last executing test programs: 11.999878915s ago: executing program 3 (id=2543): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000540)="dffb642902ff6159dc62c61d50269bf8a9b1ee2b1b0f22eaa8208342983d9dd3730c0257086ac0729485d030080400000000000000906fbb90abbb8fb607985332c3ff5e06a476d1daeda087451ec490", 0x50, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x11, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0xffffffff, 0x2}, 0x10}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x2001e}], 0x1, 0x5, 0xa, 0x14) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) 9.969986499s ago: executing program 3 (id=2547): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$inet(0x2, 0x2, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000100)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001010546"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$can_bcm(0x1d, 0x2, 0x2) 8.010017663s ago: executing program 0 (id=2551): r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r1, 0x0, 0x20024090) 7.916594544s ago: executing program 0 (id=2552): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x6, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, &(0x7f0000000200)=0x421) 7.77850141s ago: executing program 2 (id=2561): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616d733d756e69548633d42b4ae70d000000a635d0ed420ab9782c00"]) close(0x3) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x9, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0f005e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x10, 0x0, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20024041) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000380)=""/203, 0x132c000, 0x0, 0x5, 0x3}, 0x1c) r8 = syz_io_uring_setup(0xf82, &(0x7f0000000080)={0x0, 0x80000002, 0x40, 0xffffffff, 0x380, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) r12 = io_uring_setup(0xf81, &(0x7f0000000740)={0x0, 0x91d0, 0x8, 0x800803, 0x326}) r13 = io_uring_setup(0x1372, &(0x7f0000000280)={0x0, 0x60bf, 0x400, 0x1, 0x317, 0x0, r12}) io_uring_register$IORING_REGISTER_BUFFERS(r13, 0x0, &(0x7f0000000300), 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/121, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r14 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r14, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000001780)=0x4) 6.890326161s ago: executing program 0 (id=2554): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpgid(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000080000000000000000000000000000000007407b26873b18b5a9b7051cdd64b4d30cbb747f89eed4c96a7856b19fcb8053b7763a0836803403e034756db6f65cc895902217a22ca9ffc637313fd0a42d9f222ef3f95d073fa1c", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0200000001000300e900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000b0000000000000000181100006f0e9f8bfeec0243c0de223f42e57d4a514c32db7af11b7409fc467c4961c9b8681b4579b2e747ba20f6da6980b6d5328da537e25193f5b68df7192cec170cb809b3ac4e08eb7e0657d52d546132b0f37812bcae7b04692d52c0d178829dc795c39bdd2214d582", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009598540000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x3) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000020000900020073797a3100000000300000000c0a010400000000000000000a0000000900010073793a31000000000900020073797a310000000004000380140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) listen(r6, 0x0) listen(r6, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x200}) 5.729852569s ago: executing program 3 (id=2557): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) unshare(0x24020400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PTP_SYS_OFFSET(r1, 0x40043d14, &(0x7f00000004c0)={0x11}) fsetxattr$security_ima(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 5.720122424s ago: executing program 0 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000200000001000004ffffffff0000000003000000000000000000000000000002030000007d0000000000ce43650009020000"], 0x0, 0x4a}, 0x28) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setreuid(0x0, 0xee00) 4.748566306s ago: executing program 0 (id=2558): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e2", 0x1}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$inet6_tcp(0xa, 0x1, 0x0) 4.338176879s ago: executing program 1 (id=2562): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0xfffa}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.329134556s ago: executing program 2 (id=2555): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000540)="dffb642902ff6159dc62c61d50269bf8a9b1ee2b1b0f22eaa8208342983d9dd3730c0257086ac0729485d030080400000000000000906fbb90abbb8fb607985332c3ff5e06a476d1daeda087451ec490", 0x50, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x11, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0xffffffff, 0x2}, 0x10}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x2001e}], 0x1, 0x5, 0xa, 0x14) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) 4.238432766s ago: executing program 1 (id=2563): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f00000001c0)=0x1, 0x8, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) r4 = add_key$user(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000700)="dab345c29404a4d0703bd4c73ad727d7ab0d00003eea80bd14db91b684ffd89f8c557376177af035669e7bb78f9cafa9e429707dd8a416382798eb9a58f13e23eb319fd1cf93448f269a68cde2930213bf1dcda3ac281548550549f118d2072d91ef6515c0db1753", 0x68, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r4}, &(0x7f0000000180)=""/23, 0x17, &(0x7f0000000000)={&(0x7f0000000340)={'michael_mic-generic\x00'}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xc085, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030313030303057a3943865725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bind$can_j1939(r1, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) keyctl$update(0x2, r4, &(0x7f0000000040)="3a77ca2f441f0166a88d84e4f8716573a5372153d986d6a9e3b04844134d40726f74fe922fc8c656072b789d9eaf", 0x2e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a1ab28bd70006f0000003200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) kexec_load(0x8, 0x0, 0x0, 0x160000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x14000080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004040) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="088825b241dd867e7126c80b5d37390f9aa56e81bb4d12c3260f97a55542b538f5b0b17fbbca35bf5d72e543559f5c96cfb7aa747193a130c4e813fc19c8ef08101f3ed6310cf2777bb929c5674e35807ba5e60bea2143811b0e8ba20cb7738b31648ae0ca536906d0871806c19998d22ae4c57a1397b652f8faf2c7ebd443a3892101a4d041"], 0x34}}, 0x20000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}], 0x1) 3.950436741s ago: executing program 3 (id=2564): syz_usb_connect$midi(0x6, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3f, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x5}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000800569e5cafa981359bb8182a51ee5f3dd7412db8f8d042a8114662b5b8a8c2fc4e6ff66912443efc97f56470cb3b0e00b76cbdabc6120a1e066ae8eab623c7fc088e54603cad0663bd408767dccf237da06ea41a6124e8858a5e09bb00690abca40efb934c99bd"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0xe, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) 3.195142781s ago: executing program 2 (id=2566): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x48482) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) syz_io_uring_setup(0x7720, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000000)) preadv2(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x2, 0x7, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRES64=r1], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000484432ec86e20314010000000000000000000900020073797a32000000000800410072786500140033006970766c616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r8) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xf2) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$netlink(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="90000078bb84f52afdc812ce9976002a0000082735746c90fac755"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xffffffff}, 0x8) 3.061083949s ago: executing program 1 (id=2568): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpgid(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000080000000000000000000000000000000007407b26873b18b5a9b7051cdd64b4d30cbb747f89eed4c96a7856b19fcb8053b7763a0836803403e034756db6f65cc895902217a22ca9ffc637313fd0a42d9f222ef3f95d073fa1c", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0200000001000300e900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1.679856524s ago: executing program 1 (id=2569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000200000001000004ffffffff0000000003000000000000000000000000000002030000007d0000000000ce43650009020000"], 0x0, 0x4a}, 0x28) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setreuid(0x0, 0xee00) 1.175127099s ago: executing program 2 (id=2570): r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 1.059747555s ago: executing program 2 (id=2571): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$inet(0x2, 0x2, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000100)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001010546"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$can_bcm(0x1d, 0x2, 0x2) 749.803384ms ago: executing program 1 (id=2572): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0xfffa}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 723.06243ms ago: executing program 3 (id=2573): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616d733d756e69548633d42b4ae70d000000a635d0ed420ab9782c00"]) close(0x3) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x9, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180100002000010003000000fbdbdf25050117800c00030008ac0f0000000000140001000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c0800eb00", @ANYRES32=0x0, @ANYBLOB="0f005e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x10, 0x0, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20024041) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000380)=""/203, 0x132c000, 0x0, 0x5, 0x3}, 0x1c) r8 = syz_io_uring_setup(0xf82, &(0x7f0000000080)={0x0, 0x80000002, 0x40, 0xffffffff, 0x380, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) r12 = io_uring_setup(0xf81, &(0x7f0000000740)={0x0, 0x91d0, 0x8, 0x800803, 0x326}) r13 = io_uring_setup(0x1372, &(0x7f0000000280)={0x0, 0x60bf, 0x400, 0x1, 0x317, 0x0, r12}) io_uring_register$IORING_REGISTER_BUFFERS(r13, 0x0, &(0x7f0000000300), 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/121, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r14 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r14, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000001780)=0x4) 599.912633ms ago: executing program 1 (id=2574): syz_open_dev$dri(0x0, 0xe328, 0x28000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xffffe000) syz_clone3(&(0x7f0000001880)={0x146820100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000481000/0x3000)=nil, 0x3000, 0x14) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r6 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", '\x00', "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x11fae49f1d410a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 23.532993ms ago: executing program 0 (id=2567): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x52140) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000300)=""/4096) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x5, 0xfffffffe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x12b202) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001300)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1f, 0x1c, "339f020bbe82b3e80000004cf4fc4e0000000d0eb9c1b4e9b1c4369d037402aac594b1b3d741dd1724560d38ef2ac156b678d7069389580100", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0xfffffffffffffffc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000001c0)={0xffffffff, 0x10000, {}, {0xffffffffffffffff}, 0x4, 0x24acf55b}) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x28c}, {&(0x7f0000005ec0)=ANY=[], 0x10}, {&(0x7f0000005f40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="493228af83758387732fee17dc49e9dfe1ad8f1943347680e11d9fe9bb8487ccc3c2de33aae83afd2ef3afee4437a23e5ee6f529f336a796505db17393b841e6509643406b63e9616a"], 0x3260}, {&(0x7f0000001700)=ANY=[@ANYBLOB="d00300004000000127bd7000ffdbdf2500050000", @ANYRES32=r7, @ANYBLOB="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", @ANYBLOB="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"], 0x3d0}, {&(0x7f0000001b00)=ANY=[@ANYBLOB="4c0000003600000225bd7000ffdbdf2561afcd59b089b76e1a950e03cfae2c7ebbb9c4e19a36"], 0x4c}, {&(0x7f0000002c40)=ANY=[@ANYBLOB="600100003900000127bd7000ffdbdf25708ea48e204c35561c0ea50400220051b689da57d30ac1dc639f4ec18a0878595744458cafeb82ed5ca7831f03d6672674c5e035455f2bc821492e26e05b008a00d992a8c768f538a5fccacb1cb78f4979b1e1344c4605d8b8ad770677ab27e7af0143e4db", @ANYRES32=r5, @ANYBLOB="08006e00ac14142408005100aeb400000c00348004001b000400f08014002f0000000000000000000000000000000001ec8a5063e3e87371349ae8bc87bca56506f1ea3f8d132cd018004672ca9aba9a6c92f8f520781f368066ac1ec6dbe23bcce1f6c4a1988376f02dd22cd5fad15227887a1222e9facf10047eac"], 0x160}], 0x6}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12.730082ms ago: executing program 2 (id=2582): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e2", 0x1}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=2583): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e2", 0x1}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): FLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 751.249705][T15402] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 751.249712][T15402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.249719][T15402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.249725][T15402] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 751.249732][T15402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.249746][T15402] [ 751.415477][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 751.420035][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 751.422632][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 751.425065][ T54] usb 6-1: USB disconnect, device number 12 [ 751.427063][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 751.427077][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 751.436307][ T54] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 751.594487][T15419] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 751.596966][T15419] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 751.600745][T15419] FAULT_INJECTION: forcing a failure. [ 751.600745][T15419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.609466][T15419] CPU: 1 UID: 0 PID: 15419 Comm: syz.0.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.609487][T15419] Tainted: [L]=SOFTLOCKUP [ 751.609491][T15419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 751.609498][T15419] Call Trace: [ 751.609505][T15419] [ 751.609511][T15419] dump_stack_lvl+0x100/0x190 [ 751.609533][T15419] should_fail_ex.cold+0x5/0xa [ 751.609548][T15419] _copy_to_user+0x32/0xd0 [ 751.609566][T15419] simple_read_from_buffer+0xcb/0x170 [ 751.609587][T15419] proc_fail_nth_read+0x1af/0x230 [ 751.609604][T15419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.609620][T15419] ? rw_verify_area+0xce/0x6d0 [ 751.609637][T15419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.609652][T15419] vfs_read+0x1e4/0xb30 [ 751.609665][T15419] ? __pfx_vfs_read+0x10/0x10 [ 751.609675][T15419] ? find_held_lock+0x2b/0x80 [ 751.609693][T15419] ? __fget_files+0x215/0x3d0 [ 751.609707][T15419] ? __fget_files+0x21f/0x3d0 [ 751.609722][T15419] ksys_read+0x12a/0x250 [ 751.609734][T15419] ? __pfx_ksys_read+0x10/0x10 [ 751.609748][T15419] do_int80_emulation+0x141/0x6b0 [ 751.609765][T15419] asm_int80_emulation+0x1a/0x20 [ 751.609777][T15419] RIP: 0023:0xf71a5cab [ 751.609788][T15419] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 751.609799][T15419] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 751.609810][T15419] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f545d5d0 [ 751.609818][T15419] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 751.609824][T15419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.609831][T15419] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 751.609840][T15419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.609856][T15419] [ 751.747175][T15422] devpts: Unknown parameter 'trans' [ 751.755017][ T40] audit: type=1326 audit(1775587603.679:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.762236][ T40] audit: type=1326 audit(1775587603.679:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.769039][ T40] audit: type=1326 audit(1775587603.679:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.776299][ T40] audit: type=1326 audit(1775587603.679:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.783346][ T40] audit: type=1326 audit(1775587603.679:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.791900][ T40] audit: type=1326 audit(1775587603.679:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.798682][ T40] audit: type=1326 audit(1775587603.679:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.805884][ T40] audit: type=1326 audit(1775587603.689:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.818975][ T40] audit: type=1326 audit(1775587603.689:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.826189][ T40] audit: type=1326 audit(1775587603.689:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.1.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.121563][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.124272][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.255365][T15463] FAULT_INJECTION: forcing a failure. [ 753.255365][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 753.262373][T15463] CPU: 2 UID: 0 PID: 15463 Comm: syz.0.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.262392][T15463] Tainted: [L]=SOFTLOCKUP [ 753.262397][T15463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.262404][T15463] Call Trace: [ 753.262410][T15463] [ 753.262415][T15463] dump_stack_lvl+0x100/0x190 [ 753.262438][T15463] should_fail_ex.cold+0x5/0xa [ 753.262453][T15463] should_failslab+0xc2/0x120 [ 753.262468][T15463] __kmalloc_cache_noprof+0x7a/0x6f0 [ 753.262485][T15463] ? fuse_dentry_init+0x45/0x100 [ 753.262504][T15463] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 753.262521][T15463] ? __d_alloc+0x34/0xa80 [ 753.262535][T15463] ? __pfx_fuse_dentry_init+0x10/0x10 [ 753.262554][T15463] fuse_dentry_init+0x45/0x100 [ 753.262572][T15463] ? __pfx_fuse_dentry_init+0x10/0x10 [ 753.262590][T15463] __d_alloc+0x62b/0xa80 [ 753.262604][T15463] d_alloc_parallel+0x111/0x14e0 [ 753.262624][T15463] ? look_up_lock_class+0x55/0x120 [ 753.262638][T15463] ? register_lock_class+0x40/0x560 [ 753.262655][T15463] ? __pfx_d_alloc_parallel+0x10/0x10 [ 753.262674][T15463] ? lockdep_init_map_type+0x5c/0x250 [ 753.262703][T15463] ? lockdep_init_map_type+0x5c/0x250 [ 753.262723][T15463] __lookup_slow+0x193/0x460 [ 753.262739][T15463] ? __pfx___lookup_slow+0x10/0x10 [ 753.262766][T15463] lookup_slow+0x50/0x70 [ 753.262781][T15463] path_lookupat+0x5e8/0xc40 [ 753.262802][T15463] filename_lookup+0x202/0x590 [ 753.262812][T15463] ? kasan_save_track+0x14/0x30 [ 753.262825][T15463] ? __pfx_filename_lookup+0x10/0x10 [ 753.262851][T15463] filename_linkat+0x145/0x640 [ 753.262868][T15463] ? __pfx_filename_linkat+0x10/0x10 [ 753.262887][T15463] ? do_getname+0x191/0x390 [ 753.262908][T15463] __ia32_sys_link+0x80/0xb0 [ 753.262923][T15463] __do_fast_syscall_32+0xe3/0x8c0 [ 753.262938][T15463] do_fast_syscall_32+0x32/0x70 [ 753.262951][T15463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.262966][T15463] RIP: 0023:0xf706ef6c [ 753.262976][T15463] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 753.262987][T15463] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000009 [ 753.262998][T15463] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000400 [ 753.263006][T15463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.263012][T15463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.263019][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.263026][T15463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.263039][T15463] [ 753.587492][T15472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.480352][ T5994] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 755.495819][T15489] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2277'. [ 755.498772][T15489] tc_dump_action: action bad kind [ 755.639487][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 755.656427][ T5994] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 755.662180][ T5994] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 755.666149][ T5994] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.669962][ T5994] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 755.680968][ T5994] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 755.684191][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.687502][ T5994] usb 6-1: Product: syz [ 755.689161][ T5994] usb 6-1: Manufacturer: syz [ 755.691134][ T5994] usb 6-1: SerialNumber: syz [ 755.705646][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 755.719618][ T5994] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input15 [ 755.989368][ T5994] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 755.992020][ T5994] (id 0x00) [ 756.039444][ T5994] rc_core: IR keymap rc-imon-pad not found [ 756.041597][ T5994] Registered IR keymap rc-empty [ 756.043930][ T5994] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 756.047715][ T5994] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 756.170128][ T5994] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 756.180481][ T5994] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input16 [ 756.206915][ T5994] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:13> initialized [ 756.368824][ T828] usb 6-1: USB disconnect, device number 13 [ 756.626755][T15502] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2280'. [ 758.099447][T15528] FAULT_INJECTION: forcing a failure. [ 758.099447][T15528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.106191][T15528] CPU: 3 UID: 0 PID: 15528 Comm: syz.2.2289 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.106221][T15528] Tainted: [L]=SOFTLOCKUP [ 758.106228][T15528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 758.106238][T15528] Call Trace: [ 758.106245][T15528] [ 758.106252][T15528] dump_stack_lvl+0x100/0x190 [ 758.106286][T15528] should_fail_ex.cold+0x5/0xa [ 758.106306][T15528] ? prepare_alloc_pages+0x16d/0x5f0 [ 758.106331][T15528] should_fail_alloc_page+0xeb/0x140 [ 758.106355][T15528] prepare_alloc_pages+0x1f0/0x5f0 [ 758.106381][T15528] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 758.106414][T15528] ? lock_acquire+0x1cf/0x380 [ 758.106441][T15528] ? find_held_lock+0x2b/0x80 [ 758.106459][T15528] ? page_table_check_set+0x49a/0xa10 [ 758.106479][T15528] ? page_table_check_set+0x49a/0xa10 [ 758.106503][T15528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 758.106536][T15528] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 758.106557][T15528] ? __folio_large_mapcount_sanity_checks+0x366/0x690 [ 758.106641][T15528] ? folio_remove_rmap_pmd+0x69c/0xed0 [ 758.106672][T15528] ? split_huge_pmd_locked+0x3ba/0x3b50 [ 758.106699][T15528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 758.106722][T15528] ? policy_nodemask+0xed/0x4f0 [ 758.106745][T15528] alloc_pages_mpol+0x1fb/0x550 [ 758.106767][T15528] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 758.106787][T15528] ? check_irq_usage+0xe5/0x810 [ 758.106809][T15528] ? __split_huge_pmd+0x203/0x350 [ 758.106834][T15528] ? __bfs+0x150/0x2a0 [ 758.106857][T15528] folio_alloc_mpol_noprof+0x36/0x340 [ 758.106882][T15528] vma_alloc_folio_noprof+0xed/0x1d0 [ 758.106904][T15528] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 758.106926][T15528] ? rcu_read_unlock+0x2d/0xb0 [ 758.106952][T15528] ? rcu_read_unlock+0x2d/0xb0 [ 758.106984][T15528] do_wp_page+0x1ef3/0x4e90 [ 758.107015][T15528] ? __pfx_do_wp_page+0x10/0x10 [ 758.107041][T15528] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 758.107075][T15528] __handle_mm_fault+0x1ace/0x2b60 [ 758.107109][T15528] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.107139][T15528] ? irqentry_exit+0x180/0x670 [ 758.107158][T15528] ? lockdep_hardirqs_on+0x78/0x100 [ 758.107177][T15528] ? irqentry_exit+0x180/0x670 [ 758.107213][T15528] handle_mm_fault+0x36d/0xa20 [ 758.107244][T15528] __get_user_pages+0xf9c/0x34d0 [ 758.107273][T15528] ? check_noncircular+0x97/0x160 [ 758.107295][T15528] ? __pfx___get_user_pages+0x10/0x10 [ 758.107318][T15528] ? add_lock_to_list+0x99/0x110 [ 758.107342][T15528] __gup_longterm_locked+0x87d/0x16f0 [ 758.107369][T15528] ? is_bpf_text_address+0x8a/0x1a0 [ 758.107400][T15528] ? __pfx___gup_longterm_locked+0x10/0x10 [ 758.107425][T15528] ? find_held_lock+0x2b/0x80 [ 758.107443][T15528] ? gup_fast_fallback+0x146d/0x2460 [ 758.107464][T15528] ? gup_fast_fallback+0x146d/0x2460 [ 758.107490][T15528] gup_fast_fallback+0x18c6/0x2460 [ 758.107517][T15528] ? mark_held_locks+0x40/0x70 [ 758.107541][T15528] ? lockdep_hardirqs_on+0x78/0x100 [ 758.107560][T15528] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 758.107590][T15528] ? stack_depot_save_flags+0x479/0x9d0 [ 758.107620][T15528] ? fuse_direct_io+0x51e/0x2590 [ 758.107648][T15528] ? __pfx_gup_fast_fallback+0x10/0x10 [ 758.107669][T15528] ? __kasan_kmalloc+0xaa/0xb0 [ 758.107687][T15528] ? fuse_direct_io+0x51e/0x2590 [ 758.107711][T15528] ? fuse_direct_IO+0x7fe/0xf10 [ 758.107736][T15528] ? generic_file_direct_write+0x198/0x410 [ 758.107807][T15528] ? fuse_file_write_iter+0x79d/0x990 [ 758.107834][T15528] ? vfs_write+0x6ac/0x1070 [ 758.107851][T15528] ? ksys_write+0x12a/0x250 [ 758.107869][T15528] ? __do_fast_syscall_32+0xe3/0x8c0 [ 758.107889][T15528] ? do_fast_syscall_32+0x32/0x70 [ 758.107908][T15528] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.107939][T15528] pin_user_pages_fast+0xa7/0xf0 [ 758.107963][T15528] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 758.107994][T15528] iov_iter_extract_pages+0xa0d/0x1ef0 [ 758.108031][T15528] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 758.108055][T15528] ? rcu_is_watching+0x12/0xc0 [ 758.108085][T15528] ? trace_kmalloc+0x101/0x130 [ 758.108105][T15528] ? __kasan_kmalloc+0xaa/0xb0 [ 758.108124][T15528] ? __kmalloc_noprof+0x320/0x850 [ 758.108162][T15528] fuse_direct_io+0x5f2/0x2590 [ 758.108209][T15528] ? __pfx_fuse_direct_io+0x10/0x10 [ 758.108240][T15528] ? lockdep_init_map_type+0x5c/0x250 [ 758.108270][T15528] fuse_direct_IO+0x7fe/0xf10 [ 758.108308][T15528] ? __pfx_fuse_direct_IO+0x10/0x10 [ 758.108354][T15528] generic_file_direct_write+0x198/0x410 [ 758.108380][T15528] fuse_file_write_iter+0x79d/0x990 [ 758.108412][T15528] vfs_write+0x6ac/0x1070 [ 758.108432][T15528] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 758.108463][T15528] ? __pfx_vfs_write+0x10/0x10 [ 758.108497][T15528] ksys_write+0x12a/0x250 [ 758.108516][T15528] ? __pfx_ksys_write+0x10/0x10 [ 758.108534][T15528] ? __pfx_ksys_write+0x10/0x10 [ 758.108597][T15528] __do_fast_syscall_32+0xe3/0x8c0 [ 758.108623][T15528] do_fast_syscall_32+0x32/0x70 [ 758.108644][T15528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.108668][T15528] RIP: 0023:0xf7f02f6c [ 758.108684][T15528] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 758.108702][T15528] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 758.108721][T15528] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 758.108733][T15528] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 758.108745][T15528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.108756][T15528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 758.108767][T15528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.108793][T15528] [ 758.308108][ T828] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 758.395957][T15537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 758.469447][ T828] usb 5-1: Using ep0 maxpacket: 32 [ 758.472681][ T828] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 758.475622][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.484769][ T828] usb 5-1: config 0 descriptor?? [ 758.496704][ T828] as10x_usb: device has been detected [ 758.504034][ T828] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 758.527177][ T828] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 758.574013][ T828] as10x_usb: error during firmware upload part1 [ 758.576405][ T828] Registered device nBox DVB-T Dongle [ 758.725304][ T34] usb 5-1: USB disconnect, device number 11 [ 758.738922][ T34] Unregistered device nBox DVB-T Dongle [ 758.740446][ T34] as10x_usb: device has been disconnected [ 758.860339][T15550] FAULT_INJECTION: forcing a failure. [ 758.860339][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 758.865802][T15550] CPU: 3 UID: 0 PID: 15550 Comm: syz.1.2296 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.865834][T15550] Tainted: [L]=SOFTLOCKUP [ 758.865840][T15550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 758.865850][T15550] Call Trace: [ 758.865859][T15550] [ 758.865866][T15550] dump_stack_lvl+0x100/0x190 [ 758.865906][T15550] should_fail_ex.cold+0x5/0xa [ 758.865929][T15550] ? tomoyo_realpath_from_path+0xb6/0x690 [ 758.865955][T15550] should_failslab+0xc2/0x120 [ 758.865977][T15550] __kmalloc_noprof+0xe0/0x850 [ 758.866011][T15550] tomoyo_realpath_from_path+0xb6/0x690 [ 758.866043][T15550] tomoyo_check_open_permission+0x2af/0x3c0 [ 758.866068][T15550] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 758.866114][T15550] ? do_raw_spin_lock+0x128/0x260 [ 758.866144][T15550] ? path_get+0x61/0x80 [ 758.866168][T15550] tomoyo_file_open+0x6b/0x90 [ 758.866187][T15550] security_file_open+0xb5/0x1e0 [ 758.866213][T15550] do_dentry_open+0x5aa/0x1660 [ 758.866236][T15550] ? security_inode_permission+0xbf/0x250 [ 758.866261][T15550] vfs_open+0x82/0x3f0 [ 758.866288][T15550] path_openat+0x208c/0x31a0 [ 758.866311][T15550] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.866338][T15550] ? __pfx_path_openat+0x10/0x10 [ 758.866367][T15550] do_file_open+0x20e/0x430 [ 758.866390][T15550] ? __pfx_do_file_open+0x10/0x10 [ 758.866426][T15550] ? alloc_fd+0x476/0x790 [ 758.866450][T15550] ? do_getname+0x191/0x390 [ 758.866476][T15550] do_sys_openat2+0x10d/0x1e0 [ 758.866500][T15550] ? __pfx_do_sys_openat2+0x10/0x10 [ 758.866524][T15550] ? __fget_files+0x215/0x3d0 [ 758.866547][T15550] ? __fget_files+0x21f/0x3d0 [ 758.866569][T15550] __ia32_compat_sys_openat+0x12d/0x210 [ 758.866596][T15550] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 758.866624][T15550] ? __pfx_ksys_write+0x10/0x10 [ 758.866648][T15550] __do_fast_syscall_32+0xe3/0x8c0 [ 758.866675][T15550] do_fast_syscall_32+0x32/0x70 [ 758.866696][T15550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.866718][T15550] RIP: 0023:0xf6ffef6c [ 758.866734][T15550] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 758.866751][T15550] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 758.866770][T15550] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 758.866781][T15550] RDX: 0000000000021182 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.866792][T15550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.866802][T15550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.866814][T15550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.866837][T15550] [ 758.866845][T15550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.332706][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 760.499431][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 760.627495][T15585] FAULT_INJECTION: forcing a failure. [ 760.627495][T15585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.631962][T15585] CPU: 3 UID: 0 PID: 15585 Comm: syz.3.2306 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.631982][T15585] Tainted: [L]=SOFTLOCKUP [ 760.631986][T15585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.631994][T15585] Call Trace: [ 760.631998][T15585] [ 760.632004][T15585] dump_stack_lvl+0x100/0x190 [ 760.632038][T15585] should_fail_ex.cold+0x5/0xa [ 760.632055][T15585] __fpu_restore_sig+0x8f1/0x1360 [ 760.632073][T15585] ? __lock_acquire+0x4a5/0x2630 [ 760.632090][T15585] ? __pfx___fpu_restore_sig+0x10/0x10 [ 760.632114][T15585] ? __might_fault+0xc5/0x140 [ 760.632135][T15585] fpu__restore_sig+0x151/0x190 [ 760.632151][T15585] ia32_restore_sigcontext+0x44c/0x620 [ 760.632170][T15585] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 760.632191][T15585] ? rcu_is_watching+0x12/0xc0 [ 760.632210][T15585] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.632231][T15585] ? lockdep_hardirqs_on+0x78/0x100 [ 760.632245][T15585] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 760.632264][T15585] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 760.632286][T15585] do_int80_emulation+0x141/0x6b0 [ 760.632301][T15585] asm_int80_emulation+0x1a/0x20 [ 760.632313][T15585] RIP: 0023:0xf70bef6a [ 760.632322][T15585] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 760.632333][T15585] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 [ 760.632343][T15585] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000080000100 [ 760.632350][T15585] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.632356][T15585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.632363][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.632369][T15585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.632383][T15585] [ 760.705843][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 760.709634][ T34] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 760.712474][ T34] usb 5-1: config 0 has no interface number 0 [ 760.714465][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 760.717897][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 760.721775][ T34] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 760.725458][ T34] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 760.729663][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 760.732496][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.736399][ T34] usb 5-1: config 0 descriptor?? [ 760.741972][ T34] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 760.951181][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 760.953269][ T5994] usb 5-1: USB disconnect, device number 12 [ 760.960464][ T5994] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 760.968973][T15576] ldusb: No device or device unplugged -19 [ 761.047455][T15597] FAULT_INJECTION: forcing a failure. [ 761.047455][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 761.053080][T15597] CPU: 3 UID: 0 PID: 15597 Comm: syz.1.2311 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.053101][T15597] Tainted: [L]=SOFTLOCKUP [ 761.053105][T15597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.053111][T15597] Call Trace: [ 761.053116][T15597] [ 761.053121][T15597] dump_stack_lvl+0x100/0x190 [ 761.053144][T15597] should_fail_ex.cold+0x5/0xa [ 761.053159][T15597] ? tomoyo_encode2+0xfb/0x3c0 [ 761.053176][T15597] should_failslab+0xc2/0x120 [ 761.053189][T15597] __kmalloc_noprof+0xe0/0x850 [ 761.053207][T15597] ? d_absolute_path+0x136/0x1b0 [ 761.053227][T15597] tomoyo_encode2+0xfb/0x3c0 [ 761.053245][T15597] tomoyo_encode+0x29/0x50 [ 761.053261][T15597] tomoyo_realpath_from_path+0x18c/0x690 [ 761.053281][T15597] tomoyo_path_number_perm+0x23c/0x580 [ 761.053294][T15597] ? tomoyo_path_number_perm+0x22e/0x580 [ 761.053309][T15597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 761.053337][T15597] ? find_held_lock+0x2b/0x80 [ 761.053349][T15597] ? hook_file_ioctl_common+0x146/0x410 [ 761.053364][T15597] ? __fget_files+0x215/0x3d0 [ 761.053378][T15597] ? __fget_files+0x21f/0x3d0 [ 761.053391][T15597] security_file_ioctl_compat+0xd3/0x230 [ 761.053408][T15597] __ia32_compat_sys_ioctl+0xc2/0x360 [ 761.053427][T15597] __do_fast_syscall_32+0xe3/0x8c0 [ 761.053443][T15597] do_fast_syscall_32+0x32/0x70 [ 761.053456][T15597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.053471][T15597] RIP: 0023:0xf6ffef6c [ 761.053482][T15597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 761.053493][T15597] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 761.053504][T15597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064c8 [ 761.053511][T15597] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.053518][T15597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.053524][T15597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.053531][T15597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.053603][T15597] [ 761.053616][T15597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.365748][T15603] netlink: 'syz.2.2313': attribute type 5 has an invalid length. [ 761.368899][T15603] FAULT_INJECTION: forcing a failure. [ 761.368899][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 761.373711][T15603] CPU: 2 UID: 0 PID: 15603 Comm: syz.2.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.373731][T15603] Tainted: [L]=SOFTLOCKUP [ 761.373736][T15603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.373742][T15603] Call Trace: [ 761.373747][T15603] [ 761.373752][T15603] dump_stack_lvl+0x100/0x190 [ 761.373775][T15603] should_fail_ex.cold+0x5/0xa [ 761.373790][T15603] should_failslab+0xc2/0x120 [ 761.373804][T15603] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 761.373823][T15603] ? __d_alloc+0x34/0xa80 [ 761.373840][T15603] __d_alloc+0x34/0xa80 [ 761.373855][T15603] d_alloc+0x4a/0x1e0 [ 761.373869][T15603] lookup_one_qstr_excl+0x175/0x250 [ 761.373886][T15603] start_dirop+0x59/0xb0 [ 761.373898][T15603] simple_start_creating+0xf9/0x110 [ 761.373911][T15603] ? __pfx_simple_start_creating+0x10/0x10 [ 761.373923][T15603] ? mntput+0x70/0xa0 [ 761.373933][T15603] ? simple_pin_fs+0xa3/0x190 [ 761.373951][T15603] debugfs_start_creating.part.0+0x82/0x170 [ 761.373967][T15603] __debugfs_create_file+0xb3/0x4f0 [ 761.373982][T15603] debugfs_create_file_full+0x41/0x60 [ 761.373998][T15603] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 761.374014][T15603] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 761.374042][T15603] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 761.374052][T15603] ? alloc_netdev_mqs+0xd7/0x14f0 [ 761.374065][T15603] ? lockdep_init_map_type+0x5c/0x250 [ 761.374083][T15603] ? __pfx_vxlan_setup+0x10/0x10 [ 761.374094][T15603] alloc_netdev_mqs+0x314/0x14f0 [ 761.374109][T15603] rtnl_create_link+0xc13/0xf80 [ 761.374122][T15603] rtnl_newlink+0x13b8/0x2380 [ 761.374138][T15603] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.374174][T15603] ? is_bpf_text_address+0x94/0x1a0 [ 761.374194][T15603] ? kernel_text_address+0x8d/0x100 [ 761.374220][T15603] ? arch_stack_walk+0xa6/0xf0 [ 761.374239][T15603] ? __pfx_stack_trace_save+0x10/0x10 [ 761.374259][T15603] ? find_held_lock+0x2b/0x80 [ 761.374270][T15603] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 761.374281][T15603] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 761.374293][T15603] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.374304][T15603] rtnetlink_rcv_msg+0x95e/0xe90 [ 761.374317][T15603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.374332][T15603] ? __lock_acquire+0x4a5/0x2630 [ 761.374350][T15603] netlink_rcv_skb+0x159/0x420 [ 761.374364][T15603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.374377][T15603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.374395][T15603] ? netlink_deliver_tap+0x1ae/0xcc0 [ 761.374410][T15603] netlink_unicast+0x5aa/0x870 [ 761.374425][T15603] ? __pfx_netlink_unicast+0x10/0x10 [ 761.374443][T15603] netlink_sendmsg+0x8b0/0xda0 [ 761.374459][T15603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.374473][T15603] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 761.374489][T15603] ____sys_sendmsg+0x9e1/0xb70 [ 761.374504][T15603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.374518][T15603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.374540][T15603] ___sys_sendmsg+0x190/0x1e0 [ 761.374556][T15603] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.374591][T15603] __sys_sendmsg+0x170/0x220 [ 761.374603][T15603] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.374620][T15603] ? __pfx_ksys_write+0x10/0x10 [ 761.374635][T15603] __do_fast_syscall_32+0xe3/0x8c0 [ 761.374651][T15603] do_fast_syscall_32+0x32/0x70 [ 761.374665][T15603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.374681][T15603] RIP: 0023:0xf7f02f6c [ 761.374692][T15603] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 761.374703][T15603] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 761.374715][T15603] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 761.374722][T15603] RDX: 0000000004008840 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.374729][T15603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.374735][T15603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.374742][T15603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.374757][T15603] [ 761.510334][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 761.510346][ C2] hpet: Lost 8 RTC interrupts [ 761.736008][T15609] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20004 [ 761.752426][T15609] lo speed is unknown, defaulting to 1000 [ 761.757425][T15611] FAULT_INJECTION: forcing a failure. [ 761.757425][T15611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.762749][T15611] CPU: 0 UID: 0 PID: 15611 Comm: syz.2.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.762769][T15611] Tainted: [L]=SOFTLOCKUP [ 761.762773][T15611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.762780][T15611] Call Trace: [ 761.762785][T15611] [ 761.762791][T15611] dump_stack_lvl+0x100/0x190 [ 761.762814][T15611] should_fail_ex.cold+0x5/0xa [ 761.762828][T15611] _copy_from_user+0x2e/0xd0 [ 761.762847][T15611] get_compat_msghdr+0xb3/0x4b0 [ 761.762925][T15611] ? _parse_integer_limit+0x17f/0x1d0 [ 761.762952][T15611] ? __pfx_get_compat_msghdr+0x10/0x10 [ 761.762981][T15611] ? _kstrtoull+0x13c/0x1f0 [ 761.763008][T15611] ? __pfx__kstrtoull+0x10/0x10 [ 761.763039][T15611] ___sys_sendmsg+0x1b6/0x1e0 [ 761.763065][T15611] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.763088][T15611] ? __lock_acquire+0x4a5/0x2630 [ 761.763130][T15611] ? find_held_lock+0x2b/0x80 [ 761.763164][T15611] __sys_sendmmsg+0x2ff/0x430 [ 761.763186][T15611] ? __pfx___sys_sendmmsg+0x10/0x10 [ 761.763212][T15611] ? __fget_files+0x215/0x3d0 [ 761.763243][T15611] ? fput+0x79/0x100 [ 761.763266][T15611] ? ksys_write+0x1ac/0x250 [ 761.763283][T15611] ? __pfx_ksys_write+0x10/0x10 [ 761.763304][T15611] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 761.763332][T15611] ? lockdep_hardirqs_on+0x78/0x100 [ 761.763353][T15611] __do_fast_syscall_32+0xe3/0x8c0 [ 761.763375][T15611] do_fast_syscall_32+0x32/0x70 [ 761.763393][T15611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.763415][T15611] RIP: 0023:0xf7f02f6c [ 761.763431][T15611] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 761.763448][T15611] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 761.763467][T15611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ac0 [ 761.763479][T15611] RDX: 00000000801ae9af RSI: 000000000000ff14 RDI: 0000000000000000 [ 761.763508][T15611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.763518][T15611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.763528][T15611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.763550][T15611] [ 761.931128][T15618] syzkaller0: entered promiscuous mode [ 761.932998][T15618] syzkaller0: entered allmulticast mode [ 762.159569][T15627] FAULT_INJECTION: forcing a failure. [ 762.159569][T15627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.163966][T15627] CPU: 0 UID: 0 PID: 15627 Comm: syz.2.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.163986][T15627] Tainted: [L]=SOFTLOCKUP [ 762.163990][T15627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.163997][T15627] Call Trace: [ 762.164002][T15627] [ 762.164008][T15627] dump_stack_lvl+0x100/0x190 [ 762.164029][T15627] should_fail_ex.cold+0x5/0xa [ 762.164042][T15627] ? prepare_alloc_pages+0x16d/0x5f0 [ 762.164059][T15627] should_fail_alloc_page+0xeb/0x140 [ 762.164074][T15627] prepare_alloc_pages+0x1f0/0x5f0 [ 762.164088][T15627] ? kernel_text_address+0x8d/0x100 [ 762.164107][T15627] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 762.164130][T15627] ? copy_splice_read+0x1a3/0xb90 [ 762.164146][T15627] ? stack_trace_save+0x8e/0xc0 [ 762.164158][T15627] ? __pfx_stack_trace_save+0x10/0x10 [ 762.164170][T15627] ? find_held_lock+0x2b/0x80 [ 762.164182][T15627] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.164202][T15627] ? copy_splice_read+0x1a3/0xb90 [ 762.164215][T15627] ? kasan_save_stack+0x3f/0x50 [ 762.164226][T15627] ? kasan_save_stack+0x30/0x50 [ 762.164235][T15627] ? kasan_save_track+0x14/0x30 [ 762.164245][T15627] ? __kasan_kmalloc+0xaa/0xb0 [ 762.164254][T15627] ? __kmalloc_noprof+0x301/0x850 [ 762.164271][T15627] ? copy_splice_read+0x1a3/0xb90 [ 762.164283][T15627] ? do_splice_read+0x285/0x370 [ 762.164294][T15627] ? do_fast_syscall_32+0x32/0x70 [ 762.164308][T15627] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 762.164330][T15627] alloc_pages_bulk_noprof+0x782/0x1490 [ 762.164354][T15627] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 762.164376][T15627] ? __kmalloc_noprof+0x320/0x850 [ 762.164397][T15627] copy_splice_read+0x1e1/0xb90 [ 762.164412][T15627] ? __pfx_copy_splice_read+0x10/0x10 [ 762.164425][T15627] ? __pfx_splice_from_pipe+0x10/0x10 [ 762.164440][T15627] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 762.164454][T15627] ? __pfx_copy_splice_read+0x10/0x10 [ 762.164465][T15627] do_splice_read+0x285/0x370 [ 762.164478][T15627] splice_direct_to_actor+0x2a1/0xa30 [ 762.164491][T15627] ? __pfx_direct_splice_actor+0x10/0x10 [ 762.164505][T15627] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 762.164521][T15627] do_splice_direct+0x174/0x240 [ 762.164549][T15627] ? __pfx_do_splice_direct+0x10/0x10 [ 762.164564][T15627] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 762.164576][T15627] ? bpf_lsm_file_permission+0x9/0x10 [ 762.164628][T15627] ? security_file_permission+0x76/0x210 [ 762.164644][T15627] ? rw_verify_area+0xce/0x6d0 [ 762.164663][T15627] do_sendfile+0xadc/0xe20 [ 762.164684][T15627] ? __pfx_do_sendfile+0x10/0x10 [ 762.164703][T15627] ? __fget_files+0x21f/0x3d0 [ 762.164718][T15627] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 762.164733][T15627] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 762.164747][T15627] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 762.164763][T15627] ? syscall_user_dispatch+0x76/0x130 [ 762.164783][T15627] __do_fast_syscall_32+0xe3/0x8c0 [ 762.164797][T15627] do_fast_syscall_32+0x32/0x70 [ 762.164811][T15627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 762.164825][T15627] RIP: 0023:0xf7f02f6c [ 762.164835][T15627] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 762.164858][T15627] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 762.164871][T15627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 762.164878][T15627] RDX: 0000000000000000 RSI: 0000000002000006 RDI: 0000000000000000 [ 762.164884][T15627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 762.164891][T15627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 762.164897][T15627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 762.164911][T15627] [ 762.300791][T15629] netlink: 'syz.2.2325': attribute type 5 has an invalid length. [ 762.359484][ T5306] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 762.473489][T15631] netlink: 'syz.2.2326': attribute type 14 has an invalid length. [ 762.479843][T15631] macvtap1: entered promiscuous mode [ 762.481953][T15631] macvtap1: entered allmulticast mode [ 762.484018][T15631] dummy0: entered allmulticast mode [ 762.485954][T15631] dummy0: entered promiscuous mode [ 762.488879][T15631] team0: Device macvtap1 failed to register rx_handler [ 762.492227][T15631] dummy0: left allmulticast mode [ 762.493920][T15631] dummy0: left promiscuous mode [ 762.536273][ T5306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.540893][ T5306] usb 5-1: config 0 has no interfaces? [ 762.546586][ T5306] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 762.551084][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.554920][ T5306] usb 5-1: Product: syz [ 762.557057][ T5306] usb 5-1: Manufacturer: syz [ 762.558892][ T5306] usb 5-1: SerialNumber: syz [ 762.563513][ T5306] usb 5-1: config 0 descriptor?? [ 763.024300][T15643] FAULT_INJECTION: forcing a failure. [ 763.024300][T15643] name failslab, interval 1, probability 0, space 0, times 0 [ 763.031129][T15643] CPU: 3 UID: 0 PID: 15643 Comm: syz.3.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.031160][T15643] Tainted: [L]=SOFTLOCKUP [ 763.031166][T15643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.031177][T15643] Call Trace: [ 763.031184][T15643] [ 763.031191][T15643] dump_stack_lvl+0x100/0x190 [ 763.031226][T15643] should_fail_ex.cold+0x5/0xa [ 763.031250][T15643] should_failslab+0xc2/0x120 [ 763.031271][T15643] __kvmalloc_node_noprof+0xfa/0xa00 [ 763.031289][T15643] ? file_tty_write.isra.0+0x64e/0x890 [ 763.031323][T15643] file_tty_write.isra.0+0x64e/0x890 [ 763.031350][T15643] ? security_file_permission+0x76/0x210 [ 763.031375][T15643] ? rw_verify_area+0xce/0x6d0 [ 763.031403][T15643] vfs_write+0x6ac/0x1070 [ 763.031422][T15643] ? __pfx_tty_write+0x10/0x10 [ 763.031450][T15643] ? __pfx_vfs_write+0x10/0x10 [ 763.031465][T15643] ? find_held_lock+0x2b/0x80 [ 763.031498][T15643] ksys_write+0x12a/0x250 [ 763.031515][T15643] ? __pfx_ksys_write+0x10/0x10 [ 763.031532][T15643] ? __pfx_ksys_write+0x10/0x10 [ 763.031554][T15643] __do_fast_syscall_32+0xe3/0x8c0 [ 763.031577][T15643] do_fast_syscall_32+0x32/0x70 [ 763.031598][T15643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.031619][T15643] RIP: 0023:0xf70bef6c [ 763.031634][T15643] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 763.031651][T15643] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 763.031667][T15643] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001980 [ 763.031677][T15643] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.031687][T15643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.031696][T15643] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.031706][T15643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.031728][T15643] [ 763.239486][ T5948] Bluetooth: hci0: command 0x1003 tx timeout [ 763.243225][ T5962] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 763.608592][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 763.626622][T15667] syz_tun (unregistering): left allmulticast mode [ 763.693229][T15670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2336'. [ 763.866122][T15674] hfs: unable to load iocharset "io#harset" [ 763.872127][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2337'. [ 764.813769][T15683] FAULT_INJECTION: forcing a failure. [ 764.813769][T15683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.818076][T15683] CPU: 1 UID: 0 PID: 15683 Comm: syz.1.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.818096][T15683] Tainted: [L]=SOFTLOCKUP [ 764.818100][T15683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 764.818107][T15683] Call Trace: [ 764.818114][T15683] [ 764.818119][T15683] dump_stack_lvl+0x100/0x190 [ 764.818142][T15683] should_fail_ex.cold+0x5/0xa [ 764.818157][T15683] _copy_from_user+0x2e/0xd0 [ 764.818173][T15683] copy_mount_options+0x76/0x190 [ 764.818192][T15683] __ia32_sys_mount+0x1ab/0x310 [ 764.818207][T15683] ? __pfx___ia32_sys_mount+0x10/0x10 [ 764.818222][T15683] ? __pfx_ksys_write+0x10/0x10 [ 764.818237][T15683] __do_fast_syscall_32+0xe3/0x8c0 [ 764.818253][T15683] do_fast_syscall_32+0x32/0x70 [ 764.818266][T15683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.818282][T15683] RIP: 0023:0xf6ffef6c [ 764.818292][T15683] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 764.818303][T15683] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 764.818315][T15683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 764.818322][T15683] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000080000300 [ 764.818329][T15683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 764.818335][T15683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 764.818341][T15683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.818355][T15683] [ 765.395338][ T54] kernel read not supported for file /dsp (pid: 54 comm: kworker/1:1) [ 765.437423][ T5306] usb 5-1: USB disconnect, device number 13 [ 765.596110][T15702] netlink: 'syz.3.2346': attribute type 5 has an invalid length. [ 765.806164][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.816102][T15710] bond0: entered promiscuous mode [ 765.818348][T15710] gretap1: entered promiscuous mode [ 765.822744][T15710] gretap0: entered promiscuous mode [ 765.825938][T15710] debugfs: 'hsr1' already exists in 'hsr' [ 765.828391][T15710] Cannot create hsr debugfs directory [ 765.831457][T15710] hsr1: entered promiscuous mode [ 765.839937][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.843691][T15710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.859049][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.860914][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.863089][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.865573][T15710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.876915][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.877482][T15713] loop6: detected capacity change from 0 to 2640 [ 765.880604][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.886161][T15713] buffer_io_error: 357 callbacks suppressed [ 765.886172][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.891127][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.893881][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.896884][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.899742][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.902716][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.905718][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.908813][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.911606][T15713] ldm_validate_partition_table(): Disk read failed. [ 765.914010][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.916748][T15713] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.919590][T15713] Dev loop6: unable to read RDB block 0 [ 765.923791][T15713] loop6: unable to read partition table [ 765.925436][T15716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2351'. [ 765.926027][T15713] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 765.928492][T15716] netlink: 'syz.2.2351': attribute type 7 has an invalid length. [ 765.928504][T15716] netlink: 'syz.2.2351': attribute type 8 has an invalid length. [ 765.928511][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 765.929256][T15715] netlink: 'syz.2.2351': attribute type 7 has an invalid length. [ 765.943465][T15715] netlink: 'syz.2.2351': attribute type 8 has an invalid length. [ 768.306391][T15766] veth1_to_hsr: entered allmulticast mode [ 768.663457][T15780] netlink: 'syz.3.2371': attribute type 5 has an invalid length. [ 768.706333][T15781] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 768.925463][T15784] random: crng reseeded on system resumption [ 769.620604][T15774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 769.622749][T15774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.625574][T15774] vhci_hcd vhci_hcd.0: Device attached [ 769.889451][ T54] usb 38-1: SetAddress Request (62) to port 0 [ 769.891555][ T54] usb 38-1: new SuperSpeed USB device number 62 using vhci_hcd [ 769.899540][T15774] random: crng reseeded on system resumption [ 769.949113][T15803] __nla_validate_parse: 3 callbacks suppressed [ 769.949368][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 770.328009][T15807] lo speed is unknown, defaulting to 1000 [ 770.585478][T15798] vhci_hcd: connection reset by peer [ 770.587893][ T4413] vhci_hcd vhci_hcd.0: stop threads [ 770.589918][ T4413] vhci_hcd vhci_hcd.0: release socket [ 770.593302][ T4413] vhci_hcd vhci_hcd.0: disconnect device [ 770.611952][T15813] FAULT_INJECTION: forcing a failure. [ 770.611952][T15813] name failslab, interval 1, probability 0, space 0, times 0 [ 770.615936][T15813] CPU: 0 UID: 0 PID: 15813 Comm: syz.1.2378 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.615956][T15813] Tainted: [L]=SOFTLOCKUP [ 770.615960][T15813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.615968][T15813] Call Trace: [ 770.615973][T15813] [ 770.615979][T15813] dump_stack_lvl+0x100/0x190 [ 770.616001][T15813] should_fail_ex.cold+0x5/0xa [ 770.616016][T15813] should_failslab+0xc2/0x120 [ 770.616030][T15813] __kmalloc_cache_noprof+0x7a/0x6f0 [ 770.616047][T15813] ? tc_new_tfilter+0xe17/0x24a0 [ 770.616061][T15813] ? tcf_chain_tp_find+0x2b5/0x470 [ 770.616081][T15813] tc_new_tfilter+0xe17/0x24a0 [ 770.616095][T15813] ? is_bpf_text_address+0x10/0x1a0 [ 770.616119][T15813] ? kernel_text_address+0x8d/0x100 [ 770.616136][T15813] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 770.616151][T15813] ? __pfx_tc_new_tfilter+0x10/0x10 [ 770.616163][T15813] ? arch_stack_walk+0xa6/0xf0 [ 770.616179][T15813] ? __lock_acquire+0x4a5/0x2630 [ 770.616201][T15813] ? find_held_lock+0x2b/0x80 [ 770.616213][T15813] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 770.616226][T15813] ? __pfx_tc_new_tfilter+0x10/0x10 [ 770.616239][T15813] rtnetlink_rcv_msg+0x95e/0xe90 [ 770.616251][T15813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 770.616265][T15813] ? __lock_acquire+0x4a5/0x2630 [ 770.616283][T15813] netlink_rcv_skb+0x159/0x420 [ 770.616298][T15813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 770.616310][T15813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 770.616328][T15813] ? netlink_deliver_tap+0x1ae/0xcc0 [ 770.616342][T15813] netlink_unicast+0x5aa/0x870 [ 770.616356][T15813] ? __pfx_netlink_unicast+0x10/0x10 [ 770.616368][T15813] ? __pfx___might_resched+0x10/0x10 [ 770.616432][T15813] netlink_sendmsg+0x8b0/0xda0 [ 770.616447][T15813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.616462][T15813] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 770.616478][T15813] ____sys_sendmsg+0x9e1/0xb70 [ 770.616492][T15813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.616532][T15813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.616553][T15813] ___sys_sendmsg+0x190/0x1e0 [ 770.616570][T15813] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.616601][T15813] __sys_sendmsg+0x170/0x220 [ 770.616613][T15813] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.616629][T15813] ? __pfx_ksys_write+0x10/0x10 [ 770.616644][T15813] __do_fast_syscall_32+0xe3/0x8c0 [ 770.616661][T15813] do_fast_syscall_32+0x32/0x70 [ 770.616674][T15813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.616690][T15813] RIP: 0023:0xf6ffef6c [ 770.616701][T15813] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 770.616713][T15813] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 770.616725][T15813] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 770.616732][T15813] RDX: 0000000020040054 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.616739][T15813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.616745][T15813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 770.616752][T15813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.616766][T15813] [ 770.760546][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 770.766183][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 771.676252][T15835] FAULT_INJECTION: forcing a failure. [ 771.676252][T15835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.681677][T15835] CPU: 0 UID: 0 PID: 15835 Comm: syz.1.2387 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.681705][T15835] Tainted: [L]=SOFTLOCKUP [ 771.681711][T15835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.681719][T15835] Call Trace: [ 771.681726][T15835] [ 771.681733][T15835] dump_stack_lvl+0x100/0x190 [ 771.681766][T15835] should_fail_ex.cold+0x5/0xa [ 771.681784][T15835] ? prepare_alloc_pages+0x16d/0x5f0 [ 771.681806][T15835] should_fail_alloc_page+0xeb/0x140 [ 771.681825][T15835] prepare_alloc_pages+0x1f0/0x5f0 [ 771.681856][T15835] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 771.681882][T15835] ? do_int80_emulation+0xf1/0x6b0 [ 771.681914][T15835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 771.681950][T15835] ? rcu_is_watching+0x12/0xc0 [ 771.681976][T15835] ? trace_kmalloc+0x101/0x130 [ 771.681995][T15835] ? __kasan_kmalloc+0xaa/0xb0 [ 771.682011][T15835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.682028][T15835] ? policy_nodemask+0xed/0x4f0 [ 771.682049][T15835] alloc_pages_mpol+0x1fb/0x550 [ 771.682069][T15835] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 771.682088][T15835] ? __alloc_skb+0x5b7/0x710 [ 771.682112][T15835] ? __pfx___alloc_skb+0x10/0x10 [ 771.682139][T15835] alloc_pages_noprof+0x136/0x390 [ 771.682160][T15835] alloc_skb_with_frags+0x500/0x810 [ 771.682184][T15835] sock_alloc_send_pskb+0x801/0x980 [ 771.682212][T15835] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 771.682235][T15835] ? _parse_integer_limit+0x17f/0x1d0 [ 771.682271][T15835] tun_get_user+0x8f7/0x3e10 [ 771.682299][T15835] ? __pfx_tun_get_user+0x10/0x10 [ 771.682320][T15835] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 771.682352][T15835] ? find_held_lock+0x2b/0x80 [ 771.682369][T15835] ? tun_get+0x191/0x370 [ 771.682386][T15835] ? tun_get+0x191/0x370 [ 771.682410][T15835] tun_chr_write_iter+0xdc/0x200 [ 771.682429][T15835] vfs_write+0x6ac/0x1070 [ 771.682447][T15835] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 771.682470][T15835] ? __pfx_vfs_write+0x10/0x10 [ 771.682484][T15835] ? find_held_lock+0x2b/0x80 [ 771.682515][T15835] ksys_write+0x12a/0x250 [ 771.682529][T15835] ? __pfx_ksys_write+0x10/0x10 [ 771.682551][T15835] do_int80_emulation+0x141/0x6b0 [ 771.682573][T15835] asm_int80_emulation+0x1a/0x20 [ 771.682589][T15835] RIP: 0023:0xf7135cab [ 771.682604][T15835] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 771.682619][T15835] RSP: 002b:00000000f53ed44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 771.682633][T15835] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000580 [ 771.682644][T15835] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 771.682654][T15835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 771.682664][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.682674][T15835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.682696][T15835] [ 771.919714][T15839] binder: 15836:15839 ioctl 4018620d 0 returned -22 [ 771.922704][T15839] binder: 15836:15839 ioctl c0306201 800003c0 returned -14 [ 772.399711][T15497] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 772.551243][T15497] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 772.554611][T15497] usb 5-1: config 0 has no interface number 0 [ 772.558035][T15497] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 772.562551][T15497] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 772.566505][T15497] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 772.570511][T15497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.580414][T15497] usb 5-1: config 0 descriptor?? [ 772.583107][T15852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 772.588678][T15497] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 772.599956][ T40] audit: type=1326 audit(1775587624.539:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15853 comm="syz.2.2394" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02f6c code=0x0 [ 772.759796][T15857] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 772.786513][T15852] FAULT_INJECTION: forcing a failure. [ 772.786513][T15852] name failslab, interval 1, probability 0, space 0, times 0 [ 772.791843][T15852] CPU: 2 UID: 0 PID: 15852 Comm: syz.0.2393 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.791862][T15852] Tainted: [L]=SOFTLOCKUP [ 772.791867][T15852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 772.791873][T15852] Call Trace: [ 772.791878][T15852] [ 772.791883][T15852] dump_stack_lvl+0x100/0x190 [ 772.791905][T15852] should_fail_ex.cold+0x5/0xa [ 772.791920][T15852] ? tomoyo_realpath_from_path+0xb6/0x690 [ 772.791937][T15852] should_failslab+0xc2/0x120 [ 772.791950][T15852] __kmalloc_noprof+0xe0/0x850 [ 772.791972][T15852] tomoyo_realpath_from_path+0xb6/0x690 [ 772.791992][T15852] tomoyo_check_open_permission+0x2af/0x3c0 [ 772.792007][T15852] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 772.792035][T15852] ? do_raw_spin_lock+0x128/0x260 [ 772.792054][T15852] ? path_get+0x61/0x80 [ 772.792069][T15852] tomoyo_file_open+0x6b/0x90 [ 772.792082][T15852] security_file_open+0xb5/0x1e0 [ 772.792098][T15852] do_dentry_open+0x5aa/0x1660 [ 772.792111][T15852] ? security_inode_permission+0xbf/0x250 [ 772.792128][T15852] vfs_open+0x82/0x3f0 [ 772.792145][T15852] path_openat+0x208c/0x31a0 [ 772.792160][T15852] ? asm_int80_emulation+0x1a/0x20 [ 772.792173][T15852] ? __pfx_path_openat+0x10/0x10 [ 772.792191][T15852] do_file_open+0x20e/0x430 [ 772.792204][T15852] ? __pfx_do_file_open+0x10/0x10 [ 772.792226][T15852] ? _raw_spin_unlock+0x28/0x50 [ 772.792244][T15852] ? alloc_fd+0x476/0x790 [ 772.792260][T15852] do_sys_openat2+0x10d/0x1e0 [ 772.792276][T15852] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.792290][T15852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 772.792305][T15852] ? __fget_files+0x21f/0x3d0 [ 772.792319][T15852] __ia32_compat_sys_openat+0x12d/0x210 [ 772.792337][T15852] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 772.792353][T15852] ? ksys_write+0x1ac/0x250 [ 772.792369][T15852] do_int80_emulation+0x141/0x6b0 [ 772.792383][T15852] asm_int80_emulation+0x1a/0x20 [ 772.792394][T15852] RIP: 0023:0xf71a5cab [ 772.792404][T15852] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 772.792415][T15852] RSP: 002b:00000000f545d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 772.792427][T15852] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f545d100 [ 772.792434][T15852] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.792440][T15852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 772.792447][T15852] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 772.792453][T15852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.792467][T15852] [ 772.792473][T15852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 772.901288][ C2] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 772.906724][ T5994] usb 5-1: USB disconnect, device number 14 [ 773.553141][T15882] FAULT_INJECTION: forcing a failure. [ 773.553141][T15882] name failslab, interval 1, probability 0, space 0, times 0 [ 773.557350][T15882] CPU: 3 UID: 0 PID: 15882 Comm: syz.0.2401 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.557369][T15882] Tainted: [L]=SOFTLOCKUP [ 773.557374][T15882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.557380][T15882] Call Trace: [ 773.557386][T15882] [ 773.557391][T15882] dump_stack_lvl+0x100/0x190 [ 773.557413][T15882] should_fail_ex.cold+0x5/0xa [ 773.557428][T15882] should_failslab+0xc2/0x120 [ 773.557442][T15882] __kmalloc_cache_noprof+0x7a/0x6f0 [ 773.557459][T15882] ? binder_transaction+0x1c15/0x9ee0 [ 773.557517][T15882] binder_transaction+0x1c15/0x9ee0 [ 773.557542][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557560][T15882] ? __pfx_binder_transaction+0x10/0x10 [ 773.557574][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557592][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557609][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557633][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557648][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557663][T15882] ? kernel_text_address+0x8d/0x100 [ 773.557680][T15882] ? __pfx_widen_string+0x10/0x10 [ 773.557700][T15882] ? find_held_lock+0x2b/0x80 [ 773.557710][T15882] ? __might_fault+0xc5/0x140 [ 773.557727][T15882] ? __might_fault+0xc5/0x140 [ 773.557749][T15882] binder_thread_write+0x131f/0x4dd0 [ 773.557765][T15882] ? kasan_save_free_info+0x3b/0x70 [ 773.557784][T15882] ? __lock_acquire+0x4a5/0x2630 [ 773.557803][T15882] ? __pfx_binder_thread_write+0x10/0x10 [ 773.557820][T15882] ? binder_debug+0xe0/0x190 [ 773.557832][T15882] ? __pfx_binder_debug+0x10/0x10 [ 773.557845][T15882] ? binder_debug+0xe0/0x190 [ 773.557856][T15882] ? __pfx_binder_debug+0x10/0x10 [ 773.557874][T15882] ? __pfx_binder_ioctl+0x10/0x10 [ 773.557887][T15882] binder_ioctl+0x2941/0x7610 [ 773.557902][T15882] ? tomoyo_path_number_perm+0x28f/0x580 [ 773.557917][T15882] ? tomoyo_path_number_perm+0x28f/0x580 [ 773.557933][T15882] ? tomoyo_path_number_perm+0x188/0x580 [ 773.557948][T15882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 773.557962][T15882] ? __pfx_binder_ioctl+0x10/0x10 [ 773.557978][T15882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.557993][T15882] ? do_vfs_ioctl+0x226/0x13e0 [ 773.558010][T15882] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 773.558031][T15882] ? find_held_lock+0x2b/0x80 [ 773.558041][T15882] ? hook_file_ioctl_common+0x146/0x410 [ 773.558059][T15882] ? __fget_files+0x21f/0x3d0 [ 773.558072][T15882] ? __pfx_binder_ioctl+0x10/0x10 [ 773.558085][T15882] compat_ptr_ioctl+0x6e/0xa0 [ 773.558102][T15882] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 773.558118][T15882] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 773.558137][T15882] __do_fast_syscall_32+0xe3/0x8c0 [ 773.558157][T15882] do_fast_syscall_32+0x32/0x70 [ 773.558170][T15882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 773.558185][T15882] RIP: 0023:0xf706ef6c [ 773.558195][T15882] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 773.558207][T15882] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 773.558220][T15882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 773.558227][T15882] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 773.558233][T15882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 773.558240][T15882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.558247][T15882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 773.558260][T15882] [ 773.694794][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 773.849395][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 773.853167][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.856928][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.860707][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 773.869374][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 773.872290][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.876273][ T34] usb 6-1: config 0 descriptor?? [ 773.923973][T15895] input: syz1 as /devices/virtual/input/input17 [ 774.792653][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 774.797429][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 774.803545][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 774.806359][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 774.809472][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 774.812147][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 775.035576][ T54] usb 38-1: device descriptor read/8, error -110 [ 775.036817][ T34] usb 6-1: USB disconnect, device number 14 [ 775.389514][T15923] 9pnet_virtio: no channels available for device syz [ 775.415403][ T40] audit: type=1326 audit(1775587627.189:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.524936][ T40] audit: type=1326 audit(1775587627.189:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.542026][ T40] audit: type=1326 audit(1775587627.189:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.563754][ T40] audit: type=1326 audit(1775587627.189:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.607545][ T40] audit: type=1326 audit(1775587627.189:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.614489][ T40] audit: type=1326 audit(1775587627.199:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.621527][ T40] audit: type=1326 audit(1775587627.209:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.628956][ T54] usb usb38-port1: attempt power cycle [ 775.629923][ T40] audit: type=1326 audit(1775587627.209:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 775.639719][ T40] audit: type=1326 audit(1775587627.209:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 776.145665][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 776.155392][T15932] hsr1: left promiscuous mode [ 776.159099][T15932] syzkaller0: entered promiscuous mode [ 776.161810][T15932] syzkaller0: entered allmulticast mode [ 776.231114][ T54] usb usb38-port1: unable to enumerate USB device [ 776.381118][T15943] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2414'. [ 776.384499][T15943] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2414'. [ 776.559586][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 776.566602][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2420'. [ 776.819473][T15497] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 776.989380][T15497] usb 5-1: Using ep0 maxpacket: 16 [ 776.993639][T15497] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 776.998119][T15497] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.003587][T15497] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 777.007346][T15497] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 777.013582][T15497] usb 5-1: config 0 interface 0 has no altsetting 0 [ 777.018922][T15497] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 777.022144][T15497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.025245][T15497] usb 5-1: Product: syz [ 777.026665][T15497] usb 5-1: Manufacturer: syz [ 777.028382][T15497] usb 5-1: SerialNumber: syz [ 777.032759][T15497] usb 5-1: config 0 descriptor?? [ 777.038753][T15949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 777.245099][T15949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 777.252548][T15497] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 777.307112][T15970] FAULT_INJECTION: forcing a failure. [ 777.307112][T15970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.313554][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.3.2426 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.313575][T15970] Tainted: [L]=SOFTLOCKUP [ 777.313579][T15970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 777.313586][T15970] Call Trace: [ 777.313591][T15970] [ 777.313597][T15970] dump_stack_lvl+0x100/0x190 [ 777.313621][T15970] should_fail_ex.cold+0x5/0xa [ 777.313638][T15970] _copy_from_user+0x2e/0xd0 [ 777.313654][T15970] get_compat_msghdr+0xb3/0x4b0 [ 777.313674][T15970] ? _parse_integer_limit+0x17f/0x1d0 [ 777.313693][T15970] ? __pfx_get_compat_msghdr+0x10/0x10 [ 777.313713][T15970] ? _kstrtoull+0x13c/0x1f0 [ 777.313732][T15970] ? __pfx__kstrtoull+0x10/0x10 [ 777.313752][T15970] ___sys_sendmsg+0x1b6/0x1e0 [ 777.313770][T15970] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.313786][T15970] ? __lock_acquire+0x4a5/0x2630 [ 777.313808][T15970] ? find_held_lock+0x2b/0x80 [ 777.313828][T15970] __sys_sendmmsg+0x2ff/0x430 [ 777.313842][T15970] ? __pfx___sys_sendmmsg+0x10/0x10 [ 777.313858][T15970] ? __fget_files+0x215/0x3d0 [ 777.313882][T15970] ? fput+0x79/0x100 [ 777.313897][T15970] ? ksys_write+0x1ac/0x250 [ 777.313909][T15970] ? __pfx_ksys_write+0x10/0x10 [ 777.313923][T15970] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 777.313942][T15970] ? lockdep_hardirqs_on+0x78/0x100 [ 777.313956][T15970] __do_fast_syscall_32+0xe3/0x8c0 [ 777.313971][T15970] do_fast_syscall_32+0x32/0x70 [ 777.313985][T15970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.314002][T15970] RIP: 0023:0xf70bef6c [ 777.314012][T15970] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 777.314023][T15970] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 777.314036][T15970] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 777.314043][T15970] RDX: 000000000000009f RSI: 0000000002000000 RDI: 0000000000000000 [ 777.314050][T15970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.314057][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.314064][T15970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.314078][T15970] [ 777.494790][T15974] syzkaller1: entered promiscuous mode [ 777.496883][T15974] syzkaller1: entered allmulticast mode [ 777.540090][ T54] usb 5-1: USB disconnect, device number 15 [ 777.779668][T15987] FAULT_INJECTION: forcing a failure. [ 777.779668][T15987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.784934][T15987] CPU: 1 UID: 0 PID: 15987 Comm: syz.2.2431 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.784961][T15987] Tainted: [L]=SOFTLOCKUP [ 777.784968][T15987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 777.784978][T15987] Call Trace: [ 777.784985][T15987] [ 777.784993][T15987] dump_stack_lvl+0x100/0x190 [ 777.785029][T15987] should_fail_ex.cold+0x5/0xa [ 777.785049][T15987] _copy_from_iter+0x1f4/0x1690 [ 777.785074][T15987] ? __asan_memset+0x23/0x50 [ 777.785099][T15987] ? __pfx__copy_from_iter+0x10/0x10 [ 777.785121][T15987] ? __pfx___alloc_skb+0x10/0x10 [ 777.785159][T15987] netlink_sendmsg+0x808/0xda0 [ 777.785182][T15987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.785203][T15987] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 777.785225][T15987] ____sys_sendmsg+0x9e1/0xb70 [ 777.785244][T15987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.785265][T15987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.785296][T15987] ___sys_sendmsg+0x190/0x1e0 [ 777.785319][T15987] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.785365][T15987] __sys_sendmsg+0x170/0x220 [ 777.785382][T15987] ? __pfx___sys_sendmsg+0x10/0x10 [ 777.785406][T15987] ? __pfx_ksys_write+0x10/0x10 [ 777.785428][T15987] __do_fast_syscall_32+0xe3/0x8c0 [ 777.785450][T15987] do_fast_syscall_32+0x32/0x70 [ 777.785469][T15987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.785491][T15987] RIP: 0023:0xf7f02f6c [ 777.785506][T15987] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 777.785522][T15987] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 777.785539][T15987] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800001c0 [ 777.785550][T15987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 777.785559][T15987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.785569][T15987] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 777.785578][T15987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.785598][T15987] [ 778.077311][T15998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.925937][T16023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.683787][T16039] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 780.639859][T16060] FAULT_INJECTION: forcing a failure. [ 780.639859][T16060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.646313][T16060] CPU: 2 UID: 0 PID: 16060 Comm: syz.0.2451 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.646336][T16060] Tainted: [L]=SOFTLOCKUP [ 780.646340][T16060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.646347][T16060] Call Trace: [ 780.646354][T16060] [ 780.646360][T16060] dump_stack_lvl+0x100/0x190 [ 780.646385][T16060] should_fail_ex.cold+0x5/0xa [ 780.646401][T16060] _copy_from_user+0x2e/0xd0 [ 780.646418][T16060] kstrtouint_from_user+0xd6/0x1d0 [ 780.646437][T16060] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 780.646456][T16060] ? __lock_acquire+0x4a5/0x2630 [ 780.646474][T16060] ? lock_acquire+0x1cf/0x380 [ 780.646493][T16060] proc_fail_nth_write+0x83/0x220 [ 780.646509][T16060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 780.646529][T16060] vfs_write+0x2aa/0x1070 [ 780.646542][T16060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 780.646558][T16060] ? __pfx_vfs_write+0x10/0x10 [ 780.646569][T16060] ? find_held_lock+0x2b/0x80 [ 780.646580][T16060] ? __fget_files+0x215/0x3d0 [ 780.646595][T16060] ? __fget_files+0x21f/0x3d0 [ 780.646610][T16060] ksys_write+0x12a/0x250 [ 780.646621][T16060] ? __pfx_ksys_write+0x10/0x10 [ 780.646636][T16060] do_int80_emulation+0x141/0x6b0 [ 780.646652][T16060] asm_int80_emulation+0x1a/0x20 [ 780.646665][T16060] RIP: 0023:0xf71a5cab [ 780.646675][T16060] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 780.646685][T16060] RSP: 002b:00000000f543c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 780.646697][T16060] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f543c5d0 [ 780.646704][T16060] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.646711][T16060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.646717][T16060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 780.646790][T16060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.646804][T16060] [ 780.715661][ C2] hpet_rtc_timer_reinit: 26 callbacks suppressed [ 780.715675][ C2] hpet: Lost 3 RTC interrupts [ 780.774108][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 780.778130][T16068] FAULT_INJECTION: forcing a failure. [ 780.778130][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 780.783324][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.783350][T16068] Tainted: [L]=SOFTLOCKUP [ 780.783358][T16068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.783368][T16068] Call Trace: [ 780.783374][T16068] [ 780.783380][T16068] dump_stack_lvl+0x100/0x190 [ 780.783415][T16068] should_fail_ex.cold+0x5/0xa [ 780.783437][T16068] should_failslab+0xc2/0x120 [ 780.783458][T16068] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 780.783486][T16068] ? __alloc_skb+0x140/0x710 [ 780.783518][T16068] __alloc_skb+0x140/0x710 [ 780.783543][T16068] ? __alloc_skb+0x5b7/0x710 [ 780.783567][T16068] ? __pfx___alloc_skb+0x10/0x10 [ 780.783599][T16068] rtmsg_ifa+0x16a/0x270 [ 780.783617][T16068] ? __pfx_rtmsg_ifa+0x10/0x10 [ 780.783643][T16068] __inet_del_ifa+0x3cb/0xf40 [ 780.783668][T16068] inetdev_event+0x3e1/0x17f0 [ 780.783690][T16068] ? ib_netdevice_event+0xfc/0x330 [ 780.783771][T16068] ? __pfx_inetdev_event+0x10/0x10 [ 780.783790][T16068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.783814][T16068] notifier_call_chain+0x99/0x420 [ 780.783844][T16068] call_netdevice_notifiers_info+0xbe/0x110 [ 780.783873][T16068] unregister_netdevice_many_notify+0x1208/0x2580 [ 780.783903][T16068] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 780.783924][T16068] ? unregister_netdevice_queue+0x22e/0x3c0 [ 780.783944][T16068] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 780.783969][T16068] rtnl_dellink+0x472/0xb40 [ 780.783995][T16068] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 780.784017][T16068] ? __pfx_rtnl_dellink+0x10/0x10 [ 780.784042][T16068] ? __lock_acquire+0x4a5/0x2630 [ 780.784105][T16068] ? __lock_acquire+0x4a5/0x2630 [ 780.784128][T16068] ? stack_trace_save+0x8e/0xc0 [ 780.784145][T16068] ? __pfx_stack_trace_save+0x10/0x10 [ 780.784172][T16068] ? find_held_lock+0x2b/0x80 [ 780.784190][T16068] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 780.784205][T16068] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 780.784224][T16068] ? __pfx_rtnl_dellink+0x10/0x10 [ 780.784250][T16068] rtnetlink_rcv_msg+0x95e/0xe90 [ 780.784269][T16068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 780.784292][T16068] ? __lock_acquire+0x4a5/0x2630 [ 780.784320][T16068] netlink_rcv_skb+0x159/0x420 [ 780.784341][T16068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 780.784360][T16068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 780.784387][T16068] ? netlink_deliver_tap+0x1ae/0xcc0 [ 780.784409][T16068] netlink_unicast+0x5aa/0x870 [ 780.784432][T16068] ? __pfx_netlink_unicast+0x10/0x10 [ 780.784478][T16068] netlink_sendmsg+0x8b0/0xda0 [ 780.784503][T16068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.784524][T16068] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 780.784548][T16068] ____sys_sendmsg+0x9e1/0xb70 [ 780.784569][T16068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.784589][T16068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.784622][T16068] ___sys_sendmsg+0x190/0x1e0 [ 780.784645][T16068] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.784697][T16068] __sys_sendmsg+0x170/0x220 [ 780.784716][T16068] ? __pfx___sys_sendmsg+0x10/0x10 [ 780.784741][T16068] ? __pfx_ksys_write+0x10/0x10 [ 780.784763][T16068] __do_fast_syscall_32+0xe3/0x8c0 [ 780.784786][T16068] do_fast_syscall_32+0x32/0x70 [ 780.784804][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.784823][T16068] RIP: 0023:0xf706ef6c [ 780.784835][T16068] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 780.784850][T16068] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 780.784871][T16068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 780.784881][T16068] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.784890][T16068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.784898][T16068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.784908][T16068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.784927][T16068] [ 781.675317][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'. [ 782.275507][T16086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.498128][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 782.697453][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 782.722891][T16094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 782.725276][T16094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 782.728700][T16094] vhci_hcd vhci_hcd.0: Device attached [ 782.979454][ T54] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 782.980195][ T5994] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 783.016998][T16101] siw: device registration error -23 [ 783.151064][ T54] usb 8-1: config 0 has no interfaces? [ 783.153440][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 783.157730][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.174734][ T54] usb 8-1: config 0 descriptor?? [ 783.348752][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.355478][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.361841][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.366068][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.372918][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.381776][T16095] vhci_hcd: connection closed [ 783.383000][ T4413] vhci_hcd vhci_hcd.3: stop threads [ 783.386991][ T54] usb 8-1: USB disconnect, device number 9 [ 783.389463][ T4413] vhci_hcd vhci_hcd.3: release socket [ 783.393328][ T4413] vhci_hcd vhci_hcd.3: disconnect device [ 783.407060][T16117] lo speed is unknown, defaulting to 1000 [ 783.449587][ T5994] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 783.561454][T16117] chnl_net:caif_netlink_parms(): no params data found [ 783.614945][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.617503][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.620910][T16117] bridge_slave_0: entered allmulticast mode [ 783.624750][T16117] bridge_slave_0: entered promiscuous mode [ 783.626544][T16134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2473'. [ 783.628562][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.633059][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.636537][T16117] bridge_slave_1: entered allmulticast mode [ 783.639626][T16117] bridge_slave_1: entered promiscuous mode [ 783.660014][T16117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.667839][T16117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.688307][T16117] team0: Port device team_slave_0 added [ 783.692100][T16117] team0: Port device team_slave_1 added [ 783.709864][T16117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.712795][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.721718][T16117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.726480][T16139] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2475'. [ 783.731758][T16117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.735950][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.746552][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.774702][T16117] hsr_slave_0: entered promiscuous mode [ 783.777207][T16117] hsr_slave_1: entered promiscuous mode [ 783.781393][T16117] debugfs: 'hsr0' already exists in 'hsr' [ 783.783672][T16117] Cannot create hsr debugfs directory [ 783.949756][T16141] ALSA: mixer_oss: invalid OSS volume '' [ 784.255998][T16117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 784.262500][T16117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.272679][T16117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.279818][T16117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.311361][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.313733][T16117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.318373][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.320773][T16117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.385587][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.413600][ T596] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.417983][ T596] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.426273][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.438035][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.440545][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.447613][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.450230][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.611038][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.644934][T16117] veth0_vlan: entered promiscuous mode [ 784.653070][T16117] veth1_vlan: entered promiscuous mode [ 784.673279][T16117] veth0_macvtap: entered promiscuous mode [ 784.677510][T16117] veth1_macvtap: entered promiscuous mode [ 784.688065][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.695906][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.703841][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.707109][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.714244][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.718819][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.754147][ T596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.756843][ T596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.775400][ T596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.778969][ T596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.784075][T16162] FAULT_INJECTION: forcing a failure. [ 784.784075][T16162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.788321][T16162] CPU: 3 UID: 0 PID: 16162 Comm: syz.2.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.788350][T16162] Tainted: [L]=SOFTLOCKUP [ 784.788356][T16162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.788366][T16162] Call Trace: [ 784.788373][T16162] [ 784.788381][T16162] dump_stack_lvl+0x100/0x190 [ 784.788414][T16162] should_fail_ex.cold+0x5/0xa [ 784.788457][T16162] strncpy_from_user+0x3b/0x2d0 [ 784.788485][T16162] do_getname+0x78/0x390 [ 784.788510][T16162] user_path_at+0x26/0x60 [ 784.788522][T16162] __ia32_sys_mount+0x1fb/0x310 [ 784.788537][T16162] ? __pfx___ia32_sys_mount+0x10/0x10 [ 784.788555][T16162] __do_fast_syscall_32+0xe3/0x8c0 [ 784.788571][T16162] do_fast_syscall_32+0x32/0x70 [ 784.788584][T16162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.788599][T16162] RIP: 0023:0xf7f02f6c [ 784.788609][T16162] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 784.788620][T16162] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 784.788631][T16162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 784.788639][T16162] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000080000300 [ 784.788645][T16162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.788652][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.788659][T16162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.788672][T16162] [ 785.059970][T16173] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2483'. [ 785.097619][T16178] trusted_key: syz.3.2476 sent an empty control message without MSG_MORE. [ 785.234135][T16192] 9p: Bad value for 'wfdno' [ 785.250616][T16194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2485'. [ 785.259077][T16196] binder: 16195:16196 ioctl c0306201 80000080 returned -14 [ 785.377253][T16200] FAULT_INJECTION: forcing a failure. [ 785.377253][T16200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.381755][T16200] CPU: 2 UID: 0 PID: 16200 Comm: syz.2.2489 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.381775][T16200] Tainted: [L]=SOFTLOCKUP [ 785.381780][T16200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 785.381787][T16200] Call Trace: [ 785.381793][T16200] [ 785.381799][T16200] dump_stack_lvl+0x100/0x190 [ 785.381823][T16200] should_fail_ex.cold+0x5/0xa [ 785.381839][T16200] _copy_from_user+0x2e/0xd0 [ 785.381857][T16200] memdup_user+0x6b/0xe0 [ 785.381870][T16200] vmci_host_unlocked_ioctl+0x13f5/0x2070 [ 785.381887][T16200] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 785.381905][T16200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.381919][T16200] ? do_vfs_ioctl+0x226/0x13e0 [ 785.381937][T16200] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 785.381959][T16200] ? find_held_lock+0x2b/0x80 [ 785.381972][T16200] ? hook_file_ioctl_common+0x146/0x410 [ 785.381991][T16200] ? __fget_files+0x21f/0x3d0 [ 785.382005][T16200] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 785.382019][T16200] compat_ptr_ioctl+0x6e/0xa0 [ 785.382036][T16200] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 785.382054][T16200] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 785.382074][T16200] __do_fast_syscall_32+0xe3/0x8c0 [ 785.382096][T16200] do_fast_syscall_32+0x32/0x70 [ 785.382110][T16200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.382127][T16200] RIP: 0023:0xf7f02f6c [ 785.382138][T16200] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 785.382150][T16200] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 785.382163][T16200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ab [ 785.382170][T16200] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 785.382177][T16200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 785.382184][T16200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 785.382191][T16200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.382205][T16200] [ 785.459122][ C2] hpet: Lost 3 RTC interrupts [ 785.479510][ T5962] Bluetooth: hci0: command tx timeout [ 785.499699][T16204] overlayfs: upper fs does not support file handles, falling back to index=off. [ 785.564673][T16208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 785.945910][T16216] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.392299][T16216] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.686416][T16222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.772327][T16216] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.901948][T16216] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.216242][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.225889][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.232793][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.238197][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.308674][T16231] netlink: 'syz.0.2499': attribute type 3 has an invalid length. [ 787.311678][T16231] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 787.314621][T16231] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2499'. [ 787.559426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 787.679433][ T5962] Bluetooth: hci0: command tx timeout [ 788.394567][T16257] ptrace attach of ""[16265] was attempted by "/syz-executor exec"[16257] [ 788.410624][T16267] FAULT_INJECTION: forcing a failure. [ 788.410624][T16267] name failslab, interval 1, probability 0, space 0, times 0 [ 788.415249][T16267] CPU: 2 UID: 0 PID: 16267 Comm: syz.0.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.415269][T16267] Tainted: [L]=SOFTLOCKUP [ 788.415273][T16267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 788.415280][T16267] Call Trace: [ 788.415285][T16267] [ 788.415290][T16267] dump_stack_lvl+0x100/0x190 [ 788.415313][T16267] should_fail_ex.cold+0x5/0xa [ 788.415328][T16267] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 788.415345][T16267] should_failslab+0xc2/0x120 [ 788.415358][T16267] __kmalloc_noprof+0xe0/0x850 [ 788.415377][T16267] ? rcu_is_watching+0x12/0xc0 [ 788.415398][T16267] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 788.415416][T16267] genl_family_rcv_msg_doit+0xc7/0x300 [ 788.415432][T16267] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.415447][T16267] ? genl_get_cmd+0x3ef/0x720 [ 788.415464][T16267] ? bpf_lsm_capable+0x9/0x10 [ 788.415477][T16267] ? security_capable+0x80/0x260 [ 788.415492][T16267] genl_rcv_msg+0x560/0x800 [ 788.415508][T16267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.415523][T16267] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 788.415540][T16267] ? __pfx_nl802154_new_interface+0x10/0x10 [ 788.415555][T16267] ? __pfx_nl802154_post_doit+0x10/0x10 [ 788.415571][T16267] ? __lock_acquire+0x4a5/0x2630 [ 788.415589][T16267] netlink_rcv_skb+0x159/0x420 [ 788.415602][T16267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.415617][T16267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.415635][T16267] ? netlink_deliver_tap+0x1ae/0xcc0 [ 788.415649][T16267] genl_rcv+0x28/0x40 [ 788.415662][T16267] netlink_unicast+0x5aa/0x870 [ 788.415676][T16267] ? __pfx_netlink_unicast+0x10/0x10 [ 788.415694][T16267] netlink_sendmsg+0x8b0/0xda0 [ 788.415709][T16267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.415724][T16267] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 788.415739][T16267] ____sys_sendmsg+0x9e1/0xb70 [ 788.415753][T16267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.415767][T16267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.415792][T16267] ___sys_sendmsg+0x190/0x1e0 [ 788.415808][T16267] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.415840][T16267] __sys_sendmsg+0x170/0x220 [ 788.415852][T16267] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.415867][T16267] ? __pfx_ksys_write+0x10/0x10 [ 788.415883][T16267] __do_fast_syscall_32+0xe3/0x8c0 [ 788.415898][T16267] do_fast_syscall_32+0x32/0x70 [ 788.415911][T16267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.415926][T16267] RIP: 0023:0xf706ef6c [ 788.415936][T16267] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 788.415947][T16267] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 788.415958][T16267] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 788.415965][T16267] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.415971][T16267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.415978][T16267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.415984][T16267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.415998][T16267] [ 788.520625][ C2] hpet: Lost 5 RTC interrupts [ 788.781107][T16283] FAULT_INJECTION: forcing a failure. [ 788.781107][T16283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.793886][T16283] CPU: 3 UID: 0 PID: 16283 Comm: syz.2.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.793908][T16283] Tainted: [L]=SOFTLOCKUP [ 788.793912][T16283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 788.793919][T16283] Call Trace: [ 788.793924][T16283] [ 788.793930][T16283] dump_stack_lvl+0x100/0x190 [ 788.793964][T16283] should_fail_ex.cold+0x5/0xa [ 788.793982][T16283] _copy_from_iter+0x1f4/0x1690 [ 788.794001][T16283] ? __asan_memset+0x23/0x50 [ 788.794021][T16283] ? __pfx__copy_from_iter+0x10/0x10 [ 788.794037][T16283] ? __pfx___alloc_skb+0x10/0x10 [ 788.794062][T16283] netlink_sendmsg+0x808/0xda0 [ 788.794079][T16283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.794094][T16283] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 788.794109][T16283] ____sys_sendmsg+0x9e1/0xb70 [ 788.794124][T16283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.794138][T16283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.794159][T16283] ___sys_sendmsg+0x190/0x1e0 [ 788.794175][T16283] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.794210][T16283] __sys_sendmsg+0x170/0x220 [ 788.794223][T16283] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.794239][T16283] ? __pfx_ksys_write+0x10/0x10 [ 788.794254][T16283] __do_fast_syscall_32+0xe3/0x8c0 [ 788.794271][T16283] do_fast_syscall_32+0x32/0x70 [ 788.794285][T16283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.794300][T16283] RIP: 0023:0xf7f02f6c [ 788.794311][T16283] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 788.794323][T16283] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 788.794335][T16283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 788.794342][T16283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.794350][T16283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.794356][T16283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 788.794363][T16283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.794378][T16283] [ 789.156465][T16304] loop6: detected capacity change from 0 to 2640 [ 789.159942][T16304] buffer_io_error: 671 callbacks suppressed [ 789.159954][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.164492][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.167304][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.170283][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.173085][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.175740][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.178276][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.181055][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.183555][T16304] ldm_validate_partition_table(): Disk read failed. [ 789.185721][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.188431][T16304] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.191919][T16304] Dev loop6: unable to read RDB block 0 [ 789.193878][T16304] loop6: unable to read partition table [ 789.195820][T16304] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 789.719469][ T5962] Bluetooth: hci0: command tx timeout [ 789.892016][ T40] audit: type=1326 audit(1775587641.829:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.0.2525" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x0 [ 790.164322][ T40] audit: type=1326 audit(1775587642.099:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16316 comm="syz.3.2526" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 791.107049][T16328] binder: 16324:16328 ioctl c0306201 0 returned -14 [ 791.229570][T16328] hid-generic 0003:0627:0001.0001: pid 16328 passed too short report [ 791.309083][T16333] 9pnet_virtio: no channels available for device ./bus [ 791.809597][ T5962] Bluetooth: hci0: command tx timeout [ 792.166114][ T40] audit: type=1326 audit(1775587644.099:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16344 comm="syz.3.2533" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 792.853203][ T40] audit: type=1326 audit(1775587644.789:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16353 comm="syz.1.2536" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f38f6c code=0x0 [ 793.656700][T16365] veth1_to_hsr: entered allmulticast mode [ 794.329478][ T40] audit: type=1326 audit(1775587646.179:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.2.2535" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02f6c code=0x0 [ 794.855565][T16374] 9pnet_virtio: no channels available for device ./bus [ 795.383240][T16382] hid-generic 0003:0627:0001.0001: pid 16382 passed too short report [ 796.340582][ T40] audit: type=1326 audit(1775587648.059:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.348543][ T40] audit: type=1326 audit(1775587648.059:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.369413][ T40] audit: type=1326 audit(1775587648.069:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.389385][ T40] audit: type=1326 audit(1775587648.069:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.397186][ T40] audit: type=1326 audit(1775587648.069:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.419626][ T40] audit: type=1326 audit(1775587648.069:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.427898][ T40] audit: type=1326 audit(1775587648.079:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.435835][ T40] audit: type=1326 audit(1775587648.079:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.443465][ T40] audit: type=1326 audit(1775587648.089:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.2543" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 796.874907][T16391] loop6: detected capacity change from 0 to 2640 [ 796.878172][T14805] buffer_io_error: 11 callbacks suppressed [ 796.878183][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.885412][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.890308][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.894232][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.899063][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.902934][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.906540][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.911198][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.915074][T14805] ldm_validate_partition_table(): Disk read failed. [ 796.918472][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.922922][T14805] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.926857][T14805] Dev loop6: unable to read RDB block 0 [ 797.379475][T14805] loop6: unable to read partition table [ 797.856871][T16391] ldm_validate_partition_table(): Disk read failed. [ 797.859877][T16391] Dev loop6: unable to read RDB block 0 [ 797.862417][T16391] loop6: unable to read partition table [ 797.865100][T16391] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 799.448827][T16401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 799.451188][T16401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 799.455282][T16401] vhci_hcd vhci_hcd.0: Device attached [ 799.464137][T16401] random: crng reseeded on system resumption [ 799.479828][T16425] 9pnet_virtio: no channels available for device ./bus [ 799.544184][T16420] devpts: Unknown parameter 'trans' [ 799.551279][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 799.551294][ T40] audit: type=1326 audit(1775587651.479:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.579402][ T40] audit: type=1326 audit(1775587651.479:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.609378][ T40] audit: type=1326 audit(1775587651.479:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.616076][ T40] audit: type=1326 audit(1775587651.479:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.654242][ T40] audit: type=1326 audit(1775587651.479:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.689468][ T40] audit: type=1326 audit(1775587651.479:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.716988][ T40] audit: type=1326 audit(1775587651.479:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.729516][ T5306] usb 44-1: SetAddress Request (15) to port 0 [ 799.731753][ T5306] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 799.746692][ T40] audit: type=1326 audit(1775587651.479:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.777189][ T40] audit: type=1326 audit(1775587651.479:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 799.807709][ T40] audit: type=1326 audit(1775587651.479:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.2.2549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 800.174804][T16437] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 800.183603][T16437] netlink: 'syz.2.2561': attribute type 3 has an invalid length. [ 800.187072][T16437] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 800.194758][T16437] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2561'. [ 800.320150][T16441] hid-generic 0003:0627:0001.0001: pid 16441 passed too short report [ 800.445040][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.447789][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.511940][T16438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.517805][T16438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.680616][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.684018][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.687452][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.692104][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.921629][T16423] vhci_hcd: connection reset by peer [ 800.923890][ T46] vhci_hcd vhci_hcd.3: stop threads [ 800.925906][ T46] vhci_hcd vhci_hcd.3: release socket [ 800.927737][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 801.032553][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.039557][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.049527][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.055759][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.058730][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.182677][T16445] lo speed is unknown, defaulting to 1000 [ 801.282920][T16450] veth1_to_hsr: entered allmulticast mode [ 801.573433][T16445] chnl_net:caif_netlink_parms(): no params data found [ 801.605034][T16455] loop6: detected capacity change from 0 to 2640 [ 801.608640][T16455] ldm_validate_partition_table(): Disk read failed. [ 801.611097][T16455] Dev loop6: unable to read RDB block 0 [ 801.613312][T16455] loop6: unable to read partition table [ 801.615623][T16455] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 801.654144][T16445] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.656891][T16445] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.659846][T16445] bridge_slave_0: entered allmulticast mode [ 801.662957][T16445] bridge_slave_0: entered promiscuous mode [ 801.666980][T16445] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.669434][T16445] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.671841][T16445] bridge_slave_1: entered allmulticast mode [ 801.674668][T16445] bridge_slave_1: entered promiscuous mode [ 801.694318][T16445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.699687][T16445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.718334][T16445] team0: Port device team_slave_0 added [ 801.722203][T16445] team0: Port device team_slave_1 added [ 801.744600][T16445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.747675][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.757734][T16445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.764277][T16445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.766956][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.777251][T16445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.817733][T16445] hsr_slave_0: entered promiscuous mode [ 801.821069][T16445] hsr_slave_1: entered promiscuous mode [ 801.823851][T16445] debugfs: 'hsr0' already exists in 'hsr' [ 801.826343][T16445] Cannot create hsr debugfs directory [ 801.960863][T16445] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.035508][T16445] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.117517][T16445] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.201147][T16445] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.357219][T16445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.370730][T16445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.375025][T16445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.381023][T16445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.407911][T16469] 9pnet_virtio: no channels available for device ./bus [ 802.579732][T16445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.622791][T16445] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.661215][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.663862][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.731955][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.735101][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.064509][T16445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.155952][T16445] veth0_vlan: entered promiscuous mode [ 803.161213][ T5962] Bluetooth: hci3: command tx timeout [ 803.163593][T16445] veth1_vlan: entered promiscuous mode [ 803.229482][T16478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2559'. [ 803.342922][T16445] veth0_macvtap: entered promiscuous mode [ 803.349810][T16445] veth1_macvtap: entered promiscuous mode [ 803.361414][T16445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.368646][T16445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.377109][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.380564][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.384732][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.387538][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.435035][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.439475][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.476044][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.482158][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.759501][ T5306] usb 44-1: device descriptor read/8, error -110 [ 804.828112][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 804.833563][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.836719][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.842417][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 804.845292][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 804.910780][T16510] lo speed is unknown, defaulting to 1000 [ 805.060336][T16510] chnl_net:caif_netlink_parms(): no params data found [ 805.159468][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.162027][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.165257][T16510] bridge_slave_0: entered allmulticast mode [ 805.170462][ T5306] usb usb44-port1: attempt power cycle [ 805.173385][T16510] bridge_slave_0: entered promiscuous mode [ 805.177738][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.180212][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.182792][T16510] bridge_slave_1: entered allmulticast mode [ 805.185957][T16510] bridge_slave_1: entered promiscuous mode [ 805.256215][ T5962] Bluetooth: hci3: command tx timeout [ 805.302589][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.309162][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.468884][T16510] team0: Port device team_slave_0 added [ 805.474414][T16510] team0: Port device team_slave_1 added [ 805.491567][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.494026][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.502971][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.513856][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.518245][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.526662][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.562877][T16510] hsr_slave_0: entered promiscuous mode [ 805.566162][T16510] hsr_slave_1: entered promiscuous mode [ 805.569219][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 805.571510][T16510] Cannot create hsr debugfs directory [ 805.760564][ T5306] usb usb44-port1: unable to enumerate USB device [ 805.862235][ T596] erspan0: left allmulticast mode [ 805.863954][ T596] erspan0: left promiscuous mode [ 805.865717][ T596] bridge0: port 3(erspan0) entered disabled state [ 805.871272][ T596] bridge_slave_1: left allmulticast mode [ 805.873117][ T596] bridge_slave_1: left promiscuous mode [ 805.875060][ T596] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.879225][ T596] bridge_slave_0: left allmulticast mode [ 805.881852][ T596] bridge_slave_0: left promiscuous mode [ 805.884626][ T596] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.221393][ T596] bond4 (unregistering): (slave gretap1): Releasing active interface [ 806.402866][T16538] 9pnet_virtio: no channels available for device ./bus [ 806.573846][ T596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.577901][ T596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.583030][ T596] bond0 (unregistering): Released all slaves [ 806.588791][ T596] bond1 (unregistering): Released all slaves [ 806.601242][ T596] bond2 (unregistering): Released all slaves [ 806.609778][ T596] bond3 (unregistering): Released all slaves [ 806.617453][ T596] bond4 (unregistering): Released all slaves [ 806.783095][ T596] tipc: Left network mode [ 806.929903][ T5962] Bluetooth: hci1: command tx timeout [ 806.938885][T16549] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 806.941321][T16549] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 806.944011][T16549] vhci_hcd vhci_hcd.0: Device attached [ 806.951639][T16549] random: crng reseeded on system resumption [ 807.122502][T16510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 807.132449][T16510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 807.144145][T16510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 807.172754][T16510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 807.198737][T16565] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 807.204981][ T596] hsr_slave_0: left promiscuous mode [ 807.207295][ T596] hsr_slave_1: left promiscuous mode [ 807.219561][ T54] usb 42-1: SetAddress Request (86) to port 0 [ 807.221752][ T54] usb 42-1: new SuperSpeed USB device number 86 using vhci_hcd [ 807.329415][ T5962] Bluetooth: hci3: command tx timeout [ 807.344512][ T596] team0 (unregistering): Port device team_slave_1 removed [ 807.352762][ T596] team0 (unregistering): Port device team_slave_0 removed [ 807.416246][T16565] netlink: 'syz.3.2573': attribute type 3 has an invalid length. [ 807.420624][T16565] netlink: 'syz.3.2573': attribute type 1 has an invalid length. [ 807.423805][T16565] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2573'. [ 807.468950][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.485220][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.494508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.497239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.502633][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.505014][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.644621][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.674773][T16510] veth0_vlan: entered promiscuous mode [ 807.694222][T16510] veth1_vlan: entered promiscuous mode [ 807.712419][T16510] veth0_macvtap: entered promiscuous mode [ 807.717089][T16510] veth1_macvtap: entered promiscuous mode [ 807.727243][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.735501][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.742343][ T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.747031][ T152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.751148][ T152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.754212][T14044] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 807.757650][ T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.767896][ T596] IPVS: stop unused estimator thread 0... [ 807.807212][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.813741][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.826485][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.829031][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.919563][T14044] usb 6-1: Using ep0 maxpacket: 32 [ 808.159740][T16599] loop6: detected capacity change from 0 to 2640 [ 808.163075][T16599] buffer_io_error: 1359 callbacks suppressed [ 808.163091][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.171868][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.175294][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.178377][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.183659][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.187525][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.193421][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.197209][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.200982][T16599] ldm_validate_partition_table(): Disk read failed. [ 808.203367][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.206174][T16599] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.208747][T16599] Dev loop6: unable to read RDB block 0 [ 808.211389][T16599] loop6: unable to read partition table [ 808.213764][T16599] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 808.302516][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 808.302535][ T40] audit: type=1326 audit(1775587660.239:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16593 comm="syz.3.2583" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 808.377926][T14044] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 808.384859][T14044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.407811][T14044] usb 6-1: config 0 descriptor?? [ 808.441277][ T40] audit: type=1326 audit(1775587660.379:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.2.2582" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4f6c code=0x0 [ 808.455403][T14044] as10x_usb: device has been detected [ 808.458012][T14044] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 808.519270][T14044] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 808.615371][T16575] ------------[ cut here ]------------ [ 808.617232][T16575] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 808.617241][T16575] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x93d/0x1b90, CPU#2: syz.1.2574/16575 [ 808.622896][T16575] Modules linked in: [ 808.625308][T16575] CPU: 2 UID: 0 PID: 16575 Comm: syz.1.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.629717][T16575] Tainted: [L]=SOFTLOCKUP [ 808.631403][T16575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 808.635876][T16575] RIP: 0010:__mutex_lock+0x944/0x1b90 [ 808.638051][T16575] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 3e e0 49 05 85 f6 75 13 48 8d 3d c3 fc 4c 05 48 c7 c6 40 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 a5 26 53 [ 808.645992][T16575] RSP: 0018:ffffc90003e7fa20 EFLAGS: 00010246 [ 808.648425][T16575] RAX: 0000000000000003 RBX: ffff888023f32b60 RCX: 1ffffffff21b465c [ 808.651486][T16575] RDX: 0000000000000000 RSI: ffffffff8bafb140 RDI: ffffffff90dd4f70 [ 808.654687][T16575] RBP: ffffc90003e7fba0 R08: 0000000000000001 R09: 0000000000000000 [ 808.657480][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 808.660289][T16575] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 808.662836][T16575] FS: 0000000000000000(0000) GS:ffff888097340000(0063) knlGS:00000000f53f6b40 [ 808.666217][T16575] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 808.668365][T16575] CR2: 00000000343f7ff8 CR3: 000000006fe50000 CR4: 0000000000352ef0 [ 808.671188][T16575] Call Trace: [ 808.672367][T16575] [ 808.673435][T16575] ? trace_contention_end+0x140/0x180 [ 808.675354][T16575] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.677254][T16575] ? __mutex_lock+0x26a/0x1b90 [ 808.678794][T16575] ? dmx_section_feed_start_filtering+0x56/0x660 [ 808.681417][T16575] ? __pfx___mutex_lock+0x10/0x10 [ 808.683040][T16575] ? dmx_section_feed_allocate_filter+0x392/0x480 [ 808.685130][T16575] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.686953][T16575] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.688718][T16575] dmx_section_feed_start_filtering+0x3a8/0x660 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 808.690838][T16575] dvb_dmxdev_filter_start+0x767/0xdd0 [ 808.693726][T16575] dvb_demux_do_ioctl+0xe64/0x1200 [ 808.696733][T16575] dvb_usercopy+0x167/0x340 [ 808.698444][T16575] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 808.700757][T16575] ? __pfx_dvb_usercopy+0x10/0x10 [ 808.702772][T16575] ? __fget_files+0x21f/0x3d0 [ 808.704689][T16575] dvb_demux_ioctl+0x29/0x40 [ 808.706575][T16575] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 808.708988][T16575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 808.711948][T16575] __do_fast_syscall_32+0xe3/0x8c0 [ 808.715613][T16575] do_fast_syscall_32+0x32/0x70 [ 808.717247][T16575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.719270][T16575] RIP: 0023:0xf7f38f6c [ 808.720728][T16575] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 808.727911][T16575] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 808.730739][T16575] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000403c6f2b [ 808.733280][T16575] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.735808][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.738331][T16575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 808.740893][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.743902][T16575] [ 808.744984][T16575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 808.747527][T16575] CPU: 2 UID: 0 PID: 16575 Comm: syz.1.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.751231][T16575] Tainted: [L]=SOFTLOCKUP [ 808.752633][T16575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 808.755827][T16575] Call Trace: [ 808.756938][T16575] [ 808.757904][T16575] dump_stack_lvl+0x100/0x190 [ 808.759466][T16575] vpanic+0x552/0x970 [ 808.760800][T16575] ? __pfx_vpanic+0x10/0x10 [ 808.762264][T16575] ? lock_release+0x263/0x320 [ 808.763940][T16575] panic+0xd1/0xe0 [ 808.765390][T16575] ? __pfx_panic+0x10/0x10 [ 808.767043][T16575] check_panic_on_warn.cold+0x19/0x34 [ 808.768940][T16575] ? __mutex_lock+0x93d/0x1b90 [ 808.770559][T16575] __warn.cold+0x191/0x348 [ 808.772074][T16575] __report_bug+0x296/0x3d0 [ 808.773577][T16575] ? __mutex_lock+0x93d/0x1b90 [ 808.775170][T16575] ? __pfx___report_bug+0x10/0x10 [ 808.776807][T16575] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 808.778929][T16575] ? register_lock_class+0x40/0x560 [ 808.780629][T16575] ? vmap_small_pages_range_noflush+0xc20/0xd50 [ 808.782637][T16575] report_bug_entry+0xe1/0x290 [ 808.784210][T16575] ? __mutex_lock+0x944/0x1b90 [ 808.785856][T16575] handle_bug+0x1cd/0x2a0 [ 808.787353][T16575] exc_invalid_op+0x17/0x50 [ 808.788907][T16575] asm_exc_invalid_op+0x1a/0x20 [ 808.790509][T16575] RIP: 0010:__mutex_lock+0x944/0x1b90 [ 808.792236][T16575] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 3e e0 49 05 85 f6 75 13 48 8d 3d c3 fc 4c 05 48 c7 c6 40 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 a5 26 53 [ 808.798791][T16575] RSP: 0018:ffffc90003e7fa20 EFLAGS: 00010246 [ 808.801317][T16575] RAX: 0000000000000003 RBX: ffff888023f32b60 RCX: 1ffffffff21b465c [ 808.804004][T16575] RDX: 0000000000000000 RSI: ffffffff8bafb140 RDI: ffffffff90dd4f70 [ 808.806559][T16575] RBP: ffffc90003e7fba0 R08: 0000000000000001 R09: 0000000000000000 [ 808.809068][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 808.811546][T16575] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 808.814060][T16575] ? trace_contention_end+0x140/0x180 [ 808.815882][T16575] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.817804][T16575] ? __mutex_lock+0x26a/0x1b90 [ 808.819438][T16575] ? dmx_section_feed_start_filtering+0x56/0x660 [ 808.821545][T16575] ? __pfx___mutex_lock+0x10/0x10 [ 808.823168][T16575] ? dmx_section_feed_allocate_filter+0x392/0x480 [ 808.825237][T16575] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.827023][T16575] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 808.828776][T16575] dmx_section_feed_start_filtering+0x3a8/0x660 [ 808.830813][T16575] dvb_dmxdev_filter_start+0x767/0xdd0 [ 808.832654][T16575] dvb_demux_do_ioctl+0xe64/0x1200 [ 808.834465][T16575] dvb_usercopy+0x167/0x340 [ 808.836063][T16575] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 808.837927][T16575] ? __pfx_dvb_usercopy+0x10/0x10 [ 808.839544][T16575] ? __fget_files+0x21f/0x3d0 [ 808.841073][T16575] dvb_demux_ioctl+0x29/0x40 [ 808.842556][T16575] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 808.844283][T16575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 808.846028][T16575] __do_fast_syscall_32+0xe3/0x8c0 [ 808.847674][T16575] do_fast_syscall_32+0x32/0x70 [ 808.849250][T16575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.851259][T16575] RIP: 0023:0xf7f38f6c [ 808.852573][T16575] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 808.859126][T16575] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 808.862638][T16575] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000403c6f2b [ 808.865456][T16575] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.868004][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.870503][T16575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 808.872999][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.875523][T16575] [ 808.877291][T16575] Kernel Offset: disabled [ 808.878672][T16575] Rebooting in 86400 seconds..