last executing test programs: 1.707088074s ago: executing program 1 (id=61): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) recvmmsg(r0, &(0x7f0000000080), 0x40000000000016c, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000140)="123456780000010000000001000000010000000101010000000000", 0x1b, 0x4008040, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4040884, 0x0, 0x0) 1.238137923s ago: executing program 0 (id=70): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c800f1"], 0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xf0, 0x0, 0x0, 0x1e}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 945.443277ms ago: executing program 3 (id=74): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x34) bind$nfc_llcp(r2, &(0x7f0000000480)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x100, 0x50) syz_usb_connect$cdc_ecm(0x2, 0x5b, 0x0, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) dup3(r1, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x800) 779.686004ms ago: executing program 1 (id=78): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./binfmt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000380)='./binfmt\x00', &(0x7f00000003c0)='binfmt_misc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./binfmt/status\x00', 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2}, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000880)={'wlan1\x00'}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000300)=0x5, 0x4) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r4, 0x4) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) (async) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f00000002c0)=0x3ff, 0xc, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffc, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a09}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8840) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) mount$bpf(0x0, 0x0, 0xfffffffffffffffd, 0x810000, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000040) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r9, 0xc80, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10f4}, 0x4008085) 726.890056ms ago: executing program 1 (id=80): mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000000a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c7465720000b4000000060a1f0400000000000000000a0000000900010073797a30000000000900020073797a300000000088000480380001800e000100696d6d6564696174650000002400028008000140000000011800028014000100000000000000000000000000000000012c0001800e000100696d6d6564696174650000001800028008000140000000020c0002800800010000000001200001800800010064757000140002800800014000000001080002400000000214000000110001"], 0x148}}, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 649.37ms ago: executing program 0 (id=82): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0xf5}]) 569.999336ms ago: executing program 2 (id=83): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x2000000, 0x11, 0x0, &(0x7f00000005c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 536.852835ms ago: executing program 1 (id=84): syz_clone(0x80c2000, &(0x7f0000000a80)="e70ef46daaaabe225882d1c0096cfa4dcddbbcbf7a4283a393646b519d3689f04cd1de1a41195c3edfd5f2b1a33fb075233ac4bf8589ef93d1f266f75d722c1d7e48f62818fb360be2de28b89625ca6b62c88d79b4215de1a2f5eeec2fe1ceebf1c1d961a1017ef1a3a74d0921e3d8434f97376fbe78c8a51a9a777a021674bb48bc86ddf850d485b093584cae3cc9fb7417a8aa2d34d1395fbf6d128e9fdde3608ffd032d943bc5ae79", 0xaa, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000006c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 508.390319ms ago: executing program 2 (id=85): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0xf5}]) (fail_nth: 1) 490.247896ms ago: executing program 0 (id=86): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x722) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000340)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) (fail_nth: 1) 419.969684ms ago: executing program 3 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_on}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14b041, 0x2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x108800, &(0x7f0000002540)={[{@default_permissions, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x5, 0x0, 0x4, 0x2}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000400)=0xdd, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) readahead(r1, 0x5, 0x20000000000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002600)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0/file1\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0}, &(0x7f0000002680)=0xc) getresuid(&(0x7f00000026c0)=0x0, &(0x7f0000002700), &(0x7f0000002740)) mount$9p_xen(&(0x7f00000002c0), &(0x7f0000002580)='./file2\x00', &(0x7f00000025c0), 0x10c0802, &(0x7f0000002780)=ANY=[@ANYBLOB="7472616e733d78656e2c756e616d653d6f7665726c6179002c6e6f657874656e642c6163636573733d636c696506002c64666c747569643d", @ANYRESHEX=r3, @ANYBLOB=',access=any,noxattr,mmap,context=staff_u,silent,euid>', @ANYRESDEC=r4, @ANYBLOB=',mask=^MAY_WRITE,fowner=', @ANYRESDEC=r5, @ANYBLOB="2c736d61636b66737472616e736d7574653d757569643d6f66662c6f626a5f757365723d407d245d2c2bd57b2c00"]) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000480)=0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x101400, 0x42dca682725dea7a) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2c020400) msgget$private(0x0, 0x722) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000080)="a73f72cc9f0ba1f848120000005e140602000000000e800000129400"/38, 0x26}, {&(0x7f0000002880)="a68af52045c56d88845a35647a2ccbabdf4ed15a2f3ac829ba16a5d3bb33bbaa2ac1471fc188d575422357939b4c56c63258dee0f4bae8a917f2a05849cba61572e44d83d52b2a9cfda0b192709d0dd164238918a1ff683d4d01115535cbbc507d0e8fad82dc759191bd037b3c11954e12b0fb35ef345949c88195db3d5be0cbba3af1785b26413da0c5c1bfff511eac2f9a0b92e3272a79f9bc4b10260649f0f5f7e4f5e2e1685ea34e83d28f1e1a01c106c11fffcb6639fb", 0xb9}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="43247293cb9a905958542713f8c4438af6ed5b243c70ef616f179fbdb145c16d5dba3609fa39c7dac24b9d0d9b3cc8f8e1b34769c66e3ce6dfe6aaee9d82a9fcf482aa1d29de73d6fa1058bdab156741d2656cb32739fc2186f2c08255791ef2d7d01730b76856f3e8684235aee75ff6f724ff86f5ed40e1ac99f4708bcc7703e8bcef4d9cdc00a3232a7bf552b7e63ddfe59a31198693699f2105b25cbbcafaf60e27c3c68b6866935650ad388da9776568ba08088350227ca215cb13827b73f5309277573f5869869a3601a58545943204c0", 0xd3}], 0x4}, 0x40400) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000500)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x2000, 0x0) 419.780586ms ago: executing program 0 (id=88): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x222200, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/251, 0x0, 0xe000}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000980)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x6, 0x0, 0x17}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x67, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000700)={0x0, r2}) 348.74843ms ago: executing program 2 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000780), 0x0) 347.708189ms ago: executing program 1 (id=90): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb8d4a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000300)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000400)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='7', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 347.513576ms ago: executing program 2 (id=91): setns(0xc9, 0x40000000) r0 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x7ff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000fcdbdf2510000000080004000f000000811975080005000300000058000167bd0002008400000008000500030000000c000700210080003f0000000c0007000600000000000000060004004e210000080009001200000014000300fe8000000040000000000000000000aa0600010002000000e3ecc7a5dd1491a4f7241c0365c59a3cc3271009e9ee9830cb83b810dd95ef162af4afadb1876531116342505e780af3479ccbf280b4abf8684b3528e7c83b7fc0b9"], 0x7c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4008020) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x800, 0x2, 0x6, 0x8000001000000000, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0x381, 0x5, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2ce, 0x0, 0x2, r6, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x27800000000, 0x0, 0x1, r6}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x3, 0x0, 0x2, r6, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 342.107796ms ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x1000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f00000001c0)=0x1f) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r2}, 0xb, 0x1000, 0x5}) write(r0, &(0x7f0000000200)='7', 0x1) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) 249.855422ms ago: executing program 2 (id=93): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mydev\x00', 0xfa) mount(0x0, &(0x7f00000002c0)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/ttyS0\x00', 0x2, 0xc0) ioctl$TIOCSBRK(r1, 0x5427) r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x20, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/144, 0x7c}], 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80383, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000480)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000000)=""/94, 0x5e}], 0x2}, 0x8001}], 0x2, 0x10002, 0x0) 249.46176ms ago: executing program 0 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000400)="04000000000000") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') mknod$loop(&(0x7f0000000440)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002600)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002680)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004780)="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", 0x2000, &(0x7f0000006780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006840)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000068c0)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f0000006900)='lp\x00', 0x3) r7 = dup2(r6, r2) ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f0000006940)={0x0, 0x2, 0x10000, 0x6, 0x80, 0x3}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x103a42, 0x0) fallocate(r8, 0x1, 0x5, 0x6) write(r8, &(0x7f0000000000)="96b34879", 0x1001) 130.444015ms ago: executing program 2 (id=95): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x34) bind$nfc_llcp(r2, &(0x7f0000000480)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x100, 0x50) syz_usb_connect$cdc_ecm(0x2, 0x5b, 0x0, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) dup3(r1, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x800) 50.388957ms ago: executing program 3 (id=96): prlimit64(0x0, 0x7, &(0x7f0000000540)={0x0, 0x100}, 0x0) getrlimit(0x6, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a) 477.752µs ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = getpgrp(0x0) sched_getattr(r0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x400001, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83a0fa, 0xc574450d1af3bda4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x1}, 0x16, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='dax\x00', &(0x7f0000000180)='always\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) ioctl$int_in(r3, 0x40086610, &(0x7f0000000080)=0x40000) 165.614µs ago: executing program 3 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000500000000000b702000014000000b703000000000020c50007001a000000bf0900000000000026090600000003e7040000000600ffb0180100002020642500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200010000008500000084000000b70000000000000295"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 36.099µs ago: executing program 0 (id=99): syz_clone(0x80c2000, &(0x7f0000000a80)="e70ef46daaaabe225882d1c0096cfa4dcddbbcbf7a4283a393646b519d3689f04cd1de1a41195c3edfd5f2b1a33fb075233ac4bf8589ef93d1f266f75d722c1d7e48f62818fb360be2de28b89625ca6b62c88d79b4215de1a2f5eeec2fe1ceebf1c1d961a1017ef1a3a74d0921e3d8434f97376fbe78c8a51a9a777a021674bb48bc86ddf850d485b093584cae3cc9fb7417a8aa2d34d1395fbf6d128e9fdde3608ffd032d943bc5ae79", 0xaa, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000006c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000780), 0x0) 0s ago: executing program 3 (id=101): mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:42317' (ED25519) to the list of known hosts. [ 40.204473][ T43] audit: type=1400 audit(1793449660.809:138): avc: denied { name_bind } for pid=5770 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.235921][ T43] audit: type=1400 audit(1793449660.839:139): avc: denied { execute } for pid=5771 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.236256][ T43] audit: type=1400 audit(1793449660.839:140): avc: denied { execute_no_trans } for pid=5771 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.347181][ T43] audit: type=1400 audit(1793449662.949:141): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.349309][ T43] audit: type=1400 audit(1793449662.949:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.356958][ T5771] cgroup: Unknown subsys name 'net' [ 42.477452][ T5771] cgroup: Unknown subsys name 'cpuset' [ 42.483066][ T5771] cgroup: Unknown subsys name 'rlimit' [ 42.694427][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.430309][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.245396][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 47.245407][ T43] audit: type=1400 audit(1793449667.849:154): avc: denied { execmem } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.451866][ T43] audit: type=1400 audit(1793449668.059:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.452432][ T43] audit: type=1400 audit(1793449668.059:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.453343][ T43] audit: type=1400 audit(1793449668.059:157): avc: denied { open } for pid=5783 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.466769][ T43] audit: type=1400 audit(1793449668.069:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[3852]" dev="sockfs" ino=3852 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.480103][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.480798][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.482802][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.482923][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.483262][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.484033][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.485657][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.485735][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.491030][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.491880][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.495202][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.498847][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.503865][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.505079][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.505435][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.506933][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.508478][ T43] audit: type=1400 audit(1793449668.109:159): avc: denied { read } for pid=5783 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.508651][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.509558][ T43] audit: type=1400 audit(1793449668.109:160): avc: denied { open } for pid=5783 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.512630][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.513258][ T43] audit: type=1400 audit(1793449668.119:161): avc: denied { mounton } for pid=5783 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.517853][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.519457][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.529480][ T43] audit: type=1400 audit(1793449668.129:162): avc: denied { module_request } for pid=5782 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.558982][ T43] audit: type=1400 audit(1793449668.159:163): avc: denied { sys_module } for pid=5789 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.737071][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.738110][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.738851][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.739281][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.767525][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.815213][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.882250][ T5789] infiniband rxe0: set active [ 47.884798][ T5789] infiniband rxe0: added rxe_eth0 [ 47.892819][ T5789] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.892838][ T5789] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.892857][ T5789] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.905390][ T1362] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.921246][ T5789] RDS/IB: rxe0: added [ 47.921554][ T5789] smc: adding ib device rxe0 with port count 1 [ 47.921611][ T5789] smc: ib device rxe0 port 1 has no pnetid [ 47.928607][ T1362] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.946158][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.053250][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.224201][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.224791][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.224888][ T5783] bridge_slave_0: entered allmulticast mode [ 48.226216][ T5783] bridge_slave_0: entered promiscuous mode [ 48.228774][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.249721][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.249799][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.250092][ T5783] bridge_slave_1: entered allmulticast mode [ 48.251532][ T5783] bridge_slave_1: entered promiscuous mode [ 48.263242][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.263289][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.263346][ T5782] bridge_slave_0: entered allmulticast mode [ 48.264088][ T5782] bridge_slave_0: entered promiscuous mode [ 48.289590][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.290109][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.290171][ T5782] bridge_slave_1: entered allmulticast mode [ 48.291210][ T5782] bridge_slave_1: entered promiscuous mode [ 48.314503][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.316671][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.325660][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.332145][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.332249][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.332544][ T5792] bridge_slave_0: entered allmulticast mode [ 48.333760][ T5792] bridge_slave_0: entered promiscuous mode [ 48.337081][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.337179][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.337264][ T5792] bridge_slave_1: entered allmulticast mode [ 48.338503][ T5792] bridge_slave_1: entered promiscuous mode [ 48.342125][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.398009][ T5783] team0: Port device team_slave_0 added [ 48.399676][ T5782] team0: Port device team_slave_0 added [ 48.401743][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.403322][ T5782] team0: Port device team_slave_1 added [ 48.405091][ T5783] team0: Port device team_slave_1 added [ 48.418301][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.459314][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.459330][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.459349][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.460217][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.461353][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.461364][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.461380][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.474109][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.474122][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.474139][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.483335][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.483347][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.483365][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.485244][ T5792] team0: Port device team_slave_0 added [ 48.504589][ T5792] team0: Port device team_slave_1 added [ 48.522610][ T5783] hsr_slave_0: entered promiscuous mode [ 48.523508][ T5783] hsr_slave_1: entered promiscuous mode [ 48.580741][ T5782] hsr_slave_0: entered promiscuous mode [ 48.581527][ T5782] hsr_slave_1: entered promiscuous mode [ 48.582230][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 48.582296][ T5782] Cannot create hsr debugfs directory [ 48.582975][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.582986][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.583002][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.590092][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.590106][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.590133][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.708041][ T5792] hsr_slave_0: entered promiscuous mode [ 48.708544][ T5792] hsr_slave_1: entered promiscuous mode [ 48.709134][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 48.709152][ T5792] Cannot create hsr debugfs directory [ 48.956160][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.959581][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.960292][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.965602][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.966347][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.970161][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.970938][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.977394][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.051712][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.058886][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.059453][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.062509][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.079557][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.084154][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.098286][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.098358][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.098453][ T5789] bridge_slave_0: entered allmulticast mode [ 49.100991][ T5789] bridge_slave_0: entered promiscuous mode [ 49.102857][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.109173][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.109887][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.109961][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.110236][ T5789] bridge_slave_1: entered allmulticast mode [ 49.112445][ T5789] bridge_slave_1: entered promiscuous mode [ 49.145001][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.164546][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.209301][ T5789] team0: Port device team_slave_0 added [ 49.213808][ T5789] team0: Port device team_slave_1 added [ 49.246932][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.246943][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.246955][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.247980][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.247987][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.247998][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.248322][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.252199][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.262547][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.268408][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.269354][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.279387][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.281397][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.287498][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.314832][ T5789] hsr_slave_0: entered promiscuous mode [ 49.315276][ T5789] hsr_slave_1: entered promiscuous mode [ 49.315551][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 49.315562][ T5789] Cannot create hsr debugfs directory [ 49.388227][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.450854][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.462106][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.462233][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.474345][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.487572][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.487660][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.530589][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.534228][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.535992][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.537080][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.539146][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.539685][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.541585][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.542047][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.543953][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.553847][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.553893][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.562007][ T67] Bluetooth: hci2: command tx timeout [ 49.562015][ T5797] Bluetooth: hci1: command tx timeout [ 49.570900][ T5797] Bluetooth: hci3: command tx timeout [ 49.571274][ T67] Bluetooth: hci0: command tx timeout [ 49.577690][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.577777][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.581972][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.607242][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.626990][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.627044][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.643752][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.643799][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.703218][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.717900][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.727508][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.727581][ T532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.741206][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.741252][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.857191][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.904377][ T5783] veth0_vlan: entered promiscuous mode [ 49.908727][ T5783] veth1_vlan: entered promiscuous mode [ 49.927394][ T5783] veth0_macvtap: entered promiscuous mode [ 49.932969][ T5783] veth1_macvtap: entered promiscuous mode [ 49.942625][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.947534][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.951198][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.966354][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.994797][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.995089][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.995118][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.030997][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.031016][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.040852][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.041127][ T5792] veth0_vlan: entered promiscuous mode [ 50.048741][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.051123][ T5792] veth1_vlan: entered promiscuous mode [ 50.066472][ T5782] veth0_vlan: entered promiscuous mode [ 50.066821][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.066832][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.081430][ T5782] veth1_vlan: entered promiscuous mode [ 50.097537][ T5792] veth0_macvtap: entered promiscuous mode [ 50.109523][ T5792] veth1_macvtap: entered promiscuous mode [ 50.119413][ T5789] veth0_vlan: entered promiscuous mode [ 50.123782][ T5782] veth0_macvtap: entered promiscuous mode [ 50.125777][ T5782] veth1_macvtap: entered promiscuous mode [ 50.134497][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.136438][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.138116][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.143872][ T5789] veth1_vlan: entered promiscuous mode [ 50.151739][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.169510][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.192363][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192449][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192520][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192601][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192663][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.228792][ T5789] veth0_macvtap: entered promiscuous mode [ 50.240161][ T5789] veth1_macvtap: entered promiscuous mode [ 50.255672][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.255693][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.280648][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.293106][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.300891][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.300908][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.317737][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.317750][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.345613][ T532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.345632][ T532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.372037][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.372358][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.372544][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.372787][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.414069][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.414082][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.443692][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.443712][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.452085][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.452254][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.452367][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.454575][ T5952] Zero length message leads to an empty skb [ 50.543516][ T5961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.618800][ T5966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 50.673553][ T5970] xt_hashlimit: size too large, truncated to 1048576 [ 50.722511][ T5973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.047444][ T5988] xt_hashlimit: size too large, truncated to 1048576 [ 51.265154][ T5994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 51.265547][ T5995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 51.265785][ T5994] kvm: user requested TSC rate below hardware speed [ 51.490754][ T5875] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.640894][ T67] Bluetooth: hci0: command tx timeout [ 51.640924][ T67] Bluetooth: hci2: command tx timeout [ 51.640965][ T67] Bluetooth: hci1: command tx timeout [ 51.640967][ T5797] Bluetooth: hci3: command tx timeout [ 51.643878][ T5875] usb 8-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 51.651380][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.651403][ T5875] usb 8-1: Product: syz [ 51.651417][ T5875] usb 8-1: Manufacturer: syz [ 51.651429][ T5875] usb 8-1: SerialNumber: syz [ 51.688208][ T1362] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.775433][ T6008] fuse: Unknown parameter 'grou00000000000000000000' [ 51.812030][ T6010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.820914][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.881116][ T6010] md: array md0 already initialised! [ 51.965387][ T6011] md: could not open device unknown-block(0,0). [ 51.965437][ T6011] md: error, md_import_device() returned -6 [ 51.984154][ T5891] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 51.993747][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.993766][ T5891] usb 5-1: Product: syz [ 51.993775][ T5891] usb 5-1: Manufacturer: syz [ 51.993784][ T5891] usb 5-1: SerialNumber: syz [ 52.024445][ T855] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.029639][ T6019] FAULT_INJECTION: forcing a failure. [ 52.029639][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.029683][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 52.029702][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.029713][ T6019] Call Trace: [ 52.029745][ T6019] [ 52.029752][ T6019] dump_stack_lvl+0x100/0x190 [ 52.029786][ T6019] should_fail_ex.cold+0x5/0xa [ 52.029814][ T6019] _copy_to_user+0x32/0xd0 [ 52.029836][ T6019] simple_read_from_buffer+0xcb/0x170 [ 52.029860][ T6019] proc_fail_nth_read+0x1af/0x230 [ 52.029882][ T6019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.029904][ T6019] ? rw_verify_area+0xce/0x6d0 [ 52.029929][ T6019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.029951][ T6019] vfs_read+0x1e4/0xb40 [ 52.029967][ T6019] ? lock_acquire+0x1d1/0x380 [ 52.029991][ T6019] ? __fget_files+0x34/0x3d0 [ 52.030012][ T6019] ? __pfx_vfs_read+0x10/0x10 [ 52.030025][ T6019] ? find_held_lock+0x2b/0x80 [ 52.030044][ T6019] ? __fget_files+0x215/0x3d0 [ 52.030067][ T6019] ? __fget_files+0x21f/0x3d0 [ 52.030094][ T6019] ksys_read+0x12a/0x250 [ 52.030110][ T6019] ? __pfx_ksys_read+0x10/0x10 [ 52.030135][ T6019] do_syscall_64+0x123/0x790 [ 52.030163][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.030181][ T6019] RIP: 0033:0x7f63ed75fd8e [ 52.030196][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.030212][ T6019] RSP: 002b:00007f63ee5c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.030229][ T6019] RAX: ffffffffffffffda RBX: 00007f63ee5c96c0 RCX: 00007f63ed75fd8e [ 52.030240][ T6019] RDX: 000000000000000f RSI: 00007f63ee5c90a0 RDI: 0000000000000003 [ 52.030251][ T6019] RBP: 00007f63ee5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 52.030260][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.030270][ T6019] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 52.030296][ T6019] [ 52.147196][ T6023] FAULT_INJECTION: forcing a failure. [ 52.147196][ T6023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.147223][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 52.147242][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.147253][ T6023] Call Trace: [ 52.147260][ T6023] [ 52.147267][ T6023] dump_stack_lvl+0x100/0x190 [ 52.147314][ T6023] should_fail_ex.cold+0x5/0xa [ 52.147343][ T6023] _copy_from_user+0x2e/0xd0 [ 52.147363][ T6023] copy_msghdr_from_user+0x9f/0x4c0 [ 52.147388][ T6023] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.147418][ T6023] ? lock_acquire+0x1d1/0x380 [ 52.147437][ T6023] ? get_pid_task+0x2a/0x250 [ 52.147453][ T6023] ___sys_sendmsg+0x106/0x1e0 [ 52.147475][ T6023] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.147496][ T6023] ? get_pid_task+0x106/0x250 [ 52.147522][ T6023] ? find_held_lock+0x2b/0x80 [ 52.147556][ T6023] __sys_sendmsg+0x160/0x210 [ 52.147575][ T6023] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.147607][ T6023] do_syscall_64+0x123/0x790 [ 52.147636][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.147655][ T6023] RIP: 0033:0x7f63ed79f559 [ 52.147669][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.147684][ T6023] RSP: 002b:00007f63ee5c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.147701][ T6023] RAX: ffffffffffffffda RBX: 00007f63eda25fa0 RCX: 00007f63ed79f559 [ 52.147712][ T6023] RDX: 0000000000004040 RSI: 0000200000000040 RDI: 0000000000000003 [ 52.147723][ T6023] RBP: 00007f63ee5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 52.147733][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.147744][ T6023] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 52.147767][ T6023] [ 52.225792][ T6000] FAULT_INJECTION: forcing a failure. [ 52.225792][ T6000] name failslab, interval 1, probability 0, space 0, times 1 [ 52.225833][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 52.225852][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.225861][ T6000] Call Trace: [ 52.225869][ T6000] [ 52.225875][ T6000] dump_stack_lvl+0x100/0x190 [ 52.225905][ T6000] should_fail_ex.cold+0x5/0xa [ 52.225928][ T6000] should_failslab+0xc2/0x120 [ 52.225946][ T6000] __kmalloc_noprof+0xfc/0x840 [ 52.225967][ T6000] ? rcu_is_watching+0x13/0xc0 [ 52.225986][ T6000] ? tomoyo_realpath_from_path+0xb6/0x690 [ 52.226015][ T6000] tomoyo_realpath_from_path+0xb6/0x690 [ 52.226044][ T6000] tomoyo_path_number_perm+0x23c/0x580 [ 52.226065][ T6000] ? tomoyo_path_number_perm+0x22e/0x580 [ 52.226088][ T6000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.226118][ T6000] ? __lock_acquire+0x5c0/0x1f40 [ 52.226152][ T6000] ? __fget_files+0x34/0x3d0 [ 52.226173][ T6000] ? find_held_lock+0x2b/0x80 [ 52.226196][ T6000] ? hook_file_ioctl_common+0x140/0x440 [ 52.226219][ T6000] ? __fget_files+0x21f/0x3d0 [ 52.226243][ T6000] security_file_ioctl+0xd3/0x230 [ 52.226268][ T6000] __x64_sys_ioctl+0xb7/0x210 [ 52.226296][ T6000] do_syscall_64+0x123/0x790 [ 52.226324][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.226343][ T6000] RIP: 0033:0x7f9c3199f1eb [ 52.226357][ T6000] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 52.226371][ T6000] RSP: 002b:00007f9c327c0f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.226388][ T6000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9c3199f1eb [ 52.226397][ T6000] RDX: 00007f9c327c1fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 52.226406][ T6000] RBP: 00007f9c327c3090 R08: 0000000000000000 R09: 0000000000000000 [ 52.226416][ T6000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 52.226426][ T6000] R13: 0000000000000000 R14: 00007f9c31c25fa0 R15: 00007ffd319fb828 [ 52.226448][ T6000] [ 52.226528][ T6000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.450230][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.450664][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.736909][ T6031] FAULT_INJECTION: forcing a failure. [ 52.736909][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 52.736936][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.2.26 Not tainted syzkaller #0 PREEMPT(full) [ 52.736954][ T6031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.736979][ T6031] Call Trace: [ 52.736985][ T6031] [ 52.736992][ T6031] dump_stack_lvl+0x100/0x190 [ 52.737021][ T6031] should_fail_ex.cold+0x5/0xa [ 52.737045][ T6031] should_failslab+0xc2/0x120 [ 52.737064][ T6031] __kmalloc_noprof+0xfc/0x840 [ 52.737087][ T6031] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 52.737109][ T6031] kernfs_fop_write_iter+0x26a/0x5f0 [ 52.737130][ T6031] vfs_write+0x6af/0x1050 [ 52.737146][ T6031] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 52.737165][ T6031] ? __pfx_vfs_write+0x10/0x10 [ 52.737185][ T6031] ? find_held_lock+0x2b/0x80 [ 52.737218][ T6031] ksys_write+0x12a/0x250 [ 52.737234][ T6031] ? __pfx_ksys_write+0x10/0x10 [ 52.737256][ T6031] do_syscall_64+0x123/0x790 [ 52.737281][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.737298][ T6031] RIP: 0033:0x7f63ed79f559 [ 52.737312][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.737326][ T6031] RSP: 002b:00007f63ee5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.737342][ T6031] RAX: ffffffffffffffda RBX: 00007f63eda25fa0 RCX: 00007f63ed79f559 [ 52.737353][ T6031] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 52.737363][ T6031] RBP: 00007f63ee5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 52.737372][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.737381][ T6031] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 52.737406][ T6031] [ 52.760726][ T1362] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 52.761323][ T1362] ath9k_htc: Failed to initialize the device [ 52.777767][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.778079][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.786692][ T1362] usb 8-1: ath9k_htc: USB layer deinitialized [ 52.799713][ T1362] usb 8-1: USB disconnect, device number 2 [ 52.852133][ T43] kauditd_printk_skb: 96 callbacks suppressed [ 52.852148][ T43] audit: type=1400 audit(1793449673.459:260): avc: denied { mounton } for pid=6034 comm="syz.1.28" path="/3/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 52.898200][ T43] audit: type=1400 audit(1793449673.499:261): avc: denied { read write } for pid=6034 comm="syz.1.28" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 52.898442][ T43] audit: type=1400 audit(1793449673.499:262): avc: denied { open } for pid=6034 comm="syz.1.28" path="/3/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 52.899109][ T43] audit: type=1400 audit(1793449673.499:263): avc: denied { ioctl } for pid=6034 comm="syz.1.28" path="/3/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0xc0104d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 52.915767][ T43] audit: type=1400 audit(1793449673.519:264): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.056655][ T6041] batman_adv: batadv0: Adding interface: dummy0 [ 53.056671][ T6041] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.056694][ T6041] batman_adv: batadv0: Interface activated: dummy0 [ 53.058368][ T43] audit: type=1400 audit(1793449673.659:265): avc: denied { create } for pid=6039 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.060053][ T43] audit: type=1400 audit(1793449673.659:266): avc: denied { create } for pid=6039 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.060102][ T43] audit: type=1400 audit(1793449673.659:267): avc: denied { write } for pid=6039 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.060689][ T43] audit: type=1400 audit(1793449673.669:268): avc: denied { ioctl } for pid=6039 comm="syz.1.30" path="socket:[7737]" dev="sockfs" ino=7737 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.069459][ T6042] batadv0: mtu less than device minimum [ 53.070619][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.071587][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.072569][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.073560][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.074535][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.075505][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.076525][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.077518][ T6042] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.080928][ T855] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 53.081090][ T855] ath9k_htc: Failed to initialize the device [ 53.098875][ T855] usb 5-1: ath9k_htc: USB layer deinitialized [ 53.104670][ T41] usb 5-1: USB disconnect, device number 2 [ 53.193047][ T43] audit: type=1400 audit(1793449673.799:269): avc: denied { watch watch_reads } for pid=6050 comm="syz.1.31" path="/6" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.193759][ T6051] FAULT_INJECTION: forcing a failure. [ 53.193759][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 53.193780][ T6051] CPU: 2 UID: 0 PID: 6051 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 53.193800][ T6051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.193810][ T6051] Call Trace: [ 53.193816][ T6051] [ 53.193823][ T6051] dump_stack_lvl+0x100/0x190 [ 53.193856][ T6051] should_fail_ex.cold+0x5/0xa [ 53.193883][ T6051] should_failslab+0xc2/0x120 [ 53.193903][ T6051] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.193928][ T6051] ? do_getname+0x35/0x390 [ 53.193957][ T6051] do_getname+0x35/0x390 [ 53.193983][ T6051] __x64_sys_renameat2+0xca/0x140 [ 53.194009][ T6051] do_syscall_64+0x123/0x790 [ 53.194037][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.194055][ T6051] RIP: 0033:0x7f6e1619f559 [ 53.194070][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.194085][ T6051] RSP: 002b:00007f6e170f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 53.194103][ T6051] RAX: ffffffffffffffda RBX: 00007f6e16425fa0 RCX: 00007f6e1619f559 [ 53.194114][ T6051] RDX: ffffffffffffff9c RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 53.194124][ T6051] RBP: 00007f6e170f4090 R08: 0000000000000004 R09: 0000000000000000 [ 53.194135][ T6051] R10: 0000200000001cc0 R11: 0000000000000246 R12: 0000000000000001 [ 53.194145][ T6051] R13: 00007f6e16426038 R14: 00007f6e16425fa0 R15: 00007ffd3b892c98 [ 53.194169][ T6051] [ 53.383225][ T5900] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.386356][ T5900] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.395097][ T6062] xt_hashlimit: size too large, truncated to 1048576 [ 53.509436][ T6070] FAULT_INJECTION: forcing a failure. [ 53.509436][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 53.509460][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.1.37 Not tainted syzkaller #0 PREEMPT(full) [ 53.509521][ T6070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.509531][ T6070] Call Trace: [ 53.509537][ T6070] [ 53.509544][ T6070] dump_stack_lvl+0x100/0x190 [ 53.509576][ T6070] should_fail_ex.cold+0x5/0xa [ 53.509601][ T6070] should_failslab+0xc2/0x120 [ 53.509619][ T6070] __kmalloc_noprof+0xfc/0x840 [ 53.509641][ T6070] ? rcu_is_watching+0x13/0xc0 [ 53.509659][ T6070] ? tomoyo_realpath_from_path+0xb6/0x690 [ 53.509689][ T6070] tomoyo_realpath_from_path+0xb6/0x690 [ 53.509718][ T6070] tomoyo_path_number_perm+0x23c/0x580 [ 53.509738][ T6070] ? tomoyo_path_number_perm+0x22e/0x580 [ 53.509761][ T6070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.509791][ T6070] ? __lock_acquire+0x5c0/0x1f40 [ 53.509824][ T6070] ? __fget_files+0x34/0x3d0 [ 53.509842][ T6070] ? find_held_lock+0x2b/0x80 [ 53.509858][ T6070] ? hook_file_ioctl_common+0x140/0x440 [ 53.509881][ T6070] ? __fget_files+0x21f/0x3d0 [ 53.509903][ T6070] security_file_ioctl+0xd3/0x230 [ 53.509925][ T6070] __x64_sys_ioctl+0xb7/0x210 [ 53.509950][ T6070] do_syscall_64+0x123/0x790 [ 53.509976][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.509994][ T6070] RIP: 0033:0x7f6e1619f559 [ 53.510009][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.510023][ T6070] RSP: 002b:00007f6e170f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.510040][ T6070] RAX: ffffffffffffffda RBX: 00007f6e16425fa0 RCX: 00007f6e1619f559 [ 53.510050][ T6070] RDX: 0000200000000300 RSI: 00000000c0845657 RDI: 0000000000000003 [ 53.510061][ T6070] RBP: 00007f6e170f4090 R08: 0000000000000000 R09: 0000000000000000 [ 53.510070][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.510080][ T6070] R13: 00007f6e16426038 R14: 00007f6e16425fa0 R15: 00007ffd3b892c98 [ 53.510104][ T6070] [ 53.510149][ T6070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.595751][ T6074] syz.1.39 uses obsolete (PF_INET,SOCK_PACKET) [ 53.596314][ T6074] syzkaller1: entered promiscuous mode [ 53.596332][ T6074] syzkaller1: entered allmulticast mode [ 53.642395][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.708948][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.715135][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.719166][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.720606][ T5785] Bluetooth: hci2: command tx timeout [ 53.720627][ T5785] Bluetooth: hci1: command tx timeout [ 53.720684][ T5785] Bluetooth: hci3: command tx timeout [ 53.720702][ T5785] Bluetooth: hci0: command tx timeout [ 53.721150][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.732966][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.734144][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.735101][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.735532][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.735876][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.736307][ T6079] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 53.788844][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 53.883103][ T6088] syzkaller1: entered promiscuous mode [ 53.883123][ T6088] syzkaller1: entered allmulticast mode [ 53.986860][ T6095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.008394][ T6097] batman_adv: batadv0: Adding interface: veth0 [ 54.008405][ T6097] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.008420][ T6097] batman_adv: batadv0: Interface activated: veth0 [ 54.011998][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.012012][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.013583][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.013597][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.023101][ T6097] batman_adv: batadv0: Interface deactivated: veth0 [ 54.023113][ T6097] batman_adv: batadv0: Removing interface: veth0 [ 54.030621][ T6095] md: array md0 already initialised! [ 54.117026][ T6095] md/raid10:md0: not enough operational mirrors. [ 54.125275][ T6095] md: pers->run() failed ... [ 54.151534][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 54.177737][ T6106] FAULT_INJECTION: forcing a failure. [ 54.177737][ T6106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.177763][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 54.177782][ T6106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.177792][ T6106] Call Trace: [ 54.177799][ T6106] [ 54.177806][ T6106] dump_stack_lvl+0x100/0x190 [ 54.177839][ T6106] should_fail_ex.cold+0x5/0xa [ 54.177866][ T6106] _copy_from_user+0x2e/0xd0 [ 54.177886][ T6106] copy_msghdr_from_user+0x9f/0x4c0 [ 54.177911][ T6106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 54.177941][ T6106] ? lock_acquire+0x1d1/0x380 [ 54.177964][ T6106] ? get_pid_task+0x2a/0x250 [ 54.177983][ T6106] ___sys_sendmsg+0x106/0x1e0 [ 54.178007][ T6106] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.178028][ T6106] ? get_pid_task+0x106/0x250 [ 54.178054][ T6106] ? find_held_lock+0x2b/0x80 [ 54.178089][ T6106] __sys_sendmsg+0x160/0x210 [ 54.178107][ T6106] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.178138][ T6106] do_syscall_64+0x123/0x790 [ 54.178168][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.178186][ T6106] RIP: 0033:0x7f9c3199f559 [ 54.178201][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.178216][ T6106] RSP: 002b:00007f9c327c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.178233][ T6106] RAX: ffffffffffffffda RBX: 00007f9c31c25fa0 RCX: 00007f9c3199f559 [ 54.178245][ T6106] RDX: 0000000000004005 RSI: 0000200000001e80 RDI: 0000000000000004 [ 54.178255][ T6106] RBP: 00007f9c327c3090 R08: 0000000000000000 R09: 0000000000000000 [ 54.178265][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.178275][ T6106] R13: 00007f9c31c26038 R14: 00007f9c31c25fa0 R15: 00007ffd319fb828 [ 54.178300][ T6106] [ 54.206769][ T6058] ceph: No mds server is up or the cluster is laggy [ 54.219726][ T6103] FAULT_INJECTION: forcing a failure. [ 54.219726][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.219752][ T6103] CPU: 2 UID: 0 PID: 6103 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT(full) [ 54.219769][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.219779][ T6103] Call Trace: [ 54.219786][ T6103] [ 54.219793][ T6103] dump_stack_lvl+0x100/0x190 [ 54.219828][ T6103] should_fail_ex.cold+0x5/0xa [ 54.219857][ T6103] _copy_to_user+0x32/0xd0 [ 54.219877][ T6103] simple_read_from_buffer+0xcb/0x170 [ 54.219901][ T6103] proc_fail_nth_read+0x1af/0x230 [ 54.219924][ T6103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.219971][ T6103] ? rw_verify_area+0xce/0x6d0 [ 54.219993][ T6103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.220016][ T6103] vfs_read+0x1e4/0xb40 [ 54.220034][ T6103] ? lock_acquire+0x1d1/0x380 [ 54.220057][ T6103] ? __fget_files+0x34/0x3d0 [ 54.220076][ T6103] ? __pfx_vfs_read+0x10/0x10 [ 54.220090][ T6103] ? find_held_lock+0x2b/0x80 [ 54.220109][ T6103] ? __fget_files+0x215/0x3d0 [ 54.220134][ T6103] ? __fget_files+0x21f/0x3d0 [ 54.220157][ T6103] ksys_read+0x12a/0x250 [ 54.220174][ T6103] ? __pfx_ksys_read+0x10/0x10 [ 54.220198][ T6103] do_syscall_64+0x123/0x790 [ 54.220227][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.220244][ T6103] RIP: 0033:0x7f6e1615fd8e [ 54.220259][ T6103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.220274][ T6103] RSP: 002b:00007f6e170f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.220291][ T6103] RAX: ffffffffffffffda RBX: 00007f6e170f46c0 RCX: 00007f6e1615fd8e [ 54.220302][ T6103] RDX: 000000000000000f RSI: 00007f6e170f40a0 RDI: 0000000000000003 [ 54.220312][ T6103] RBP: 00007f6e170f4090 R08: 0000000000000000 R09: 0000000000000000 [ 54.220323][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.220334][ T6103] R13: 00007f6e16426038 R14: 00007f6e16425fa0 R15: 00007ffd3b892c98 [ 54.220360][ T6103] [ 54.336232][ T6120] xt_hashlimit: size too large, truncated to 1048576 [ 54.491084][ T6137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.531722][ T6137] md: array md0 already has disks! [ 54.571048][ T6137] md: could not open device unknown-block(1,1). [ 54.571081][ T6137] md: error, md_import_device() returned -16 [ 54.591246][ T6137] md/raid10:md0: not enough operational mirrors. [ 54.594967][ T6137] md: pers->run() failed ... [ 54.898166][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 55.046171][ T6154] syzkaller1: entered promiscuous mode [ 55.046191][ T6154] syzkaller1: entered allmulticast mode [ 55.048836][ T6157] Bluetooth: MGMT ver 1.23 [ 55.111811][ T6161] xt_hashlimit: size too large, truncated to 1048576 [ 55.182759][ T6169] fuse: Unknown parameter 'group_id00000000000000000000' [ 55.237101][ T6171] xt_hashlimit: size too large, truncated to 1048576 [ 55.263376][ T6174] xt_hashlimit: size too large, truncated to 1048576 [ 55.383766][ T6181] ======================================================= [ 55.383766][ T6181] WARNING: The mand mount option has been deprecated and [ 55.383766][ T6181] and is ignored by this kernel. Remove the mand [ 55.383766][ T6181] option from the mount to silence this warning. [ 55.383766][ T6181] ======================================================= [ 55.386724][ T6181] FAULT_INJECTION: forcing a failure. [ 55.386724][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 55.386750][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 55.386772][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.386783][ T6181] Call Trace: [ 55.386789][ T6181] [ 55.386797][ T6181] dump_stack_lvl+0x100/0x190 [ 55.386836][ T6181] should_fail_ex.cold+0x5/0xa [ 55.386871][ T6181] should_failslab+0xc2/0x120 [ 55.386894][ T6181] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.386920][ T6181] ? cm_alloc_id_priv+0x98/0x500 [ 55.386952][ T6181] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 55.386983][ T6181] cm_alloc_id_priv+0x98/0x500 [ 55.387012][ T6181] ? __pfx_cm_alloc_id_priv+0x10/0x10 [ 55.387046][ T6181] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 55.387077][ T6181] ib_cm_insert_listen+0x25/0x1c0 [ 55.387111][ T6181] rdma_listen+0x508/0xd90 [ 55.387130][ T6181] ? rdma_restrack_add+0x1cc/0x6e0 [ 55.387162][ T6181] ? __pfx_rdma_listen+0x10/0x10 [ 55.387179][ T6181] ? do_raw_spin_unlock+0x145/0x1e0 [ 55.387198][ T6181] ? _raw_spin_unlock+0x28/0x50 [ 55.387228][ T6181] cma_listen_on_dev+0x57f/0x8f0 [ 55.387254][ T6181] rdma_listen+0x96f/0xd90 [ 55.387272][ T6181] ? __pfx_rdma_listen+0x10/0x10 [ 55.387287][ T6181] ? __pfx_ucma_get_ctx+0x10/0x10 [ 55.387323][ T6181] ucma_listen+0x173/0x220 [ 55.387349][ T6181] ? __pfx_ucma_listen+0x10/0x10 [ 55.387378][ T6181] ? __pfx_ucma_listen+0x10/0x10 [ 55.387406][ T6181] ucma_write+0x1f6/0x330 [ 55.387431][ T6181] ? __pfx_ucma_write+0x10/0x10 [ 55.387456][ T6181] ? bpf_lsm_file_permission+0x9/0x10 [ 55.387484][ T6181] ? security_file_permission+0x76/0x210 [ 55.387516][ T6181] ? rw_verify_area+0xce/0x6d0 [ 55.387543][ T6181] vfs_write+0x2aa/0x1050 [ 55.387561][ T6181] ? __pfx_ucma_write+0x10/0x10 [ 55.387580][ T6181] ? lock_acquire+0x1d1/0x380 [ 55.387604][ T6181] ? __fget_files+0x34/0x3d0 [ 55.387628][ T6181] ? __pfx_vfs_write+0x10/0x10 [ 55.387644][ T6181] ? find_held_lock+0x2b/0x80 [ 55.387664][ T6181] ? __fget_files+0x215/0x3d0 [ 55.387695][ T6181] ? __fget_files+0x215/0x3d0 [ 55.387721][ T6181] ? __fget_files+0x21f/0x3d0 [ 55.387750][ T6181] ksys_write+0x1f8/0x250 [ 55.387766][ T6181] ? __pfx_ksys_write+0x10/0x10 [ 55.387791][ T6181] do_syscall_64+0x123/0x790 [ 55.387827][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.387849][ T6181] RIP: 0033:0x7f63ed79f559 [ 55.387864][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.387883][ T6181] RSP: 002b:00007f63ee5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.387903][ T6181] RAX: ffffffffffffffda RBX: 00007f63eda25fa0 RCX: 00007f63ed79f559 [ 55.387923][ T6181] RDX: 00000000fffffcda RSI: 0000200000000400 RDI: 0000000000000004 [ 55.387939][ T6181] RBP: 00007f63ed836b50 R08: 0000000000000000 R09: 0000000000000000 [ 55.387950][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.387961][ T6181] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 55.387988][ T6181] [ 55.388002][ T6181] infiniband rxe0: RDMA CMA: cma_listen_on_dev, error -12 [ 55.452658][ T6183] FAULT_INJECTION: forcing a failure. [ 55.452658][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 55.452684][ T6183] CPU: 3 UID: 0 PID: 6183 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 55.452703][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.452714][ T6183] Call Trace: [ 55.452721][ T6183] [ 55.452728][ T6183] dump_stack_lvl+0x100/0x190 [ 55.452761][ T6183] should_fail_ex.cold+0x5/0xa [ 55.452788][ T6183] should_failslab+0xc2/0x120 [ 55.452806][ T6183] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 55.452834][ T6183] ? proc_alloc_inode+0x25/0x200 [ 55.452862][ T6183] ? __pfx_proc_alloc_inode+0x10/0x10 [ 55.452888][ T6183] proc_alloc_inode+0x25/0x200 [ 55.452912][ T6183] alloc_inode+0x68/0x250 [ 55.452939][ T6183] new_inode+0x22/0x1c0 [ 55.452967][ T6183] proc_pid_make_inode+0x22/0x160 [ 55.452994][ T6183] proc_pident_instantiate+0x85/0x310 [ 55.453021][ T6183] proc_pident_lookup+0x1e3/0x270 [ 55.453048][ T6183] ? __pfx_down_read+0x10/0x10 [ 55.453069][ T6183] __lookup_slow+0x155/0x320 [ 55.453097][ T6183] lookup_slow+0x54/0x80 [ 55.453122][ T6183] link_path_walk+0x1381/0x1cc0 [ 55.453149][ T6183] path_openat+0x1a7/0x23f0 [ 55.453175][ T6183] ? __pfx_path_openat+0x10/0x10 [ 55.453204][ T6183] do_file_open+0x20e/0x430 [ 55.453228][ T6183] ? __pfx_do_file_open+0x10/0x10 [ 55.453258][ T6183] ? __pfx_kfree_link+0x10/0x10 [ 55.453283][ T6183] ? _raw_spin_unlock+0x28/0x50 [ 55.453305][ T6183] ? alloc_fd+0x471/0x7a0 [ 55.453334][ T6183] do_sys_openat2+0x163/0x1d0 [ 55.453357][ T6183] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.453389][ T6183] __x64_sys_openat+0x12d/0x210 [ 55.453413][ T6183] ? __pfx___x64_sys_openat+0x10/0x10 [ 55.453446][ T6183] do_syscall_64+0x123/0x790 [ 55.453503][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.453521][ T6183] RIP: 0033:0x7f63ed75fd8e [ 55.453537][ T6183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.453552][ T6183] RSP: 002b:00007f63ee5c8f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.453571][ T6183] RAX: ffffffffffffffda RBX: 00007f63ee5c96c0 RCX: 00007f63ed75fd8e [ 55.453596][ T6183] RDX: 0000000000000002 RSI: 00007f63ed83644a RDI: ffffffffffffff9c [ 55.453609][ T6183] RBP: 00007f63ed836b50 R08: 0000000000000000 R09: 0000000000000000 [ 55.453619][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.453629][ T6183] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 55.453659][ T6183] [ 55.498556][ T6185] syzkaller1: entered promiscuous mode [ 55.498576][ T6185] syzkaller1: entered allmulticast mode [ 55.591463][ T6189] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.639702][ T6196] process 'syz.1.80' launched './file0' with NULL argv: empty string added [ 55.672702][ T6198] FAULT_INJECTION: forcing a failure. [ 55.672702][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 55.672728][ T6198] CPU: 3 UID: 0 PID: 6198 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 55.672749][ T6198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.672760][ T6198] Call Trace: [ 55.672767][ T6198] [ 55.672774][ T6198] dump_stack_lvl+0x100/0x190 [ 55.672809][ T6198] should_fail_ex.cold+0x5/0xa [ 55.672856][ T6198] should_failslab+0xc2/0x120 [ 55.672879][ T6198] __kmalloc_noprof+0xfc/0x840 [ 55.672908][ T6198] ? tomoyo_encode2+0xfb/0x3c0 [ 55.672942][ T6198] tomoyo_encode2+0xfb/0x3c0 [ 55.672973][ T6198] tomoyo_encode+0x29/0x50 [ 55.672999][ T6198] tomoyo_realpath_from_path+0x18c/0x690 [ 55.673032][ T6198] tomoyo_check_open_permission+0x2af/0x3c0 [ 55.673058][ T6198] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 55.673090][ T6198] ? hook_file_open+0x245/0x8e0 [ 55.673108][ T6198] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.673144][ T6198] ? __pfx_selinux_inode_permission+0x10/0x10 [ 55.673174][ T6198] tomoyo_file_open+0x6b/0x90 [ 55.673195][ T6198] security_file_open+0xb5/0x1e0 [ 55.673223][ T6198] do_dentry_open+0x552/0x1470 [ 55.673247][ T6198] vfs_open_consume+0xcc/0x460 [ 55.673274][ T6198] path_openat+0x1547/0x23f0 [ 55.673300][ T6198] ? __pfx_path_openat+0x10/0x10 [ 55.673329][ T6198] do_file_open+0x20e/0x430 [ 55.673353][ T6198] ? __pfx_do_file_open+0x10/0x10 [ 55.673394][ T6198] ? _raw_spin_unlock+0x28/0x50 [ 55.673418][ T6198] ? alloc_fd+0x471/0x7a0 [ 55.673448][ T6198] do_sys_openat2+0x163/0x1d0 [ 55.673496][ T6198] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.673531][ T6198] __x64_sys_openat+0x12d/0x210 [ 55.673557][ T6198] ? __pfx___x64_sys_openat+0x10/0x10 [ 55.673592][ T6198] do_syscall_64+0x123/0x790 [ 55.673623][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.673648][ T6198] RIP: 0033:0x7f63ed79f559 [ 55.673666][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.673684][ T6198] RSP: 002b:00007f63ee5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.673705][ T6198] RAX: ffffffffffffffda RBX: 00007f63eda25fa0 RCX: 00007f63ed79f559 [ 55.673718][ T6198] RDX: 0000000000000042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 55.673730][ T6198] RBP: 00007f63ed836b50 R08: 0000000000000000 R09: 0000000000000000 [ 55.673742][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.673753][ T6198] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 55.673780][ T6198] [ 55.673845][ T6198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.753929][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 55.810594][ T67] Bluetooth: hci0: command tx timeout [ 55.810636][ T67] Bluetooth: hci1: command tx timeout [ 55.810658][ T67] Bluetooth: hci2: command tx timeout [ 55.817899][ T6204] omfs: Invalid superblock (0) [ 55.871399][ T6206] xt_hashlimit: size too large, truncated to 1048576 [ 55.892929][ T6208] FAULT_INJECTION: forcing a failure. [ 55.892929][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.892955][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(full) [ 55.892974][ T6208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.892983][ T6208] Call Trace: [ 55.892989][ T6208] [ 55.892995][ T6208] dump_stack_lvl+0x100/0x190 [ 55.893026][ T6208] should_fail_ex.cold+0x5/0xa [ 55.893052][ T6208] _copy_from_user+0x2e/0xd0 [ 55.893071][ T6208] io_submit_one+0xbd/0x1fb0 [ 55.893096][ T6208] ? __lock_acquire+0x5c0/0x1f40 [ 55.893118][ T6208] ? irqentry_exit+0x202/0xab0 [ 55.893141][ T6208] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.893164][ T6208] ? __pfx_io_submit_one+0x10/0x10 [ 55.893190][ T6208] ? lock_acquire+0x1d1/0x380 [ 55.893214][ T6208] ? __might_fault+0xc5/0x140 [ 55.893238][ T6208] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 55.893261][ T6208] __x64_sys_io_submit+0x1b1/0x3a0 [ 55.893287][ T6208] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 55.893321][ T6208] do_syscall_64+0x123/0x790 [ 55.893348][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.893363][ T6208] RIP: 0033:0x7f63ed79f559 [ 55.893379][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.893392][ T6208] RSP: 002b:00007f63ee5c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 55.893409][ T6208] RAX: ffffffffffffffda RBX: 00007f63eda25fa0 RCX: 00007f63ed79f559 [ 55.893419][ T6208] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007f63ee5a8000 [ 55.893429][ T6208] RBP: 00007f63ee5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 55.893439][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.893447][ T6208] R13: 00007f63eda26038 R14: 00007f63eda25fa0 R15: 00007ffc466c3f08 [ 55.893493][ T6208] [ 55.909712][ T6211] FAULT_INJECTION: forcing a failure. [ 55.909712][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.909737][ T6211] CPU: 3 UID: 0 PID: 6211 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 55.909756][ T6211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.909765][ T6211] Call Trace: [ 55.909772][ T6211] [ 55.909779][ T6211] dump_stack_lvl+0x100/0x190 [ 55.909812][ T6211] should_fail_ex.cold+0x5/0xa [ 55.909839][ T6211] _copy_to_user+0x32/0xd0 [ 55.909861][ T6211] store_msg+0x44/0x160 [ 55.909889][ T6211] do_msg_fill+0xa5/0xf0 [ 55.909916][ T6211] do_msgrcv+0x1037/0x1760 [ 55.909933][ T6211] ? __pfx_do_msg_fill+0x10/0x10 [ 55.909964][ T6211] ? __pfx_do_msgrcv+0x10/0x10 [ 55.909987][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 55.910010][ T6211] ? do_syscall_64+0x123/0x790 [ 55.910035][ T6211] do_syscall_64+0x123/0x790 [ 55.910062][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.910080][ T6211] RIP: 0033:0x7f9c3199f559 [ 55.910095][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.910110][ T6211] RSP: 002b:00007f9c327c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 55.910128][ T6211] RAX: ffffffffffffffda RBX: 00007f9c31c25fa0 RCX: 00007f9c3199f559 [ 55.910138][ T6211] RDX: 0000000000002000 RSI: 0000200000000340 RDI: 0000000000000000 [ 55.910148][ T6211] RBP: 00007f9c327c3090 R08: 0000000000003000 R09: 0000000000000000 [ 55.910158][ T6211] R10: ffffff7f00000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.910168][ T6211] R13: 00007f9c31c26038 R14: 00007f9c31c25fa0 R15: 00007ffd319fb828 [ 55.910192][ T6211] [ 55.974636][ T6214] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 55.974664][ T6214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.988179][ T6216] syzkaller1: entered promiscuous mode [ 55.988198][ T6216] syzkaller1: entered allmulticast mode [ 56.056909][ T6225] ubi31: attaching mtd0 [ 56.059461][ T6225] ubi31: scanning is finished [ 56.059475][ T6225] ubi31: empty MTD device detected [ 56.130188][ T6230] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 56.158432][ T6232] FAULT_INJECTION: forcing a failure. [ 56.158432][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 56.158460][ T6232] CPU: 3 UID: 0 PID: 6232 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(full) [ 56.158481][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.158491][ T6232] Call Trace: [ 56.158498][ T6232] [ 56.158505][ T6232] dump_stack_lvl+0x100/0x190 [ 56.158538][ T6232] should_fail_ex.cold+0x5/0xa [ 56.158566][ T6232] should_failslab+0xc2/0x120 [ 56.158594][ T6232] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.158626][ T6232] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 56.158660][ T6232] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 56.158687][ T6232] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 56.158715][ T6232] alloc_inode+0x68/0x250 [ 56.158743][ T6232] new_inode+0x22/0x1c0 [ 56.158772][ T6232] hugetlbfs_get_inode+0x339/0x740 [ 56.158802][ T6232] hugetlb_file_setup+0x15b/0x5b0 [ 56.158824][ T6232] ksys_mmap_pgoff+0x242/0x610 [ 56.158854][ T6232] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 56.158880][ T6232] ? fput+0x7c/0x100 [ 56.158901][ T6232] ? __pfx___x64_sys_futex+0x10/0x10 [ 56.158928][ T6232] __x64_sys_mmap+0x125/0x190 [ 56.158955][ T6232] do_syscall_64+0x123/0x790 [ 56.158985][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.159006][ T6232] RIP: 0033:0x7f63ed79f559 [ 56.159022][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.159039][ T6232] RSP: 002b:00007f63ee5a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 56.159057][ T6232] RAX: ffffffffffffffda RBX: 00007f63eda26090 RCX: 00007f63ed79f559 [ 56.159068][ T6232] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 56.159078][ T6232] RBP: 00007f63ed836b50 R08: ffffffffffffffff R09: 0000000000000000 [ 56.159089][ T6232] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 56.159100][ T6232] R13: 00007f63eda26128 R14: 00007f63eda26090 R15: 00007ffc466c3f08 [ 56.159125][ T6232] [ 56.239579][ T6231] FAULT_INJECTION: forcing a failure. [ 56.239579][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 56.239599][ T6231] CPU: 3 UID: 0 PID: 6231 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 56.239614][ T6231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.239620][ T6231] Call Trace: [ 56.239625][ T6231] [ 56.239629][ T6231] dump_stack_lvl+0x100/0x190 [ 56.239650][ T6231] should_fail_ex.cold+0x5/0xa [ 56.239668][ T6231] should_failslab+0xc2/0x120 [ 56.239681][ T6231] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.239697][ T6231] ? xas_split_alloc+0x182/0x530 [ 56.239710][ T6231] xas_split_alloc+0x182/0x530 [ 56.239723][ T6231] __folio_split+0x126b/0x27a0 [ 56.239744][ T6231] ? folio_alloc_swap+0xd7f/0x1ef0 [ 56.239755][ T6231] ? folio_alloc_swap+0xd7f/0x1ef0 [ 56.239767][ T6231] ? __pfx___folio_split+0x10/0x10 [ 56.239785][ T6231] ? folio_alloc_swap+0x9a0/0x1ef0 [ 56.239796][ T6231] shmem_writeout+0x8ef/0x1a50 [ 56.239809][ T6231] ? __pfx_shmem_writeout+0x10/0x10 [ 56.239825][ T6231] ? __pfx_try_to_unmap+0x10/0x10 [ 56.239837][ T6231] ? find_held_lock+0x2b/0x80 [ 56.239849][ T6231] ? inode_to_bdi+0x9e/0x160 [ 56.239862][ T6231] ? folio_clear_dirty_for_io+0x178/0x970 [ 56.239875][ T6231] shrink_folio_list+0x3a43/0x59c0 [ 56.239895][ T6231] ? __pfx_shrink_folio_list+0x10/0x10 [ 56.239909][ T6231] ? rcu_is_watching+0x13/0xc0 [ 56.239922][ T6231] ? __kasan_check_byte+0x13/0x50 [ 56.239933][ T6231] ? is_bpf_text_address+0x8a/0x1a0 [ 56.239946][ T6231] ? is_bpf_text_address+0x8a/0x1a0 [ 56.239959][ T6231] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 56.239973][ T6231] ? is_bpf_text_address+0x94/0x1a0 [ 56.239985][ T6231] ? kernel_text_address+0x8d/0x100 [ 56.239997][ T6231] ? __kernel_text_address+0xd/0x30 [ 56.240020][ T6231] ? check_noncircular+0x97/0x160 [ 56.240035][ T6231] reclaim_folio_list+0xe9/0x5e0 [ 56.240050][ T6231] ? check_prev_add+0x354/0xe60 [ 56.240064][ T6231] ? __pfx_reclaim_folio_list+0x10/0x10 [ 56.240084][ T6231] ? lru_gen_update_size+0x3ea/0x12f0 [ 56.240107][ T6231] ? lru_gen_del_folio+0x3ea/0x720 [ 56.240122][ T6231] reclaim_pages+0x428/0x5e0 [ 56.240141][ T6231] ? __pfx_reclaim_pages+0x10/0x10 [ 56.240155][ T6231] ? madvise_cold_or_pageout_pte_range+0x216a/0x2600 [ 56.240174][ T6231] madvise_cold_or_pageout_pte_range+0x171c/0x2600 [ 56.240194][ T6231] ? __update_page_owner_free_handle+0x43/0x400 [ 56.240217][ T6231] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 56.240237][ T6231] ? lock_acquire+0x1d1/0x380 [ 56.240259][ T6231] ? free_unref_folios+0x76f/0x17e0 [ 56.240282][ T6231] ? find_held_lock+0x2b/0x80 [ 56.240294][ T6231] ? free_unref_folios+0x83c/0x17e0 [ 56.240306][ T6231] ? free_unref_folios+0x83c/0x17e0 [ 56.240333][ T6231] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 56.240349][ T6231] walk_pgd_range+0xbef/0x1e00 [ 56.240375][ T6231] ? __pfx_walk_pgd_range+0x10/0x10 [ 56.240390][ T6231] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 56.240409][ T6231] __walk_page_range+0x171/0x850 [ 56.240431][ T6231] walk_page_range_vma_unsafe+0x209/0x8f0 [ 56.240447][ T6231] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 56.240465][ T6231] ? find_held_lock+0x2b/0x80 [ 56.240476][ T6231] ? mlock_drain_local+0x254/0x4e0 [ 56.240488][ T6231] ? mlock_drain_local+0x254/0x4e0 [ 56.240502][ T6231] walk_page_range_vma+0x63/0x90 [ 56.240517][ T6231] madvise_pageout+0x29e/0x5b0 [ 56.240529][ T6231] ? __pfx_madvise_pageout+0x10/0x10 [ 56.240563][ T6231] madvise_vma_behavior+0x41f/0x2170 [ 56.240579][ T6231] ? __pfx_mas_prev+0x10/0x10 [ 56.240592][ T6231] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 56.240608][ T6231] ? find_vma_prev+0xd8/0x150 [ 56.240623][ T6231] ? __pfx_find_vma_prev+0x10/0x10 [ 56.240637][ T6231] ? lock_acquire+0x1d1/0x380 [ 56.240660][ T6231] madvise_walk_vmas+0x30e/0xf00 [ 56.240675][ T6231] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 56.240688][ T6231] ? __pfx_futex_wake_mark+0x10/0x10 [ 56.240706][ T6231] ? lock_acquire+0x1d1/0x380 [ 56.240722][ T6231] madvise_do_behavior+0x1ea/0x510 [ 56.240736][ T6231] ? __pfx_madvise_do_behavior+0x10/0x10 [ 56.240748][ T6231] ? down_read+0x136/0x4c0 [ 56.240765][ T6231] do_madvise+0x238/0x290 [ 56.240776][ T6231] ? __pfx_do_madvise+0x10/0x10 [ 56.240787][ T6231] ? do_futex+0x190/0x440 [ 56.240801][ T6231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.240829][ T6231] __x64_sys_madvise+0xa9/0x110 [ 56.240840][ T6231] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.240855][ T6231] do_syscall_64+0x123/0x790 [ 56.240872][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.240883][ T6231] RIP: 0033:0x7f6e1619f559 [ 56.240892][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.240902][ T6231] RSP: 002b:00007f6e170d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 56.240913][ T6231] RAX: ffffffffffffffda RBX: 00007f6e16426090 RCX: 00007f6e1619f559 [ 56.240919][ T6231] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 56.240925][ T6231] RBP: 00007f6e16236b50 R08: 0000000000000000 R09: 0000000000000000 [ 56.240932][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.240938][ T6231] R13: 00007f6e16426128 R14: 00007f6e16426090 R15: 00007ffd3b892c98 [ 56.240953][ T6231] [ 56.264939][ T6225] FAULT_INJECTION: forcing a failure. [ 56.264939][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 56.264958][ T6225] CPU: 3 UID: 0 PID: 6225 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(full) [ 56.264971][ T6225] Hardware name: QEMU Standard ** replaying previous printk message ** [ 56.264971][ T6225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.264978][ T6225] Call Trace: [ 56.264983][ T6225] [ 56.264987][ T6225] dump_stack_lvl+0x100/0x190 [ 56.265008][ T6225] should_fail_ex.cold+0x5/0xa [ 56.265025][ T6225] should_failslab+0xc2/0x120 [ 56.265037][ T6225] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.265052][ T6225] ? __asan_memcpy+0x3c/0x60 [ 56.265066][ T6225] ? __kernfs_new_node+0xd2/0xa10 [ 56.265085][ T6225] __kernfs_new_node+0xd2/0xa10 [ 56.265108][ T6225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.265127][ T6225] ? __pfx___kernfs_new_node+0x10/0x10 [ 56.265145][ T6225] ? lock_acquire+0x1d1/0x380 [ 56.265177][ T6225] ? kernfs_root+0x23/0x2a0 [ 56.265194][ T6225] ? find_held_lock+0x2b/0x80 [ 56.265206][ T6225] ? kernfs_root+0xee/0x2a0 [ 56.265219][ T6225] ? kernfs_root+0xee/0x2a0 [ 56.265238][ T6225] kernfs_create_dir_ns+0xa4/0x2b0 [ 56.265251][ T6225] sysfs_create_dir_ns+0x13a/0x2b0 [ 56.265267][ T6225] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.265281][ T6225] ? find_held_lock+0x2b/0x80 [ 56.265292][ T6225] ? kobject_add_internal+0x25f/0x930 [ 56.265305][ T6225] ? kobject_add_internal+0x25f/0x930 [ 56.265320][ T6225] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.265331][ T6225] kobject_add_internal+0x2c8/0x930 [ 56.265346][ T6225] kobject_add+0x16a/0x1e0 [ 56.265358][ T6225] ? __pfx_kobject_add+0x10/0x10 [ 56.265370][ T6225] ? class_to_subsys+0x10f/0x150 [ 56.265386][ T6225] ? kobject_put+0xb9/0x640 [ 56.265396][ T6225] ? _raw_spin_unlock+0x28/0x50 [ 56.265413][ T6225] device_add+0x294/0x1970 [ 56.265427][ T6225] ? __pfx_device_add+0x10/0x10 [ 56.265442][ T6225] ? kobject_get+0xbb/0x150 [ 56.265483][ T6225] cdev_device_add+0x12b/0x270 [ 56.265503][ T6225] ubi_attach_mtd_dev+0x1696/0x3420 [ 56.265528][ T6225] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 56.265543][ T6225] ? __pfx_get_mtd_device+0x10/0x10 [ 56.265559][ T6225] ctrl_cdev_ioctl+0x375/0x410 [ 56.265574][ T6225] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 56.265591][ T6225] ? selinux_file_ioctl+0x1e0/0x290 [ 56.265607][ T6225] ? selinux_file_ioctl+0x1e7/0x290 [ 56.265622][ T6225] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 56.265639][ T6225] __x64_sys_ioctl+0x18e/0x210 [ 56.265656][ T6225] do_syscall_64+0x123/0x790 [ 56.265674][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.265685][ T6225] RIP: 0033:0x7f3f2b79f559 [ 56.265695][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.265704][ T6225] RSP: 002b:00007f3f299f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.265715][ T6225] RAX: ffffffffffffffda RBX: 00007f3f2ba25fa0 RCX: 00007f3f2b79f559 [ 56.265721][ T6225] RDX: 00002000000001c0 RSI: 0000000040186f40 RDI: 0000000000000004 [ 56.265727][ T6225] RBP: 00007f3f2b836b50 R08: 0000000000000000 R09: 0000000000000000 [ 56.265733][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.265739][ T6225] R13: 00007f3f2ba26038 R14: 00007f3f2ba25fa0 R15: 00007ffd80924068 [ 56.265754][ T6225] [ 56.265785][ T6225] kobject: kobject_add_internal failed for ubi31 (error: -12 parent: mtd0) [ 56.265827][ T6225] ubi31 error: ubi_attach_mtd_dev: cannot initialize UBI ubi31, error -12 [ 56.454077][ T6247] [ 56.467957][ T6249] device-mapper: table: 248:0: raid: Bad value for 'raid10_copies' (-EINVAL) [ 56.467971][ T6249] device-mapper: ioctl: error adding target to table [ 56.583364][ T6247] ====================================================== [ 56.586318][ T6247] WARNING: possible circular locking dependency detected [ 56.589124][ T6247] syzkaller #0 Not tainted [ 56.590865][ T6247] ------------------------------------------------------ [ 56.593369][ T6247] syz.3.101/6247 is trying to acquire lock: [ 56.595488][ T6247] ffffffff91a50980 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10c0 [ 56.598329][ T6247] [ 56.598329][ T6247] but task is already holding lock: [ 56.601289][ T6247] ffffffff90be3120 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 56.604922][ T6247] [ 56.604922][ T6247] which lock already depends on the new lock. [ 56.604922][ T6247] [ 56.609046][ T6247] [ 56.609046][ T6247] the existing dependency chain (in reverse order) is: [ 56.612630][ T6247] [ 56.612630][ T6247] -> #2 (major_names_lock){+.+.}-{4:4}: [ 56.615858][ T6247] lock_acquire+0x1d1/0x380 [ 56.617958][ T6247] __mutex_lock+0x19f/0x1c10 [ 56.620069][ T6247] blk_probe_dev+0x28/0x1e0 [ 56.622106][ T6247] blk_request_module+0x16/0xc0 [ 56.624265][ T6247] blkdev_get_no_open+0x9b/0xf0 [ 56.626486][ T6247] bdev_file_open_by_dev+0x70/0x210 [ 56.628808][ T6247] md_import_device+0x120/0x360 [ 56.631075][ T6247] md_add_new_disk+0xdbf/0x1820 [ 56.633309][ T6247] md_ioctl+0x2c1d/0x3700 [ 56.635284][ T6247] blkdev_ioctl+0x5ad/0x6f0 [ 56.637342][ T6247] __x64_sys_ioctl+0x18e/0x210 [ 56.639389][ T6247] do_syscall_64+0x123/0x790 [ 56.641466][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.644075][ T6247] [ 56.644075][ T6247] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 56.647342][ T6247] lock_acquire+0x1d1/0x380 [ 56.649370][ T6247] __mutex_lock+0x19f/0x1c10 [ 56.651321][ T6247] md_alloc+0x3d0/0x10c0 [ 56.653210][ T6247] md_alloc_and_put+0x16/0xb0 [ 56.655262][ T6247] add_named_array+0x27d/0x3a0 [ 56.657303][ T6247] param_attr_store+0x199/0x300 [ 56.659411][ T6247] module_attr_store+0x58/0x80 [ 56.661380][ T6247] sysfs_kf_write+0xf2/0x150 [ 56.663378][ T6247] kernfs_fop_write_iter+0x3e0/0x5f0 [ 56.665547][ T6247] vfs_write+0x6af/0x1050 [ 56.667227][ T6247] ksys_write+0x12a/0x250 [ 56.669115][ T6247] do_syscall_64+0x123/0x790 [ 56.671139][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.673703][ T6247] [ 56.673703][ T6247] -> #0 (disks_mutex){+.+.}-{4:4}: [ 56.676611][ T6247] check_prev_add+0xeb/0xe60 [ 56.678660][ T6247] __lock_acquire+0x1528/0x1f40 [ 56.680740][ T6247] lock_acquire+0x1d1/0x380 [ 56.682788][ T6247] __mutex_lock+0x19f/0x1c10 [ 56.684816][ T6247] md_alloc+0x3e/0x10c0 [ 56.686769][ T6247] md_probe+0x73/0xf0 [ 56.688644][ T6247] blk_probe_dev+0x149/0x1e0 [ 56.690742][ T6247] blk_request_module+0x16/0xc0 [ 56.692855][ T6247] blkdev_get_no_open+0x9b/0xf0 [ 56.695006][ T6247] blkdev_open+0x141/0x4f0 [ 56.696979][ T6247] do_dentry_open+0x674/0x1470 [ 56.699073][ T6247] vfs_open_consume+0xcc/0x460 [ 56.701297][ T6247] path_openat+0x1547/0x23f0 [ 56.703365][ T6247] do_file_open+0x20e/0x430 [ 56.705334][ T6247] do_sys_openat2+0x163/0x1d0 [ 56.707355][ T6247] __x64_sys_openat+0x12d/0x210 [ 56.709587][ T6247] do_syscall_64+0x123/0x790 [ 56.711681][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.714271][ T6247] [ 56.714271][ T6247] other info that might help us debug this: [ 56.714271][ T6247] [ 56.718373][ T6247] Chain exists of: [ 56.718373][ T6247] disks_mutex --> &mddev->reconfig_mutex --> major_names_lock [ 56.718373][ T6247] [ 56.723330][ T6247] Possible unsafe locking scenario: [ 56.723330][ T6247] [ 56.726233][ T6247] CPU0 CPU1 [ 56.728367][ T6247] ---- ---- [ 56.730514][ T6247] lock(major_names_lock); [ 56.732195][ T6247] lock(&mddev->reconfig_mutex); [ 56.735184][ T6247] lock(major_names_lock); [ 56.737927][ T6247] lock(disks_mutex); [ 56.739439][ T6247] [ 56.739439][ T6247] *** DEADLOCK *** [ 56.739439][ T6247] [ 56.742562][ T6247] locks held by syz.3.101/6247: 1, last CPU#2: [ 56.744997][ T6247] #0: ffffffff90be3120 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 56.748782][ T6247] [ 56.748782][ T6247] stack backtrace: [ 56.751140][ T6247] CPU: 2 UID: 0 PID: 6247 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(full) [ 56.754839][ T6247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.758718][ T6247] Call Trace: [ 56.760031][ T6247] [ 56.761216][ T6247] dump_stack_lvl+0x100/0x190 [ 56.763176][ T6247] print_circular_bug.cold+0x178/0x1be [ 56.765386][ T6247] check_noncircular+0x146/0x160 [ 56.767362][ T6247] check_prev_add+0xeb/0xe60 [ 56.769206][ T6247] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.771238][ T6247] __lock_acquire+0x1528/0x1f40 [ 56.773182][ T6247] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.775431][ T6247] lock_acquire+0x1d1/0x380 [ 56.777244][ T6247] ? md_alloc+0x3e/0x10c0 [ 56.778951][ T6247] ? __pfx___might_resched+0x10/0x10 [ 56.781034][ T6247] __mutex_lock+0x19f/0x1c10 [ 56.782843][ T6247] ? md_alloc+0x3e/0x10c0 [ 56.784658][ T6247] ? md_alloc+0x3e/0x10c0 [ 56.786427][ T6247] ? __pfx___mutex_lock+0x10/0x10 [ 56.788398][ T6247] ? __pfx___flush_workqueue+0x10/0x10 [ 56.790578][ T6247] ? lock_acquire+0x1d1/0x380 [ 56.792451][ T6247] ? find_inode_fast+0xa5/0xa30 [ 56.794421][ T6247] ? find_inode_fast+0x1fa/0xa30 [ 56.796374][ T6247] ? md_alloc+0x3e/0x10c0 [ 56.798097][ T6247] md_alloc+0x3e/0x10c0 [ 56.799808][ T6247] md_probe+0x73/0xf0 [ 56.801379][ T6247] ? __pfx_md_probe+0x10/0x10 [ 56.803232][ T6247] blk_probe_dev+0x149/0x1e0 [ 56.805142][ T6247] blk_request_module+0x16/0xc0 [ 56.807157][ T6247] blkdev_get_no_open+0x9b/0xf0 [ 56.809165][ T6247] blkdev_open+0x141/0x4f0 [ 56.811012][ T6247] do_dentry_open+0x674/0x1470 [ 56.812960][ T6247] ? __pfx_blkdev_open+0x10/0x10 [ 56.814974][ T6247] vfs_open_consume+0xcc/0x460 [ 56.816926][ T6247] path_openat+0x1547/0x23f0 [ 56.818757][ T6247] ? __pfx_path_openat+0x10/0x10 [ 56.820727][ T6247] do_file_open+0x20e/0x430 [ 56.822575][ T6247] ? __pfx_do_file_open+0x10/0x10 [ 56.824530][ T6247] ? _raw_spin_unlock+0x28/0x50 [ 56.826488][ T6247] ? alloc_fd+0x471/0x7a0 [ 56.828155][ T6247] do_sys_openat2+0x163/0x1d0 [ 56.828840][ T6252] syzkaller1: entered promiscuous mode [ 56.828857][ T6252] syzkaller1: entered allmulticast mode [ 56.834544][ T6247] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.836606][ T6247] __x64_sys_openat+0x12d/0x210 [ 56.838432][ T6247] ? __pfx___x64_sys_openat+0x10/0x10 [ 56.840552][ T6247] do_syscall_64+0x123/0x790 [ 56.842381][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.844472][ T6247] RIP: 0033:0x7f3f2b79f559 [ 56.846322][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.853711][ T6247] RSP: 002b:00007f3f299f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.856759][ T6247] RAX: ffffffffffffffda RBX: 00007f3f2ba25fa0 RCX: 00007f3f2b79f559 [ 56.859579][ T6247] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 56.862264][ T6247] RBP: 00007f3f2b836b50 R08: 0000000000000000 R09: 0000000000000000 [ 56.865003][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.868060][ T6247] R13: 00007f3f2ba26038 R14: 00007f3f2ba25fa0 R15: 00007ffd80924068 [ 56.871022][ T6247] [ 56.881543][ T6247] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.881559][ T6247] block device autoloading is deprecated and will be removed. [ 58.440520][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 58.440592][ T5785] Bluetooth: hci3: Injecting HCI hardware error event [ 58.440659][ T67] Bluetooth: hci3: hardware error 0x00 [ 58.442431][ T5195] udevd[5195]: could not touch /run/udev/queue: No such file or directory [ 58.442553][ T5195] udevd[5195]: could not touch /run/udev/queue: No such file or directory [ 58.876560][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.520459][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110