ 166.591136][ T9941] dump_stack_lvl+0x100/0x190 [ 166.591165][ T9941] should_fail_ex.cold+0x5/0xa [ 166.591181][ T9941] should_failslab+0xc2/0x120 [ 166.591199][ T9941] __kmalloc_cache_noprof+0x91/0x6d0 [ 166.591217][ T9941] ? snd_seq_pool_new+0x44/0x230 [ 166.591237][ T9941] ? __pfx_snd_seq_open+0x10/0x10 [ 166.591250][ T9941] snd_seq_pool_new+0x44/0x230 [ 166.591266][ T9941] seq_create_client1+0x66/0x5c0 [ 166.591280][ T9941] ? __pfx_snd_seq_open+0x10/0x10 [ 166.591293][ T9941] snd_seq_open+0x41/0x530 [ 166.591306][ T9941] ? __pfx_snd_seq_open+0x10/0x10 [ 166.591318][ T9941] snd_open+0x201/0x450 [ 166.591333][ T9941] ? __pfx_snd_open+0x10/0x10 [ 166.591346][ T9941] chrdev_open+0x234/0x6a0 [ 166.591360][ T9941] ? __pfx_chrdev_open+0x10/0x10 [ 166.591375][ T9941] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 166.591395][ T9941] do_dentry_open+0x6ab/0x14d0 [ 166.591407][ T9941] ? __pfx_chrdev_open+0x10/0x10 [ 166.591423][ T9941] vfs_open+0x82/0x3f0 [ 166.591439][ T9941] path_openat+0x19fa/0x2440 [ 166.591455][ T9941] ? __pfx_path_openat+0x10/0x10 [ 166.591473][ T9941] do_file_open+0x20e/0x430 [ 166.591488][ T9941] ? __pfx_do_file_open+0x10/0x10 [ 166.591515][ T9941] ? _raw_spin_unlock+0x28/0x50 [ 166.591531][ T9941] ? alloc_fd+0x471/0x7a0 [ 166.591549][ T9941] do_sys_openat2+0x10f/0x1e0 [ 166.591564][ T9941] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.591585][ T9941] __x64_sys_openat+0x12d/0x210 [ 166.591601][ T9941] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.591616][ T9941] ? find_held_lock+0x2b/0x80 [ 166.591632][ T9941] ? trace_syscall_enter+0xcc/0x120 [ 166.591650][ T9941] do_syscall_64+0x123/0x790 [ 166.591666][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.591678][ T9941] RIP: 0033:0x7f719eb9e159 [ 166.591687][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.591698][ T9941] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.591709][ T9941] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 166.591716][ T9941] RDX: 0000000000060240 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 166.591723][ T9941] RBP: 00007f719ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 166.591729][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.591735][ T9941] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 166.591749][ T9941] [ 166.629293][ T9941] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 166.635844][ T9943] netlink: 'syz.6.1130': attribute type 1 has an invalid length. [ 166.643552][ T9941] FAULT_INJECTION: forcing a failure. [ 166.643552][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 166.643582][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.5.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.643606][ T9941] Tainted: [L]=SOFTLOCKUP [ 166.643613][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.643625][ T9941] Call Trace: [ 166.643631][ T9941] [ 166.643638][ T9941] dump_stack_lvl+0x100/0x190 [ 166.643669][ T9941] should_fail_ex.cold+0x5/0xa [ 166.643692][ T9941] ? lock_acquire+0x1d1/0x380 [ 166.643713][ T9941] should_failslab+0xc2/0x120 [ 166.643737][ T9941] __kmalloc_cache_noprof+0x91/0x6d0 [ 166.643762][ T9941] ? skb_queue_purge_reason+0x2c2/0x420 [ 166.643787][ T9941] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 166.643811][ T9941] nfc_genl_rcv_nl_event+0xc1/0x300 [ 166.643830][ T9941] notifier_call_chain+0x99/0x3f0 [ 166.643859][ T9941] blocking_notifier_call_chain+0x69/0xa0 [ 166.643887][ T9941] netlink_release+0x1680/0x2000 [ 166.643912][ T9941] ? netlink_release+0x1e0/0x2000 [ 166.643939][ T9941] ? __pfx_netlink_release+0x10/0x10 [ 166.643962][ T9941] ? __pfx_locks_remove_file+0x10/0x10 [ 166.644000][ T9941] __sock_release+0xb3/0x260 [ 166.644023][ T9941] ? __pfx_sock_close+0x10/0x10 [ 166.644043][ T9941] sock_close+0x1c/0x30 [ 166.644064][ T9941] __fput+0x3ff/0xb50 [ 166.644092][ T9941] fput_close_sync+0x118/0x250 [ 166.644117][ T9941] ? __pfx_fput_close_sync+0x10/0x10 [ 166.644149][ T9941] __x64_sys_close+0x8b/0x120 [ 166.644173][ T9941] do_syscall_64+0x123/0x790 [ 166.644200][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.644219][ T9941] RIP: 0033:0x7f719eb5e98e [ 166.644233][ T9941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.644250][ T9941] RSP: 002b:00007f719f9b7f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 166.644268][ T9941] RAX: ffffffffffffffda RBX: 00007f719f9b96c0 RCX: 00007f719eb5e98e [ 166.644279][ T9941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 166.644288][ T9941] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 166.644299][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.644310][ T9941] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 166.644334][ T9941] [ 166.647106][ T9948] iommufd_mock iommufd_mock2: Adding to iommu group 10 [ 166.670696][ T9943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.789328][ T9943] bond1: (slave veth3): Enslaving as an active interface with a down link [ 166.826282][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 166.826299][ T43] audit: type=1400 audit(1789731745.082:1080): avc: denied { ioctl } for pid=9954 comm="syz.5.1133" path="socket:[48453]" dev="sockfs" ino=48453 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.828856][ T9955] sctp: [Deprecated]: syz.5.1133 (pid 9955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.828856][ T9955] Use struct sctp_sack_info instead [ 166.860536][ T43] audit: type=1400 audit(1789731745.122:1081): avc: denied { write } for pid=9956 comm="syz.6.1134" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.869505][ T43] audit: type=1400 audit(1789731745.122:1082): avc: denied { watch watch_reads } for pid=9956 comm="syz.6.1134" path="/187" dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.961934][ T9968] 9pnet_virtio: no channels available for device syz [ 167.027999][ T43] audit: type=1400 audit(1789731745.282:1083): avc: denied { setattr } for pid=9966 comm="syz.5.1135" name="[io_uring]" dev="anon_inodefs" ino=48463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.260048][ T43] audit: type=1400 audit(1789731745.522:1084): avc: denied { load_policy } for pid=9981 comm="syz.6.1137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.266703][ T9985] SELinux: common file does not define every permission it declares [ 167.268304][ T9985] SELinux: failed to load policy [ 167.286650][ T9982] lo speed is unknown, defaulting to 1000 [ 167.286708][ T9982] lo speed is unknown, defaulting to 1000 [ 167.300994][ T9982] lo speed is unknown, defaulting to 1000 [ 167.304518][ T9982] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 167.304549][ T9982] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 167.304585][ T9982] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 167.307676][ T9982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.314787][ T9982] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.354089][ T9982] lo speed is unknown, defaulting to 1000 [ 167.370517][ T9982] lo speed is unknown, defaulting to 1000 [ 167.374436][ T9982] lo speed is unknown, defaulting to 1000 [ 167.379785][ T9982] lo speed is unknown, defaulting to 1000 [ 167.381308][ T9982] lo speed is unknown, defaulting to 1000 [ 167.420707][ T43] audit: type=1400 audit(1789731745.682:1085): avc: denied { create } for pid=9987 comm="syz.6.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.490753][ T43] audit: type=1400 audit(1789731745.752:1086): avc: denied { read append } for pid=9987 comm="syz.6.1138" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 167.491008][ T43] audit: type=1400 audit(1789731745.752:1087): avc: denied { open } for pid=9987 comm="syz.6.1138" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 167.491808][ T43] audit: type=1400 audit(1789731745.752:1088): avc: denied { getopt } for pid=9987 comm="syz.6.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.492216][ T43] audit: type=1400 audit(1789731745.752:1089): avc: denied { getopt } for pid=9987 comm="syz.6.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.588185][ T9995] xt_hashlimit: size too large, truncated to 1048576 [ 167.947897][T10006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 168.131186][ T5731] Bluetooth: hci1: command 0x1003 tx timeout [ 168.131681][ T5734] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 168.317258][T10030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.411454][T10034] vlan2: entered promiscuous mode [ 168.411468][T10034] bridge0: entered promiscuous mode [ 168.459059][T10042] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.460844][T10042] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.462119][T10037] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.462156][T10037] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.502521][T10047] ip_tables: iptables: counters copy to user failed while replacing table [ 168.884022][T10053] xt_l2tp: unknown flags: 16 [ 169.130130][T10028] intel_ish_ipc 0000:00:01.0: Timed out waiting for HW ready [ 169.130153][T10028] intel_ish_ipc 0000:00:01.0: ISH: hw start failed. [ 169.258629][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1161'. [ 169.258758][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1161'. [ 169.827874][T10094] pxa27x-udc pcspkr: error -EINVAL: invalid resource (null) [ 169.827894][T10094] pxa27x-udc pcspkr: probe with driver pxa27x-udc failed with error -22 [ 169.847403][T10096] block nbd7: NBD_DISCONNECT [ 170.206038][ T1481] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 170.360606][ T1481] usb 12-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 170.361906][ T1481] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 170.361928][ T1481] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 170.364130][ T1481] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.364151][ T1481] usb 12-1: Product: syz [ 170.364164][ T1481] usb 12-1: Manufacturer: syz [ 170.364177][ T1481] usb 12-1: SerialNumber: syz [ 170.387882][ T1481] usb 12-1: USB2VGA dongle found at address 11 [ 170.398461][ T1481] usb 12-1: Allocated 8 output buffers [ 170.716776][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1179'. [ 170.826670][T10118] FAULT_INJECTION: forcing a failure. [ 170.826670][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 170.826694][T10118] CPU: 3 UID: 0 PID: 10118 Comm: syz.5.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.826710][T10118] Tainted: [L]=SOFTLOCKUP [ 170.826714][T10118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.826721][T10118] Call Trace: [ 170.826725][T10118] [ 170.826729][T10118] dump_stack_lvl+0x100/0x190 [ 170.826750][T10118] should_fail_ex.cold+0x5/0xa [ 170.826766][T10118] should_failslab+0xc2/0x120 [ 170.826781][T10118] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.826794][T10118] ? __kernfs_new_node+0xd2/0xa10 [ 170.826814][T10118] __kernfs_new_node+0xd2/0xa10 [ 170.826833][T10118] ? __pfx___kernfs_new_node+0x10/0x10 [ 170.826850][T10118] ? lock_acquire+0x1d1/0x380 [ 170.826863][T10118] ? kernfs_root+0x23/0x2a0 [ 170.826877][T10118] ? find_held_lock+0x2b/0x80 [ 170.826893][T10118] ? kernfs_root+0xee/0x2a0 [ 170.826911][T10118] ? kernfs_root+0xee/0x2a0 [ 170.826929][T10118] kernfs_new_node+0x117/0x150 [ 170.826948][T10118] __kernfs_create_file+0x53/0x350 [ 170.826963][T10118] sysfs_add_file_mode_ns+0x207/0x3c0 [ 170.826981][T10118] internal_create_group+0x593/0xfb0 [ 170.827000][T10118] ? __pfx_internal_create_group+0x10/0x10 [ 170.827018][T10118] ? kernfs_create_link+0x1bd/0x240 [ 170.827033][T10118] internal_create_groups+0x9d/0x150 [ 170.827050][T10118] device_add+0xf60/0x1970 [ 170.827067][T10118] ? __pfx_device_add+0x10/0x10 [ 170.827084][T10118] ? kobject_get+0xbb/0x150 [ 170.827096][T10118] cdev_device_add+0x12b/0x270 [ 170.827111][T10118] nvme_add_ctrl+0x15c/0x320 [ 170.827129][T10118] nvme_loop_create_ctrl+0x201/0xee0 [ 170.827144][T10118] nvmf_dev_write+0x4ee/0xb60 [ 170.827162][T10118] vfs_write+0x2aa/0x1050 [ 170.827173][T10118] ? __pfx_nvmf_dev_write+0x10/0x10 [ 170.827188][T10118] ? lock_acquire+0x1d1/0x380 [ 170.827199][T10118] ? __fget_files+0x34/0x3d0 [ 170.827213][T10118] ? __pfx_vfs_write+0x10/0x10 [ 170.827223][T10118] ? find_held_lock+0x2b/0x80 [ 170.827238][T10118] ? __fget_files+0x215/0x3d0 [ 170.827251][T10118] ? __fget_files+0x215/0x3d0 [ 170.827267][T10118] ? __fget_files+0x21f/0x3d0 [ 170.827284][T10118] ksys_write+0x12a/0x250 [ 170.827295][T10118] ? __pfx_ksys_write+0x10/0x10 [ 170.827306][T10118] ? trace_syscall_enter+0xcc/0x120 [ 170.827324][T10118] do_syscall_64+0x123/0x790 [ 170.827340][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.827352][T10118] RIP: 0033:0x7f719eb9e159 [ 170.827367][T10118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.827383][T10118] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.827403][T10118] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 170.827415][T10118] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 170.827428][T10118] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 170.827438][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.827445][T10118] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 170.827459][T10118] [ 171.124577][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.124880][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.126894][T10129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.135896][ T10] lo speed is unknown, defaulting to 1000 [ 171.268421][T10142] FAULT_INJECTION: forcing a failure. [ 171.268421][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 171.268444][T10142] CPU: 2 UID: 0 PID: 10142 Comm: syz.6.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.268460][T10142] Tainted: [L]=SOFTLOCKUP [ 171.268464][T10142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.268471][T10142] Call Trace: [ 171.268475][T10142] [ 171.268480][T10142] dump_stack_lvl+0x100/0x190 [ 171.268500][T10142] should_fail_ex.cold+0x5/0xa [ 171.268516][T10142] should_failslab+0xc2/0x120 [ 171.268531][T10142] kmem_cache_alloc_noprof+0x92/0x6a0 [ 171.268544][T10142] ? __kernfs_new_node+0xd2/0xa10 [ 171.268565][T10142] __kernfs_new_node+0xd2/0xa10 [ 171.268583][T10142] ? __pfx___kernfs_new_node+0x10/0x10 [ 171.268601][T10142] ? lock_acquire+0x1d1/0x380 [ 171.268614][T10142] ? kernfs_root+0x23/0x2a0 [ 171.268628][T10142] ? find_held_lock+0x2b/0x80 [ 171.268644][T10142] ? kernfs_root+0xee/0x2a0 [ 171.268658][T10142] ? kernfs_root+0xee/0x2a0 [ 171.268676][T10142] kernfs_new_node+0x117/0x150 [ 171.268695][T10142] __kernfs_create_file+0x53/0x350 [ 171.268710][T10142] sysfs_add_file_mode_ns+0x207/0x3c0 [ 171.268728][T10142] internal_create_group+0x593/0xfb0 [ 171.268747][T10142] ? __pfx_internal_create_group+0x10/0x10 [ 171.268766][T10142] ? kernfs_create_link+0x1bd/0x240 [ 171.268781][T10142] internal_create_groups+0x9d/0x150 [ 171.268798][T10142] device_add+0xf60/0x1970 [ 171.268815][T10142] ? __pfx_device_add+0x10/0x10 [ 171.268832][T10142] ? kobject_get+0xbb/0x150 [ 171.268844][T10142] cdev_device_add+0x12b/0x270 [ 171.268859][T10142] nvme_add_ctrl+0x15c/0x320 [ 171.268876][T10142] nvme_loop_create_ctrl+0x201/0xee0 [ 171.268892][T10142] nvmf_dev_write+0x4ee/0xb60 [ 171.268910][T10142] vfs_write+0x2aa/0x1050 [ 171.268922][T10142] ? __pfx_nvmf_dev_write+0x10/0x10 [ 171.268944][T10142] ? lock_acquire+0x1d1/0x380 [ 171.268956][T10142] ? __fget_files+0x34/0x3d0 [ 171.268969][T10142] ? __pfx_vfs_write+0x10/0x10 [ 171.268980][T10142] ? find_held_lock+0x2b/0x80 [ 171.268995][T10142] ? __fget_files+0x215/0x3d0 [ 171.269008][T10142] ? __fget_files+0x215/0x3d0 [ 171.269023][T10142] ? __fget_files+0x21f/0x3d0 [ 171.269040][T10142] ksys_write+0x12a/0x250 [ 171.269052][T10142] ? __pfx_ksys_write+0x10/0x10 [ 171.269062][T10142] ? trace_syscall_enter+0xcc/0x120 [ 171.269080][T10142] do_syscall_64+0x123/0x790 [ 171.269097][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.269108][T10142] RIP: 0033:0x7f0a2f19e159 [ 171.269118][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.269132][T10142] RSP: 002b:00007f0a2fff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.269148][T10142] RAX: ffffffffffffffda RBX: 00007f0a2f425fa0 RCX: 00007f0a2f19e159 [ 171.269158][T10142] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 171.269167][T10142] RBP: 00007f0a2fff1090 R08: 0000000000000000 R09: 0000000000000000 [ 171.269175][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.269186][T10142] R13: 00007f0a2f426038 R14: 00007f0a2f425fa0 R15: 00007ffeed0087a8 [ 171.269209][T10142] [ 171.349951][ T6127] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 171.412636][T10152] Invalid ELF header type: 2 != 1 [ 171.413126][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1195'. [ 171.413142][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1195'. [ 171.499946][ T6127] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.500921][ T6127] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.500934][ T6127] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.500944][ T6127] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.500963][ T6127] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.502310][ T6127] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.502322][ T6127] usb 10-1: Product: syz [ 171.502329][ T6127] usb 10-1: Manufacturer: syz [ 171.508890][ T6127] cdc_wdm 10-1:1.0: skipping garbage [ 171.508900][ T6127] cdc_wdm 10-1:1.0: skipping garbage [ 171.516292][ T6127] cdc_wdm 10-1:1.0: cdc-wdm2: USB WDM device [ 171.516303][ T6127] cdc_wdm 10-1:1.0: Unknown control protocol [ 171.567465][T10156] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 171.571818][T10157] iommufd_mock iommufd_mock2: Adding to iommu group 9 [ 171.723491][ T10] usb 10-1: USB disconnect, device number 6 [ 171.866531][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 171.866553][ T43] audit: type=1400 audit(1789731750.122:1151): avc: denied { write } for pid=10161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.936848][ T43] audit: type=1400 audit(1789731750.192:1152): avc: denied { write } for pid=10164 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.073365][ T43] audit: type=1400 audit(1789731750.332:1153): avc: denied { write } for pid=10167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.151040][ T43] audit: type=1400 audit(1789731750.412:1154): avc: denied { write } for pid=10170 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.127302][ T43] audit: type=1400 audit(1789731752.382:1155): avc: denied { write } for pid=10172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.191838][ T43] audit: type=1400 audit(1789731752.452:1156): avc: denied { write } for pid=10175 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.278930][T10181] FAULT_INJECTION: forcing a failure. [ 174.278930][T10181] name fail_futex, interval 1, probability 0, space 0, times 1 [ 174.278953][T10181] CPU: 2 UID: 0 PID: 10181 Comm: syz.5.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.278968][T10181] Tainted: [L]=SOFTLOCKUP [ 174.278972][T10181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.278980][T10181] Call Trace: [ 174.278984][T10181] [ 174.278989][T10181] dump_stack_lvl+0x100/0x190 [ 174.279010][T10181] should_fail_ex.cold+0x5/0xa [ 174.279028][T10181] get_futex_key+0x1d0/0x14f0 [ 174.279046][T10181] ? __pfx_get_futex_key+0x10/0x10 [ 174.279063][T10181] ? trace_event_buffer_commit+0x20a/0xa80 [ 174.279082][T10181] futex_wake+0xf4/0x5e0 [ 174.279102][T10181] ? __pfx_futex_wake+0x10/0x10 [ 174.279121][T10181] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 174.279143][T10181] do_futex+0x2b2/0x440 [ 174.279160][T10181] ? __pfx_do_futex+0x10/0x10 [ 174.279175][T10181] ? event_triggers_call+0x337/0x4d0 [ 174.279193][T10181] __x64_sys_futex+0x34f/0x4d0 [ 174.279211][T10181] ? __pfx___x64_sys_futex+0x10/0x10 [ 174.279226][T10181] ? find_held_lock+0x2b/0x80 [ 174.279241][T10181] ? trace_syscall_enter+0xcc/0x120 [ 174.279255][T10181] ? trace_syscall_enter+0xcc/0x120 [ 174.279272][T10181] do_syscall_64+0x123/0x790 [ 174.279290][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.279302][T10181] RIP: 0033:0x7f719eb9e159 [ 174.279312][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.279323][T10181] RSP: 002b:00007f719f9b90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.279354][T10181] RAX: ffffffffffffffda RBX: 00007f719ee25fa8 RCX: 00007f719eb9e159 [ 174.279362][T10181] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f719ee25fac [ 174.279370][T10181] RBP: 00007f719ee25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 174.279381][T10181] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000000 [ 174.279387][T10181] R13: 00007f719ee26038 R14: 00007ffef4ad07d0 R15: 00007ffef4ad08b8 [ 174.279402][T10181] [ 174.331712][ T43] audit: type=1400 audit(1789731752.592:1157): avc: denied { write } for pid=10179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.336783][T10181] team0: No ports can be present during mode change [ 174.337714][T10181] vlan0: entered promiscuous mode [ 174.347267][T10181] vlan0: entered allmulticast mode [ 174.347280][T10181] veth0_vlan: entered allmulticast mode [ 174.347304][T10181] team0: Device vlan0 is of different type [ 174.353286][T10181] tipc: Enabling of bearer rejected, already enabled [ 174.412439][ T43] audit: type=1400 audit(1789731752.672:1158): avc: denied { create } for pid=10185 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.412899][ T43] audit: type=1400 audit(1789731752.672:1159): avc: denied { ioctl } for pid=10185 comm="syz.6.1200" path="socket:[49807]" dev="sockfs" ino=49807 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.413801][ T43] audit: type=1400 audit(1789731752.672:1160): avc: denied { write } for pid=10185 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.467861][T10192] vlan3: entered promiscuous mode [ 174.467876][T10192] hsr0: entered promiscuous mode [ 174.469170][T10192] vlan3: entered allmulticast mode [ 174.469181][T10192] hsr0: entered allmulticast mode [ 174.469189][T10192] hsr_slave_0: entered allmulticast mode [ 174.469198][T10192] hsr_slave_1: entered allmulticast mode [ 174.484137][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1203'. [ 174.492496][T10193] FAULT_INJECTION: forcing a failure. [ 174.492496][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 174.492530][T10193] CPU: 2 UID: 0 PID: 10193 Comm: syz.5.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.492553][T10193] Tainted: [L]=SOFTLOCKUP [ 174.492560][T10193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.492570][T10193] Call Trace: [ 174.492577][T10193] [ 174.492584][T10193] dump_stack_lvl+0x100/0x190 [ 174.492615][T10193] should_fail_ex.cold+0x5/0xa [ 174.492639][T10193] should_failslab+0xc2/0x120 [ 174.492663][T10193] kmem_cache_alloc_noprof+0x92/0x6a0 [ 174.492682][T10193] ? __kernfs_new_node+0xd2/0xa10 [ 174.492714][T10193] __kernfs_new_node+0xd2/0xa10 [ 174.492742][T10193] ? __pfx___kernfs_new_node+0x10/0x10 [ 174.492770][T10193] ? lock_acquire+0x1d1/0x380 [ 174.492788][T10193] ? kernfs_root+0x23/0x2a0 [ 174.492812][T10193] ? find_held_lock+0x2b/0x80 [ 174.492835][T10193] ? kernfs_root+0xee/0x2a0 [ 174.492857][T10193] ? kernfs_root+0xee/0x2a0 [ 174.492885][T10193] kernfs_new_node+0x117/0x150 [ 174.492915][T10193] __kernfs_create_file+0x53/0x350 [ 174.492944][T10193] sysfs_add_file_mode_ns+0x207/0x3c0 [ 174.492970][T10193] internal_create_group+0x593/0xfb0 [ 174.493000][T10193] ? __pfx_internal_create_group+0x10/0x10 [ 174.493027][T10193] ? kernfs_create_link+0x1bd/0x240 [ 174.493051][T10193] internal_create_groups+0x9d/0x150 [ 174.493076][T10193] device_add+0xf60/0x1970 [ 174.493122][T10193] ? __pfx_device_add+0x10/0x10 [ 174.493149][T10193] ? kobject_get+0xbb/0x150 [ 174.493169][T10193] cdev_device_add+0x12b/0x270 [ 174.493193][T10193] nvme_add_ctrl+0x15c/0x320 [ 174.493221][T10193] nvme_loop_create_ctrl+0x201/0xee0 [ 174.493246][T10193] nvmf_dev_write+0x4ee/0xb60 [ 174.493274][T10193] vfs_write+0x2aa/0x1050 [ 174.493293][T10193] ? __pfx_nvmf_dev_write+0x10/0x10 [ 174.493315][T10193] ? lock_acquire+0x1d1/0x380 [ 174.493332][T10193] ? __fget_files+0x34/0x3d0 [ 174.493354][T10193] ? __pfx_vfs_write+0x10/0x10 [ 174.493370][T10193] ? find_held_lock+0x2b/0x80 [ 174.493392][T10193] ? __fget_files+0x215/0x3d0 [ 174.493412][T10193] ? __fget_files+0x215/0x3d0 [ 174.493437][T10193] ? __fget_files+0x21f/0x3d0 [ 174.493465][T10193] ksys_write+0x12a/0x250 [ 174.493482][T10193] ? __pfx_ksys_write+0x10/0x10 [ 174.493498][T10193] ? trace_syscall_enter+0xcc/0x120 [ 174.493526][T10193] do_syscall_64+0x123/0x790 [ 174.493552][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.493570][T10193] RIP: 0033:0x7f719eb9e159 [ 174.493586][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.493602][T10193] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.493620][T10193] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 174.493631][T10193] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 174.493642][T10193] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.493653][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.493663][T10193] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 174.493687][T10193] [ 174.728134][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1206'. [ 174.728445][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1206'. [ 174.926137][T10226] FAULT_INJECTION: forcing a failure. [ 174.926137][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 174.926168][T10226] CPU: 1 UID: 0 PID: 10226 Comm: syz.7.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.926191][T10226] Tainted: [L]=SOFTLOCKUP [ 174.926197][T10226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.926209][T10226] Call Trace: [ 174.926215][T10226] [ 174.926221][T10226] dump_stack_lvl+0x100/0x190 [ 174.926280][T10226] should_fail_ex.cold+0x5/0xa [ 174.926307][T10226] should_failslab+0xc2/0x120 [ 174.926331][T10226] kmem_cache_alloc_noprof+0x92/0x6a0 [ 174.926352][T10226] ? do_getname+0x35/0x390 [ 174.926381][T10226] do_getname+0x35/0x390 [ 174.926408][T10226] do_sys_openat2+0xc7/0x1e0 [ 174.926433][T10226] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.926465][T10226] __x64_sys_openat+0x12d/0x210 [ 174.926490][T10226] ? __pfx___x64_sys_openat+0x10/0x10 [ 174.926514][T10226] ? find_held_lock+0x2b/0x80 [ 174.926538][T10226] ? trace_syscall_enter+0xcc/0x120 [ 174.926567][T10226] do_syscall_64+0x123/0x790 [ 174.926594][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.926612][T10226] RIP: 0033:0x7fec7c79e159 [ 174.926627][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.926644][T10226] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.926661][T10226] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 174.926673][T10226] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 174.926684][T10226] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.926694][T10226] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 174.926706][T10226] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 174.926730][T10226] [ 175.099859][T10236] FAULT_INJECTION: forcing a failure. [ 175.099859][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 175.099885][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.7.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.099900][T10236] Tainted: [L]=SOFTLOCKUP [ 175.099904][T10236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.099911][T10236] Call Trace: [ 175.099921][T10236] [ 175.099925][T10236] dump_stack_lvl+0x100/0x190 [ 175.099953][T10236] should_fail_ex.cold+0x5/0xa [ 175.099970][T10236] should_failslab+0xc2/0x120 [ 175.099987][T10236] kmem_cache_alloc_noprof+0x92/0x6a0 [ 175.100000][T10236] ? __kernfs_new_node+0xd2/0xa10 [ 175.100020][T10236] __kernfs_new_node+0xd2/0xa10 [ 175.100049][T10236] ? kernfs_add_one+0x611/0xaa0 [ 175.100069][T10236] ? __pfx___kernfs_new_node+0x10/0x10 [ 175.100087][T10236] ? lock_acquire+0x1d1/0x380 [ 175.100099][T10236] ? kernfs_root+0x23/0x2a0 [ 175.100114][T10236] ? find_held_lock+0x2b/0x80 [ 175.100130][T10236] ? kernfs_root+0xee/0x2a0 [ 175.100144][T10236] ? kernfs_root+0xee/0x2a0 [ 175.100162][T10236] kernfs_create_dir_ns+0xa6/0x2b0 [ 175.100176][T10236] internal_create_group+0x36f/0xfb0 [ 175.100195][T10236] ? __pfx_internal_create_group+0x10/0x10 [ 175.100214][T10236] ? kernfs_create_link+0x1bd/0x240 [ 175.100228][T10236] internal_create_groups+0x9d/0x150 [ 175.100246][T10236] device_add+0xf60/0x1970 [ 175.100263][T10236] ? __pfx_device_add+0x10/0x10 [ 175.100281][T10236] ? kobject_get+0xbb/0x150 [ 175.100297][T10236] cdev_device_add+0x12b/0x270 [ 175.100338][T10236] nvme_add_ctrl+0x15c/0x320 [ 175.100367][T10236] nvme_loop_create_ctrl+0x201/0xee0 [ 175.100390][T10236] nvmf_dev_write+0x4ee/0xb60 [ 175.100415][T10236] vfs_write+0x2aa/0x1050 [ 175.100431][T10236] ? __pfx_nvmf_dev_write+0x10/0x10 [ 175.100481][T10236] ? lock_acquire+0x1d1/0x380 [ 175.100495][T10236] ? __fget_files+0x34/0x3d0 [ 175.100509][T10236] ? __pfx_vfs_write+0x10/0x10 [ 175.100519][T10236] ? find_held_lock+0x2b/0x80 [ 175.100534][T10236] ? __fget_files+0x215/0x3d0 [ 175.100547][T10236] ? __fget_files+0x215/0x3d0 [ 175.100563][T10236] ? __fget_files+0x21f/0x3d0 [ 175.100580][T10236] ksys_write+0x12a/0x250 [ 175.100591][T10236] ? __pfx_ksys_write+0x10/0x10 [ 175.100601][T10236] ? trace_syscall_enter+0xcc/0x120 [ 175.100620][T10236] do_syscall_64+0x123/0x790 [ 175.100637][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.100649][T10236] RIP: 0033:0x7fec7c79e159 [ 175.100659][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.100670][T10236] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.100686][T10236] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 175.100693][T10236] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 175.100700][T10236] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.100706][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.100712][T10236] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 175.100727][T10236] [ 175.227335][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.234797][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.237122][ T5731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.237885][ T5731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.238338][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.256380][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.269854][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.270179][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.272089][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.272668][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.514857][T10241] lo speed is unknown, defaulting to 1000 [ 175.887197][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.889029][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.889140][T10241] bridge_slave_0: entered allmulticast mode [ 175.899092][T10241] bridge_slave_0: entered promiscuous mode [ 175.902451][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.902669][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.902760][T10241] bridge_slave_1: entered allmulticast mode [ 175.903974][T10241] bridge_slave_1: entered promiscuous mode [ 175.937627][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.941276][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.963461][T10241] team0: Port device team_slave_0 added [ 175.975456][T10241] team0: Port device team_slave_1 added [ 176.000056][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.000073][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.000091][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.001551][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.001563][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.001582][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.040899][T10241] hsr_slave_0: entered promiscuous mode [ 176.041638][T10241] hsr_slave_1: entered promiscuous mode [ 176.065091][T10273] FAULT_INJECTION: forcing a failure. [ 176.065091][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.065112][T10273] CPU: 1 UID: 0 PID: 10273 Comm: syz.6.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.065127][T10273] Tainted: [L]=SOFTLOCKUP [ 176.065131][T10273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.065138][T10273] Call Trace: [ 176.065141][T10273] [ 176.065146][T10273] dump_stack_lvl+0x100/0x190 [ 176.065166][T10273] should_fail_ex.cold+0x5/0xa [ 176.065182][T10273] strncpy_from_user+0x3b/0x2d0 [ 176.065196][T10273] do_getname+0x78/0x390 [ 176.065214][T10273] do_sys_openat2+0xc7/0x1e0 [ 176.065230][T10273] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.065250][T10273] __x64_sys_openat+0x12d/0x210 [ 176.065266][T10273] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.065282][T10273] ? find_held_lock+0x2b/0x80 [ 176.065316][T10273] ? trace_syscall_enter+0xcc/0x120 [ 176.065334][T10273] do_syscall_64+0x123/0x790 [ 176.065351][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.065362][T10273] RIP: 0033:0x7f0a2f19e159 [ 176.065372][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.065383][T10273] RSP: 002b:00007f0a2fff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.065394][T10273] RAX: ffffffffffffffda RBX: 00007f0a2f425fa0 RCX: 00007f0a2f19e159 [ 176.065406][T10273] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 176.065412][T10273] RBP: 00007f0a2fff1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.065419][T10273] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 176.065425][T10273] R13: 00007f0a2f426038 R14: 00007f0a2f425fa0 R15: 00007ffeed0087a8 [ 176.065439][T10273] [ 176.193779][T10277] netlink: 'syz.6.1226': attribute type 10 has an invalid length. [ 176.211652][T10277] team0: Port device dummy0 added [ 176.224742][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1226'. [ 176.325970][T10241] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.335853][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.336474][T10241] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 176.339187][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.340210][T10241] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 176.345913][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.346349][T10241] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 176.358192][T10279] FAULT_INJECTION: forcing a failure. [ 176.358192][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 176.358223][T10279] CPU: 3 UID: 0 PID: 10279 Comm: syz.6.1227 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.358248][T10279] Tainted: [L]=SOFTLOCKUP [ 176.358255][T10279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.358265][T10279] Call Trace: [ 176.358272][T10279] [ 176.358279][T10279] dump_stack_lvl+0x100/0x190 [ 176.358308][T10279] should_fail_ex.cold+0x5/0xa [ 176.358335][T10279] should_failslab+0xc2/0x120 [ 176.358358][T10279] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.358379][T10279] ? __kernfs_new_node+0xd2/0xa10 [ 176.358411][T10279] __kernfs_new_node+0xd2/0xa10 [ 176.358437][T10279] ? __lock_acquire+0x5c0/0x1f40 [ 176.358458][T10279] ? __lock_acquire+0x5c0/0x1f40 [ 176.358477][T10279] ? __pfx___kernfs_new_node+0x10/0x10 [ 176.358506][T10279] ? lock_acquire+0x1d1/0x380 [ 176.358525][T10279] ? kernfs_root+0x23/0x2a0 [ 176.358549][T10279] ? find_held_lock+0x2b/0x80 [ 176.358574][T10279] ? kernfs_root+0xee/0x2a0 [ 176.358597][T10279] ? kernfs_root+0xee/0x2a0 [ 176.358628][T10279] kernfs_new_node+0x117/0x150 [ 176.358659][T10279] __kernfs_create_file+0x53/0x350 [ 176.358684][T10279] sysfs_add_file_mode_ns+0x207/0x3c0 [ 176.358714][T10279] internal_create_group+0x593/0xfb0 [ 176.358747][T10279] ? __pfx_internal_create_group+0x10/0x10 [ 176.358776][T10279] ? kernfs_create_link+0x1bd/0x240 [ 176.358801][T10279] internal_create_groups+0x9d/0x150 [ 176.358829][T10279] device_add+0xf60/0x1970 [ 176.358855][T10279] ? __pfx_device_add+0x10/0x10 [ 176.358885][T10279] ? kobject_get+0xbb/0x150 [ 176.358901][T10279] cdev_device_add+0x12b/0x270 [ 176.358920][T10279] nvme_add_ctrl+0x15c/0x320 [ 176.358945][T10279] nvme_loop_create_ctrl+0x201/0xee0 [ 176.358970][T10279] nvmf_dev_write+0x4ee/0xb60 [ 176.359000][T10279] vfs_write+0x2aa/0x1050 [ 176.359019][T10279] ? __pfx_nvmf_dev_write+0x10/0x10 [ 176.359042][T10279] ? lock_acquire+0x1d1/0x380 [ 176.359060][T10279] ? __fget_files+0x34/0x3d0 [ 176.359082][T10279] ? __pfx_vfs_write+0x10/0x10 [ 176.359099][T10279] ? find_held_lock+0x2b/0x80 [ 176.359123][T10279] ? __fget_files+0x215/0x3d0 [ 176.359144][T10279] ? __fget_files+0x215/0x3d0 [ 176.359169][T10279] ? __fget_files+0x21f/0x3d0 [ 176.359199][T10279] ksys_write+0x12a/0x250 [ 176.359217][T10279] ? __pfx_ksys_write+0x10/0x10 [ 176.359233][T10279] ? trace_syscall_enter+0xcc/0x120 [ 176.359262][T10279] do_syscall_64+0x123/0x790 [ 176.359290][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.359308][T10279] RIP: 0033:0x7f0a2f19e159 [ 176.359324][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.359361][T10279] RSP: 002b:00007f0a2fff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.359379][T10279] RAX: ffffffffffffffda RBX: 00007f0a2f425fa0 RCX: 00007f0a2f19e159 [ 176.359391][T10279] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 176.359403][T10279] RBP: 00007f0a2fff1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.359414][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.359425][T10279] R13: 00007f0a2f426038 R14: 00007f0a2f425fa0 R15: 00007ffeed0087a8 [ 176.359451][T10279] [ 176.360174][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.416480][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.416527][T10241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.416625][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.416668][T10241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.452919][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.460562][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.493713][T10290] tmpfs: Bad value for 'mpol' [ 176.508274][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.512005][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.512526][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.512642][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.513222][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.514407][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.514611][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.514803][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.515015][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.515318][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.6.1229 [ 176.548072][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.569003][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.577269][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.577350][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.586073][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.586118][ T7496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.997601][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.998620][T10306] ip6t_hbh: too many supported opts specified [ 177.067908][T10310] FAULT_INJECTION: forcing a failure. [ 177.067908][T10310] name failslab, interval 1, probability 0, space 0, times 0 [ 177.067930][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.5.1233 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.067946][T10310] Tainted: [L]=SOFTLOCKUP [ 177.067950][T10310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.067957][T10310] Call Trace: [ 177.067960][T10310] [ 177.067965][T10310] dump_stack_lvl+0x100/0x190 [ 177.067985][T10310] should_fail_ex.cold+0x5/0xa [ 177.068001][T10310] should_failslab+0xc2/0x120 [ 177.068016][T10310] kmem_cache_alloc_noprof+0x92/0x6a0 [ 177.068029][T10310] ? alloc_empty_file+0x5b/0x1c0 [ 177.068046][T10310] alloc_empty_file+0x5b/0x1c0 [ 177.068062][T10310] path_openat+0xdb/0x2440 [ 177.068077][T10310] ? __pfx_path_openat+0x10/0x10 [ 177.068095][T10310] do_file_open+0x20e/0x430 [ 177.068110][T10310] ? __pfx_do_file_open+0x10/0x10 [ 177.068133][T10310] ? _raw_spin_unlock+0x28/0x50 [ 177.068146][T10310] ? alloc_fd+0x471/0x7a0 [ 177.068164][T10310] do_sys_openat2+0x10f/0x1e0 [ 177.068179][T10310] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.068199][T10310] __x64_sys_openat+0x12d/0x210 [ 177.068215][T10310] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.068230][T10310] ? find_held_lock+0x2b/0x80 [ 177.068246][T10310] ? trace_syscall_enter+0xcc/0x120 [ 177.068264][T10310] do_syscall_64+0x123/0x790 [ 177.068280][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.068310][T10310] RIP: 0033:0x7f719eb9e159 [ 177.068322][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.068333][T10310] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.068345][T10310] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 177.068352][T10310] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 177.068358][T10310] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.068365][T10310] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 177.068372][T10310] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 177.068386][T10310] [ 177.215463][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1235'. [ 177.288195][T10241] veth0_vlan: entered promiscuous mode [ 177.313424][T10241] veth1_vlan: entered promiscuous mode [ 177.333537][ T5734] Bluetooth: hci1: command tx timeout [ 177.334904][T10241] veth0_macvtap: entered promiscuous mode [ 177.338460][T10320] FAULT_INJECTION: forcing a failure. [ 177.338460][T10320] name failslab, interval 1, probability 0, space 0, times 0 [ 177.338483][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.5.1236 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.338499][T10320] Tainted: [L]=SOFTLOCKUP [ 177.338503][T10320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.338509][T10320] Call Trace: [ 177.338513][T10320] [ 177.338517][T10320] dump_stack_lvl+0x100/0x190 [ 177.338538][T10320] should_fail_ex.cold+0x5/0xa [ 177.338554][T10320] should_failslab+0xc2/0x120 [ 177.338569][T10320] kmem_cache_alloc_noprof+0x92/0x6a0 [ 177.338582][T10320] ? __kernfs_new_node+0xd2/0xa10 [ 177.338601][T10320] __kernfs_new_node+0xd2/0xa10 [ 177.338617][T10320] ? kernfs_add_one+0x611/0xaa0 [ 177.338635][T10320] ? __pfx___kernfs_new_node+0x10/0x10 [ 177.338653][T10320] ? lock_acquire+0x1d1/0x380 [ 177.338665][T10320] ? kernfs_root+0x23/0x2a0 [ 177.338680][T10320] ? find_held_lock+0x2b/0x80 [ 177.338695][T10320] ? kernfs_root+0xee/0x2a0 [ 177.338709][T10320] ? kernfs_root+0xee/0x2a0 [ 177.338727][T10320] kernfs_create_dir_ns+0xa6/0x2b0 [ 177.338740][T10320] internal_create_group+0x36f/0xfb0 [ 177.338759][T10320] ? __pfx_internal_create_group+0x10/0x10 [ 177.338778][T10320] ? kernfs_create_link+0x1bd/0x240 [ 177.338792][T10320] internal_create_groups+0x9d/0x150 [ 177.338810][T10320] device_add+0xf60/0x1970 [ 177.338827][T10320] ? __pfx_device_add+0x10/0x10 [ 177.338844][T10320] ? kobject_get+0xbb/0x150 [ 177.338856][T10320] cdev_device_add+0x12b/0x270 [ 177.338871][T10320] nvme_add_ctrl+0x15c/0x320 [ 177.338888][T10320] nvme_loop_create_ctrl+0x201/0xee0 [ 177.338904][T10320] nvmf_dev_write+0x4ee/0xb60 [ 177.338921][T10320] vfs_write+0x2aa/0x1050 [ 177.338933][T10320] ? __pfx_nvmf_dev_write+0x10/0x10 [ 177.338948][T10320] ? lock_acquire+0x1d1/0x380 [ 177.338959][T10320] ? __fget_files+0x34/0x3d0 [ 177.338977][T10320] ? __pfx_vfs_write+0x10/0x10 [ 177.338988][T10320] ? find_held_lock+0x2b/0x80 [ 177.339003][T10320] ? __fget_files+0x215/0x3d0 [ 177.339016][T10320] ? __fget_files+0x215/0x3d0 [ 177.339045][T10320] ? __fget_files+0x21f/0x3d0 [ 177.339065][T10320] ksys_write+0x12a/0x250 [ 177.339076][T10320] ? __pfx_ksys_write+0x10/0x10 [ 177.339086][T10320] ? trace_syscall_enter+0xcc/0x120 [ 177.339105][T10320] do_syscall_64+0x123/0x790 [ 177.339121][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.339133][T10320] RIP: 0033:0x7f719eb9e159 [ 177.339144][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.339155][T10320] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.339166][T10320] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 177.339173][T10320] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 177.339180][T10320] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.339186][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.339193][T10320] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 177.339207][T10320] [ 177.340687][T10241] veth1_macvtap: entered promiscuous mode [ 177.358156][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.365748][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.437484][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 177.437501][ T43] audit: type=1400 audit(1789731755.692:1173): avc: denied { ioctl } for pid=10322 comm="syz.6.1238" path="socket:[49091]" dev="sockfs" ino=49091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.479923][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.481288][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.481324][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.481352][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.549618][ T7500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.549630][ T7500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.567307][T10329] xt_hashlimit: overflow, try lower: 0/0 [ 177.597283][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.597298][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.615384][ T43] audit: type=1400 audit(1789731755.872:1174): avc: denied { mounton } for pid=10241 comm="syz-executor" path="/syzkaller.XBXHWg/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 177.619135][ T43] audit: type=1400 audit(1789731755.872:1175): avc: denied { mounton } for pid=10241 comm="syz-executor" path="/syzkaller.XBXHWg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 177.622256][ T43] audit: type=1400 audit(1789731755.882:1176): avc: denied { mounton } for pid=10241 comm="syz-executor" path="/syzkaller.XBXHWg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 177.650083][ T43] audit: type=1400 audit(1789731755.912:1177): avc: denied { mounton } for pid=10241 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 177.650497][ T43] audit: type=1400 audit(1789731755.912:1178): avc: denied { mount } for pid=10241 comm="syz-executor" name="/" dev="gadgetfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 177.714988][ T43] audit: type=1400 audit(1789731756.971:1179): avc: denied { setopt } for pid=10334 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.715541][ T43] audit: type=1400 audit(1789731756.971:1180): avc: denied { write } for pid=10334 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.731072][ T43] audit: type=1400 audit(1789731756.981:1181): avc: denied { read } for pid=10334 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.801223][T10343] FAULT_INJECTION: forcing a failure. [ 177.801223][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 177.801254][T10343] CPU: 3 UID: 0 PID: 10343 Comm: syz.5.1242 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.801278][T10343] Tainted: [L]=SOFTLOCKUP [ 177.801284][T10343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.801295][T10343] Call Trace: [ 177.801301][T10343] [ 177.801308][T10343] dump_stack_lvl+0x100/0x190 [ 177.801340][T10343] should_fail_ex.cold+0x5/0xa [ 177.801365][T10343] should_failslab+0xc2/0x120 [ 177.801394][T10343] kmem_cache_alloc_noprof+0x92/0x6a0 [ 177.801413][T10343] ? security_file_alloc+0x34/0x2c0 [ 177.801441][T10343] security_file_alloc+0x34/0x2c0 [ 177.801464][T10343] init_file+0x95/0x480 [ 177.801488][T10343] alloc_empty_file+0x79/0x1c0 [ 177.801514][T10343] path_openat+0xdb/0x2440 [ 177.801542][T10343] ? __pfx_path_openat+0x10/0x10 [ 177.801571][T10343] do_file_open+0x20e/0x430 [ 177.801596][T10343] ? __pfx_do_file_open+0x10/0x10 [ 177.801636][T10343] ? _raw_spin_unlock+0x28/0x50 [ 177.801658][T10343] ? alloc_fd+0x471/0x7a0 [ 177.801688][T10343] do_sys_openat2+0x10f/0x1e0 [ 177.801714][T10343] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.801748][T10343] __x64_sys_openat+0x12d/0x210 [ 177.801774][T10343] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.801798][T10343] ? find_held_lock+0x2b/0x80 [ 177.801825][T10343] ? trace_syscall_enter+0xcc/0x120 [ 177.801856][T10343] do_syscall_64+0x123/0x790 [ 177.801883][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.801902][T10343] RIP: 0033:0x7f719eb9e159 [ 177.801917][T10343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.801934][T10343] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.801953][T10343] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 177.801966][T10343] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 177.801977][T10343] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.801987][T10343] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 177.801998][T10343] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 177.802023][T10343] [ 177.901849][T10341] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 177.938293][T10350] FAULT_INJECTION: forcing a failure. [ 177.938293][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 177.939570][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.5.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.939588][T10350] Tainted: [L]=SOFTLOCKUP [ 177.939592][T10350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.939599][T10350] Call Trace: [ 177.939603][T10350] [ 177.939608][T10350] dump_stack_lvl+0x100/0x190 [ 177.939630][T10350] should_fail_ex.cold+0x5/0xa [ 177.939646][T10350] should_failslab+0xc2/0x120 [ 177.939661][T10350] kmem_cache_alloc_noprof+0x92/0x6a0 [ 177.939674][T10350] ? __kernfs_new_node+0xd2/0xa10 [ 177.939693][T10350] __kernfs_new_node+0xd2/0xa10 [ 177.939712][T10350] ? __pfx___kernfs_new_node+0x10/0x10 [ 177.939730][T10350] ? lock_acquire+0x1d1/0x380 [ 177.939741][T10350] ? kernfs_root+0x23/0x2a0 [ 177.939756][T10350] ? find_held_lock+0x2b/0x80 [ 177.939771][T10350] ? kernfs_root+0xee/0x2a0 [ 177.939785][T10350] ? kernfs_root+0xee/0x2a0 [ 177.939803][T10350] kernfs_new_node+0x117/0x150 [ 177.939834][T10350] __kernfs_create_file+0x53/0x350 [ 177.939849][T10350] sysfs_add_file_mode_ns+0x207/0x3c0 [ 177.939866][T10350] internal_create_group+0x593/0xfb0 [ 177.939888][T10350] ? __pfx_internal_create_group+0x10/0x10 [ 177.939906][T10350] ? kernfs_create_link+0x1bd/0x240 [ 177.939921][T10350] internal_create_groups+0x9d/0x150 [ 177.939938][T10350] device_add+0xf60/0x1970 [ 177.939955][T10350] ? __pfx_device_add+0x10/0x10 [ 177.939972][T10350] ? kobject_get+0xbb/0x150 [ 177.939985][T10350] cdev_device_add+0x12b/0x270 [ 177.939999][T10350] nvme_add_ctrl+0x15c/0x320 [ 177.940019][T10350] nvme_loop_create_ctrl+0x201/0xee0 [ 177.940038][T10350] nvmf_dev_write+0x4ee/0xb60 [ 177.940056][T10350] vfs_write+0x2aa/0x1050 [ 177.940068][T10350] ? __pfx_nvmf_dev_write+0x10/0x10 [ 177.940083][T10350] ? lock_acquire+0x1d1/0x380 [ 177.940094][T10350] ? __fget_files+0x34/0x3d0 [ 177.940108][T10350] ? __pfx_vfs_write+0x10/0x10 [ 177.940118][T10350] ? find_held_lock+0x2b/0x80 [ 177.940133][T10350] ? __fget_files+0x215/0x3d0 [ 177.940146][T10350] ? __fget_files+0x215/0x3d0 [ 177.940161][T10350] ? __fget_files+0x21f/0x3d0 [ 177.940178][T10350] ksys_write+0x12a/0x250 [ 177.940189][T10350] ? __pfx_ksys_write+0x10/0x10 [ 177.940200][T10350] ? trace_syscall_enter+0xcc/0x120 [ 177.940218][T10350] do_syscall_64+0x123/0x790 [ 177.940234][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.940246][T10350] RIP: 0033:0x7f719eb9e159 [ 177.940256][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.940266][T10350] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.940278][T10350] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 177.940285][T10350] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 177.940314][T10350] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.940320][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.940327][T10350] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 177.940341][T10350] [ 177.997992][ T43] audit: type=1400 audit(1789731757.251:1182): avc: denied { setopt } for pid=10353 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.110578][T10366] SET target dimension over the limit! [ 178.113830][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 178.130496][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 178.140145][ T5804] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 178.140195][ T5804] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 178.140222][ T5804] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 178.140249][ T5804] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 178.278310][T10380] FAULT_INJECTION: forcing a failure. [ 178.278310][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 178.278340][T10380] CPU: 1 UID: 0 PID: 10380 Comm: syz.7.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.278362][T10380] Tainted: [L]=SOFTLOCKUP [ 178.278368][T10380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.278377][T10380] Call Trace: [ 178.278383][T10380] [ 178.278391][T10380] dump_stack_lvl+0x100/0x190 [ 178.278420][T10380] should_fail_ex.cold+0x5/0xa [ 178.278442][T10380] should_failslab+0xc2/0x120 [ 178.278462][T10380] __kmalloc_noprof+0xfc/0x840 [ 178.278479][T10380] ? rcu_is_watching+0x13/0xc0 [ 178.278502][T10380] ? tomoyo_realpath_from_path+0xb6/0x690 [ 178.278529][T10380] tomoyo_realpath_from_path+0xb6/0x690 [ 178.278553][T10380] tomoyo_check_open_permission+0x2af/0x3c0 [ 178.278572][T10380] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 178.278599][T10380] ? hook_file_open+0x248/0x8e0 [ 178.278637][T10380] tomoyo_file_open+0x6b/0x90 [ 178.278661][T10380] security_file_open+0xb5/0x1e0 [ 178.278684][T10380] do_dentry_open+0x588/0x14d0 [ 178.278709][T10380] vfs_open+0x82/0x3f0 [ 178.278731][T10380] path_openat+0x19fa/0x2440 [ 178.278755][T10380] ? __pfx_path_openat+0x10/0x10 [ 178.278782][T10380] do_file_open+0x20e/0x430 [ 178.278806][T10380] ? __pfx_do_file_open+0x10/0x10 [ 178.278841][T10380] ? _raw_spin_unlock+0x28/0x50 [ 178.278858][T10380] ? alloc_fd+0x471/0x7a0 [ 178.278887][T10380] do_sys_openat2+0x10f/0x1e0 [ 178.278910][T10380] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.278939][T10380] __x64_sys_openat+0x12d/0x210 [ 178.278960][T10380] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.278981][T10380] ? find_held_lock+0x2b/0x80 [ 178.279005][T10380] ? trace_syscall_enter+0xcc/0x120 [ 178.279040][T10380] do_syscall_64+0x123/0x790 [ 178.279062][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.279079][T10380] RIP: 0033:0x7fec7c79e159 [ 178.279094][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.279109][T10380] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.279127][T10380] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 178.279138][T10380] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 178.279149][T10380] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 178.279155][T10380] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 178.279163][T10380] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 178.279187][T10380] [ 178.279194][T10380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.329494][T10382] ip_tables: iptables: counters copy to user failed while replacing table [ 178.412671][T10384] FAULT_INJECTION: forcing a failure. [ 178.412671][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 178.412702][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.7.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.412727][T10384] Tainted: [L]=SOFTLOCKUP [ 178.412734][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.412746][T10384] Call Trace: [ 178.412752][T10384] [ 178.412758][T10384] dump_stack_lvl+0x100/0x190 [ 178.412791][T10384] should_fail_ex.cold+0x5/0xa [ 178.412834][T10384] should_failslab+0xc2/0x120 [ 178.412860][T10384] kmem_cache_alloc_noprof+0x92/0x6a0 [ 178.412883][T10384] ? __kernfs_new_node+0xd2/0xa10 [ 178.412916][T10384] __kernfs_new_node+0xd2/0xa10 [ 178.412943][T10384] ? kernfs_add_one+0x611/0xaa0 [ 178.412975][T10384] ? __pfx___kernfs_new_node+0x10/0x10 [ 178.413007][T10384] ? lock_acquire+0x1d1/0x380 [ 178.413028][T10384] ? kernfs_root+0x23/0x2a0 [ 178.413053][T10384] ? find_held_lock+0x2b/0x80 [ 178.413077][T10384] ? kernfs_root+0xee/0x2a0 [ 178.413102][T10384] ? kernfs_root+0xee/0x2a0 [ 178.413133][T10384] kernfs_create_dir_ns+0xa6/0x2b0 [ 178.413158][T10384] internal_create_group+0x36f/0xfb0 [ 178.413192][T10384] ? __pfx_internal_create_group+0x10/0x10 [ 178.413224][T10384] ? kernfs_create_link+0x1bd/0x240 [ 178.413250][T10384] internal_create_groups+0x9d/0x150 [ 178.413279][T10384] device_add+0xf60/0x1970 [ 178.413308][T10384] ? __pfx_device_add+0x10/0x10 [ 178.413339][T10384] ? kobject_get+0xbb/0x150 [ 178.413361][T10384] cdev_device_add+0x12b/0x270 [ 178.413387][T10384] nvme_add_ctrl+0x15c/0x320 [ 178.413418][T10384] nvme_loop_create_ctrl+0x201/0xee0 [ 178.413445][T10384] nvmf_dev_write+0x4ee/0xb60 [ 178.413477][T10384] vfs_write+0x2aa/0x1050 [ 178.413498][T10384] ? __pfx_nvmf_dev_write+0x10/0x10 [ 178.413528][T10384] ? lock_acquire+0x1d1/0x380 [ 178.413549][T10384] ? __fget_files+0x34/0x3d0 [ 178.413573][T10384] ? __pfx_vfs_write+0x10/0x10 [ 178.413591][T10384] ? find_held_lock+0x2b/0x80 [ 178.413618][T10384] ? __fget_files+0x215/0x3d0 [ 178.413641][T10384] ? __fget_files+0x215/0x3d0 [ 178.413669][T10384] ? __fget_files+0x21f/0x3d0 [ 178.413700][T10384] ksys_write+0x12a/0x250 [ 178.413720][T10384] ? __pfx_ksys_write+0x10/0x10 [ 178.413739][T10384] ? trace_syscall_enter+0xcc/0x120 [ 178.413770][T10384] do_syscall_64+0x123/0x790 [ 178.413800][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.413821][T10384] RIP: 0033:0x7fec7c79e159 [ 178.413839][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.413857][T10384] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.413879][T10384] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 178.413892][T10384] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 178.413904][T10384] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 178.413916][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.413928][T10384] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 178.413953][T10384] [ 179.009738][T10368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.090357][T10399] FAULT_INJECTION: forcing a failure. [ 179.090357][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 179.090390][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.5.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.090415][T10399] Tainted: [L]=SOFTLOCKUP [ 179.090421][T10399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.090432][T10399] Call Trace: [ 179.090438][T10399] [ 179.090445][T10399] dump_stack_lvl+0x100/0x190 [ 179.090477][T10399] should_fail_ex.cold+0x5/0xa [ 179.090504][T10399] should_failslab+0xc2/0x120 [ 179.090527][T10399] __kmalloc_noprof+0xfc/0x840 [ 179.090546][T10399] ? rcu_is_watching+0x13/0xc0 [ 179.090570][T10399] ? tomoyo_encode2+0xfb/0x3c0 [ 179.090597][T10399] tomoyo_encode2+0xfb/0x3c0 [ 179.090622][T10399] tomoyo_encode+0x29/0x50 [ 179.090642][T10399] tomoyo_realpath_from_path+0x18c/0x690 [ 179.090671][T10399] tomoyo_check_open_permission+0x2af/0x3c0 [ 179.090690][T10399] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 179.090719][T10399] ? hook_file_open+0x248/0x8e0 [ 179.090768][T10399] tomoyo_file_open+0x6b/0x90 [ 179.090794][T10399] security_file_open+0xb5/0x1e0 [ 179.090817][T10399] do_dentry_open+0x588/0x14d0 [ 179.090843][T10399] vfs_open+0x82/0x3f0 [ 179.090870][T10399] path_openat+0x19fa/0x2440 [ 179.090897][T10399] ? __pfx_path_openat+0x10/0x10 [ 179.090927][T10399] do_file_open+0x20e/0x430 [ 179.090951][T10399] ? __pfx_do_file_open+0x10/0x10 [ 179.090992][T10399] ? _raw_spin_unlock+0x28/0x50 [ 179.091013][T10399] ? alloc_fd+0x471/0x7a0 [ 179.091043][T10399] do_sys_openat2+0x10f/0x1e0 [ 179.091067][T10399] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.091101][T10399] __x64_sys_openat+0x12d/0x210 [ 179.091127][T10399] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.091151][T10399] ? find_held_lock+0x2b/0x80 [ 179.091177][T10399] ? trace_syscall_enter+0xcc/0x120 [ 179.091206][T10399] do_syscall_64+0x123/0x790 [ 179.091233][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.091251][T10399] RIP: 0033:0x7f719eb9e159 [ 179.091266][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.091283][T10399] RSP: 002b:00007f719f9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.091300][T10399] RAX: ffffffffffffffda RBX: 00007f719ee25fa0 RCX: 00007f719eb9e159 [ 179.091312][T10399] RDX: 0000000000000a02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 179.091329][T10399] RBP: 00007f719f9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 179.091340][T10399] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 179.091350][T10399] R13: 00007f719ee26038 R14: 00007f719ee25fa0 R15: 00007ffef4ad08b8 [ 179.091376][T10399] [ 179.091395][T10399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.119516][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1260'. [ 179.127919][T10403] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 179.127957][T10403] [U] J"—e:ÀÆ" [ 179.164611][T10406] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1264'. [ 179.211130][T10409] usb usb8: usbfs: process 10409 (syz.5.1263) did not claim interface 0 before use [ 179.277204][ T1685] wiimote 0005:057E:0330.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 179.277569][ T1685] wiimote 0005:057E:0330.0006: New device registered [ 179.312367][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.326700][T10408] wiimote 0005:057E:0330.0006: Device removed [ 179.368168][T10420] fido_id[10420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.378335][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.379119][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.410561][ T5734] Bluetooth: hci1: command tx timeout [ 179.465509][ T7496] nvmet: Created nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d99fe10c-ea3e-4d80-a2a7-026474b3c39f. [ 179.466789][T10424] nvme nvme25: creating 4 I/O queues. [ 179.476517][T10424] nvme nvme25: new ctrl: "testsubsys" [ 179.666646][T10432] syzkaller1: entered promiscuous mode [ 180.279670][ T1685] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 180.298201][ T1685] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input21 [ 180.317477][ T1685] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input22 [ 180.328213][ T1685] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input20 [ 180.690954][ T5820] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.690993][ T5820] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.756034][T10446] FAULT_INJECTION: forcing a failure. [ 180.756034][T10446] name failslab, interval 1, probability 0, space 0, times 0 [ 180.756056][T10446] CPU: 3 UID: 0 PID: 10446 Comm: syz.8.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.756072][T10446] Tainted: [L]=SOFTLOCKUP [ 180.756077][T10446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.756083][T10446] Call Trace: [ 180.756087][T10446] [ 180.756091][T10446] dump_stack_lvl+0x100/0x190 [ 180.756112][T10446] should_fail_ex.cold+0x5/0xa [ 180.756128][T10446] should_failslab+0xc2/0x120 [ 180.756142][T10446] kmem_cache_alloc_noprof+0x92/0x6a0 [ 180.756155][T10446] ? __kernfs_new_node+0xd2/0xa10 [ 180.756174][T10446] __kernfs_new_node+0xd2/0xa10 [ 180.756192][T10446] ? __pfx___kernfs_new_node+0x10/0x10 [ 180.756214][T10446] ? lock_acquire+0x1d1/0x380 [ 180.756232][T10446] ? kernfs_root+0x23/0x2a0 [ 180.756254][T10446] ? find_held_lock+0x2b/0x80 [ 180.756301][T10446] ? kernfs_root+0xee/0x2a0 [ 180.756323][T10446] ? kernfs_root+0xee/0x2a0 [ 180.756347][T10446] kernfs_create_dir_ns+0xa6/0x2b0 [ 180.756361][T10446] internal_create_group+0x36f/0xfb0 [ 180.756380][T10446] ? __pfx_internal_create_group+0x10/0x10 [ 180.756396][T10446] ? __pfx_internal_create_group+0x10/0x10 [ 180.756412][T10446] ? bus_add_device+0x2e2/0x6c0 [ 180.756429][T10446] ? __pfx_bus_add_device+0x10/0x10 [ 180.756439][T10446] ? __pfx_dev_add_physical_location+0x10/0x10 [ 180.756459][T10446] dpm_sysfs_add+0x80/0x280 [ 180.756475][T10446] device_add+0x9f4/0x1970 [ 180.756491][T10446] ? __pfx_device_add+0x10/0x10 [ 180.756508][T10446] ? kobject_get+0xbb/0x150 [ 180.756520][T10446] cdev_device_add+0x12b/0x270 [ 180.756535][T10446] nvme_add_ctrl+0x15c/0x320 [ 180.756553][T10446] nvme_loop_create_ctrl+0x201/0xee0 [ 180.756568][T10446] nvmf_dev_write+0x4ee/0xb60 [ 180.756586][T10446] vfs_write+0x2aa/0x1050 [ 180.756598][T10446] ? __pfx_nvmf_dev_write+0x10/0x10 [ 180.756612][T10446] ? lock_acquire+0x1d1/0x380 [ 180.756623][T10446] ? __fget_files+0x34/0x3d0 [ 180.756637][T10446] ? __pfx_vfs_write+0x10/0x10 [ 180.756647][T10446] ? find_held_lock+0x2b/0x80 [ 180.756662][T10446] ? __fget_files+0x215/0x3d0 [ 180.756675][T10446] ? __fget_files+0x215/0x3d0 [ 180.756691][T10446] ? __fget_files+0x21f/0x3d0 [ 180.756708][T10446] ksys_write+0x12a/0x250 [ 180.756719][T10446] ? __pfx_ksys_write+0x10/0x10 [ 180.756730][T10446] ? trace_syscall_enter+0xcc/0x120 [ 180.756748][T10446] do_syscall_64+0x123/0x790 [ 180.756765][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.756777][T10446] RIP: 0033:0x7f695999e159 [ 180.756787][T10446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.756798][T10446] RSP: 002b:00007f695a7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.756809][T10446] RAX: ffffffffffffffda RBX: 00007f6959c25fa0 RCX: 00007f695999e159 [ 180.756816][T10446] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 180.756823][T10446] RBP: 00007f695a7be090 R08: 0000000000000000 R09: 0000000000000000 [ 180.756829][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.756836][T10446] R13: 00007f6959c26038 R14: 00007f6959c25fa0 R15: 00007ffebb887248 [ 180.756851][T10446] [ 180.977760][T10467] FAULT_INJECTION: forcing a failure. [ 180.977760][T10467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.977782][T10467] CPU: 2 UID: 0 PID: 10467 Comm: syz.8.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.977799][T10467] Tainted: [L]=SOFTLOCKUP [ 180.977803][T10467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.977810][T10467] Call Trace: [ 180.977815][T10467] [ 180.977820][T10467] dump_stack_lvl+0x100/0x190 [ 180.977841][T10467] should_fail_ex.cold+0x5/0xa [ 180.977857][T10467] _copy_to_user+0x32/0xd0 [ 180.977870][T10467] simple_read_from_buffer+0xcb/0x170 [ 180.977886][T10467] proc_fail_nth_read+0x1af/0x230 [ 180.977902][T10467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.977917][T10467] ? rw_verify_area+0xce/0x6d0 [ 180.977935][T10467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.977948][T10467] vfs_read+0x1e4/0xb40 [ 180.977960][T10467] ? lock_acquire+0x1d1/0x380 [ 180.977971][T10467] ? __fget_files+0x34/0x3d0 [ 180.977985][T10467] ? __pfx_vfs_read+0x10/0x10 [ 180.977995][T10467] ? find_held_lock+0x2b/0x80 [ 180.978018][T10467] ? __fget_files+0x215/0x3d0 [ 180.978034][T10467] ? __fget_files+0x21f/0x3d0 [ 180.978052][T10467] ksys_read+0x12a/0x250 [ 180.978063][T10467] ? __pfx_ksys_read+0x10/0x10 [ 180.978073][T10467] ? trace_syscall_enter+0xcc/0x120 [ 180.978092][T10467] do_syscall_64+0x123/0x790 [ 180.978109][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.978121][T10467] RIP: 0033:0x7f695995e98e [ 180.978132][T10467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.978143][T10467] RSP: 002b:00007f695a7bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.978155][T10467] RAX: ffffffffffffffda RBX: 00007f695a7be6c0 RCX: 00007f695995e98e [ 180.978162][T10467] RDX: 000000000000000f RSI: 00007f695a7be0a0 RDI: 0000000000000003 [ 180.978169][T10467] RBP: 00007f695a7be090 R08: 0000000000000000 R09: 0000000000000000 [ 180.978176][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.978182][T10467] R13: 00007f6959c26038 R14: 00007f6959c25fa0 R15: 00007ffebb887248 [ 180.978197][T10467] [ 181.223539][T10483] bond1: entered promiscuous mode [ 181.395973][T10496] netlink: 'syz.8.1283': attribute type 1 has an invalid length. [ 181.403701][T10496] erspan1: entered allmulticast mode [ 181.490476][ T5734] Bluetooth: hci1: command tx timeout [ 181.634319][T10503] FAULT_INJECTION: forcing a failure. [ 181.634319][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 181.634359][T10503] CPU: 0 UID: 0 PID: 10503 Comm: syz.8.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.634384][T10503] Tainted: [L]=SOFTLOCKUP [ 181.634392][T10503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.634403][T10503] Call Trace: [ 181.634416][T10503] [ 181.634423][T10503] dump_stack_lvl+0x100/0x190 [ 181.634464][T10503] should_fail_ex.cold+0x5/0xa [ 181.634492][T10503] should_failslab+0xc2/0x120 [ 181.634522][T10503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.634544][T10503] ? __kernfs_new_node+0xd2/0xa10 [ 181.634576][T10503] __kernfs_new_node+0xd2/0xa10 [ 181.634607][T10503] ? __pfx___kernfs_new_node+0x10/0x10 [ 181.634637][T10503] ? lock_acquire+0x1d1/0x380 [ 181.634657][T10503] ? kernfs_root+0x23/0x2a0 [ 181.634682][T10503] ? find_held_lock+0x2b/0x80 [ 181.634707][T10503] ? kernfs_root+0xee/0x2a0 [ 181.634729][T10503] ? kernfs_root+0xee/0x2a0 [ 181.634760][T10503] kernfs_new_node+0x117/0x150 [ 181.634792][T10503] __kernfs_create_file+0x53/0x350 [ 181.634816][T10503] sysfs_add_file_mode_ns+0x207/0x3c0 [ 181.634846][T10503] sysfs_merge_group+0x194/0x340 [ 181.634871][T10503] ? __pfx_sysfs_merge_group+0x10/0x10 [ 181.634896][T10503] ? bus_add_device+0x2e2/0x6c0 [ 181.634917][T10503] ? __pfx_bus_add_device+0x10/0x10 [ 181.634934][T10503] ? __pfx_dev_add_physical_location+0x10/0x10 [ 181.634967][T10503] dpm_sysfs_add+0x237/0x280 [ 181.634993][T10503] device_add+0x9f4/0x1970 [ 181.635019][T10503] ? __pfx_device_add+0x10/0x10 [ 181.635065][T10503] ? kobject_get+0xbb/0x150 [ 181.635095][T10503] cdev_device_add+0x12b/0x270 [ 181.635119][T10503] nvme_add_ctrl+0x15c/0x320 [ 181.635153][T10503] nvme_loop_create_ctrl+0x201/0xee0 [ 181.635180][T10503] nvmf_dev_write+0x4ee/0xb60 [ 181.635210][T10503] vfs_write+0x2aa/0x1050 [ 181.635231][T10503] ? __pfx_nvmf_dev_write+0x10/0x10 [ 181.635254][T10503] ? lock_acquire+0x1d1/0x380 [ 181.635274][T10503] ? __fget_files+0x34/0x3d0 [ 181.635297][T10503] ? __pfx_vfs_write+0x10/0x10 [ 181.635314][T10503] ? find_held_lock+0x2b/0x80 [ 181.635338][T10503] ? __fget_files+0x215/0x3d0 [ 181.635366][T10503] ? __fget_files+0x215/0x3d0 [ 181.635393][T10503] ? __fget_files+0x21f/0x3d0 [ 181.635423][T10503] ksys_write+0x12a/0x250 [ 181.635442][T10503] ? __pfx_ksys_write+0x10/0x10 [ 181.635460][T10503] ? trace_syscall_enter+0xcc/0x120 [ 181.635491][T10503] do_syscall_64+0x123/0x790 [ 181.635520][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.635541][T10503] RIP: 0033:0x7f695999e159 [ 181.635557][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.635576][T10503] RSP: 002b:00007f695a7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.635600][T10503] RAX: ffffffffffffffda RBX: 00007f6959c25fa0 RCX: 00007f695999e159 [ 181.635610][T10503] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 181.635621][T10503] RBP: 00007f695a7be090 R08: 0000000000000000 R09: 0000000000000000 [ 181.635633][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.635644][T10503] R13: 00007f6959c26038 R14: 00007f6959c25fa0 R15: 00007ffebb887248 [ 181.635671][T10503] [ 181.893493][T10524] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.976850][ T6530] nvmet: Created discovery controller 27 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:d99fe10c-ea3e-4d80-a2a7-026474b3c39f. [ 181.982797][T10533] nvme nvme26: new ctrl: "nqn.2014-08.org.nvmexpress.discovery" [ 182.044639][T10537] FAULT_INJECTION: forcing a failure. [ 182.044639][T10537] name failslab, interval 1, probability 0, space 0, times 0 [ 182.044665][T10537] CPU: 3 UID: 0 PID: 10537 Comm: syz.7.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.044681][T10537] Tainted: [L]=SOFTLOCKUP [ 182.044685][T10537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.044692][T10537] Call Trace: [ 182.044697][T10537] [ 182.044701][T10537] dump_stack_lvl+0x100/0x190 [ 182.044722][T10537] should_fail_ex.cold+0x5/0xa [ 182.044739][T10537] should_failslab+0xc2/0x120 [ 182.044754][T10537] kmem_cache_alloc_noprof+0x92/0x6a0 [ 182.044767][T10537] ? __kernfs_new_node+0xd2/0xa10 [ 182.044787][T10537] __kernfs_new_node+0xd2/0xa10 [ 182.044806][T10537] ? __pfx___kernfs_new_node+0x10/0x10 [ 182.044824][T10537] ? lock_acquire+0x1d1/0x380 [ 182.044836][T10537] ? kernfs_root+0x23/0x2a0 [ 182.044851][T10537] ? find_held_lock+0x2b/0x80 [ 182.044867][T10537] ? kernfs_root+0xee/0x2a0 [ 182.044881][T10537] ? kernfs_root+0xee/0x2a0 [ 182.044900][T10537] kernfs_new_node+0x117/0x150 [ 182.044919][T10537] __kernfs_create_file+0x53/0x350 [ 182.044933][T10537] sysfs_add_file_mode_ns+0x207/0x3c0 [ 182.044951][T10537] sysfs_merge_group+0x194/0x340 [ 182.044968][T10537] ? __pfx_sysfs_merge_group+0x10/0x10 [ 182.044984][T10537] ? bus_add_device+0x2e2/0x6c0 [ 182.044997][T10537] ? __pfx_bus_add_device+0x10/0x10 [ 182.045007][T10537] ? __pfx_dev_add_physical_location+0x10/0x10 [ 182.045031][T10537] dpm_sysfs_add+0x237/0x280 [ 182.045047][T10537] device_add+0x9f4/0x1970 [ 182.045063][T10537] ? __pfx_device_add+0x10/0x10 [ 182.045081][T10537] ? kobject_get+0xbb/0x150 [ 182.045093][T10537] cdev_device_add+0x12b/0x270 [ 182.045108][T10537] nvme_add_ctrl+0x15c/0x320 [ 182.045126][T10537] nvme_loop_create_ctrl+0x201/0xee0 [ 182.045142][T10537] nvmf_dev_write+0x4ee/0xb60 [ 182.045160][T10537] vfs_write+0x2aa/0x1050 [ 182.045172][T10537] ? __pfx_nvmf_dev_write+0x10/0x10 [ 182.045186][T10537] ? lock_acquire+0x1d1/0x380 [ 182.045198][T10537] ? __fget_files+0x34/0x3d0 [ 182.045212][T10537] ? __pfx_vfs_write+0x10/0x10 [ 182.045223][T10537] ? find_held_lock+0x2b/0x80 [ 182.045238][T10537] ? __fget_files+0x215/0x3d0 [ 182.045251][T10537] ? __fget_files+0x215/0x3d0 [ 182.045267][T10537] ? __fget_files+0x21f/0x3d0 [ 182.045284][T10537] ksys_write+0x12a/0x250 [ 182.045296][T10537] ? __pfx_ksys_write+0x10/0x10 [ 182.045306][T10537] ? trace_syscall_enter+0xcc/0x120 [ 182.045324][T10537] do_syscall_64+0x123/0x790 [ 182.045342][T10537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.045353][T10537] RIP: 0033:0x7fec7c79e159 [ 182.045364][T10537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.045375][T10537] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.045386][T10537] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 182.045394][T10537] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 182.045401][T10537] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 182.045407][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.045414][T10537] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 182.045428][T10537] [ 182.169655][ T6127] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 182.319656][ T6127] usb 13-1: Using ep0 maxpacket: 32 [ 182.320475][ T6127] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 182.322027][ T6127] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 182.322058][ T6127] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 182.322090][ T6127] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 182.322114][ T6127] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 182.322137][ T6127] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 182.322159][ T6127] usb 13-1: config 0 interface 0 has no altsetting 0 [ 182.324310][ T6127] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 182.324330][ T6127] usb 13-1: Product: syz [ 182.324342][ T6127] usb 13-1: Manufacturer: syz [ 182.324355][ T6127] usb 13-1: SerialNumber: syz [ 182.326868][ T6127] usb 13-1: config 0 descriptor?? [ 182.327690][T10531] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 182.331515][ T6127] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.335295][ T6127] ldusb 13-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 183.560106][ T5734] Bluetooth: hci1: command tx timeout [ 184.918380][ T6127] usb 13-1: USB disconnect, device number 2 [ 184.920169][ T6127] ldusb 13-1:0.0: LD USB Device #2 now disconnected [ 184.921429][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 184.921440][ T43] audit: type=1400 audit(1789731764.181:1209): avc: denied { unmount } for pid=10241 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 185.138904][ T43] audit: type=1400 audit(1789731764.391:1210): avc: denied { mounton } for pid=10548 comm="syz.7.1302" path="/proc/544/task" dev="proc" ino=51553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 185.252491][ T6127] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 185.385160][T10562] FAULT_INJECTION: forcing a failure. [ 185.385160][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 185.385193][T10562] CPU: 3 UID: 0 PID: 10562 Comm: syz.6.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.385221][T10562] Tainted: [L]=SOFTLOCKUP [ 185.385228][T10562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.385240][T10562] Call Trace: [ 185.385248][T10562] [ 185.385256][T10562] dump_stack_lvl+0x100/0x190 [ 185.385292][T10562] should_fail_ex.cold+0x5/0xa [ 185.385321][T10562] should_failslab+0xc2/0x120 [ 185.385345][T10562] kmem_cache_alloc_noprof+0x92/0x6a0 [ 185.385368][T10562] ? __kernfs_new_node+0xd2/0xa10 [ 185.385401][T10562] __kernfs_new_node+0xd2/0xa10 [ 185.385440][T10562] ? __pfx___kernfs_new_node+0x10/0x10 [ 185.385472][T10562] ? lock_acquire+0x1d1/0x380 [ 185.385494][T10562] ? kernfs_root+0x23/0x2a0 [ 185.385519][T10562] ? find_held_lock+0x2b/0x80 [ 185.385545][T10562] ? kernfs_root+0xee/0x2a0 [ 185.385570][T10562] ? kernfs_root+0xee/0x2a0 [ 185.385602][T10562] kernfs_new_node+0x117/0x150 [ 185.385635][T10562] __kernfs_create_file+0x53/0x350 [ 185.385660][T10562] sysfs_add_file_mode_ns+0x207/0x3c0 [ 185.385691][T10562] sysfs_merge_group+0x194/0x340 [ 185.385719][T10562] ? __pfx_sysfs_merge_group+0x10/0x10 [ 185.385745][T10562] ? bus_add_device+0x2e2/0x6c0 [ 185.385768][T10562] ? __pfx_bus_add_device+0x10/0x10 [ 185.385787][T10562] ? __pfx_dev_add_physical_location+0x10/0x10 [ 185.385819][T10562] dpm_sysfs_add+0x237/0x280 [ 185.385847][T10562] device_add+0x9f4/0x1970 [ 185.385874][T10562] ? __pfx_device_add+0x10/0x10 [ 185.385904][T10562] ? kobject_get+0xbb/0x150 [ 185.385927][T10562] cdev_device_add+0x12b/0x270 [ 185.385952][T10562] nvme_add_ctrl+0x15c/0x320 [ 185.385983][T10562] nvme_loop_create_ctrl+0x201/0xee0 [ 185.386011][T10562] nvmf_dev_write+0x4ee/0xb60 [ 185.386041][T10562] vfs_write+0x2aa/0x1050 [ 185.386063][T10562] ? __pfx_nvmf_dev_write+0x10/0x10 [ 185.386088][T10562] ? lock_acquire+0x1d1/0x380 [ 185.386108][T10562] ? __fget_files+0x34/0x3d0 [ 185.386133][T10562] ? __pfx_vfs_write+0x10/0x10 [ 185.386152][T10562] ? find_held_lock+0x2b/0x80 [ 185.386177][T10562] ? __fget_files+0x215/0x3d0 [ 185.386200][T10562] ? __fget_files+0x215/0x3d0 [ 185.386227][T10562] ? __fget_files+0x21f/0x3d0 [ 185.386259][T10562] ksys_write+0x12a/0x250 [ 185.386279][T10562] ? __pfx_ksys_write+0x10/0x10 [ 185.386299][T10562] ? trace_syscall_enter+0xcc/0x120 [ 185.386331][T10562] do_syscall_64+0x123/0x790 [ 185.386359][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.386380][T10562] RIP: 0033:0x7f0a2f19e159 [ 185.386397][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.386415][T10562] RSP: 002b:00007f0a2fff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.386443][T10562] RAX: ffffffffffffffda RBX: 00007f0a2f425fa0 RCX: 00007f0a2f19e159 [ 185.386457][T10562] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 185.386469][T10562] RBP: 00007f0a2fff1090 R08: 0000000000000000 R09: 0000000000000000 [ 185.386482][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.386493][T10562] R13: 00007f0a2f426038 R14: 00007f0a2f425fa0 R15: 00007ffeed0087a8 [ 185.386534][T10562] [ 185.400942][ T6127] usb 13-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 185.405445][ T6127] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.405460][ T6127] usb 13-1: Product: syz [ 185.405468][ T6127] usb 13-1: Manufacturer: syz [ 185.405475][ T6127] usb 13-1: SerialNumber: syz [ 185.417864][ T6127] usb 13-1: USB2VGA dongle found at address 3 [ 185.419148][ T6127] usb 13-1: Allocated 8 output buffers [ 185.424041][ T6127] usb 13-1: Failed to early initialize device [ 185.492910][T10567] netlink: 'syz.6.1308': attribute type 2 has an invalid length. [ 185.492928][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1308'. [ 185.615541][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.615798][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.618626][ T1685] usb 13-1: USB disconnect, device number 3 [ 186.159284][T10581] tun0: tun_chr_ioctl cmd 1074025675 [ 186.159299][T10581] tun0: persist enabled [ 186.160697][T10581] tun0: tun_chr_ioctl cmd 1074025675 [ 186.160708][T10581] tun0: persist disabled [ 186.165992][T10581] tun0: tun_chr_ioctl cmd 1074025675 [ 186.166005][T10581] tun0: persist enabled [ 186.307277][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1314'. [ 186.316538][T10587] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 186.367551][ T43] audit: type=1400 audit(1789731765.621:1211): avc: denied { read } for pid=10588 comm="syz.8.1315" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.449100][T10593] FAULT_INJECTION: forcing a failure. [ 186.449100][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 186.449123][T10593] CPU: 3 UID: 0 PID: 10593 Comm: syz.7.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.449139][T10593] Tainted: [L]=SOFTLOCKUP [ 186.449144][T10593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.449151][T10593] Call Trace: [ 186.449155][T10593] [ 186.449161][T10593] dump_stack_lvl+0x100/0x190 [ 186.449182][T10593] should_fail_ex.cold+0x5/0xa [ 186.449198][T10593] should_failslab+0xc2/0x120 [ 186.449214][T10593] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.449228][T10593] ? __kernfs_new_node+0xd2/0xa10 [ 186.449248][T10593] __kernfs_new_node+0xd2/0xa10 [ 186.449267][T10593] ? __pfx___kernfs_new_node+0x10/0x10 [ 186.449286][T10593] ? lock_acquire+0x1d1/0x380 [ 186.449299][T10593] ? kernfs_root+0x23/0x2a0 [ 186.449315][T10593] ? find_held_lock+0x2b/0x80 [ 186.449346][T10593] ? kernfs_root+0xee/0x2a0 [ 186.449361][T10593] ? kernfs_root+0xee/0x2a0 [ 186.449380][T10593] kernfs_new_node+0x117/0x150 [ 186.449401][T10593] __kernfs_create_file+0x53/0x350 [ 186.449415][T10593] sysfs_add_file_mode_ns+0x207/0x3c0 [ 186.449434][T10593] sysfs_merge_group+0x194/0x340 [ 186.449452][T10593] ? __pfx_sysfs_merge_group+0x10/0x10 [ 186.449468][T10593] ? bus_add_device+0x2e2/0x6c0 [ 186.449481][T10593] ? __pfx_bus_add_device+0x10/0x10 [ 186.449493][T10593] ? __pfx_dev_add_physical_location+0x10/0x10 [ 186.449513][T10593] dpm_sysfs_add+0x237/0x280 [ 186.449529][T10593] device_add+0x9f4/0x1970 [ 186.449546][T10593] ? __pfx_device_add+0x10/0x10 [ 186.449564][T10593] ? kobject_get+0xbb/0x150 [ 186.449577][T10593] cdev_device_add+0x12b/0x270 [ 186.449592][T10593] nvme_add_ctrl+0x15c/0x320 [ 186.449611][T10593] nvme_loop_create_ctrl+0x201/0xee0 [ 186.449627][T10593] nvmf_dev_write+0x4ee/0xb60 [ 186.449646][T10593] vfs_write+0x2aa/0x1050 [ 186.449658][T10593] ? __pfx_nvmf_dev_write+0x10/0x10 [ 186.449674][T10593] ? lock_acquire+0x1d1/0x380 [ 186.449686][T10593] ? __fget_files+0x34/0x3d0 [ 186.449699][T10593] ? __pfx_vfs_write+0x10/0x10 [ 186.449711][T10593] ? find_held_lock+0x2b/0x80 [ 186.449726][T10593] ? __fget_files+0x215/0x3d0 [ 186.449740][T10593] ? __fget_files+0x215/0x3d0 [ 186.449757][T10593] ? __fget_files+0x21f/0x3d0 [ 186.449775][T10593] ksys_write+0x12a/0x250 [ 186.449787][T10593] ? __pfx_ksys_write+0x10/0x10 [ 186.449798][T10593] ? trace_syscall_enter+0xcc/0x120 [ 186.449817][T10593] do_syscall_64+0x123/0x790 [ 186.449834][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.449846][T10593] RIP: 0033:0x7fec7c79e159 [ 186.449860][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.449871][T10593] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.449883][T10593] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 186.449891][T10593] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 186.449898][T10593] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 186.449906][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.449913][T10593] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 186.449928][T10593] [ 186.639300][ T43] audit: type=1400 audit(1789731765.891:1212): avc: denied { mount } for pid=10600 comm="syz.7.1319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.647962][ T43] audit: type=1400 audit(1789731765.901:1213): avc: denied { ioctl } for pid=10600 comm="syz.7.1319" path="socket:[53292]" dev="sockfs" ino=53292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1  ÿÿÈ ýÿÿÿÿÿÿÿÿÿÿ ² [ 186.895660][T10616] FAULT_INJECTION: forcing a failure. [ 186.895660][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 186.895691][T10616] CPU: 2 UID: 0 PID: 10616 Comm: syz.7.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.895716][T10616] Tainted: [L]=SOFTLOCKUP [ 186.895723][T10616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.895734][T10616] Call Trace: [ 186.895740][T10616] [ 186.895748][T10616] dump_stack_lvl+0x100/0x190 [ 186.895769][T10616] should_fail_ex.cold+0x5/0xa [ 186.895786][T10616] should_failslab+0xc2/0x120 [ 186.895801][T10616] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.895814][T10616] ? __kernfs_new_node+0xd2/0xa10 [ 186.895834][T10616] __kernfs_new_node+0xd2/0xa10 [ 186.895867][T10616] ? __pfx___kernfs_new_node+0x10/0x10 [ 186.895886][T10616] ? lock_acquire+0x1d1/0x380 [ 186.895898][T10616] ? kernfs_root+0x23/0x2a0 [ 186.895913][T10616] ? find_held_lock+0x2b/0x80 [ 186.895928][T10616] ? kernfs_root+0xee/0x2a0 [ 186.895943][T10616] ? kernfs_root+0xee/0x2a0 [ 186.895961][T10616] kernfs_new_node+0x117/0x150 [ 186.895985][T10616] __kernfs_create_file+0x53/0x350 [ 186.895999][T10616] sysfs_add_file_mode_ns+0x207/0x3c0 [ 186.896024][T10616] sysfs_merge_group+0x194/0x340 [ 186.896046][T10616] ? __pfx_sysfs_merge_group+0x10/0x10 [ 186.896069][T10616] ? bus_add_device+0x2e2/0x6c0 [ 186.896089][T10616] ? __pfx_bus_add_device+0x10/0x10 [ 186.896101][T10616] ? __pfx_dev_add_physical_location+0x10/0x10 [ 186.896120][T10616] dpm_sysfs_add+0x237/0x280 [ 186.896137][T10616] device_add+0x9f4/0x1970 [ 186.896153][T10616] ? __pfx_device_add+0x10/0x10 [ 186.896171][T10616] ? kobject_get+0xbb/0x150 [ 186.896183][T10616] cdev_device_add+0x12b/0x270 [ 186.896198][T10616] nvme_add_ctrl+0x15c/0x320 [ 186.896217][T10616] nvme_loop_create_ctrl+0x201/0xee0 [ 186.896233][T10616] nvmf_dev_write+0x4ee/0xb60 [ 186.896274][T10616] vfs_write+0x2aa/0x1050 [ 186.896293][T10616] ? __pfx_nvmf_dev_write+0x10/0x10 [ 186.896314][T10616] ? lock_acquire+0x1d1/0x380 [ 186.896332][T10616] ? __fget_files+0x34/0x3d0 [ 186.896349][T10616] ? __pfx_vfs_write+0x10/0x10 [ 186.896360][T10616] ? find_held_lock+0x2b/0x80 [ 186.896375][T10616] ? __fget_files+0x215/0x3d0 [ 186.896388][T10616] ? __fget_files+0x215/0x3d0 [ 186.896404][T10616] ? __fget_files+0x21f/0x3d0 [ 186.896422][T10616] ksys_write+0x12a/0x250 [ 186.896433][T10616] ? __pfx_ksys_write+0x10/0x10 [ 186.896444][T10616] ? trace_syscall_enter+0xcc/0x120 [ 186.896462][T10616] do_syscall_64+0x123/0x790 [ 186.896480][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.896494][T10616] RIP: 0033:0x7fec7c79e159 [ 186.896504][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.896516][T10616] RSP: 002b:00007fec7d5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.896528][T10616] RAX: ffffffffffffffda RBX: 00007fec7ca25fa0 RCX: 00007fec7c79e159 [ 186.896536][T10616] RDX: 000000000000001d RSI: 0000200000000900 RDI: 0000000000000003 [ 186.896543][T10616] RBP: 00007fec7d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 186.896549][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.896556][T10616] R13: 00007fec7ca26038 R14: 00007fec7ca25fa0 R15: 00007ffe4c9b3538 [ 186.896570][T10616] [ 186.949467][ T43] audit: type=1400 audit(1789731766.201:1214): avc: denied { read write } for pid=10621 comm="syz.7.1327" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 186.952458][ T43] audit: type=1400 audit(1789731766.211:1215): avc: denied { open } for pid=10621 comm="syz.7.1327" path="/219/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 186.953009][T10622] netlink: 'syz.7.1327': attribute type 30 has an invalid length. [ 186.989492][ T43] audit: type=1400 audit(1789731766.241:1216): avc: denied { write } for pid=10618 comm="syz.8.1326" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.990191][T10619] program syz.8.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.005225][T10627] netlink: 'syz.7.1327': attribute type 30 has an invalid length. [ 187.078602][T10631] ------------[ cut here ]------------ [ 187.078614][T10631] !chanctx_conf [ 187.078619][T10631] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5b6/0x710, CPU#0: syz.8.1329/10631 [ 187.087713][T10631] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.089189][ T43] audit: type=1400 audit(1789731766.341:1217): avc: denied { write } for pid=5649 comm="syz-executor" path="pipe:[6112]" dev="pipefs" ino=6112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 187.099636][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.8.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.103745][T10631] Tainted: [L]=SOFTLOCKUP [ 187.105468][T10631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.109236][T10631] RIP: 0010:rate_control_rate_init+0x5b6/0x710 [ 187.111510][T10631] Code: 48 8d 35 00 00 00 00 e8 a8 3e a1 f6 e8 63 bc aa f6 e9 15 fe ff ff e8 09 09 c6 f6 90 0f 0b 90 e9 07 fe ff ff e8 fb 08 c6 f6 90 <0f> 0b 90 eb b1 e8 f0 08 c6 f6 e8 cb b8 a9 f6 31 ff 89 c3 89 c6 e8 [ 187.117627][T10631] RSP: 0018:ffffc90005767230 EFLAGS: 00010283 [ 187.120093][T10631] RAX: 0000000000000b75 RBX: ffff88805581c000 RCX: ffffc90023ac1000 [ 187.122969][T10631] RDX: 0000000000080000 RSI: ffffffff8b4616b5 RDI: ffff8880553d0000 [ 187.125449][T10631] RBP: ffff8880270aa900 R08: 0000000000000005 R09: 0000000000000000 [ 187.129268][T10631] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 187.130517][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1329'. [ 187.135980][T10631] R13: 0000000000000000 R14: ffff88803c2b0f40 R15: ffff888050aa0000 [ 187.138815][T10631] FS: 00007f695a7be6c0(0000) GS:ffff8880d5b59000(0000) knlGS:0000000000000000 [ 187.142585][T10631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.145450][T10631] CR2: 0000200000001080 CR3: 000000002a5e4000 CR4: 0000000000352ef0 [ 187.148849][T10631] Call Trace: [ 187.150541][T10631] [ 187.151828][T10631] rate_control_rate_init_all_links+0x76/0x1f0 [ 187.154469][T10631] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 187.156975][T10631] sta_apply_parameters+0x132f/0x21e0 [ 187.159719][T10631] ? __sta_info_alloc+0x1143/0x1cc0 [ 187.162155][T10631] ieee80211_add_station+0x3ff/0x760 [ 187.164483][T10631] nl80211_new_station+0x14a9/0x20e0 [ 187.167207][T10631] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.170120][T10631] ? nl80211_pre_doit+0x19a/0xae0 [ 187.172452][T10631] genl_family_rcv_msg_doit+0x214/0x300 [ 187.174820][T10631] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.177411][T10631] ? bpf_lsm_capable+0x9/0x10 [ 187.179540][T10631] ? security_capable+0x80/0x260 [ 187.181675][T10631] ? ns_capable+0xd2/0xf0 [ 187.183224][T10631] genl_rcv_msg+0x560/0x800 [ 187.184809][T10631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.186928][T10631] ? __lock_acquire+0x5c0/0x1f40 [ 187.189040][T10631] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.191423][T10631] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.193815][T10631] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.196106][T10631] netlink_rcv_skb+0x159/0x420 [ 187.198144][T10631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.200400][T10631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.202652][T10631] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.204912][T10631] genl_rcv+0x28/0x40 [ 187.206612][T10631] netlink_unicast+0x585/0x850 [ 187.208648][T10631] ? __pfx_netlink_unicast+0x10/0x10 [ 187.210978][T10631] netlink_sendmsg+0x8b0/0xda0 [ 187.213057][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.215278][T10631] ? selinux_socket_sendmsg+0x198/0x2f0 [ 187.217609][T10631] ____sys_sendmsg+0xa4d/0xbe0 [ 187.219800][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.222170][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.224477][T10631] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 187.226582][T10631] ___sys_sendmsg+0x190/0x1e0 [ 187.228576][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.230927][T10631] ? find_held_lock+0x2b/0x80 [ 187.232962][T10631] __sys_sendmsg+0x160/0x210 [ 187.234948][T10631] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.237129][T10631] do_syscall_64+0x123/0x790 [ 187.239123][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.241741][T10631] RIP: 0033:0x7f695999e159 [ 187.243630][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.250869][T10631] RSP: 002b:00007f695a7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.253503][T10631] RAX: ffffffffffffffda RBX: 00007f6959c25fa0 RCX: 00007f695999e159 [ 187.255965][T10631] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 187.258431][T10631] RBP: 00007f6959a3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.260978][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.263445][T10631] R13: 00007f6959c26038 R14: 00007f6959c25fa0 R15: 00007ffebb887248 [ 187.265919][T10631] [ 187.266907][T10631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.269164][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.8.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.272545][T10631] Tainted: [L]=SOFTLOCKUP [ 187.273898][T10631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.277024][T10631] Call Trace: [ 187.278081][T10631] [ 187.279016][T10631] dump_stack_lvl+0x100/0x190 [ 187.280516][T10631] vpanic+0x553/0x970 [ 187.281800][T10631] ? __pfx_vpanic+0x10/0x10 [ 187.283232][T10631] panic+0xd1/0xe0 [ 187.284423][T10631] ? __pfx_panic+0x10/0x10 [ 187.285898][T10631] check_panic_on_warn.cold+0x19/0x34 [ 187.287649][T10631] ? rate_control_rate_init+0x5b6/0x710 [ 187.289401][T10631] __warn.cold+0x191/0x318 [ 187.290824][T10631] __report_bug+0x30f/0x440 [ 187.292308][T10631] ? rate_control_rate_init+0x5b6/0x710 [ 187.294053][T10631] ? __pfx___report_bug+0x10/0x10 [ 187.295641][T10631] ? __sta_info_alloc+0x952/0x1cc0 [ 187.297257][T10631] ? ieee80211_add_station+0x5f1/0x760 [ 187.298966][T10631] ? nl80211_new_station+0x14a9/0x20e0 [ 187.300694][T10631] ? genl_family_rcv_msg_doit+0x214/0x300 [ 187.302511][T10631] ? genl_rcv_msg+0x560/0x800 [ 187.303994][T10631] ? netlink_rcv_skb+0x159/0x420 [ 187.305567][T10631] ? genl_rcv+0x28/0x40 [ 187.306877][T10631] ? netlink_unicast+0x585/0x850 [ 187.308430][T10631] ? netlink_sendmsg+0x8b0/0xda0 [ 187.309980][T10631] ? ____sys_sendmsg+0xa4d/0xbe0 [ 187.311555][T10631] ? ___sys_sendmsg+0x190/0x1e0 [ 187.313096][T10631] ? do_syscall_64+0x123/0x790 [ 187.314610][T10631] ? __lock_acquire+0x5c0/0x1f40 [ 187.316166][T10631] ? rate_control_rate_init+0x5b6/0x710 [ 187.317907][T10631] report_bug+0xb3/0x220 [ 187.319248][T10631] ? rate_control_rate_init+0x5b6/0x710 [ 187.320991][T10631] handle_bug+0x16a/0x2a0 [ 187.322369][T10631] exc_invalid_op+0x17/0x50 [ 187.323810][T10631] asm_exc_invalid_op+0x1a/0x20 [ 187.325348][T10631] RIP: 0010:rate_control_rate_init+0x5b6/0x710 [ 187.327275][T10631] Code: 48 8d 35 00 00 00 00 e8 a8 3e a1 f6 e8 63 bc aa f6 e9 15 fe ff ff e8 09 09 c6 f6 90 0f 0b 90 e9 07 fe ff ff e8 fb 08 c6 f6 90 <0f> 0b 90 eb b1 e8 f0 08 c6 f6 e8 cb b8 a9 f6 31 ff 89 c3 89 c6 e8 [ 187.333188][T10631] RSP: 0018:ffffc90005767230 EFLAGS: 00010283 [ 187.335057][T10631] RAX: 0000000000000b75 RBX: ffff88805581c000 RCX: ffffc90023ac1000 [ 187.337526][T10631] RDX: 0000000000080000 RSI: ffffffff8b4616b5 RDI: ffff8880553d0000 [ 187.339999][T10631] RBP: ffff8880270aa900 R08: 0000000000000005 R09: 0000000000000000 [ 187.342466][T10631] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 187.344925][T10631] R13: 0000000000000000 R14: ffff88803c2b0f40 R15: ffff888050aa0000 [ 187.347375][T10631] ? rate_control_rate_init+0x5b5/0x710 [ 187.349133][T10631] rate_control_rate_init_all_links+0x76/0x1f0 [ 187.351055][T10631] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 187.352995][T10631] sta_apply_parameters+0x132f/0x21e0 [ 187.354680][T10631] ? __sta_info_alloc+0x1143/0x1cc0 [ 187.356327][T10631] ieee80211_add_station+0x3ff/0x760 [ 187.357995][T10631] nl80211_new_station+0x14a9/0x20e0 [ 187.359685][T10631] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.361478][T10631] ? nl80211_pre_doit+0x19a/0xae0 [ 187.363062][T10631] genl_family_rcv_msg_doit+0x214/0x300 [ 187.364814][T10631] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.366640][T10631] ? bpf_lsm_capable+0x9/0x10 [ 187.368137][T10631] ? security_capable+0x80/0x260 [ 187.369727][T10631] ? ns_capable+0xd2/0xf0 [ 187.371093][T10631] genl_rcv_msg+0x560/0x800 [ 187.372553][T10631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.374135][T10631] ? __lock_acquire+0x5c0/0x1f40 [ 187.375693][T10631] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.377415][T10631] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.379187][T10631] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.380926][T10631] netlink_rcv_skb+0x159/0x420 [ 187.382432][T10631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.384017][T10631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.385693][T10631] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.387351][T10631] genl_rcv+0x28/0x40 [ 187.388636][T10631] netlink_unicast+0x585/0x850 [ 187.390150][T10631] ? __pfx_netlink_unicast+0x10/0x10 [ 187.391803][T10631] netlink_sendmsg+0x8b0/0xda0 [ 187.393333][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.394997][T10631] ? selinux_socket_sendmsg+0x198/0x2f0 [ 187.396740][T10631] ____sys_sendmsg+0xa4d/0xbe0 [ 187.398268][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.399946][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.401557][T10631] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 187.403279][T10631] ___sys_sendmsg+0x190/0x1e0 [ 187.404696][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.406265][T10631] ? find_held_lock+0x2b/0x80 [ 187.407754][T10631] __sys_sendmsg+0x160/0x210 [ 187.409257][T10631] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.410887][T10631] do_syscall_64+0x123/0x790 [ 187.412383][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.414224][T10631] RIP: 0033:0x7f695999e159 [ 187.415626][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.421611][T10631] RSP: 002b:00007f695a7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.424187][T10631] RAX: ffffffffffffffda RBX: 00007f6959c25fa0 RCX: 00007f695999e159 [ 187.426645][T10631] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 187.429111][T10631] RBP: 00007f6959a3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.431556][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.434019][T10631] R13: 00007f6959c26038 R14: 00007f6959c25fa0 R15: 00007ffebb887248 [ 187.436484][T10631] [ 188.501055][T10631] Shutting down cpus with NMI [ 188.503110][T10631] Kernel Offset: disabled [ 188.504487][T10631] Rebooting in 86400 seconds..