last executing test programs: 1m2.301136838s ago: executing program 1 (id=689): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x0) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000680)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000300)='!@%]!\x00', 0x100, &(0x7f0000000340)={@_ha_fsid={[0x9, 0xfffffffc]}, {0x3, 0x3, 0x100, 0x7}}, 0x80, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x3}) 1m2.300338018s ago: executing program 1 (id=692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 1m2.228605805s ago: executing program 1 (id=696): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nr0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x40000021, 0x0, 0xfffffffffffffffd}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r6, &(0x7f0000000180)="10", 0x20) 59.139024991s ago: executing program 1 (id=762): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) syz_pidfd_open(r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000a80)='4420', 0x4) 59.080791014s ago: executing program 1 (id=765): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="662e0f1f840000000000909090909090", 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x1010000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb29e0000, 0x0, 0x31, 0x0, 0x0, 0x0) 59.000536236s ago: executing program 1 (id=767): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f00000005c0)='./dm0\x00', 0x6180, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000001300)='asymmetric\x00', &(0x7f0000001340)=@secondary) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0xc80, 0x0, 0x30}]}) 43.449010534s ago: executing program 32 (id=767): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f00000005c0)='./dm0\x00', 0x6180, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000001300)='asymmetric\x00', &(0x7f0000001340)=@secondary) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0xc80, 0x0, 0x30}]}) 22.54717268s ago: executing program 4 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x50, 0x9, 0x6, 0x201, 0xf5ffffff, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 22.546447189s ago: executing program 4 (id=1302): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000000)={{0x108, 0xb, 0xbb, 0x21b, 0x324, 0x8, 0x3b4, 0x6}, "5bf6b167dacfa4f3cf609959c49ad9a275368075b450022c57ee69be47ad61e3b6ddba1839a3ceb0aeaacd4901820624b5a7a213e619", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa56) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a80), 0x518280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000ac0)=0xb) (async) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000010) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x100, 0x7ff, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa1f6, 0x4d}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x70}}, 0x1) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}}, 0x80) (async, rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00), 0x800, 0x0) (rerun: 32) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000f40)={0x0, @empty, @dev}, &(0x7f0000000f80)=0xc) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x424}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x406}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x172}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, [{0x3}, {0x9}, {0xc, 0x1}, {0x18}, {0x17, 0x1}, {0x30, 0x1}, {0x1b, 0x1}, {0x4}, {0x16}, {0x16}, {0x1, 0x1}, {0x24}, {0x4}, {0x60}, {0x3}, {0x1}, {0x6c, 0x1}, {0x1b, 0x1}, {0x6c, 0x1}, {0x3}, {0x4baf8d7b4dfd1850, 0x1}, {0x6}, {0x36}, {0x6}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001100)={'bond0\x00'}) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) read$FUSE(r5, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000003180)={0x10, 0x0, r6}, 0x10) (async) mkdirat(r5, &(0x7f00000031c0)='./file0\x00', 0x13) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000003200), &(0x7f0000003240)=0x4) (async) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f00000032c0)={0x2e, 0x6, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003280)=@new_dev={0x3, 0x3eb, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x5}}}, &(0x7f0000003340)=0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, r8, &(0x7f0000003380)={0x0, 0x1779, 0x1a20, 0x3, 0x148, 0x0, r5}, &(0x7f0000003400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x488b, 0xc2, 0x3, 0x236, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8386, 0x80, 0x3, 0x7f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcca9, 0x4000, 0x2, 0x3b7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1d8, 0x8000, 0x1, 0x2d5}}], 0x4, &(0x7f0000004680)={0x2e, 0x20, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xaf67}, 0x0, r9, '\x00', {0x3, 0xd4d, 0x0, &(0x7f0000003680)=@buf_max_buf="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"}}, &(0x7f0000004700)) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004780), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x38, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x7a6cf59b617bf668}, 0x44010) (async, rerun: 32) recvmsg$can_raw(r5, &(0x7f0000004a40)={&(0x7f0000004880)=@generic, 0x80, &(0x7f0000004940)=[{&(0x7f0000004900)=""/36, 0x24}], 0x1, &(0x7f0000004980)=""/147, 0x93}, 0x10100) (rerun: 32) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004a80), 0x103000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r11, &(0x7f0000004c80)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004c40)={&(0x7f0000004b00)={0x124, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_NAN_FUNC={0x104, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf5, 0xb, "174eb5a191e4adef8cf173d3e8abae02811afb048eb38e8d8c7734b5489f59e70abb6203694e2e998c2110e1dec8b0561cd9b648b539be3e60ae37f06a8b3172d96ea268b33d8f68e18d7c896c4c74690598627ac605a75eb0948378cd8f8f536e1f124a3be94cfbd9b62f5a8906af6c234b8400cca3d1d709d901c527b82d21101e8e1fce7dc313f76c841e05a721c939d3145641a9f82574e85811c44bb59c7b9aa3cae7cb47b3ca8a1d5e52f5a29c2308cc1ef202c0224aacc6644f650bbdaf4d0554941573b5f250f83a405f55f1fa970c50c2a5f3fc97eda41a172fb9f1afc309035875ef68b73b3df5a018edb5fe"}]}]}, 0x124}}, 0x20008014) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_NAPI(r11, 0x1c, &(0x7f0000004cc0), 0x1) (rerun: 32) write$P9_RSTATFS(r2, &(0x7f0000004d00)={0x43, 0x9, 0x1, {0xfffffff8, 0x8, 0x7ff, 0x1000, 0x3, 0x7, 0x81, 0x0, 0x7}}, 0x43) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000004d80)={0x8, 0x0, 0x6, 0x3, 0x8, 0x80, "dc72e741080709b40ea3779eee21ad43", 0x3, 0x6, 0x8, 0x9, 0xca, 0x6, 0x9}) 22.47983258s ago: executing program 4 (id=1305): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000a80)='4420', 0x4) 22.435032382s ago: executing program 4 (id=1306): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$kvm(0xffffff9c, &(0x7f00000009c0), 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x3f) sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000080)="662e0f1f840000000000909090909090", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01060000000000000000090000001c0004801301010062726f6164636173742d6c696e6b000004000780"], 0x30}}, 0x8000) ioctl(r4, 0xc138fd03, &(0x7f00000003c0)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r4, 0xc138fd09, &(0x7f0000000400)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e203020312031") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r7, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r9 = getpid() sendmsg(r4, &(0x7f0000000880)={&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)="239260b2bf5ce6ea4ce406c103927f0dcf1760ab08d64ff68fc09ea700bc4bf86c17a95eb19c7d4b2276e061968aea03c5fb24e93b11c22910eec30bacfd01973a40b31aa93b7d26b0666e27d46a02ef1ef5cd56d9d60bb9a7a3250eff830c24b391b54e21f5ec04b9500be04d2a842a71dfe291fce1c63772979c13905b23a3c587b928beb9a8cfa28c3d89e0dead5f2aeab1c56ecd6fa2a97b20c2f6fc0de895eef0b0f31102f5de", 0xa9}, {&(0x7f0000000700)="fbc141e7d8a4a7053ddedd41a6f1de1750ac277eb70c459237a1bd7c495a", 0x1e}, {&(0x7f0000000740)="b006ef95a62ef2a8a27bdb3128380e18e72e74db462d316299bd95e3bd973bf526eb61611a0451cc21e8dbb7b6c478f4b2c3c07ca8d756ce82155e0e26dc388e51c8c0f7f9eaf952cc0a9e2012a82f0628fb762ef1cc79056a0f4b4d6465ea957d98b52af79963add0a499cc6b431e3f8046a7f07cf96ef976de4ffed1072899f432c8675010f56e2d25d6fda3a0aab9eb6ccaf3da11252737c45ecee34df7f0201fc7630f26acb0bf971235a2e14238eb6f567aa46b18812acfe5e7f8953df60427871667fa6d489903d80e1b20dd241a80b4f04bdd6fa07e6d853f36e0a29d9a5a434dbb17a0b33d8d7e80e370939b68746c9987ae", 0xf6}], 0x3}, 0x24040) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone(0xb29e0000, 0x0, 0x31, 0x0, 0x0, 0x0) 22.380419694s ago: executing program 4 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xd, 0x4, &(0x7f0000000b00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000a00)={{[0x4, 0x1, 0x8, 0x40]}, 0x0, 0x1, 0x200, 0x0, &(0x7f0000000980)=[{{@align=0x8, {0xfffb, 0x6d7, 0xa, 0x4}}, 0xb, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x4]}, {0xb, 0xf75, 0xcd3, 0x3f0}}, 0x4, 0x0, '+'}, {{@_ha_fsid={[0x5, 0x9]}, {0x0, 0x9, 0x81, 0x200}}, 0x8, 0x0, '\x00'}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x200}]}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}}, 0x24}}, 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='27', 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="a0", 0x0, 0x1, 0x1000000}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='3', 0x4e) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)='4', 0x1}], 0x1) r9 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000880)={0x990000, 0x1, 0xb3, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x9f0902, 0x7, '\x00', @p_u8=0x0}}) 22.06078354s ago: executing program 4 (id=1316): r0 = syz_open_dev$mtd(&(0x7f0000000780), 0x0, 0x2) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x100) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x0) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000c00)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x2, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000cc0)=0x0) io_submit(r4, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f0000000d80)='1', 0x1, 0xf, 0x0, 0x0, r3}]) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000100)={0x0, 0x0, 0x100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000240)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000000340), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000380)={0x0, 0x680d, 0x1000, 0x1, 0x300}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c6c, 0x40008, 0x1, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7cee, 0x8000, 0x3, 0x10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54fc, 0x80, 0x0, 0x257}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6372, 0x1, 0x0, 0x1b6}}], 0x4, &(0x7f0000000680)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3d5}, 0x0, 0x0, '\x00', {0x0, 0x165, 0x0, 0x0}}, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x2}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r16, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x44) sendmsg$NL80211_CMD_ABORT_SCAN(r14, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x1c, r13, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}}, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000008c0)={0x2, 0x0, 0x98, &(0x7f0000000900)={0x0, 0x0, 0x1}}) 21.994850209s ago: executing program 33 (id=1316): r0 = syz_open_dev$mtd(&(0x7f0000000780), 0x0, 0x2) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x100) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x0) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000c00)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x2, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000cc0)=0x0) io_submit(r4, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f0000000d80)='1', 0x1, 0xf, 0x0, 0x0, r3}]) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000100)={0x0, 0x0, 0x100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000240)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000000340), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000380)={0x0, 0x680d, 0x1000, 0x1, 0x300}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c6c, 0x40008, 0x1, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7cee, 0x8000, 0x3, 0x10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54fc, 0x80, 0x0, 0x257}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6372, 0x1, 0x0, 0x1b6}}], 0x4, &(0x7f0000000680)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3d5}, 0x0, 0x0, '\x00', {0x0, 0x165, 0x0, 0x0}}, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x2}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r16, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x44) sendmsg$NL80211_CMD_ABORT_SCAN(r14, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x1c, r13, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}}, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000008c0)={0x2, 0x0, 0x98, &(0x7f0000000900)={0x0, 0x0, 0x1}}) 6.89063466s ago: executing program 3 (id=1587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) fsopen(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x12ba82, 0x0) sendfile(r2, r2, 0x0, 0x8) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="7098d9eebe806382f6010000003a6ac9718bf0a344e347c4a13945663135401c3f296c95d07a6c9a2f43a047c8bbcf885ac60de0cc904b2af251a99a0e4d03c30a9ac0dad9d4522e05f9f4a1220e7bc0b931e41b1ee04be1748be53e76bdb987213a56d2c7cc6ed12fdf30168f9c6b58722560d9a503d7360f8f66fb3db1454386629035f0dd3f07c6aeddcbb560b7e3a998ede1a512e90100"/167], 0xa) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000002240)={0x0, 0xb2f2, 0x2000, 0x2, 0xfffffffd}, &(0x7f00000022c0), 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000002300)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) dup3(r1, r0, 0x0) 6.280776166s ago: executing program 3 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x12a0462, &(0x7f0000000100)={[{@noprefix}, {@name={'name', 0x3d, 'rootcontext'}}]}) write(r0, &(0x7f0000000b00)='10', 0x2) 6.280680871s ago: executing program 3 (id=1593): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='target'], 0x13) 6.221132451s ago: executing program 3 (id=1594): syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="042c110cc800aaaaaaaaaa120064070800000000db712ab35ff70894bba695d758512f2ed8b2186e6a4409afe1f5a4b2dd07a2ad26cfb0656fd37950d115a9fd92d89b0f3f253456d137f6aee7fa24f415f9b23586f9b54e77d6c9"], 0x14) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x89901) move_mount(r2, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000640), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000680)={0x0, &(0x7f00000006c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000700)={r4, 0x0, 0x1, 0x0, 0x400000d4}) chroot(&(0x7f00000004c0)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) move_mount(r5, &(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0/file0\x00') ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000800)={r7, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x11, r9, 0x0, 0x3, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.670624024s ago: executing program 3 (id=1595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000013c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = fsopen(&(0x7f0000000040)='affs\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mode\x00', &(0x7f00000000c0)='7', 0x0) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001440)=0xce, 0x4) connect$inet(r0, &(0x7f0000001480)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000014c0)=0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x13}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x14, &(0x7f0000001540)=[{&(0x7f0000001580)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000015c0)={0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 5.160858114s ago: executing program 3 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000001840)="e460334470d8d400eb00c15270dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.08403123s ago: executing program 34 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000001840)="e460334470d8d400eb00c15270dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.74690737s ago: executing program 5 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (fail_nth: 3) 1.649618544s ago: executing program 5 (id=1645): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x7}, 0x4) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) close_range(r1, r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001400050126bc70007bdbdf2511000d000100053e3e71ed020000000000000000d9f85d07782612983fae986059ccead6526b3929bdef03e2360bbc086ad20f20d1ff27264518b1dfc0"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000140)={{@my=0x1, 0x2}, 0x9, 0xb, 0x5, 0x1, 0x80000001, 0xd, 0x1, 0x4}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x121a00, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r5) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r8 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001440)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1a790000002fd5a7a2a77c35d667b538009b6e67aa5b361f23152e6cbfb49d49a156aa3dde3a3d4161691ba93e9bd03b558cdaaca06879ea50c483c2556f8f761435f6fdc98e081a81467e37ea7c9e8be0b4ba5a9c82db881d6f0a7a462e361926e1", @ANYRES16=r6, @ANYBLOB="010030bd7000ffdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x11) ioctl$TCSETSF2(r3, 0x8910, 0x0) ioctl$MEMERASE64(0xffffffffffffffff, 0x40104d14, 0x0) close_range(r8, r8, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000440)={{r1}, "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"}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201103081bea00302011f020101300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300a06082a8503070101030203410041320973a4c138d6637d8bf7503fda9f6848c150e3423a9b2b28122aa7c2753165778c3c9e0d56b2f9dc04333eb09ef9744e59b383f29127da5ec733c0c18f41", 0x114, 0xfffffffffffffffe) 1.53081505s ago: executing program 5 (id=1646): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r0, &(0x7f0000000a80)='4', 0x1) (fail_nth: 2) 1.530341992s ago: executing program 5 (id=1647): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000005c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x26, 0x29, 0x70bd2d, 0x0, {0x11}, [@typed={0x5, 0x14e, 0x0, 0x0, @binary='E'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000b2d000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_clone(0x2800080, &(0x7f00000006c0)="f4ed64f6a783133744d28133f47e71d537bacb1592", 0x15, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="2f995044e40f7226b2ba4b79a589b0cc4132c8feefe6d913cc2d6ee136badcca49a02dfd9bca47cd2b7863b7ef413c1b81c1dc86d4e92771cc1202d65ea0688020854a79c8b2230ef03ab00afe429af33505150253ce7e820d09c7daf802") ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r6, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$dri(&(0x7f00000004c0), 0x20000000000001, 0x624ec2) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x12, 0x11, 0x67, {0x0, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs2/custom0\x00', 0x800, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000480)=r11) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000500)={r3, r6, r11, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) fsopen(&(0x7f0000000680)='ext2\x00', 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x30000, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.428164813s ago: executing program 5 (id=1648): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=r0]) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000240), 0x3fe, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000003c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48045}, 0x0) recvfrom$inet(r2, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000040)={0x0, &(0x7f0000000080)=""/129, &(0x7f0000000300)="1321ad80f35078d41e2aec257dcceca9e7074c0a8ff244e37635883458f34bcbcaf8662f399e9a4df9abfba5ef5446189c3bf4686d082e098457db949dc8b274d7dbfe64fc55263401f12f995e058b0bd9fdc64217", &(0x7f0000000140), 0x7, r1}, 0x38) 1.350770933s ago: executing program 5 (id=1649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x6e24, @empty}, 0x10) r2 = socket(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000003c0)={0x1, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @loopback}}}, 0x108) bind$unix(r2, &(0x7f0000000100)=@abs, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000340)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r6, 0x701, 0x10000, 0x25dfdbfd, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044841}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 929.874578ms ago: executing program 2 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xd, 0x4, &(0x7f0000000b00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000a00)={{[0x4, 0x1, 0x8, 0x40]}, 0x0, 0x1, 0x200, 0x0, &(0x7f0000000980)=[{{@align=0x8, {0xfffb, 0x6d7, 0xa, 0x4}}, 0xb, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x4]}, {0xb, 0xf75, 0xcd3, 0x3f0}}, 0x4, 0x0, '+'}, {{@_ha_fsid={[0x5, 0x9]}, {0x0, 0x9, 0x81, 0x200}}, 0x8, 0x0, '\x00'}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x200}]}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}}, 0x24}}, 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='27', 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="a0", 0x0, 0x1, 0x1000000}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='3', 0x4e) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)='4', 0x1}], 0x1) r9 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000880)={0x990000, 0x1, 0xb3, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x9f0902, 0x7, '\x00', @p_u8=0x0}}) 929.678717ms ago: executing program 0 (id=1656): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=r0]) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000240), 0x3fe, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000003c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48045}, 0x0) recvfrom$inet(r2, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000040)={0x0, &(0x7f0000000080)=""/129, &(0x7f0000000300)="1321ad80f35078d41e2aec257dcceca9e7074c0a8ff244e37635883458f34bcbcaf8662f399e9a4df9abfba5ef5446189c3bf4686d082e098457db949dc8b274d7dbfe64fc55263401f12f995e058b0bd9fdc64217", &(0x7f0000000140), 0x7, r1}, 0x38) 850.209297ms ago: executing program 0 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xd, 0x4, &(0x7f0000000b00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000a00)={{[0x4, 0x1, 0x8, 0x40]}, 0x0, 0x1, 0x200, 0x0, &(0x7f0000000980)=[{{@align=0x8, {0xfffb, 0x6d7, 0xa, 0x4}}, 0xb, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x4]}, {0xb, 0xf75, 0xcd3, 0x3f0}}, 0x4, 0x0, '+'}, {{@_ha_fsid={[0x5, 0x9]}, {0x0, 0x9, 0x81, 0x200}}, 0x8, 0x0, '\x00'}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x200}]}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}}, 0x24}}, 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='27', 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="a0", 0x0, 0x1, 0x1000000}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='3', 0x4e) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)='4', 0x1}], 0x1) r9 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) sendmsg$nl_route(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x4004000) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000880)={0x990000, 0x1, 0xb3, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x9f0902, 0x7, '\x00', @p_u8=0x0}}) 699.525841ms ago: executing program 2 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="de6bb8e3e33d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0a71cca5da5b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x2}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 699.321432ms ago: executing program 0 (id=1659): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}) (fail_nth: 3) 600.675501ms ago: executing program 0 (id=1660): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002800)={{0xffffffffffffffff, &(0x7f0000000080)='/dev/kvm\x00', 0x200, &(0x7f00000000c0)={@align=0x8, {0x63, 0x3, 0x8001, 0x5}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x5}, 0x8, &(0x7f0000002700)=[{0x1, 0x0, &(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)="a2e777aa193ce3075ebca8e101642636693bd0f313a18d021aa0cab476394975dc4ac2779744f5eb49c3545fdc7fb7b5921eb2c4143167fdf36f030e1f1c59e4a2e72225d5b5341a91f9c87f92eacb38cc1a2cb943848917aaea48605f72377c9b440f8dc395758d4d86db8897f8615f58", 0x71}, {0x3, 0x4, &(0x7f0000000240)='{(${++#\'}\x00', &(0x7f0000000280)="fdc8a8d22b1234e0b16c4b8affeed38e3c4ddaceb969b3a1215e39516c8ef9376c13100573fd84bb659a7ca356f1982a0c8a388b6c0b6a78666273c419e272eed1cb5dd710d44ee4e0a1884d2e4220aace84d8a19507eab708fb27fa04c364859efb5b841da0", 0x66, 0x20}, {0x3, 0x1, &(0x7f0000000300)='*\xa7]-^/\x00', &(0x7f0000000340)="9451c3447225fb746d98636393b4d5d9ec7cae2978bab6e4cda1c250cab88751d788c93d07622c9e72e4a667e86f66871493a71873e77efe29ee133e71a1f5a313a64f840c0683f7b69be26533cbe0354e45b9d95ee90c0c2cfe8f8e6dd5d72ef6a11b4cf00e6b218df235d9ce5461c097ed30acc87cf9aedf8feab353c22f780eacb08a9a8d10129449f5c24bbdc194963a4835625250f97ea6f34fc9146494dcb430d6a08758c880228de8ca1f2f8e3c59655c7bc365f6265b0c0034f0097ba6cfc336949427e4d2cbd5c701748e65dd9322a0baecbeb6d3741b16174361f1dd439ef13805ce57bbcd2289253a3bc4f05635e8323abded9b4ee875a5d375580e1219bd15d812c6b6748f9ffa37bc725865e3bb99fe25286f3f91c263be207d33061350019c1e83e9b24414b8f2c0c23e492bb1b5b27b69817a426310c971caae4afce3e966fa1f8c2b09b40925172fed88839946839dc8eca1e5a5b993a760ed03d8d78c23fd3e7329f1ff917bf5f387da44026e15e42055a7842fa24de64c8bcfb94ad881bf7e38f73ad4fcb322a2af8b48f5992751a68821967b9ed455baf5f693d5d6521d77d94b6dcb816e1b2c85fcb8fbc0694ed2cb468c9306c8eeeef92ae7a116e4d3aa89bb8f34289beed12378fbd66b754593305ccbc39a90b1db40ab4d8b545b0d1cef25e1a90f4eaf7402e2b69c76f36a69d35e2413215047c5fd7cc24152aaa11f616068cae793a541b6e523ed0cfab9b44f03a2d1bfa506414bf9fbeaa65107214f69445527e95c1cd8b823b478704992865328ffde6658ec459a83ebca0831457a24c1756f10713f7c739f51616ed7cbfa046e193afc77ac80b1cdf5bf42f70a60500578598f6c93dc9c2c50914308cadf3679bbb718cdcd7c51174c649bb45604fc0f6c9e08d5fadf33e82c325780e86d4b35ab75f1563549ff0f54fb1d1f07416a87ca477f09a3ffafcff1bee35f497568dadaa0589c11cea148a90a2b8bdbc500205ae7678885dc2ad7af1e0f92b23a746ee2f75713fd7dd40395637c87d9dd251e16815c24471588e0b0dea4558bc3e274aabe74e38c2932b95723cebcea8b6146ee3351de831e63d83e04b8a1c77b6d619dbbf00e4b10791cb78133df8b7f24caa4464e0be3d56d9ab5d66407db966a805c9888da395f77a95bb947c7055fa9dc4d39192b48437a83b52687f6cd9462996649e5697f529530b52974348e3f8aa36950f76ed012636d67f4e56a664af2126936790ca099efec2eedafc6f17c244b31ae78db0c16a702cdfee00435d1475f1f360fd38445db16d1932d770c1476ff3fd18d2044becc9956d899e50ca9260f415deedff7a6d8865c14bb21d37266676b56954c24ec13a3b7beef4ce183492fc3a8ceb314549675b031dd8dcaa974486a9519f9c388c5c99dbdb42210fb73a1bcebd6161a3da95eb702fb1c2ed730aef619d9a16988e22e79c171a1873118f44cb72140d8ae0505ee22d8622a820aa18938a9c231c40b50882cc7c70fe84ae86534f7294b8e22f9ee10e481f700771390ab48fddd1c1513204f24b19b6384bdfe9e81de29c405bbd560c7a7572dfc2d81f9ef261f6575833db0e3288492e25b630e5639bac90d4e13b9fb07b9d08f4739529295e558bca3659f37414d44a5232998066420a79a93cdd630257e5993bccf30a74f50f7e42c773f6af87110838f3a3b4939a0f58bc15898cfa3465caf9f69d0c982bb93d329179f1c860109ec221f842363c875045f0852724651de92b6cecc7dc992473dc3a708b1c5fb16df20be5cec4e43c2981ac4baddbc647a823de83cf47916c90d9a1c9a62449197b10b4e4eb5eb6f0ad18b39a54c4c66885272dcb440a61c0286b523feb48a9d9ff1ed98e04ba63f05c8a1b304b4a0a435076169c2593e3fd46ed2d793667045da7422d1048fd4260fd56d36ee0b0f3cfcaa73f04f7c04fd8c9d44c08d018f22c58e99e972083a3799822c05718f6ea8a95d86a2b11a390e2763c22478c0d69d2351ebdfc12dccf55d02185dac663ca1f620f35d42c34ea89b2a50b955cdfdb9e1f3f906b49a27a1e6289a56ec74f938fbb3ece032aa194b0462f3b53e0236ee386f18d5e2dd6a1cab7f0217c7650d0325551dd0975f30797078d15de857a817983db2ecdea0020e6e5e0f56d47fbdda71161ef14c7c310d0f5beff25d9fe9658b8ac39bd71bec20ef5069afd8bc35b7f8ff1d61e49bdad882ae884a28f22ecfb0b7161baa6754fbb27736e6008c7f3311e85b83b2da0f2f05ce655f6826c49c18d6c44c40d9737ce83225d5d3af954775886a3baba5f95c083d4f2ea890934054f0f72a129054b303918b6698f02c122d6618d1923439ff43e90a59cc389e57f391c2bb99db65c8312052d309fab8d61437e19727be0ae80b702367815d01a026b41e91de21ed13ad57ffb081fc252bb60f75f3f5dbb98c1669654a3914f98b1a5716fb366b64e2585276acb145bb077d80a96b6878c2c2d94fe4a14e09b252a8497eb6d7fb80d7140345a88e0ed602aa550de2942df0f9f39bd64ec1cdf1cd5d01505a3a851d2698d1b487c201e645142af3936459d67ff3186708cc5fbe3ea31a1ea18447644fdce1b6dabc6e430c626686e29974fa9c38761f3e97c687951331a6b86f001ed2c81f931f3c248b3f1e56bf0041b9f03d8a834fc03718412cf980d6b9f19715042e9376f57bf4f71b93c7cdab6ab8ad5739b8b4891b228dcb031afff91d39743fc7e49d0e0d6dddd35e54fb8514d81a393603f8e539793f924b3609e526fce51abd78a71173909afe4a99a46e0ee31e79b0f1178db2111feaba4ff8e7fc3012530f436ed6d9a8bda2e8a1f9c81570798c461b77ee6d87e2df5869606b98356d1fc5f1ac91088aaba9729ca7c17a25a41c0164bd9b758cc7b7f5a45cc17cbbced6218df2c2c3ba05ec8149e1820553d122898c86f28af9ef1eb52c00d671ce7582fff62f2f6dda62e493c1ebb501b5c1d4c8ae3f9f326585dc4a145264829b8369fa47ccf3be55a0f8ab3123f234a10e2d2db711f1bf258a16c9e2f1961b2ddadf8df333287d6cd0392c17e2bb54cb6f98b2b6dd9fe7a9c4a7d3a9e37813bfb460ce709eb5169a569fb35f9db2d42c69790e2d440635d109f5aa22a13c5f8855036b5cd9cb95cfc1b51bb672b58b2059ed580ca64fa207d1efee42c4b6fe6297210b3c58b07edf234c51d2218b1c3530553c199c3b0f77ffb034ab5d93a37a38aaac98ee80e8255ef7163a00872aa31d7990e8592eef0a2ad15d912e85e26739517301153f989ab77ec76b98519c3648e54087d72cd6bc452044984518ed69362a74ff38383746006d9f5e97694f33914ed1e4977d39202c0b2d1278c2b1818cd5d70d56cdad08672f3257f7e69273947604d0968dc1af22fdfafc8c5e7852c7a6fee23fd4f2a56b9e41bd7656eff2adcef8f5fcff873bab73534ab86702b81b4c7969919a0d2bb5270d598b7cec0e5becd6eeaf367b9d2f69d15a170db3f2fe3199a14c802bc011284c6922e2f54fc6df86bb1d10e3d6fcbb36f170634ca1248780cf022243992264b7bcee2e6fabbad0d9c0c673d30cab266751cc3ec49075f83ada28a9a8ec4b5e053030726bbeb46faea47e27fa28b8a92e1f2027840fbddbf137facdbf8a08756b02ff3c6901e1e9438a8fc850b78472cdbf529482af895728af5db0d4945f2ec13e605a8867f57d45eceda5bf1a2559d6ffca309ebd5357407e759f08e4c99fa8d4d3f2e8559d8d3a95a8cb5a75c05dd48e1974a26049b603f7925a48c69ba447dc7e91b24a74503385d4c9cde2c420cb4294e7256574adc4272569d9ea1f3f353fffb91cc48de3fab908c3ff9207003b60bd0e176f775534a2e16d8c1b96db9bf44d4caec11f2ce8ab930ca6b5d7da0a3dff3d10d02e53d2bae39b7db30f28d218adc52fbc39d63d5e6ee9cb0840f50e9a3402ed230b89417875dc0e29ab5f850503a06b2d0a83257ee05d7bb1e2f580a66c8ffbc0c120cb877013f7bbddd360a0d4ab47ddfc15e898869cd49179f7b82fb9fd9f0022ec269c3a0da77304d645ee4a6ec9b204c670c4ea6c28d44493d91fd104d5c112a216336dd6cb1d113c93d786f4d3bc36e33f9aad65a933b62730d65ab65921a7118f4fd4406612f387c86ce0b6aaea458a3ddb2369178ee6e03c8cf46cfbe874e94f6bbd0c0fce4f637f62abe41ab7b446915ca55e8a06f64d52ad01b13ba89a65f15187b6cb67c23a5733474f81ace67c26ca30a21caf1890d72752c69e75681d0f277f86b2115419988094ef30be9e2649ceb96bd6292763728a7fb07e4a08b33fcef87b14812f4e4e9a1620104910e177f0aff0793e937cba9c12b6926a5ea32572ff0c1e8cd92e5fa28962dfc1a048dbe99854e9f37613c5d003214c6c647de4eabaca35f7f531b3a65e28a959d1fcacec0f0d1952996c27112d0fff3faa3fa0996e9259743249c30a913dc28a30c047945b67fe84c73f5cb3ff0b049197271b39676cefb1a821292f12c4b73a0beb9b1e1724f8eb84c1471b00626534416e399a8cf8fe76bca81e9de67dd3f166b9d63d117c26352726624a924aa16e0ef4c407fbae4354a59e22269fe906d936d4fa9a1ce12c8bc596c870a7eab0cb62ea73b9257869b8535f6c56b9041013c69ba3e3f14c6876321f5b2d67ba55a46b624e6e389356f6695da272449b740b2d036c4891f80d1c816baf0ca82e90879f4484585d3b0b0f192f7107e8c177b197474eb87ea5c1f567e46c5fe09a320d147302bf841608f91c482b729533dd8642a1db52d385d376ec04cbe7a84c4cb5e2137522c81e37c5b21f712ab2993c09c2d0bd81f6ea443b69b3f02f9a8cfd83aafc48b7a85223dc5727df315f47e800a67fc0a1d63cfd69a96051e32db1c5da273187d62bbf98fdc1caaf9189ca156afab2322307b4cd420a96c7f0a1bc3ee6937ced4314dd9a3772bbfde93e6606d7524e8f726ca5e1f97bd5757ddcf90badeac523cfda83f31f138d02a82751d4f6559fc597233c06509890eb61c2b4ed84fd160660ef011ab8dab2820711827109ebfdbef4ccc39a4c44bb0ba42380430f701f54f4fe5d5fd057d89ef75c2ada7704c60fb4fb7aea24a0f157c4cd8737dfcfa66fcd3e30b7150e0064014f1058d0345e42bc2a5b402f5d8ed3aa22137de6398270d4cee80603c53b9ee208b9955c9759032512425ccb426cbb83e044039bade742bc8d15771e6ac9557991794d9ecb86e5e10b914699ef1df8e353acb34c7e8b697a6c0c33f39a5c07af0bd70b96d7d41e97e445123169e8dcdda08909c0a99a4ba1b56028008ccea0592d64466fa6da1048aa12616277cf6ffdf442f79dff6d88f6de5c578a1ba50587419434169886e33bf4d36e78e15aa8030b8c8515648e3a528f21b3c3f9b72ed2de96a5533ed35318dd163742df3cfc1552b2f07ffeb004baa20f173feb67e1ab8e295979e36bb971d62be925671f4946e10cf53d61787f342c65323e840d4710c9dd9afd7a738a601aa7a7ea356a2dccbba4b4c43282cc7a4f8052a98d00011845971fabe9a5cb02ccdb05886e75474611994135a11bb261611e5276fab373a44457f69be2fba0c0624e0bde02d6293614c4876211ce456af7148b62e21b8f8e163032f5ee5ade3d0040831ff76643b0fb588ceda94cf6e7b51b0ac450da128e76dd92cb90671b428bfa9c92b37dfe3ae52be7f16bef92b89bceefb98a5600ce44dc439e1dc00f5e32dcc600eb6c893239066e5b4820", 0x1000, 0x12}, {0x1, 0x3e8000, &(0x7f0000001340)=':\x00', &(0x7f0000001380)="784da9fedd263b7b588a43cd8d2271608309931561e4bea499d7443e073a94f4c94bfcb26ac87097b5024adc270fa27133b5cbce706e0ac4b662981381d379613460819cb7713e4e2cada0c2f176993deacd966498a4249889a690ca3d9aca5f2cac5c600d6ca370eb1045fbb0cfaedb4b43f3675178412b7b37c64151c9dff1196419df67d778466d94bbc0538a70c53743e8f1b6c5b2a294176b785e2eac250743495b95484b6991b42347ad72092911e64d300c5df3d37a783fb3d323a9570218065c09f790b432c9b37751d09e4ae168ded6823a537bf729c22a863a7c6b66cf605cf21c9409449d453066b740540cbe39181f6e", 0xf6, 0x2}, {0x2, 0x1, &(0x7f0000001480)=')*:*^]\x00', &(0x7f00000014c0), 0x0, 0x18}, {0x2, 0xca8, &(0x7f0000001500)='\x00', &(0x7f0000001540)="98773fbe99ccc3f13facab50c6ab19a85529b9fd4643324ef2028afb83ae70f54951137caa534eb0662972bd7ae5fc140e8ac700ae62411fc679b239cbb2e38798039a840d33931cfb32c73e8ccedaf118e1d1e9f2ce0b4ac14000114360fb882b8fb1bea2dc59e5aac6553efa0fd3277c87e100a4b0a24bc9155b3b549485f862e11bdd853f0b543b95da82bdbcc8b2", 0x90, 0x2a}, {0x1, 0x32a0, &(0x7f0000001600)='-)^*\x00', &(0x7f0000001640)="c3613fc2106d8934ff001cc7f912a6990f906910641b793c1ef7c112134abfb4b6dc94b8f992c24d222dc135f89027313dbb389285bd438e3bf6f49d94fe8a5880fc27e1506f2acdd26b1da3dacb82ce9029dd42751d", 0x56}, {0x3, 0x4, &(0x7f00000016c0)='(^}.&*\x00', &(0x7f0000001700)="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", 0x1000}]}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000028c0), 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000002880)='/dev/kvm\x00', 0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88900, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xafc, 0x0, 0x4}]}) 548.999338ms ago: executing program 0 (id=1661): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff}, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x4) write$binfmt_misc(r0, &(0x7f0000000340), 0xd) 490.017217ms ago: executing program 0 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./dir0\x00', 0x1ff) mount(&(0x7f0000001b40)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000001b80)='./dir0\x00', &(0x7f0000001bc0)='ceph\x00', 0x6000000, 0x0) 489.767134ms ago: executing program 2 (id=1663): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000700), 0x408d01, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000340)={r4, 0x2, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r4, 0x9, 0x5, 0x6, 0x3, [], [0x8, 0x3, 0x9, 0xfde], [0x400, 0x2e, 0x1, 0x2], [0x8, 0x9, 0x1, 0x1]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r7 = dup3(r6, r5, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000480)=[@acquire]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 408.819439ms ago: executing program 2 (id=1664): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pimreg\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf253900000008000300", @ANYRES32=r7, @ANYBLOB="10005a800c0003800500010004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) sendto$packet(r4, &(0x7f0000000100)='E\x00', 0x2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x791}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20061090}, 0xd0) 404.477666ms ago: executing program 2 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001940)='270', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x47) write(r2, &(0x7f0000000080)='0', 0x1) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 300.009125ms ago: executing program 6 (id=1668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005200)={&(0x7f0000005240)=ANY=[@ANYBLOB="60010000100001000000000000000000ac141444000000000000000000000000fc0100000000000000000000000000010000ecdf000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b000000000000ffffff7f00000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200021057000000000000001c001700000000002abd70000000000000000000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 299.857309ms ago: executing program 6 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 230.430498ms ago: executing program 2 (id=1670): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000007c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000840)={0x17c04, 0xffffffffffffffff, 0x91, 0x973b, 0x84, 0x2000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000480)=[@acquire]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./tracing\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f00000009c0)="723a732f70202e2f66696c65303a300c5c22b9", 0x13) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@empty, @remote, 0x0}, &(0x7f00000002c0)=0xc) renameat2(r4, &(0x7f0000000140)='./dev/sda1\x00', r1, &(0x7f0000000700)='./dev/sda1\x00', 0x1) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9) sendmsg$nl_route_sched(r5, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3}, {0x2, 0x1}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x6860}, 0xcc44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)}) 230.097492ms ago: executing program 6 (id=1671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef"], 0x60}}, 0x0) r3 = socket(0x1f, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0d060001080006040001aaaaaaaaaa0100000000000000000000ac1414aa"], 0x0) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40000102, 0x1}) io_uring_enter(r4, 0x6618, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) 129.125517ms ago: executing program 6 (id=1672): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x101) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x170) write(r0, &(0x7f0000000140)='27', 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000008c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000900)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000980)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000009c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000a40)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x612000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x20) r8 = syz_open_dev$vim2m(&(0x7f0000000540), 0x800, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x5f05, 0x2, 0x80, 0x80, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x6c}, @in6=@private2, {0xff, 0x3, 0x9, 0x3, 0x926a, 0x2f4a, 0xfffffffffffffe00, 0x4}, {0x1, 0x1b83, 0xfffffffffffff703, 0xb74}, {0x8b, 0x2ff16e5a, 0xa4f}, 0x70bd2a, 0x3506, 0xa, 0x3, 0xff, 0x22}, 0x800, 0x4947}, [@mark={0xc, 0x15, {0x35075a, 0x10001}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008440) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000580)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000005c0)={0x2, @win={{0x5, 0x8, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000880)={0x9, 0x1, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r7, &(0x7f0000000540), 0x492492492492627, 0x0) 553.1µs ago: executing program 6 (id=1673): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f00000005c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r2, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 0s ago: executing program 6 (id=1674): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = msgget$private(0x0, 0x790) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff}) (async) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x7, 0x9}) prctl$PR_CAPBSET_DROP(0x2f, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf240200000005000d001e000000080002"], 0x30}}, 0x400c040) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf240200000005000d001e000000080002"], 0x30}}, 0x400c040) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4040}, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4040}, 0x0) kernel console output (not intermixed with test programs): owpath+0x10/0x10 [ 130.250889][T10007] __x64_sys_openat+0x12d/0x210 [ 130.250903][T10007] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.250923][T10007] do_syscall_64+0x123/0x790 [ 130.250936][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.250949][T10007] RIP: 0033:0x7f1f5299f559 [ 130.250962][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.250974][T10007] RSP: 002b:00007f1f53861028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.250993][T10007] RAX: ffffffffffffffda RBX: 00007f1f52c26090 RCX: 00007f1f5299f559 [ 130.251001][T10007] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 130.251010][T10007] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.251018][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.251026][T10007] R13: 00007f1f52c26128 R14: 00007f1f52c26090 R15: 00007ffdf6f1ecb8 [ 130.251043][T10007] [ 130.263871][ T5734] Bluetooth: hci0: command tx timeout [ 130.291844][T10008] FAULT_INJECTION: forcing a failure. [ 130.291844][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 130.291870][T10008] CPU: 1 UID: 0 PID: 10008 Comm: syz.3.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.291891][T10008] Tainted: [L]=SOFTLOCKUP [ 130.291896][T10008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.291906][T10008] Call Trace: [ 130.291911][T10008] [ 130.291917][T10008] dump_stack_lvl+0x100/0x190 [ 130.291944][T10008] should_fail_ex.cold+0x5/0xa [ 130.291967][T10008] should_failslab+0xc2/0x120 [ 130.291990][T10008] __kmalloc_noprof+0xfc/0x840 [ 130.292010][T10008] ? trace_kmalloc+0xeb/0x110 [ 130.292031][T10008] ? lsm_blob_alloc+0x68/0x90 [ 130.292053][T10008] lsm_blob_alloc+0x68/0x90 [ 130.292070][T10008] security_sk_alloc+0x2d/0x290 [ 130.292092][T10008] sk_prot_alloc+0x12a/0x2a0 [ 130.292148][T10008] sk_alloc+0x36/0xe80 [ 130.292168][T10008] packet_create+0x127/0x8e0 [ 130.292223][T10008] __sock_create+0x339/0x860 [ 130.292251][T10008] __sys_socket+0x14d/0x260 [ 130.292278][T10008] ? __pfx___sys_socket+0x10/0x10 [ 130.292308][T10008] __x64_sys_socket+0x72/0xb0 [ 130.292330][T10008] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.292345][T10008] do_syscall_64+0x123/0x790 [ 130.292362][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.292377][T10008] RIP: 0033:0x7f4304d9f559 [ 130.292389][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.292404][T10008] RSP: 002b:00007f4305c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.292421][T10008] RAX: ffffffffffffffda RBX: 00007f4305026090 RCX: 00007f4304d9f559 [ 130.292432][T10008] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 130.292443][T10008] RBP: 00007f4304e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.292452][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.292461][T10008] R13: 00007f4305026128 R14: 00007f4305026090 R15: 00007ffd2e084138 [ 130.292481][T10008] [ 130.418932][T10016] 9pnet_virtio: no channels available for device syz [ 130.483604][T10021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 130.485315][T10020] FAULT_INJECTION: forcing a failure. [ 130.485315][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 130.485337][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.0.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.485354][T10020] Tainted: [L]=SOFTLOCKUP [ 130.485358][T10020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.485365][T10020] Call Trace: [ 130.485370][T10020] [ 130.485375][T10020] dump_stack_lvl+0x100/0x190 [ 130.485397][T10020] should_fail_ex.cold+0x5/0xa [ 130.485415][T10020] should_failslab+0xc2/0x120 [ 130.485434][T10020] kmem_cache_alloc_noprof+0x92/0x6a0 [ 130.485451][T10020] ? security_file_alloc+0x34/0x2c0 [ 130.485467][T10020] security_file_alloc+0x34/0x2c0 [ 130.485479][T10020] init_file+0x95/0x480 [ 130.485491][T10020] alloc_empty_file+0x79/0x1c0 [ 130.485504][T10020] alloc_file_pseudo+0x183/0x290 [ 130.485518][T10020] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 130.485531][T10020] ? bpf_lsm_socket_post_create+0x9/0x10 [ 130.485568][T10020] sock_alloc_file+0x50/0x210 [ 130.485587][T10020] __sys_socketpair+0x353/0x5b0 [ 130.485609][T10020] ? __pfx___sys_socketpair+0x10/0x10 [ 130.485627][T10020] ? __sys_socket+0xac/0x260 [ 130.485647][T10020] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.485665][T10020] ? __pfx_ksys_write+0x10/0x10 [ 130.485687][T10020] __x64_sys_socketpair+0x96/0x100 [ 130.485699][T10020] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.485714][T10020] do_syscall_64+0x123/0x790 [ 130.485728][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.485741][T10020] RIP: 0033:0x7f1f5299f559 [ 130.485752][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.485764][T10020] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 130.485776][T10020] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 130.485784][T10020] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 130.485792][T10020] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.485799][T10020] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 130.485806][T10020] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 130.485821][T10020] [ 130.524576][T10025] FAULT_INJECTION: forcing a failure. [ 130.524576][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 130.524607][T10025] CPU: 2 UID: 0 PID: 10025 Comm: syz.2.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.524633][T10025] Tainted: [L]=SOFTLOCKUP [ 130.524640][T10025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.524651][T10025] Call Trace: [ 130.524658][T10025] [ 130.524665][T10025] dump_stack_lvl+0x100/0x190 [ 130.524697][T10025] should_fail_ex.cold+0x5/0xa [ 130.524724][T10025] should_failslab+0xc2/0x120 [ 130.524754][T10025] __kmalloc_noprof+0xfc/0x840 [ 130.524779][T10025] ? rcu_is_watching+0x13/0xc0 [ 130.524809][T10025] ? tomoyo_encode2+0xfb/0x3c0 [ 130.524836][T10025] tomoyo_encode2+0xfb/0x3c0 [ 130.524860][T10025] tomoyo_encode+0x29/0x50 [ 130.524878][T10025] tomoyo_realpath_from_path+0x18c/0x690 [ 130.524905][T10025] tomoyo_check_open_permission+0x2af/0x3c0 [ 130.524934][T10025] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 130.524971][T10025] ? hook_file_open+0x248/0x8e0 [ 130.525020][T10025] tomoyo_file_open+0x6b/0x90 [ 130.525085][T10025] security_file_open+0xb5/0x1e0 [ 130.525107][T10025] do_dentry_open+0x552/0x1470 [ 130.525140][T10025] vfs_open_consume+0xcc/0x460 [ 130.525165][T10025] path_openat+0x1551/0x2430 [ 130.525188][T10025] ? __pfx_path_openat+0x10/0x10 [ 130.525214][T10025] do_file_open+0x20e/0x430 [ 130.525235][T10025] ? __pfx_do_file_open+0x10/0x10 [ 130.525264][T10025] ? __pfx_kfree_link+0x10/0x10 [ 130.525299][T10025] ? _raw_spin_unlock+0x28/0x50 [ 130.525326][T10025] ? alloc_fd+0x471/0x7a0 [ 130.525353][T10025] do_sys_openat2+0x163/0x1d0 [ 130.525372][T10025] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.525403][T10025] __x64_sys_openat+0x12d/0x210 [ 130.525424][T10025] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.525442][T10025] ? ksys_write+0x1ac/0x250 [ 130.525476][T10025] do_syscall_64+0x123/0x790 [ 130.525498][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.525518][T10025] RIP: 0033:0x7f190bb5fd8e [ 130.525535][T10025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.525552][T10025] RSP: 002b:00007f1909df5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.525571][T10025] RAX: ffffffffffffffda RBX: 00007f1909df66c0 RCX: 00007f190bb5fd8e [ 130.525583][T10025] RDX: 0000000000000002 RSI: 00007f190bc3641a RDI: ffffffffffffff9c [ 130.525595][T10025] RBP: 00007f190bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.525609][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.525619][T10025] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 130.525646][T10025] [ 130.525847][T10025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.525910][T10025] FAULT_INJECTION: forcing a failure. [ 130.525910][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 130.525933][T10025] CPU: 2 UID: 0 PID: 10025 Comm: syz.2.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.525958][T10025] Tainted: [L]=SOFTLOCKUP [ 130.525965][T10025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.525991][T10025] Call Trace: [ 130.525997][T10025] [ 130.526006][T10025] dump_stack_lvl+0x100/0x190 [ 130.526036][T10025] should_fail_ex.cold+0x5/0xa [ 130.526062][T10025] should_failslab+0xc2/0x120 [ 130.526099][T10025] kmem_cache_alloc_noprof+0x92/0x6a0 [ 130.526121][T10025] ? __pfx_map_id_range_down+0x10/0x10 [ 130.526145][T10025] ? rcu_is_watching+0x13/0xc0 [ 130.526172][T10025] ? security_inode_alloc+0x3b/0x2c0 [ 130.526202][T10025] security_inode_alloc+0x3b/0x2c0 [ 130.526230][T10025] inode_init_always_gfp+0xc6f/0xfb0 [ 130.526253][T10025] alloc_inode+0x8e/0x250 [ 130.526293][T10025] sock_alloc+0x44/0x280 [ 130.526315][T10025] ? security_socket_create+0x7f/0x250 [ 130.526342][T10025] __sock_create+0xc2/0x860 [ 130.526375][T10025] __sys_socketpair+0x1e4/0x5b0 [ 130.526405][T10025] ? __pfx___sys_socketpair+0x10/0x10 [ 130.526437][T10025] ? __pfx_ksys_write+0x10/0x10 [ 130.526465][T10025] __x64_sys_socketpair+0x96/0x100 [ 130.526484][T10025] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.526502][T10025] do_syscall_64+0x123/0x790 [ 130.526522][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.526541][T10025] RIP: 0033:0x7f190bb9f559 [ 130.526555][T10025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.526572][T10025] RSP: 002b:00007f1909df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 130.526589][T10025] RAX: ffffffffffffffda RBX: 00007f190be25fa0 RCX: 00007f190bb9f559 [ 130.526600][T10025] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 130.526612][T10025] RBP: 00007f1909df6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.526623][T10025] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 130.526634][T10025] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 130.526659][T10025] [ 130.526823][T10025] socket: no more sockets [ 130.647872][T10036] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.662991][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 130.665877][T10034] FAULT_INJECTION: forcing a failure. [ 130.665877][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.665896][T10034] CPU: 2 UID: 0 PID: 10034 Comm: syz.3.1375 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.665912][T10034] Tainted: [L]=SOFTLOCKUP [ 130.665916][T10034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.665923][T10034] Call Trace: [ 130.665927][T10034] [ 130.665932][T10034] dump_stack_lvl+0x100/0x190 [ 130.665953][T10034] should_fail_ex.cold+0x5/0xa [ 130.665970][T10034] strncpy_from_user+0x3b/0x2d0 [ 130.665984][T10034] do_getname+0x78/0x390 [ 130.665999][T10034] do_sys_openat2+0xc3/0x1d0 [ 130.666011][T10034] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.666023][T10034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.666040][T10034] __x64_sys_openat+0x12d/0x210 [ 130.666052][T10034] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.666070][T10034] do_syscall_64+0x123/0x790 [ 130.666089][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.666102][T10034] RIP: 0033:0x7f4304d9f559 [ 130.666113][T10034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.666124][T10034] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.666153][T10034] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 130.666161][T10034] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 130.666168][T10034] RBP: 00007f4304e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.666175][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.666182][T10034] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 130.666200][T10034] [ 130.670240][T10039] FAULT_INJECTION: forcing a failure. [ 130.670240][T10039] name failslab, interval 1, probability 0, space 0, times 0 [ 130.670258][T10039] CPU: 2 UID: 0 PID: 10039 Comm: syz.0.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.670273][T10039] Tainted: [L]=SOFTLOCKUP [ 130.670277][T10039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.670283][T10039] Call Trace: [ 130.670287][T10039] [ 130.670291][T10039] dump_stack_lvl+0x100/0x190 [ 130.670311][T10039] should_fail_ex.cold+0x5/0xa [ 130.670327][T10039] should_failslab+0xc2/0x120 [ 130.670344][T10039] __kmalloc_cache_noprof+0x91/0x6d0 [ 130.670358][T10039] ? configfs_write_iter+0x388/0x4e0 [ 130.670375][T10039] configfs_write_iter+0x388/0x4e0 [ 130.670392][T10039] vfs_write+0x6af/0x1050 [ 130.670407][T10039] ? __pfx_configfs_write_iter+0x10/0x10 [ 130.670422][T10039] ? __pfx_vfs_write+0x10/0x10 [ 130.670435][T10039] ? find_held_lock+0x2b/0x80 [ 130.670455][T10039] ksys_write+0x12a/0x250 [ 130.670469][T10039] ? __pfx_ksys_write+0x10/0x10 [ 130.670488][T10039] do_syscall_64+0x123/0x790 [ 130.670501][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.670512][T10039] RIP: 0033:0x7f1f5299f559 [ 130.670522][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.670532][T10039] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.670543][T10039] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 130.670550][T10039] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 130.670556][T10039] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 130.670563][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.670569][T10039] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 130.670584][T10039] [ 130.764914][T10047] can0: slcan on ttynull. [ 130.824894][T10036] dummy0 speed is unknown, defaulting to 1000 [ 130.835380][T10046] can0 (unregistered): slcan off ttynull. [ 130.952920][T10050] FAULT_INJECTION: forcing a failure. [ 130.952920][T10050] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.952942][T10050] CPU: 1 UID: 0 PID: 10050 Comm: syz.0.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.952958][T10050] Tainted: [L]=SOFTLOCKUP [ 130.952962][T10050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.952968][T10050] Call Trace: [ 130.952973][T10050] [ 130.952978][T10050] dump_stack_lvl+0x100/0x190 [ 130.953012][T10050] should_fail_ex.cold+0x5/0xa [ 130.953028][T10050] get_futex_key+0x1c9/0x13e0 [ 130.953073][T10050] ? __pfx_get_futex_key+0x10/0x10 [ 130.953093][T10050] futex_wait_setup+0x91/0x540 [ 130.953125][T10050] __futex_wait+0x19f/0x360 [ 130.953142][T10050] ? __pfx___futex_wait+0x10/0x10 [ 130.953160][T10050] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.953180][T10050] ? futex_hash+0x311/0x400 [ 130.953209][T10050] ? __pfx_futex_wake_mark+0x10/0x10 [ 130.953235][T10050] ? find_held_lock+0x2b/0x80 [ 130.953254][T10050] ? futex_wake+0x4ea/0x5e0 [ 130.953278][T10050] futex_wait+0xe6/0x370 [ 130.953292][T10050] ? __pfx_futex_wait+0x10/0x10 [ 130.953313][T10050] do_futex+0x265/0x440 [ 130.953323][T10050] ? __pfx_do_futex+0x10/0x10 [ 130.953343][T10050] ? fd_install+0x252/0x580 [ 130.953362][T10050] __x64_sys_futex+0x34f/0x4d0 [ 130.953373][T10050] ? __sys_socket+0xac/0x260 [ 130.953408][T10050] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.953425][T10050] do_syscall_64+0x123/0x790 [ 130.953459][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.953472][T10050] RIP: 0033:0x7f1f5299f559 [ 130.953482][T10050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.953494][T10050] RSP: 002b:00007f1f538820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.953514][T10050] RAX: ffffffffffffffda RBX: 00007f1f52c25fa8 RCX: 00007f1f5299f559 [ 130.953522][T10050] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f52c25fa8 [ 130.953530][T10050] RBP: 00007f1f52c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 130.953538][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.953546][T10050] R13: 00007f1f52c26038 R14: 00007ffdf6f1ebd0 R15: 00007ffdf6f1ecb8 [ 130.953562][T10050] [ 131.081778][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 131.085165][T10060] FAULT_INJECTION: forcing a failure. [ 131.085165][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 131.085185][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.0.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.085201][T10060] Tainted: [L]=SOFTLOCKUP [ 131.085205][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.085212][T10060] Call Trace: [ 131.085216][T10060] [ 131.085221][T10060] dump_stack_lvl+0x100/0x190 [ 131.085241][T10060] should_fail_ex.cold+0x5/0xa [ 131.085258][T10060] should_failslab+0xc2/0x120 [ 131.085277][T10060] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.085293][T10060] ? do_getname+0x35/0x390 [ 131.085308][T10060] do_getname+0x35/0x390 [ 131.085322][T10060] do_sys_openat2+0xc3/0x1d0 [ 131.085334][T10060] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.085346][T10060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.085362][T10060] __x64_sys_openat+0x12d/0x210 [ 131.085374][T10060] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.085391][T10060] do_syscall_64+0x123/0x790 [ 131.085403][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.085416][T10060] RIP: 0033:0x7f1f5299f559 [ 131.085425][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.085437][T10060] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.085448][T10060] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 131.085455][T10060] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 131.085462][T10060] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.085469][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.085475][T10060] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 131.085490][T10060] [ 131.221468][T10076] FAULT_INJECTION: forcing a failure. [ 131.221468][T10076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.221492][T10076] CPU: 2 UID: 0 PID: 10076 Comm: syz.3.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.221508][T10076] Tainted: [L]=SOFTLOCKUP [ 131.221513][T10076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.221520][T10076] Call Trace: [ 131.221525][T10076] [ 131.221529][T10076] dump_stack_lvl+0x100/0x190 [ 131.221551][T10076] should_fail_ex.cold+0x5/0xa [ 131.221569][T10076] strncpy_from_user+0x3b/0x2d0 [ 131.221585][T10076] do_getname+0x78/0x390 [ 131.221601][T10076] __x64_sys_mkdirat+0x78/0xc0 [ 131.221613][T10076] do_syscall_64+0x123/0x790 [ 131.221628][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.221639][T10076] RIP: 0033:0x7f4304d9f559 [ 131.221649][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.221660][T10076] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 131.221673][T10076] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 131.221691][T10076] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: ffffffffffffff9c [ 131.221699][T10076] RBP: 00007f4304e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.221706][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.221714][T10076] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 131.221729][T10076] [ 131.701803][T10098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1397'. [ 131.906838][T10105] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 131.962284][ T5842] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 132.034075][T10102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10102 comm=syz.3.1399 [ 132.143191][ T5842] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 132.144062][ T5842] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 132.144082][ T5842] usb 7-1: config 0 has no interface number 0 [ 132.144110][ T5842] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.146340][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.146360][ T5842] usb 7-1: Product: syz [ 132.146371][ T5842] usb 7-1: Manufacturer: syz [ 132.146384][ T5842] usb 7-1: SerialNumber: syz [ 132.152286][ T5842] usb 7-1: config 0 descriptor?? [ 132.160602][ T5842] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 132.205285][T10118] input: syz0 as /devices/virtual/input/input48 [ 132.209351][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 132.209365][ T42] audit: type=1400 audit(1792544444.275:60215): avc: denied { read } for pid=5127 comm="acpid" name="event6" dev="devtmpfs" ino=3071 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.209459][ T42] audit: type=1400 audit(1792544444.275:60216): avc: denied { open } for pid=5127 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3071 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.209500][ T42] audit: type=1400 audit(1792544444.275:60217): avc: denied { ioctl } for pid=5127 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3071 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.244372][ T8489] udevd[8489]: setting owner of /dev/input/event6 to uid=0, gid=104 failed: No such file or directory [ 132.332835][ T5734] Bluetooth: hci0: command tx timeout [ 132.347128][ T42] audit: type=1400 audit(1792544444.415:60218): avc: denied { append } for pid=10121 comm="syz.5.1408" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.359516][ T5842] usb 7-1: USB disconnect, device number 12 [ 132.368867][ T5842] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 132.434567][T10124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10124 comm=syz.0.1409 [ 132.435311][ T42] audit: type=1400 audit(1792544444.505:60219): avc: denied { ioctl } for pid=10123 comm="syz.0.1409" path="socket:[31549]" dev="sockfs" ino=31549 ioctlcmd=0x6e8d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.436539][T10124] device-mapper: raid: Choosing default region size of 4MiB [ 132.437484][T10124] device-mapper: table: 248:0: raid: RAID metadata device lookup failure (-ENOENT) [ 132.437498][T10124] device-mapper: ioctl: error adding target to table [ 132.612562][ T42] audit: type=1400 audit(1792544444.685:60220): avc: denied { map } for pid=10097 comm="syz.2.1397" path="socket:[31558]" dev="sockfs" ino=31558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 132.733394][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220024][T10143] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 133.408734][T10157] FAULT_INJECTION: forcing a failure. [ 133.408734][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 133.408767][T10157] CPU: 0 UID: 0 PID: 10157 Comm: syz.5.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.408793][T10157] Tainted: [L]=SOFTLOCKUP [ 133.408800][T10157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.408811][T10157] Call Trace: [ 133.408818][T10157] [ 133.408826][T10157] dump_stack_lvl+0x100/0x190 [ 133.408858][T10157] should_fail_ex.cold+0x5/0xa [ 133.408885][T10157] should_failslab+0xc2/0x120 [ 133.408914][T10157] __kmalloc_noprof+0xfc/0x840 [ 133.408937][T10157] ? rcu_is_watching+0x13/0xc0 [ 133.408966][T10157] ? tomoyo_realpath_from_path+0xb6/0x690 [ 133.408992][T10157] tomoyo_realpath_from_path+0xb6/0x690 [ 133.409018][T10157] tomoyo_path_number_perm+0x23c/0x580 [ 133.409069][T10157] ? tomoyo_path_number_perm+0x22e/0x580 [ 133.409104][T10157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.409140][T10157] ? __lock_acquire+0x5c0/0x1f40 [ 133.409174][T10157] ? __fget_files+0x34/0x3d0 [ 133.409193][T10157] ? find_held_lock+0x2b/0x80 [ 133.409209][T10157] ? hook_file_ioctl_common+0x140/0x440 [ 133.409237][T10157] ? __fget_files+0x21f/0x3d0 [ 133.409259][T10157] security_file_ioctl+0xd3/0x230 [ 133.409289][T10157] __x64_sys_ioctl+0xb7/0x210 [ 133.409316][T10157] do_syscall_64+0x123/0x790 [ 133.409338][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.409357][T10157] RIP: 0033:0x7fee2bf9f559 [ 133.409372][T10157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.409390][T10157] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.409410][T10157] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 133.409422][T10157] RDX: 0000000000000000 RSI: 0000000040104d14 RDI: 0000000000000003 [ 133.409434][T10157] RBP: 00007fee2ce46090 R08: 0000000000000000 R09: 0000000000000000 [ 133.409445][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.409457][T10157] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 133.409484][T10157] [ 133.409492][T10157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.136647][T10160] 9pnet_virtio: no channels available for device syz [ 134.141165][T10160] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 134.209997][T10172] FAULT_INJECTION: forcing a failure. [ 134.209997][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 134.210027][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.0.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.210052][T10172] Tainted: [L]=SOFTLOCKUP [ 134.210058][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.210068][T10172] Call Trace: [ 134.210074][T10172] [ 134.210080][T10172] dump_stack_lvl+0x100/0x190 [ 134.210118][T10172] should_fail_ex.cold+0x5/0xa [ 134.210145][T10172] should_failslab+0xc2/0x120 [ 134.210173][T10172] kmem_cache_alloc_noprof+0x92/0x6a0 [ 134.210197][T10172] ? security_file_alloc+0x34/0x2c0 [ 134.210219][T10172] security_file_alloc+0x34/0x2c0 [ 134.210237][T10172] init_file+0x95/0x480 [ 134.210252][T10172] alloc_empty_file_noaccount+0x45/0xd0 [ 134.210271][T10172] alloc_file_pseudo_noaccount+0x183/0x290 [ 134.210291][T10172] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 134.210312][T10172] ? iput+0x35/0x40 [ 134.210333][T10172] bdev_file_open_by_dev+0x13a/0x210 [ 134.210374][T10172] setup_bdev_super+0x78/0x770 [ 134.210396][T10172] get_tree_bdev_flags+0x363/0x620 [ 134.210419][T10172] ? __pfx_gfs2_fill_super+0x10/0x10 [ 134.210463][T10172] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 134.210487][T10172] ? rcu_is_watching+0x13/0xc0 [ 134.210513][T10172] ? cap_capable+0x107/0x430 [ 134.210538][T10172] gfs2_get_tree+0x4e/0x280 [ 134.210559][T10172] vfs_get_tree+0x92/0x320 [ 134.210576][T10172] path_mount+0x7d0/0x2850 [ 134.210599][T10172] ? __pfx_path_mount+0x10/0x10 [ 134.210617][T10172] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.210638][T10172] ? putname+0xb1/0x110 [ 134.210655][T10172] ? kmem_cache_free+0x127/0x6c0 [ 134.210682][T10172] ? __x64_sys_mount+0x293/0x310 [ 134.210699][T10172] __x64_sys_mount+0x293/0x310 [ 134.210718][T10172] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.210741][T10172] do_syscall_64+0x123/0x790 [ 134.210758][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.210775][T10172] RIP: 0033:0x7f1f5299f559 [ 134.210790][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.210806][T10172] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.210843][T10172] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 134.210856][T10172] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000040 [ 134.210869][T10172] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.210880][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.210890][T10172] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 134.210914][T10172] [ 134.211051][T10172] /dev/loop0: Can't open blockdev [ 134.228890][T10174] FAULT_INJECTION: forcing a failure. [ 134.228890][T10174] name failslab, interval 1, probability 0, space 0, times 0 [ 134.228920][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.5.1428 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.228945][T10174] Tainted: [L]=SOFTLOCKUP [ 134.228952][T10174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.228963][T10174] Call Trace: [ 134.228969][T10174] [ 134.228977][T10174] dump_stack_lvl+0x100/0x190 [ 134.229008][T10174] should_fail_ex.cold+0x5/0xa [ 134.229063][T10174] should_failslab+0xc2/0x120 [ 134.229100][T10174] kmem_cache_alloc_noprof+0x92/0x6a0 [ 134.229126][T10174] ? d_instantiate+0x8a/0xb0 [ 134.229148][T10174] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 134.229174][T10174] alloc_empty_file_noaccount+0x2b/0xd0 [ 134.229194][T10174] alloc_file_pseudo_noaccount+0x183/0x290 [ 134.229216][T10174] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 134.229240][T10174] ? iput+0x35/0x40 [ 134.229263][T10174] bdev_file_open_by_dev+0x13a/0x210 [ 134.229293][T10174] setup_bdev_super+0x78/0x770 [ 134.229318][T10174] get_tree_bdev_flags+0x363/0x620 [ 134.229341][T10174] ? __pfx_gfs2_fill_super+0x10/0x10 [ 134.229366][T10174] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 134.229411][T10174] ? rcu_is_watching+0x13/0xc0 [ 134.229440][T10174] ? cap_capable+0x107/0x430 [ 134.229471][T10174] gfs2_get_tree+0x4e/0x280 [ 134.229494][T10174] vfs_get_tree+0x92/0x320 [ 134.229515][T10174] path_mount+0x7d0/0x2850 [ 134.229540][T10174] ? __pfx_path_mount+0x10/0x10 [ 134.229561][T10174] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.229584][T10174] ? putname+0xb1/0x110 [ 134.229600][T10174] ? kmem_cache_free+0x127/0x6c0 [ 134.229635][T10174] ? __x64_sys_mount+0x293/0x310 [ 134.229657][T10174] __x64_sys_mount+0x293/0x310 [ 134.229683][T10174] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.229716][T10174] do_syscall_64+0x123/0x790 [ 134.229738][T10174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.229758][T10174] RIP: 0033:0x7fee2bf9f559 [ 134.229775][T10174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.229794][T10174] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.229814][T10174] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 134.229828][T10174] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000040 [ 134.229841][T10174] RBP: 00007fee2c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.229851][T10174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.229863][T10174] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 134.229890][T10174] [ 134.231762][T10174] /dev/loop5: Can't open blockdev [ 134.287068][T10178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.287084][T10178] IPv6: NLM_F_CREATE should be set when creating new route [ 134.290310][T10178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.293364][T10185] FAULT_INJECTION: forcing a failure. [ 134.293364][T10185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.293395][T10185] CPU: 1 UID: 0 PID: 10185 Comm: syz.0.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.293420][T10185] Tainted: [L]=SOFTLOCKUP [ 134.293427][T10185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.293438][T10185] Call Trace: [ 134.293445][T10185] [ 134.293452][T10185] dump_stack_lvl+0x100/0x190 [ 134.293485][T10185] should_fail_ex.cold+0x5/0xa [ 134.293511][T10185] _copy_from_iter+0x1f4/0x1690 [ 134.293554][T10185] ? __asan_memset+0x23/0x50 [ 134.293587][T10185] ? __pfx__copy_from_iter+0x10/0x10 [ 134.293604][T10185] ? __pfx___alloc_skb+0x10/0x10 [ 134.293636][T10185] netlink_sendmsg+0x94a/0x1020 [ 134.293661][T10185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.293688][T10185] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.293720][T10185] ? ____sys_sendmsg+0xa4d/0xbe0 [ 134.293745][T10185] ____sys_sendmsg+0xa4d/0xbe0 [ 134.293769][T10185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.293791][T10185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.293823][T10185] ? lock_acquire+0x1d1/0x380 [ 134.293845][T10185] ? get_pid_task+0x2a/0x250 [ 134.293874][T10185] ___sys_sendmsg+0x190/0x1e0 [ 134.293903][T10185] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.293930][T10185] ? get_pid_task+0x106/0x250 [ 134.293965][T10185] ? find_held_lock+0x2b/0x80 [ 134.293999][T10185] __sys_sendmsg+0x160/0x210 [ 134.294022][T10185] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.294058][T10185] do_syscall_64+0x123/0x790 [ 134.294079][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.294098][T10185] RIP: 0033:0x7f1f5299f559 [ 134.294114][T10185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.294131][T10185] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.294149][T10185] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 134.294161][T10185] RDX: 000000000000e800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.294172][T10185] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 134.294183][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.294194][T10185] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 134.294219][T10185] [ 134.351685][ T42] audit: type=1400 audit(1792544446.415:60221): avc: denied { prog_load } for pid=10186 comm="syz.0.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.351734][ T42] audit: type=1400 audit(1792544446.415:60222): avc: denied { bpf } for pid=10186 comm="syz.0.1432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.359915][ T42] audit: type=1400 audit(1792544446.425:60223): avc: denied { create } for pid=10188 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.360582][ T42] audit: type=1400 audit(1792544446.425:60224): avc: denied { write } for pid=10188 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.383765][T10191] FAULT_INJECTION: forcing a failure. [ 134.383765][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.383786][T10191] CPU: 3 UID: 0 PID: 10191 Comm: syz.3.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.383801][T10191] Tainted: [L]=SOFTLOCKUP [ 134.383805][T10191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.383812][T10191] Call Trace: [ 134.383816][T10191] [ 134.383821][T10191] dump_stack_lvl+0x100/0x190 [ 134.383857][T10191] should_fail_ex.cold+0x5/0xa [ 134.383873][T10191] _copy_from_user+0x2e/0xd0 [ 134.383892][T10191] copy_msghdr_from_user+0x9f/0x4c0 [ 134.383910][T10191] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 134.383930][T10191] ? lock_acquire+0x1d1/0x380 [ 134.383944][T10191] ? get_pid_task+0x2a/0x250 [ 134.383961][T10191] ___sys_sendmsg+0x106/0x1e0 [ 134.383979][T10191] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.383995][T10191] ? get_pid_task+0x106/0x250 [ 134.384016][T10191] ? find_held_lock+0x2b/0x80 [ 134.384035][T10191] __sys_sendmsg+0x160/0x210 [ 134.384048][T10191] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.384069][T10191] do_syscall_64+0x123/0x790 [ 134.384082][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.384093][T10191] RIP: 0033:0x7f4304d9f559 [ 134.384102][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.384114][T10191] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.384125][T10191] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 134.384132][T10191] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 134.384138][T10191] RBP: 00007f4305c78090 R08: 0000000000000000 R09: 0000000000000000 [ 134.384145][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.384151][T10191] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 134.384165][T10191] [ 134.401282][T10193] 9pnet_virtio: no channels available for device syz [ 134.424515][ T5734] Bluetooth: hci0: command tx timeout [ 134.429587][T10197] openvswitch: netlink: Unknown key attributes 2 [ 134.512967][T10205] __nla_validate_parse: 2 callbacks suppressed [ 134.512979][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 134.572632][T10203] dlm: non-version read from control device 92 [ 134.605202][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 134.827934][T10222] FAULT_INJECTION: forcing a failure. [ 134.827934][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 134.827955][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.2.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.827971][T10222] Tainted: [L]=SOFTLOCKUP [ 134.827975][T10222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.827982][T10222] Call Trace: [ 134.827986][T10222] [ 134.827991][T10222] dump_stack_lvl+0x100/0x190 [ 134.828013][T10222] should_fail_ex.cold+0x5/0xa [ 134.828030][T10222] should_failslab+0xc2/0x120 [ 134.828049][T10222] kmem_cache_alloc_noprof+0x92/0x6a0 [ 134.828067][T10222] ? security_file_alloc+0x34/0x2c0 [ 134.828082][T10222] security_file_alloc+0x34/0x2c0 [ 134.828094][T10222] init_file+0x95/0x480 [ 134.828106][T10222] alloc_empty_file_noaccount+0x45/0xd0 [ 134.828119][T10222] alloc_file_pseudo_noaccount+0x183/0x290 [ 134.828133][T10222] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 134.828147][T10222] ? iput+0x35/0x40 [ 134.828162][T10222] bdev_file_open_by_dev+0x13a/0x210 [ 134.828180][T10222] setup_bdev_super+0x78/0x770 [ 134.828195][T10222] get_tree_bdev_flags+0x363/0x620 [ 134.828210][T10222] ? __pfx_gfs2_fill_super+0x10/0x10 [ 134.828226][T10222] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 134.828242][T10222] ? rcu_is_watching+0x13/0xc0 [ 134.828259][T10222] ? cap_capable+0x107/0x430 [ 134.828276][T10222] gfs2_get_tree+0x4e/0x280 [ 134.828290][T10222] vfs_get_tree+0x92/0x320 [ 134.828303][T10222] path_mount+0x7d0/0x2850 [ 134.828318][T10222] ? __pfx_path_mount+0x10/0x10 [ 134.828330][T10222] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.828344][T10222] ? putname+0xb1/0x110 [ 134.828353][T10222] ? kmem_cache_free+0x127/0x6c0 [ 134.828371][T10222] ? __x64_sys_mount+0x293/0x310 [ 134.828383][T10222] __x64_sys_mount+0x293/0x310 [ 134.828397][T10222] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.828414][T10222] do_syscall_64+0x123/0x790 [ 134.828426][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.828438][T10222] RIP: 0033:0x7f190bb9f559 [ 134.828448][T10222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.828459][T10222] RSP: 002b:00007f1909df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.828471][T10222] RAX: ffffffffffffffda RBX: 00007f190be25fa0 RCX: 00007f190bb9f559 [ 134.828479][T10222] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000040 [ 134.828486][T10222] RBP: 00007f190bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.828493][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.828500][T10222] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 134.828514][T10222] [ 134.828547][T10222] /dev/loop2: Can't open blockdev [ 134.994493][T10227] FAULT_INJECTION: forcing a failure. [ 134.994493][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 134.994541][T10227] CPU: 3 UID: 0 PID: 10227 Comm: syz.2.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.994558][T10227] Tainted: [L]=SOFTLOCKUP [ 134.994562][T10227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.994570][T10227] Call Trace: [ 134.994575][T10227] [ 134.994580][T10227] dump_stack_lvl+0x100/0x190 [ 134.994680][T10227] should_fail_ex.cold+0x5/0xa [ 134.994717][T10227] should_failslab+0xc2/0x120 [ 134.994741][T10227] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 134.994764][T10227] ? __alloc_skb+0x5b7/0x710 [ 134.994814][T10227] ? __alloc_skb+0x140/0x710 [ 134.994828][T10227] __alloc_skb+0x140/0x710 [ 134.994839][T10227] ? __alloc_skb+0x5b7/0x710 [ 134.994851][T10227] ? __pfx___alloc_skb+0x10/0x10 [ 134.994866][T10227] netlink_alloc_large_skb+0x69/0x150 [ 134.994887][T10227] netlink_sendmsg+0x7a2/0x1020 [ 134.994902][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.994918][T10227] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.994957][T10227] ? ____sys_sendmsg+0xa4d/0xbe0 [ 134.994972][T10227] ____sys_sendmsg+0xa4d/0xbe0 [ 134.994987][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.995000][T10227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.995023][T10227] ? lock_acquire+0x1d1/0x380 [ 134.995036][T10227] ? get_pid_task+0x2a/0x250 [ 134.995053][T10227] ___sys_sendmsg+0x190/0x1e0 [ 134.995071][T10227] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.995087][T10227] ? get_pid_task+0x106/0x250 [ 134.995108][T10227] ? find_held_lock+0x2b/0x80 [ 134.995127][T10227] __sys_sendmsg+0x160/0x210 [ 134.995140][T10227] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.995160][T10227] do_syscall_64+0x123/0x790 [ 134.995215][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.995227][T10227] RIP: 0033:0x7f190bb9f559 [ 134.995237][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.995248][T10227] RSP: 002b:00007f1909df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.995260][T10227] RAX: ffffffffffffffda RBX: 00007f190be25fa0 RCX: 00007f190bb9f559 [ 134.995267][T10227] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 134.995274][T10227] RBP: 00007f1909df6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.995280][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.995287][T10227] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 134.995301][T10227] [ 135.862640][T10239] device-mapper: table: 248:1: linear: Device lookup failed (-ENOENT) [ 135.862655][T10239] device-mapper: ioctl: error adding target to table [ 136.027657][T10258] hub 1-0:1.0: USB hub found [ 136.027939][T10258] hub 1-0:1.0: 2 ports detected [ 136.069182][T10265] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 136.199242][T10282] netlink: 'syz.2.1467': attribute type 10 has an invalid length. [ 136.493073][ T5734] Bluetooth: hci0: command tx timeout [ 136.777534][T10291] jffs2: notice: (10291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 137.202048][T10282] bridge0: port 1(syz_tun) entered disabled state [ 137.202791][T10282] syz_tun: left allmulticast mode [ 137.202963][T10282] bridge0: port 1(syz_tun) entered disabled state [ 137.215230][T10282] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.287029][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 137.287048][ T42] audit: type=1400 audit(1792544449.355:60342): avc: denied { write } for pid=10298 comm="syz.0.1471" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.287161][ T42] audit: type=1400 audit(1792544449.355:60343): avc: denied { add_name } for pid=10298 comm="syz.0.1471" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.287360][ T42] audit: type=1400 audit(1792544449.355:60344): avc: denied { create } for pid=10298 comm="syz.0.1471" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.288420][ T42] audit: type=1400 audit(1792544449.355:60345): avc: denied { read write } for pid=10298 comm="syz.0.1471" name="file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.288657][ T42] audit: type=1400 audit(1792544449.355:60346): avc: denied { open } for pid=10298 comm="syz.0.1471" path="/442/file0/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.296286][ T42] audit: type=1400 audit(1792544449.365:60347): avc: denied { bind } for pid=10300 comm="syz.5.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.301751][ T42] audit: type=1400 audit(1792544449.365:60348): avc: denied { prog_run } for pid=10294 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 137.419944][ T42] audit: type=1400 audit(1792544449.485:60349): avc: denied { mount } for pid=10307 comm="syz.5.1475" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.420866][ T42] audit: type=1400 audit(1792544449.485:60350): avc: denied { mounton } for pid=10307 comm="syz.5.1475" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.427941][ T42] audit: type=1400 audit(1792544449.495:60351): avc: denied { remount } for pid=10307 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.580848][T10322] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.649109][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.703253][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.755981][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.902528][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.934946][T10344] FAULT_INJECTION: forcing a failure. [ 137.934946][T10344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.934978][T10344] CPU: 2 UID: 0 PID: 10344 Comm: syz.3.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.935003][T10344] Tainted: [L]=SOFTLOCKUP [ 137.935009][T10344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.935019][T10344] Call Trace: [ 137.935026][T10344] [ 137.935034][T10344] dump_stack_lvl+0x100/0x190 [ 137.935065][T10344] should_fail_ex.cold+0x5/0xa [ 137.935093][T10344] _copy_from_iter+0x1f4/0x1690 [ 137.935139][T10344] ? __pfx__copy_from_iter+0x10/0x10 [ 137.935157][T10344] ? kasan_save_track+0x14/0x30 [ 137.935190][T10344] ? __kasan_kmalloc+0xaa/0xb0 [ 137.935217][T10344] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 137.935240][T10344] ? configfs_write_iter+0x388/0x4e0 [ 137.935281][T10344] configfs_write_iter+0xb3/0x4e0 [ 137.935309][T10344] vfs_write+0x6af/0x1050 [ 137.935349][T10344] ? __pfx_configfs_write_iter+0x10/0x10 [ 137.935374][T10344] ? __pfx_vfs_write+0x10/0x10 [ 137.935396][T10344] ? find_held_lock+0x2b/0x80 [ 137.935432][T10344] ksys_write+0x12a/0x250 [ 137.935456][T10344] ? __pfx_ksys_write+0x10/0x10 [ 137.935487][T10344] do_syscall_64+0x123/0x790 [ 137.935509][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.935528][T10344] RIP: 0033:0x7f4304d9f559 [ 137.935544][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.935562][T10344] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.935582][T10344] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 137.935595][T10344] RDX: 0000000000000003 RSI: 0000200000000900 RDI: 0000000000000003 [ 137.935605][T10344] RBP: 00007f4305c78090 R08: 0000000000000000 R09: 0000000000000000 [ 137.935615][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.935625][T10344] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 137.935652][T10344] [ 138.032278][ T5836] usb 5-1: device descriptor read/64, error -71 [ 138.085901][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 138.119319][T10350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10350 comm=syz.3.1493 [ 138.282339][ T5836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.400113][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.408728][T10365] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.409332][T10365] batman_adv: batadv0: Adding interface: gretap1 [ 138.409344][T10365] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.409368][T10365] batman_adv: batadv0: Interface activated: gretap1 [ 138.429883][ T5836] usb 5-1: device descriptor read/64, error -71 [ 138.465661][T10374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.467779][T10372] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 138.532794][ T5836] usb usb5-port1: attempt power cycle [ 138.571394][T10387] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 138.581693][T10387] syzkaller0: entered promiscuous mode [ 138.581706][T10387] syzkaller0: entered allmulticast mode [ 138.761563][T10393] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 138.761590][T10393] SELinux: failed to load policy [ 138.882228][ T5836] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.902816][ T5836] usb 5-1: device descriptor read/8, error -71 [ 139.152304][ T5836] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.172643][ T5836] usb 5-1: device descriptor read/8, error -71 [ 139.292890][ T5836] usb usb5-port1: unable to enumerate USB device [ 139.877853][T10418] device-mapper: table: 248:1: linear: Device lookup failed (-ENOENT) [ 139.877875][T10418] device-mapper: ioctl: error adding target to table [ 140.184960][T10434] binder: 10433:10434 ioctl c0306201 200000017c00 returned -22 [ 140.219156][T10436] device-mapper: ioctl: Invalid target message parameters. [ 140.259085][T10438] Bluetooth: ISO socket layer initialized [ 140.389563][T10441] netlink: 'syz.3.1525': attribute type 7 has an invalid length. [ 140.467885][T10438] device-mapper: ioctl: Invalid target message parameters. [ 140.625574][T10449] geneve2: entered promiscuous mode [ 140.744941][T10459] openvswitch: netlink: Message has 8 unknown bytes. [ 140.774118][T10462] FAULT_INJECTION: forcing a failure. [ 140.774118][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.774146][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.3.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.774170][T10462] Tainted: [L]=SOFTLOCKUP [ 140.774176][T10462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.774186][T10462] Call Trace: [ 140.774192][T10462] [ 140.774199][T10462] dump_stack_lvl+0x100/0x190 [ 140.774229][T10462] should_fail_ex.cold+0x5/0xa [ 140.774254][T10462] _copy_from_user+0x2e/0xd0 [ 140.774282][T10462] kstrtouint_from_user+0xd6/0x1d0 [ 140.774303][T10462] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 140.774330][T10462] ? lock_acquire+0x1d1/0x380 [ 140.774356][T10462] proc_fail_nth_write+0x83/0x220 [ 140.774393][T10462] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.774417][T10462] vfs_write+0x2aa/0x1050 [ 140.774468][T10462] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.774486][T10462] ? lock_acquire+0x1d1/0x380 [ 140.774506][T10462] ? __fget_files+0x34/0x3d0 [ 140.774522][T10462] ? __pfx_vfs_write+0x10/0x10 [ 140.774541][T10462] ? find_held_lock+0x2b/0x80 [ 140.774557][T10462] ? __fget_files+0x215/0x3d0 [ 140.774576][T10462] ? __fget_files+0x21f/0x3d0 [ 140.774598][T10462] ksys_write+0x12a/0x250 [ 140.774619][T10462] ? __pfx_ksys_write+0x10/0x10 [ 140.774647][T10462] do_syscall_64+0x123/0x790 [ 140.774674][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.774691][T10462] RIP: 0033:0x7f4304d5fd8e [ 140.774706][T10462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.774722][T10462] RSP: 002b:00007f4305c77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.774739][T10462] RAX: ffffffffffffffda RBX: 00007f4305c786c0 RCX: 00007f4304d5fd8e [ 140.774751][T10462] RDX: 0000000000000001 RSI: 00007f4305c780a0 RDI: 0000000000000004 [ 140.774762][T10462] RBP: 00007f4305c78090 R08: 0000000000000000 R09: 0000000000000000 [ 140.774773][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.774783][T10462] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 140.774808][T10462] [ 140.804665][T10464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1535'. [ 140.821112][ T6823] IPVS: starting estimator thread 0... [ 140.888121][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 140.889074][T10476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=10476 comm=syz.0.1539 [ 140.912338][T10470] IPVS: using max 27 ests per chain, 64800 per kthread [ 140.978425][T10478] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 141.024494][T10485] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 141.157860][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 141.157884][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 141.166385][T10496] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 141.169633][T10496] geneve1: entered promiscuous mode [ 141.202970][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.226021][T10500] FAULT_INJECTION: forcing a failure. [ 141.226021][T10500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.226061][T10500] CPU: 3 UID: 0 PID: 10500 Comm: syz.3.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.226086][T10500] Tainted: [L]=SOFTLOCKUP [ 141.226092][T10500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.226114][T10500] Call Trace: [ 141.226127][T10500] [ 141.226135][T10500] dump_stack_lvl+0x100/0x190 [ 141.226200][T10500] should_fail_ex.cold+0x5/0xa [ 141.226241][T10500] ? prepare_alloc_pages+0x16d/0x5b0 [ 141.226282][T10500] should_fail_alloc_page+0xeb/0x140 [ 141.226317][T10500] prepare_alloc_pages+0x1f0/0x5b0 [ 141.226337][T10500] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 141.226352][T10500] ? __lock_acquire+0x5c0/0x1f40 [ 141.226369][T10500] ? __lock_acquire+0x5c0/0x1f40 [ 141.226386][T10500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.226402][T10500] ? lock_acquire+0x1d1/0x380 [ 141.226415][T10500] ? unwind_next_frame+0xbd/0x2090 [ 141.226435][T10500] ? lock_acquire+0x1d1/0x380 [ 141.226447][T10500] ? is_bpf_text_address+0x25/0x1a0 [ 141.226479][T10500] ? find_held_lock+0x2b/0x80 [ 141.226491][T10500] ? bpf_ksym_find+0x128/0x1c0 [ 141.226502][T10500] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 141.226517][T10500] ? is_bpf_text_address+0x94/0x1a0 [ 141.226542][T10500] ? kernel_text_address+0x8d/0x100 [ 141.226553][T10500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.226569][T10500] ? policy_nodemask+0xed/0x4f0 [ 141.226582][T10500] alloc_pages_mpol+0x201/0x550 [ 141.226593][T10500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.226608][T10500] folio_alloc_mpol_noprof+0x36/0x260 [ 141.226622][T10500] vma_alloc_folio_noprof+0xed/0x1d0 [ 141.226635][T10500] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 141.226652][T10500] do_anonymous_page+0xac9/0x2050 [ 141.226675][T10500] ? __pfx_do_anonymous_page+0x10/0x10 [ 141.226686][T10500] ? rcu_read_unlock+0x2d/0xb0 [ 141.226698][T10500] ? rcu_read_unlock+0x2d/0xb0 [ 141.226710][T10500] ? __pte_offset_map+0x179/0x310 [ 141.226728][T10500] __handle_mm_fault+0x1ff3/0x2f60 [ 141.226744][T10500] ? __pfx___handle_mm_fault+0x10/0x10 [ 141.226755][T10500] ? __pfx_mt_find+0x10/0x10 [ 141.226811][T10500] ? find_vma+0xbf/0x140 [ 141.226826][T10500] ? __pfx_find_vma+0x10/0x10 [ 141.226842][T10500] handle_mm_fault+0x363/0xa20 [ 141.226857][T10500] do_user_addr_fault+0x745/0x12f0 [ 141.226877][T10500] exc_page_fault+0x6f/0xd0 [ 141.226895][T10500] asm_exc_page_fault+0x26/0x30 [ 141.226906][T10500] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 141.226941][T10500] Code: 00 e8 e4 e5 e1 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 2c 3d 56 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 141.226952][T10500] RSP: 0018:ffffc900038f7a08 EFLAGS: 00050246 [ 141.226965][T10500] RAX: 0000000000000001 RBX: 0000000000000015 RCX: 0000000000000015 [ 141.226972][T10500] RDX: 0000000000000001 RSI: ffff888036ad0000 RDI: 0000200000001340 [ 141.226980][T10500] RBP: ffffc900038f7c10 R08: 0000000000000000 R09: ffffed1006d5a002 [ 141.226986][T10500] R10: ffff888036ad0014 R11: 0000000000000001 R12: ffff888036ad0000 [ 141.226993][T10500] R13: 0000000000000000 R14: 0000200000001340 R15: 0000000000000015 [ 141.227008][T10500] ? _copy_to_iter+0x4b4/0x1720 [ 141.227031][T10500] ? __pfx__copy_to_iter+0x10/0x10 [ 141.227047][T10500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.227059][T10500] ? __asan_memcpy+0x3c/0x60 [ 141.227078][T10500] seq_read_iter+0xdab/0x1270 [ 141.227113][T10500] seq_read+0x344/0x4d0 [ 141.227129][T10500] ? __pfx_seq_read+0x10/0x10 [ 141.227145][T10500] ? lock_acquire+0x1d1/0x380 [ 141.227160][T10500] ? avc_policy_seqno+0x9/0x20 [ 141.227179][T10500] ? selinux_file_permission+0x8f/0x6c0 [ 141.227208][T10500] ? rw_verify_area+0xce/0x6d0 [ 141.227222][T10500] ? __pfx_seq_read+0x10/0x10 [ 141.227238][T10500] vfs_read+0x1e4/0xb40 [ 141.227253][T10500] ? lock_acquire+0x1d1/0x380 [ 141.227266][T10500] ? __fget_files+0x34/0x3d0 [ 141.227276][T10500] ? __pfx_vfs_read+0x10/0x10 [ 141.227289][T10500] ? find_held_lock+0x2b/0x80 [ 141.227299][T10500] ? __fget_files+0x215/0x3d0 [ 141.227311][T10500] ? __fget_files+0x21f/0x3d0 [ 141.227325][T10500] ksys_read+0x12a/0x250 [ 141.227339][T10500] ? __pfx_ksys_read+0x10/0x10 [ 141.227358][T10500] do_syscall_64+0x123/0x790 [ 141.227370][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.227382][T10500] RIP: 0033:0x7f4304d9f559 [ 141.227391][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.227401][T10500] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.227411][T10500] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 141.227418][T10500] RDX: 000000000000007b RSI: 0000200000001340 RDI: 0000000000000003 [ 141.227424][T10500] RBP: 00007f4305c78090 R08: 0000000000000000 R09: 0000000000000000 [ 141.227431][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.227437][T10500] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 141.227452][T10500] [ 141.259447][T10504] smc: removing ib device rxe0 [ 141.282396][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.336951][T10504] smbdirect: ib_dev[rxe0] removed [ 141.392267][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.413228][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.502361][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.563335][T10527] ubi0: attaching mtd0 [ 141.564853][T10527] ubi0: scanning is finished [ 141.564875][T10527] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 141.612391][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.662571][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.810590][T10527] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 141.848434][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'. [ 141.928010][T10534] FAULT_INJECTION: forcing a failure. [ 141.928010][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 141.928050][T10534] CPU: 2 UID: 0 PID: 10534 Comm: syz.5.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.928075][T10534] Tainted: [L]=SOFTLOCKUP [ 141.928082][T10534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.928092][T10534] Call Trace: [ 141.928100][T10534] [ 141.928107][T10534] dump_stack_lvl+0x100/0x190 [ 141.928139][T10534] should_fail_ex.cold+0x5/0xa [ 141.928166][T10534] should_failslab+0xc2/0x120 [ 141.928195][T10534] __kmalloc_noprof+0xfc/0x840 [ 141.928220][T10534] ? rcu_is_watching+0x13/0xc0 [ 141.928247][T10534] ? tomoyo_realpath_from_path+0xb6/0x690 [ 141.928277][T10534] tomoyo_realpath_from_path+0xb6/0x690 [ 141.928304][T10534] tomoyo_path_number_perm+0x23c/0x580 [ 141.928331][T10534] ? tomoyo_path_number_perm+0x22e/0x580 [ 141.928360][T10534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.928397][T10534] ? __lock_acquire+0x5c0/0x1f40 [ 141.928431][T10534] ? __fget_files+0x34/0x3d0 [ 141.928469][T10534] ? find_held_lock+0x2b/0x80 [ 141.928486][T10534] ? hook_file_ioctl_common+0x140/0x440 [ 141.928515][T10534] ? __fget_files+0x21f/0x3d0 [ 141.928535][T10534] security_file_ioctl+0xd3/0x230 [ 141.928567][T10534] __x64_sys_ioctl+0xb7/0x210 [ 141.928594][T10534] do_syscall_64+0x123/0x790 [ 141.928617][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.928636][T10534] RIP: 0033:0x7fee2bf9f559 [ 141.928652][T10534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.928670][T10534] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.928688][T10534] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 141.928701][T10534] RDX: 0000200000000280 RSI: 0000000040186f40 RDI: 0000000000000003 [ 141.928712][T10534] RBP: 00007fee2ce46090 R08: 0000000000000000 R09: 0000000000000000 [ 141.928724][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.928735][T10534] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 141.928761][T10534] [ 141.928883][T10534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.928921][T10534] ubi0: attaching mtd0 [ 141.930559][T10529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10529 comm=syz.0.1560 [ 141.937338][T10534] ubi0: scanning is finished [ 141.937362][T10534] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 141.979788][T10536] netlink: zone id is out of range [ 141.979801][T10536] netlink: zone id is out of range [ 141.979810][T10536] netlink: zone id is out of range [ 142.007928][T10536] ip6gre1: entered promiscuous mode [ 142.007942][T10536] ip6gre1: entered allmulticast mode [ 142.018839][T10536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.068761][T10534] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 142.118250][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1565'. [ 142.142792][ T5771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.142982][ T5771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.172401][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.335362][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 142.335379][ T42] audit: type=1400 audit(1792544454.405:60415): avc: denied { append } for pid=10564 comm="syz.0.1575" name="uprobe_events" dev="tracefs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 142.343248][ T42] audit: type=1400 audit(1792544454.405:60416): avc: denied { view } for pid=10564 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 142.349574][T10565] overlay: ./file0 is not a directory [ 142.406396][T10568] FAULT_INJECTION: forcing a failure. [ 142.406396][T10568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.406427][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.0.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.406452][T10568] Tainted: [L]=SOFTLOCKUP [ 142.406458][T10568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.406469][T10568] Call Trace: [ 142.406492][T10568] [ 142.406500][T10568] dump_stack_lvl+0x100/0x190 [ 142.406552][T10568] should_fail_ex.cold+0x5/0xa [ 142.406579][T10568] _copy_from_iter+0x1f4/0x1690 [ 142.406600][T10568] ? __asan_memset+0x23/0x50 [ 142.406625][T10568] ? __pfx__copy_from_iter+0x10/0x10 [ 142.406642][T10568] ? __pfx___alloc_skb+0x10/0x10 [ 142.406736][T10568] netlink_sendmsg+0x94a/0x1020 [ 142.406778][T10568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.406806][T10568] ? selinux_socket_sendmsg+0x198/0x2f0 [ 142.406837][T10568] ? ____sys_sendmsg+0xa4d/0xbe0 [ 142.406864][T10568] ____sys_sendmsg+0xa4d/0xbe0 [ 142.406889][T10568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.406912][T10568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.406944][T10568] ? lock_acquire+0x1d1/0x380 [ 142.406967][T10568] ? get_pid_task+0x2a/0x250 [ 142.407014][T10568] ___sys_sendmsg+0x190/0x1e0 [ 142.407045][T10568] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.407078][T10568] ? get_pid_task+0x106/0x250 [ 142.407115][T10568] ? find_held_lock+0x2b/0x80 [ 142.407149][T10568] __sys_sendmsg+0x160/0x210 [ 142.407172][T10568] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.407209][T10568] do_syscall_64+0x123/0x790 [ 142.407264][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.407284][T10568] RIP: 0033:0x7f1f5299f559 [ 142.407301][T10568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.407319][T10568] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.407351][T10568] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 142.407363][T10568] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 142.407374][T10568] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 142.407385][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.407396][T10568] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 142.407422][T10568] [ 142.450925][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 142.454013][ T42] audit: type=1804 audit(1792544454.515:60417): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1578" name="/newroot/471/file1" dev="tmpfs" ino=2616 res=1 errno=0 [ 142.522361][ T42] audit: type=1400 audit(1792544454.585:60418): avc: denied { ioctl } for pid=10578 comm="syz.0.1579" path="socket:[35091]" dev="sockfs" ino=35091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.525221][ T42] audit: type=1400 audit(1792544454.595:60419): avc: denied { ioctl } for pid=10578 comm="syz.0.1579" path="socket:[35096]" dev="sockfs" ino=35096 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.549205][ T42] audit: type=1400 audit(1792544454.615:60420): avc: denied { read } for pid=10578 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.554276][ T42] audit: type=1400 audit(1792544454.615:60421): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.582004][ T42] audit: type=1400 audit(1792544454.645:60422): avc: denied { search } for pid=5444 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.582052][ T42] audit: type=1400 audit(1792544454.645:60423): avc: denied { search } for pid=5444 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.582093][ T42] audit: type=1400 audit(1792544454.645:60424): avc: denied { search } for pid=5444 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.652583][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.672436][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.059386][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1583'. [ 143.074595][T10603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.097492][T10606] FAULT_INJECTION: forcing a failure. [ 143.097492][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.097527][T10606] CPU: 3 UID: 0 PID: 10606 Comm: syz.3.1584 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.097553][T10606] Tainted: [L]=SOFTLOCKUP [ 143.097560][T10606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.097572][T10606] Call Trace: [ 143.097578][T10606] [ 143.097587][T10606] dump_stack_lvl+0x100/0x190 [ 143.097620][T10606] should_fail_ex.cold+0x5/0xa [ 143.097649][T10606] _copy_from_user+0x2e/0xd0 [ 143.097718][T10606] __sys_bpf+0x2f5/0x4a30 [ 143.097753][T10606] ? __pfx___sys_bpf+0x10/0x10 [ 143.097775][T10606] ? find_held_lock+0x2b/0x80 [ 143.097795][T10606] ? futex_wake+0x4ea/0x5e0 [ 143.097835][T10606] ? __pfx_snd_pcm_read+0x10/0x10 [ 143.097893][T10606] ? vfs_read+0x243/0xb40 [ 143.097938][T10606] ? __x64_sys_futex+0x34f/0x4d0 [ 143.097953][T10606] ? __x64_sys_futex+0x358/0x4d0 [ 143.097971][T10606] ? fput+0x7c/0x100 [ 143.097987][T10606] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.098011][T10606] ? ksys_read+0x1ac/0x250 [ 143.098070][T10606] ? __x64_sys_bpf+0xce/0x140 [ 143.098092][T10606] __x64_sys_bpf+0xce/0x140 [ 143.098116][T10606] ? do_syscall_64+0xae/0x790 [ 143.098138][T10606] do_syscall_64+0x123/0x790 [ 143.098160][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.098182][T10606] RIP: 0033:0x7f4304d9f559 [ 143.098199][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.098217][T10606] RSP: 002b:00007f4305c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.098238][T10606] RAX: ffffffffffffffda RBX: 00007f4305025fa0 RCX: 00007f4304d9f559 [ 143.098250][T10606] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 143.098262][T10606] RBP: 00007f4304e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 143.098273][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.098284][T10606] R13: 00007f4305026038 R14: 00007f4305025fa0 R15: 00007ffd2e084138 [ 143.098311][T10606] [ 143.152240][ T6825] Bluetooth: hci4: Frame reassembly failed (-84) [ 143.792295][ T1037] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 143.895184][T10630] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 143.896048][T10630] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1594'. [ 143.963295][ T1037] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 143.964837][ T1037] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 143.964860][ T1037] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 143.964878][ T1037] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.964896][ T1037] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 34625, setting to 1024 [ 143.966298][ T1037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.966315][ T1037] usb 7-1: Product: syz [ 143.966327][ T1037] usb 7-1: Manufacturer: syz [ 144.172016][T10624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.172265][T10624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.176446][ T1037] dvb_ttusb_budget: ttusb_init_controller: error [ 144.176456][ T1037] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.198400][ T1037] DVB: Unable to find symbol cx22700_attach() [ 144.221257][ T1037] DVB: Unable to find symbol tda10046_attach() [ 144.221270][ T1037] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.391255][T10624] veth1_macvtap: left promiscuous mode [ 144.413348][ T50] usb 7-1: USB disconnect, device number 13 [ 144.805049][ T5771] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.805084][ T5771] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.894658][T10641] --map-set only usable from mangle table [ 144.931602][ T5771] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.931634][ T5771] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.938002][T10641] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1598'. [ 145.003782][ T5771] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.003827][ T5771] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.098327][ T5771] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 145.099140][ T5771] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.099159][ T5771] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.133157][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.189967][ T5729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.191376][ T5729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.195935][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.201044][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.202459][ T5729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.304547][T10666] FAULT_INJECTION: forcing a failure. [ 145.304547][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 145.304579][T10666] CPU: 3 UID: 0 PID: 10666 Comm: syz.5.1608 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.304604][T10666] Tainted: [L]=SOFTLOCKUP [ 145.304611][T10666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.304621][T10666] Call Trace: [ 145.304627][T10666] [ 145.304635][T10666] dump_stack_lvl+0x100/0x190 [ 145.304666][T10666] should_fail_ex.cold+0x5/0xa [ 145.304691][T10666] should_failslab+0xc2/0x120 [ 145.304718][T10666] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 145.304742][T10666] ? __alloc_skb+0x5b7/0x710 [ 145.304783][T10666] ? __alloc_skb+0x140/0x710 [ 145.304808][T10666] __alloc_skb+0x140/0x710 [ 145.304826][T10666] ? __alloc_skb+0x5b7/0x710 [ 145.304844][T10666] ? __pfx___alloc_skb+0x10/0x10 [ 145.304872][T10666] netlink_alloc_large_skb+0x69/0x150 [ 145.304895][T10666] netlink_sendmsg+0x7a2/0x1020 [ 145.304921][T10666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.304948][T10666] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.305003][T10666] ? ____sys_sendmsg+0xa4d/0xbe0 [ 145.305030][T10666] ____sys_sendmsg+0xa4d/0xbe0 [ 145.305063][T10666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.305088][T10666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.305123][T10666] ? lock_acquire+0x1d1/0x380 [ 145.305147][T10666] ? get_pid_task+0x2a/0x250 [ 145.305180][T10666] ___sys_sendmsg+0x190/0x1e0 [ 145.305212][T10666] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.305242][T10666] ? get_pid_task+0x106/0x250 [ 145.305281][T10666] ? find_held_lock+0x2b/0x80 [ 145.305317][T10666] __sys_sendmsg+0x160/0x210 [ 145.305343][T10666] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.305381][T10666] do_syscall_64+0x123/0x790 [ 145.305407][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.305427][T10666] RIP: 0033:0x7fee2bf9f559 [ 145.305443][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.305461][T10666] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.305480][T10666] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 145.305493][T10666] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 145.305503][T10666] RBP: 00007fee2ce46090 R08: 0000000000000000 R09: 0000000000000000 [ 145.305514][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.305541][T10666] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 145.305566][T10666] [ 145.405681][ T5771] dummy0: left promiscuous mode [ 145.408161][ T5771] bridge0: port 3(dummy0) entered disabled state [ 145.416917][ T5771] bridge_slave_1: left promiscuous mode [ 145.417098][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.419520][ T5771] bridge_slave_0: left promiscuous mode [ 145.419627][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.524626][T10691] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 145.655011][ T5771] geneve1 (unregistering): left promiscuous mode [ 145.697577][ T5771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.699198][ T5771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.700052][ T5771] bond0 (unregistering): Released all slaves [ 145.710346][ T5771] bond1 (unregistering): Released all slaves [ 145.717686][ T5771] bond2 (unregistering): Released all slaves [ 145.737555][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 145.800847][ T5771] tipc: Left network mode [ 145.852315][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.903436][T10707] FAULT_INJECTION: forcing a failure. [ 145.903436][T10707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.903468][T10707] CPU: 3 UID: 0 PID: 10707 Comm: syz.2.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.903492][T10707] Tainted: [L]=SOFTLOCKUP [ 145.903498][T10707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.903508][T10707] Call Trace: [ 145.903514][T10707] [ 145.903521][T10707] dump_stack_lvl+0x100/0x190 [ 145.903559][T10707] should_fail_ex.cold+0x5/0xa [ 145.903583][T10707] _copy_from_iter+0x1f4/0x1690 [ 145.903608][T10707] ? __pfx__copy_from_iter+0x10/0x10 [ 145.903623][T10707] ? kasan_save_track+0x14/0x30 [ 145.903646][T10707] ? __kasan_kmalloc+0xaa/0xb0 [ 145.903670][T10707] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 145.903691][T10707] ? configfs_write_iter+0x388/0x4e0 [ 145.903736][T10707] configfs_write_iter+0xb3/0x4e0 [ 145.903760][T10707] vfs_write+0x6af/0x1050 [ 145.903783][T10707] ? __pfx_configfs_write_iter+0x10/0x10 [ 145.903807][T10707] ? __pfx_vfs_write+0x10/0x10 [ 145.903827][T10707] ? find_held_lock+0x2b/0x80 [ 145.903859][T10707] ksys_write+0x12a/0x250 [ 145.903881][T10707] ? __pfx_ksys_write+0x10/0x10 [ 145.903908][T10707] do_syscall_64+0x123/0x790 [ 145.903928][T10707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.903945][T10707] RIP: 0033:0x7f190bb9f559 [ 145.903960][T10707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.903975][T10707] RSP: 002b:00007f1909df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.903993][T10707] RAX: ffffffffffffffda RBX: 00007f190be25fa0 RCX: 00007f190bb9f559 [ 145.904005][T10707] RDX: 0000000000000004 RSI: 0000200000000980 RDI: 0000000000000003 [ 145.904015][T10707] RBP: 00007f1909df6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.904026][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.904036][T10707] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 145.904060][T10707] [ 146.050719][T10672] dummy0 speed is unknown, defaulting to 1000 [ 146.055633][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 146.186730][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.199759][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.212203][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.334577][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 146.487014][T10652] infiniband rxe0: set active [ 146.487063][ T3271] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.487115][T10652] infiniband rxe0: added rxe_eth0 [ 146.499814][T10652] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 146.499846][T10652] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 146.499883][T10652] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 146.538809][T10652] RDS/IB: rxe0: added [ 146.538837][T10652] smc: adding ib device rxe0 with port count 1 [ 146.538848][T10652] smc: ib device rxe0 port 1 has no pnetid [ 146.538888][ T58] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.540638][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.544803][T10738] netlink: 'syz.0.1620': attribute type 4 has an invalid length. [ 146.544818][T10738] __nla_validate_parse: 2 callbacks suppressed [ 146.544828][T10738] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1620'. [ 146.547211][T10738] netlink: 'syz.0.1620': attribute type 4 has an invalid length. [ 146.547226][T10738] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1620'. [ 146.614789][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.639260][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 146.690998][T10748] FAULT_INJECTION: forcing a failure. [ 146.690998][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 146.691020][T10748] CPU: 1 UID: 0 PID: 10748 Comm: syz.0.1622 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.691036][T10748] Tainted: [L]=SOFTLOCKUP [ 146.691040][T10748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.691047][T10748] Call Trace: [ 146.691052][T10748] [ 146.691057][T10748] dump_stack_lvl+0x100/0x190 [ 146.691078][T10748] should_fail_ex.cold+0x5/0xa [ 146.691095][T10748] should_failslab+0xc2/0x120 [ 146.691113][T10748] __kmalloc_cache_noprof+0x91/0x6d0 [ 146.691127][T10748] ? input_allocate_device+0x44/0x350 [ 146.691186][T10748] input_allocate_device+0x44/0x350 [ 146.691202][T10748] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 146.691216][T10748] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.691231][T10748] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x530 [ 146.691244][T10748] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 146.691256][T10748] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 146.691269][T10748] ? __fget_files+0x34/0x3d0 [ 146.691286][T10748] ? selinux_file_ioctl+0x13b/0x290 [ 146.691296][T10748] ? selinux_file_ioctl+0xb6/0x290 [ 146.691307][T10748] ? __pfx_uinput_ioctl+0x10/0x10 [ 146.691319][T10748] __x64_sys_ioctl+0x18e/0x210 [ 146.691335][T10748] do_syscall_64+0x123/0x790 [ 146.691348][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.691360][T10748] RIP: 0033:0x7f1f5299f559 [ 146.691370][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.691381][T10748] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.691392][T10748] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 146.691399][T10748] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 146.691407][T10748] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 146.691414][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.691421][T10748] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 146.691436][T10748] [ 146.741416][T10751] kAFS: No cell specified [ 146.781381][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.887416][ T5771] hsr_slave_0: left promiscuous mode [ 146.887879][ T5771] hsr_slave_1: left promiscuous mode [ 146.893923][ T5771] veth1_macvtap: left promiscuous mode [ 146.893955][ T5771] veth0_macvtap: left promiscuous mode [ 146.894028][ T5771] veth1_vlan: left promiscuous mode [ 146.894058][ T5771] veth0_vlan: left promiscuous mode [ 146.899958][T10758] FAULT_INJECTION: forcing a failure. [ 146.899958][T10758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.899986][T10758] CPU: 0 UID: 0 PID: 10758 Comm: syz.0.1625 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.900011][T10758] Tainted: [L]=SOFTLOCKUP [ 146.900017][T10758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.900028][T10758] Call Trace: [ 146.900034][T10758] [ 146.900041][T10758] dump_stack_lvl+0x100/0x190 [ 146.900070][T10758] should_fail_ex.cold+0x5/0xa [ 146.900093][T10758] _copy_from_user+0x2e/0xd0 [ 146.900119][T10758] vga_arb_write+0xf5/0x14b0 [ 146.900180][T10758] ? get_pid_task+0x2a/0x250 [ 146.900203][T10758] ? __pfx_vga_arb_write+0x10/0x10 [ 146.900223][T10758] ? get_pid_task+0xfc/0x250 [ 146.900243][T10758] ? get_pid_task+0xfc/0x250 [ 146.900266][T10758] ? avc_policy_seqno+0x9/0x20 [ 146.900289][T10758] ? bpf_lsm_file_permission+0x9/0x10 [ 146.900322][T10758] ? security_file_permission+0x76/0x210 [ 146.900360][T10758] ? rw_verify_area+0xce/0x6d0 [ 146.900380][T10758] vfs_write+0x2aa/0x1050 [ 146.900400][T10758] ? __pfx_vga_arb_write+0x10/0x10 [ 146.900418][T10758] ? lock_acquire+0x1d1/0x380 [ 146.900436][T10758] ? __fget_files+0x34/0x3d0 [ 146.900450][T10758] ? __pfx_vfs_write+0x10/0x10 [ 146.900467][T10758] ? find_held_lock+0x2b/0x80 [ 146.900480][T10758] ? __fget_files+0x215/0x3d0 [ 146.900492][T10758] ? __fget_files+0x215/0x3d0 [ 146.900508][T10758] ? __fget_files+0x21f/0x3d0 [ 146.900526][T10758] ksys_write+0x12a/0x250 [ 146.900545][T10758] ? __pfx_ksys_write+0x10/0x10 [ 146.900570][T10758] do_syscall_64+0x123/0x790 [ 146.900588][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.900605][T10758] RIP: 0033:0x7f1f5299f559 [ 146.900620][T10758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.900638][T10758] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.900655][T10758] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 146.900666][T10758] RDX: 0000000000000013 RSI: 0000200000000240 RDI: 0000000000000003 [ 146.900676][T10758] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 146.900685][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.900697][T10758] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 146.900712][T10758] [ 147.070335][ T5771] team0 (unregistering): Port device team_slave_1 removed [ 147.070378][ T5729] Bluetooth: hci0: unexpected event 0x2f length: 509 > 255 [ 147.070780][T10762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=10762 comm=syz.5.1626 [ 147.081224][ T5771] team0 (unregistering): Port device team_slave_0 removed [ 147.182236][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.182654][T10763] team0: No ports can be present during mode change [ 147.272624][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.292951][ T5729] Bluetooth: hci2: command tx timeout [ 147.347255][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 147.347267][ T42] audit: type=1400 audit(1792544459.415:60480): avc: denied { read } for pid=10652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.406281][ T5771] IPVS: stop unused estimator thread 0... [ 147.426413][T10652] dummy0 speed is unknown, defaulting to 1000 [ 147.450139][ T42] audit: type=1400 audit(1792544459.515:60481): avc: denied { getopt } for pid=10776 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.493144][T10652] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.698883][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.698955][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.699105][T10652] bridge_slave_0: entered allmulticast mode [ 147.699773][T10652] bridge_slave_0: entered promiscuous mode [ 147.701607][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.701648][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.701705][T10652] bridge_slave_1: entered allmulticast mode [ 147.702743][T10652] bridge_slave_1: entered promiscuous mode [ 147.723056][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.725067][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.739084][T10652] team0: Port device team_slave_0 added [ 147.740603][T10652] team0: Port device team_slave_1 added [ 147.755865][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.755987][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.756002][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.757136][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.757144][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.757158][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.811232][T10652] hsr_slave_0: entered promiscuous mode [ 147.812237][T10652] hsr_slave_1: entered promiscuous mode [ 147.812853][T10652] debugfs: 'hsr0' already exists in 'hsr' [ 147.812867][T10652] Cannot create hsr debugfs directory [ 147.951020][T10652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.953814][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.954533][T10652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.957706][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.958486][T10652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.970914][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.971327][T10652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.972895][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.021767][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.031466][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.041812][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.041888][ T6863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.043581][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.043652][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.054989][ T42] audit: type=1400 audit(1792544460.125:60482): avc: denied { getopt } for pid=10807 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.057985][ T42] audit: type=1400 audit(1792544460.125:60483): avc: denied { create } for pid=10807 comm="syz.0.1635" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.061119][T10809] net_ratelimit: 507 callbacks suppressed [ 148.061130][T10809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.061442][ T42] audit: type=1400 audit(1792544460.125:60484): avc: denied { read } for pid=10807 comm="syz.0.1635" name="file0" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.061640][ T42] audit: type=1400 audit(1792544460.125:60485): avc: denied { open } for pid=10807 comm="syz.0.1635" path="/494/file0" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.062794][ T42] audit: type=1400 audit(1792544460.135:60486): avc: denied { setattr } for pid=10807 comm="syz.0.1635" name="file0" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.063173][ T42] audit: type=1400 audit(1792544460.135:60487): avc: denied { append } for pid=10807 comm="syz.0.1635" name="file0" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.098074][ T42] audit: type=1400 audit(1792544460.155:60488): avc: denied { unlink } for pid=5732 comm="syz-executor" name="file0" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.108096][T10818] 9pnet_fd: p9_fd_create_unix (10818): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 148.185149][T10827] FAULT_INJECTION: forcing a failure. [ 148.185149][T10827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.185170][T10827] CPU: 1 UID: 0 PID: 10827 Comm: syz.0.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.185185][T10827] Tainted: [L]=SOFTLOCKUP [ 148.185190][T10827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.185197][T10827] Call Trace: [ 148.185201][T10827] [ 148.185206][T10827] dump_stack_lvl+0x100/0x190 [ 148.185226][T10827] should_fail_ex.cold+0x5/0xa [ 148.185243][T10827] _copy_from_user+0x2e/0xd0 [ 148.185262][T10827] get_sg_io_hdr+0x146/0x8c0 [ 148.185292][T10827] ? do_raw_write_lock+0x11e/0x260 [ 148.185310][T10827] ? find_held_lock+0x2b/0x80 [ 148.185320][T10827] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 148.185334][T10827] ? _raw_write_unlock_irqrestore+0x3b/0x90 [ 148.185354][T10827] ? sg_add_request+0x2d5/0x380 [ 148.185377][T10827] sg_new_write.isra.0+0x163/0xb10 [ 148.185391][T10827] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 148.185418][T10827] sg_ioctl+0x357/0x26d0 [ 148.185438][T10827] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x530 [ 148.185452][T10827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 148.185466][T10827] ? __pfx_sg_ioctl+0x10/0x10 [ 148.185477][T10827] ? __fget_files+0x34/0x3d0 [ 148.185493][T10827] ? selinux_file_ioctl+0x13b/0x290 [ 148.185503][T10827] ? selinux_file_ioctl+0xb6/0x290 [ 148.185515][T10827] ? __pfx_sg_ioctl+0x10/0x10 [ 148.185527][T10827] __x64_sys_ioctl+0x18e/0x210 [ 148.185543][T10827] do_syscall_64+0x123/0x790 [ 148.185556][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.185568][T10827] RIP: 0033:0x7f1f5299f559 [ 148.185577][T10827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.185605][T10827] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.185616][T10827] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 148.185624][T10827] RDX: 0000200000000600 RSI: 0000000000002285 RDI: 0000000000000003 [ 148.185631][T10827] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 148.185638][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.185644][T10827] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 148.185659][T10827] [ 148.349385][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.367241][T10849] FAULT_INJECTION: forcing a failure. [ 148.367241][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 148.367264][T10849] CPU: 0 UID: 0 PID: 10849 Comm: syz.5.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.367281][T10849] Tainted: [L]=SOFTLOCKUP [ 148.367286][T10849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.367293][T10849] Call Trace: [ 148.367298][T10849] [ 148.367304][T10849] dump_stack_lvl+0x100/0x190 [ 148.367326][T10849] should_fail_ex.cold+0x5/0xa [ 148.367344][T10849] should_failslab+0xc2/0x120 [ 148.367363][T10849] kmem_cache_alloc_noprof+0x92/0x6a0 [ 148.367382][T10849] ? security_file_alloc+0x34/0x2c0 [ 148.367397][T10849] security_file_alloc+0x34/0x2c0 [ 148.367410][T10849] init_file+0x95/0x480 [ 148.367422][T10849] alloc_empty_file+0x79/0x1c0 [ 148.367435][T10849] alloc_file_pseudo+0x183/0x290 [ 148.367449][T10849] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 148.367462][T10849] ? bpf_lsm_socket_post_create+0x9/0x10 [ 148.367484][T10849] sock_alloc_file+0x50/0x210 [ 148.367501][T10849] __sys_socketpair+0x353/0x5b0 [ 148.367520][T10849] ? __pfx___sys_socketpair+0x10/0x10 [ 148.367539][T10849] ? __sys_socket+0xac/0x260 [ 148.367558][T10849] ? xfd_validate_state+0x129/0x190 [ 148.367575][T10849] __x64_sys_socketpair+0x96/0x100 [ 148.367586][T10849] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.367599][T10849] do_syscall_64+0x123/0x790 [ 148.367613][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.367626][T10849] RIP: 0033:0x7fee2bf9f559 [ 148.367638][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.367650][T10849] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 148.367663][T10849] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 148.367671][T10849] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 148.367678][T10849] RBP: 00007fee2c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 148.367686][T10849] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 148.367694][T10849] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 148.367709][T10849] [ 148.369853][ T42] audit: type=1400 audit(1792544460.435:60489): avc: denied { write } for pid=10845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.417491][T10855] FAULT_INJECTION: forcing a failure. [ 148.417491][T10855] name failslab, interval 1, probability 0, space 0, times 0 [ 148.417520][T10855] CPU: 1 UID: 0 PID: 10855 Comm: syz.5.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.417547][T10855] Tainted: [L]=SOFTLOCKUP [ 148.417554][T10855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.417564][T10855] Call Trace: [ 148.417572][T10855] [ 148.417580][T10855] dump_stack_lvl+0x100/0x190 [ 148.417613][T10855] should_fail_ex.cold+0x5/0xa [ 148.417642][T10855] should_failslab+0xc2/0x120 [ 148.417674][T10855] __kmalloc_noprof+0xfc/0x840 [ 148.417700][T10855] ? rcu_is_watching+0x13/0xc0 [ 148.417736][T10855] ? tomoyo_encode2+0xfb/0x3c0 [ 148.417763][T10855] tomoyo_encode2+0xfb/0x3c0 [ 148.417788][T10855] tomoyo_encode+0x29/0x50 [ 148.417807][T10855] tomoyo_realpath_from_path+0x18c/0x690 [ 148.417833][T10855] tomoyo_check_open_permission+0x2af/0x3c0 [ 148.417861][T10855] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 148.417899][T10855] ? hook_file_open+0x248/0x8e0 [ 148.417938][T10855] tomoyo_file_open+0x6b/0x90 [ 148.417964][T10855] security_file_open+0xb5/0x1e0 [ 148.417986][T10855] do_dentry_open+0x552/0x1470 [ 148.418021][T10855] vfs_open_consume+0xcc/0x460 [ 148.418044][T10855] path_openat+0x1551/0x2430 [ 148.418062][T10855] ? __pfx_path_openat+0x10/0x10 [ 148.418085][T10855] do_file_open+0x20e/0x430 [ 148.418107][T10855] ? __pfx_do_file_open+0x10/0x10 [ 148.418151][T10855] ? __pfx_kfree_link+0x10/0x10 [ 148.418187][T10855] ? _raw_spin_unlock+0x28/0x50 [ 148.418227][T10855] ? alloc_fd+0x471/0x7a0 [ 148.418253][T10855] do_sys_openat2+0x163/0x1d0 [ 148.418274][T10855] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.418307][T10855] __x64_sys_openat+0x12d/0x210 [ 148.418329][T10855] ? __pfx___x64_sys_openat+0x10/0x10 [ 148.418349][T10855] ? ksys_write+0x1ac/0x250 [ 148.418383][T10855] do_syscall_64+0x123/0x790 [ 148.418405][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.418427][T10855] RIP: 0033:0x7fee2bf5fd8e [ 148.418444][T10855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.418460][T10855] RSP: 002b:00007fee2ce45f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.418478][T10855] RAX: ffffffffffffffda RBX: 00007fee2ce466c0 RCX: 00007fee2bf5fd8e [ 148.418492][T10855] RDX: 0000000000000002 RSI: 00007fee2c03641a RDI: ffffffffffffff9c [ 148.418503][T10855] RBP: 00007fee2c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 148.418513][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 148.418524][T10855] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 148.418549][T10855] [ 148.420901][T10855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.421002][T10855] FAULT_INJECTION: forcing a failure. [ 148.421002][T10855] name failslab, interval 1, probability 0, space 0, times 0 [ 148.421030][T10855] CPU: 1 UID: 0 PID: 10855 Comm: syz.5.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.421052][T10855] Tainted: [L]=SOFTLOCKUP [ 148.421059][T10855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.421070][T10855] Call Trace: [ 148.421077][T10855] [ 148.421084][T10855] dump_stack_lvl+0x100/0x190 [ 148.421115][T10855] should_fail_ex.cold+0x5/0xa [ 148.421143][T10855] should_failslab+0xc2/0x120 [ 148.421172][T10855] kmem_cache_alloc_noprof+0x92/0x6a0 [ 148.421199][T10855] ? sk_prot_alloc+0x60/0x2a0 [ 148.421231][T10855] sk_prot_alloc+0x60/0x2a0 [ 148.421258][T10855] sk_alloc+0x36/0xe80 [ 148.421282][T10855] unix_create1+0xa6/0x700 [ 148.421351][T10855] unix_create+0x10f/0x1b0 [ 148.421373][T10855] __sock_create+0x339/0x860 [ 148.421406][T10855] __sys_socketpair+0x1e4/0x5b0 [ 148.421438][T10855] ? __pfx___sys_socketpair+0x10/0x10 [ 148.421469][T10855] ? __pfx_ksys_write+0x10/0x10 [ 148.421500][T10855] __x64_sys_socketpair+0x96/0x100 [ 148.421519][T10855] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.421538][T10855] do_syscall_64+0x123/0x790 [ 148.421560][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.421579][T10855] RIP: 0033:0x7fee2bf9f559 [ 148.421594][T10855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.421613][T10855] RSP: 002b:00007fee2ce46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 148.421631][T10855] RAX: ffffffffffffffda RBX: 00007fee2c225fa0 RCX: 00007fee2bf9f559 [ 148.421644][T10855] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 148.421654][T10855] RBP: 00007fee2ce46090 R08: 0000000000000000 R09: 0000000000000000 [ 148.421667][T10855] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 148.421679][T10855] R13: 00007fee2c226038 R14: 00007fee2c225fa0 R15: 00007fff4f08cd18 [ 148.421705][T10855] [ 148.465578][T10858] can0: slcan on ttynull. [ 148.534710][T10857] can0 (unregistered): slcan off ttynull. [ 148.623049][T10652] veth0_vlan: entered promiscuous mode [ 148.627599][T10652] veth1_vlan: entered promiscuous mode [ 148.649533][T10652] veth0_macvtap: entered promiscuous mode [ 148.654065][T10652] veth1_macvtap: entered promiscuous mode [ 148.669932][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.678271][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.693565][T10875] 9pnet_virtio: no channels available for device syz [ 148.711087][T10875] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.739716][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.739795][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.739828][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.739891][ T6867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.739904][ T6867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.761827][ T6867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.761848][ T6867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.772753][ T5771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.800110][T10879] nvmet: Invalid value 'i' for adrfam [ 148.800131][T10879] FAULT_INJECTION: forcing a failure. [ 148.800131][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.800155][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.6.1600 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.800179][T10879] Tainted: [L]=SOFTLOCKUP [ 148.800186][T10879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.800196][T10879] Call Trace: [ 148.800203][T10879] [ 148.800211][T10879] dump_stack_lvl+0x100/0x190 [ 148.800242][T10879] should_fail_ex.cold+0x5/0xa [ 148.800268][T10879] _copy_to_user+0x32/0xd0 [ 148.800298][T10879] simple_read_from_buffer+0xcb/0x170 [ 148.800328][T10879] proc_fail_nth_read+0x1af/0x230 [ 148.800377][T10879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.800406][T10879] ? rw_verify_area+0xce/0x6d0 [ 148.800427][T10879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.800455][T10879] vfs_read+0x1e4/0xb40 [ 148.800484][T10879] ? lock_acquire+0x1d1/0x380 [ 148.800505][T10879] ? __fget_files+0x34/0x3d0 [ 148.800521][T10879] ? __pfx_vfs_read+0x10/0x10 [ 148.800542][T10879] ? find_held_lock+0x2b/0x80 [ 148.800558][T10879] ? __fget_files+0x215/0x3d0 [ 148.800579][T10879] ? __fget_files+0x21f/0x3d0 [ 148.800602][T10879] ksys_read+0x12a/0x250 [ 148.800621][T10879] ? __pfx_ksys_read+0x10/0x10 [ 148.800645][T10879] do_syscall_64+0x123/0x790 [ 148.800661][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.800676][T10879] RIP: 0033:0x7fb76355fd8e [ 148.800688][T10879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.800702][T10879] RSP: 002b:00007fb76443dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.800717][T10879] RAX: ffffffffffffffda RBX: 00007fb76443e6c0 RCX: 00007fb76355fd8e [ 148.800726][T10879] RDX: 000000000000000f RSI: 00007fb76443e0a0 RDI: 0000000000000004 [ 148.800735][T10879] RBP: 00007fb76443e090 R08: 0000000000000000 R09: 0000000000000000 [ 148.800744][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.800752][T10879] R13: 00007fb763826038 R14: 00007fb763825fa0 R15: 00007fff0108bfe8 [ 148.800771][T10879] [ 148.844799][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1650'. [ 148.865418][T10881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.931256][T10884] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.176769][T10894] FAULT_INJECTION: forcing a failure. [ 149.176769][T10894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.176791][T10894] CPU: 3 UID: 0 PID: 10894 Comm: syz.0.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.176807][T10894] Tainted: [L]=SOFTLOCKUP [ 149.176811][T10894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.176818][T10894] Call Trace: [ 149.176822][T10894] [ 149.176827][T10894] dump_stack_lvl+0x100/0x190 [ 149.176850][T10894] should_fail_ex.cold+0x5/0xa [ 149.176866][T10894] _copy_from_user+0x2e/0xd0 [ 149.176886][T10894] copy_msghdr_from_user+0x9f/0x4c0 [ 149.176905][T10894] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 149.176925][T10894] ? lock_acquire+0x1d1/0x380 [ 149.176939][T10894] ? get_pid_task+0x2a/0x250 [ 149.176981][T10894] ___sys_sendmsg+0x106/0x1e0 [ 149.176999][T10894] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.177016][T10894] ? get_pid_task+0x106/0x250 [ 149.177037][T10894] ? find_held_lock+0x2b/0x80 [ 149.177056][T10894] __sys_sendmsg+0x160/0x210 [ 149.177070][T10894] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.177090][T10894] do_syscall_64+0x123/0x790 [ 149.177104][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.177116][T10894] RIP: 0033:0x7f1f5299f559 [ 149.177126][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.177137][T10894] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.177149][T10894] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 149.177158][T10894] RDX: 0000000000000004 RSI: 00002000000005c0 RDI: 0000000000000006 [ 149.177165][T10894] RBP: 00007f1f53882090 R08: 0000000000000000 R09: 0000000000000000 [ 149.177172][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.177179][T10894] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 149.177193][T10894] [ 149.179255][T10894] FAULT_INJECTION: forcing a failure. [ 149.179255][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 149.179283][T10894] CPU: 3 UID: 0 PID: 10894 Comm: syz.0.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.179308][T10894] Tainted: [L]=SOFTLOCKUP [ 149.179315][T10894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.179325][T10894] Call Trace: [ 149.179332][T10894] [ 149.179339][T10894] dump_stack_lvl+0x100/0x190 [ 149.179370][T10894] should_fail_ex.cold+0x5/0xa [ 149.179395][T10894] should_failslab+0xc2/0x120 [ 149.179425][T10894] kmem_cache_alloc_noprof+0x92/0x6a0 [ 149.179452][T10894] ? do_getname+0x35/0x390 [ 149.179477][T10894] do_getname+0x35/0x390 [ 149.179500][T10894] do_sys_openat2+0xc3/0x1d0 [ 149.179522][T10894] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.179542][T10894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.179570][T10894] __x64_sys_openat+0x12d/0x210 [ 149.179590][T10894] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.179621][T10894] do_syscall_64+0x123/0x790 [ 149.179646][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.179672][T10894] RIP: 0033:0x7f1f5299f559 [ 149.179687][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.179705][T10894] RSP: 002b:00007f1f53882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.179725][T10894] RAX: ffffffffffffffda RBX: 00007f1f52c25fa0 RCX: 00007f1f5299f559 [ 149.179736][T10894] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 149.179747][T10894] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.179758][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.179769][T10894] R13: 00007f1f52c26038 R14: 00007f1f52c25fa0 R15: 00007ffdf6f1ecb8 [ 149.179794][T10894] [ 149.229146][T10904] 9pnet_virtio: no channels available for device syz [ 149.244686][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 149.309096][T10905] FAULT_INJECTION: forcing a failure. [ 149.309096][T10905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 149.309128][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.2.1655 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.309154][T10905] Tainted: [L]=SOFTLOCKUP [ 149.309161][T10905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.309171][T10905] Call Trace: [ 149.309178][T10905] [ 149.309200][T10905] dump_stack_lvl+0x100/0x190 [ 149.309239][T10905] should_fail_ex.cold+0x5/0xa [ 149.309265][T10905] get_futex_key+0xf5d/0x13e0 [ 149.309295][T10905] ? __pfx_get_futex_key+0x10/0x10 [ 149.309320][T10905] ? __mutex_unlock_slowpath+0x35d/0x930 [ 149.309345][T10905] futex_wake+0xf4/0x5e0 [ 149.309369][T10905] ? __pfx_futex_wake+0x10/0x10 [ 149.309393][T10905] ? lock_acquire+0x1d1/0x380 [ 149.309415][T10905] ? detach_task_ctx_data+0x83/0x490 [ 149.309458][T10905] do_futex+0x2b2/0x440 [ 149.309477][T10905] ? __pfx_do_futex+0x10/0x10 [ 149.309502][T10905] ? __might_fault+0xc5/0x140 [ 149.309530][T10905] mm_exit_exec_release+0x256/0x2f0 [ 149.309554][T10905] do_exit+0x707/0x2a40 [ 149.309583][T10905] ? __pfx_do_exit+0x10/0x10 [ 149.309607][T10905] ? do_raw_spin_lock+0x128/0x260 [ 149.309632][T10905] ? find_held_lock+0x2b/0x80 [ 149.309647][T10905] ? get_signal+0x7db/0x21d0 [ 149.309672][T10905] do_group_exit+0xd5/0x2a0 [ 149.309699][T10905] get_signal+0x1ec2/0x21d0 [ 149.309726][T10905] ? putname+0xb1/0x110 [ 149.309745][T10905] ? __pfx_get_signal+0x10/0x10 [ 149.309767][T10905] ? do_futex+0x190/0x440 [ 149.309785][T10905] arch_do_signal_or_restart+0x91/0x7e0 [ 149.309816][T10905] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 149.309849][T10905] ? __x64_sys_openat+0x12d/0x210 [ 149.309877][T10905] exit_to_user_mode_loop+0x139/0x700 [ 149.309903][T10905] ? rcu_is_watching+0x13/0xc0 [ 149.309932][T10905] do_syscall_64+0x661/0x790 [ 149.309953][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.309971][T10905] RIP: 0033:0x7f190bb9f559 [ 149.309986][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.310003][T10905] RSP: 002b:00007f1909dd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.310021][T10905] RAX: fffffffffffffe00 RBX: 00007f190be26098 RCX: 00007f190bb9f559 [ 149.310033][T10905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f190be26098 [ 149.310044][T10905] RBP: 00007f190be26090 R08: 0000000000000000 R09: 0000000000000000 [ 149.310054][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.310065][T10905] R13: 00007f190be26128 R14: 00007fff1e66f4e0 R15: 00007fff1e66f5c8 [ 149.310090][T10905] [ 149.335226][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 149.375813][T10911] FAULT_INJECTION: forcing a failure. [ 149.375813][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 149.375837][T10911] CPU: 2 UID: 0 PID: 10911 Comm: syz.0.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.375854][T10911] Tainted: [L]=SOFTLOCKUP [ 149.375859][T10911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.375867][T10911] Call Trace: [ 149.375872][T10911] [ 149.375878][T10911] dump_stack_lvl+0x100/0x190 [ 149.375899][T10911] should_fail_ex.cold+0x5/0xa [ 149.375915][T10911] should_failslab+0xc2/0x120 [ 149.375935][T10911] kmem_cache_alloc_noprof+0x92/0x6a0 [ 149.375952][T10911] ? do_getname+0x35/0x390 [ 149.375968][T10911] do_getname+0x35/0x390 [ 149.375982][T10911] do_sys_openat2+0xc3/0x1d0 [ 149.375994][T10911] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.376007][T10911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.376024][T10911] __x64_sys_openat+0x12d/0x210 [ 149.376036][T10911] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.376054][T10911] do_syscall_64+0x123/0x790 [ 149.376066][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.376079][T10911] RIP: 0033:0x7f1f5299f559 [ 149.376089][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.376100][T10911] RSP: 002b:00007f1f53861028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.376113][T10911] RAX: ffffffffffffffda RBX: 00007f1f52c26090 RCX: 00007f1f5299f559 [ 149.376120][T10911] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 149.376127][T10911] RBP: 00007f1f52a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.376135][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.376141][T10911] R13: 00007f1f52c26128 R14: 00007f1f52c26090 R15: 00007ffdf6f1ecb8 [ 149.376156][T10911] [ 149.628655][ T41] libceph: connect (1)127.0.0.1:6789 error -22 [ 149.628873][ T41] libceph: mon0 (1)127.0.0.1:6789 connect error [ 149.631948][ T41] libceph: connect (1)127.0.0.1:6789 error -22 [ 149.632094][ T41] libceph: mon0 (1)127.0.0.1:6789 connect error [ 149.667367][T10927] binder_alloc: 10926: binder_alloc_buf, no vma [ 149.708052][T10929] pimreg: entered allmulticast mode [ 149.711533][T10931] 9pnet_virtio: no channels available for device syz [ 149.720340][T10931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.757643][T10933] FAULT_INJECTION: forcing a failure. [ 149.757643][T10933] name failslab, interval 1, probability 0, space 0, times 0 [ 149.757684][T10933] CPU: 3 UID: 0 PID: 10933 Comm: syz.2.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.757713][T10933] Tainted: [L]=SOFTLOCKUP [ 149.757721][T10933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.757735][T10933] Call Trace: [ 149.757743][T10933] [ 149.757751][T10933] dump_stack_lvl+0x100/0x190 [ 149.757803][T10933] should_fail_ex.cold+0x5/0xa [ 149.757833][T10933] should_failslab+0xc2/0x120 [ 149.757866][T10933] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 149.757894][T10933] ? start_dirop+0x79/0xb0 [ 149.757923][T10933] ? alloc_inode+0x68/0x250 [ 149.757950][T10933] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.758015][T10933] alloc_inode+0x68/0x250 [ 149.758043][T10933] new_inode+0x22/0x1c0 [ 149.758072][T10933] __debugfs_create_file+0xfb/0x500 [ 149.758102][T10933] debugfs_create_file_full+0x41/0x60 [ 149.758131][T10933] kvm_dev_ioctl+0x1797/0x1b50 [ 149.758165][T10933] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 149.758195][T10933] ? selinux_file_ioctl+0x13b/0x290 [ 149.758214][T10933] ? selinux_file_ioctl+0xb6/0x290 [ 149.758234][T10933] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 149.758260][T10933] __x64_sys_ioctl+0x18e/0x210 [ 149.758289][T10933] do_syscall_64+0x123/0x790 [ 149.758312][T10933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.758333][T10933] RIP: 0033:0x7f190bb9f559 [ 149.758350][T10933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.758369][T10933] RSP: 002b:00007f1909df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.758389][T10933] RAX: ffffffffffffffda RBX: 00007f190be25fa0 RCX: 00007f190bb9f559 [ 149.758402][T10933] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 149.758415][T10933] RBP: 00007f190bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.758427][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.758440][T10933] R13: 00007f190be26038 R14: 00007f190be25fa0 R15: 00007fff1e66f5c8 [ 149.758469][T10933] [ 149.758521][T10933] debugfs: out of free dentries, can not create file 'exits' [ 149.872685][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1669'. [ 149.893434][ T851] libceph: connect (1)127.0.0.1:6789 error -22 [ 149.893529][ T851] libceph: mon0 (1)127.0.0.1:6789 connect error [ 149.933622][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1671'. [ 149.974544][T10947] FAULT_INJECTION: forcing a failure. [ 149.974544][T10947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 149.974577][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.6.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.974605][T10947] Tainted: [L]=SOFTLOCKUP [ 149.974613][T10947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.974626][T10947] Call Trace: [ 149.974633][T10947] [ 149.974642][T10947] dump_stack_lvl+0x100/0x190 [ 149.974680][T10947] should_fail_ex.cold+0x5/0xa [ 149.974701][T10947] get_futex_key+0x1c9/0x13e0 [ 149.974721][T10947] ? __pfx_get_futex_key+0x10/0x10 [ 149.974738][T10947] ? find_held_lock+0x2b/0x80 [ 149.974750][T10947] ? iommufd_object_finalize+0xf7/0x160 [ 149.974779][T10947] ? iommufd_object_finalize+0xf7/0x160 [ 149.974796][T10947] futex_wake+0xf4/0x5e0 [ 149.974812][T10947] ? __pfx_futex_wake+0x10/0x10 [ 149.974825][T10947] ? __pfx___up_read+0x10/0x10 [ 149.974841][T10947] ? iommufd_ioas_alloc_ioctl+0x2d3/0x3c0 [ 149.974859][T10947] do_futex+0x2b2/0x440 [ 149.974871][T10947] ? __pfx_do_futex+0x10/0x10 [ 149.974890][T10947] ? __fget_files+0x34/0x3d0 [ 149.974904][T10947] __x64_sys_futex+0x34f/0x4d0 [ 149.974918][T10947] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.974934][T10947] ? selinux_file_ioctl+0xb6/0x290 [ 149.974961][T10947] do_syscall_64+0x123/0x790 [ 149.974986][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.975007][T10947] RIP: 0033:0x7fb76359f559 [ 149.975025][T10947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.975043][T10947] RSP: 002b:00007fb76443e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.975065][T10947] RAX: ffffffffffffffda RBX: 00007fb763825fa8 RCX: 00007fb76359f559 [ 149.975077][T10947] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb763825fac [ 149.975085][T10947] RBP: 00007fb763825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 149.975092][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.975112][T10947] R13: 00007fb763826038 R14: 00007fff0108bf00 R15: 00007fff0108bfe8 [ 149.975128][T10947] [ 150.058645][T10947] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 150.161826][T10954] ------------[ cut here ]------------ [ 150.161840][T10954] raw_local_irq_restore() called with IRQs enabled [ 150.161847][T10954] WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20, CPU#0: syz.6.1674/10954 [ 150.173017][T10954] Modules linked in: [ 150.174702][T10954] CPU: 0 UID: 0 PID: 10954 Comm: syz.6.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.178602][T10954] Tainted: [L]=SOFTLOCKUP [ 150.180023][T10954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.183381][T10954] RIP: 0010:warn_bogus_irq_restore+0xc/0x20 SYZFAIL: failed to recv rpc [ 150.185419][T10954] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d 84 1f 73 06 <67> 48 0f b9 3a 90 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.192622][T10954] RSP: 0018:ffffc900070c7788 EFLAGS: 00010202 [ 150.195470][T10954] RAX: 0000000000000202 RBX: ffffffff92058840 RCX: ffffffff81e876e3 [ 150.198087][T10954] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9248db60 [ 150.200669][T10954] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff240b108 [ 150.203349][T10954] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 150.205910][T10954] R13: 0000000000000000 R14: ffff888059dde000 R15: ffffffff92060460 [ 150.208490][T10954] FS: 00007fb76441d6c0(0000) GS:ffff8880d4734000(0000) knlGS:0000000000000000 [ 150.211397][T10954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.214560][T10954] CR2: 00007fb76441cff8 CR3: 0000000056c41000 CR4: 0000000000352ef0 [ 150.217062][T10954] Call Trace: [ 150.218172][T10954] [ 150.219144][T10954] _raw_spin_unlock_irqrestore+0x74/0x80 [ 150.220959][T10954] __rds_conn_create+0x18f8/0x2650 [ 150.222772][T10954] ? __pfx___rds_conn_create+0x10/0x10 [ 150.224656][T10954] ? trace_kmalloc+0xeb/0x110 [ 150.226372][T10954] ? __kasan_kmalloc+0xaa/0xb0 [ 150.227924][T10954] ? lockdep_init_map_type+0x5c/0x250 [ 150.229721][T10954] rds_conn_create_outgoing+0x44/0x60 [ 150.231442][T10954] rds_sendmsg+0x10da/0x34c0 [ 150.233051][T10954] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.234668][T10954] ? selinux_socket_sendmsg+0x198/0x2f0 [ 150.236434][T10954] ? ____sys_sendmsg+0xa4d/0xbe0 [ 150.238114][T10954] ____sys_sendmsg+0xa4d/0xbe0 [ 150.239635][T10954] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.241243][T10954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.243059][T10954] ___sys_sendmsg+0x190/0x1e0 [ 150.244605][T10954] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.246992][T10954] ? futex_wait+0x11e/0x370 [ 150.248455][T10954] ? find_held_lock+0x2b/0x80 [ 150.249981][T10954] __sys_sendmsg+0x160/0x210 [ 150.251584][T10954] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.253499][T10954] do_syscall_64+0x123/0x790 [ 150.255060][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.256941][T10954] RIP: 0033:0x7fb76359f559 [ 150.258419][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.265096][T10954] RSP: 002b:00007fb76441d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.268457][T10954] RAX: ffffffffffffffda RBX: 00007fb763826090 RCX: 00007fb76359f559 [ 150.270473][T10923] ceph: No mds server is up or the cluster is laggy [ 150.273272][T10954] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 150.275780][T10954] RBP: 00007fb763636b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.278392][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.280841][T10954] R13: 00007fb763826128 R14: 00007fb763826090 R15: 00007fff0108bfe8 [ 150.283405][T10954] [ 150.284436][T10954] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.286756][T10954] CPU: 0 UID: 0 PID: 10954 Comm: syz.6.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.290157][T10954] Tainted: [L]=SOFTLOCKUP [ 150.291543][T10954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.294720][T10954] Call Trace: [ 150.295832][T10954] [ 150.296806][T10954] dump_stack_lvl+0x100/0x190 [ 150.298318][T10954] vpanic+0x553/0x970 [ 150.299595][T10954] ? __pfx_vpanic+0x10/0x10 [ 150.301050][T10954] panic+0xd1/0xe0 [ 150.302248][T10954] ? __pfx_panic+0x10/0x10 [ 150.303707][T10954] check_panic_on_warn.cold+0x19/0x34 [ 150.305399][T10954] ? warn_bogus_irq_restore+0xc/0x20 [ 150.307046][T10954] __warn.cold+0x191/0x318 [ 150.308491][T10954] __report_bug+0x30f/0x440 [ 150.309938][T10954] ? warn_bogus_irq_restore+0xc/0x20 [ 150.311703][T10954] ? __pfx___report_bug+0x10/0x10 [ 150.313278][T10954] ? do_raw_spin_unlock+0x53/0x1e0 [ 150.314940][T10954] report_bug_entry+0xe2/0x290 [ 150.316474][T10954] ? warn_bogus_irq_restore+0xc/0x20 [ 150.318163][T10954] handle_bug+0x1cd/0x2a0 [ 150.319548][T10954] exc_invalid_op+0x17/0x50 [ 150.321001][T10954] asm_exc_invalid_op+0x1a/0x20 [ 150.322548][T10954] RIP: 0010:warn_bogus_irq_restore+0xc/0x20 [ 150.324461][T10954] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d 84 1f 73 06 <67> 48 0f b9 3a 90 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 [ 150.330390][T10954] RSP: 0018:ffffc900070c7788 EFLAGS: 00010202 [ 150.332352][T10954] RAX: 0000000000000202 RBX: ffffffff92058840 RCX: ffffffff81e876e3 [ 150.334951][T10954] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9248db60 [ 150.337519][T10954] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff240b108 [ 150.340087][T10954] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 150.342658][T10954] R13: 0000000000000000 R14: ffff888059dde000 R15: ffffffff92060460 [ 150.345261][T10954] ? do_raw_spin_unlock+0x53/0x1e0 [ 150.346935][T10954] _raw_spin_unlock_irqrestore+0x74/0x80 [ 150.348757][T10954] __rds_conn_create+0x18f8/0x2650 [ 150.350428][T10954] ? __pfx___rds_conn_create+0x10/0x10 [ 150.352243][T10954] ? trace_kmalloc+0xeb/0x110 [ 150.353809][T10954] ? __kasan_kmalloc+0xaa/0xb0 [ 150.355378][T10954] ? lockdep_init_map_type+0x5c/0x250 [ 150.357149][T10954] rds_conn_create_outgoing+0x44/0x60 [ 150.358951][T10954] rds_sendmsg+0x10da/0x34c0 [ 150.360475][T10954] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.362107][T10954] ? selinux_socket_sendmsg+0x198/0x2f0 [ 150.363931][T10954] ? ____sys_sendmsg+0xa4d/0xbe0 [ 150.365585][T10954] ____sys_sendmsg+0xa4d/0xbe0 [ 150.367236][T10954] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.368862][T10954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.370588][T10954] ___sys_sendmsg+0x190/0x1e0 [ 150.372139][T10954] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.373852][T10954] ? futex_wait+0x11e/0x370 [ 150.375355][T10954] ? find_held_lock+0x2b/0x80 [ 150.376972][T10954] __sys_sendmsg+0x160/0x210 [ 150.378490][T10954] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.380163][T10954] do_syscall_64+0x123/0x790 [ 150.381693][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.383604][T10954] RIP: 0033:0x7fb76359f559 [ 150.385117][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.391348][T10954] RSP: 002b:00007fb76441d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.394091][T10954] RAX: ffffffffffffffda RBX: 00007fb763826090 RCX: 00007fb76359f559 [ 150.396658][T10954] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 150.399244][T10954] RBP: 00007fb763636b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.401764][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.404353][T10954] R13: 00007fb763826128 R14: 00007fb763826090 R15: 00007fff0108bfe8 [ 150.406962][T10954] [ 150.408640][T10954] Kernel Offset: disabled [ 150.410065][T10954] Rebooting in 86400 seconds..