last executing test programs: 5m5.898424511s ago: executing program 2 (id=14): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x300]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m5.840921667s ago: executing program 2 (id=16): setrlimit(0x7, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x85000000}, 0x94) 5m5.768726298s ago: executing program 2 (id=17): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r2, &(0x7f0000000cc0)={0x2020}, 0x2020) 5m5.737637939s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000880)={0x1, 0x0, @ofdm={0x6, 0xc, 0xb, 0xf, 0x6, 0x6, 0x1}}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe00000100000000840012000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084da00"/160], 0xa0}, 0x1, 0x0, 0x0, 0xe119a598a83e2ec9}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000900)={0xa2, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000000500), &(0x7f0000000080)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000002100), 0x42480, &(0x7f0000000640)=ANY=[@ANYRESHEX=r3, @ANYRES16=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="8b351951945eab84035306df3c83594dc4c3b52c96c1de0af29731803e45afdcf6d0827b9fd0ef4b2ab416778d88fa9aa300561d8bbb11187f1bbb5d4de04512e31133c1f472642a50d2a067b7c2587c991d93e5a9f0c2d05b8849a7ea70bdbcd7076e6964c38a415279303a83af00ac386b3fd6fa5542179e16c1fc34294268a015394511ec90b11078af8e5886e05375df440d995e7b6774", @ANYRESOCT=r4, @ANYRES32=r5]) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x2, 0x400000000000003, 0x3, 0x0, {0x2, 0x800000008, 0x0, 0x5a, 0x4, 0x2, 0x8, 0x6, 0x1, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0xf, {0x0, 0x8, 0xb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r7, &(0x7f0000000300)="a1fd", 0x2) r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x101080, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r9, &(0x7f0000000300)='r:mygrou-/myevent ./dummy:0', 0x1b) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r10, 0x1}}, 0x10) 5m5.600038244s ago: executing program 2 (id=20): setresgid(0x0, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) read(r2, &(0x7f0000000340)=""/191, 0xbf) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x2}}, 0x1c) (rerun: 64) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@deltaction={0xf4, 0x31, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x344, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) (async) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "731000dc", "a80d192f0f96d31b"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x314}, "3939e0286ea0c77e", "ffc2397ac39cbf398197cba3a2fb57388e5b0a7a9142af7f48d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) (async) capset(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x4, 0x2, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000001c0), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) (rerun: 64) 5m4.671105658s ago: executing program 2 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c170000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 5m4.612735651s ago: executing program 32 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c170000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 3m6.159074076s ago: executing program 4 (id=1471): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180007012abd70000000000b2f7c3f0008000180040005001400b8"], 0x30}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000140)='lazytime\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) readv(r4, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r6, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r1, &(0x7f0000001240)={[0xffffffff]}, 0x8, 0x80800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r7, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c) r10 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x2f, 0x0, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.826067327s ago: executing program 4 (id=1477): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x0) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x120) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="ebfa0e80ceb3dc4c43c215dc4dade38ff8c84ace0200bebe5b179f12cf39c48c2d4b61ce76443644c1dc73113bee39b5796edc2a8f551d6fa7", 0x39}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") clock_gettime(0x0, &(0x7f0000005f40)={0x0, 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000d40), 0x40000, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/4088, 0xff8}, {&(0x7f0000002740)=""/219, 0xdb}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/121, 0x79}, {&(0x7f0000002840)=""/255, 0xff}, {&(0x7f0000004480)=""/20, 0x14}], 0x8, &(0x7f00000026c0)=""/82, 0x52}, 0x1000}, {{&(0x7f00000045c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004640)=""/190, 0xbe}, {&(0x7f0000004700)=""/226, 0xe2}, {&(0x7f0000004800)=""/68, 0x44}, {&(0x7f00000025c0)=""/203, 0xcb}], 0x4, &(0x7f00000049c0)=""/4096, 0x1000}, 0x81}, {{&(0x7f00000059c0)=@pppol2tpv3, 0x80, &(0x7f0000005d00)=[{&(0x7f00000024c0)=""/119, 0x77}, {&(0x7f0000005ac0)=""/202, 0xca}, {&(0x7f0000005bc0)=""/101, 0x65}, {&(0x7f0000005c40)}, {&(0x7f0000005c80)=""/65, 0x41}], 0x5, &(0x7f0000005d80)=""/213, 0xd5}, 0x833f}], 0x3, 0x100, &(0x7f0000005f80)={r3, r4+10000000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r6, 0x8000}, 0x8) 3m5.727927452s ago: executing program 4 (id=1478): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) 3m5.727588222s ago: executing program 4 (id=1479): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) (fail_nth: 1) 3m5.660558371s ago: executing program 4 (id=1480): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) r4 = open$dir(&(0x7f00000001c0)='./sys_sec\x00', 0x48000, 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xef, 0x6) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000180)={0x0, 0x500}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/config.gz\x00', 0x0, 0x0) read(r6, &(0x7f0000000000), 0x10) linkat(r4, &(0x7f0000000180)='./sys_sec\x00', r4, &(0x7f0000000200)='./sys_sec\x00', 0x1400) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)='select \n', 0x10) fsopen(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0xc, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x801, 0x1, 0x61, 0x0, 0x0) 3m5.510230951s ago: executing program 4 (id=1482): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20004000, &(0x7f00000014c0)={0x2, 0x4e24, @loopback}, 0x10) 2m50.395708302s ago: executing program 33 (id=1482): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20004000, &(0x7f00000014c0)={0x2, 0x4e24, @loopback}, 0x10) 52.390095717s ago: executing program 5 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) (fail_nth: 3) 52.389903404s ago: executing program 5 (id=3329): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004"], 0xa0}}, 0x0) 52.309546341s ago: executing program 5 (id=3330): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000040), 0x30f5, 0x0, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000080), 0x47, 0x401) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f0000000000)={0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) close_range(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x91ac7e, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, r6}}]}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x9) getdents64(r7, &(0x7f00000000c0)=""/190, 0xbe) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f00000002c0)={0x9c, 0xc, 0x2, 0xffff, 0x2, [0x4, 0x81, 0xffff, 0x3a]}) r8 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r8}, 0x68) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x14, 0x300, 0x70bd29, 0x25dfdbfe, {0x1a, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "917d87bcbcbcd18fcfb6138b31d8ef6cd51dd55d6f781cfc4cedc063bd4b3a4419cf7420d090e625df81"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "d8f2ef42894dffe68f9f0b39144f84bb20407c16c405bdce6ce61951985b"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) syz_open_procfs(r4, &(0x7f0000000300)='net/dev_mcast\x00') (async) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close(0x3) 51.128621842s ago: executing program 5 (id=3334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1dd) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000357e400013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a3100361e000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0xcc, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc, 0x90, 0x8000000000000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000085}, 0x80) read(r3, &(0x7f0000000400)=""/256, 0x100) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='vfat\x00', 0x100020, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='2', 0x1) 51.040794315s ago: executing program 5 (id=3336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x44044081}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xac}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4880) fcntl$getflags(r1, 0x408) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x3e302, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1210000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x40) 50.838204373s ago: executing program 5 (id=3339): ioprio_set$pid(0x2, 0x0, 0x6000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000000210)="01", 0x1) read(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x8e000, 0x0) 50.655731326s ago: executing program 34 (id=3339): ioprio_set$pid(0x2, 0x0, 0x6000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000000210)="01", 0x1) read(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x8e000, 0x0) 40.223103759s ago: executing program 6 (id=3463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) 40.06045113s ago: executing program 6 (id=3465): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcda7a3ca6015d4da3969a24ec6d9055c678d21fd04cd4137bf8f657662b6669817de5331dd7439ec2f4e35101bd6f3f52467"]) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3027}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 39.89299476s ago: executing program 6 (id=3469): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000801}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000801}) (async) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) (async) 39.89010591s ago: executing program 6 (id=3471): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x406, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7, 0x8, 0x56b8, 0x101, 0x100000000, r1}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 39.800865247s ago: executing program 0 (id=3472): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x2800, 0x20) 39.740609044s ago: executing program 0 (id=3473): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e0705052000"], 0xa) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x901, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa09, 0x7b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 39.739611189s ago: executing program 6 (id=3474): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x12, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 39.628314053s ago: executing program 0 (id=3475): dup(0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21}, {0x2, 0x0, @empty}, {0x2, 0x4e24, @empty}, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0xfffd}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x10000, r1}, 0x38) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) dup(0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21}, {0x2, 0x0, @empty}, {0x2, 0x4e24, @empty}, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0xfffd}) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x10000, r1}, 0x38) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r3}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) (async) 39.627848679s ago: executing program 6 (id=3476): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x4010000], [0x9, 0x0, 0xfffffffc, 0x4], [0x1, 0x0, 0x0, 0xb]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={r3, 0xe, 0xfffe, 0x2, 0x0, [0x2], [0x2003, 0x0, 0x1002, 0xe], [0xea4, 0x4, 0x0, 0x2], [0x200000043e, 0x0, 0xcf, 0x200]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x44800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x50, r5, 0x1, 0x70bd2f, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[r3, r3, r2, r2, r3, r2, r3, r3], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$I2C_FUNCS(r8, 0x705, &(0x7f0000000240)=0x2) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ipvlan0\x00', {0x2}, 0xdd3e}) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f0000000140)=[{0xb, '\x00', @data, 0xfff}]}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) 39.171075104s ago: executing program 0 (id=3477): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004"], 0xa0}}, 0x0) 39.101235464s ago: executing program 0 (id=3478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000080)='./file0\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) chdir(&(0x7f0000000200)='./file0\x00') connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xf2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x4}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x140}}, 0x200080d4) 39.100997002s ago: executing program 0 (id=3479): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$loop(0x0, 0x7, 0x13a322) ioctl(r2, 0x10001, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x44402, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000580)={{r4}, "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"}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000500)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r5, 0xc0386447, &(0x7f0000000540)={{0x8, 0x3, &(0x7f00000004c0)=[{0xba, 0x0, 0xb974}, {0x3, 0x0, 0x5}, {0x6, 0x0, 0x7}]}, 0x2, 0x6, 0x6, 0x2, 0x0, 0x1, 0xc0c5, 0x9, r6}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r3, 0xc0086444, &(0x7f00000000c0)={r6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) socket$kcm(0x23, 0x2, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) userfaultfd(0x801) socket$inet6_sctp(0xa, 0x5, 0x84) dup(0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4094) 37.399647218s ago: executing program 1 (id=3496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') listxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=""/207, 0xcf) r1 = getpid() ioprio_set$pid(0x1, r1, 0x2000) brk(0x200000ffc000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000300)=0x90) r5 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000600)='r:s/p ./file0:0\f_', 0x11) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x24, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) 36.961373902s ago: executing program 1 (id=3497): prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "01010101010101010101010101010101"}}}]}, 0x48}}, 0x0) 36.961275044s ago: executing program 1 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x4080) 36.89579818s ago: executing program 1 (id=3499): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r3, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000300)=0x90) (fail_nth: 2) 36.895699507s ago: executing program 1 (id=3500): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) ptrace(0x10, 0x0) 34.738624819s ago: executing program 1 (id=3501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xd0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x801}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x103, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x8, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x1}, 0x6) 24.139713822s ago: executing program 35 (id=3476): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x4010000], [0x9, 0x0, 0xfffffffc, 0x4], [0x1, 0x0, 0x0, 0xb]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={r3, 0xe, 0xfffe, 0x2, 0x0, [0x2], [0x2003, 0x0, 0x1002, 0xe], [0xea4, 0x4, 0x0, 0x2], [0x200000043e, 0x0, 0xcf, 0x200]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x44800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x50, r5, 0x1, 0x70bd2f, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[r3, r3, r2, r2, r3, r2, r3, r3], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$I2C_FUNCS(r8, 0x705, &(0x7f0000000240)=0x2) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ipvlan0\x00', {0x2}, 0xdd3e}) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f0000000140)=[{0xb, '\x00', @data, 0xfff}]}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) 23.107433268s ago: executing program 36 (id=3479): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$loop(0x0, 0x7, 0x13a322) ioctl(r2, 0x10001, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x44402, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000580)={{r4}, "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"}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000500)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r5, 0xc0386447, &(0x7f0000000540)={{0x8, 0x3, &(0x7f00000004c0)=[{0xba, 0x0, 0xb974}, {0x3, 0x0, 0x5}, {0x6, 0x0, 0x7}]}, 0x2, 0x6, 0x6, 0x2, 0x0, 0x1, 0xc0c5, 0x9, r6}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r3, 0xc0086444, &(0x7f00000000c0)={r6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) socket$kcm(0x23, 0x2, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) userfaultfd(0x801) socket$inet6_sctp(0xa, 0x5, 0x84) dup(0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4094) 19.583176068s ago: executing program 37 (id=3501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xd0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x801}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x103, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x8, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x1}, 0x6) 5.000915928s ago: executing program 3 (id=3685): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00000003c0)=""/30, &(0x7f0000d23000)=0x1e) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="ed6480f1db49d29f3ac079099bd73978a3dbd31d1f27823e0628bffca379a050534780f1693dba4b374c80e5351ac0144902ba5d964f90419d53a19b6fa7495ee1bb74aff27c88def91208964a72b2101ed0b3a43a4ea97643b51c73e2264e74f600d69f14e4386f9b7256a3016006d14c4d439c1bfc25dc2469778cfa9faad62f0b167df9f8198252b6f4c7c4472508d76da1f60e186adf2ab5c78c5473eb97b6a810cc18af53ee5ef8931ce66116240c756aaa2e85baecd20c5b9f4bfc6ee5456e09b5e3177b55fbfcaf8de9daea49aa5bc3c261a579b66fcf011b14f01393180e9c20806ae884f9f1e9c35e395a9d4f1d11a1ae", 0xf5}, {&(0x7f0000000180)="2bcded3df49391bc7f32bb5f0f191b73a13e185e08b048e68795728a3159a2c08b9f4bec28693f98910fd7572fb004b95ff6d828eb81cf7ff11d9ff30ec6059cf35a7583a459120a439c7a252c5622c94e60d3eb1b437887c832a1cbea5c61514fe8f52c9357f3aecee09cf0afa1bbccd7472fbd69174f734c7174d943eca21a705d456b884d808861ec58d2c910a9fd6587cc6745c44123ca3094aae4d6f84a40acdafe38b077b730b634e89c1a3a99c91a9e6943f0", 0xb6}], 0x2}, 0x200480c4) 4.879640934s ago: executing program 3 (id=3688): r0 = socket(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r1 = io_uring_setup(0x2762, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x4000257}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74aec2fb, 0x6, &(0x7f0000002140)) statx(0xffffffffffffff9c, 0x0, 0x800, 0x3b1a5cba1e53678f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x78) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff8, 0x9, 0x59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}}, 0x240400c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="f5af24bd7018000000000e00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000000d0a010800000000004632775b581d65ee00020073797a31000000000900010073797ac09c3bc00010000380000000800800034000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) 4.535330651s ago: executing program 8 (id=3691): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x700, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 4.339163244s ago: executing program 8 (id=3693): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)='1Nh/o', 0x5) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000009c0)={{r0}, "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"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0', 0x1) 4.178057212s ago: executing program 8 (id=3695): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x89c, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private=0xfffffffe}, {}, {@local, 0x4}, {@loopback}, {@private}, {@remote}, {@broadcast}, {@broadcast}]}, @generic={0x86, 0x8, "58185dd6611e"}]}}}}}}}, 0x0) 4.065670063s ago: executing program 9 (id=3696): r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x20001080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x4, 0x1a, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x8001, 0x80000000}}) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600b0000009c2b00fc010000000000000000000000000001fe80000000000000000000000000003c00000000009c90780100000003000000ad659a87ce8d6c4600000000000027250030000000000000cfc2be00ccb1137d91492c9f8a93ab7cbdc2fcd39ddfcb1f0495559bff03000000000000bb4324ee343d75c8de0d6093773293a5e434ab150a4dee37c85aecbf21c869478c62f84ba03ff89b863366c0128e76d851000000000bde3cd51b60be21000000ef5d907f201d99a4ef11c7b450cf0a15"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xcc, &(0x7f0000000500)=""/204, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0xfd}, 0x18) lseek(r0, 0x0, 0x1) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e001400028008000773103a2fb8403fa4e88a9a9a3ad221be00087269ce4ce1c7fa5552b8b74a340ea22926dcc19a1c152b5829fbc0b0e1", @ANYRESOCT=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r0, 0x1) 4.064347697s ago: executing program 8 (id=3697): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e07"], 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x901, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa09, 0x7b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3.930580328s ago: executing program 8 (id=3699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000000090500050002000000"], 0x58}}, 0x4080) 3.83009677s ago: executing program 8 (id=3702): mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./proc\x00', 0x3df) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='nfs4\x00', 0x41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)="e9db", 0x2}], 0x1, 0x401, 0x100, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x7c}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x400000000000000}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) write$UHID_INPUT2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000016002000000000000000000000000e000000000000000000"], 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) 3.607796673s ago: executing program 7 (id=3703): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0303000000e1000000001100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001"], 0x28}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x6, 0x8}, 0xc) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000000280)) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) mount(0x0, &(0x7f0000000440)='./config\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) futex(&(0x7f0000000180), 0xa, 0x0, 0x0, &(0x7f0000000000)=0x3, 0xaffffffa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='tcp_nodelay\x00', &(0x7f0000000200)='1\x00', 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0x4) r10 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000100)={0x2009, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$BLKFINISHZONE(r7, 0x40101288, &(0x7f00000002c0)={0x6, 0x10001}) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='recover_session\x00', &(0x7f0000000400)='no\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x2}}]}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x1) 3.540591962s ago: executing program 7 (id=3704): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) close_range(r0, 0xffffffffffffffff, 0x500) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 3.211082126s ago: executing program 7 (id=3705): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000008dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, 0x0}}], 0x1, 0x4048010) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24005088}, 0x4880) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x48, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x54}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x640d5}, 0x84) 3.111085651s ago: executing program 9 (id=3706): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (fail_nth: 2) 2.992368731s ago: executing program 9 (id=3707): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e07"], 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x901, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa09, 0x7b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 885.273148ms ago: executing program 3 (id=3708): syz_emit_ethernet(0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="46b945a59209c431104b90b60faaaaaaaaaaaaaaaaaaaaaaaa88635aa772f379cc"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@gettaction={0x80, 0x32, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x80}}, 0x0) syz_emit_ethernet(0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbb83d29c8ed91e260692e6402a4ec1bbbb86dd606410a600430000fc020000000000000000000000000001fe8000000000000000000010000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f12217f8"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000000c0)) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) io_setup(0x2278, &(0x7f0000000180)) 460.845485ms ago: executing program 9 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r4 = dup(r3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r5, &(0x7f0000000240)=""/32, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0x8, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x5, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x400c5) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) (async) dup(r3) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) (async) getdents(r5, &(0x7f0000000240)=""/32, 0x20) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0x8, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x5, 0x7, '\x00', 0x8, 0x1}) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x400c5) (async) 460.644949ms ago: executing program 7 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x3800, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0xb, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x40000004, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc6, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e3, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x4, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x20009, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x8, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 381.094332ms ago: executing program 7 (id=3711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000000090500050002000000"], 0x58}}, 0x4080) 380.878415ms ago: executing program 3 (id=3712): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x300, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e0705052000"], 0xa) 380.55788ms ago: executing program 7 (id=3713): getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000480)=0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xb1, 0x220100) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, r3, r4, 0x0, 0x2}}}, 0x78) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r5, &(0x7f0000000040)='\x00', 0x29, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x191800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd700002"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000800)={0x7, 0x0, [{0x805, 0x0, 0x8}, {0x8f4, 0x0, 0x6}, {0x4c1, 0x0, 0xf9}, {0x2d5, 0x0, 0x4}, {0xb28, 0x0, 0x6}, {0x630, 0x0, 0x7}, {0x8f4, 0x0, 0x3}]}) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_ethernet(0x2bc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='1', 0x1) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x1, 'syz1\x00', 0x8005}, 0x1, 0x20000000, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 289.727168ms ago: executing program 3 (id=3714): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) 211.370518ms ago: executing program 3 (id=3715): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2, 0xec}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 205.532µs ago: executing program 9 (id=3716): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000340)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0xfb, 0x2}, {0x7}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0xe, 0x8, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7f, {}, {0x0, 0x40}, @addr={0x4, 0x2}}], 0x70) 0s ago: executing program 9 (id=3717): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e07"], 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x901, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa09, 0x7b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) kernel console output (not intermixed with test programs): 89 01 48 [ 314.816942][T15906] RSP: 002b:00007faecfb37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 314.816953][T15906] RAX: ffffffffffffffda RBX: 00007faecee25fa0 RCX: 00007faeceb9e159 [ 314.816961][T15906] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 314.816967][T15906] RBP: 00007faecfb37090 R08: 00000000056cd4d5 R09: 0000000000000000 [ 314.816989][T15906] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 314.816996][T15906] R13: 00007faecee26038 R14: 00007faecee25fa0 R15: 00007ffe595ca698 [ 314.817010][T15906] [ 314.909058][ T5729] Bluetooth: hci3: unexpected cc 0x2005 length: 4 > 1 [ 314.909127][ T5729] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 314.931817][T15912] tipc: Invalid UDP bearer configuration [ 314.931838][T15912] tipc: Enabling of bearer rejected, failed to enable media [ 314.974049][T15916] Bluetooth: MGMT ver 1.23 [ 315.093934][T15925] FAULT_INJECTION: forcing a failure. [ 315.093934][T15925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.093951][T15925] CPU: 0 UID: 0 PID: 15925 Comm: syz.0.3423 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.093967][T15925] Tainted: [L]=SOFTLOCKUP [ 315.093971][T15925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.093978][T15925] Call Trace: [ 315.093983][T15925] [ 315.093988][T15925] dump_stack_lvl+0x100/0x190 [ 315.094009][T15925] should_fail_ex.cold+0x5/0xa [ 315.094026][T15925] _copy_to_user+0x32/0xd0 [ 315.094039][T15925] simple_read_from_buffer+0xcb/0x170 [ 315.094055][T15925] proc_fail_nth_read+0x1af/0x230 [ 315.094070][T15925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.094085][T15925] ? rw_verify_area+0xce/0x6d0 [ 315.094102][T15925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.094115][T15925] vfs_read+0x1e4/0xb40 [ 315.094127][T15925] ? lock_acquire+0x1d1/0x380 [ 315.094139][T15925] ? __fget_files+0x34/0x3d0 [ 315.094153][T15925] ? __pfx_vfs_read+0x10/0x10 [ 315.094163][T15925] ? find_held_lock+0x2b/0x80 [ 315.094179][T15925] ? __fget_files+0x215/0x3d0 [ 315.094195][T15925] ? __fget_files+0x21f/0x3d0 [ 315.094212][T15925] ksys_read+0x12a/0x250 [ 315.094223][T15925] ? __pfx_ksys_read+0x10/0x10 [ 315.094234][T15925] ? trace_hardirqs_off+0x70/0x170 [ 315.094253][T15925] do_syscall_64+0x123/0x790 [ 315.094271][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.094295][T15925] RIP: 0033:0x7fac4895e98e [ 315.094306][T15925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.094318][T15925] RSP: 002b:00007fac498a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.094341][T15925] RAX: ffffffffffffffda RBX: 00007fac498a46c0 RCX: 00007fac4895e98e [ 315.094349][T15925] RDX: 000000000000000f RSI: 00007fac498a40a0 RDI: 0000000000000004 [ 315.094355][T15925] RBP: 00007fac498a4090 R08: 0000000000000000 R09: 0000000000000000 [ 315.094362][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.094369][T15925] R13: 00007fac48c26038 R14: 00007fac48c25fa0 R15: 00007ffc37b9ebc8 [ 315.094383][T15925] [ 315.193208][T15929] nvmet: the ns:1 is already enabled. [ 315.249861][ T5729] Bluetooth: hci3: unexpected cc 0x2005 length: 4 > 1 [ 315.249888][ T5729] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 315.276148][T15935] FAULT_INJECTION: forcing a failure. [ 315.276148][T15935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.276170][T15935] CPU: 0 UID: 0 PID: 15935 Comm: syz.6.3427 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.276186][T15935] Tainted: [L]=SOFTLOCKUP [ 315.276190][T15935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.276197][T15935] Call Trace: [ 315.276202][T15935] [ 315.276207][T15935] dump_stack_lvl+0x100/0x190 [ 315.276227][T15935] should_fail_ex.cold+0x5/0xa [ 315.276245][T15935] _copy_from_iter+0x1f4/0x1690 [ 315.276261][T15935] ? __pfx__copy_from_iter+0x10/0x10 [ 315.276273][T15935] ? kasan_save_track+0x14/0x30 [ 315.276288][T15935] ? __kasan_kmalloc+0xaa/0xb0 [ 315.276301][T15935] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 315.276319][T15935] ? configfs_write_iter+0x388/0x4e0 [ 315.276339][T15935] configfs_write_iter+0xb3/0x4e0 [ 315.276359][T15935] vfs_write+0x6af/0x1050 [ 315.276377][T15935] ? __pfx_configfs_write_iter+0x10/0x10 [ 315.276396][T15935] ? __pfx_vfs_write+0x10/0x10 [ 315.276407][T15935] ? find_held_lock+0x2b/0x80 [ 315.276432][T15935] ksys_write+0x12a/0x250 [ 315.276444][T15935] ? __pfx_ksys_write+0x10/0x10 [ 315.276460][T15935] do_syscall_64+0x123/0x790 [ 315.276478][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.276491][T15935] RIP: 0033:0x7faeceb9e159 [ 315.276501][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.276512][T15935] RSP: 002b:00007faecfb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.276523][T15935] RAX: ffffffffffffffda RBX: 00007faecee25fa0 RCX: 00007faeceb9e159 [ 315.276530][T15935] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 315.276537][T15935] RBP: 00007faecfb37090 R08: 0000000000000000 R09: 0000000000000000 [ 315.276544][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.276550][T15935] R13: 00007faecee26038 R14: 00007faecee25fa0 R15: 00007ffe595ca698 [ 315.276565][T15935] [ 315.340242][T15939] ipt_REJECT: TCP_RESET invalid for non-tcp [ 315.392399][T15942] netlink: 'syz.6.3428': attribute type 10 has an invalid length. [ 315.506410][T15949] FAULT_INJECTION: forcing a failure. [ 315.506410][T15949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.506430][T15949] CPU: 0 UID: 0 PID: 15949 Comm: syz.6.3432 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.506445][T15949] Tainted: [L]=SOFTLOCKUP [ 315.506449][T15949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.506456][T15949] Call Trace: [ 315.506460][T15949] [ 315.506465][T15949] dump_stack_lvl+0x100/0x190 [ 315.506485][T15949] should_fail_ex.cold+0x5/0xa [ 315.506503][T15949] _copy_from_user+0x2e/0xd0 [ 315.506516][T15949] input_event_from_user+0x123/0x310 [ 315.506535][T15949] ? __pfx_input_event_from_user+0x10/0x10 [ 315.506553][T15949] ? __pfx___might_resched+0x10/0x10 [ 315.506565][T15949] ? input_inject_event+0x198/0x380 [ 315.506584][T15949] evdev_write+0x342/0x610 [ 315.506604][T15949] ? __pfx_evdev_write+0x10/0x10 [ 315.506622][T15949] ? bpf_lsm_file_permission+0x9/0x10 [ 315.506638][T15949] ? security_file_permission+0x76/0x210 [ 315.506652][T15949] ? rw_verify_area+0xce/0x6d0 [ 315.506671][T15949] vfs_write+0x2aa/0x1050 [ 315.506683][T15949] ? __pfx_evdev_write+0x10/0x10 [ 315.506717][T15949] ? lock_acquire+0x1d1/0x380 [ 315.506729][T15949] ? __fget_files+0x34/0x3d0 [ 315.506747][T15949] ? __pfx_vfs_write+0x10/0x10 [ 315.506762][T15949] ? find_held_lock+0x2b/0x80 [ 315.506785][T15949] ? __fget_files+0x215/0x3d0 [ 315.506808][T15949] ? __fget_files+0x215/0x3d0 [ 315.506835][T15949] ? __fget_files+0x21f/0x3d0 [ 315.506865][T15949] ksys_write+0x1f8/0x250 [ 315.506884][T15949] ? __pfx_ksys_write+0x10/0x10 [ 315.506910][T15949] do_syscall_64+0x123/0x790 [ 315.506934][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.506947][T15949] RIP: 0033:0x7faeceb9e159 [ 315.506956][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.506967][T15949] RSP: 002b:00007faecfb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.506979][T15949] RAX: ffffffffffffffda RBX: 00007faecee25fa0 RCX: 00007faeceb9e159 [ 315.506986][T15949] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 315.506993][T15949] RBP: 00007faecfb37090 R08: 0000000000000000 R09: 0000000000000000 [ 315.507000][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.507006][T15949] R13: 00007faecee26038 R14: 00007faecee25fa0 R15: 00007ffe595ca698 [ 315.507021][T15949] [ 315.817721][T15960] 9pnet_virtio: no channels available for device syz [ 315.842961][T15968] FAULT_INJECTION: forcing a failure. [ 315.842961][T15968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.842992][T15968] CPU: 0 UID: 0 PID: 15968 Comm: syz.1.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.843018][T15968] Tainted: [L]=SOFTLOCKUP [ 315.843025][T15968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.843037][T15968] Call Trace: [ 315.843043][T15968] [ 315.843052][T15968] dump_stack_lvl+0x100/0x190 [ 315.843083][T15968] should_fail_ex.cold+0x5/0xa [ 315.843111][T15968] _copy_from_user+0x2e/0xd0 [ 315.843132][T15968] video_usercopy+0x98e/0x1730 [ 315.843161][T15968] ? __pfx___video_do_ioctl+0x10/0x10 [ 315.843189][T15968] ? __pfx_video_usercopy+0x10/0x10 [ 315.843231][T15968] v4l2_ioctl+0x1bd/0x250 [ 315.843258][T15968] ? __pfx_v4l2_ioctl+0x10/0x10 [ 315.843286][T15968] __x64_sys_ioctl+0x18e/0x210 [ 315.843308][T15968] do_syscall_64+0x123/0x790 [ 315.843336][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.843354][T15968] RIP: 0033:0x7f4b2c79e159 [ 315.843371][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.843388][T15968] RSP: 002b:00007f4b2d720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.843408][T15968] RAX: ffffffffffffffda RBX: 00007f4b2ca25fa0 RCX: 00007f4b2c79e159 [ 315.843421][T15968] RDX: 0000200000000980 RSI: 00000000c0205648 RDI: 0000000000000003 [ 315.843432][T15968] RBP: 00007f4b2d720090 R08: 0000000000000000 R09: 0000000000000000 [ 315.843445][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.843456][T15968] R13: 00007f4b2ca26038 R14: 00007f4b2ca25fa0 R15: 00007ffd37da8148 [ 315.843480][T15968] [ 315.960650][T15972] MPI: mpi too large (16392 bits) [ 316.021891][T15976] FAULT_INJECTION: forcing a failure. [ 316.021891][T15976] name failslab, interval 1, probability 0, space 0, times 0 [ 316.021910][T15976] CPU: 0 UID: 0 PID: 15976 Comm: syz.0.3443 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.021926][T15976] Tainted: [L]=SOFTLOCKUP [ 316.021930][T15976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.021937][T15976] Call Trace: [ 316.021941][T15976] [ 316.021946][T15976] dump_stack_lvl+0x100/0x190 [ 316.021967][T15976] should_fail_ex.cold+0x5/0xa [ 316.021984][T15976] should_failslab+0xc2/0x120 [ 316.021999][T15976] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 316.022012][T15976] ? lock_acquire+0x1d1/0x380 [ 316.022024][T15976] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 316.022041][T15976] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 316.022060][T15976] kstrdup+0x51/0xe0 [ 316.022078][T15976] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 316.022096][T15976] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 316.022111][T15976] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 316.022125][T15976] selinux_socket_post_create+0x368/0x7e0 [ 316.022145][T15976] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 316.022168][T15976] security_socket_post_create+0xaf/0x270 [ 316.022187][T15976] __sock_create+0x70b/0x860 [ 316.022207][T15976] udp_sock_create6+0xc7/0x6a0 [ 316.022224][T15976] ? netlink_rcv_skb+0x159/0x420 [ 316.022237][T15976] ? netlink_unicast+0x585/0x850 [ 316.022249][T15976] ? __pfx_udp_sock_create6+0x10/0x10 [ 316.022265][T15976] ? __sys_sendmsg+0x160/0x210 [ 316.022278][T15976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.022293][T15976] ? __asan_memcpy+0x3c/0x60 [ 316.022306][T15976] gtp_create_sock+0x1fd/0x430 [ 316.022323][T15976] ? __pfx_gtp_create_sock+0x10/0x10 [ 316.022347][T15976] ? __kmalloc_noprof+0x350/0x840 [ 316.022362][T15976] gtp_create_sockets+0x27/0x140 [ 316.022378][T15976] gtp_newlink+0x475/0x13f0 [ 316.022398][T15976] ? __pfx_gtp_newlink+0x10/0x10 [ 316.022413][T15976] rtnl_newlink+0x1697/0x2620 [ 316.022433][T15976] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.022447][T15976] ? avc_has_perm_noaudit+0x56/0x3b0 [ 316.022463][T15976] ? find_held_lock+0x2b/0x80 [ 316.022485][T15976] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 316.022507][T15976] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 316.022557][T15976] ? lock_acquire+0x1d1/0x380 [ 316.022578][T15976] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 316.022601][T15976] ? find_held_lock+0x2b/0x80 [ 316.022623][T15976] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 316.022645][T15976] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 316.022672][T15976] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.022699][T15976] rtnetlink_rcv_msg+0x95e/0xe90 [ 316.022725][T15976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.022755][T15976] ? ref_tracker_free+0x37e/0x6c0 [ 316.022776][T15976] netlink_rcv_skb+0x159/0x420 [ 316.022788][T15976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.022805][T15976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.022822][T15976] ? netlink_deliver_tap+0x1ae/0xcc0 [ 316.022837][T15976] netlink_unicast+0x585/0x850 [ 316.022852][T15976] ? __pfx_netlink_unicast+0x10/0x10 [ 316.022873][T15976] netlink_sendmsg+0x8b0/0xda0 [ 316.022899][T15976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.022940][T15976] ? selinux_socket_sendmsg+0x198/0x2f0 [ 316.022966][T15976] ____sys_sendmsg+0xa4d/0xbe0 [ 316.022992][T15976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.023013][T15976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.023044][T15976] ? lock_acquire+0x1d1/0x380 [ 316.023062][T15976] ? get_pid_task+0x2a/0x250 [ 316.023085][T15976] ___sys_sendmsg+0x190/0x1e0 [ 316.023104][T15976] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.023122][T15976] ? get_pid_task+0x106/0x250 [ 316.023143][T15976] ? find_held_lock+0x2b/0x80 [ 316.023167][T15976] __sys_sendmsg+0x160/0x210 [ 316.023182][T15976] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.023203][T15976] do_syscall_64+0x123/0x790 [ 316.023221][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.023232][T15976] RIP: 0033:0x7fac4899e159 [ 316.023242][T15976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.023253][T15976] RSP: 002b:00007fac498a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.023265][T15976] RAX: ffffffffffffffda RBX: 00007fac48c25fa0 RCX: 00007fac4899e159 [ 316.023272][T15976] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 316.023279][T15976] RBP: 00007fac498a4090 R08: 0000000000000000 R09: 0000000000000000 [ 316.023286][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.023292][T15976] R13: 00007fac48c26038 R14: 00007fac48c25fa0 R15: 00007ffc37b9ebc8 [ 316.023316][T15976] [ 316.264423][ T7911] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 316.394703][ T7911] usb 6-1: device descriptor read/64, error -71 [ 316.433485][T15992] FAULT_INJECTION: forcing a failure. [ 316.433485][T15992] name failslab, interval 1, probability 0, space 0, times 0 [ 316.433506][T15992] CPU: 2 UID: 0 PID: 15992 Comm: syz.0.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.433522][T15992] Tainted: [L]=SOFTLOCKUP [ 316.433526][T15992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.433535][T15992] Call Trace: [ 316.433540][T15992] [ 316.433544][T15992] dump_stack_lvl+0x100/0x190 [ 316.433565][T15992] should_fail_ex.cold+0x5/0xa [ 316.433582][T15992] should_failslab+0xc2/0x120 [ 316.433596][T15992] __kmalloc_noprof+0xfc/0x840 [ 316.433609][T15992] ? device_write+0x1a6/0x1c90 [ 316.433623][T15992] device_write+0x1a6/0x1c90 [ 316.433635][T15992] ? __pfx_device_write+0x10/0x10 [ 316.433647][T15992] ? bpf_lsm_file_permission+0x9/0x10 [ 316.433662][T15992] ? security_file_permission+0x76/0x210 [ 316.433677][T15992] ? rw_verify_area+0xce/0x6d0 [ 316.433695][T15992] vfs_write+0x2aa/0x1050 [ 316.433707][T15992] ? __pfx_device_write+0x10/0x10 [ 316.433718][T15992] ? lock_acquire+0x1d1/0x380 [ 316.433730][T15992] ? __fget_files+0x34/0x3d0 [ 316.433744][T15992] ? __pfx_vfs_write+0x10/0x10 [ 316.433755][T15992] ? find_held_lock+0x2b/0x80 [ 316.433770][T15992] ? __fget_files+0x215/0x3d0 [ 316.433783][T15992] ? __fget_files+0x215/0x3d0 [ 316.433799][T15992] ? __fget_files+0x21f/0x3d0 [ 316.433848][T15992] ksys_write+0x12a/0x250 [ 316.433859][T15992] ? __pfx_ksys_write+0x10/0x10 [ 316.433875][T15992] do_syscall_64+0x123/0x790 [ 316.433892][T15992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.433904][T15992] RIP: 0033:0x7fac4899e159 [ 316.433913][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.433924][T15992] RSP: 002b:00007fac498a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.433936][T15992] RAX: ffffffffffffffda RBX: 00007fac48c25fa0 RCX: 00007fac4899e159 [ 316.433943][T15992] RDX: 0000000000000070 RSI: 0000200000001380 RDI: 0000000000000003 [ 316.433950][T15992] RBP: 00007fac498a4090 R08: 0000000000000000 R09: 0000000000000000 [ 316.433957][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.433964][T15992] R13: 00007fac48c26038 R14: 00007fac48c25fa0 R15: 00007ffc37b9ebc8 [ 316.433977][T15992] [ 316.562520][T15994] 9pnet_virtio: no channels available for device syz [ 316.635023][ T7911] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 316.670673][T15998] netlink: 'syz.0.3450': attribute type 10 has an invalid length. [ 316.764594][ T7911] usb 6-1: device descriptor read/64, error -71 [ 316.865549][ T6635] net_ratelimit: 377 callbacks suppressed [ 316.869105][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.869151][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.878564][ T7911] usb usb6-port1: attempt power cycle [ 317.112327][ T5729] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 317.192884][T15799] libceph: connect (1)[c::]:6789 error -101 [ 317.193086][T15799] libceph: mon0 (1)[c::]:6789 connect error [ 317.193983][T15799] libceph: connect (1)[c::]:6789 error -101 [ 317.194169][T15799] libceph: mon0 (1)[c::]:6789 connect error [ 317.215056][ T7911] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 317.238253][T16015] ceph: No mds server is up or the cluster is laggy [ 317.238484][ T7911] usb 6-1: device descriptor read/8, error -71 [ 317.322541][T16022] FAULT_INJECTION: forcing a failure. [ 317.322541][T16022] name failslab, interval 1, probability 0, space 0, times 0 [ 317.322557][T16022] CPU: 2 UID: 0 PID: 16022 Comm: syz.3.3459 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.322573][T16022] Tainted: [L]=SOFTLOCKUP [ 317.322577][T16022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.322584][T16022] Call Trace: [ 317.322588][T16022] [ 317.322593][T16022] dump_stack_lvl+0x100/0x190 [ 317.322614][T16022] should_fail_ex.cold+0x5/0xa [ 317.322630][T16022] should_failslab+0xc2/0x120 [ 317.322645][T16022] __kmalloc_noprof+0xfc/0x840 [ 317.322658][T16022] ? ceph_monc_init+0x1a1/0xcd0 [ 317.322678][T16022] ceph_monc_init+0x1a1/0xcd0 [ 317.322696][T16022] ? ceph_messenger_init+0x371/0x5d0 [ 317.322712][T16022] ceph_create_client+0x25e/0x370 [ 317.322725][T16022] ceph_get_tree+0x1a4/0x1fd0 [ 317.322764][T16022] ? bpf_lsm_capable+0x9/0x10 [ 317.322783][T16022] ? security_capable+0x80/0x260 [ 317.322802][T16022] vfs_get_tree+0x92/0x320 [ 317.322819][T16022] vfs_cmd_create+0xd7/0x2a0 [ 317.322833][T16022] __do_sys_fsconfig+0x55a/0xcb0 [ 317.322845][T16022] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 317.322856][T16022] ? fput+0x7c/0x100 [ 317.322876][T16022] do_syscall_64+0x123/0x790 [ 317.322893][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.322906][T16022] RIP: 0033:0x7fdbebf9e159 [ 317.322915][T16022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.322932][T16022] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 317.322944][T16022] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 317.322952][T16022] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 317.322958][T16022] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.322965][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.322972][T16022] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 317.322986][T16022] [ 317.409887][T16024] FAULT_INJECTION: forcing a failure. [ 317.409887][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 317.409910][T16024] CPU: 0 UID: 0 PID: 16024 Comm: syz.0.3461 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.409927][T16024] Tainted: [L]=SOFTLOCKUP [ 317.409932][T16024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.409939][T16024] Call Trace: [ 317.409943][T16024] [ 317.409948][T16024] dump_stack_lvl+0x100/0x190 [ 317.409969][T16024] should_fail_ex.cold+0x5/0xa [ 317.409987][T16024] should_failslab+0xc2/0x120 [ 317.410003][T16024] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 317.410017][T16024] ? __alloc_skb+0x5b7/0x710 [ 317.410030][T16024] ? __alloc_skb+0x140/0x710 [ 317.410047][T16024] __alloc_skb+0x140/0x710 [ 317.410060][T16024] ? __alloc_skb+0x5b7/0x710 [ 317.410074][T16024] ? __pfx___alloc_skb+0x10/0x10 [ 317.410091][T16024] netlink_alloc_large_skb+0x69/0x150 [ 317.410107][T16024] netlink_sendmsg+0x680/0xda0 [ 317.410123][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.410138][T16024] ? selinux_socket_sendmsg+0x198/0x2f0 [ 317.410154][T16024] ____sys_sendmsg+0xa4d/0xbe0 [ 317.410171][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.410185][T16024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.410207][T16024] ? lock_acquire+0x1d1/0x380 [ 317.410220][T16024] ? get_pid_task+0x2a/0x250 [ 317.410238][T16024] ___sys_sendmsg+0x190/0x1e0 [ 317.410258][T16024] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.410276][T16024] ? get_pid_task+0x106/0x250 [ 317.410297][T16024] ? find_held_lock+0x2b/0x80 [ 317.410323][T16024] __sys_sendmsg+0x160/0x210 [ 317.410338][T16024] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.410360][T16024] do_syscall_64+0x123/0x790 [ 317.410379][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.410392][T16024] RIP: 0033:0x7fac4899e159 [ 317.410403][T16024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.410415][T16024] RSP: 002b:00007fac498a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.410428][T16024] RAX: ffffffffffffffda RBX: 00007fac48c25fa0 RCX: 00007fac4899e159 [ 317.410436][T16024] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 317.410443][T16024] RBP: 00007fac498a4090 R08: 0000000000000000 R09: 0000000000000000 [ 317.410450][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.410457][T16024] R13: 00007fac48c26038 R14: 00007fac48c25fa0 R15: 00007ffc37b9ebc8 [ 317.410472][T16024] [ 317.474622][ T7911] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 317.495173][ T7911] usb 6-1: device descriptor read/8, error -71 [ 317.605239][ T7911] usb usb6-port1: unable to enumerate USB device [ 317.632516][ T7911] wiimote 0005:057E:0330.001C: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 317.632708][ T7911] wiimote 0005:057E:0330.001C: New device registered [ 317.694683][T16034] wiimote 0005:057E:0330.001C: Device removed [ 317.709666][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 317.709677][ T44] audit: type=1400 audit(317.647:1785): avc: denied { map } for pid=16040 comm="syz.0.3468" path="socket:[61241]" dev="sockfs" ino=61241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.709855][ T44] audit: type=1400 audit(317.647:1786): avc: denied { read } for pid=16040 comm="syz.0.3468" path="socket:[61241]" dev="sockfs" ino=61241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.710852][ T44] audit: type=1400 audit(317.647:1787): avc: denied { append } for pid=16042 comm="syz.6.3469" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.859755][T16051] FAULT_INJECTION: forcing a failure. [ 317.859755][T16051] name failslab, interval 1, probability 0, space 0, times 0 [ 317.859773][T16051] CPU: 2 UID: 60928 PID: 16051 Comm: syz.6.3471 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.859790][T16051] Tainted: [L]=SOFTLOCKUP [ 317.859795][T16051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.859802][T16051] Call Trace: [ 317.859807][T16051] [ 317.859812][T16051] dump_stack_lvl+0x100/0x190 [ 317.859834][T16051] should_fail_ex.cold+0x5/0xa [ 317.859851][T16051] should_failslab+0xc2/0x120 [ 317.859868][T16051] kmem_cache_alloc_noprof+0x92/0x6a0 [ 317.859882][T16051] ? jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 317.859903][T16051] jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 317.859922][T16051] jffs2_scan_medium+0x5e4/0x59c0 [ 317.859941][T16051] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 317.859953][T16051] ? trace_kmalloc+0xeb/0x110 [ 317.859968][T16051] ? __kasan_kmalloc+0xaa/0xb0 [ 317.859981][T16051] ? __kmalloc_noprof+0x350/0x840 [ 317.859993][T16051] ? jffs2_sum_init+0xc4/0x1b0 [ 317.860008][T16051] jffs2_do_mount_fs+0x8a0/0x2300 [ 317.860023][T16051] ? rcu_is_watching+0x13/0xc0 [ 317.860039][T16051] ? trace_kmalloc+0xeb/0x110 [ 317.860052][T16051] ? lockdep_init_map_type+0x5c/0x250 [ 317.860066][T16051] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 317.860077][T16051] ? __raw_spin_lock_init+0x3a/0x110 [ 317.860092][T16051] ? __init_rwsem+0x10e/0x180 [ 317.860108][T16051] jffs2_do_fill_super+0x3d4/0xa50 [ 317.860123][T16051] jffs2_fill_super+0x283/0x370 [ 317.860136][T16051] ? __pfx_jffs2_fill_super+0x10/0x10 [ 317.860150][T16051] mtd_get_sb+0x2f0/0x4c0 [ 317.860165][T16051] ? __pfx_jffs2_fill_super+0x10/0x10 [ 317.860178][T16051] get_tree_mtd+0x6f9/0x8a0 [ 317.860193][T16051] ? __pfx_get_tree_mtd+0x10/0x10 [ 317.860207][T16051] ? cap_capable+0x107/0x430 [ 317.860225][T16051] ? bpf_lsm_capable+0x9/0x10 [ 317.860242][T16051] ? security_capable+0x80/0x260 [ 317.860260][T16051] vfs_get_tree+0x92/0x320 [ 317.860278][T16051] path_mount+0x7d0/0x24c0 [ 317.860297][T16051] ? __pfx_path_mount+0x10/0x10 [ 317.860313][T16051] ? lockdep_hardirqs_on+0x7d/0x110 [ 317.860331][T16051] ? putname+0xb1/0x110 [ 317.860345][T16051] ? kmem_cache_free+0x127/0x6c0 [ 317.860367][T16051] ? __x64_sys_mount+0x293/0x310 [ 317.860383][T16051] __x64_sys_mount+0x293/0x310 [ 317.860400][T16051] ? __pfx___x64_sys_mount+0x10/0x10 [ 317.860430][T16051] do_syscall_64+0x123/0x790 [ 317.860448][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.860461][T16051] RIP: 0033:0x7faeceb9e159 [ 317.860472][T16051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.860484][T16051] RSP: 002b:00007faecfb37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.860497][T16051] RAX: ffffffffffffffda RBX: 00007faecee25fa0 RCX: 00007faeceb9e159 [ 317.860505][T16051] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 317.860512][T16051] RBP: 00007faecec3506b R08: 0000000000000000 R09: 0000000000000000 [ 317.860519][T16051] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 317.860526][T16051] R13: 00007faecee26038 R14: 00007faecee25fa0 R15: 00007ffe595ca698 [ 317.860540][T16051] [ 317.959819][ T5729] Bluetooth: hci3: unexpected cc 0x2005 length: 4 > 1 [ 317.959848][ T5729] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 318.033968][T16062] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 318.125173][T16069] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 318.220612][T16063] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 318.668163][T16083] FAULT_INJECTION: forcing a failure. [ 318.668163][T16083] name failslab, interval 1, probability 0, space 0, times 0 [ 318.668193][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.0.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.668221][T16083] Tainted: [L]=SOFTLOCKUP [ 318.668230][T16083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.668241][T16083] Call Trace: [ 318.668250][T16083] [ 318.668260][T16083] dump_stack_lvl+0x100/0x190 [ 318.668294][T16083] should_fail_ex.cold+0x5/0xa [ 318.668322][T16083] should_failslab+0xc2/0x120 [ 318.668350][T16083] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 318.668374][T16083] ? lock_acquire+0x1d1/0x380 [ 318.668396][T16083] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 318.668426][T16083] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 318.668461][T16083] kstrdup+0x51/0xe0 [ 318.668493][T16083] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 318.668526][T16083] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 318.668553][T16083] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 318.668581][T16083] security_mptcp_add_subflow+0x91/0x210 [ 318.668604][T16083] mptcp_subflow_create_socket+0x1a9/0xa30 [ 318.668632][T16083] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 318.668673][T16083] ? avc_has_perm_noaudit+0x145/0x3b0 [ 318.668704][T16083] ? look_up_lock_class+0x64/0x120 [ 318.668739][T16083] __mptcp_nmpc_sk+0x17f/0x880 [ 318.668764][T16083] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 318.668787][T16083] ? __lock_acquire+0x5c0/0x1f40 [ 318.668816][T16083] mptcp_connect+0x7e/0xa20 [ 318.668849][T16083] __inet_stream_connect+0x208/0xf90 [ 318.668889][T16083] ? lock_acquire+0x1d1/0x380 [ 318.668912][T16083] ? __pfx___inet_stream_connect+0x10/0x10 [ 318.668943][T16083] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 318.668978][T16083] ? __local_bh_enable_ip+0xa5/0x120 [ 318.669007][T16083] inet_stream_connect+0x57/0xa0 [ 318.669039][T16083] __sys_connect_file+0x146/0x1a0 [ 318.669066][T16083] __sys_connect+0x141/0x170 [ 318.669088][T16083] ? __pfx___sys_connect+0x10/0x10 [ 318.669129][T16083] __x64_sys_connect+0x72/0xb0 [ 318.669151][T16083] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.669178][T16083] do_syscall_64+0x123/0x790 [ 318.669209][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.669231][T16083] RIP: 0033:0x7fac4899e159 [ 318.669249][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.669270][T16083] RSP: 002b:00007fac49862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 318.669292][T16083] RAX: ffffffffffffffda RBX: 00007fac48c26180 RCX: 00007fac4899e159 [ 318.669307][T16083] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000006 [ 318.669321][T16083] RBP: 00007fac48a3506b R08: 0000000000000000 R09: 0000000000000000 [ 318.669334][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.669347][T16083] R13: 00007fac48c26218 R14: 00007fac48c26180 R15: 00007ffc37b9ebc8 [ 318.669375][T16083] [ 318.685038][ T44] audit: type=1400 audit(318.627:1788): avc: denied { create } for pid=16080 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.704743][ T7911] wiimote 0005:057E:0330.001C: detected device: Nintendo Wii Remote Plus (Gen 2) [ 318.719373][ T7911] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.001C/input/input75 [ 318.729812][ T7911] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.001C/input/input76 [ 318.737496][ T7911] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.001C/input/input74 [ 319.114851][ T5729] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 319.114906][ T5729] Bluetooth: hci0: Injecting HCI hardware error event [ 319.124109][ T65] Bluetooth: hci0: hardware error 0x00 [ 319.332241][ T44] audit: type=1326 audit(319.267:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16086 comm="syz.1.3481" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2c79e159 code=0x0 [ 319.564043][ T44] audit: type=1400 audit(319.497:1790): avc: denied { map } for pid=16091 comm="syz.1.3482" path="socket:[61665]" dev="sockfs" ino=61665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.807901][T16102] FAULT_INJECTION: forcing a failure. [ 319.807901][T16102] name failslab, interval 1, probability 0, space 0, times 0 [ 319.807933][T16102] CPU: 0 UID: 0 PID: 16102 Comm: syz.1.3487 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.807956][T16102] Tainted: [L]=SOFTLOCKUP [ 319.807962][T16102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.807974][T16102] Call Trace: [ 319.807981][T16102] [ 319.807989][T16102] dump_stack_lvl+0x100/0x190 [ 319.808023][T16102] should_fail_ex.cold+0x5/0xa [ 319.808051][T16102] should_failslab+0xc2/0x120 [ 319.808076][T16102] __kmalloc_cache_noprof+0x91/0x6d0 [ 319.808104][T16102] ? avc_has_perm+0x135/0x1e0 [ 319.808123][T16102] ? usbdev_open+0x9d/0x870 [ 319.808136][T16102] usbdev_open+0x9d/0x870 [ 319.808147][T16102] ? lock_acquire+0x1d1/0x380 [ 319.808159][T16102] ? kobject_get_unless_zero+0x156/0x200 [ 319.808171][T16102] ? __pfx_usbdev_open+0x10/0x10 [ 319.808181][T16102] ? chrdev_open+0x10b/0x6a0 [ 319.808195][T16102] ? chrdev_open+0x10b/0x6a0 [ 319.808210][T16102] ? __pfx_usbdev_open+0x10/0x10 [ 319.808221][T16102] chrdev_open+0x234/0x6a0 [ 319.808235][T16102] ? __pfx_chrdev_open+0x10/0x10 [ 319.808249][T16102] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 319.808270][T16102] do_dentry_open+0x6ab/0x14d0 [ 319.808282][T16102] ? __pfx_chrdev_open+0x10/0x10 [ 319.808298][T16102] vfs_open+0x82/0x3f0 [ 319.808329][T16102] path_openat+0x19fa/0x2440 [ 319.808346][T16102] ? __pfx_path_openat+0x10/0x10 [ 319.808364][T16102] do_file_open+0x20e/0x430 [ 319.808379][T16102] ? __pfx_do_file_open+0x10/0x10 [ 319.808402][T16102] ? _raw_spin_unlock+0x28/0x50 [ 319.808416][T16102] ? alloc_fd+0x471/0x7a0 [ 319.808433][T16102] do_sys_openat2+0x10f/0x1e0 [ 319.808449][T16102] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.808463][T16102] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 319.808481][T16102] __x64_sys_openat+0x12d/0x210 [ 319.808498][T16102] ? __pfx___x64_sys_openat+0x10/0x10 [ 319.808518][T16102] do_syscall_64+0x123/0x790 [ 319.808534][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.808546][T16102] RIP: 0033:0x7f4b2c75e98e [ 319.808556][T16102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.808567][T16102] RSP: 002b:00007f4b2d71fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.808579][T16102] RAX: ffffffffffffffda RBX: 00007f4b2d7206c0 RCX: 00007f4b2c75e98e [ 319.808586][T16102] RDX: 0000000000040000 RSI: 00007f4b2d71fc00 RDI: ffffffffffffff9c [ 319.808593][T16102] RBP: 00007f4b2d71fc00 R08: 0000000000000000 R09: 0000000000000000 [ 319.808600][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 319.808606][T16102] R13: 00007f4b2ca26038 R14: 00007f4b2ca25fa0 R15: 00007ffd37da8148 [ 319.808620][T16102] [ 319.850529][T16104] __nla_validate_parse: 4 callbacks suppressed [ 319.850540][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 319.961849][ T44] audit: type=1400 audit(319.897:1791): avc: denied { read write } for pid=16107 comm="syz.1.3490" name="usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.961900][ T44] audit: type=1400 audit(319.897:1792): avc: denied { open } for pid=16107 comm="syz.1.3490" path="/dev/usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.973085][ T44] audit: type=1400 audit(319.907:1793): avc: denied { ioctl } for pid=16107 comm="syz.1.3490" path="/dev/usbmon9" dev="devtmpfs" ino=764 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 320.022561][T16108] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3490'. [ 320.023432][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 320.116604][ T44] audit: type=1400 audit(320.057:1794): avc: denied { read } for pid=16112 comm="syz.1.3492" name="/" dev="configfs" ino=3101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.178059][T16118] FAULT_INJECTION: forcing a failure. [ 320.178059][T16118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.178081][T16118] CPU: 2 UID: 0 PID: 16118 Comm: syz.1.3494 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.178098][T16118] Tainted: [L]=SOFTLOCKUP [ 320.178103][T16118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.178114][T16118] Call Trace: [ 320.178120][T16118] [ 320.178128][T16118] dump_stack_lvl+0x100/0x190 [ 320.178159][T16118] should_fail_ex.cold+0x5/0xa [ 320.178188][T16118] _copy_from_user+0x2e/0xd0 [ 320.178213][T16118] input_event_from_user+0x123/0x310 [ 320.178246][T16118] ? __pfx_input_event_from_user+0x10/0x10 [ 320.178277][T16118] ? __pfx___might_resched+0x10/0x10 [ 320.178297][T16118] ? input_inject_event+0x198/0x380 [ 320.178320][T16118] evdev_write+0x342/0x610 [ 320.178342][T16118] ? __pfx_evdev_write+0x10/0x10 [ 320.178361][T16118] ? bpf_lsm_file_permission+0x9/0x10 [ 320.178377][T16118] ? security_file_permission+0x76/0x210 [ 320.178392][T16118] ? rw_verify_area+0xce/0x6d0 [ 320.178413][T16118] vfs_write+0x2aa/0x1050 [ 320.178425][T16118] ? __pfx_evdev_write+0x10/0x10 [ 320.178448][T16118] ? lock_acquire+0x1d1/0x380 [ 320.178461][T16118] ? __fget_files+0x34/0x3d0 [ 320.178476][T16118] ? __pfx_vfs_write+0x10/0x10 [ 320.178487][T16118] ? find_held_lock+0x2b/0x80 [ 320.178503][T16118] ? __fget_files+0x215/0x3d0 [ 320.178517][T16118] ? __fget_files+0x215/0x3d0 [ 320.178534][T16118] ? __fget_files+0x21f/0x3d0 [ 320.178553][T16118] ksys_write+0x1f8/0x250 [ 320.178566][T16118] ? __pfx_ksys_write+0x10/0x10 [ 320.178582][T16118] do_syscall_64+0x123/0x790 [ 320.178601][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.178613][T16118] RIP: 0033:0x7f4b2c79e159 [ 320.178624][T16118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.178636][T16118] RSP: 002b:00007f4b2d720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.178648][T16118] RAX: ffffffffffffffda RBX: 00007f4b2ca25fa0 RCX: 00007f4b2c79e159 [ 320.178656][T16118] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 320.178663][T16118] RBP: 00007f4b2d720090 R08: 0000000000000000 R09: 0000000000000000 [ 320.178670][T16118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.178677][T16118] R13: 00007f4b2ca26038 R14: 00007f4b2ca25fa0 R15: 00007ffd37da8148 [ 320.178693][T16118] [ 320.704837][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.737818][T16129] FAULT_INJECTION: forcing a failure. [ 320.737818][T16129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.737840][T16129] CPU: 0 UID: 0 PID: 16129 Comm: syz.1.3499 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.737856][T16129] Tainted: [L]=SOFTLOCKUP [ 320.737861][T16129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.737867][T16129] Call Trace: [ 320.737872][T16129] [ 320.737877][T16129] dump_stack_lvl+0x100/0x190 [ 320.737897][T16129] should_fail_ex.cold+0x5/0xa [ 320.737913][T16129] _copy_from_user+0x2e/0xd0 [ 320.737927][T16129] sctp_getsockopt_probe_interval+0xcb/0x3c0 [ 320.737942][T16129] ? __pfx_sctp_getsockopt_probe_interval+0x10/0x10 [ 320.737964][T16129] ? __local_bh_enable_ip+0xa5/0x120 [ 320.737978][T16129] sctp_getsockopt+0x1826/0x7110 [ 320.737991][T16129] ? avc_has_perm_noaudit+0x56/0x3b0 [ 320.738008][T16129] ? find_held_lock+0x2b/0x80 [ 320.738024][T16129] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 320.738039][T16129] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 320.738056][T16129] ? __pfx_sctp_getsockopt+0x10/0x10 [ 320.738071][T16129] ? __lock_acquire+0x5c0/0x1f40 [ 320.738083][T16129] ? avc_has_perm+0x135/0x1e0 [ 320.738098][T16129] ? __pfx_avc_has_perm+0x10/0x10 [ 320.738117][T16129] ? lock_acquire+0x1d1/0x380 [ 320.738128][T16129] ? __might_fault+0xc5/0x140 [ 320.738145][T16129] ? find_held_lock+0x2b/0x80 [ 320.738160][T16129] ? __might_fault+0xc5/0x140 [ 320.738176][T16129] ? __might_fault+0xc5/0x140 [ 320.738196][T16129] ? _copy_from_user+0x59/0xd0 [ 320.738208][T16129] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 320.738226][T16129] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 320.738246][T16129] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 320.738264][T16129] do_sock_getsockopt+0x50a/0x6e0 [ 320.738283][T16129] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 320.738302][T16129] ? __fget_files+0x34/0x3d0 [ 320.738316][T16129] ? find_held_lock+0x2b/0x80 [ 320.738335][T16129] ? __fget_files+0x21f/0x3d0 [ 320.738352][T16129] __sys_getsockopt+0x148/0x260 [ 320.738369][T16129] ? __x64_sys_getsockopt+0xbd/0x160 [ 320.738383][T16129] __x64_sys_getsockopt+0xbd/0x160 [ 320.738395][T16129] ? do_syscall_64+0xae/0x790 [ 320.738410][T16129] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.738431][T16129] do_syscall_64+0x123/0x790 [ 320.738447][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.738459][T16129] RIP: 0033:0x7f4b2c79e159 [ 320.738468][T16129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.738479][T16129] RSP: 002b:00007f4b2d720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 320.738490][T16129] RAX: ffffffffffffffda RBX: 00007f4b2ca25fa0 RCX: 00007f4b2c79e159 [ 320.738498][T16129] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 320.738504][T16129] RBP: 00007f4b2d720090 R08: 0000200000000300 R09: 0000000000000000 [ 320.738511][T16129] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 320.738518][T16129] R13: 00007f4b2ca26038 R14: 00007f4b2ca25fa0 R15: 00007ffd37da8148 [ 320.738532][T16129] [ 320.842110][ T6614] Bluetooth: hci4: Frame reassembly failed (-84) [ 321.184619][ T65] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.989533][ C0] net_ratelimit: 233 callbacks suppressed [ 322.866887][ T5729] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 322.866893][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 323.058557][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 323.058574][ T44] audit: type=1400 audit(322.997:1799): avc: denied { write } for pid=16142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.113096][ T44] audit: type=1400 audit(323.047:1800): avc: denied { write } for pid=16145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.355823][ T44] audit: type=1400 audit(323.297:1801): avc: denied { write } for pid=16148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.408147][ T44] audit: type=1400 audit(323.347:1802): avc: denied { write } for pid=16151 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.531258][ T44] audit: type=1400 audit(323.467:1803): avc: denied { write } for pid=16154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.585531][ T44] audit: type=1400 audit(323.527:1804): avc: denied { write } for pid=16157 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.011987][T16161] FAULT_INJECTION: forcing a failure. [ 324.011987][T16161] name failslab, interval 1, probability 0, space 0, times 0 [ 324.012006][T16161] CPU: 2 UID: 0 PID: 16161 Comm: syz.3.3502 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.012022][T16161] Tainted: [L]=SOFTLOCKUP [ 324.012026][T16161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.012033][T16161] Call Trace: [ 324.012037][T16161] [ 324.012042][T16161] dump_stack_lvl+0x100/0x190 [ 324.012064][T16161] should_fail_ex.cold+0x5/0xa [ 324.012080][T16161] should_failslab+0xc2/0x120 [ 324.012096][T16161] __kmalloc_noprof+0xfc/0x840 [ 324.012107][T16161] ? rcu_is_watching+0x13/0xc0 [ 324.012123][T16161] ? tomoyo_realpath_from_path+0xb6/0x690 [ 324.012141][T16161] tomoyo_realpath_from_path+0xb6/0x690 [ 324.012158][T16161] tomoyo_path_number_perm+0x23c/0x580 [ 324.012169][T16161] ? tomoyo_path_number_perm+0x22e/0x580 [ 324.012182][T16161] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.012198][T16161] ? __lock_acquire+0x5c0/0x1f40 [ 324.012216][T16161] ? __fget_files+0x34/0x3d0 [ 324.012231][T16161] ? find_held_lock+0x2b/0x80 [ 324.012246][T16161] ? hook_file_ioctl_common+0x140/0x440 [ 324.012264][T16161] ? __fget_files+0x21f/0x3d0 [ 324.012280][T16161] security_file_ioctl+0xd3/0x230 [ 324.012293][T16161] __x64_sys_ioctl+0xb7/0x210 [ 324.012306][T16161] do_syscall_64+0x123/0x790 [ 324.012323][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.012335][T16161] RIP: 0033:0x7fdbebf9e159 [ 324.012346][T16161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.012356][T16161] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.012368][T16161] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 324.012375][T16161] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 324.012382][T16161] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.012388][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.012395][T16161] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 324.012409][T16161] [ 324.012414][T16161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.036589][ T65] Bluetooth: hci4: sending frame failed (-49) [ 324.041291][ T5729] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 326.227190][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 326.228682][ T5729] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 326.353134][T16176] FAULT_INJECTION: forcing a failure. [ 326.353134][T16176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.353153][T16176] CPU: 2 UID: 0 PID: 16176 Comm: syz.3.3508 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.353169][T16176] Tainted: [L]=SOFTLOCKUP [ 326.353173][T16176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.353180][T16176] Call Trace: [ 326.353185][T16176] [ 326.353189][T16176] dump_stack_lvl+0x100/0x190 [ 326.353209][T16176] should_fail_ex.cold+0x5/0xa [ 326.353225][T16176] _copy_from_user+0x2e/0xd0 [ 326.353238][T16176] vhost_net_ioctl+0x41f/0x1910 [ 326.353257][T16176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 326.353268][T16176] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 326.353283][T16176] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 326.353299][T16176] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 326.353315][T16176] ? __fget_files+0x34/0x3d0 [ 326.353338][T16176] ? selinux_file_ioctl+0xb6/0x290 [ 326.353357][T16176] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 326.353400][T16176] __x64_sys_ioctl+0x18e/0x210 [ 326.353423][T16176] do_syscall_64+0x123/0x790 [ 326.353449][T16176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.353461][T16176] RIP: 0033:0x7fdbebf9e159 [ 326.353471][T16176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.353482][T16176] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.353494][T16176] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 326.353501][T16176] RDX: 0000200000000000 RSI: 000000004008af83 RDI: 0000000000000003 [ 326.353508][T16176] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.353515][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.353521][T16176] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 326.353542][T16176] [ 326.519128][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 326.739076][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 326.739091][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 326.739100][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 326.817146][ T44] audit: type=1400 audit(326.757:1805): avc: denied { getopt } for pid=16190 comm="syz.3.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.882886][ T44] audit: type=1400 audit(326.817:1806): avc: denied { mount } for pid=16194 comm="syz.3.3517" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 327.107884][ C0] net_ratelimit: 102 callbacks suppressed [ 327.144424][ T5831] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 327.304584][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 327.305329][ T5831] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.305896][ T5831] usb 8-1: config 0 has no interfaces? [ 327.306334][ T5831] usb 8-1: config 0 has no interfaces? [ 327.306780][ T5831] usb 8-1: config 0 has no interfaces? [ 327.309376][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.309393][ T5831] usb 8-1: Product: syz [ 327.309407][ T5831] usb 8-1: Manufacturer: syz [ 327.309420][ T5831] usb 8-1: SerialNumber: syz [ 327.311920][ T5831] usb 8-1: config 0 descriptor?? [ 327.561412][T16195] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 327.583100][ T5831] usb 8-1: USB disconnect, device number 10 [ 328.199881][T16201] FAULT_INJECTION: forcing a failure. [ 328.199881][T16201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.199903][T16201] CPU: 2 UID: 0 PID: 16201 Comm: syz.3.3520 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.199919][T16201] Tainted: [L]=SOFTLOCKUP [ 328.199923][T16201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.199931][T16201] Call Trace: [ 328.199935][T16201] [ 328.199940][T16201] dump_stack_lvl+0x100/0x190 [ 328.199960][T16201] should_fail_ex.cold+0x5/0xa [ 328.199979][T16201] _copy_to_user+0x32/0xd0 [ 328.199994][T16201] simple_read_from_buffer+0xcb/0x170 [ 328.200010][T16201] proc_fail_nth_read+0x1af/0x230 [ 328.200026][T16201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.200049][T16201] ? rw_verify_area+0xce/0x6d0 [ 328.200077][T16201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.200100][T16201] vfs_read+0x1e4/0xb40 [ 328.200120][T16201] ? lock_acquire+0x1d1/0x380 [ 328.200140][T16201] ? __fget_files+0x34/0x3d0 [ 328.200163][T16201] ? __pfx_vfs_read+0x10/0x10 [ 328.200173][T16201] ? find_held_lock+0x2b/0x80 [ 328.200190][T16201] ? __fget_files+0x215/0x3d0 [ 328.200206][T16201] ? __fget_files+0x21f/0x3d0 [ 328.200224][T16201] ksys_read+0x12a/0x250 [ 328.200235][T16201] ? __pfx_ksys_read+0x10/0x10 [ 328.200251][T16201] do_syscall_64+0x123/0x790 [ 328.200268][T16201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.200280][T16201] RIP: 0033:0x7fdbebf5e98e [ 328.200289][T16201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.200301][T16201] RSP: 002b:00007fdbecdd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.200312][T16201] RAX: ffffffffffffffda RBX: 00007fdbecdd76c0 RCX: 00007fdbebf5e98e [ 328.200320][T16201] RDX: 000000000000000f RSI: 00007fdbecdd70a0 RDI: 0000000000000004 [ 328.200326][T16201] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 328.200333][T16201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.200340][T16201] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 328.200354][T16201] [ 328.592085][ T44] audit: type=1400 audit(328.527:1807): avc: denied { ioctl } for pid=16218 comm="syz.3.3528" path="socket:[61921]" dev="sockfs" ino=61921 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.129109][T16230] FAULT_INJECTION: forcing a failure. [ 330.129109][T16230] name failslab, interval 1, probability 0, space 0, times 0 [ 330.129134][T16230] CPU: 0 UID: 0 PID: 16230 Comm: syz.3.3533 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.129160][T16230] Tainted: [L]=SOFTLOCKUP [ 330.129167][T16230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.129178][T16230] Call Trace: [ 330.129185][T16230] [ 330.129194][T16230] dump_stack_lvl+0x100/0x190 [ 330.129225][T16230] should_fail_ex.cold+0x5/0xa [ 330.129253][T16230] should_failslab+0xc2/0x120 [ 330.129277][T16230] __kmalloc_cache_noprof+0x91/0x6d0 [ 330.129306][T16230] ? ceph_auth_init+0x4d/0x280 [ 330.129330][T16230] ceph_auth_init+0x4d/0x280 [ 330.129351][T16230] ceph_monc_init+0x50b/0xcd0 [ 330.129388][T16230] ceph_create_client+0x25e/0x370 [ 330.129409][T16230] ceph_get_tree+0x1a4/0x1fd0 [ 330.129442][T16230] ? bpf_lsm_capable+0x9/0x10 [ 330.129469][T16230] ? security_capable+0x80/0x260 [ 330.129498][T16230] vfs_get_tree+0x92/0x320 [ 330.129528][T16230] vfs_cmd_create+0xd7/0x2a0 [ 330.129549][T16230] __do_sys_fsconfig+0x55a/0xcb0 [ 330.129570][T16230] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 330.129588][T16230] ? fput+0x7c/0x100 [ 330.129623][T16230] do_syscall_64+0x123/0x790 [ 330.129651][T16230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.129670][T16230] RIP: 0033:0x7fdbebf9e159 [ 330.129685][T16230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.129702][T16230] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 330.129721][T16230] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 330.129734][T16230] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 330.129772][T16230] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 330.129784][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.129795][T16230] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 330.129821][T16230] [ 330.896430][ T44] audit: type=1400 audit(330.827:1808): avc: denied { bind } for pid=16259 comm="syz.3.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.971842][ T44] audit: type=1400 audit(330.907:1809): avc: denied { getattr } for pid=16263 comm="syz.3.3547" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.973408][ T44] audit: type=1400 audit(330.907:1810): avc: denied { read write } for pid=16263 comm="syz.3.3547" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.973436][ T44] audit: type=1400 audit(330.907:1811): avc: denied { open } for pid=16263 comm="syz.3.3547" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.973458][ T44] audit: type=1400 audit(330.907:1812): avc: denied { ioctl } for pid=16263 comm="syz.3.3547" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.264615][ T44] audit: type=1400 audit(331.197:1813): avc: denied { ioctl } for pid=16270 comm="syz.3.3550" path="socket:[62620]" dev="sockfs" ino=62620 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.391798][T16276] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 332.184934][ T5801] net_ratelimit: 91 callbacks suppressed [ 332.345669][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3553'. [ 332.348521][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3553'. [ 333.589191][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.590171][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.591022][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.592105][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.593556][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.104075][T16290] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.104152][T16290] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.104475][T16290] bridge_slave_0: entered allmulticast mode [ 334.105371][T16290] bridge_slave_0: entered promiscuous mode [ 334.106733][T16290] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.106839][T16290] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.107006][T16290] bridge_slave_1: entered allmulticast mode [ 334.107951][T16290] bridge_slave_1: entered promiscuous mode [ 334.140261][T16290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.142137][T16290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.178101][T16290] team0: Port device team_slave_0 added [ 334.179654][T16290] team0: Port device team_slave_1 added [ 334.218406][T16290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.218416][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.218436][T16290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.220179][T16290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.220189][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.220210][T16290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.299104][T16290] hsr_slave_0: entered promiscuous mode [ 334.300188][T16290] hsr_slave_1: entered promiscuous mode [ 334.300917][T16290] debugfs: 'hsr0' already exists in 'hsr' [ 334.300934][T16290] Cannot create hsr debugfs directory [ 334.683786][ T5729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.687423][ T5729] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.692830][ T5729] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.696105][ T5729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.697434][ T5729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.347140][T16308] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.347220][T16308] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.347549][T16308] bridge_slave_0: entered allmulticast mode [ 335.349024][T16308] bridge_slave_0: entered promiscuous mode [ 335.350704][T16308] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.350773][T16308] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.350852][T16308] bridge_slave_1: entered allmulticast mode [ 335.351834][T16308] bridge_slave_1: entered promiscuous mode [ 335.385874][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.387773][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.415390][T16308] team0: Port device team_slave_0 added [ 335.416890][T16308] team0: Port device team_slave_1 added [ 335.444793][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.444800][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.444813][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.445991][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.445998][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.446011][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.473159][T16284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.522155][T16290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 335.578211][T16290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.578684][T16290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.608007][T16290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.638015][T16308] hsr_slave_0: entered promiscuous mode [ 335.642374][T16308] hsr_slave_1: entered promiscuous mode [ 335.645300][T16308] debugfs: 'hsr0' already exists in 'hsr' [ 335.645315][T16308] Cannot create hsr debugfs directory [ 335.645930][T16290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.652701][T16290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.653300][T16290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.668286][ T65] Bluetooth: hci4: command tx timeout [ 335.672630][T16290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.968565][T16290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.002708][T16290] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.009269][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.009311][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.018095][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.018136][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.195649][T16308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 336.200588][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.201170][T16308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 336.211404][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.212332][T16308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 336.230474][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.231564][T16308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 336.247580][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.343773][T16308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.361416][T16308] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.367176][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.367218][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.378105][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.378177][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.430500][T16290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.736756][T16290] veth0_vlan: entered promiscuous mode [ 336.747376][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.759076][T16290] veth1_vlan: entered promiscuous mode [ 336.763666][T16374] netlink: 'syz.3.3560': attribute type 10 has an invalid length. [ 336.784559][ T65] Bluetooth: hci5: command tx timeout [ 336.789421][T16290] veth0_macvtap: entered promiscuous mode [ 336.792831][T16290] veth1_macvtap: entered promiscuous mode [ 336.810052][T16290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.823221][T16290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.866384][ T5801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.866556][ T5801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.866752][ T5801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.867018][ T5801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.017230][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.017238][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.056609][ T6614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.056618][ T6614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.078380][T16308] veth0_vlan: entered promiscuous mode [ 337.090023][T16308] veth1_vlan: entered promiscuous mode [ 337.137881][T16308] veth0_macvtap: entered promiscuous mode [ 337.141792][T16308] veth1_macvtap: entered promiscuous mode [ 337.158954][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.170691][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.196287][T16308] net_ratelimit: 260 callbacks suppressed [ 337.336587][ T5817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.336614][ T5817] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.336633][ T5817] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.336652][ T5817] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.365651][ T6642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.365660][ T6642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.399797][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.399813][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.547207][ T44] audit: type=1400 audit(337.487:1814): avc: denied { mounton } for pid=16382 comm="syz.7.3561" path="/proc/5/task" dev="proc" ino=64522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 337.547846][ T44] audit: type=1400 audit(337.487:1815): avc: denied { associate } for pid=16388 comm="syz.7.3561" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 337.754470][ T65] Bluetooth: hci4: command tx timeout [ 337.761464][ T44] audit: type=1400 audit(337.697:1816): avc: denied { execstack } for pid=16394 comm="syz.3.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 337.761656][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3565'. [ 337.883956][ T44] audit: type=1400 audit(337.817:1817): avc: denied { audit_control } for pid=16400 comm="syz.8.3566" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 337.894744][T16402] netlink: 4136 bytes leftover after parsing attributes in process `syz.8.3566'. [ 337.897843][ T5878] wiimote 0005:057E:0330.001D: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 337.920375][ T5878] wiimote 0005:057E:0330.001D: New device registered [ 337.969902][T16399] wiimote 0005:057E:0330.001D: Device removed [ 338.007193][T16403] fido_id[16403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 338.147674][ T5729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.160243][ T5729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.162238][ T5729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.173556][ T5729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.177590][ T5729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.258177][T16409] syz_tun: entered allmulticast mode [ 338.338721][T16409] dvmrp6: entered allmulticast mode [ 338.350919][T16416] FAULT_INJECTION: forcing a failure. [ 338.350919][T16416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.350947][T16416] CPU: 0 UID: 0 PID: 16416 Comm: syz.8.3571 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.350970][T16416] Tainted: [L]=SOFTLOCKUP [ 338.350977][T16416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.350987][T16416] Call Trace: [ 338.350994][T16416] [ 338.351000][T16416] dump_stack_lvl+0x100/0x190 [ 338.351031][T16416] should_fail_ex.cold+0x5/0xa [ 338.351058][T16416] _copy_from_user+0x2e/0xd0 [ 338.351077][T16416] vhost_net_ioctl+0x41f/0x1910 [ 338.351105][T16416] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 338.351121][T16416] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 338.351143][T16416] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 338.351168][T16416] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 338.351191][T16416] ? __fget_files+0x34/0x3d0 [ 338.351222][T16416] ? selinux_file_ioctl+0xb6/0x290 [ 338.351241][T16416] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 338.351275][T16416] __x64_sys_ioctl+0x18e/0x210 [ 338.351294][T16416] do_syscall_64+0x123/0x790 [ 338.351320][T16416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.351338][T16416] RIP: 0033:0x7ff08019e159 [ 338.351353][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.351370][T16416] RSP: 002b:00007ff0810bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.351388][T16416] RAX: ffffffffffffffda RBX: 00007ff080425fa0 RCX: 00007ff08019e159 [ 338.351401][T16416] RDX: 0000200000000000 RSI: 000000004008af83 RDI: 0000000000000003 [ 338.351411][T16416] RBP: 00007ff0810bc090 R08: 0000000000000000 R09: 0000000000000000 [ 338.351422][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.351433][T16416] R13: 00007ff080426038 R14: 00007ff080425fa0 R15: 00007fff5644cf58 [ 338.351456][T16416] [ 338.373335][T16408] syz_tun: left allmulticast mode [ 338.603943][T16423] netlink: 'syz.7.3572': attribute type 10 has an invalid length. [ 338.648774][T16423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.653391][T16423] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 338.866368][ T65] Bluetooth: hci5: command tx timeout [ 338.900798][T16433] Cannot find del_set index 3 as target [ 338.952134][ T5878] wiimote 0005:057E:0330.001D: detected device: Nintendo Wii Remote Plus (Gen 2) [ 338.972849][T16440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3575'. [ 339.052974][ T5878] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.001D/input/input78 [ 339.128822][ T5878] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.001D/input/input79 [ 339.150085][ T5878] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.001D/input/input77 [ 339.258549][T16447] syzkaller0: entered promiscuous mode [ 339.258558][T16447] syzkaller0: entered allmulticast mode [ 339.595925][T16462] netlink: 'syz.7.3581': attribute type 10 has an invalid length. [ 339.652832][T16406] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.652893][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.652974][T16406] bridge_slave_0: entered allmulticast mode [ 339.653894][T16406] bridge_slave_0: entered promiscuous mode [ 339.659024][T16406] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.660591][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.660677][T16406] bridge_slave_1: entered allmulticast mode [ 339.661505][T16406] bridge_slave_1: entered promiscuous mode [ 339.760243][T16406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.766277][T16406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.824679][ T65] Bluetooth: hci4: command tx timeout [ 339.857240][T16406] team0: Port device team_slave_0 added [ 339.868504][T16406] team0: Port device team_slave_1 added [ 339.869356][T16469] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3583'. [ 339.935193][T16406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.935200][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.935214][T16406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.936915][T16406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.936922][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.936934][T16406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.077413][T16406] hsr_slave_0: entered promiscuous mode [ 340.081553][T16406] hsr_slave_1: entered promiscuous mode [ 340.082711][T16406] debugfs: 'hsr0' already exists in 'hsr' [ 340.082721][T16406] Cannot create hsr debugfs directory [ 340.305047][ T65] Bluetooth: hci6: command tx timeout [ 340.443513][T16488] FAULT_INJECTION: forcing a failure. [ 340.443513][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.443532][T16488] CPU: 2 UID: 0 PID: 16488 Comm: syz.8.3588 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.443547][T16488] Tainted: [L]=SOFTLOCKUP [ 340.443552][T16488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.443558][T16488] Call Trace: [ 340.443562][T16488] [ 340.443567][T16488] dump_stack_lvl+0x100/0x190 [ 340.443587][T16488] should_fail_ex.cold+0x5/0xa [ 340.443603][T16488] _copy_from_iter+0x1f4/0x1690 [ 340.443617][T16488] ? __asan_memset+0x23/0x50 [ 340.443628][T16488] ? __pfx__copy_from_iter+0x10/0x10 [ 340.443641][T16488] ? __pfx___alloc_skb+0x10/0x10 [ 340.443659][T16488] netlink_sendmsg+0x808/0xda0 [ 340.443674][T16488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.443688][T16488] ? selinux_socket_sendmsg+0x198/0x2f0 [ 340.443703][T16488] ____sys_sendmsg+0xa4d/0xbe0 [ 340.443718][T16488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.443732][T16488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.443767][T16488] ? lock_acquire+0x1d1/0x380 [ 340.443781][T16488] ? get_pid_task+0x2a/0x250 [ 340.443798][T16488] ___sys_sendmsg+0x190/0x1e0 [ 340.443816][T16488] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.443834][T16488] ? get_pid_task+0x106/0x250 [ 340.443854][T16488] ? find_held_lock+0x2b/0x80 [ 340.443878][T16488] __sys_sendmsg+0x160/0x210 [ 340.443892][T16488] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.443913][T16488] do_syscall_64+0x123/0x790 [ 340.443930][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.443942][T16488] RIP: 0033:0x7ff08019e159 [ 340.443951][T16488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.443962][T16488] RSP: 002b:00007ff0810bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.443974][T16488] RAX: ffffffffffffffda RBX: 00007ff080425fa0 RCX: 00007ff08019e159 [ 340.443981][T16488] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 340.443987][T16488] RBP: 00007ff0810bc090 R08: 0000000000000000 R09: 0000000000000000 [ 340.443994][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.444000][T16488] R13: 00007ff080426038 R14: 00007ff080425fa0 R15: 00007fff5644cf58 [ 340.444014][T16488] [ 340.555361][T16406] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 340.570543][T16406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.571038][T16406] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 340.582789][T16406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.583177][T16406] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 340.596159][T16406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.598809][T16406] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 340.612113][T16406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.685586][T16406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.693060][T16406] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.707023][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.707089][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.711247][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.711287][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.006501][T16406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.082587][T16524] trusted_key: encrypted_key: insufficient parameters specified [ 341.169597][T16406] veth0_vlan: entered promiscuous mode [ 341.173065][T16406] veth1_vlan: entered promiscuous mode [ 341.196340][T16406] veth0_macvtap: entered promiscuous mode [ 341.198517][T16406] veth1_macvtap: entered promiscuous mode [ 341.209635][T16406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.227738][T16406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.244748][ T5801] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.360546][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.360558][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.410467][ T6614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.410475][ T6614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.425841][ T5817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.425924][ T5817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.426194][ T5817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.469390][T16535] FAULT_INJECTION: forcing a failure. [ 341.469390][T16535] name failslab, interval 1, probability 0, space 0, times 0 [ 341.469408][T16535] CPU: 0 UID: 0 PID: 16535 Comm: syz.9.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.469423][T16535] Tainted: [L]=SOFTLOCKUP [ 341.469428][T16535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.469435][T16535] Call Trace: [ 341.469439][T16535] [ 341.469444][T16535] dump_stack_lvl+0x100/0x190 [ 341.469464][T16535] should_fail_ex.cold+0x5/0xa [ 341.469480][T16535] should_failslab+0xc2/0x120 [ 341.469495][T16535] __kmalloc_noprof+0xfc/0x840 [ 341.469508][T16535] ? lsm_blob_alloc+0x68/0x90 [ 341.469526][T16535] lsm_blob_alloc+0x68/0x90 [ 341.469541][T16535] security_sk_alloc+0x2d/0x290 [ 341.469553][T16535] sk_prot_alloc+0x1d1/0x2a0 [ 341.469572][T16535] sk_alloc+0x36/0xe80 [ 341.469588][T16535] inet6_create+0x385/0x12b0 [ 341.469601][T16535] ? inet6_create+0x7f/0x12b0 [ 341.469614][T16535] __sock_create+0x339/0x860 [ 341.469633][T16535] udp_sock_create6+0xc7/0x6a0 [ 341.469650][T16535] ? netlink_rcv_skb+0x159/0x420 [ 341.469662][T16535] ? netlink_unicast+0x585/0x850 [ 341.469674][T16535] ? __pfx_udp_sock_create6+0x10/0x10 [ 341.469712][T16535] ? __sys_sendmsg+0x160/0x210 [ 341.469726][T16535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.469741][T16535] ? __asan_memcpy+0x3c/0x60 [ 341.469754][T16535] gtp_create_sock+0x1fd/0x430 [ 341.469771][T16535] ? __pfx_gtp_create_sock+0x10/0x10 [ 341.469796][T16535] ? __kmalloc_noprof+0x350/0x840 [ 341.469810][T16535] gtp_create_sockets+0x27/0x140 [ 341.469825][T16535] gtp_newlink+0x475/0x13f0 [ 341.469843][T16535] ? __pfx_gtp_newlink+0x10/0x10 [ 341.469858][T16535] rtnl_newlink+0x1697/0x2620 [ 341.469878][T16535] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.469892][T16535] ? avc_has_perm_noaudit+0x56/0x3b0 [ 341.469909][T16535] ? find_held_lock+0x2b/0x80 [ 341.469925][T16535] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 341.469940][T16535] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 341.469969][T16535] ? lock_acquire+0x1d1/0x380 [ 341.469981][T16535] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 341.469996][T16535] ? find_held_lock+0x2b/0x80 [ 341.470011][T16535] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 341.470025][T16535] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 341.470041][T16535] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.470056][T16535] rtnetlink_rcv_msg+0x95e/0xe90 [ 341.470073][T16535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.470092][T16535] ? ref_tracker_free+0x37e/0x6c0 [ 341.470109][T16535] netlink_rcv_skb+0x159/0x420 [ 341.470121][T16535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.470138][T16535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.470155][T16535] ? netlink_deliver_tap+0x1ae/0xcc0 [ 341.470170][T16535] netlink_unicast+0x585/0x850 [ 341.470198][T16535] ? __pfx_netlink_unicast+0x10/0x10 [ 341.470214][T16535] netlink_sendmsg+0x8b0/0xda0 [ 341.470230][T16535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.470244][T16535] ? selinux_socket_sendmsg+0x198/0x2f0 [ 341.470258][T16535] ____sys_sendmsg+0xa4d/0xbe0 [ 341.470274][T16535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.470288][T16535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.470308][T16535] ? lock_acquire+0x1d1/0x380 [ 341.470319][T16535] ? get_pid_task+0x2a/0x250 [ 341.470336][T16535] ___sys_sendmsg+0x190/0x1e0 [ 341.470358][T16535] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.470376][T16535] ? get_pid_task+0x106/0x250 [ 341.470397][T16535] ? find_held_lock+0x2b/0x80 [ 341.470421][T16535] __sys_sendmsg+0x160/0x210 [ 341.470435][T16535] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.470457][T16535] do_syscall_64+0x123/0x790 [ 341.470473][T16535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.470485][T16535] RIP: 0033:0x7fa063b9e159 [ 341.470495][T16535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.470505][T16535] RSP: 002b:00007fa064af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.470517][T16535] RAX: ffffffffffffffda RBX: 00007fa063e25fa0 RCX: 00007fa063b9e159 [ 341.470524][T16535] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 341.470531][T16535] RBP: 00007fa064af9090 R08: 0000000000000000 R09: 0000000000000000 [ 341.470538][T16535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.470544][T16535] R13: 00007fa063e26038 R14: 00007fa063e25fa0 R15: 00007ffed3714398 [ 341.470559][T16535] [ 341.542325][T16537] netlink: 'syz.7.3596': attribute type 10 has an invalid length. [ 341.907544][ T65] Bluetooth: hci4: command tx timeout [ 342.114157][T16555] syzkaller0: entered promiscuous mode [ 342.114173][T16555] syzkaller0: entered allmulticast mode [ 342.225256][ C2] net_ratelimit: 587 callbacks suppressed [ 342.227230][ T65] Bluetooth: hci5: command tx timeout [ 343.116194][T16559] Console: switching to colour dummy device 80x25 [ 343.184273][ T44] audit: type=1400 audit(343.117:1818): avc: denied { bind } for pid=16563 comm="syz.8.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.189823][ T44] audit: type=1400 audit(343.127:1819): avc: denied { write } for pid=16563 comm="syz.8.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.537856][ T44] audit: type=1400 audit(343.477:1820): avc: denied { mount } for pid=16569 comm="syz.7.3607" name="/" dev="autofs" ino=65860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 343.544780][ T44] audit: type=1400 audit(343.477:1821): avc: denied { ioctl } for pid=16569 comm="syz.7.3607" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 343.570842][ T44] audit: type=1400 audit(343.517:1822): avc: denied { unmount } for pid=16290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 343.668747][T16571] could not allocate digest TFM handle sha256-asm [ 343.758534][T16581] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3606'. [ 343.824258][T16582] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.876602][ T44] audit: type=1400 audit(344.817:1823): avc: denied { map } for pid=16583 comm="syz.9.3609" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.060582][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.108759][T16590] netlink: 'syz.8.3611': attribute type 10 has an invalid length. [ 345.136082][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.137294][T16590] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 345.186511][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.239242][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 345.241911][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.302199][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.474922][ T13] bridge_slave_1: left allmulticast mode [ 345.474939][ T13] bridge_slave_1: left promiscuous mode [ 345.475106][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.497861][ T13] bridge_slave_0: left allmulticast mode [ 345.497877][ T13] bridge_slave_0: left promiscuous mode [ 345.498033][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.744115][T16594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3613'. [ 345.806658][T16596] FAULT_INJECTION: forcing a failure. [ 345.806658][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 345.809246][T16596] CPU: 0 UID: 0 PID: 16596 Comm: syz.3.3614 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.809283][T16596] Tainted: [L]=SOFTLOCKUP [ 345.809292][T16596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.809302][T16596] Call Trace: [ 345.809308][T16596] [ 345.809316][T16596] dump_stack_lvl+0x100/0x190 [ 345.809351][T16596] should_fail_ex.cold+0x5/0xa [ 345.809374][T16596] should_failslab+0xc2/0x120 [ 345.809396][T16596] kmem_cache_alloc_noprof+0x92/0x6a0 [ 345.809416][T16596] ? alloc_empty_file+0x5b/0x1c0 [ 345.809443][T16596] alloc_empty_file+0x5b/0x1c0 [ 345.809466][T16596] path_openat+0xdb/0x2440 [ 345.809491][T16596] ? __pfx_path_openat+0x10/0x10 [ 345.809518][T16596] do_file_open+0x20e/0x430 [ 345.809540][T16596] ? __pfx_do_file_open+0x10/0x10 [ 345.809575][T16596] ? _raw_spin_unlock+0x28/0x50 [ 345.809596][T16596] ? alloc_fd+0x471/0x7a0 [ 345.809623][T16596] do_sys_openat2+0x10f/0x1e0 [ 345.809647][T16596] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.809688][T16596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 345.809713][T16596] ? __fget_files+0x21f/0x3d0 [ 345.809737][T16596] __x64_sys_openat+0x12d/0x210 [ 345.809760][T16596] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.809782][T16596] ? ksys_write+0x1ac/0x250 [ 345.809807][T16596] do_syscall_64+0x123/0x790 [ 345.809831][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.809849][T16596] RIP: 0033:0x7fdbebf5e98e [ 345.809864][T16596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.809880][T16596] RSP: 002b:00007fdbecdd6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.809899][T16596] RAX: ffffffffffffffda RBX: 00007fdbecdd76c0 RCX: 00007fdbebf5e98e [ 345.809910][T16596] RDX: 0000000000000000 RSI: 00007fdbec0347a6 RDI: ffffffffffffff9c [ 345.809920][T16596] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.809931][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.809941][T16596] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 345.809964][T16596] [ 346.009474][T16599] 9pnet_virtio: no channels available for device syz [ 346.049198][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 346.064707][ T65] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 346.064868][ T65] Bluetooth: hci6: Injecting HCI hardware error event [ 346.070775][ T5729] Bluetooth: hci6: hardware error 0x00 [ 346.129811][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.140286][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.143077][ T13] bond0 (unregistering): Released all slaves [ 346.173092][ T13] bond1 (unregistering): Released all slaves [ 346.198574][ T13] bond2 (unregistering): Released all slaves [ 346.227497][ T13] bond3 (unregistering): Released all slaves [ 346.529541][ T44] audit: type=1400 audit(346.467:1824): avc: denied { block_suspend } for pid=16610 comm="syz.3.3618" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.605782][T16574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.606682][T16604] netlink: 4136 bytes leftover after parsing attributes in process `syz.8.3616'. [ 346.688080][ T44] audit: type=1400 audit(346.627:1825): avc: denied { listen } for pid=16615 comm="syz.9.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 346.739785][ T44] audit: type=1400 audit(346.677:1826): avc: denied { write } for pid=16614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.761469][ T13] hsr_slave_0: left promiscuous mode [ 346.774232][ T5730] Bluetooth: hci6: unexpected event for opcode 0x0404 [ 346.802059][ T9] wiimote 0005:057E:0330.001E: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 346.802264][ T9] wiimote 0005:057E:0330.001E: New device registered [ 346.809170][ T9] wiimote 0005:057E:0330.001E: detected device: Nintendo Wii Remote Plus (Gen 2) [ 346.809493][ T13] hsr_slave_1: left promiscuous mode [ 346.810359][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.810369][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.813292][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.813301][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.845749][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.001E/input/input81 [ 346.872462][T16619] wiimote 0005:057E:0330.001E: Device removed [ 346.878300][T16624] fido_id[16624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 346.883119][ T44] audit: type=1400 audit(346.817:1827): avc: denied { write } for pid=16625 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.889896][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.001E/input/input82 [ 346.896963][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.001E/input/input80 [ 346.919073][ T13] veth1_macvtap: left promiscuous mode [ 346.923717][ T13] veth0_macvtap: left promiscuous mode [ 346.923782][ T13] veth1_vlan: left promiscuous mode [ 346.923813][ T13] veth0_vlan: left promiscuous mode [ 347.183086][ T13] team0 (unregistering): Port device team_slave_1 removed [ 347.192605][ T13] team0 (unregistering): Port device team_slave_0 removed [ 347.424359][ C2] net_ratelimit: 208 callbacks suppressed [ 347.540735][T16637] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3622'. [ 347.648153][T16640] netlink: 'syz.8.3624': attribute type 10 has an invalid length. [ 347.894169][ T65] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 347.947111][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3629'. [ 348.010621][T16658] comedi comedi1: comedi_config --init_data is deprecated [ 348.144238][ T5439] 8021q: adding VLAN 0 to HW filter on device eth18 [ 348.155153][ T5729] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 348.249636][T16674] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3634'. [ 348.320271][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 348.320284][ T44] audit: type=1400 audit(348.257:1832): avc: denied { write } for pid=16675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.379675][T16682] netlink: 'syz.3.3636': attribute type 10 has an invalid length. [ 348.403275][ T44] audit: type=1400 audit(348.337:1833): avc: denied { write } for pid=16681 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.473027][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.500104][ T5439] 8021q: adding VLAN 0 to HW filter on device eth19 [ 348.581239][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.673696][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 348.689520][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.699075][ T44] audit: type=1400 audit(348.627:1834): avc: denied { write } for pid=16689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.783073][ T44] audit: type=1400 audit(348.717:1835): avc: denied { write } for pid=16700 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.808215][ T44] audit: type=1400 audit(348.747:1836): avc: denied { map } for pid=16693 comm="syz.9.3640" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.808309][ T44] audit: type=1400 audit(348.747:1837): avc: denied { execute } for pid=16693 comm="syz.9.3640" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.838981][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.927521][ T6619] Bluetooth: hci0: Frame reassembly failed (-84) [ 348.931777][T16695] SELinux: failed to load policy [ 348.932883][ T5439] 8021q: adding VLAN 0 to HW filter on device eth20 [ 349.026696][T16706] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3643'. [ 349.067213][ T13] bridge_slave_1: left allmulticast mode [ 349.067224][ T13] bridge_slave_1: left promiscuous mode [ 349.067327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.081227][ T13] bridge_slave_0: left allmulticast mode [ 349.081238][ T13] bridge_slave_0: left promiscuous mode [ 349.081345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.091110][ T44] audit: type=1400 audit(349.027:1838): avc: denied { write } for pid=16707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.154255][ T44] audit: type=1400 audit(349.087:1839): avc: denied { write } for pid=16715 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.286923][ T44] audit: type=1400 audit(349.227:1840): avc: denied { read } for pid=16719 comm="syz.3.3645" lport=42700 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 349.322511][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.376952][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.381014][ T13] bond0 (unregistering): Released all slaves [ 349.387584][ T44] audit: type=1400 audit(349.287:1841): avc: denied { setopt } for pid=16719 comm="syz.3.3645" lport=42700 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 349.403624][ T5439] 8021q: adding VLAN 0 to HW filter on device eth21 [ 349.670715][ T5439] 8021q: adding VLAN 0 to HW filter on device eth22 [ 349.887449][ T13] hsr_slave_0: left promiscuous mode [ 349.890476][ T13] hsr_slave_1: left promiscuous mode [ 349.891523][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.891533][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.893725][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.893734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.921426][ T13] veth1_macvtap: left promiscuous mode [ 349.921458][ T13] veth0_macvtap: left promiscuous mode [ 349.921574][ T13] veth1_vlan: left promiscuous mode [ 349.921627][ T13] veth0_vlan: left promiscuous mode [ 350.030296][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3652'. [ 350.074975][T16748] netlink: 'syz.9.3653': attribute type 10 has an invalid length. [ 350.360204][ T13] team0 (unregistering): Port device team_slave_1 removed [ 350.369447][ T13] team0 (unregistering): Port device team_slave_0 removed [ 350.473454][ T5439] 8021q: adding VLAN 0 to HW filter on device eth23 [ 350.487916][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.491190][T16748] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 350.758325][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3658'. [ 350.792401][ T5439] 8021q: adding VLAN 0 to HW filter on device eth24 [ 350.840365][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3659'. [ 350.944809][ T5729] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.018899][T16783] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3661'. [ 351.109157][ T5439] 8021q: adding VLAN 0 to HW filter on device eth25 [ 351.143546][T16791] FAULT_INJECTION: forcing a failure. [ 351.143546][T16791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.143563][T16791] CPU: 2 UID: 0 PID: 16791 Comm: syz.3.3664 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.143578][T16791] Tainted: [L]=SOFTLOCKUP [ 351.143583][T16791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.143589][T16791] Call Trace: [ 351.143594][T16791] [ 351.143599][T16791] dump_stack_lvl+0x100/0x190 [ 351.143620][T16791] should_fail_ex.cold+0x5/0xa [ 351.143634][T16791] ? prepare_alloc_pages+0x16d/0x5b0 [ 351.143650][T16791] should_fail_alloc_page+0xeb/0x140 [ 351.143666][T16791] prepare_alloc_pages+0x1f0/0x5b0 [ 351.143683][T16791] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 351.143699][T16791] ? lock_acquire+0x1d1/0x380 [ 351.143711][T16791] ? console_srcu_read_lock+0x49/0x60 [ 351.143726][T16791] ? find_held_lock+0x2b/0x80 [ 351.143741][T16791] ? console_srcu_read_unlock+0x41/0x60 [ 351.143755][T16791] ? console_srcu_read_unlock+0x41/0x60 [ 351.143770][T16791] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.143782][T16791] ? irq_work_queue+0xd1/0x100 [ 351.143798][T16791] ? __wake_up_klogd+0xe5/0x140 [ 351.143812][T16791] ? vprintk_emit+0x1c9/0x6b0 [ 351.143827][T16791] ? __pfx_vprintk_emit+0x10/0x10 [ 351.143863][T16791] ? lock_acquire+0x1d1/0x380 [ 351.143878][T16791] ? _printk+0xcf/0x110 [ 351.143889][T16791] ? __pfx__printk+0x10/0x10 [ 351.143901][T16791] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.143916][T16791] ? policy_nodemask+0xed/0x4f0 [ 351.143933][T16791] alloc_pages_mpol+0x201/0x550 [ 351.143949][T16791] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 351.143964][T16791] ? kasan_quarantine_put+0x104/0x240 [ 351.143979][T16791] ___kmalloc_large_node+0xe8/0x130 [ 351.143996][T16791] __kmalloc_large_node_noprof+0x1c/0x70 [ 351.144012][T16791] __kmalloc_noprof+0x5a8/0x840 [ 351.144025][T16791] ? hci_alloc_dev_priv+0x1d/0x28a0 [ 351.144042][T16791] hci_alloc_dev_priv+0x1d/0x28a0 [ 351.144055][T16791] hci_uart_tty_ioctl+0x2b2/0xcb0 [ 351.144072][T16791] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 351.144087][T16791] tty_ioctl+0x11b4/0x1640 [ 351.144102][T16791] ? __pfx_tty_ioctl+0x10/0x10 [ 351.144113][T16791] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 351.144129][T16791] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 351.144144][T16791] ? __fget_files+0x34/0x3d0 [ 351.144169][T16791] ? selinux_file_ioctl+0x13b/0x290 [ 351.144181][T16791] ? selinux_file_ioctl+0xb6/0x290 [ 351.144195][T16791] ? __pfx_tty_ioctl+0x10/0x10 [ 351.144208][T16791] __x64_sys_ioctl+0x18e/0x210 [ 351.144221][T16791] do_syscall_64+0x123/0x790 [ 351.144239][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.144251][T16791] RIP: 0033:0x7fdbebf9e159 [ 351.144260][T16791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.144272][T16791] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.144285][T16791] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 351.144293][T16791] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 351.144300][T16791] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 351.144307][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.144327][T16791] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 351.144342][T16791] [ 351.265506][T16791] Bluetooth: Can't allocate HCI device [ 351.283930][T16796] syz.9.3666 invoked oom-killer: gfp_mask=0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), order=1, oom_score_adj=1000 [ 351.283954][T16796] CPU: 2 UID: 0 PID: 16796 Comm: syz.9.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.283972][T16796] Tainted: [L]=SOFTLOCKUP [ 351.283977][T16796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.283984][T16796] Call Trace: [ 351.283989][T16796] [ 351.283995][T16796] dump_stack_lvl+0x100/0x190 [ 351.284017][T16796] dump_header+0xfb/0x606 [ 351.284032][T16796] oom_kill_process.cold+0xd/0x380 [ 351.284048][T16796] out_of_memory+0x340/0x14f0 [ 351.284068][T16796] ? __pfx_out_of_memory+0x10/0x10 [ 351.284089][T16796] mem_cgroup_out_of_memory+0xc6/0x130 [ 351.284102][T16796] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 351.284115][T16796] ? find_held_lock+0x2b/0x80 [ 351.284153][T16796] ? do_raw_spin_unlock+0x145/0x1e0 [ 351.284174][T16796] ? _raw_spin_unlock+0x28/0x50 [ 351.284192][T16796] try_charge_memcg+0x783/0xf60 [ 351.284214][T16796] ? __pfx_try_charge_memcg+0x10/0x10 [ 351.284232][T16796] ? find_held_lock+0x2b/0x80 [ 351.284249][T16796] ? rcu_read_unlock+0x17/0x60 [ 351.284267][T16796] ? rcu_read_unlock+0x17/0x60 [ 351.284305][T16796] obj_cgroup_charge_pages+0x2b/0x1f0 [ 351.284336][T16796] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 351.284358][T16796] ? kasan_unpoison+0x27/0x60 [ 351.284372][T16796] __kmalloc_cache_noprof+0x52a/0x6d0 [ 351.284391][T16796] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 351.284410][T16796] bpf_prog_alloc_no_stats+0x161/0x690 [ 351.284428][T16796] bpf_prog_alloc+0x3b/0x200 [ 351.284441][T16796] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.284456][T16796] bpf_prog_load+0x124f/0x2a80 [ 351.284475][T16796] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.284503][T16796] __sys_bpf+0x1f46/0x4a30 [ 351.284519][T16796] ? __pfx___sys_bpf+0x10/0x10 [ 351.284530][T16796] ? find_held_lock+0x2b/0x80 [ 351.284545][T16796] ? futex_wake+0x4ea/0x5e0 [ 351.284573][T16796] ? rcu_read_lock_any_held+0x6a/0x90 [ 351.284590][T16796] ? find_held_lock+0x2b/0x80 [ 351.284606][T16796] ? ksys_write+0x190/0x250 [ 351.284618][T16796] ? ksys_write+0x190/0x250 [ 351.284639][T16796] ? __x64_sys_futex+0x34f/0x4d0 [ 351.284654][T16796] ? __x64_sys_futex+0x358/0x4d0 [ 351.284675][T16796] ? xfd_validate_state+0x129/0x190 [ 351.284691][T16796] ? __x64_sys_bpf+0xce/0x140 [ 351.284703][T16796] __x64_sys_bpf+0xce/0x140 [ 351.284715][T16796] ? do_syscall_64+0xae/0x790 [ 351.284734][T16796] do_syscall_64+0x123/0x790 [ 351.284751][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.284765][T16796] RIP: 0033:0x7fa063b9e159 [ 351.284776][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.284789][T16796] RSP: 002b:00007fa064af9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.284807][T16796] RAX: ffffffffffffffda RBX: 00007fa063e25fa0 RCX: 00007fa063b9e159 [ 351.284818][T16796] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 351.284830][T16796] RBP: 00007fa063c3506b R08: 0000000000000000 R09: 0000000000000000 [ 351.284841][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.284848][T16796] R13: 00007fa063e26038 R14: 00007fa063e25fa0 R15: 00007ffed3714398 [ 351.284865][T16796] [ 351.346663][T16796] memory: usage 8kB, limit 8kB, failcnt 23 [ 351.346674][T16796] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 351.346683][T16796] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 351.346690][T16796] Memory cgroup stats for /syz9/test: [ 351.346784][T16796] cache 0 [ 351.346790][T16796] rss 0 [ 351.346795][T16796] rss_huge 0 [ 351.346800][T16796] shmem 0 [ 351.346805][T16796] mapped_file 0 [ 351.346810][T16796] dirty 0 [ 351.346815][T16796] writeback 0 [ 351.346819][T16796] workingset_refault_anon 0 [ 351.346825][T16796] workingset_refault_file 0 [ 351.346829][T16796] swap 0 [ 351.346834][T16796] swapcached 0 [ 351.346839][T16796] pgpgin 0 [ 351.346843][T16796] pgpgout 0 [ 351.346848][T16796] pgfault 0 [ 351.346853][T16796] pgmajfault 0 [ 351.346857][T16796] inactive_anon 0 [ 351.346862][T16796] active_anon 0 [ 351.346867][T16796] inactive_file 0 [ 351.346872][T16796] active_file 0 [ 351.346877][T16796] unevictable 0 [ 351.346882][T16796] hierarchical_memory_limit 8192 [ 351.346887][T16796] hierarchical_memsw_limit 9223372036854771712 [ 351.346893][T16796] total_cache 0 [ 351.346898][T16796] total_rss 0 [ 351.346902][T16796] total_rss_huge 0 [ 351.346906][T16796] total_shmem 0 [ 351.346911][T16796] total_mapped_file 0 [ 351.346915][T16796] total_dirty 0 [ 351.346919][T16796] total_writeback 0 [ 351.346924][T16796] total_workingset_refault_anon 0 [ 351.346929][T16796] total_workingset_refault_file 0 [ 351.346934][T16796] total_swap 0 [ 351.346938][T16796] total_swapcached 0 [ 351.346943][T16796] total_pgpgin 0 [ 351.346947][T16796] total_pgpgout 0 [ 351.346951][T16796] total_pgfault 0 [ 351.346955][T16796] total_pgmajfault 0 [ 351.346960][T16796] total_inactive_anon 0 [ 351.346964][T16796] total_active_anon 0 [ 351.346969][T16796] total_inactive_file 0 [ 351.346973][T16796] total_active_file 0 [ 351.346977][T16796] total_unevictable 0 [ 351.346982][T16796] anon_cost 0 [ 351.346986][T16796] file_cost 0 [ 351.346991][T16796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3666,pid=16795,uid=0 [ 351.347282][T16796] Memory cgroup out of memory: Killed process 16795 (syz.9.3666) total-vm:103988kB, anon-rss:1440kB, file-rss:24724kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 351.633726][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3671'. [ 351.675970][ T65] Bluetooth: hci0: sending frame failed (-49) [ 351.676835][ T5729] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 351.730151][T16820] nvmet: the ns:1 is already enabled. [ 351.894058][T16828] netlink: 4136 bytes leftover after parsing attributes in process `syz.3.3675'. [ 352.067449][T16834] xt_hashlimit: size too large, truncated to 1048576 [ 352.283677][T16841] input: syz0 as /devices/virtual/input/input83 [ 352.305989][T16841] syzkaller0: entered promiscuous mode [ 352.305998][T16841] syzkaller0: entered allmulticast mode [ 352.450463][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 352.568915][ T5439] net_ratelimit: 174 callbacks suppressed [ 352.791014][T16858] FAULT_INJECTION: forcing a failure. [ 352.791014][T16858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.791039][T16858] CPU: 2 UID: 0 PID: 16858 Comm: syz.8.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.791064][T16858] Tainted: [L]=SOFTLOCKUP [ 352.791071][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.791084][T16858] Call Trace: [ 352.791090][T16858] [ 352.791099][T16858] dump_stack_lvl+0x100/0x190 [ 352.791130][T16858] should_fail_ex.cold+0x5/0xa [ 352.791157][T16858] _copy_from_user+0x2e/0xd0 [ 352.791178][T16858] vhost_net_ioctl+0x41f/0x1910 [ 352.791210][T16858] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 352.791227][T16858] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 352.791251][T16858] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 352.791277][T16858] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 352.791303][T16858] ? __fget_files+0x34/0x3d0 [ 352.791338][T16858] ? selinux_file_ioctl+0xb6/0x290 [ 352.791361][T16858] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 352.791388][T16858] __x64_sys_ioctl+0x18e/0x210 [ 352.791408][T16858] do_syscall_64+0x123/0x790 [ 352.791434][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.791454][T16858] RIP: 0033:0x7ff08019e159 [ 352.791467][T16858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.791485][T16858] RSP: 002b:00007ff0810bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.791506][T16858] RAX: ffffffffffffffda RBX: 00007ff080425fa0 RCX: 00007ff08019e159 [ 352.791518][T16858] RDX: 0000200000000000 RSI: 000000004008af83 RDI: 0000000000000003 [ 352.791529][T16858] RBP: 00007ff0810bc090 R08: 0000000000000000 R09: 0000000000000000 [ 352.791541][T16858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.791552][T16858] R13: 00007ff080426038 R14: 00007ff080425fa0 R15: 00007fff5644cf58 [ 352.791577][T16858] [ 352.902023][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3689'. [ 352.978223][T16864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16864 comm=syz.9.3689 [ 352.998883][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3690'. [ 353.196815][T16863] netlink: 'syz.3.3688': attribute type 2 has an invalid length. [ 353.207487][T16871] syz_tun: entered allmulticast mode [ 353.238604][T16870] syz_tun: left allmulticast mode [ 353.357308][T16873] FAULT_INJECTION: forcing a failure. [ 353.357308][T16873] name failslab, interval 1, probability 0, space 0, times 0 [ 353.357328][T16873] CPU: 0 UID: 0 PID: 16873 Comm: syz.9.3692 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.357344][T16873] Tainted: [L]=SOFTLOCKUP [ 353.357348][T16873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.357355][T16873] Call Trace: [ 353.357359][T16873] [ 353.357365][T16873] dump_stack_lvl+0x100/0x190 [ 353.357387][T16873] should_fail_ex.cold+0x5/0xa [ 353.357403][T16873] should_failslab+0xc2/0x120 [ 353.357418][T16873] kmem_cache_alloc_noprof+0x92/0x6a0 [ 353.357430][T16873] ? __lock_acquire+0x5c0/0x1f40 [ 353.357443][T16873] ? skb_clone+0x190/0x400 [ 353.357459][T16873] skb_clone+0x190/0x400 [ 353.357473][T16873] ip6_err_gen_icmpv6_unreach+0x17b/0x950 [ 353.357487][T16873] ? net_generic+0xea/0x2a0 [ 353.357499][T16873] ? net_generic+0xea/0x2a0 [ 353.357514][T16873] ? __pfx_ip6_err_gen_icmpv6_unreach+0x10/0x10 [ 353.357531][T16873] ipip6_err+0x41a/0xa70 [ 353.357546][T16873] ? __pfx_ipip6_err+0x10/0x10 [ 353.357562][T16873] tunnelmpls4_err+0x88/0x210 [ 353.357575][T16873] ? __pfx_tunnelmpls4_err+0x10/0x10 [ 353.357588][T16873] icmp_socket_deliver+0x1da/0x430 [ 353.357602][T16873] icmp_unreach+0x396/0xee0 [ 353.357613][T16873] ? __skb_checksum_complete+0x16a/0x360 [ 353.357627][T16873] icmp_rcv+0x9b4/0x1140 [ 353.357668][T16873] ? __pfx_icmp_rcv+0x10/0x10 [ 353.357680][T16873] ip_protocol_deliver_rcu+0x44c/0x4d0 [ 353.357696][T16873] ip_local_deliver_finish+0x3f2/0x6e0 [ 353.357710][T16873] ip_local_deliver+0x19a/0x1f0 [ 353.357722][T16873] ? __pfx_ip_local_deliver+0x10/0x10 [ 353.357817][T16873] ip_rcv+0x33a/0x3c0 [ 353.357830][T16873] ? __pfx_ip_rcv+0x10/0x10 [ 353.357841][T16873] __netif_receive_skb_one_core+0x197/0x1e0 [ 353.357854][T16873] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 353.357872][T16873] ? lock_acquire+0x1d1/0x380 [ 353.357888][T16873] __netif_receive_skb+0x1f/0x120 [ 353.357900][T16873] netif_receive_skb+0x139/0x7d0 [ 353.357912][T16873] ? __pfx_netif_receive_skb+0x10/0x10 [ 353.357928][T16873] tun_rx_batched.isra.0+0x3f6/0x750 [ 353.357942][T16873] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 353.357958][T16873] ? tun_get_user+0x1e1e/0x3cc0 [ 353.357974][T16873] tun_get_user+0x1f53/0x3cc0 [ 353.357991][T16873] ? __lock_acquire+0x5c0/0x1f40 [ 353.358003][T16873] ? __pfx_tun_get_user+0x10/0x10 [ 353.358017][T16873] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 353.358037][T16873] ? find_held_lock+0x2b/0x80 [ 353.358053][T16873] ? tun_get+0x191/0x370 [ 353.358064][T16873] ? tun_get+0x191/0x370 [ 353.358078][T16873] tun_chr_write_iter+0xdc/0x200 [ 353.358093][T16873] vfs_write+0x6af/0x1050 [ 353.358105][T16873] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 353.358120][T16873] ? __pfx_vfs_write+0x10/0x10 [ 353.358130][T16873] ? find_held_lock+0x2b/0x80 [ 353.358153][T16873] ksys_write+0x12a/0x250 [ 353.358164][T16873] ? __pfx_ksys_write+0x10/0x10 [ 353.358180][T16873] do_syscall_64+0x123/0x790 [ 353.358197][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.358209][T16873] RIP: 0033:0x7fa063b5e98e [ 353.358219][T16873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 353.358230][T16873] RSP: 002b:00007fa064af8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.358241][T16873] RAX: ffffffffffffffda RBX: 00007fa064af96c0 RCX: 00007fa063b5e98e [ 353.358249][T16873] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8 [ 353.358256][T16873] RBP: 00007fa064af9090 R08: 0000000000000000 R09: 0000000000000000 [ 353.358262][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.358268][T16873] R13: 00007fa063e26038 R14: 00007fa063e25fa0 R15: 00007ffed3714398 [ 353.358282][T16873] [ 353.392851][T16875] netlink: 'syz.8.3693': attribute type 21 has an invalid length. [ 353.392864][T16875] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.392909][T16875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.392914][T16875] IPv6: NLM_F_CREATE should be set when creating new route [ 353.392933][T16875] IPv6: NLM_F_CREATE should be set when creating new route [ 353.392943][T16875] IPv6: NLM_F_CREATE should be set when creating new route [ 353.401588][T16875] netlink: 'syz.8.3693': attribute type 21 has an invalid length. [ 353.401629][T16875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.641230][ T5729] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 353.850539][T15799] wiimote 0005:057E:0330.001F: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 353.850720][T15799] wiimote 0005:057E:0330.001F: New device registered [ 353.897386][T16891] wiimote 0005:057E:0330.001F: Device removed [ 353.913922][T16895] fido_id[16895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.033124][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 354.033136][ T44] audit: type=1400 audit(353.967:1856): avc: denied { setopt } for pid=16897 comm="syz.7.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.036228][T16898] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 354.036240][T16898] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 354.048692][ T44] audit: type=1400 audit(353.977:1857): avc: denied { ioctl } for pid=16897 comm="syz.7.3703" path="/26/config/nvmet/subsystems/testsubsys/namespaces/1/device_path" dev="configfs" ino=66940 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 354.590765][T16911] FAULT_INJECTION: forcing a failure. [ 354.590765][T16911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.590799][T16911] CPU: 0 UID: 0 PID: 16911 Comm: syz.9.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.590825][T16911] Tainted: [L]=SOFTLOCKUP [ 354.590832][T16911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.590844][T16911] Call Trace: [ 354.590851][T16911] [ 354.590859][T16911] dump_stack_lvl+0x100/0x190 [ 354.590891][T16911] should_fail_ex.cold+0x5/0xa [ 354.590919][T16911] _copy_from_user+0x2e/0xd0 [ 354.590940][T16911] memdup_user+0x6b/0xe0 [ 354.590959][T16911] strndup_user+0x78/0xe0 [ 354.590977][T16911] __x64_sys_fsopen+0x9e/0x220 [ 354.591014][T16911] do_syscall_64+0x123/0x790 [ 354.591046][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.591065][T16911] RIP: 0033:0x7fa063b9e159 [ 354.591080][T16911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.591098][T16911] RSP: 002b:00007fa064af9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 354.591116][T16911] RAX: ffffffffffffffda RBX: 00007fa063e25fa0 RCX: 00007fa063b9e159 [ 354.591128][T16911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 354.591139][T16911] RBP: 00007fa064af9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.591151][T16911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.591162][T16911] R13: 00007fa063e26038 R14: 00007fa063e25fa0 R15: 00007ffed3714398 [ 354.591187][T16911] [ 354.594264][T16908] syzkaller0: entered promiscuous mode [ 354.594399][T16908] syzkaller0: entered allmulticast mode [ 354.875217][T15799] wiimote 0005:057E:0330.001F: detected device: Nintendo Wii Remote Plus (Gen 2) [ 354.901868][T15799] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.001F/input/input85 [ 354.911756][T15799] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.001F/input/input86 [ 354.923041][T15799] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.001F/input/input84 [ 357.185382][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.249865][T16926] __nla_validate_parse: 4 callbacks suppressed [ 357.249876][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'. [ 357.287330][T16928] CUSE: unknown device info "" [ 357.287337][T16928] CUSE: unknown device info "" [ 357.287342][T16928] CUSE: unknown device info "" [ 357.287347][T16928] CUSE: unknown device info "" [ 357.287351][T16928] CUSE: DEVNAME unspecified [ 357.289029][ T44] audit: type=1400 audit(357.227:1858): avc: denied { append } for pid=16927 comm="syz.7.3713" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.289056][ T44] audit: type=1400 audit(357.227:1859): avc: denied { mounton } for pid=16927 comm="syz.7.3713" path="/syzcgroup/unified/syz7" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 357.359595][T16942] FAULT_INJECTION: forcing a failure. [ 357.359595][T16942] name failslab, interval 1, probability 0, space 0, times 0 [ 357.359611][T16942] CPU: 2 UID: 0 PID: 16942 Comm: syz.3.3714 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.359626][T16942] Tainted: [L]=SOFTLOCKUP [ 357.359631][T16942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.359638][T16942] Call Trace: [ 357.359643][T16942] [ 357.359647][T16942] dump_stack_lvl+0x100/0x190 [ 357.359668][T16942] should_fail_ex.cold+0x5/0xa [ 357.359689][T16942] should_failslab+0xc2/0x120 [ 357.359704][T16942] __kvmalloc_node_noprof+0x113/0x9b0 [ 357.359718][T16942] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 357.359731][T16942] ? ceph_msg_new2+0x370/0x4f0 [ 357.359746][T16942] ceph_msg_new2+0x370/0x4f0 [ 357.359761][T16942] ceph_monc_init+0x59d/0xcd0 [ 357.359781][T16942] ceph_create_client+0x25e/0x370 [ 357.359795][T16942] ceph_get_tree+0x1a4/0x1fd0 [ 357.359811][T16942] ? bpf_lsm_capable+0x9/0x10 [ 357.359828][T16942] ? security_capable+0x80/0x260 [ 357.359849][T16942] vfs_get_tree+0x92/0x320 [ 357.359867][T16942] vfs_cmd_create+0xd7/0x2a0 [ 357.359879][T16942] __do_sys_fsconfig+0x55a/0xcb0 [ 357.359892][T16942] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 357.359903][T16942] ? fput+0x7c/0x100 [ 357.359923][T16942] do_syscall_64+0x123/0x790 [ 357.359941][T16942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.359953][T16942] RIP: 0033:0x7fdbebf9e159 [ 357.359962][T16942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.359974][T16942] RSP: 002b:00007fdbecdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 357.359985][T16942] RAX: ffffffffffffffda RBX: 00007fdbec225fa0 RCX: 00007fdbebf9e159 [ 357.359992][T16942] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 357.359999][T16942] RBP: 00007fdbecdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.360006][T16942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.360012][T16942] R13: 00007fdbec226038 R14: 00007fdbec225fa0 R15: 00007ffe7d241f88 [ 357.360044][T16942] [ 357.373910][T16928] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 357.452654][T16928] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 357.452798][T16928] pci 0000:00:01.0: BAR 2 [mem 0x7379735f796d0000-0x7379735f796d3fff 64bit pref] [ 357.452855][T16928] pci 0000:00:01.0: BAR 4 [mem 0x8a4ce000-0x8a4cefff] [ 357.452968][T16928] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 357.453508][T16928] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 357.483788][T16928] pci 0000:00:01.0: Adding to iommu group 1 [ 357.496168][T16928] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 357.496186][T16928] pci 0000:00:01.0: vgaarb: bridge control possible [ 357.496194][T16928] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 357.544562][T16928] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 357.551440][T16928] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 357.558605][T16928] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 357.640579][ T5439] net_ratelimit: 92 callbacks suppressed [ 357.664682][ T5729] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 357.664731][ T5729] Bluetooth: hci5: Injecting HCI hardware error event [ 357.665302][ T5878] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 357.666533][ T65] Bluetooth: hci5: hardware error 0x00 [ 357.676458][T16928] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 357.676518][T16928] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 357.677731][T16928] [drm] features: -virgl +edid -resource_blob -host_visible [ 357.677740][T16928] [drm] features: -context_init -blob_alignment [ 357.727407][T16928] ------------[ cut here ]------------ [ 357.727418][T16928] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 357.727425][T16928] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#0: syz.7.3713/16928 [ 357.736558][T16928] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.737868][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.7.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.739819][ T44] audit: type=1400 audit(357.677:1860): avc: denied { write } for pid=5712 comm="syz-executor" path="pipe:[6545]" dev="pipefs" ino=6545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 357.751197][T16928] Tainted: [L]=SOFTLOCKUP [ 357.753015][T16928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.757394][T16928] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 357.760021][T16928] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ae 6f 09 85 c0 75 e0 48 8d 3d a7 dc ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 af 6f 09 48 85 c0 0f [ 357.768228][T16928] RSP: 0018:ffffc9000559ef00 EFLAGS: 00010246 [ 357.770513][T16928] RAX: 0000000000000000 RBX: ffff8880256d57c0 RCX: fffff52000ab3dba [ 357.773546][T16928] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b580 [ 357.776907][T16928] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5ab [ 357.779831][T16928] R10: ffffc9000559ef00 R11: 0000000000000001 R12: 0000000000000000 [ 357.782619][T16928] R13: ffffc9000559ef70 R14: 00000000000000d8 R15: ffff88803e634fce [ 357.785976][T16928] FS: 00007fb38d8156c0(0000) GS:ffff8880d5b59000(0000) knlGS:0000000000000000 [ 357.790013][T16928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.792763][T16928] CR2: 00007fa063b892c0 CR3: 000000004bb8d000 CR4: 0000000000352ef0 [ 357.796539][T16928] Call Trace: [ 357.797720][T16928] [ 357.798727][T16928] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 357.800569][T16928] ? __pfx__printk+0x10/0x10 [ 357.802152][T16928] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 357.804418][T16928] ? lockdep_init_map_type+0x5c/0x250 [ 357.806606][T16928] virtio_gpu_init.cold+0x40d/0x1293 [ 357.808386][T16928] ? vga_remove_vgacon.cold+0x1d/0x99 [ 357.810277][T16928] ? __pfx_virtio_gpu_init+0x10/0x10 [ 357.812033][T16928] ? is_console_locked+0x9/0x20 [ 357.813680][T16928] ? con_is_bound+0x141/0x190 [ 357.814613][ T5878] usb 12-1: Using ep0 maxpacket: 32 [ 357.818004][T16928] ? vga_remove_vgacon+0x21/0x30 [ 357.820092][T16928] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 357.823018][T16928] virtio_gpu_probe+0x21c/0x360 [ 357.825465][T16928] virtio_dev_probe+0x6a2/0xbe0 [ 357.827522][T16928] ? __pfx_virtio_dev_probe+0x10/0x10 [ 357.829928][T16928] ? kernfs_create_link+0x1bd/0x240 [ 357.832060][T16928] ? kernfs_put+0x3f/0x60 [ 357.833843][T16928] ? sysfs_do_create_link_sd+0xbb/0x140 [ 357.836256][T16928] ? sysfs_create_link+0x68/0xc0 [ 357.838368][T16928] ? __pfx_virtio_dev_probe+0x10/0x10 [ 357.840657][T16928] really_probe+0x241/0xa60 [ 357.842597][T16928] __driver_probe_device+0x210/0x460 [ 357.844966][T16928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.847525][T16928] driver_probe_device+0x4a/0x140 [ 357.849631][T16928] __device_attach_driver+0x1df/0x320 [ 357.851885][T16928] ? __pfx___device_attach_driver+0x10/0x10 [ 357.854517][T16928] bus_for_each_drv+0x159/0x1e0 [ 357.856581][T16928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.858860][T16928] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.861122][T16928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.863594][T16928] __device_attach+0x1e4/0x4d0 [ 357.865747][T16928] ? __pfx___device_attach+0x10/0x10 [ 357.868017][T16928] ? do_raw_spin_unlock+0x145/0x1e0 [ 357.870292][T16928] device_initial_probe+0xaf/0xd0 [ 357.872523][T16928] bus_probe_device+0x64/0x160 [ 357.874734][T16928] device_add+0x121d/0x1970 [ 357.876701][T16928] ? __pfx_device_add+0x10/0x10 [ 357.878263][ T5878] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 357.880434][ T5878] usb 12-1: config 0 has an invalid interface number: 67 but max is 0 [ 357.880448][ T5878] usb 12-1: config 0 has no interface number 0 [ 357.882116][ T5878] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.882126][ T5878] usb 12-1: Product: syz [ 357.882134][ T5878] usb 12-1: Manufacturer: syz [ 357.882141][ T5878] usb 12-1: SerialNumber: syz [ 357.895932][T16928] ? __pfx___might_resched+0x10/0x10 [ 357.898175][T16928] ? iowrite8+0x2b/0xb0 [ 357.899959][T16928] ? iowrite8+0x2e/0xb0 [ 357.901730][T16928] ? ioread8+0x8f/0xd0 [ 357.903461][T16928] register_virtio_device+0x4f0/0x5d0 [ 357.905951][T16928] ? __pfx_register_virtio_device+0x10/0x10 [ 357.908433][T16928] ? __pfx_pcibios_set_master+0x10/0x10 [ 357.910767][T16928] ? __raw_spin_lock_init+0x3a/0x110 [ 357.912982][T16928] ? __pfx_virtio_pci_probe+0x10/0x10 [ 357.915321][T16928] virtio_pci_probe+0x255/0x410 [ 357.917405][T16928] local_pci_probe+0xdd/0x1b0 [ 357.919421][T16928] pci_call_probe+0x176/0x800 [ 357.921415][T16928] ? pci_match_device+0x147/0x7d0 [ 357.923575][T16928] ? __pfx_pci_call_probe+0x10/0x10 [ 357.925867][T16928] ? __pfx_pci_match_device+0x10/0x10 [ 357.928171][T16928] ? up_write+0x2dc/0x5b0 [ 357.930019][T16928] pci_device_probe+0x25b/0x400 [ 357.932073][T16928] ? __pfx_pci_device_probe+0x10/0x10 [ 357.934221][T16928] ? kernfs_create_link+0x1bd/0x240 [ 357.936480][T16928] ? sysfs_create_link+0x68/0xc0 [ 357.938549][T16928] ? __pfx_pci_device_probe+0x10/0x10 [ 357.940656][T16928] really_probe+0x241/0xa60 [ 357.942597][T16928] __driver_probe_device+0x210/0x460 [ 357.944889][T16928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.947381][T16928] driver_probe_device+0x4a/0x140 [ 357.949290][T16928] __device_attach_driver+0x1df/0x320 [ 357.951549][ T5878] usb 12-1: config 0 descriptor?? [ 357.953673][T16928] ? __pfx___device_attach_driver+0x10/0x10 [ 357.956226][T16928] bus_for_each_drv+0x159/0x1e0 [ 357.958291][T16928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.960549][T16928] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.962727][T16928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.965119][T16928] __device_attach+0x1e4/0x4d0 [ 357.967169][T16928] ? __pfx___device_attach+0x10/0x10 [ 357.969396][T16928] ? do_raw_spin_unlock+0x145/0x1e0 [ 357.971613][T16928] device_initial_probe+0xaf/0xd0 [ 357.973876][T16928] pci_bus_add_device+0xc5/0x100 [ 357.976048][T16928] pci_bus_add_devices+0x9a/0x1f0 [ 357.978173][T16928] pci_rescan_bus+0x2a/0x40 [ 357.980109][T16928] dev_rescan_store+0x11b/0x140 [ 357.982161][T16928] ? __pfx_dev_rescan_store+0x10/0x10 [ 357.984746][T16928] ? find_held_lock+0x2b/0x80 [ 357.986783][T16928] ? sysfs_file_kobj+0xe4/0x290 [ 357.988838][T16928] ? sysfs_file_kobj+0xe4/0x290 [ 357.990943][T16928] ? __pfx_dev_rescan_store+0x10/0x10 [ 357.993497][T16928] dev_attr_store+0x58/0x80 [ 357.995640][T16928] ? __pfx_dev_attr_store+0x10/0x10 [ 357.997849][T16928] sysfs_kf_write+0xf2/0x150 [ 357.999809][T16928] kernfs_fop_write_iter+0x3e0/0x5f0 [ 358.001958][T16928] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.003530][T16928] vfs_write+0x6af/0x1050 [ 358.004985][T16928] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.006865][T16928] ? __pfx_vfs_write+0x10/0x10 [ 358.008393][T16928] ? find_held_lock+0x2b/0x80 [ 358.009902][T16928] ksys_write+0x12a/0x250 [ 358.011277][T16928] ? __pfx_ksys_write+0x10/0x10 [ 358.012830][T16928] do_syscall_64+0x123/0x790 [ 358.014362][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.016228][T16928] RIP: 0033:0x7fb38c99e159 [ 358.017648][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.023551][T16928] RSP: 002b:00007fb38d815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.026242][T16928] RAX: ffffffffffffffda RBX: 00007fb38cc25fa0 RCX: 00007fb38c99e159 [ 358.028715][T16928] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 358.031083][T16928] RBP: 00007fb38ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 358.033476][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.036052][T16928] R13: 00007fb38cc26038 R14: 00007fb38cc25fa0 R15: 00007ffd8b4dda68 [ 358.038541][T16928] [ 358.039543][T16928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.041812][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.7.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.045213][T16928] Tainted: [L]=SOFTLOCKUP [ 358.046579][T16928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.049700][T16928] Call Trace: [ 358.050762][T16928] [ 358.051704][T16928] dump_stack_lvl+0x100/0x190 [ 358.053190][T16928] vpanic+0x553/0x970 [ 358.054461][T16928] ? __pfx_vpanic+0x10/0x10 [ 358.055905][T16928] panic+0xd1/0xe0 [ 358.057064][T16928] ? __pfx_panic+0x10/0x10 [ 358.058478][T16928] check_panic_on_warn.cold+0x19/0x34 [ 358.060160][T16928] ? __kmem_cache_create_args+0xa9/0x430 [ 358.061928][T16928] __warn.cold+0x191/0x318 [ 358.063264][T16928] __report_bug+0x30f/0x440 [ 358.064665][T16928] ? __kmem_cache_create_args+0xa9/0x430 [ 358.066374][T16928] ? __pfx___report_bug+0x10/0x10 [ 358.067963][T16928] ? preempt_schedule_thunk+0x16/0x40 [ 358.069647][T16928] ? __kmem_cache_create_args+0x44/0x430 [ 358.071403][T16928] ? console_srcu_read_lock+0x49/0x60 [ 358.073084][T16928] report_bug_entry+0xe2/0x290 [ 358.074602][T16928] ? __kmem_cache_create_args+0xac/0x430 [ 358.076384][T16928] handle_bug+0x1cd/0x2a0 [ 358.077775][T16928] exc_invalid_op+0x17/0x50 [ 358.079230][T16928] asm_exc_invalid_op+0x1a/0x20 [ 358.080762][T16928] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 358.082731][T16928] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ae 6f 09 85 c0 75 e0 48 8d 3d a7 dc ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 af 6f 09 48 85 c0 0f [ 358.088698][T16928] RSP: 0018:ffffc9000559ef00 EFLAGS: 00010246 [ 358.090618][T16928] RAX: 0000000000000000 RBX: ffff8880256d57c0 RCX: fffff52000ab3dba [ 358.093076][T16928] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b580 [ 358.095445][T16928] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5ab [ 358.097830][T16928] R10: ffffc9000559ef00 R11: 0000000000000001 R12: 0000000000000000 [ 358.100258][T16928] R13: ffffc9000559ef70 R14: 00000000000000d8 R15: ffff88803e634fce [ 358.102746][T16928] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 358.104423][T16928] ? __pfx__printk+0x10/0x10 [ 358.105928][T16928] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 358.107795][T16928] ? lockdep_init_map_type+0x5c/0x250 [ 358.109479][T16928] virtio_gpu_init.cold+0x40d/0x1293 [ 358.111149][T16928] ? vga_remove_vgacon.cold+0x1d/0x99 [ 358.112834][T16928] ? __pfx_virtio_gpu_init+0x10/0x10 [ 358.114497][T16928] ? is_console_locked+0x9/0x20 [ 358.116029][T16928] ? con_is_bound+0x141/0x190 [ 358.117512][T16928] ? vga_remove_vgacon+0x21/0x30 [ 358.119091][T16928] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 358.121258][T16928] virtio_gpu_probe+0x21c/0x360 [ 358.122817][T16928] virtio_dev_probe+0x6a2/0xbe0 [ 358.124349][T16928] ? __pfx_virtio_dev_probe+0x10/0x10 [ 358.126052][T16928] ? kernfs_create_link+0x1bd/0x240 [ 358.127690][T16928] ? kernfs_put+0x3f/0x60 [ 358.129065][T16928] ? sysfs_do_create_link_sd+0xbb/0x140 [ 358.130835][T16928] ? sysfs_create_link+0x68/0xc0 [ 358.132402][T16928] ? __pfx_virtio_dev_probe+0x10/0x10 [ 358.134092][T16928] really_probe+0x241/0xa60 [ 358.135614][T16928] __driver_probe_device+0x210/0x460 [ 358.137571][T16928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 358.139859][T16928] driver_probe_device+0x4a/0x140 [ 358.141804][T16928] __device_attach_driver+0x1df/0x320 [ 358.143843][T16928] ? __pfx___device_attach_driver+0x10/0x10 [ 358.146004][T16928] bus_for_each_drv+0x159/0x1e0 [ 358.147859][T16928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.149601][T16928] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.151237][T16928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.153036][T16928] __device_attach+0x1e4/0x4d0 [ 358.154580][T16928] ? __pfx___device_attach+0x10/0x10 [ 358.156241][T16928] ? do_raw_spin_unlock+0x145/0x1e0 [ 358.157907][T16928] device_initial_probe+0xaf/0xd0 [ 358.159509][T16928] bus_probe_device+0x64/0x160 [ 358.161036][T16928] device_add+0x121d/0x1970 [ 358.162522][T16928] ? __pfx_device_add+0x10/0x10 [ 358.164082][T16928] ? __pfx___might_resched+0x10/0x10 [ 358.165784][T16928] ? iowrite8+0x2b/0xb0 [ 358.167106][T16928] ? iowrite8+0x2e/0xb0 [ 358.168443][T16928] ? ioread8+0x8f/0xd0 [ 358.169752][T16928] register_virtio_device+0x4f0/0x5d0 [ 358.171451][T16928] ? __pfx_register_virtio_device+0x10/0x10 [ 358.173321][T16928] ? __pfx_pcibios_set_master+0x10/0x10 [ 358.175063][T16928] ? __raw_spin_lock_init+0x3a/0x110 [ 358.176751][T16928] ? __pfx_virtio_pci_probe+0x10/0x10 [ 358.178440][T16928] virtio_pci_probe+0x255/0x410 [ 358.180017][T16928] local_pci_probe+0xdd/0x1b0 [ 358.181514][T16928] pci_call_probe+0x176/0x800 [ 358.183048][T16928] ? pci_match_device+0x147/0x7d0 [ 358.184643][T16928] ? __pfx_pci_call_probe+0x10/0x10 [ 358.186315][T16928] ? __pfx_pci_match_device+0x10/0x10 [ 358.188015][T16928] ? up_write+0x2dc/0x5b0 [ 358.189397][T16928] pci_device_probe+0x25b/0x400 [ 358.190947][T16928] ? __pfx_pci_device_probe+0x10/0x10 [ 358.192624][T16928] ? kernfs_create_link+0x1bd/0x240 [ 358.194261][T16928] ? sysfs_create_link+0x68/0xc0 [ 358.195848][T16928] ? __pfx_pci_device_probe+0x10/0x10 [ 358.197567][T16928] really_probe+0x241/0xa60 [ 358.199038][T16928] __driver_probe_device+0x210/0x460 [ 358.200714][T16928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 358.202579][T16928] driver_probe_device+0x4a/0x140 [ 358.204174][T16928] __device_attach_driver+0x1df/0x320 [ 358.205872][T16928] ? __pfx___device_attach_driver+0x10/0x10 [ 358.207760][T16928] bus_for_each_drv+0x159/0x1e0 [ 358.209310][T16928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.211027][T16928] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.212659][T16928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.214505][T16928] __device_attach+0x1e4/0x4d0 [ 358.216016][T16928] ? __pfx___device_attach+0x10/0x10 [ 358.217718][T16928] ? do_raw_spin_unlock+0x145/0x1e0 [ 358.219361][T16928] device_initial_probe+0xaf/0xd0 [ 358.220942][T16928] pci_bus_add_device+0xc5/0x100 [ 358.222519][T16928] pci_bus_add_devices+0x9a/0x1f0 [ 358.224100][T16928] pci_rescan_bus+0x2a/0x40 [ 358.225580][T16928] dev_rescan_store+0x11b/0x140 [ 358.227130][T16928] ? __pfx_dev_rescan_store+0x10/0x10 [ 358.228807][T16928] ? find_held_lock+0x2b/0x80 [ 358.230326][T16928] ? sysfs_file_kobj+0xe4/0x290 [ 358.231856][T16928] ? sysfs_file_kobj+0xe4/0x290 [ 358.233412][T16928] ? __pfx_dev_rescan_store+0x10/0x10 [ 358.235094][T16928] dev_attr_store+0x58/0x80 [ 358.236565][T16928] ? __pfx_dev_attr_store+0x10/0x10 [ 358.238235][T16928] sysfs_kf_write+0xf2/0x150 [ 358.239700][T16928] kernfs_fop_write_iter+0x3e0/0x5f0 [ 358.241357][T16928] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.242997][T16928] vfs_write+0x6af/0x1050 [ 358.244369][T16928] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.246217][T16928] ? __pfx_vfs_write+0x10/0x10 [ 358.247757][T16928] ? find_held_lock+0x2b/0x80 [ 358.249251][T16928] ksys_write+0x12a/0x250 [ 358.250635][T16928] ? __pfx_ksys_write+0x10/0x10 [ 358.252165][T16928] do_syscall_64+0x123/0x790 [ 358.253671][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.255528][T16928] RIP: 0033:0x7fb38c99e159 [ 358.256963][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.263034][T16928] RSP: 002b:00007fb38d815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.265664][T16928] RAX: ffffffffffffffda RBX: 00007fb38cc25fa0 RCX: 00007fb38c99e159 [ 358.268175][T16928] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 358.270679][T16928] RBP: 00007fb38ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 358.273153][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.275630][T16928] R13: 00007fb38cc26038 R14: 00007fb38cc25fa0 R15: 00007ffd8b4dda68 [ 358.278131][T16928] [ 358.279631][T16928] Kernel Offset: disabled [ 358.281008][T16928] Rebooting in 86400 seconds..