last executing test programs: 1m7.891757195s ago: executing program 0 (id=1973): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21c840, 0x19) openat(r0, 0x0, 0xc82c2fd0f65fa04, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='apple,cd321x 0x38\n\x00', 0x13) (async) bind(r1, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r1, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000f000040"}}}}, 0x0) 1m6.254411535s ago: executing program 0 (id=1988): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) (fail_nth: 3) 1m6.089667417s ago: executing program 0 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './proc/net/rpc/auth.rpcsec.context/channel\x00'}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000fffffff', 0x32) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40483, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) 1m5.920764289s ago: executing program 0 (id=1995): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='7', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='0', 0x1) 1m5.773161184s ago: executing program 0 (id=1998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) (fail_nth: 1) 1m5.430040681s ago: executing program 0 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800900040002800afbffffa9aaaaaaaa000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000021c0), 0x51) 1m5.368321694s ago: executing program 32 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800900040002800afbffffa9aaaaaaaa000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000021c0), 0x51) 56.772145178s ago: executing program 3 (id=2073): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x22) write(r4, &(0x7f0000000280)='7', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', 0x8101, 0x40) write(r5, &(0x7f0000000300)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x6001, 0x122) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200020, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 56.0810398s ago: executing program 3 (id=2082): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000140)={r0, 0x0, 0x919, 0x2, 0x7fffffffffffffff, 0x8}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@alu={0x7, 0x1, 0x0, 0x2, 0xb, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00)='0x0102\x00', 0x6) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000180)=0x80) close(r5) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000000040)={0x1, 0x33, 0x0, 0x3, 0x3, 0xc, @lba, @lba=0x89f}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 55.178107568s ago: executing program 3 (id=2090): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x22) write(r4, &(0x7f0000000280)='7', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', 0x8101, 0x40) write(r5, &(0x7f0000000300)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x6001, 0x122) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200020, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 54.801559213s ago: executing program 3 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000091401002cbd7000fcdbdf25080001"], 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) 54.741071645s ago: executing program 3 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d3843178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e82ac470619ae164c3949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f2fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x7, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 53.603918405s ago: executing program 3 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/66, 0x42}], 0x6}, 0x1) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3', 0x1) 39.773090455s ago: executing program 2 (id=2228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000191c0), 0x0) r4 = dup(r3) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f00000014c0)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088beb5"], 0xfdef) r7 = accept4$inet(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x400, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TCFLSH(r8, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000180)={0x6, '\x00', {0x2}}) 38.778591734s ago: executing program 2 (id=2239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 38.631846815s ago: executing program 33 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/66, 0x42}], 0x6}, 0x1) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3', 0x1) 37.850930731s ago: executing program 2 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x44004810) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 37.71371746s ago: executing program 2 (id=2249): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x22) write(r4, &(0x7f0000000280)='7', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', 0x8101, 0x40) write(r5, &(0x7f0000000300)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x6001, 0x122) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200020, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 37.350755383s ago: executing program 2 (id=2252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000ffff", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a", 0x3f, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="24003300d0000000080211000001080211000000505050505050004009"], 0x40}, 0x1, 0x0, 0x0, 0x2800}, 0x10) 36.707629252s ago: executing program 2 (id=2256): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) dup2(r1, 0x64) ioctl(r0, 0x3b76, &(0x7f0000000a00)="100000000000000064") 36.599480461s ago: executing program 34 (id=2256): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) dup2(r1, 0x64) ioctl(r0, 0x3b76, &(0x7f0000000a00)="100000000000000064") 14.381643375s ago: executing program 6 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x100000b06, 0x20000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x2, 0x1, 0x2, 0x2, "412d13cc00"}) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0x64010101}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.840606454s ago: executing program 6 (id=2496): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 13.729611708s ago: executing program 6 (id=2497): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) (fail_nth: 8) 12.893671736s ago: executing program 6 (id=2503): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) (fail_nth: 8) 12.676006539s ago: executing program 6 (id=2505): r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000008c0)=""/164) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 11.760512234s ago: executing program 6 (id=2506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) r1 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0xb66f) sendfile(r2, r3, 0x0, 0x7ffff006) write(r1, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x4000, 0x13a) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x16, @rand_addr=0x64010101, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0xfffffffffffffeb8) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x8000001, 0x1}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/30, 0x1e) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x470042, 0x142) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x5, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.328085642s ago: executing program 5 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) (fail_nth: 7) 1.199346636s ago: executing program 5 (id=2590): r0 = socket(0x2d, 0x2, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df", 0x1}], 0x1}, 0x10) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000240)={0x8, 0x97, 0xffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffffffffffef3, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x90}}, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000001680)) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) sendto$phonet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x23, 0x2, 0x0, 0x5}, 0x10) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x5, 0x6, 0x2894, 0x6737267d, 0x1]}, &(0x7f0000000200)=0x54) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000340)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0xa) r8 = socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(r7, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random}) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r10, 0x8040587f, &(0x7f0000000a00)={{0xfffffffffffffffe, 0x7, 0x1, 0x8, 0x1ff}, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 1.089253843s ago: executing program 5 (id=2593): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x11}, 0x50) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x9}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}}}, 0xb) 1.041737123s ago: executing program 1 (id=2594): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 931.708805ms ago: executing program 5 (id=2595): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x22) write(r4, &(0x7f0000000280)='7', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', 0x8101, 0x40) write(r5, &(0x7f0000000300)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x6001, 0x122) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200020, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 876.771028ms ago: executing program 1 (id=2596): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "000000000000002c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49027ceab4152b6e6d87cd6088e97a9d06d2914300"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x20000220) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) keyctl$chown(0x4, r0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/239, 0xef) writev(r2, &(0x7f0000000800)=[{&(0x7f00000003c0)="ebfa0e81ceb3dc4c43c215dc4d15af003afa41ae5fbeb2c5ea34e359a91a0dc58e46f7c019be5b175c12cf29c48c2d4b45c1dc73113beeb9b5a73cd0415b0437839a7b9b3f316c", 0x47}], 0x1) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) 790.415879ms ago: executing program 1 (id=2598): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) landlock_restrict_self(r2, 0xe) 789.993827ms ago: executing program 4 (id=2599): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(r0) r3 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r5, r4, 0x2f}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x14, "2af01c3d0040fbffffffffffffff00"}) r8 = syz_open_pts(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r9, &(0x7f0000000100)='/e', 0x2) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0x536d) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x21) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r10}, 0x38) 671.084132ms ago: executing program 4 (id=2600): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async, rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x8880}, 0x20) 601.631925ms ago: executing program 4 (id=2601): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x2000) 489.476728ms ago: executing program 4 (id=2602): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (fail_nth: 8) 489.19504ms ago: executing program 1 (id=2603): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x8, 0x6, 0x768, 0x578, 0xf8, 0xf8, 0x578, 0x460, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x80}, @loopback, [], [0x0, 0x0, 0xff000000], 'veth1_to_batadv\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x138, 0x160, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x14}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3}, @private2, @empty, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'netbios-ns\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2800, 0x106) 420.789043ms ago: executing program 1 (id=2604): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r1, &(0x7f00000003c0)=@hci={0x1f, 0x3}, 0x80) connect(r1, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002400000000008490787f0000017f00000082000040000000000000000000000000de9d80cd19fe"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f00000024c0)={0x60, 0x0, r4, {{0x5, 0x400, 0x8, 0x5, 0x41a, 0x61, 0x10001}}}, 0x60) 420.62899ms ago: executing program 4 (id=2605): bpf$PROG_LOAD(0x5, &(0x7f0000007900)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000004ac32cc495"], &(0x7f00000023c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) 331.491948ms ago: executing program 4 (id=2606): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000140)={r0, 0x0, 0x919, 0x2, 0x7fffffffffffffff, 0x8}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@alu={0x7, 0x1, 0x0, 0x2, 0xb, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) ppoll(&(0x7f0000000000)=[{r5, 0x2}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r6, &(0x7f0000000b00)='0x0102\x00', 0x6) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0x80) close(r6) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000040)={0x1, 0x33, 0x0, 0x3, 0x3, 0xc, @lba, @lba=0x89f}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 331.084381ms ago: executing program 5 (id=2607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25df5bf9, 0x400}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 8) 330.832249ms ago: executing program 1 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000002c0)='omfs\x00', 0x1000005, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0123:abcd:a,4567:ef01:l', 0x17) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='maps\x00') mkdir(&(0x7f0000000140)='./config\x00', 0x13b) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='namespace0.0\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/namespace0.0/force_raw\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='0\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='namespace0.0\x00', 0xd) close(r6) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write(r3, &(0x7f0000000380)='fi', 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc0405602, &(0x7f00000001c0)=@overlay={0x0, 0x1, 0x4, 0x171003, 0x0, {}, {0x1, 0xc, 0x18, 0xa4, 0xb, 0x9e, "f50f8900"}, 0x4, 0x3, {}, 0x44}) exit(0x5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) 0s ago: executing program 5 (id=2609): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x44092}, 0xb50bee314c729fc8) kernel console output (not intermixed with test programs): 9.861796][T11966] RIP: 0033:0x7f4e1879e019 [ 219.861812][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.861828][T11966] RSP: 002b:00007f4e19669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.861847][T11966] RAX: ffffffffffffffda RBX: 00007f4e18a25fa0 RCX: 00007f4e1879e019 [ 219.861859][T11966] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 219.861977][T11966] RBP: 00007f4e19669090 R08: 0000000000000000 R09: 0000000000000000 [ 219.861988][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.861999][T11966] R13: 00007f4e18a26038 R14: 00007f4e18a25fa0 R15: 00007ffe78298828 [ 219.862024][T11966] [ 219.975144][T11966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.072275][T11966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.074870][T11966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.083424][T11966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.088448][T11966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.090685][T11966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.105015][ T849] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 220.124870][T11966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.133815][T11966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.134282][ T849] usb 10-1: device descriptor read/8, error -71 [ 220.138794][T11966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.150331][T11966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.164322][T11979] nvmet: Invalid value ' èS’t«mªâ3C( qÃÞeŽï®M½ur™×ß²ô [ 220.164322][T11979] ‡TÆ(‚Ãb„35+â–swhÛ4' for trsvcid [ 220.304127][T11985] syzkaller0: entered promiscuous mode [ 220.306085][T11985] syzkaller0: entered allmulticast mode [ 220.372556][ T849] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 220.403513][ T849] usb 10-1: device descriptor read/8, error -71 [ 220.452227][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 220.455329][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2299'. [ 220.458340][T11988] netlink: 'syz.6.2299': attribute type 20 has an invalid length. [ 220.515805][ T849] usb usb10-port1: unable to enumerate USB device [ 221.156153][T11996] FAULT_INJECTION: forcing a failure. [ 221.156153][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 221.165860][T11996] CPU: 2 UID: 0 PID: 11996 Comm: syz.1.2301 Not tainted syzkaller #0 PREEMPT(full) [ 221.165879][T11996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.165886][T11996] Call Trace: [ 221.165891][T11996] [ 221.165896][T11996] dump_stack_lvl+0x100/0x190 [ 221.165917][T11996] should_fail_ex.cold+0x5/0xa [ 221.165932][T11996] should_failslab+0xc2/0x120 [ 221.165948][T11996] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 221.165962][T11996] ? d_alloc_parallel+0x9ed/0x14b0 [ 221.165979][T11996] ? alloc_inode+0x183/0x250 [ 221.165997][T11996] alloc_inode+0x183/0x250 [ 221.166012][T11996] new_inode+0x22/0x1c0 [ 221.166032][T11996] ? do_raw_spin_lock+0x128/0x260 [ 221.166050][T11996] configfs_new_inode+0x24/0x4a0 [ 221.166063][T11996] configfs_create+0xcc/0x290 [ 221.166076][T11996] configfs_lookup+0x38f/0x7d0 [ 221.166091][T11996] ? __pfx_configfs_lookup+0x10/0x10 [ 221.166106][T11996] path_openat+0x241f/0x4280 [ 221.166123][T11996] ? __pfx_path_openat+0x10/0x10 [ 221.166139][T11996] do_file_open+0x20e/0x430 [ 221.166152][T11996] ? __pfx_do_file_open+0x10/0x10 [ 221.166172][T11996] ? alloc_fd+0x471/0x7a0 [ 221.166185][T11996] ? do_getname+0x191/0x390 [ 221.166201][T11996] do_sys_openat2+0x10f/0x1e0 [ 221.166216][T11996] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.166231][T11996] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 221.166266][T11996] __x64_sys_openat+0x12d/0x210 [ 221.166280][T11996] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.166294][T11996] ? find_held_lock+0x2b/0x80 [ 221.166304][T11996] ? trace_syscall_enter+0xd9/0x110 [ 221.166324][T11996] do_syscall_64+0x115/0x870 [ 221.166339][T11996] ? clear_bhb_loop+0x40/0x90 [ 221.166352][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.166364][T11996] RIP: 0033:0x7f4e1879e019 [ 221.166374][T11996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.166385][T11996] RSP: 002b:00007f4e19669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.166397][T11996] RAX: ffffffffffffffda RBX: 00007f4e18a25fa0 RCX: 00007f4e1879e019 [ 221.166404][T11996] RDX: 0000000000002800 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 221.166411][T11996] RBP: 00007f4e19669090 R08: 0000000000000000 R09: 0000000000000000 [ 221.166417][T11996] R10: 0000000000000106 R11: 0000000000000246 R12: 0000000000000001 [ 221.166424][T11996] R13: 00007f4e18a26038 R14: 00007f4e18a25fa0 R15: 00007ffe78298828 [ 221.166438][T11996] [ 221.464111][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2302'. [ 221.515206][T11999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2302'. [ 221.961552][T12013] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2306'. [ 222.102148][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.104331][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.106652][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.108110][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.309119][T12045] FAULT_INJECTION: forcing a failure. [ 223.309119][T12045] name failslab, interval 1, probability 0, space 0, times 0 [ 223.314910][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.6.2317 Not tainted syzkaller #0 PREEMPT(full) [ 223.314926][T12045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.314941][T12045] Call Trace: [ 223.314955][T12045] [ 223.314960][T12045] dump_stack_lvl+0x100/0x190 [ 223.315032][T12045] should_fail_ex.cold+0x5/0xa [ 223.315053][T12045] should_failslab+0xc2/0x120 [ 223.315079][T12045] __kmalloc_noprof+0xfc/0x820 [ 223.315099][T12045] ? tomoyo_encode2+0xfb/0x3c0 [ 223.315126][T12045] tomoyo_encode2+0xfb/0x3c0 [ 223.315139][T12045] tomoyo_encode+0x29/0x50 [ 223.315149][T12045] tomoyo_realpath_from_path+0x18c/0x690 [ 223.315189][T12045] tomoyo_check_open_permission+0x2af/0x3c0 [ 223.315209][T12045] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 223.315229][T12045] ? hook_file_open+0x24f/0x8f0 [ 223.315253][T12045] ? path_get+0x61/0x80 [ 223.315279][T12045] tomoyo_file_open+0x6b/0x90 [ 223.315292][T12045] security_file_open+0xb5/0x1e0 [ 223.315311][T12045] do_dentry_open+0x588/0x14d0 [ 223.315344][T12045] vfs_open+0x82/0x3f0 [ 223.315359][T12045] path_openat+0x2873/0x4280 [ 223.315381][T12045] ? __pfx_path_openat+0x10/0x10 [ 223.315397][T12045] do_file_open+0x20e/0x430 [ 223.315410][T12045] ? __pfx_do_file_open+0x10/0x10 [ 223.315431][T12045] ? alloc_fd+0x471/0x7a0 [ 223.315445][T12045] ? do_getname+0x191/0x390 [ 223.315461][T12045] do_sys_openat2+0x10f/0x1e0 [ 223.315475][T12045] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.315489][T12045] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 223.315516][T12045] __x64_sys_openat+0x12d/0x210 [ 223.315530][T12045] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.315544][T12045] ? find_held_lock+0x2b/0x80 [ 223.315566][T12045] ? trace_syscall_enter+0xd9/0x110 [ 223.315590][T12045] do_syscall_64+0x115/0x870 [ 223.315649][T12045] ? clear_bhb_loop+0x40/0x90 [ 223.315663][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.315675][T12045] RIP: 0033:0x7f586939e019 [ 223.315685][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.315697][T12045] RSP: 002b:00007f58675f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.315716][T12045] RAX: ffffffffffffffda RBX: 00007f5869625fa0 RCX: 00007f586939e019 [ 223.315723][T12045] RDX: 0000000000000002 RSI: 0000200000002080 RDI: ffffffffffffff9c [ 223.315729][T12045] RBP: 00007f58675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.315736][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.315742][T12045] R13: 00007f5869626038 R14: 00007f5869625fa0 R15: 00007ffcf2d7e818 [ 223.315756][T12045] [ 223.315791][T12045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.408099][T12047] FAULT_INJECTION: forcing a failure. [ 223.408099][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 223.445491][T12047] CPU: 2 UID: 0 PID: 12047 Comm: syz.4.2319 Not tainted syzkaller #0 PREEMPT(full) [ 223.445509][T12047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.445516][T12047] Call Trace: [ 223.445520][T12047] [ 223.445525][T12047] dump_stack_lvl+0x100/0x190 [ 223.445545][T12047] should_fail_ex.cold+0x5/0xa [ 223.445560][T12047] should_failslab+0xc2/0x120 [ 223.445576][T12047] __kmalloc_noprof+0xfc/0x820 [ 223.445588][T12047] ? __register_sysctl_table+0xbc8/0x1650 [ 223.445613][T12047] ? __register_sysctl_table+0xbc8/0x1650 [ 223.445625][T12047] ? __register_sysctl_table+0xbe4/0x1650 [ 223.445641][T12047] __register_sysctl_table+0xbe4/0x1650 [ 223.445658][T12047] ? __pfx___register_sysctl_table+0x10/0x10 [ 223.445671][T12047] ? register_pidns_sysctls+0x48/0x1c0 [ 223.445691][T12047] ? __asan_memcpy+0x3c/0x60 [ 223.445703][T12047] register_pidns_sysctls+0x11d/0x1c0 [ 223.445715][T12047] ? __ns_common_init+0x299/0x4b0 [ 223.445733][T12047] copy_pid_ns+0x680/0x10a0 [ 223.445750][T12047] ? __pfx_copy_pid_ns+0x10/0x10 [ 223.445765][T12047] ? rcu_is_watching+0x12/0xc0 [ 223.445783][T12047] ? __pfx_copy_mnt_ns+0x10/0x10 [ 223.445799][T12047] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 223.445812][T12047] ? create_new_namespaces+0x30/0xac0 [ 223.445830][T12047] create_new_namespaces+0x2aa/0xac0 [ 223.445847][T12047] unshare_nsproxy_namespaces+0xf2/0x220 [ 223.445866][T12047] ksys_unshare+0x438/0xab0 [ 223.445891][T12047] ? __pfx_ksys_unshare+0x10/0x10 [ 223.445906][T12047] ? find_held_lock+0x2b/0x80 [ 223.445917][T12047] ? trace_syscall_enter+0xd9/0x110 [ 223.445932][T12047] ? trace_syscall_enter+0xd9/0x110 [ 223.445949][T12047] __x64_sys_unshare+0x31/0x40 [ 223.445965][T12047] do_syscall_64+0x115/0x870 [ 223.445979][T12047] ? clear_bhb_loop+0x40/0x90 [ 223.445993][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.446005][T12047] RIP: 0033:0x7f7baf59e019 [ 223.446016][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.446027][T12047] RSP: 002b:00007f7bb052c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.446039][T12047] RAX: ffffffffffffffda RBX: 00007f7baf825fa0 RCX: 00007f7baf59e019 [ 223.446046][T12047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 223.446052][T12047] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.446059][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.446065][T12047] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 223.446078][T12047] [ 223.446084][T12047] sysctl could not get directory: /kernel -12 [ 223.598865][T12057] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 223.602449][T12057] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 223.606514][T12057] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 223.610795][T12057] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 223.655146][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 223.813801][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 223.813826][ T42] audit: type=1800 audit(1785806687.850:1421): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 223.838884][ T42] audit: type=1800 audit(1785806687.870:1422): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 223.899496][ T42] audit: type=1800 audit(1785806687.930:1423): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 223.940209][ T42] audit: type=1800 audit(1785806687.970:1424): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 223.962112][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 223.988781][ T42] audit: type=1800 audit(1785806688.020:1425): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 224.013887][ T42] audit: type=1800 audit(1785806688.040:1426): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2333" name="blocks" dev="configfs" ino=45029 res=0 errno=0 [ 224.039922][ T42] audit: type=1800 audit(1785806688.070:1427): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 224.061782][ T42] audit: type=1800 audit(1785806688.090:1428): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 224.067415][T12090] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2334'. [ 224.092236][ T9] usb 6-1: device descriptor read/64, error -71 [ 224.114592][ T42] audit: type=1800 audit(1785806688.150:1429): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 224.144285][ T42] audit: type=1400 audit(1785806688.180:1430): avc: denied { listen } for pid=12094 comm="syz.6.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.172245][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.200009][T12098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12098 comm=syz.5.2337 [ 224.204631][T12098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12098 comm=syz.5.2337 [ 224.208465][T12098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12098 comm=syz.5.2337 [ 224.332375][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 224.348528][T12110] FAULT_INJECTION: forcing a failure. [ 224.348528][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 224.354982][T12110] CPU: 0 UID: 0 PID: 12110 Comm: syz.5.2342 Not tainted syzkaller #0 PREEMPT(full) [ 224.355000][T12110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.355007][T12110] Call Trace: [ 224.355012][T12110] [ 224.355018][T12110] dump_stack_lvl+0x100/0x190 [ 224.355037][T12110] should_fail_ex.cold+0x5/0xa [ 224.355053][T12110] should_failslab+0xc2/0x120 [ 224.355068][T12110] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 224.355082][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.355097][T12110] ? __d_alloc+0x35/0xa50 [ 224.355113][T12110] __d_alloc+0x35/0xa50 [ 224.355127][T12110] d_alloc_pseudo+0x1c/0xc0 [ 224.355143][T12110] alloc_file_pseudo+0x118/0x290 [ 224.355183][T12110] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 224.355199][T12110] ? alloc_fd+0x471/0x7a0 [ 224.355213][T12110] sock_alloc_file+0x50/0x210 [ 224.355278][T12110] __sys_socket+0x1c0/0x260 [ 224.355289][T12110] ? __pfx___sys_socket+0x10/0x10 [ 224.355300][T12110] ? find_held_lock+0x2b/0x80 [ 224.355310][T12110] ? trace_syscall_enter+0xd9/0x110 [ 224.355326][T12110] ? trace_syscall_enter+0xd9/0x110 [ 224.355342][T12110] __x64_sys_socket+0x72/0xb0 [ 224.355354][T12110] do_syscall_64+0x115/0x870 [ 224.355369][T12110] ? clear_bhb_loop+0x40/0x90 [ 224.355382][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.355394][T12110] RIP: 0033:0x7fc09f99e019 [ 224.355405][T12110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.355415][T12110] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.355427][T12110] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 224.355434][T12110] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 224.355441][T12110] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 224.355447][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.355453][T12110] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 224.355466][T12110] [ 224.478891][T12113] vlan2: entered allmulticast mode [ 224.480633][T12113] macsec0: entered allmulticast mode [ 224.483734][T12113] veth1_macvtap: entered allmulticast mode [ 224.502077][ T9] usb 6-1: device descriptor read/64, error -71 [ 224.563344][T12117] SELinux: Context system_u:object_r:init_exec_t:s0 is not valid (left unmapped). [ 224.612215][ T9] usb usb6-port1: attempt power cycle [ 224.875382][T12134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2350'. [ 224.952164][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 224.975433][ T9] usb 6-1: device descriptor read/8, error -71 [ 225.167205][T12155] FAULT_INJECTION: forcing a failure. [ 225.167205][T12155] name failslab, interval 1, probability 0, space 0, times 0 [ 225.176084][T12155] CPU: 2 UID: 0 PID: 12155 Comm: syz.6.2356 Not tainted syzkaller #0 PREEMPT(full) [ 225.176101][T12155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.176115][T12155] Call Trace: [ 225.176129][T12155] [ 225.176134][T12155] dump_stack_lvl+0x100/0x190 [ 225.176176][T12155] should_fail_ex.cold+0x5/0xa [ 225.176198][T12155] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 225.176231][T12155] should_failslab+0xc2/0x120 [ 225.176253][T12155] kmem_cache_alloc_noprof+0x91/0x6a0 [ 225.176273][T12155] ? skb_clone+0x190/0x400 [ 225.176320][T12155] skb_clone+0x190/0x400 [ 225.176334][T12155] netlink_deliver_tap+0xaed/0xcc0 [ 225.176359][T12155] netlink_unicast+0x6a5/0x850 [ 225.176373][T12155] ? __pfx_netlink_unicast+0x10/0x10 [ 225.176388][T12155] netlink_ack+0x655/0xb80 [ 225.176403][T12155] netlink_rcv_skb+0x333/0x420 [ 225.176415][T12155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.176436][T12155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.176452][T12155] ? netlink_deliver_tap+0x1ae/0xcc0 [ 225.176466][T12155] netlink_unicast+0x585/0x850 [ 225.176479][T12155] ? __pfx_netlink_unicast+0x10/0x10 [ 225.176490][T12155] ? __pfx_sock_has_perm+0x10/0x10 [ 225.176514][T12155] netlink_sendmsg+0x8b0/0xda0 [ 225.176528][T12155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.176541][T12155] ? selinux_socket_sendmsg+0x198/0x2f0 [ 225.176560][T12155] ____sys_sendmsg+0xa4d/0xbe0 [ 225.176578][T12155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.176590][T12155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.176611][T12155] ? __pfx_trace_clock_local+0x10/0x10 [ 225.176633][T12155] ___sys_sendmsg+0x190/0x1e0 [ 225.176645][T12155] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.176655][T12155] ? __lock_acquire+0x49f/0x1a40 [ 225.176690][T12155] __sys_sendmsg+0x160/0x210 [ 225.176704][T12155] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.176725][T12155] do_syscall_64+0x115/0x870 [ 225.176784][T12155] ? clear_bhb_loop+0x40/0x90 [ 225.176798][T12155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.176810][T12155] RIP: 0033:0x7f586939e019 [ 225.176821][T12155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.176831][T12155] RSP: 002b:00007f58675f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.176851][T12155] RAX: ffffffffffffffda RBX: 00007f5869625fa0 RCX: 00007f586939e019 [ 225.176857][T12155] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 225.176864][T12155] RBP: 00007f58675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.176871][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.176877][T12155] R13: 00007f5869626038 R14: 00007f5869625fa0 R15: 00007ffcf2d7e818 [ 225.176891][T12155] [ 225.268680][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 225.297623][ T9] usb 6-1: device descriptor read/8, error -71 [ 225.402601][ T9] usb usb6-port1: unable to enumerate USB device [ 225.422170][ T849] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 225.552605][ T849] usb 9-1: device descriptor read/64, error -71 [ 225.822131][ T849] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 225.952199][ T849] usb 9-1: device descriptor read/64, error -71 [ 226.062389][ T849] usb usb9-port1: attempt power cycle [ 226.252141][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.402284][ T849] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 226.435873][ T849] usb 9-1: device descriptor read/8, error -71 [ 226.502768][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'. [ 226.682141][ T849] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 226.712630][ T849] usb 9-1: device descriptor read/8, error -71 [ 226.792182][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 226.807913][T12179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=245 sclass=netlink_route_socket pid=12179 comm=syz.1.2365 [ 226.822612][ T849] usb usb9-port1: unable to enumerate USB device [ 226.841469][T12183] loop5: detected capacity change from 0 to 7 [ 226.849523][T12183] Dev loop5: unable to read RDB block 7 [ 226.851325][T12183] loop5: AHDI p1 p2 p3 [ 226.853440][T12183] loop5: partition table partially beyond EOD, truncated [ 226.856457][T12183] loop5: p1 start 1601398130 is beyond EOD, truncated [ 226.858803][T12183] loop5: p2 start 1702059890 is beyond EOD, truncated [ 226.942236][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 226.946224][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 226.949668][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 226.955680][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 226.959209][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.961752][ T9] usb 10-1: Product: syz [ 226.964326][ T9] usb 10-1: Manufacturer: syz [ 226.965983][ T9] usb 10-1: SerialNumber: syz [ 227.195374][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.257463][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 227.262354][ T9] usb 10-1: USB disconnect, device number 6 [ 227.289065][ T6540] udevd[6540]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 227.848811][T12200] Cannot find add_set index 0 as target [ 228.134894][T12209] ip6t_srh: unknown srh invflags 51E8 [ 228.245735][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 228.268199][T12213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2376'. [ 228.313841][T12217] FAULT_INJECTION: forcing a failure. [ 228.313841][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 228.321666][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.5.2379 Not tainted syzkaller #0 PREEMPT(full) [ 228.321689][T12217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.321699][T12217] Call Trace: [ 228.321706][T12217] [ 228.321714][T12217] dump_stack_lvl+0x100/0x190 [ 228.321740][T12217] should_fail_ex.cold+0x5/0xa [ 228.321762][T12217] should_failslab+0xc2/0x120 [ 228.321783][T12217] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.321811][T12217] ? ioam6_genl_dumpns_start+0x13a/0x1c0 [ 228.321861][T12217] ioam6_genl_dumpns_start+0x13a/0x1c0 [ 228.321880][T12217] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 228.321897][T12217] genl_start+0x601/0x970 [ 228.321920][T12217] __netlink_dump_start+0x60e/0x990 [ 228.321940][T12217] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 228.321984][T12217] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 228.322010][T12217] ? rcu_is_watching+0x12/0xc0 [ 228.322045][T12217] ? __pfx_genl_start+0x10/0x10 [ 228.322062][T12217] ? __pfx_genl_dumpit+0x10/0x10 [ 228.322080][T12217] ? __pfx_genl_done+0x10/0x10 [ 228.322100][T12217] ? bpf_lsm_capable+0x9/0x10 [ 228.322126][T12217] ? security_capable+0x80/0x260 [ 228.322153][T12217] genl_rcv_msg+0x471/0x800 [ 228.322174][T12217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.322194][T12217] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 228.322211][T12217] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 228.322227][T12217] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 228.322250][T12217] netlink_rcv_skb+0x159/0x420 [ 228.322266][T12217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.322287][T12217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.322313][T12217] ? netlink_deliver_tap+0x1ae/0xcc0 [ 228.322332][T12217] genl_rcv+0x28/0x40 [ 228.322349][T12217] netlink_unicast+0x585/0x850 [ 228.322369][T12217] ? __pfx_netlink_unicast+0x10/0x10 [ 228.322398][T12217] netlink_sendmsg+0x8b0/0xda0 [ 228.322420][T12217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.322439][T12217] ? selinux_socket_sendmsg+0x198/0x2f0 [ 228.322469][T12217] ____sys_sendmsg+0xa4d/0xbe0 [ 228.322494][T12217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.322513][T12217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.322543][T12217] ? __pfx_trace_clock_local+0x10/0x10 [ 228.322566][T12217] ___sys_sendmsg+0x190/0x1e0 [ 228.322584][T12217] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.322598][T12217] ? __lock_acquire+0x49f/0x1a40 [ 228.322645][T12217] __sys_sendmsg+0x160/0x210 [ 228.322667][T12217] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.322699][T12217] do_syscall_64+0x115/0x870 [ 228.322719][T12217] ? clear_bhb_loop+0x40/0x90 [ 228.322740][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.322757][T12217] RIP: 0033:0x7fc09f99e019 [ 228.322772][T12217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.322787][T12217] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.322805][T12217] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 228.322815][T12217] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 228.322825][T12217] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 228.322835][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.322845][T12217] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 228.322867][T12217] [ 228.556501][T12233] FAULT_INJECTION: forcing a failure. [ 228.556501][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 228.569757][T12233] CPU: 2 UID: 0 PID: 12233 Comm: syz.5.2383 Not tainted syzkaller #0 PREEMPT(full) [ 228.569775][T12233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.569782][T12233] Call Trace: [ 228.569786][T12233] [ 228.569791][T12233] dump_stack_lvl+0x100/0x190 [ 228.569811][T12233] should_fail_ex.cold+0x5/0xa [ 228.569826][T12233] should_failslab+0xc2/0x120 [ 228.569843][T12233] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.569862][T12233] ? sctp_add_bind_addr+0xae/0x3e0 [ 228.569903][T12233] sctp_add_bind_addr+0xae/0x3e0 [ 228.569919][T12233] sctp_copy_local_addr_list+0x349/0x550 [ 228.569938][T12233] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 228.569956][T12233] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 228.569974][T12233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.569991][T12233] sctp_bind_addr_copy+0xe0/0x530 [ 228.570008][T12233] sctp_connect_new_asoc+0x1c9/0x770 [ 228.570021][T12233] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 228.570035][T12233] ? sctp_get_af_specific+0x62/0x70 [ 228.570051][T12233] ? sctp_sockaddr_af+0x2a3/0x340 [ 228.570067][T12233] __sctp_connect+0x3e7/0xc70 [ 228.570081][T12233] ? __pfx___sctp_connect+0x10/0x10 [ 228.570094][T12233] ? __pfx_sctp_inet_connect+0x10/0x10 [ 228.570106][T12233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.570120][T12233] ? __pfx_sctp_inet_connect+0x10/0x10 [ 228.570130][T12233] sctp_inet_connect+0x15f/0x220 [ 228.570143][T12233] __sys_connect_file+0x141/0x1a0 [ 228.570158][T12233] __sys_connect+0x141/0x170 [ 228.570170][T12233] ? __pfx___sys_connect+0x10/0x10 [ 228.570188][T12233] ? trace_syscall_enter+0xd9/0x110 [ 228.570203][T12233] ? trace_syscall_enter+0xd9/0x110 [ 228.570220][T12233] __x64_sys_connect+0x72/0xb0 [ 228.570233][T12233] do_syscall_64+0x115/0x870 [ 228.570246][T12233] ? clear_bhb_loop+0x40/0x90 [ 228.570260][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.570271][T12233] RIP: 0033:0x7fc09f99e019 [ 228.570281][T12233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.570292][T12233] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 228.570303][T12233] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 228.570310][T12233] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 228.570317][T12233] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 228.570323][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.570334][T12233] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 228.570347][T12233] [ 228.849574][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 228.849596][ T42] audit: type=1800 audit(1785806692.880:1518): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 228.931667][ T42] audit: type=1800 audit(1785806692.960:1519): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 229.101452][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2387'. [ 229.153669][ T42] audit: type=1800 audit(1785806693.190:1520): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 229.162165][ T849] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 229.176906][ T42] audit: type=1400 audit(1785806693.210:1521): avc: denied { append } for pid=12247 comm="syz.6.2388" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.201510][ T42] audit: type=1800 audit(1785806693.220:1522): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 229.219994][T12250] FAULT_INJECTION: forcing a failure. [ 229.219994][T12250] name failslab, interval 1, probability 0, space 0, times 0 [ 229.224750][T12250] CPU: 2 UID: 0 PID: 12250 Comm: syz.5.2389 Not tainted syzkaller #0 PREEMPT(full) [ 229.224766][T12250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.224774][T12250] Call Trace: [ 229.224779][T12250] [ 229.224784][T12250] dump_stack_lvl+0x100/0x190 [ 229.224804][T12250] should_fail_ex.cold+0x5/0xa [ 229.224820][T12250] should_failslab+0xc2/0x120 [ 229.224835][T12250] __kmalloc_noprof+0xfc/0x820 [ 229.224848][T12250] ? sk_prot_alloc+0x10b/0x2a0 [ 229.224868][T12250] sk_prot_alloc+0x10b/0x2a0 [ 229.224886][T12250] sk_alloc+0x36/0xe80 [ 229.224899][T12250] x25_alloc_socket+0x28/0x360 [ 229.224927][T12250] x25_rx_call_request+0x63b/0x1d00 [ 229.224946][T12250] ? __pfx_x25_rx_call_request+0x10/0x10 [ 229.224971][T12250] ? mtk_tag_xmit+0x420/0x670 [ 229.224982][T12250] ? rcu_is_watching+0x12/0xc0 [ 229.225000][T12250] ? __local_bh_enable_ip+0x9e/0x120 [ 229.225023][T12250] ? lockdep_hardirqs_on+0x78/0x100 [ 229.225039][T12250] x25_lapb_receive_frame+0xa39/0x1000 [ 229.225055][T12250] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 229.225069][T12250] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 229.225084][T12250] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 229.225097][T12250] ? lock_acquire+0x1b9/0x370 [ 229.225112][T12250] ? find_held_lock+0x2b/0x80 [ 229.225123][T12250] __netif_receive_skb+0x1f/0x120 [ 229.225136][T12250] netif_receive_skb+0x139/0x7d0 [ 229.225148][T12250] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.225160][T12250] ? _copy_from_iter+0x270/0x1690 [ 229.225186][T12250] tun_rx_batched.isra.0+0x3f6/0x750 [ 229.225247][T12250] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 229.225270][T12250] ? tun_get_user+0x1cc8/0x3c20 [ 229.225284][T12250] tun_get_user+0x1e31/0x3c20 [ 229.225301][T12250] ? __pfx_tun_get_user+0x10/0x10 [ 229.225314][T12250] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.225335][T12250] ? find_held_lock+0x2b/0x80 [ 229.225344][T12250] ? tun_get+0x191/0x370 [ 229.225354][T12250] ? tun_get+0x191/0x370 [ 229.225367][T12250] tun_chr_write_iter+0xdc/0x200 [ 229.225380][T12250] vfs_write+0x6ac/0x1050 [ 229.225404][T12250] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.225417][T12250] ? __pfx_vfs_write+0x10/0x10 [ 229.225434][T12250] ? find_held_lock+0x2b/0x80 [ 229.225451][T12250] ksys_write+0x12a/0x250 [ 229.225461][T12250] ? __pfx_ksys_write+0x10/0x10 [ 229.225470][T12250] ? trace_syscall_enter+0xd9/0x110 [ 229.225489][T12250] do_syscall_64+0x115/0x870 [ 229.225502][T12250] ? clear_bhb_loop+0x40/0x90 [ 229.225516][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.225528][T12250] RIP: 0033:0x7fc09f99e019 [ 229.225538][T12250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.225549][T12250] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.225562][T12250] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 229.225569][T12250] RDX: 0000000000000088 RSI: 0000200000000140 RDI: 0000000000000003 [ 229.225575][T12250] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 229.225582][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.225588][T12250] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 229.225601][T12250] [ 229.229120][ T42] audit: type=1800 audit(1785806693.230:1523): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183640 res=0 errno=0 [ 229.332060][ T849] usb 6-1: Using ep0 maxpacket: 16 [ 229.354178][ T42] audit: type=1800 audit(1785806693.230:1524): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183659 res=0 errno=0 [ 229.408529][ T42] audit: type=1800 audit(1785806693.250:1525): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=183663 res=0 errno=0 [ 229.411918][ T849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.418904][ T42] audit: type=1800 audit(1785806693.400:1526): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 229.426392][ T849] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 229.430699][ T849] usb 6-1: can't read configurations, error -71 [ 229.463781][ T42] audit: type=1800 audit(1785806693.500:1527): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 229.544542][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 229.733872][ T1046] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 229.766664][T12272] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 229.831690][T12275] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 229.887505][ T1046] usb 9-1: unable to get BOS descriptor or descriptor too short [ 229.896830][ T1046] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 229.905219][ T1046] usb 9-1: config 100 has no interface number 0 [ 229.909658][ T1046] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 229.922125][ T1046] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 229.930176][ T1046] usb 9-1: config 100 interface 173 has no altsetting 0 [ 229.943699][ T1046] usb 9-1: string descriptor 0 read error: -22 [ 229.951371][ T1046] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 229.964254][ T1046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.976969][T12256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.981355][T12256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.003220][ T1046] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 230.024678][ T1046] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 230.189549][T12256] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 230.193789][T10280] usb 9-1: USB disconnect, device number 9 [ 230.205318][T10280] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 230.209257][T10280] metro_usb 9-1:100.173: device disconnected [ 230.212815][ T10] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 230.364201][ T10] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 230.367777][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.371613][ T10] usb 10-1: config 0 has no interfaces? [ 230.374110][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 230.382166][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.390725][ T10] usb 10-1: config 0 descriptor?? [ 230.598078][T12303] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 230.599309][T12303] @0Ù: renamed from bond_slave_1 (while UP) [ 230.631579][ T10] usb 10-1: string descriptor 0 read error: -71 [ 230.639094][ T10] usb 10-1: USB disconnect, device number 7 [ 230.746307][T12307] FAULT_INJECTION: forcing a failure. [ 230.746307][T12307] name failslab, interval 1, probability 0, space 0, times 0 [ 230.752700][T12307] CPU: 2 UID: 0 PID: 12307 Comm: syz.6.2414 Not tainted syzkaller #0 PREEMPT(full) [ 230.752717][T12307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.752724][T12307] Call Trace: [ 230.752728][T12307] [ 230.752733][T12307] dump_stack_lvl+0x100/0x190 [ 230.752754][T12307] should_fail_ex.cold+0x5/0xa [ 230.752769][T12307] should_failslab+0xc2/0x120 [ 230.752785][T12307] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 230.752800][T12307] ? __d_alloc+0x35/0xa50 [ 230.752829][T12307] __d_alloc+0x35/0xa50 [ 230.752843][T12307] d_alloc+0x4a/0x1e0 [ 230.752857][T12307] lookup_one_qstr_excl+0x171/0x250 [ 230.752874][T12307] start_dirop+0x59/0xb0 [ 230.752885][T12307] simple_start_creating+0xf9/0x110 [ 230.752897][T12307] ? __pfx_simple_start_creating+0x10/0x10 [ 230.752910][T12307] ? mntput+0x70/0xa0 [ 230.752921][T12307] ? simple_pin_fs+0xa3/0x190 [ 230.752932][T12307] debugfs_start_creating.part.0+0x82/0x170 [ 230.752967][T12307] __debugfs_create_file+0xb3/0x4f0 [ 230.752979][T12307] debugfs_create_file_full+0x41/0x60 [ 230.752992][T12307] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 230.753010][T12307] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 230.753052][T12307] ? lockdep_init_map_type+0x5c/0x250 [ 230.753070][T12307] ? __pfx_bond_setup+0x10/0x10 [ 230.753092][T12307] alloc_netdev_mqs+0x314/0x15c0 [ 230.753115][T12307] rtnl_create_link+0xc13/0xf80 [ 230.753132][T12307] rtnl_newlink+0x13bd/0x2380 [ 230.753151][T12307] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.753165][T12307] ? find_held_lock+0x2b/0x80 [ 230.753175][T12307] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 230.753189][T12307] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 230.753205][T12307] ? avc_has_perm_noaudit+0x145/0x3b0 [ 230.753223][T12307] ? preempt_schedule_common+0x42/0xc0 [ 230.753243][T12307] ? find_held_lock+0x2b/0x80 [ 230.753252][T12307] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 230.753267][T12307] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 230.753283][T12307] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.753298][T12307] rtnetlink_rcv_msg+0x95e/0xe90 [ 230.753315][T12307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.753329][T12307] ? __lock_acquire+0x49f/0x1a40 [ 230.753349][T12307] netlink_rcv_skb+0x159/0x420 [ 230.753362][T12307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.753378][T12307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.753394][T12307] ? rcu_is_watching+0x12/0xc0 [ 230.753415][T12307] netlink_unicast+0x585/0x850 [ 230.753428][T12307] ? __pfx_netlink_unicast+0x10/0x10 [ 230.753444][T12307] netlink_sendmsg+0x8b0/0xda0 [ 230.753461][T12307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.753474][T12307] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.753494][T12307] ____sys_sendmsg+0xa4d/0xbe0 [ 230.753511][T12307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.753524][T12307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.753545][T12307] ? __pfx_trace_clock_local+0x10/0x10 [ 230.753561][T12307] ___sys_sendmsg+0x190/0x1e0 [ 230.753574][T12307] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.753584][T12307] ? __lock_acquire+0x49f/0x1a40 [ 230.753613][T12307] __sys_sendmsg+0x160/0x210 [ 230.753628][T12307] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.753649][T12307] do_syscall_64+0x115/0x870 [ 230.753663][T12307] ? clear_bhb_loop+0x40/0x90 [ 230.753677][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.753688][T12307] RIP: 0033:0x7f586939e019 [ 230.753698][T12307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.753709][T12307] RSP: 002b:00007f58675f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.753721][T12307] RAX: ffffffffffffffda RBX: 00007f5869625fa0 RCX: 00007f586939e019 [ 230.753728][T12307] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000009 [ 230.753735][T12307] RBP: 00007f58675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.753741][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.753748][T12307] R13: 00007f5869626038 R14: 00007f5869625fa0 R15: 00007ffcf2d7e818 [ 230.753762][T12307] [ 230.909037][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 230.943168][T12310] fuse: Bad value for 'fd' [ 231.612446][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 232.179957][T12334] fuse: Bad value for 'group_id' [ 232.183364][T12334] fuse: Bad value for 'group_id' [ 232.318273][T12338] ucma_write: process 130 (syz.5.2422) changed security contexts after opening file descriptor, this is not allowed. [ 232.490698][T12347] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 232.668450][T12366] FAULT_INJECTION: forcing a failure. [ 232.668450][T12366] name failslab, interval 1, probability 0, space 0, times 0 [ 232.689689][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.1.2429 Not tainted syzkaller #0 PREEMPT(full) [ 232.689713][T12366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.689730][T12366] Call Trace: [ 232.689736][T12366] [ 232.689742][T12366] dump_stack_lvl+0x100/0x190 [ 232.689794][T12366] should_fail_ex.cold+0x5/0xa [ 232.689827][T12366] should_failslab+0xc2/0x120 [ 232.689854][T12366] __kmalloc_noprof+0xfc/0x820 [ 232.689878][T12366] ? rcu_is_watching+0x12/0xc0 [ 232.689911][T12366] ? tomoyo_realpath_from_path+0xb6/0x690 [ 232.689940][T12366] tomoyo_realpath_from_path+0xb6/0x690 [ 232.689958][T12366] tomoyo_check_open_permission+0x2af/0x3c0 [ 232.689981][T12366] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 232.690007][T12366] ? hook_file_open+0x24f/0x8f0 [ 232.690039][T12366] ? path_get+0x61/0x80 [ 232.690138][T12366] tomoyo_file_open+0x6b/0x90 [ 232.690156][T12366] security_file_open+0xb5/0x1e0 [ 232.690192][T12366] do_dentry_open+0x588/0x14d0 [ 232.690219][T12366] vfs_open+0x82/0x3f0 [ 232.690238][T12366] path_openat+0x2873/0x4280 [ 232.690262][T12366] ? __pfx_path_openat+0x10/0x10 [ 232.690282][T12366] do_file_open+0x20e/0x430 [ 232.690299][T12366] ? __pfx_do_file_open+0x10/0x10 [ 232.690327][T12366] ? alloc_fd+0x471/0x7a0 [ 232.690345][T12366] ? do_getname+0x191/0x390 [ 232.690365][T12366] do_sys_openat2+0x10f/0x1e0 [ 232.690383][T12366] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.690402][T12366] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 232.690436][T12366] __x64_sys_openat+0x12d/0x210 [ 232.690454][T12366] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.690471][T12366] ? find_held_lock+0x2b/0x80 [ 232.690492][T12366] ? trace_syscall_enter+0xd9/0x110 [ 232.690518][T12366] do_syscall_64+0x115/0x870 [ 232.690576][T12366] ? clear_bhb_loop+0x40/0x90 [ 232.690594][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.690609][T12366] RIP: 0033:0x7f4e1879e019 [ 232.690623][T12366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.690637][T12366] RSP: 002b:00007f4e19648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.690661][T12366] RAX: ffffffffffffffda RBX: 00007f4e18a26090 RCX: 00007f4e1879e019 [ 232.690671][T12366] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 232.690679][T12366] RBP: 00007f4e19648090 R08: 0000000000000000 R09: 0000000000000000 [ 232.690688][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.690697][T12366] R13: 00007f4e18a26128 R14: 00007f4e18a26090 R15: 00007ffe78298828 [ 232.690717][T12366] [ 232.795475][T12366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.841338][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2433'. [ 232.847829][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2433'. [ 232.850927][T12366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.854725][T12366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.856725][T12366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.858710][T12366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.865722][T12366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.889472][T12371] netlink: 'syz.5.2433': attribute type 5 has an invalid length. [ 232.901458][T12371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.000091][T12376] nvmet: Invalid value 't' for trtype [ 233.182215][ T5844] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 233.333483][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 233.351089][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.355050][ T5844] usb 6-1: config 0 has no interfaces? [ 233.358951][ T5844] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.362103][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.364742][ T5844] usb 6-1: Product: syz [ 233.366114][ T5844] usb 6-1: Manufacturer: syz [ 233.367738][ T5844] usb 6-1: SerialNumber: syz [ 233.383283][ T5844] usb 6-1: config 0 descriptor?? [ 234.406743][T10378] usb 6-1: USB disconnect, device number 45 [ 234.748843][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 234.748866][ T42] audit: type=1800 audit(1785806698.780:1617): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 234.770556][ T42] audit: type=1400 audit(1785806698.800:1618): avc: denied { name_connect } for pid=12389 comm="syz.6.2439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 234.785873][T12390] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56848 sclass=netlink_xfrm_socket pid=12390 comm=syz.6.2439 [ 234.810072][T12392] FAULT_INJECTION: forcing a failure. [ 234.810072][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 234.819517][ T42] audit: type=1400 audit(1785806698.840:1619): avc: denied { ioctl } for pid=12389 comm="syz.6.2439" path="socket:[48318]" dev="sockfs" ino=48318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.832101][T12392] CPU: 0 UID: 0 PID: 12392 Comm: syz.5.2440 Not tainted syzkaller #0 PREEMPT(full) [ 234.832126][T12392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.832137][T12392] Call Trace: [ 234.832144][T12392] [ 234.832152][T12392] dump_stack_lvl+0x100/0x190 [ 234.832183][T12392] should_fail_ex.cold+0x5/0xa [ 234.832208][T12392] should_failslab+0xc2/0x120 [ 234.832233][T12392] kmem_cache_alloc_noprof+0x91/0x6a0 [ 234.832271][T12392] ? __pfx_map_id_range_down+0x10/0x10 [ 234.832294][T12392] ? security_inode_alloc+0x3b/0x2c0 [ 234.832326][T12392] security_inode_alloc+0x3b/0x2c0 [ 234.832352][T12392] inode_init_always_gfp+0xc77/0xfb0 [ 234.832376][T12392] alloc_inode+0x8e/0x250 [ 234.832401][T12392] new_inode+0x22/0x1c0 [ 234.832424][T12392] ? do_raw_spin_lock+0x128/0x260 [ 234.832454][T12392] configfs_new_inode+0x24/0x4a0 [ 234.832490][T12392] configfs_create+0xcc/0x290 [ 234.832511][T12392] configfs_lookup+0x38f/0x7d0 [ 234.832536][T12392] ? __pfx_configfs_lookup+0x10/0x10 [ 234.832561][T12392] path_openat+0x241f/0x4280 [ 234.832590][T12392] ? __pfx_path_openat+0x10/0x10 [ 234.832614][T12392] do_file_open+0x20e/0x430 [ 234.832632][T12392] ? __pfx_do_file_open+0x10/0x10 [ 234.832670][T12392] ? alloc_fd+0x471/0x7a0 [ 234.832692][T12392] ? do_getname+0x191/0x390 [ 234.832719][T12392] do_sys_openat2+0x10f/0x1e0 [ 234.832743][T12392] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.832767][T12392] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 234.832802][T12392] __x64_sys_openat+0x12d/0x210 [ 234.832826][T12392] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.832848][T12392] ? find_held_lock+0x2b/0x80 [ 234.832865][T12392] ? trace_syscall_enter+0xd9/0x110 [ 234.832902][T12392] do_syscall_64+0x115/0x870 [ 234.832926][T12392] ? clear_bhb_loop+0x40/0x90 [ 234.832950][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.832969][T12392] RIP: 0033:0x7fc09f99e019 [ 234.832987][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.833015][T12392] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.833035][T12392] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 234.833048][T12392] RDX: 0000000000002800 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 234.833060][T12392] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 234.833071][T12392] R10: 0000000000000106 R11: 0000000000000246 R12: 0000000000000001 [ 234.833082][T12392] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 234.833107][T12392] [ 234.923434][ T42] audit: type=1800 audit(1785806698.850:1620): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 234.929882][ T42] audit: type=1800 audit(1785806698.870:1621): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 234.946960][ T5737] Bluetooth: hci1: command 0x0419 tx timeout [ 234.948541][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.949101][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.951541][ T5097] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.956765][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.975260][ T42] audit: type=1800 audit(1785806699.010:1622): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 234.988632][T12396] FAULT_INJECTION: forcing a failure. [ 234.988632][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 234.994773][T12396] CPU: 0 UID: 0 PID: 12396 Comm: syz.4.2441 Not tainted syzkaller #0 PREEMPT(full) [ 234.994790][T12396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.994797][T12396] Call Trace: [ 234.994802][T12396] [ 234.994806][T12396] dump_stack_lvl+0x100/0x190 [ 234.994827][T12396] should_fail_ex.cold+0x5/0xa [ 234.994841][T12396] should_failslab+0xc2/0x120 [ 234.994857][T12396] kmem_cache_alloc_noprof+0x91/0x6a0 [ 234.994871][T12396] ? __pfx_map_id_range_down+0x10/0x10 [ 234.994885][T12396] ? security_inode_alloc+0x3b/0x2c0 [ 234.994904][T12396] security_inode_alloc+0x3b/0x2c0 [ 234.994920][T12396] inode_init_always_gfp+0xc77/0xfb0 [ 234.994936][T12396] alloc_inode+0x8e/0x250 [ 234.994951][T12396] new_inode+0x22/0x1c0 [ 234.994965][T12396] ? do_raw_spin_lock+0x128/0x260 [ 234.994984][T12396] configfs_new_inode+0x24/0x4a0 [ 234.994997][T12396] configfs_create+0xcc/0x290 [ 234.995010][T12396] configfs_lookup+0x38f/0x7d0 [ 234.995024][T12396] ? __pfx_configfs_lookup+0x10/0x10 [ 234.995039][T12396] path_openat+0x241f/0x4280 [ 234.995057][T12396] ? __pfx_path_openat+0x10/0x10 [ 234.995072][T12396] do_file_open+0x20e/0x430 [ 234.995085][T12396] ? __pfx_do_file_open+0x10/0x10 [ 234.995106][T12396] ? alloc_fd+0x471/0x7a0 [ 234.995141][T12396] ? do_getname+0x191/0x390 [ 234.995156][T12396] do_sys_openat2+0x10f/0x1e0 [ 234.995172][T12396] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.995186][T12396] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 234.995207][T12396] __x64_sys_openat+0x12d/0x210 [ 234.995221][T12396] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.995234][T12396] ? find_held_lock+0x2b/0x80 [ 234.995245][T12396] ? trace_syscall_enter+0xd9/0x110 [ 234.995264][T12396] do_syscall_64+0x115/0x870 [ 234.995279][T12396] ? clear_bhb_loop+0x40/0x90 [ 234.995292][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.995304][T12396] RIP: 0033:0x7f7baf59e019 [ 234.995315][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.995326][T12396] RSP: 002b:00007f7bb052c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.995338][T12396] RAX: ffffffffffffffda RBX: 00007f7baf825fa0 RCX: 00007f7baf59e019 [ 234.995345][T12396] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 234.995352][T12396] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.995358][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.995365][T12396] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 234.995378][T12396] [ 234.997479][ T42] audit: type=1800 audit(1785806699.030:1623): pid=12398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2442" name="cdrom" dev="configfs" ino=48392 res=0 errno=0 [ 235.136726][ T42] audit: type=1800 audit(1785806699.160:1624): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 235.198175][ T42] audit: type=1800 audit(1785806699.230:1625): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 235.216981][ T42] audit: type=1400 audit(1785806699.250:1626): avc: denied { getopt } for pid=12401 comm="syz.4.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.234672][T12402] kvm: MONITOR instruction emulated as NOP! [ 235.681394][T12431] syzkaller1: entered allmulticast mode [ 235.682680][ T5750] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 235.709269][T12433] loop6: detected capacity change from 0 to 2640 [ 235.725932][T12433] buffer_io_error: 27 callbacks suppressed [ 235.725951][T12433] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.731398][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.734237][T12433] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.738306][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.741117][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.744873][T12433] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.747643][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.750304][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.753612][T12433] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.756827][T12433] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.759757][T12433] ldm_validate_partition_table(): Disk read failed. [ 235.767152][T12433] Dev loop6: unable to read RDB block 0 [ 235.787438][T12433] loop6: unable to read partition table [ 235.809297][T12433] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 235.878500][T12441] FAULT_INJECTION: forcing a failure. [ 235.878500][T12441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.887308][T12441] CPU: 2 UID: 0 PID: 12441 Comm: syz.5.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.887329][T12441] Tainted: [L]=SOFTLOCKUP [ 235.887333][T12441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.887340][T12441] Call Trace: [ 235.887344][T12441] [ 235.887349][T12441] dump_stack_lvl+0x100/0x190 [ 235.887369][T12441] should_fail_ex.cold+0x5/0xa [ 235.887382][T12441] ? prepare_alloc_pages+0x16d/0x5f0 [ 235.887400][T12441] should_fail_alloc_page+0xeb/0x140 [ 235.887417][T12441] prepare_alloc_pages+0x1f0/0x5f0 [ 235.887439][T12441] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 235.887459][T12441] ? inode_to_bdi+0x9e/0x160 [ 235.887495][T12441] ? vma_fs_can_writeback+0x112/0x170 [ 235.887523][T12441] ? vma_wants_writenotify+0xdc/0x2e0 [ 235.887538][T12441] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 235.887558][T12441] ? __pfx_uprobe_mmap+0x10/0x10 [ 235.887591][T12441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.887612][T12441] ? vma_set_page_prot+0xb1/0x120 [ 235.887636][T12441] ? __mmap_region+0xc73/0x2db0 [ 235.887653][T12441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.887668][T12441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.887682][T12441] ? policy_nodemask+0xed/0x4f0 [ 235.887703][T12441] alloc_pages_mpol+0x1fb/0x540 [ 235.887727][T12441] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.887757][T12441] alloc_pages_noprof+0x1a/0x160 [ 235.887784][T12441] pte_alloc_one+0x1c/0x3d0 [ 235.887817][T12441] __do_fault+0x26c/0x440 [ 235.887838][T12441] do_fault+0xa99/0x1750 [ 235.887866][T12441] __handle_mm_fault+0x187d/0x2a00 [ 235.887896][T12441] ? mt_find+0x45e/0x8e0 [ 235.887925][T12441] ? __pfx___handle_mm_fault+0x10/0x10 [ 235.887941][T12441] ? __pfx_mt_find+0x10/0x10 [ 235.887970][T12441] handle_mm_fault+0x37b/0xa30 [ 235.887990][T12441] __get_user_pages+0x1178/0x32a0 [ 235.888011][T12441] ? __pfx___get_user_pages+0x10/0x10 [ 235.888029][T12441] populate_vma_page_range+0x267/0x3f0 [ 235.888046][T12441] ? __pfx_populate_vma_page_range+0x10/0x10 [ 235.888061][T12441] ? __pfx_find_vma_intersection+0x10/0x10 [ 235.888075][T12441] ? do_mmap+0x93f/0x12f0 [ 235.888091][T12441] __mm_populate+0x107/0x3a0 [ 235.888107][T12441] ? __pfx___mm_populate+0x10/0x10 [ 235.888123][T12441] ? up_write+0x2e5/0x5c0 [ 235.888140][T12441] vm_mmap_pgoff+0x37f/0x470 [ 235.888156][T12441] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 235.888169][T12441] ? __fget_files+0x215/0x3d0 [ 235.888184][T12441] ? __fget_files+0x21f/0x3d0 [ 235.888197][T12441] ksys_mmap_pgoff+0x3cb/0x610 [ 235.888212][T12441] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 235.888227][T12441] ? find_held_lock+0x2b/0x80 [ 235.888236][T12441] ? trace_syscall_enter+0xd9/0x110 [ 235.888254][T12441] __x64_sys_mmap+0x125/0x190 [ 235.888278][T12441] do_syscall_64+0x115/0x870 [ 235.888293][T12441] ? clear_bhb_loop+0x40/0x90 [ 235.888307][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.888319][T12441] RIP: 0033:0x7fc09f99e019 [ 235.888329][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.888340][T12441] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.888352][T12441] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 235.888359][T12441] RDX: 000000000000000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 235.888366][T12441] RBP: 00007fc0a08ee090 R08: 0000000000000007 R09: 0000000000000000 [ 235.888372][T12441] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 235.888379][T12441] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 235.888393][T12441] [ 236.036870][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2462'. [ 236.050474][T12451] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.320169][T12472] nvmet: Invalid value ' èS’t«mªâ3C( qÃÞeŽï®M½ur™×ß²ô [ 236.320169][T12472] ‡TÆ(‚Ã' for trsvcid [ 236.427975][T12481] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2476'. [ 236.440946][T12482] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 236.448697][T12480] netlink: 'syz.5.2475': attribute type 3 has an invalid length. [ 236.479666][T12480] netlink: 'syz.5.2475': attribute type 1 has an invalid length. [ 236.482121][T12480] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2475'. [ 236.673072][ T5750] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 236.967728][T12510] xt_hashlimit: size too large, truncated to 1048576 [ 236.971821][T12508] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12508 comm=syz.4.2485 [ 236.976049][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 237.240643][T12524] FAULT_INJECTION: forcing a failure. [ 237.240643][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 237.246155][T12524] CPU: 0 UID: 0 PID: 12524 Comm: syz.4.2490 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.246175][T12524] Tainted: [L]=SOFTLOCKUP [ 237.246179][T12524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.246186][T12524] Call Trace: [ 237.246190][T12524] [ 237.246196][T12524] dump_stack_lvl+0x100/0x190 [ 237.246215][T12524] should_fail_ex.cold+0x5/0xa [ 237.246230][T12524] should_failslab+0xc2/0x120 [ 237.246245][T12524] __kmalloc_cache_noprof+0x91/0x6c0 [ 237.246263][T12524] ? __tcf_proto_lookup_ops+0xcf/0x100 [ 237.246335][T12524] ? basic_init+0x43/0x1f0 [ 237.246353][T12524] ? __pfx_basic_classify+0x10/0x10 [ 237.246371][T12524] basic_init+0x43/0x1f0 [ 237.246381][T12524] tc_new_tfilter+0x105c/0x24a0 [ 237.246399][T12524] ? avc_has_perm_noaudit+0x90/0x3b0 [ 237.246414][T12524] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 237.246428][T12524] ? __pfx_tc_new_tfilter+0x10/0x10 [ 237.246452][T12524] ? find_held_lock+0x2b/0x80 [ 237.246464][T12524] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.246496][T12524] ? __pfx_tc_new_tfilter+0x10/0x10 [ 237.246508][T12524] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.246524][T12524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.246543][T12524] ? ref_tracker_free+0x37e/0x6c0 [ 237.246569][T12524] netlink_rcv_skb+0x159/0x420 [ 237.246583][T12524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.246600][T12524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.246617][T12524] ? netlink_deliver_tap+0x1ae/0xcc0 [ 237.246630][T12524] netlink_unicast+0x585/0x850 [ 237.246645][T12524] ? __pfx_netlink_unicast+0x10/0x10 [ 237.246660][T12524] netlink_sendmsg+0x8b0/0xda0 [ 237.246675][T12524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.246688][T12524] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.246708][T12524] ____sys_sendmsg+0xa4d/0xbe0 [ 237.246732][T12524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.246745][T12524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.246765][T12524] ? __pfx_trace_clock_local+0x10/0x10 [ 237.246782][T12524] ___sys_sendmsg+0x190/0x1e0 [ 237.246795][T12524] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.246805][T12524] ? __lock_acquire+0x49f/0x1a40 [ 237.246834][T12524] __sys_sendmsg+0x160/0x210 [ 237.246850][T12524] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.246872][T12524] do_syscall_64+0x115/0x870 [ 237.246887][T12524] ? clear_bhb_loop+0x40/0x90 [ 237.246901][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.246913][T12524] RIP: 0033:0x7f7baf59e019 [ 237.246923][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.246934][T12524] RSP: 002b:00007f7bb052c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.246946][T12524] RAX: ffffffffffffffda RBX: 00007f7baf825fa0 RCX: 00007f7baf59e019 [ 237.246953][T12524] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 237.246960][T12524] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.246966][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.246973][T12524] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 237.246987][T12524] [ 237.489034][T12530] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 237.520625][T12530] bond3: entered promiscuous mode [ 237.523477][T12530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.589719][T12534] netlink: 'syz.6.2493': attribute type 1 has an invalid length. [ 237.649706][T12530] veth5: entered allmulticast mode [ 237.773668][T12534] bond3: option mode: invalid value (7) [ 237.799692][T12534] bond3 (unregistering): Released all slaves [ 237.928434][T12535] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.938257][T12535] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 237.949037][T12535] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 238.100355][T12542] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 238.113352][T12542] FAULT_INJECTION: forcing a failure. [ 238.113352][T12542] name failslab, interval 1, probability 0, space 0, times 0 [ 238.127933][T12542] CPU: 0 UID: 0 PID: 12542 Comm: syz.5.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.127955][T12542] Tainted: [L]=SOFTLOCKUP [ 238.127960][T12542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.127967][T12542] Call Trace: [ 238.127972][T12542] [ 238.127977][T12542] dump_stack_lvl+0x100/0x190 [ 238.127996][T12542] should_fail_ex.cold+0x5/0xa [ 238.128011][T12542] should_failslab+0xc2/0x120 [ 238.128027][T12542] __kmalloc_cache_noprof+0x91/0x6c0 [ 238.128047][T12542] ? kobject_uevent_env+0x263/0x18b0 [ 238.128062][T12542] kobject_uevent_env+0x263/0x18b0 [ 238.128074][T12542] ? __up_read+0x333/0x980 [ 238.128089][T12542] ? kernfs_remove_by_name_ns+0xfb/0x120 [ 238.128105][T12542] ? __pfx___up_read+0x10/0x10 [ 238.128119][T12542] ? kernfs_remove_by_name_ns+0x103/0x120 [ 238.128135][T12542] __kobject_del+0x168/0x220 [ 238.128153][T12542] kobject_put+0x348/0x640 [ 238.128170][T12542] software_node_notify_remove+0x1bf/0x230 [ 238.128207][T12542] device_del+0x38e/0x9b0 [ 238.128223][T12542] ? __pfx_device_del+0x10/0x10 [ 238.128235][T12542] ? iommufd_hw_pagetable_detach+0x26f/0x680 [ 238.128266][T12542] device_unregister+0x1d/0xe0 [ 238.128279][T12542] iommufd_selftest_destroy+0xbe/0xf0 [ 238.128293][T12542] iommufd_object_remove+0x29b/0x490 [ 238.128308][T12542] ? __pfx_iommufd_object_remove+0x10/0x10 [ 238.128325][T12542] ? __might_fault+0xc5/0x140 [ 238.128341][T12542] iommufd_fops_ioctl+0x358/0x520 [ 238.128355][T12542] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 238.128369][T12542] ? __fget_files+0x215/0x3d0 [ 238.128381][T12542] ? hook_file_ioctl_common+0x140/0x440 [ 238.128398][T12542] ? selinux_file_ioctl+0x13b/0x290 [ 238.128416][T12542] ? selinux_file_ioctl+0xb6/0x290 [ 238.128433][T12542] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 238.128447][T12542] __x64_sys_ioctl+0x18e/0x210 [ 238.128465][T12542] do_syscall_64+0x115/0x870 [ 238.128479][T12542] ? clear_bhb_loop+0x40/0x90 [ 238.128493][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.128504][T12542] RIP: 0033:0x7fc09f99e019 [ 238.128514][T12542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.128525][T12542] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.128537][T12542] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 238.128544][T12542] RDX: 0000200000000180 RSI: 0000000000003b80 RDI: 0000000000000003 [ 238.128550][T12542] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 238.128556][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.128562][T12542] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 238.128576][T12542] [ 238.507257][T12546] FAULT_INJECTION: forcing a failure. [ 238.507257][T12546] name failslab, interval 1, probability 0, space 0, times 0 [ 238.522069][T12546] CPU: 2 UID: 0 PID: 12546 Comm: syz.6.2497 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.522102][T12546] Tainted: [L]=SOFTLOCKUP [ 238.522109][T12546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.522121][T12546] Call Trace: [ 238.522144][T12546] [ 238.522152][T12546] dump_stack_lvl+0x100/0x190 [ 238.522185][T12546] should_fail_ex.cold+0x5/0xa [ 238.522210][T12546] should_failslab+0xc2/0x120 [ 238.522236][T12546] __kmalloc_noprof+0xfc/0x820 [ 238.522260][T12546] ? __memcg_list_lru_alloc+0x418/0x680 [ 238.522285][T12546] __memcg_list_lru_alloc+0x418/0x680 [ 238.522304][T12546] ? xa_load+0x149/0x2c0 [ 238.522336][T12546] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 238.522360][T12546] ? rcu_read_unlock+0x17/0x60 [ 238.522393][T12546] memcg_list_lru_alloc+0xd3/0x100 [ 238.522416][T12546] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 238.522452][T12546] ? kasan_save_track+0x14/0x30 [ 238.522477][T12546] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 238.522501][T12546] ? __d_alloc+0x35/0xa50 [ 238.522529][T12546] __d_alloc+0x35/0xa50 [ 238.522554][T12546] d_alloc+0x4a/0x1e0 [ 238.522577][T12546] lookup_one_qstr_excl+0x171/0x250 [ 238.522605][T12546] start_dirop+0x59/0xb0 [ 238.522625][T12546] simple_start_creating+0xf9/0x110 [ 238.522647][T12546] ? __pfx_simple_start_creating+0x10/0x10 [ 238.522667][T12546] ? mntput+0x70/0xa0 [ 238.522686][T12546] ? simple_pin_fs+0xa3/0x190 [ 238.522706][T12546] debugfs_start_creating.part.0+0x82/0x170 [ 238.522751][T12546] __debugfs_create_file+0xb3/0x4f0 [ 238.522773][T12546] debugfs_create_file_full+0x41/0x60 [ 238.522795][T12546] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 238.522825][T12546] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 238.522880][T12546] ? lockdep_init_map_type+0x5c/0x250 [ 238.522909][T12546] ? __pfx_vlan_setup+0x10/0x10 [ 238.522953][T12546] alloc_netdev_mqs+0x314/0x15c0 [ 238.522988][T12546] rtnl_create_link+0xc13/0xf80 [ 238.523020][T12546] rtnl_newlink+0x13bd/0x2380 [ 238.523055][T12546] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.523079][T12546] ? find_held_lock+0x2b/0x80 [ 238.523125][T12546] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 238.523149][T12546] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 238.523176][T12546] ? avc_has_perm_noaudit+0x145/0x3b0 [ 238.523221][T12546] ? find_held_lock+0x2b/0x80 [ 238.523238][T12546] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 238.523264][T12546] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 238.523291][T12546] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.523317][T12546] rtnetlink_rcv_msg+0x95e/0xe90 [ 238.523345][T12546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.523377][T12546] ? ref_tracker_free+0x37e/0x6c0 [ 238.523408][T12546] netlink_rcv_skb+0x159/0x420 [ 238.523430][T12546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.523458][T12546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.523488][T12546] ? netlink_deliver_tap+0x1ae/0xcc0 [ 238.523512][T12546] netlink_unicast+0x585/0x850 [ 238.523537][T12546] ? __pfx_netlink_unicast+0x10/0x10 [ 238.523565][T12546] netlink_sendmsg+0x8b0/0xda0 [ 238.523589][T12546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.523612][T12546] ? selinux_socket_sendmsg+0x198/0x2f0 [ 238.523646][T12546] ____sys_sendmsg+0xa4d/0xbe0 [ 238.523675][T12546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.523695][T12546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.523728][T12546] ? __pfx_trace_clock_local+0x10/0x10 [ 238.523752][T12546] ___sys_sendmsg+0x190/0x1e0 [ 238.523770][T12546] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.523783][T12546] ? __lock_acquire+0x49f/0x1a40 [ 238.523829][T12546] __sys_sendmsg+0x160/0x210 [ 238.523853][T12546] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.523895][T12546] do_syscall_64+0x115/0x870 [ 238.523919][T12546] ? clear_bhb_loop+0x40/0x90 [ 238.523944][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.523962][T12546] RIP: 0033:0x7f586939e019 [ 238.523979][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.523995][T12546] RSP: 002b:00007f58675f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.524013][T12546] RAX: ffffffffffffffda RBX: 00007f5869625fa0 RCX: 00007f586939e019 [ 238.524023][T12546] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 238.524034][T12546] RBP: 00007f58675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.524044][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.524054][T12546] R13: 00007f5869626038 R14: 00007f5869625fa0 R15: 00007ffcf2d7e818 [ 238.524079][T12546] [ 239.052051][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 239.097927][T12564] syzkaller0: entered promiscuous mode [ 239.104231][T12564] syzkaller0: entered allmulticast mode [ 239.123250][T12573] FAULT_INJECTION: forcing a failure. [ 239.123250][T12573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.127949][T12573] CPU: 2 UID: 0 PID: 12573 Comm: syz.6.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.127968][T12573] Tainted: [L]=SOFTLOCKUP [ 239.127972][T12573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.127979][T12573] Call Trace: [ 239.127984][T12573] [ 239.127988][T12573] dump_stack_lvl+0x100/0x190 [ 239.128009][T12573] should_fail_ex.cold+0x5/0xa [ 239.128024][T12573] _copy_to_user+0x32/0xd0 [ 239.128052][T12573] simple_read_from_buffer+0xcb/0x170 [ 239.128066][T12573] proc_fail_nth_read+0x1af/0x230 [ 239.128084][T12573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.128102][T12573] ? rw_verify_area+0xce/0x6d0 [ 239.128117][T12573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.128134][T12573] vfs_read+0x1e4/0xb40 [ 239.128151][T12573] ? __pfx_vfs_read+0x10/0x10 [ 239.128167][T12573] ? __fget_files+0x215/0x3d0 [ 239.128182][T12573] ? __fget_files+0x21f/0x3d0 [ 239.128196][T12573] ksys_read+0x12a/0x250 [ 239.128226][T12573] ? __pfx_ksys_read+0x10/0x10 [ 239.128242][T12573] ? trace_syscall_enter+0xd9/0x110 [ 239.128262][T12573] do_syscall_64+0x115/0x870 [ 239.128276][T12573] ? clear_bhb_loop+0x40/0x90 [ 239.128293][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.128305][T12573] RIP: 0033:0x7f586935e84e [ 239.128315][T12573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.128325][T12573] RSP: 002b:00007f58675f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.128337][T12573] RAX: ffffffffffffffda RBX: 00007f58675f66c0 RCX: 00007f586935e84e [ 239.128343][T12573] RDX: 000000000000000f RSI: 00007f58675f60a0 RDI: 0000000000000003 [ 239.128350][T12573] RBP: 00007f58675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.128356][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.128362][T12573] R13: 00007f5869626038 R14: 00007f5869625fa0 R15: 00007ffcf2d7e818 [ 239.128376][T12573] [ 239.215546][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 240.100354][T12577] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 240.164540][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 240.164553][ T42] audit: type=1400 audit(1785806704.200:1700): avc: denied { unmount } for pid=11821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 240.191274][ T42] audit: type=1400 audit(1785806704.220:1701): avc: denied { unmount } for pid=11821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 240.989757][T12586] FAULT_INJECTION: forcing a failure. [ 240.989757][T12586] name failslab, interval 1, probability 0, space 0, times 0 [ 241.005530][T12586] CPU: 2 UID: 0 PID: 12586 Comm: syz.1.2508 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.005564][T12586] Tainted: [L]=SOFTLOCKUP [ 241.005571][T12586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.005581][T12586] Call Trace: [ 241.005589][T12586] [ 241.005596][T12586] dump_stack_lvl+0x100/0x190 [ 241.005628][T12586] should_fail_ex.cold+0x5/0xa [ 241.005650][T12586] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 241.005684][T12586] should_failslab+0xc2/0x120 [ 241.005711][T12586] kmem_cache_alloc_noprof+0x91/0x6a0 [ 241.005737][T12586] ? skb_clone+0x190/0x400 [ 241.005765][T12586] skb_clone+0x190/0x400 [ 241.005796][T12586] netlink_deliver_tap+0xaed/0xcc0 [ 241.005823][T12586] netlink_dump+0x909/0xd00 [ 241.005844][T12586] ? __pfx_netlink_dump+0x10/0x10 [ 241.005872][T12586] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 241.005909][T12586] ? genl_start+0x67a/0x970 [ 241.005932][T12586] __netlink_dump_start+0x6d6/0x990 [ 241.005955][T12586] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 241.005982][T12586] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 241.006009][T12586] ? rcu_is_watching+0x12/0xc0 [ 241.006038][T12586] ? __pfx_genl_start+0x10/0x10 [ 241.006059][T12586] ? __pfx_genl_dumpit+0x10/0x10 [ 241.006078][T12586] ? __pfx_genl_done+0x10/0x10 [ 241.006096][T12586] ? bpf_lsm_capable+0x9/0x10 [ 241.006116][T12586] ? security_capable+0x80/0x260 [ 241.006147][T12586] genl_rcv_msg+0x471/0x800 [ 241.006172][T12586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.006192][T12586] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 241.006208][T12586] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 241.006226][T12586] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 241.006254][T12586] netlink_rcv_skb+0x159/0x420 [ 241.006275][T12586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.006300][T12586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.006332][T12586] ? netlink_deliver_tap+0x1ae/0xcc0 [ 241.006356][T12586] genl_rcv+0x28/0x40 [ 241.006375][T12586] netlink_unicast+0x585/0x850 [ 241.006399][T12586] ? __pfx_netlink_unicast+0x10/0x10 [ 241.006426][T12586] netlink_sendmsg+0x8b0/0xda0 [ 241.006450][T12586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.006473][T12586] ? selinux_socket_sendmsg+0x198/0x2f0 [ 241.006506][T12586] ____sys_sendmsg+0xa4d/0xbe0 [ 241.006533][T12586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.006556][T12586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.006590][T12586] ? __pfx_trace_clock_local+0x10/0x10 [ 241.006619][T12586] ___sys_sendmsg+0x190/0x1e0 [ 241.006642][T12586] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.006660][T12586] ? __lock_acquire+0x49f/0x1a40 [ 241.006715][T12586] __sys_sendmsg+0x160/0x210 [ 241.006740][T12586] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.006780][T12586] do_syscall_64+0x115/0x870 [ 241.006804][T12586] ? clear_bhb_loop+0x40/0x90 [ 241.006829][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.006846][T12586] RIP: 0033:0x7f4e1879e019 [ 241.006876][T12586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.006895][T12586] RSP: 002b:00007f4e19669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.006916][T12586] RAX: ffffffffffffffda RBX: 00007f4e18a25fa0 RCX: 00007f4e1879e019 [ 241.006928][T12586] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 241.006938][T12586] RBP: 00007f4e19669090 R08: 0000000000000000 R09: 0000000000000000 [ 241.006947][T12586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.006958][T12586] R13: 00007f4e18a26038 R14: 00007f4e18a25fa0 R15: 00007ffe78298828 [ 241.006984][T12586] [ 241.170669][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 241.372585][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.887287][ T42] audit: type=1800 audit(1785806705.920:1702): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2511" name="addr_trsvcid" dev="configfs" ino=49053 res=0 errno=0 [ 241.925859][T12596] FAULT_INJECTION: forcing a failure. [ 241.925859][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 241.929817][T12596] CPU: 2 UID: 0 PID: 12596 Comm: syz.1.2512 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.929837][T12596] Tainted: [L]=SOFTLOCKUP [ 241.929841][T12596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.929848][T12596] Call Trace: [ 241.929854][T12596] [ 241.929860][T12596] dump_stack_lvl+0x100/0x190 [ 241.929879][T12596] should_fail_ex.cold+0x5/0xa [ 241.929911][T12596] should_failslab+0xc2/0x120 [ 241.929929][T12596] __kmalloc_cache_noprof+0x91/0x6c0 [ 241.929948][T12596] ? sctp_add_bind_addr+0xae/0x3e0 [ 241.929967][T12596] sctp_add_bind_addr+0xae/0x3e0 [ 241.929983][T12596] sctp_copy_local_addr_list+0x349/0x550 [ 241.930003][T12596] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 241.930021][T12596] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 241.930039][T12596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.930055][T12596] sctp_bind_addr_copy+0xe0/0x530 [ 241.930072][T12596] sctp_connect_new_asoc+0x1c9/0x770 [ 241.930085][T12596] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 241.930102][T12596] ? sctp_get_af_specific+0x62/0x70 [ 241.930118][T12596] ? sctp_sockaddr_af+0x2a3/0x340 [ 241.930134][T12596] __sctp_connect+0x3e7/0xc70 [ 241.930149][T12596] ? __pfx___sctp_connect+0x10/0x10 [ 241.930162][T12596] ? __pfx_sctp_inet_connect+0x10/0x10 [ 241.930174][T12596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.930188][T12596] ? __pfx_sctp_inet_connect+0x10/0x10 [ 241.930198][T12596] sctp_inet_connect+0x15f/0x220 [ 241.930211][T12596] __sys_connect_file+0x141/0x1a0 [ 241.930227][T12596] __sys_connect+0x141/0x170 [ 241.930239][T12596] ? __pfx___sys_connect+0x10/0x10 [ 241.930256][T12596] ? trace_syscall_enter+0xd9/0x110 [ 241.930271][T12596] ? trace_syscall_enter+0xd9/0x110 [ 241.930288][T12596] __x64_sys_connect+0x72/0xb0 [ 241.930301][T12596] do_syscall_64+0x115/0x870 [ 241.930316][T12596] ? clear_bhb_loop+0x40/0x90 [ 241.930329][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.930341][T12596] RIP: 0033:0x7f4e1879e019 [ 241.930352][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.930362][T12596] RSP: 002b:00007f4e19669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 241.930378][T12596] RAX: ffffffffffffffda RBX: 00007f4e18a25fa0 RCX: 00007f4e1879e019 [ 241.930385][T12596] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 241.930392][T12596] RBP: 00007f4e19669090 R08: 0000000000000000 R09: 0000000000000000 [ 241.930399][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.930405][T12596] R13: 00007f4e18a26038 R14: 00007f4e18a25fa0 R15: 00007ffe78298828 [ 241.930419][T12596] [ 242.594186][ T42] audit: type=1800 audit(1785806706.620:1703): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 242.650768][ T42] audit: type=1800 audit(1785806706.680:1704): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2514" name="ipv4_address" dev="configfs" ino=49081 res=0 errno=0 [ 242.693618][ T42] audit: type=1800 audit(1785806706.710:1705): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5514 res=0 errno=0 [ 242.734819][ T42] audit: type=1800 audit(1785806706.730:1706): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 242.760239][ T42] audit: type=1800 audit(1785806706.790:1707): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2514" name="ipv4_port" dev="configfs" ino=50177 res=0 errno=0 [ 242.779035][ T42] audit: type=1800 audit(1785806706.790:1708): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2514" name="local" dev="configfs" ino=50178 res=0 errno=0 [ 242.836134][ T42] audit: type=1800 audit(1785806706.870:1709): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 242.919819][T12612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 244.178899][T12662] FAULT_INJECTION: forcing a failure. [ 244.178899][T12662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.183302][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.4.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.183321][T12662] Tainted: [L]=SOFTLOCKUP [ 244.183325][T12662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.183332][T12662] Call Trace: [ 244.183337][T12662] [ 244.183343][T12662] dump_stack_lvl+0x100/0x190 [ 244.183400][T12662] should_fail_ex.cold+0x5/0xa [ 244.183416][T12662] _copy_to_user+0x32/0xd0 [ 244.183441][T12662] simple_read_from_buffer+0xcb/0x170 [ 244.183461][T12662] proc_fail_nth_read+0x1af/0x230 [ 244.183480][T12662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.183497][T12662] ? rw_verify_area+0xce/0x6d0 [ 244.183518][T12662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.183534][T12662] vfs_read+0x1e4/0xb40 [ 244.183553][T12662] ? __pfx_vfs_read+0x10/0x10 [ 244.183569][T12662] ? __fget_files+0x215/0x3d0 [ 244.183583][T12662] ? __fget_files+0x21f/0x3d0 [ 244.183598][T12662] ksys_read+0x12a/0x250 [ 244.183614][T12662] ? __pfx_ksys_read+0x10/0x10 [ 244.183631][T12662] ? trace_syscall_enter+0xd9/0x110 [ 244.183657][T12662] do_syscall_64+0x115/0x870 [ 244.183689][T12662] ? clear_bhb_loop+0x40/0x90 [ 244.183704][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.183716][T12662] RIP: 0033:0x7f7baf55e84e [ 244.183727][T12662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.183738][T12662] RSP: 002b:00007f7bb052bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.183751][T12662] RAX: ffffffffffffffda RBX: 00007f7bb052c6c0 RCX: 00007f7baf55e84e [ 244.183758][T12662] RDX: 000000000000000f RSI: 00007f7bb052c0a0 RDI: 0000000000000004 [ 244.183764][T12662] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.183771][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.183778][T12662] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 244.183792][T12662] [ 244.299649][T12661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 244.325088][T12661] kvm: pic: level sensitive irq not supported [ 244.325786][T12661] kvm: pic: non byte read [ 244.602217][ T5844] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 244.754608][ T5844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.759179][ T5844] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 244.762361][ T5844] usb 6-1: config 100 has no interface number 0 [ 244.764806][ T5844] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 244.768766][ T5844] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 244.773220][ T5844] usb 6-1: config 100 interface 173 has no altsetting 0 [ 244.778918][ T5844] usb 6-1: string descriptor 0 read error: -22 [ 244.781577][ T5844] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 244.785334][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.792704][T12673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.795829][T12673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.805760][ T5844] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected [ 244.816937][ T5844] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 245.003255][T12673] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 245.007216][ T5844] usb 6-1: USB disconnect, device number 46 [ 245.012945][ T5844] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 245.016334][ T5844] metro_usb 6-1:100.173: device disconnected [ 245.263312][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 245.263332][ T42] audit: type=1800 audit(1785806709.300:1746): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 245.289711][ T42] audit: type=1800 audit(1785806709.320:1747): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35505 res=0 errno=0 [ 245.302428][ T42] audit: type=1800 audit(1785806709.320:1748): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35528 res=0 errno=0 [ 245.349700][ T42] audit: type=1800 audit(1785806709.380:1749): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 245.430020][ T42] audit: type=1800 audit(1785806709.460:1750): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 245.543192][T10280] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 245.622927][ T42] audit: type=1800 audit(1785806709.650:1751): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 245.671706][ T42] audit: type=1800 audit(1785806709.700:1752): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 245.691793][ T42] audit: type=1800 audit(1785806709.720:1753): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35555 res=0 errno=0 [ 245.709329][ T42] audit: type=1800 audit(1785806709.740:1754): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35578 res=0 errno=0 [ 245.722148][T10280] usb 9-1: Using ep0 maxpacket: 32 [ 245.726107][T10280] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.731252][T10280] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.734930][T10280] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.738195][T10280] usb 9-1: Product: syz [ 245.740124][T10280] usb 9-1: Manufacturer: syz [ 245.742458][T10280] usb 9-1: SerialNumber: syz [ 245.750465][T10280] usb 9-1: config 0 descriptor?? [ 245.750706][ T42] audit: type=1800 audit(1785806709.780:1755): pid=12601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187204 res=0 errno=0 [ 245.754093][T12685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.767529][T10280] hub 9-1:0.0: bad descriptor, ignoring hub [ 245.771347][T10280] hub 9-1:0.0: probe with driver hub failed with error -5 [ 245.922179][ T5844] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 246.072517][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 246.076160][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.080364][ T5844] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.084859][ T5844] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.087763][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.091875][ T5844] usb 10-1: config 0 descriptor?? [ 246.584945][T12708] xt_hashlimit: size too large, truncated to 1048576 [ 246.824312][T10280] usb 9-1: USB disconnect, device number 10 [ 246.849417][T12719] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2552'. [ 246.886995][ T5844] usbhid 10-1:0.0: can't add hid device: -71 [ 246.889998][ T5844] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 246.901446][ T5844] usb 10-1: USB disconnect, device number 8 [ 246.983907][T12722] syzkaller0: entered promiscuous mode [ 246.986345][T12722] syzkaller0: entered allmulticast mode [ 247.417089][T12736] FAULT_INJECTION: forcing a failure. [ 247.417089][T12736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.420871][T12736] CPU: 2 UID: 0 PID: 12736 Comm: syz.4.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.420889][T12736] Tainted: [L]=SOFTLOCKUP [ 247.420893][T12736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.420900][T12736] Call Trace: [ 247.420906][T12736] [ 247.420911][T12736] dump_stack_lvl+0x100/0x190 [ 247.420931][T12736] should_fail_ex.cold+0x5/0xa [ 247.420946][T12736] _copy_to_user+0x32/0xd0 [ 247.420963][T12736] simple_read_from_buffer+0xcb/0x170 [ 247.420977][T12736] proc_fail_nth_read+0x1af/0x230 [ 247.420995][T12736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.421012][T12736] ? rw_verify_area+0xce/0x6d0 [ 247.421029][T12736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.421045][T12736] vfs_read+0x1e4/0xb40 [ 247.421063][T12736] ? __pfx_vfs_read+0x10/0x10 [ 247.421079][T12736] ? __fget_files+0x215/0x3d0 [ 247.421094][T12736] ? __fget_files+0x21f/0x3d0 [ 247.421109][T12736] ksys_read+0x12a/0x250 [ 247.421125][T12736] ? __pfx_ksys_read+0x10/0x10 [ 247.421141][T12736] ? trace_syscall_enter+0xd9/0x110 [ 247.421160][T12736] do_syscall_64+0x115/0x870 [ 247.421175][T12736] ? clear_bhb_loop+0x40/0x90 [ 247.421189][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.421201][T12736] RIP: 0033:0x7f7baf55e84e [ 247.421211][T12736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.421222][T12736] RSP: 002b:00007f7bb052bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.421234][T12736] RAX: ffffffffffffffda RBX: 00007f7bb052c6c0 RCX: 00007f7baf55e84e [ 247.421241][T12736] RDX: 000000000000000f RSI: 00007f7bb052c0a0 RDI: 0000000000000004 [ 247.421248][T12736] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.421254][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.421260][T12736] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 247.421273][T12736] [ 247.488113][T12718] xhci_hcd 0000:00:01.0: xHCI Host Controller [ 247.555569][T12718] xhci_hcd 0000:00:01.0: new USB bus registered, assigned bus number 63 [ 247.624369][T12744] FAULT_INJECTION: forcing a failure. [ 247.624369][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 247.635084][T12744] CPU: 2 UID: 0 PID: 12744 Comm: syz.4.2562 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.635118][T12744] Tainted: [L]=SOFTLOCKUP [ 247.635126][T12744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.635138][T12744] Call Trace: [ 247.635146][T12744] [ 247.635155][T12744] dump_stack_lvl+0x100/0x190 [ 247.635189][T12744] should_fail_ex.cold+0x5/0xa [ 247.635212][T12744] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 247.635245][T12744] should_failslab+0xc2/0x120 [ 247.635296][T12744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 247.635323][T12744] ? skb_clone+0x190/0x400 [ 247.635374][T12744] skb_clone+0x190/0x400 [ 247.635400][T12744] netlink_deliver_tap+0xaed/0xcc0 [ 247.635429][T12744] netlink_unicast+0x6a5/0x850 [ 247.635454][T12744] ? __pfx_netlink_unicast+0x10/0x10 [ 247.635482][T12744] netlink_ack+0x655/0xb80 [ 247.635511][T12744] netlink_rcv_skb+0x333/0x420 [ 247.635532][T12744] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 247.635579][T12744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.635612][T12744] ? ns_capable+0xd2/0xf0 [ 247.635651][T12744] nfnetlink_rcv+0x1b3/0x440 [ 247.635678][T12744] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 247.635704][T12744] ? netlink_deliver_tap+0x1ae/0xcc0 [ 247.635728][T12744] netlink_unicast+0x585/0x850 [ 247.635754][T12744] ? __pfx_netlink_unicast+0x10/0x10 [ 247.635782][T12744] netlink_sendmsg+0x8b0/0xda0 [ 247.635807][T12744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.635831][T12744] ? selinux_socket_sendmsg+0x198/0x2f0 [ 247.635876][T12744] ____sys_sendmsg+0xa4d/0xbe0 [ 247.635908][T12744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.635931][T12744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.635968][T12744] ? __pfx_trace_clock_local+0x10/0x10 [ 247.635998][T12744] ___sys_sendmsg+0x190/0x1e0 [ 247.636020][T12744] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.636039][T12744] ? __lock_acquire+0x49f/0x1a40 [ 247.636095][T12744] __sys_sendmsg+0x160/0x210 [ 247.636122][T12744] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.636160][T12744] do_syscall_64+0x115/0x870 [ 247.636185][T12744] ? clear_bhb_loop+0x40/0x90 [ 247.636208][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.636228][T12744] RIP: 0033:0x7f7baf59e019 [ 247.636245][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.636264][T12744] RSP: 002b:00007f7bb052c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.636284][T12744] RAX: ffffffffffffffda RBX: 00007f7baf825fa0 RCX: 00007f7baf59e019 [ 247.636301][T12744] RDX: 0000000020009084 RSI: 0000200000000300 RDI: 0000000000000004 [ 247.636313][T12744] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.636324][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.636334][T12744] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 247.636359][T12744] [ 247.664066][T12718] xhci_hcd 0000:00:01.0: Host halt failed, -110 [ 247.701799][T12747] xt_hashlimit: size too large, truncated to 1048576 [ 247.711486][T12718] xhci_hcd 0000:00:01.0: can't setup: -110 [ 247.746374][T12718] xhci_hcd 0000:00:01.0: USB bus 63 deregistered [ 247.761533][T12749] FAULT_INJECTION: forcing a failure. [ 247.761533][T12749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.767108][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.4.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.767128][T12749] Tainted: [L]=SOFTLOCKUP [ 247.767132][T12749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.767139][T12749] Call Trace: [ 247.767143][T12749] [ 247.767148][T12749] dump_stack_lvl+0x100/0x190 [ 247.767168][T12749] should_fail_ex.cold+0x5/0xa [ 247.767182][T12749] _copy_to_user+0x32/0xd0 [ 247.767200][T12749] simple_read_from_buffer+0xcb/0x170 [ 247.767214][T12749] proc_fail_nth_read+0x1af/0x230 [ 247.767247][T12749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.767266][T12749] ? rw_verify_area+0xce/0x6d0 [ 247.767282][T12749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.767303][T12749] vfs_read+0x1e4/0xb40 [ 247.767321][T12749] ? __pfx_vfs_read+0x10/0x10 [ 247.767338][T12749] ? __fget_files+0x215/0x3d0 [ 247.767352][T12749] ? __fget_files+0x21f/0x3d0 [ 247.767367][T12749] ksys_read+0x12a/0x250 [ 247.767383][T12749] ? __pfx_ksys_read+0x10/0x10 [ 247.767399][T12749] ? trace_syscall_enter+0xd9/0x110 [ 247.767418][T12749] do_syscall_64+0x115/0x870 [ 247.767433][T12749] ? clear_bhb_loop+0x40/0x90 [ 247.767447][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.767459][T12749] RIP: 0033:0x7f7baf55e84e [ 247.767470][T12749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.767481][T12749] RSP: 002b:00007f7bb050afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.767493][T12749] RAX: ffffffffffffffda RBX: 00007f7bb050b6c0 RCX: 00007f7baf55e84e [ 247.767501][T12749] RDX: 000000000000000f RSI: 00007f7bb050b0a0 RDI: 0000000000000004 [ 247.767507][T12749] RBP: 00007f7bb050b090 R08: 0000000000000000 R09: 0000000000000000 [ 247.767513][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.767519][T12749] R13: 00007f7baf826128 R14: 00007f7baf826090 R15: 00007fff9d149c38 [ 247.767533][T12749] [ 247.816246][T12718] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -110 [ 247.850081][T12718] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -110 [ 247.872121][ T9] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 248.033439][ T9] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 248.036493][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.039905][ T9] usb 10-1: config 0 has no interfaces? [ 248.041732][ T9] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 248.045168][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.057527][ T9] usb 10-1: config 0 descriptor?? [ 248.069917][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2565'. [ 248.281678][ T9] usb 10-1: string descriptor 0 read error: -71 [ 248.289857][ T9] usb 10-1: USB disconnect, device number 9 [ 248.364581][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 248.368089][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 248.567459][T12768] FAULT_INJECTION: forcing a failure. [ 248.567459][T12768] name failslab, interval 1, probability 0, space 0, times 0 [ 248.571438][T12768] CPU: 2 UID: 0 PID: 12768 Comm: syz.1.2569 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.571458][T12768] Tainted: [L]=SOFTLOCKUP [ 248.571462][T12768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.571469][T12768] Call Trace: [ 248.571475][T12768] [ 248.571481][T12768] dump_stack_lvl+0x100/0x190 [ 248.571500][T12768] should_fail_ex.cold+0x5/0xa [ 248.571515][T12768] should_failslab+0xc2/0x120 [ 248.571530][T12768] __kmalloc_cache_noprof+0x91/0x6c0 [ 248.571548][T12768] ? copy_cgroup_ns+0x1ca/0x970 [ 248.571565][T12768] ? copy_cgroup_ns+0x1ff/0x970 [ 248.571582][T12768] copy_cgroup_ns+0x1ff/0x970 [ 248.571597][T12768] create_new_namespaces+0x34a/0xac0 [ 248.571627][T12768] unshare_nsproxy_namespaces+0xf2/0x220 [ 248.571644][T12768] ksys_unshare+0x438/0xab0 [ 248.571662][T12768] ? __pfx_ksys_unshare+0x10/0x10 [ 248.571678][T12768] ? find_held_lock+0x2b/0x80 [ 248.571688][T12768] ? trace_syscall_enter+0xd9/0x110 [ 248.571703][T12768] ? trace_syscall_enter+0xd9/0x110 [ 248.571721][T12768] __x64_sys_unshare+0x31/0x40 [ 248.571736][T12768] do_syscall_64+0x115/0x870 [ 248.571751][T12768] ? clear_bhb_loop+0x40/0x90 [ 248.571765][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.571777][T12768] RIP: 0033:0x7f4e1879e019 [ 248.571788][T12768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.571801][T12768] RSP: 002b:00007f4e19669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.571814][T12768] RAX: ffffffffffffffda RBX: 00007f4e18a25fa0 RCX: 00007f4e1879e019 [ 248.571821][T12768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 248.571827][T12768] RBP: 00007f4e19669090 R08: 0000000000000000 R09: 0000000000000000 [ 248.571834][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.571841][T12768] R13: 00007f4e18a26038 R14: 00007f4e18a25fa0 R15: 00007ffe78298828 [ 248.571854][T12768] [ 248.788760][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.795289][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.122503][T12787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2575'. [ 249.131422][T12787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2575'. [ 249.452995][ T849] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 249.617047][ T849] usb 10-1: unable to get BOS descriptor or descriptor too short [ 249.621099][ T849] usb 10-1: config 100 has an invalid interface number: 173 but max is 0 [ 249.628712][ T849] usb 10-1: config 100 has no interface number 0 [ 249.631875][ T849] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 249.639745][ T849] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 249.648187][ T849] usb 10-1: config 100 interface 173 has no altsetting 0 [ 249.656858][ T849] usb 10-1: string descriptor 0 read error: -22 [ 249.659608][ T849] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 249.667179][ T849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.681963][T12789] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.685343][T12789] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.701466][ T849] metro_usb 10-1:100.173: Metrologic USB to Serial converter detected [ 249.710398][ T849] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 249.772291][T10280] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 249.903374][T12789] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 249.908294][ T5844] usb 10-1: USB disconnect, device number 10 [ 249.927815][ T5844] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 249.940756][T10280] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 249.943598][ T5844] metro_usb 10-1:100.173: device disconnected [ 249.949391][T10280] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.954475][T10280] usb 9-1: config 0 has no interfaces? [ 249.956928][T10280] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 249.960255][T10280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.971389][T10280] usb 9-1: config 0 descriptor?? [ 250.230829][T10280] usb 9-1: string descriptor 0 read error: -71 [ 250.239863][T10280] usb 9-1: USB disconnect, device number 11 [ 250.506897][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 250.506912][ T42] audit: type=1800 audit(1785806714.540:1834): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 250.534581][T12814] FAULT_INJECTION: forcing a failure. [ 250.534581][T12814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.538666][T12814] CPU: 0 UID: 0 PID: 12814 Comm: syz.5.2586 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.538684][T12814] Tainted: [L]=SOFTLOCKUP [ 250.538689][T12814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.538696][T12814] Call Trace: [ 250.538701][T12814] [ 250.538706][T12814] dump_stack_lvl+0x100/0x190 [ 250.538726][T12814] should_fail_ex.cold+0x5/0xa [ 250.538743][T12814] _copy_to_user+0x32/0xd0 [ 250.538769][T12814] simple_read_from_buffer+0xcb/0x170 [ 250.538787][T12814] proc_fail_nth_read+0x1af/0x230 [ 250.538805][T12814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.538822][T12814] ? rw_verify_area+0xce/0x6d0 [ 250.538838][T12814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.538855][T12814] vfs_read+0x1e4/0xb40 [ 250.538873][T12814] ? __pfx_vfs_read+0x10/0x10 [ 250.538889][T12814] ? __fget_files+0x215/0x3d0 [ 250.538904][T12814] ? __fget_files+0x21f/0x3d0 [ 250.538919][T12814] ksys_read+0x12a/0x250 [ 250.538939][T12814] ? __pfx_ksys_read+0x10/0x10 [ 250.538955][T12814] ? trace_syscall_enter+0xd9/0x110 [ 250.538974][T12814] do_syscall_64+0x115/0x870 [ 250.538990][T12814] ? clear_bhb_loop+0x40/0x90 [ 250.539003][T12814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.539015][T12814] RIP: 0033:0x7fc09f95e84e [ 250.539025][T12814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.539060][T12814] RSP: 002b:00007fc0a08edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.539075][T12814] RAX: ffffffffffffffda RBX: 00007fc0a08ee6c0 RCX: 00007fc09f95e84e [ 250.539082][T12814] RDX: 000000000000000f RSI: 00007fc0a08ee0a0 RDI: 0000000000000005 [ 250.539088][T12814] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 250.539095][T12814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.539102][T12814] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 250.539116][T12814] [ 250.547625][T12816] xt_nat: multiple ranges no longer supported [ 250.596098][T12818] FAULT_INJECTION: forcing a failure. [ 250.596098][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 250.617119][ T42] audit: type=1800 audit(1785806714.640:1835): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 250.626573][T12818] CPU: 0 UID: 0 PID: 12818 Comm: syz.5.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.626601][T12818] Tainted: [L]=SOFTLOCKUP [ 250.626607][T12818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.626619][T12818] Call Trace: [ 250.626626][T12818] [ 250.626655][T12818] dump_stack_lvl+0x100/0x190 [ 250.626685][T12818] should_fail_ex.cold+0x5/0xa [ 250.626709][T12818] should_failslab+0xc2/0x120 [ 250.626734][T12818] __kmalloc_cache_noprof+0x91/0x6c0 [ 250.626762][T12818] ? nf_tables_newtable+0xd0a/0x1a90 [ 250.626792][T12818] nf_tables_newtable+0xd0a/0x1a90 [ 250.626821][T12818] ? __pfx_nf_tables_newtable+0x10/0x10 [ 250.626847][T12818] ? __nla_parse+0x40/0x60 [ 250.626868][T12818] nfnetlink_rcv_batch+0x1410/0x2880 [ 250.626907][T12818] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 250.626937][T12818] ? find_held_lock+0x2b/0x80 [ 250.626969][T12818] ? avc_has_perm_noaudit+0x145/0x3b0 [ 250.627013][T12818] ? __nla_parse+0x40/0x60 [ 250.627034][T12818] nfnetlink_rcv+0x3bd/0x440 [ 250.627084][T12818] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.627113][T12818] netlink_unicast+0x585/0x850 [ 250.627135][T12818] ? __pfx_netlink_unicast+0x10/0x10 [ 250.627178][T12818] netlink_sendmsg+0x8b0/0xda0 [ 250.627202][T12818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.627220][T12818] ? selinux_socket_sendmsg+0x198/0x2f0 [ 250.627252][T12818] ____sys_sendmsg+0xa4d/0xbe0 [ 250.627280][T12818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.627301][T12818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.627333][T12818] ? __pfx_trace_clock_local+0x10/0x10 [ 250.627358][T12818] ___sys_sendmsg+0x190/0x1e0 [ 250.627378][T12818] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.627395][T12818] ? __lock_acquire+0x49f/0x1a40 [ 250.627442][T12818] __sys_sendmsg+0x160/0x210 [ 250.627465][T12818] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.627501][T12818] do_syscall_64+0x115/0x870 [ 250.627524][T12818] ? clear_bhb_loop+0x40/0x90 [ 250.627547][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.627562][T12818] RIP: 0033:0x7fc09f99e019 [ 250.627578][T12818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.627596][T12818] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.627615][T12818] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 250.627626][T12818] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.627637][T12818] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 250.627648][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.627659][T12818] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 250.627678][T12818] [ 250.740094][ T42] audit: type=1800 audit(1785806714.670:1836): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 250.748988][T12821] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2590'. [ 250.780518][ T42] audit: type=1800 audit(1785806714.810:1837): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 250.840025][ T42] audit: type=1800 audit(1785806714.870:1838): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 250.878753][ T42] audit: type=1800 audit(1785806714.910:1839): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 251.013801][ T42] audit: type=1800 audit(1785806715.050:1840): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 251.032252][ T42] audit: type=1800 audit(1785806715.070:1841): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2595" name="ipv4_address" dev="configfs" ino=51090 res=0 errno=0 [ 251.062924][ T42] audit: type=1800 audit(1785806715.100:1842): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 251.084753][T12844] kernel read not supported for file /policy (pid: 12844 comm: syz.4.2597) [ 251.089522][ T42] audit: type=1800 audit(1785806715.120:1843): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2597" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 251.204778][T12847] ima: Unable to open file: /e (-2) [ 251.216042][T12846] ima: policy update failed [ 251.291180][T12854] ALSA: seq fatal error: cannot create timer (-19) [ 251.310390][T12852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.317757][T12852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.320603][T12852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.324029][T12852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.326990][T12852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.386899][T12862] FAULT_INJECTION: forcing a failure. [ 251.386899][T12862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.391269][T12862] CPU: 2 UID: 0 PID: 12862 Comm: syz.4.2602 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.391298][T12862] Tainted: [L]=SOFTLOCKUP [ 251.391303][T12862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.391313][T12862] Call Trace: [ 251.391320][T12862] [ 251.391327][T12862] dump_stack_lvl+0x100/0x190 [ 251.391352][T12862] should_fail_ex.cold+0x5/0xa [ 251.391373][T12862] _copy_to_user+0x32/0xd0 [ 251.391399][T12862] simple_read_from_buffer+0xcb/0x170 [ 251.391420][T12862] proc_fail_nth_read+0x1af/0x230 [ 251.391445][T12862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.391470][T12862] ? rw_verify_area+0xce/0x6d0 [ 251.391492][T12862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.391516][T12862] vfs_read+0x1e4/0xb40 [ 251.391542][T12862] ? __pfx_vfs_read+0x10/0x10 [ 251.391565][T12862] ? __fget_files+0x215/0x3d0 [ 251.391587][T12862] ? __fget_files+0x21f/0x3d0 [ 251.391610][T12862] ksys_read+0x12a/0x250 [ 251.391633][T12862] ? __pfx_ksys_read+0x10/0x10 [ 251.391655][T12862] ? trace_syscall_enter+0xd9/0x110 [ 251.391683][T12862] do_syscall_64+0x115/0x870 [ 251.391704][T12862] ? clear_bhb_loop+0x40/0x90 [ 251.391724][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.391741][T12862] RIP: 0033:0x7f7baf55e84e [ 251.391755][T12862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.391770][T12862] RSP: 002b:00007f7bb052bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.391789][T12862] RAX: ffffffffffffffda RBX: 00007f7bb052c6c0 RCX: 00007f7baf55e84e [ 251.391799][T12862] RDX: 000000000000000f RSI: 00007f7bb052c0a0 RDI: 0000000000000003 [ 251.391808][T12862] RBP: 00007f7bb052c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.391817][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.391827][T12862] R13: 00007f7baf826038 R14: 00007f7baf825fa0 R15: 00007fff9d149c38 [ 251.391848][T12862] [ 251.459848][T12864] xt_NFQUEUE: number of total queues is 0 [ 251.640979][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 251.651026][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2607'. [ 251.656405][T12874] FAULT_INJECTION: forcing a failure. [ 251.656405][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 251.663905][T12874] CPU: 2 UID: 0 PID: 12874 Comm: syz.5.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.663924][T12874] Tainted: [L]=SOFTLOCKUP [ 251.663928][T12874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.663935][T12874] Call Trace: [ 251.663940][T12874] [ 251.663945][T12874] dump_stack_lvl+0x100/0x190 [ 251.663967][T12874] should_fail_ex.cold+0x5/0xa [ 251.663982][T12874] should_failslab+0xc2/0x120 [ 251.663997][T12874] __kmalloc_cache_noprof+0x91/0x6c0 [ 251.664016][T12874] ? __hw_addr_create+0x57/0x220 [ 251.664036][T12874] __hw_addr_create+0x57/0x220 [ 251.664054][T12874] __hw_addr_add_ex+0x32b/0x650 [ 251.664071][T12874] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 251.664089][T12874] ? do_raw_spin_lock+0x128/0x260 [ 251.664107][T12874] __hw_addr_sync+0x15b/0x270 [ 251.664120][T12874] ieee80211_set_multicast_list+0x183/0x230 [ 251.664161][T12874] ? __pfx_ieee80211_set_multicast_list+0x10/0x10 [ 251.664179][T12874] __dev_set_rx_mode+0x332/0x400 [ 251.664205][T12874] dev_set_rx_mode+0x6d/0x80 [ 251.664222][T12874] __dev_change_flags+0x236/0x850 [ 251.664237][T12874] ? __pfx___dev_change_flags+0x10/0x10 [ 251.664251][T12874] ? validate_linkmsg+0x57c/0xba0 [ 251.664264][T12874] ? prb_read_valid+0x78/0xa0 [ 251.664280][T12874] ? __pfx_validate_linkmsg+0x10/0x10 [ 251.664296][T12874] netif_change_flags+0x8d/0x160 [ 251.664311][T12874] do_setlink.isra.0+0x1ac4/0x3e60 [ 251.664330][T12874] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 251.664347][T12874] ? __lock_acquire+0x49f/0x1a40 [ 251.664365][T12874] ? lock_acquire+0x1b9/0x370 [ 251.664380][T12874] ? rcu_is_watching+0x12/0xc0 [ 251.664398][T12874] ? trace_contention_end+0x126/0x160 [ 251.664413][T12874] ? __mutex_lock+0x26d/0x1bd0 [ 251.664427][T12874] ? rtnl_newlink+0x8bb/0x2380 [ 251.664445][T12874] ? __pfx___mutex_lock+0x10/0x10 [ 251.664458][T12874] ? rcu_is_watching+0x12/0xc0 [ 251.664474][T12874] ? cap_capable+0x107/0x430 [ 251.664498][T12874] rtnl_newlink+0x11c2/0x2380 [ 251.664517][T12874] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.664530][T12874] ? find_held_lock+0x2b/0x80 [ 251.664540][T12874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 251.664553][T12874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 251.664568][T12874] ? avc_has_perm_noaudit+0x145/0x3b0 [ 251.664592][T12874] ? find_held_lock+0x2b/0x80 [ 251.664602][T12874] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 251.664616][T12874] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 251.664632][T12874] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.664647][T12874] rtnetlink_rcv_msg+0x95e/0xe90 [ 251.664663][T12874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.664681][T12874] ? ref_tracker_free+0x37e/0x6c0 [ 251.664700][T12874] netlink_rcv_skb+0x159/0x420 [ 251.664713][T12874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.664729][T12874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.664746][T12874] ? netlink_deliver_tap+0x1ae/0xcc0 [ 251.664759][T12874] netlink_unicast+0x585/0x850 [ 251.664772][T12874] ? __pfx_netlink_unicast+0x10/0x10 [ 251.664787][T12874] netlink_sendmsg+0x8b0/0xda0 [ 251.664801][T12874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.664814][T12874] ? selinux_socket_sendmsg+0x198/0x2f0 [ 251.664832][T12874] ____sys_sendmsg+0xa4d/0xbe0 [ 251.664849][T12874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.664862][T12874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.664883][T12874] ? __pfx_trace_clock_local+0x10/0x10 [ 251.664899][T12874] ___sys_sendmsg+0x190/0x1e0 [ 251.664912][T12874] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.664922][T12874] ? __lock_acquire+0x49f/0x1a40 [ 251.664950][T12874] __sys_sendmsg+0x160/0x210 [ 251.664965][T12874] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.664986][T12874] do_syscall_64+0x115/0x870 [ 251.665000][T12874] ? clear_bhb_loop+0x40/0x90 [ 251.665014][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.665026][T12874] RIP: 0033:0x7fc09f99e019 [ 251.665037][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.665048][T12874] RSP: 002b:00007fc0a08ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.665060][T12874] RAX: ffffffffffffffda RBX: 00007fc09fc25fa0 RCX: 00007fc09f99e019 [ 251.665067][T12874] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 251.665073][T12874] RBP: 00007fc0a08ee090 R08: 0000000000000000 R09: 0000000000000000 [ 251.665080][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.665086][T12874] R13: 00007fc09fc26038 R14: 00007fc09fc25fa0 R15: 00007ffcd59e40b8 [ 251.665100][T12874] [ 251.990648][T12884] [ 251.992110][T12884] ====================================================== [ 251.994506][T12884] WARNING: possible circular locking dependency detected [ 251.996863][T12884] syzkaller #0 Tainted: G L [ 251.999336][T12884] ------------------------------------------------------ [ 252.001668][T12884] syz.1.2608/12884 is trying to acquire lock: [ 252.003896][T12884] ffff888035eb0450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 252.007217][T12884] [ 252.007217][T12884] but task is already holding lock: [ 252.009570][T12884] ffff888059066120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 252.013173][T12884] [ 252.013173][T12884] which lock already depends on the new lock. [ 252.013173][T12884] [ 252.016659][T12884] [ 252.016659][T12884] the existing dependency chain (in reverse order) is: [ 252.020145][T12884] [ 252.020145][T12884] -> #3 (&common->filesem){++++}-{4:4}: [ 252.022549][T12884] lock_acquire+0x1b9/0x370 [ 252.024614][T12884] down_read+0x99/0x4c0 [ 252.026464][T12884] fsg_show_file+0x20/0x180 [ 252.028027][T12884] configfs_read_iter+0x426/0x6f0 [ 252.029986][T12884] __kernel_read+0x397/0xad0 [ 252.032046][T12884] integrity_kernel_read+0x7e/0xb0 [ 252.034287][T12884] ima_calc_file_hash_tfm+0x25e/0x350 [ 252.036635][T12884] ima_calc_file_hash+0x1e3/0x380 [ 252.038740][T12884] ima_collect_measurement+0x94f/0xb30 [ 252.040629][T12884] process_measurement+0xdfe/0x2350 [ 252.042844][T12884] ima_file_check+0xc3/0x110 [ 252.044907][T12884] security_file_post_open+0xc4/0x210 [ 252.046832][T12884] path_openat+0x985/0x4280 [ 252.048573][T12884] do_file_open+0x20e/0x430 [ 252.050594][T12884] do_sys_openat2+0x10f/0x1e0 [ 252.052685][T12884] __x64_sys_openat+0x12d/0x210 [ 252.054563][T12884] do_syscall_64+0x115/0x870 [ 252.056206][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.058754][T12884] [ 252.058754][T12884] -> #2 (&p->frag_sem){++++}-{4:4}: [ 252.061440][T12884] lock_acquire+0x1b9/0x370 [ 252.063260][T12884] down_read+0x99/0x4c0 [ 252.065178][T12884] __configfs_open_file+0xe8/0x9c0 [ 252.067373][T12884] do_dentry_open+0x6ab/0x14d0 [ 252.069433][T12884] vfs_open+0x82/0x3f0 [ 252.071307][T12884] dentry_open+0x71/0xd0 [ 252.073192][T12884] ima_calc_file_hash+0xe1/0x380 [ 252.075331][T12884] ima_collect_measurement+0x94f/0xb30 [ 252.077706][T12884] process_measurement+0xdfe/0x2350 [ 252.079492][T12884] ima_file_check+0xc3/0x110 [ 252.081415][T12884] security_file_post_open+0xc4/0x210 [ 252.083783][T12884] path_openat+0x985/0x4280 [ 252.085822][T12884] do_file_open+0x20e/0x430 [ 252.087810][T12884] do_sys_openat2+0x10f/0x1e0 [ 252.089788][T12884] __x64_sys_openat+0x12d/0x210 [ 252.091838][T12884] do_syscall_64+0x115/0x870 [ 252.093699][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.095764][T12884] [ 252.095764][T12884] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 252.099112][T12884] lock_acquire+0x1b9/0x370 [ 252.100708][T12884] __mutex_lock+0x1a4/0x1bd0 [ 252.102389][T12884] process_measurement+0x5ab/0x2350 [ 252.104684][T12884] ima_file_check+0xc3/0x110 [ 252.106485][T12884] security_file_post_open+0xc4/0x210 [ 252.108439][T12884] path_openat+0x985/0x4280 [ 252.110457][T12884] do_file_open+0x20e/0x430 [ 252.112499][T12884] do_sys_openat2+0x10f/0x1e0 [ 252.114650][T12884] __x64_sys_openat+0x12d/0x210 [ 252.116811][T12884] do_syscall_64+0x115/0x870 [ 252.118872][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.121443][T12884] [ 252.121443][T12884] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 252.124385][T12884] check_prev_add+0xeb/0xe60 [ 252.126418][T12884] __lock_acquire+0x136c/0x1a40 [ 252.128596][T12884] lock_acquire+0x1b9/0x370 [ 252.130586][T12884] mnt_want_write+0x6f/0x410 [ 252.132645][T12884] path_openat+0xad9/0x4280 [ 252.134531][T12884] do_file_open+0x20e/0x430 [ 252.136065][T12884] file_open_name+0x1c3/0x3e0 [ 252.137876][T12884] filp_open+0x2e/0x50 [ 252.139731][T12884] fsg_lun_open+0x6b/0x7b0 [ 252.141364][T12884] fsg_store_file+0x1e7/0x450 [ 252.142905][T12884] configfs_write_iter+0x302/0x4e0 [ 252.145118][T12884] vfs_write+0x6ac/0x1050 [ 252.147065][T12884] ksys_write+0x12a/0x250 [ 252.148519][T12884] do_syscall_64+0x115/0x870 [ 252.150225][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.152780][T12884] [ 252.152780][T12884] other info that might help us debug this: [ 252.152780][T12884] [ 252.156173][T12884] Chain exists of: [ 252.156173][T12884] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 252.156173][T12884] [ 252.160694][T12884] Possible unsafe locking scenario: [ 252.160694][T12884] [ 252.163277][T12884] CPU0 CPU1 [ 252.165338][T12884] ---- ---- [ 252.167002][T12884] lock(&common->filesem); [ 252.168647][T12884] lock(&p->frag_sem); [ 252.171222][T12884] lock(&common->filesem); [ 252.173432][T12884] rlock(sb_writers#6); [ 252.175193][T12884] [ 252.175193][T12884] *** DEADLOCK *** [ 252.175193][T12884] [ 252.178319][T12884] 5 locks held by syz.1.2608/12884: [ 252.179952][T12884] #0: ffff8880239bd5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 252.183383][T12884] #1: ffff8880248a4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 252.186741][T12884] #2: ffff8880307f7e80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 252.190122][T12884] #3: ffff88802bbf6770 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 252.193836][T12884] #4: ffff888059066120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 252.197050][T12884] [ 252.197050][T12884] stack backtrace: [ 252.199414][T12884] CPU: 2 UID: 0 PID: 12884 Comm: syz.1.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.199442][T12884] Tainted: [L]=SOFTLOCKUP [ 252.199450][T12884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.199462][T12884] Call Trace: [ 252.199472][T12884] [ 252.199481][T12884] dump_stack_lvl+0x100/0x190 [ 252.199505][T12884] print_circular_bug.cold+0x178/0x1c7 [ 252.199536][T12884] check_noncircular+0x146/0x160 [ 252.199556][T12884] ? __lock_acquire+0xd5b/0x1a40 [ 252.199578][T12884] check_prev_add+0xeb/0xe60 [ 252.199599][T12884] __lock_acquire+0x136c/0x1a40 [ 252.199621][T12884] ? try_to_unlazy+0x296/0x910 [ 252.199646][T12884] lock_acquire+0x1b9/0x370 [ 252.199666][T12884] ? path_openat+0xad9/0x4280 [ 252.199684][T12884] ? __pfx___might_resched+0x10/0x10 [ 252.199706][T12884] mnt_want_write+0x6f/0x410 [ 252.199721][T12884] ? path_openat+0xad9/0x4280 [ 252.199739][T12884] path_openat+0xad9/0x4280 [ 252.199760][T12884] ? __pfx_path_openat+0x10/0x10 [ 252.199777][T12884] ? kasan_save_stack+0x30/0x50 [ 252.199797][T12884] ? kasan_save_track+0x14/0x30 [ 252.199815][T12884] ? __kasan_slab_alloc+0x89/0x90 [ 252.199835][T12884] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 252.199854][T12884] ? do_getname_kernel+0x5d/0x250 [ 252.199873][T12884] ? filp_open+0x1d/0x50 [ 252.199893][T12884] ? fsg_lun_open+0x6b/0x7b0 [ 252.199912][T12884] ? fsg_store_file+0x1e7/0x450 [ 252.199933][T12884] do_file_open+0x20e/0x430 [ 252.199953][T12884] ? __pfx_do_file_open+0x10/0x10 [ 252.199978][T12884] ? rcu_is_watching+0x12/0xc0 [ 252.200004][T12884] file_open_name+0x1c3/0x3e0 [ 252.200025][T12884] ? __pfx_file_open_name+0x10/0x10 [ 252.200044][T12884] ? do_getname_kernel+0x5d/0x250 [ 252.200065][T12884] ? __asan_memcpy+0x3c/0x60 [ 252.200081][T12884] ? do_getname_kernel+0x1be/0x250 [ 252.200101][T12884] filp_open+0x2e/0x50 [ 252.200121][T12884] fsg_lun_open+0x6b/0x7b0 [ 252.200139][T12884] ? __pfx_down_read+0x10/0x10 [ 252.200164][T12884] fsg_store_file+0x1e7/0x450 [ 252.200184][T12884] configfs_write_iter+0x302/0x4e0 [ 252.200205][T12884] vfs_write+0x6ac/0x1050 [ 252.200239][T12884] ? __pfx_configfs_write_iter+0x10/0x10 [ 252.200260][T12884] ? __pfx_vfs_write+0x10/0x10 [ 252.200292][T12884] ksys_write+0x12a/0x250 [ 252.200305][T12884] ? __pfx_ksys_write+0x10/0x10 [ 252.200319][T12884] ? trace_syscall_enter+0xd9/0x110 [ 252.200343][T12884] do_syscall_64+0x115/0x870 [ 252.200363][T12884] ? clear_bhb_loop+0x40/0x90 [ 252.200383][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.200403][T12884] RIP: 0033:0x7f4e1879e019 [ 252.200418][T12884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.200436][T12884] RSP: 002b:00007f4e19606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.200454][T12884] RAX: ffffffffffffffda RBX: 00007f4e18a26270 RCX: 00007f4e1879e019 [ 252.200467][T12884] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000006 [ 252.200477][T12884] RBP: 00007f4e1883500c R08: 0000000000000000 R09: 0000000000000000 [ 252.200488][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.200498][T12884] R13: 00007f4e18a26308 R14: 00007f4e18a26270 R15: 00007ffe78298828 [ 252.200514][T12884] [ 252.452209][T12884] mass_storage.0/lun.0: unable to open backing file: fi [ 253.302169][ T5097] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.372502][ T5097] Bluetooth: hci1: command 0x0419 tx timeout [ 253.372610][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.376387][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.377446][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.784360][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.786949][ T1442] ieee802154 phy1 wpan1: encryption failed: -22