last executing test programs: 1m47.526003192s ago: executing program 0 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgget(0x1, 0x10c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200006f"], 0x48) sendmsg$nl_generic(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280040008000c0009800600cc00800a0000180002"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 1m47.466098796s ago: executing program 0 (id=113): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000900) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="80000200e180"], 0x28}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x1000000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1m47.442868867s ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000880)={0x10201, 0x4, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'pim6reg0\x00', 0x400}) r3 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0xe0ab20203e520a8, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@increfs]}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r4}], 0x1, &(0x7f0000000380), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100, 0x6}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@acquire]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x100000003}, @flat=@handle={0x73682a85, 0xa, 0x1, 0x3}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x203) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002ff6090027bd70fafcdb05000000cf6600001a80040004808ef508df83b439e0cedccf134400162972e644a8a25bfeb9e61e4d88410eb087a9c3b8d758b37b3a2686809524795c7383d1e1aea77e273865c0638625da0b64d94b911bc0064574c02e612319d0a8953e45212f54921baee48aa912d8f91e4b1a261791f7d06f570fa0ba5844f33b3d296c3f92610f02b6057829887ea44c540c62856990eb0f04dc6ba7e372f7cef32823d0ebe6c318c59344ea968b6abeb6417ff8fb91ef070a78616f9fb6e16aa251d54a824b866cfaaf78b3ae5167d11965cf5782ae23650e0fce83b6c25914c642ba1cdab2"], 0x1c}}, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs2/custom0\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 1m46.544902249s ago: executing program 0 (id=124): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0xa14000, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x4, 0x8}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001340)={0x0, 0x6486000}, 0x8) 1m46.473889355s ago: executing program 0 (id=126): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x0, 0xc9, 0x7}}}, 0x6) bind$x25(r2, &(0x7f0000000440), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642"], 0x97) 1m46.116318658s ago: executing program 0 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="40011caa83709f00a900000007000000000020010000000000000000000000000000000000000000000000000000000900"/69, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160007000000"], 0x140}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="f6b95400000000000027196f5bec", 0x0, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mknod$loop(0x0, 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001d40)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000001dc0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001e80)=0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB="180000000514110025bd7000fcdbdf2508001d"], 0x18}, 0x1, 0x0, 0x0, 0x40040800}, 0x48000) syz_open_dev$sndmidi(&(0x7f0000001f80), 0x2, 0x4a102) writev(r0, &(0x7f0000001fc0)=[{&(0x7f0000002000)="94", 0x1}, {0x0}], 0x2) mremap(&(0x7f0000251000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000711000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x0, 0xb}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004868}, 0x28044014) 1m46.088073235s ago: executing program 32 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="40011caa83709f00a900000007000000000020010000000000000000000000000000000000000000000000000000000900"/69, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160007000000"], 0x140}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="f6b95400000000000027196f5bec", 0x0, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mknod$loop(0x0, 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001d40)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000001dc0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001e80)=0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB="180000000514110025bd7000fcdbdf2508001d"], 0x18}, 0x1, 0x0, 0x0, 0x40040800}, 0x48000) syz_open_dev$sndmidi(&(0x7f0000001f80), 0x2, 0x4a102) writev(r0, &(0x7f0000001fc0)=[{&(0x7f0000002000)="94", 0x1}, {0x0}], 0x2) mremap(&(0x7f0000251000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000711000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x0, 0xb}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004868}, 0x28044014) 5.584111195s ago: executing program 2 (id=969): r0 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000500)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000a80)={r0}, &(0x7f0000000400)=ANY=[@ANYBLOB="6589633d706b637331"], 0x0, 0x0) close(0x3) r1 = openat$zero(0xffffff9c, &(0x7f0000000bc0), 0x81, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000c00)=0xae70, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) mmap(&(0x7f0000816000/0x3000)=nil, 0x3000, 0x1000000, 0x810, 0xffffffffffffffff, 0xf014d000) r3 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000cc0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000d00)='./file0\x00', 0x1000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000c40)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast2}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x5032}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) writev(r9, &(0x7f0000000b40)=[{&(0x7f0000000b80)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x24000000, &(0x7f0000000340)={0x11, 0x8100, r11, 0x1, 0x86, 0x6, @broadcast}, 0x14) 5.454637561s ago: executing program 2 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$binderfs_log(0xffffff9c, &(0x7f0000000680)='./binderfs/binder_logs/state_hashed\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000540)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x400000, 0x1, 0x6040000}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r7, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="03", 0x12}], 0x1}, 0x20004014) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000580)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x1a, &(0x7f00000005c0)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4100, 0x67, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) 5.235553563s ago: executing program 2 (id=973): r0 = socket$packet(0x11, 0x2, 0x300) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) (fail_nth: 6) 5.234945453s ago: executing program 2 (id=974): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="40011caa83709f00a900000007000000000020010000000000000000000000000000000000000000000000000000000900"/69, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160007000000"], 0x140}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="f6b95400000000000027196f5bec", 0x0, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mknod$loop(0x0, 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001d40)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000001dc0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001e80)=0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB="180000000514110025bd7000fcdbdf2508001d"], 0x18}, 0x1, 0x0, 0x0, 0x40040800}, 0x48000) syz_open_dev$sndmidi(&(0x7f0000001f80), 0x2, 0x4a102) writev(r0, &(0x7f0000001fc0)=[{&(0x7f0000002000)="94", 0x1}, {0x0}], 0x2) mremap(&(0x7f0000251000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000711000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff16}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x0, 0xb}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004868}, 0x28044014) 5.067031076s ago: executing program 2 (id=976): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x88, 0x43, 0x1, 0x0, 0x0, {0xff, 0x1}, [@nested={0x26, 0x50, 0x0, 0x1, [@generic="cdb172a6c82e617333f0c8bc2c7be87eb5fca31c40043741e9cf8740001e52aef66d"]}, @generic="8a5783cebe75d0f81b40354c26ed6b7ca49df14afa5ae43441d837ebff0aa6e7652315a223ff83d322a88c958a39aa66227a4d759dd12214a375bd08ded194a67188", @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x88}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r5, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000040)={0x5, {0x10, 0x400, 0x6, 0x0, 0xa}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000590000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.325764604s ago: executing program 3 (id=1004): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa, 0x3]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000200)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) (async) r5 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) (async) fchdir(r6) open(&(0x7f0000000400)='./bus\x00', 0x1031c2, 0x0) (async) r7 = open(&(0x7f0000000400)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) (async) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x321dc2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000100)="22cff58056ac", 0x84dc, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f00000001c0), 0x2, 0x1) (async) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f00000001c0), 0x2, 0x1) 2.107680107s ago: executing program 4 (id=1007): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x181) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2bdd, "03e2ff0008000200000003004000"}}}]}, 0x48}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r1, 0x8, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0xf, 0x18, "9a091b62b8f9e790d0550cf30826a6c7c8661d4cd92ed6b279fe0a3e7a076fd189c3f9b70f9f1d9be4314e55227849d589f54042402fbd2be57a9d1eead28016", "4693851c77371e0a9468bb1034cb66b19cfe41fc27512bfc38e79e653d1b110c9bfb94dc6b8a4b71e199e3d0439b7cafb1232f616115fc66fc7d7d3f380214f1", "8e01b3705cd1be605961ad7036e10398b196b9b906c0a50f272b60535d8d6464", [0x2, 0x5]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000440)={0x3, 0x2}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f00000004c0)=r4}, 0x1e) syz_open_dev$dri(&(0x7f0000000500), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0xc, {{0x12, 0x4, 0x0, 0x10, 0x48, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0xc3, [@loopback, @empty, @private=0xa010101, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0x3, [{@private=0xa010100, 0x3ff}, {@private=0xa010102, 0x1}, {@multicast2, 0x2}]}, @ra={0x94, 0x4}]}}}}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000740)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000007c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000800)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.004597731s ago: executing program 4 (id=1008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0xb}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000013280)='./proc\x00', 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[], 0x15) mount(0x0, &(0x7f00000132c0)='./proc\x00', &(0x7f0000013300)='proc\x00', 0x2c00a2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000013340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x809d38c4dfae75d3, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000004c0)=ANY=[@ANYBLOB="12015002000000403512128040000102030109026900030107f008080b0101010b2005090400000001012000092401060003090007090401000001022000090401010101022000090501090800000c3a0825018318fd1dd2d686e4df53596f0c020009040200"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000540)=@e={0xff, 0xb, 0x8, 0x9, @SEQ_CONTROLLER=0xfe, 0x6, 0x0, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x500, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x70}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/vhci\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/mapper/control\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000a00)='./dev/mapper/control\x00', &(0x7f0000000a40), 0x8000, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockname(0xffffffffffffffff, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x428}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x102) write(r7, &(0x7f00000007c0)='252', 0x3) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000840)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb88a845000014aaaa040000000000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) 1.999662915s ago: executing program 2 (id=1016): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0xc}) ftruncate(0xffffffffffffffff, 0xc17a) io_setup(0xa, &(0x7f0000000380)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0)=0x3, 0x1) syz_clone3(&(0x7f0000000400)={0x23800000, &(0x7f0000000480)=0xffffffffffffffff, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r5, 0x1}, 0x8) mremap(&(0x7f0000ad7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000331000/0x2000)=nil) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) setresuid(0x0, 0xee00, 0x0) unshare(0x22020600) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="0ef7d38b7edfc73ca89affdccd21386bea87541b498971edd6ed82445cb30986140f86126db8b485a4faad226487aebb86b6141cc799c167d1432ed2f5df2608248b34632d386f800d918bc2ffe63406d42167a9d00e179015dd77079ee15a93a632263f25f976b305aa0d55e3966e5c556b9913d32c9d78d84a5343b05a092191ea0d5da854ffffb9cf88e5dcd08e0750887974496151a3d6f7d1daed8ffa17783d38c9a5531e8e2d508a1863594279", 0xb0}, {&(0x7f0000000100)="1cf33977db4807666d25abd610722cd4cfb1cf9724221048db28907885b1c2f8047937d4f3fe0cd234f61ef90fc26bbee993d0e3276d4176e3249ca86286e4eab51bb1be28761719868166b4502b", 0x4e}], 0x2, 0xbc36, 0x6f87) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x6], 0x5}, 0xfffffffffffffe1c) 1.36474092s ago: executing program 3 (id=1012): add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000500)="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", 0x559, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) r1 = openat$zero(0xffffff9c, &(0x7f0000000bc0), 0x81, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000c00)=0xae70, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) mmap(&(0x7f0000816000/0x3000)=nil, 0x3000, 0x1000000, 0x810, 0xffffffffffffffff, 0xf014d000) r3 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000cc0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000d00)='./file0\x00', 0x1000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000c40)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast2}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x5032}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) writev(r9, &(0x7f0000000b40)=[{&(0x7f0000000b80)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x24000000, &(0x7f0000000340)={0x11, 0x8100, r11, 0x1, 0x86, 0x6, @broadcast}, 0x14) 1.223417408s ago: executing program 3 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="40011caa83709f00a900000007000000000020010000000000000000000000000000000000000000000000000000000900"/69, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160007000000"], 0x140}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="f6b95400000000000027196f5bec", 0x0, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mknod$loop(0x0, 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001d40)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000001dc0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001e80)=0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB="180000000514110025bd7000fcdbdf2508001d"], 0x18}, 0x1, 0x0, 0x0, 0x40040800}, 0x48000) syz_open_dev$sndmidi(&(0x7f0000001f80), 0x2, 0x4a102) writev(0xffffffffffffffff, &(0x7f0000001fc0)=[{&(0x7f0000002000)="94", 0x1}, {0x0}], 0x2) mremap(&(0x7f0000251000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000711000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff16}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x0, 0xb}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004868}, 0x28044014) 1.165155543s ago: executing program 1 (id=1014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000940)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000009c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000a00)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x101, 0x0) epoll_create1(0x0) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x20002019}) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x20002019}) 1.11876941s ago: executing program 4 (id=1015): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, 0x0) 1.118244506s ago: executing program 1 (id=1017): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x4, @pix_mp={0xfffffff9, 0xe, 0x80c0801, 0x6, 0x4, [{0xf62, 0x80000001}, {0xbc05, 0x7}, {0x4, 0x7fff}, {0x2, 0x1}, {0x9, 0x8}, {}, {0x80005, 0x100}, {0x1, 0x10000235}], 0x1, 0x3, 0x4, 0x0, 0x6}}) (fail_nth: 6) 1.117473851s ago: executing program 3 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0xffffffff) ioctl(r2, 0x4010744d, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b5000001267ecff000000000000000000001122334411223344"], 0x0) nanosleep(&(0x7f0000000240)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca409f00180000000000000000010000010000000000000000cc06c45f282223707ce98890ba87343a9d0a7f386651"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x4, 0xa, 0x6, {r7, r8/1000+60000}, {0x0, 0x2710}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x37, 0x3, 0x0, 0x0, "25fa23642e0e28e82958827467fa17cab2c6db2a0884b7b7a60d6ae4f65dbb1caa01dbb2c74fd72ff61e70c42a22449d862a38c584ee00f4be393952c2ec7252"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4000890) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000006c0)) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) 1.068984601s ago: executing program 4 (id=1019): r0 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000500)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000a80)={r0}, &(0x7f0000000400)=ANY=[@ANYBLOB="6589633d706b637331"], 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000c00)=0xae70, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) mmap(&(0x7f0000816000/0x3000)=nil, 0x3000, 0x1000000, 0x810, 0xffffffffffffffff, 0xf014d000) r3 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000cc0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000d00)='./file0\x00', 0x1000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000c40)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast2}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x5032}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) writev(r9, &(0x7f0000000b40)=[{&(0x7f0000000b80)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x24000000, &(0x7f0000000340)={0x11, 0x8100, r11, 0x1, 0x86, 0x6, @broadcast}, 0x14) 190.89896ms ago: executing program 3 (id=1020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0xb38f, 0x846, 0x3, 0xb, 0xab, 0x25, 0x1, 0x9, 0x1, 0x8, 0x8, 0x6, 0x533b, 0xd7f, 0x5], 0xc000, 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0x0, 0x10, &(0x7f0000001580), 0x143}, 0x48) r6 = syz_io_uring_setup(0x10, &(0x7f00000015c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001640)=0x0, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000001700)=[r5], 0x1) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001740)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000880)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x28, 0x40, 0x7, 0x8, 0x41, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0xd000, [0x3, 0xffffffffffffffff, 0x40000000001]}) 189.454449ms ago: executing program 4 (id=1028): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, 0x0) 188.586932ms ago: executing program 1 (id=1021): mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x600000f, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bind$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) 168.668377ms ago: executing program 4 (id=1022): keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000a80), &(0x7f0000000400)=ANY=[@ANYBLOB="6589633d706b637331"], 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) r1 = openat$zero(0xffffff9c, &(0x7f0000000bc0), 0x81, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000c00)=0xae70, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) mmap(&(0x7f0000816000/0x3000)=nil, 0x3000, 0x1000000, 0x810, 0xffffffffffffffff, 0xf014d000) r3 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000cc0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000d00)='./file0\x00', 0x1000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000c40)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast2}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x5032}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) writev(r9, &(0x7f0000000b40)=[{&(0x7f0000000b80)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x24000000, &(0x7f0000000340)={0x11, 0x8100, r11, 0x1, 0x86, 0x6, @broadcast}, 0x14) 115.921918ms ago: executing program 1 (id=1023): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x4, @pix_mp={0xfffffff9, 0xe, 0x80c0801, 0x6, 0x4, [{0xf62, 0x80000001}, {0xbc05, 0x7}, {0x4, 0x7fff}, {0x2, 0x1}, {0x9, 0x8}, {}, {0x80005, 0x500}, {0x1, 0x10000235}], 0x1, 0x3, 0x4, 0x0, 0x6}}) 115.116562ms ago: executing program 1 (id=1024): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, 0x41, 0x109, 0xffffffff, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000002c0)=0x22922, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000940)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000600)) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) (async) statfs(&(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)=""/241) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x100, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000606000400000000000900020073797a32000000000c00078008001240f9d10703050005000000000005000100060000000d000300686173683a6d616300"], 0x54}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000004440)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback}}}], 0x20}}], 0x1, 0x4004040) (async) ioctl$KVM_NMI(r7, 0xae9a) 55.756722ms ago: executing program 1 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000200)={0x1, 0x0, @pic={0x7f, 0x3, 0x2, 0x1, 0x9, 0x1, 0x7, 0x3, 0xd7, 0x2, 0x1, 0xff, 0x81, 0x8, 0x6d, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000480)='./sys\x00', 0x40, 0x10a) linkat(r2, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:04.0/remove/file0\x00', r3, &(0x7f00000004c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) init_module(0x0, 0xa99, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 3 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/141, 0x8d}], 0x1, 0x8000, 0xfffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x89e1, &(0x7f0000000340)='dummy0') ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000180)={0x0, 0x5}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): 37][ T7859] ? __pfx_move_vma+0x10/0x10 [ 97.564966][ T7859] ? security_mmap_addr+0x71/0x1e0 [ 97.564982][ T7859] ? __get_unmapped_area+0x255/0x3e0 [ 97.565000][ T7859] ? vrm_set_new_addr+0x1f5/0x2a0 [ 97.565014][ T7859] mremap_to+0x234/0x4c0 [ 97.565027][ T7859] ? __pfx_mremap_to+0x10/0x10 [ 97.565040][ T7859] ? mas_walk+0x260/0x310 [ 97.565056][ T7859] __do_sys_mremap+0x9b7/0x1780 [ 97.565074][ T7859] ? __pfx___do_sys_mremap+0x10/0x10 [ 97.565090][ T7859] ? rcu_read_lock_any_held+0x6a/0x90 [ 97.565105][ T7859] ? ksys_write+0x190/0x250 [ 97.565123][ T7859] ? __mutex_unlock_slowpath+0x35d/0x930 [ 97.565157][ T7859] ? fput+0x7c/0x100 [ 97.565174][ T7859] ? __pfx_ksys_write+0x10/0x10 [ 97.565191][ T7859] __do_fast_syscall_32+0x13a/0x8b0 [ 97.565203][ T7859] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.565215][ T7859] do_fast_syscall_32+0x32/0x70 [ 97.565227][ T7859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.565241][ T7859] RIP: 0023:0xf740efec [ 97.565255][ T7859] Code: Unable to access opcode bytes at 0xf740efc2. [ 97.565260][ T7859] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3 [ 97.565271][ T7859] RAX: ffffffffffffffda RBX: 0000000080bfd000 RCX: 0000000000400000 [ 97.565278][ T7859] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 97.565285][ T7859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.565291][ T7859] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.565297][ T7859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.565311][ T7859] [ 97.634088][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 97.650278][ T7862] fuse: Bad value for 'fd' [ 97.771987][ T62] usb 7-1: USB disconnect, device number 4 [ 97.774221][ T62] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 97.774472][ T62] keyspan 7-1:1.0: device disconnected [ 100.297669][ T7873] ntfs3(nullb0): Primary boot signature is not NTFS. [ 100.298038][ T7873] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 100.501978][ T7883] 8021q: VLANs not supported on gre0 [ 100.563570][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 100.983101][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.225161][ T65] Bluetooth: hci1: SCO packet for unknown connection handle 768 [ 101.230774][ T62] Process accounting resumed [ 101.676251][ T7913] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 101.676380][ T7913] CIFS: Attempting to mount //127.0.0.1/test [ 101.678597][ T7913] CIFS: VFS: Error connecting to socket. Aborting operation. [ 101.678642][ T7913] CIFS: VFS: cifs_mount failed w/return code = -111 [ 102.813241][ T7951] netlink: 'syz.4.584': attribute type 12 has an invalid length. [ 103.291635][ T62] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 103.441597][ T62] usb 9-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 103.442401][ T62] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.442413][ T62] usb 9-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 103.442445][ T62] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 103.443938][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.443950][ T62] usb 9-1: Product: syz [ 103.443957][ T62] usb 9-1: Manufacturer: syz [ 103.443964][ T62] usb 9-1: SerialNumber: syz [ 103.561204][ T5131] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 103.672879][ T62] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.673736][ T62] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 103.676334][ T62] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.676521][ T62] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 103.678225][ T62] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.711673][ T5131] usb 7-1: Using ep0 maxpacket: 16 [ 103.712793][ T5131] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.716606][ T5131] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.716630][ T5131] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.716644][ T5131] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.716654][ T5131] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.716665][ T5131] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.719081][ T5131] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.719094][ T5131] usb 7-1: Manufacturer: syz [ 103.721840][ T5131] usb 7-1: config 0 descriptor?? [ 103.727058][ T62] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 103.732060][ T62] usb 9-1: USB disconnect, device number 3 [ 103.744030][ T7615] udevd[7615]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.991380][ T5131] rc_core: IR keymap rc-hauppauge not found [ 103.991398][ T5131] Registered IR keymap rc-empty [ 103.992153][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.021172][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.052920][ T5131] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 104.054947][ T5131] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 104.061945][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.091203][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.121230][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.141246][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.171267][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.191187][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.224120][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.241295][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.261313][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.290041][ T7980] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.290652][ T7980] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.293660][ T5131] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 104.297062][ T7981] hsr_slave_0: left promiscuous mode [ 104.300111][ T7981] hsr_slave_1: left promiscuous mode [ 104.322737][ T5131] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.322751][ T5131] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.326030][ T5131] usb 7-1: USB disconnect, device number 5 [ 104.774797][ T7997] FAULT_INJECTION: forcing a failure. [ 104.774797][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 104.774821][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.2.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.774836][ T7997] Tainted: [L]=SOFTLOCKUP [ 104.774840][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.774847][ T7997] Call Trace: [ 104.774851][ T7997] [ 104.774855][ T7997] dump_stack_lvl+0x100/0x190 [ 104.774875][ T7997] should_fail_ex.cold+0x5/0xa [ 104.774890][ T7997] should_failslab+0xc2/0x120 [ 104.774908][ T7997] __kmalloc_noprof+0xfc/0x840 [ 104.774935][ T7997] ? rcu_is_watching+0x13/0xc0 [ 104.774949][ T7997] ? tomoyo_realpath_from_path+0xb6/0x690 [ 104.774969][ T7997] tomoyo_realpath_from_path+0xb6/0x690 [ 104.774988][ T7997] tomoyo_path_number_perm+0x23c/0x580 [ 104.775002][ T7997] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.775016][ T7997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.775030][ T7997] ? get_pid_task+0x106/0x250 [ 104.775046][ T7997] ? __lock_acquire+0x5c0/0x1f40 [ 104.775070][ T7997] ? __fget_files+0x34/0x3d0 [ 104.775090][ T7997] ? find_held_lock+0x2b/0x80 [ 104.775103][ T7997] ? __fget_files+0x215/0x3d0 [ 104.775117][ T7997] ? hook_file_ioctl_common+0x140/0x440 [ 104.775131][ T7997] ? __fget_files+0x215/0x3d0 [ 104.775148][ T7997] ? __fget_files+0x21f/0x3d0 [ 104.775165][ T7997] security_file_ioctl_compat+0xd3/0x230 [ 104.775180][ T7997] __ia32_compat_sys_ioctl+0xc2/0x360 [ 104.775195][ T7997] __do_fast_syscall_32+0x13a/0x8b0 [ 104.775208][ T7997] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.775220][ T7997] do_fast_syscall_32+0x32/0x70 [ 104.775232][ T7997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.775246][ T7997] RIP: 0023:0xf73befec [ 104.775259][ T7997] Code: Unable to access opcode bytes at 0xf73befc2. [ 104.775264][ T7997] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 104.775275][ T7997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018aa06 [ 104.775282][ T7997] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.775288][ T7997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.775294][ T7997] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.775301][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.775315][ T7997] [ 104.775452][ T7997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.861433][ T5833] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 105.021254][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 105.023109][ T5833] usb 6-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=4c.61 [ 105.024048][ T5833] usb 6-1: config 4 has an invalid interface number: 248 but max is 0 [ 105.024060][ T5833] usb 6-1: config 4 has no interface number 0 [ 105.024082][ T5833] usb 6-1: config 4 interface 248 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 105.024095][ T5833] usb 6-1: config 4 interface 248 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 105.024108][ T5833] usb 6-1: config 4 interface 248 has no altsetting 0 [ 105.026500][ T5833] usb 6-1: Dual-Role OTG device on HNP port [ 105.029082][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.029100][ T5833] usb 6-1: Product: 㰵薉뫀쥒åªä½±Õºî§»íŽî¦—쳚떘饦꽂ê³á‘¶è‹žè¬¬ä©¥â–‚ತ‑鴜ꎃ⠲걔ﺔ窗⣖ﳔ뺎쪵護鴘篥頼娽Փヿ餕錶à­á‡¶á»´ë¬ƒí‘¶ä´˜æ´«ì³¨í€î›Žå‡çˆ–핽婔旭ꬢâ–蒯륓羬㗽僦ä›ë¾ î¼åŠŒâš„뎿⭱瘓æ…ᅧ敶Ἢͨ⟫⯔ᗇꀨ肙⃶è¹ä’挾踓抳ᛓ᠗섹î…ﴮ奶⪤禾銕꯫⻹ᥕáœä“놚ë·è­’ᴎ齪 [ 105.029125][ T5833] usb 6-1: Manufacturer: 㪔ïŽì»¬æ¼‰ê¬˜èº ã²í’ˆï—¯ï†¯îº¬èº¢ç‘‹êŠµï·¶ä¦¨ï•”Úâî»á„´æ°Ä±è”Ÿà´’曣ڼ퓾廼뮆트䊄Ꮉ牸幑䱭Ұ諌─蕢轹裮襨ᬛ⿣牎瓃ⶎⱓ⒖ﺼ傄挋椒èœïŽµé“§ë»Šæ” ì‹¢ë“‹ë¡¢à¬…ﴔ䊌㾱氚ೇᗊ樲ë è¿¼ì®ÊŒá«³ë£®êªŒà¥«Ø¥ï©­ê›«éŸ’ⷙ鞟뛶ä•é¼Žë‡¶ì¬ƒè–“漖ᴲ笨á…绩隋æ—骭䰞꽖텕潪 [ 105.029149][ T5833] usb 6-1: SerialNumber: Ј [ 105.216585][ T42] audit: type=1326 audit(1792387197.808:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7fc00000 [ 106.750692][ T8030] FAULT_INJECTION: forcing a failure. [ 106.750692][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 106.750725][ T8030] CPU: 2 UID: 0 PID: 8030 Comm: syz.2.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.750752][ T8030] Tainted: [L]=SOFTLOCKUP [ 106.750758][ T8030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.750768][ T8030] Call Trace: [ 106.750774][ T8030] [ 106.750781][ T8030] dump_stack_lvl+0x100/0x190 [ 106.750806][ T8030] should_fail_ex.cold+0x5/0xa [ 106.750826][ T8030] should_failslab+0xc2/0x120 [ 106.750852][ T8030] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.750877][ T8030] ? __anon_vma_prepare+0xae/0x690 [ 106.750897][ T8030] __anon_vma_prepare+0xae/0x690 [ 106.750913][ T8030] ? __pfx___pte_alloc+0x10/0x10 [ 106.750935][ T8030] __vmf_anon_prepare+0x11f/0x250 [ 106.750958][ T8030] do_anonymous_page+0x47d/0x2050 [ 106.750976][ T8030] ? find_held_lock+0x2b/0x80 [ 106.750993][ T8030] ? __pmd_alloc+0x3f6/0x950 [ 106.751023][ T8030] ? __pfx_do_anonymous_page+0x10/0x10 [ 106.751039][ T8030] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.751073][ T8030] ? _raw_spin_unlock+0x28/0x50 [ 106.751093][ T8030] ? __pmd_alloc+0x3fb/0x950 [ 106.751122][ T8030] __handle_mm_fault+0x1ff3/0x2f60 [ 106.751148][ T8030] ? __pfx___handle_mm_fault+0x10/0x10 [ 106.751166][ T8030] ? __pfx_mt_find+0x10/0x10 [ 106.751199][ T8030] ? find_vma+0xbf/0x140 [ 106.751221][ T8030] ? __pfx_find_vma+0x10/0x10 [ 106.751242][ T8030] handle_mm_fault+0x363/0xa20 [ 106.751264][ T8030] do_user_addr_fault+0x745/0x12f0 [ 106.751291][ T8030] exc_page_fault+0x6f/0xd0 [ 106.751315][ T8030] asm_exc_page_fault+0x26/0x30 [ 106.751331][ T8030] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 106.751348][ T8030] Code: 89 ee 48 89 ef e8 51 c9 e0 fc 4d 85 ff 75 26 e8 67 cf e0 fc 89 de 4c 89 e7 e8 5d 1c 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 41 cf e0 fc 48 89 d8 5b 5d 41 [ 106.751362][ T8030] RSP: 0018:ffffc90007eefda0 EFLAGS: 00050246 [ 106.751378][ T8030] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 106.751390][ T8030] RDX: 0000000000000001 RSI: ffffc90007eefdf8 RDI: 0000000080000640 [ 106.751402][ T8030] RBP: 0000000080000640 R08: 0000000000000000 R09: fffff52000fddfbf [ 106.751414][ T8030] R10: ffffc90007eefdff R11: 0000000000000000 R12: ffffc90007eefdf8 [ 106.751425][ T8030] R13: 0000000080000648 R14: 00007ffffffff000 R15: 0000000000000000 [ 106.751454][ T8030] put_old_timespec32+0xb4/0x120 [ 106.751480][ T8030] ? __pfx_put_old_timespec32+0x10/0x10 [ 106.751513][ T8030] __ia32_sys_clock_gettime32+0x1d3/0x270 [ 106.751538][ T8030] ? __pfx___ia32_sys_clock_gettime32+0x10/0x10 [ 106.751572][ T8030] __do_fast_syscall_32+0x13a/0x8b0 [ 106.751591][ T8030] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.751613][ T8030] do_fast_syscall_32+0x32/0x70 [ 106.751634][ T8030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.751654][ T8030] RIP: 0023:0xf73befec [ 106.751670][ T8030] Code: Unable to access opcode bytes at 0xf73befc2. [ 106.751676][ T8030] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000109 [ 106.751690][ T8030] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000640 [ 106.751699][ T8030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.751707][ T8030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.751716][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.751725][ T8030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.751747][ T8030] [ 107.327154][ T8044] fuse: Unknown parameter '00000000000000000000' [ 107.327281][ T8045] fuse: Unknown parameter '00000000000000000000' [ 107.932366][ T5833] option 6-1:4.248: GSM modem (1-port) converter detected [ 107.958813][ T5833] usb 6-1: USB disconnect, device number 16 [ 107.990272][ T5833] option 6-1:4.248: device disconnected [ 108.124470][ T8068] bond0: entered promiscuous mode [ 108.124487][ T8068] bond_slave_0: entered promiscuous mode [ 108.124612][ T8068] bond_slave_1: entered promiscuous mode [ 108.506087][ T8080] comedi comedi3: fl512: I/O base address not correctly aligned [ 108.595461][ T8085] Bluetooth: MGMT ver 1.23 [ 108.670603][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 108.734571][ T42] audit: type=1326 audit(1792387201.328:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7fc00000 [ 108.788791][ T8088] CIFS: VFS: UNC: missing share name [ 108.788850][ T8088] CIFS: VFS: Malformed UNC in devname [ 109.060503][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 109.122307][ T8095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 109.122324][ T8095] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.122407][ T8095] vhci_hcd vhci_hcd.0: Device attached [ 109.678658][ T8097] vhci_hcd: connection closed [ 109.680523][ T12] vhci_hcd vhci_hcd.2: stop threads [ 109.680547][ T12] vhci_hcd vhci_hcd.2: release socket [ 109.680563][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 110.389774][ T8125] bond1 (unregistering): Released all slaves [ 110.413781][ T8126] bond1 (unregistering): Released all slaves [ 110.602653][ T8138] Invalid ELF header magic: != ELF [ 110.604655][ T8138] overlay: Unknown parameter '/' [ 110.727180][ T8144] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 110.789295][ T42] audit: type=1326 audit(1792387203.378:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.311186][ T5886] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.461223][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 111.462040][ T5886] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.463131][ T5886] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.463143][ T5886] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.463153][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.463173][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.463184][ T5886] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.463196][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.463215][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.464687][ T5886] usb 7-1: config 0 descriptor?? [ 111.500010][ T42] audit: type=1326 audit(1792387204.088:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500040][ T42] audit: type=1326 audit(1792387204.088:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500060][ T42] audit: type=1326 audit(1792387204.088:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500079][ T42] audit: type=1326 audit(1792387204.088:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500099][ T42] audit: type=1326 audit(1792387204.088:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500118][ T42] audit: type=1326 audit(1792387204.088:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500137][ T42] audit: type=1326 audit(1792387204.088:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500158][ T42] audit: type=1326 audit(1792387204.088:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.500177][ T42] audit: type=1326 audit(1792387204.088:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.3.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7fc00000 [ 111.667575][ T5886] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.669201][ T5886] usb 7-1: USB disconnect, device number 6 [ 111.682906][ T5886] usblp0: removed [ 111.764828][ T8182] netlink: 140 bytes leftover after parsing attributes in process `syz.3.657'. [ 111.790010][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 112.101138][ T5817] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 112.251187][ T5817] usb 7-1: Using ep0 maxpacket: 32 [ 112.251670][ T5817] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.252558][ T5817] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.252571][ T5817] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.252581][ T5817] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.252601][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.252612][ T5817] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.252623][ T5817] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.252642][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.254506][ T5817] usb 7-1: config 0 descriptor?? [ 112.457781][ T5817] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.515237][ T8215] 9p: Bad value for 'rfdno' [ 112.742840][ T8219] netlink: 'syz.3.668': attribute type 2 has an invalid length. [ 112.742861][ T8219] netlink: 'syz.3.668': attribute type 7 has an invalid length. [ 112.751730][ T8219] Uý: entered promiscuous mode [ 112.771277][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.772300][ T65] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 112.777963][ T5817] usb 7-1: USB disconnect, device number 7 [ 112.787536][ T5817] usblp0: removed [ 113.970707][ T8254] Bluetooth: MGMT ver 1.23 [ 114.411561][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.684'. [ 114.471672][ T5817] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 114.601154][ T5817] usb 6-1: device descriptor read/64, error -71 [ 114.871145][ T5838] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 115.031954][ T5838] usb 9-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 115.033116][ T5838] usb 9-1: config 8 has an invalid interface number: 16 but max is 0 [ 115.033137][ T5838] usb 9-1: config 8 has no interface number 0 [ 115.033165][ T5838] usb 9-1: config 8 interface 16 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 115.033182][ T5838] usb 9-1: config 8 interface 16 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.033203][ T5838] usb 9-1: config 8 interface 16 has no altsetting 0 [ 115.033225][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.042066][ T5838] usbhid 9-1:8.16: couldn't find an input interrupt endpoint [ 115.095664][ T8295] netlink: 'syz.2.692': attribute type 4 has an invalid length. [ 115.095683][ T8295] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 115.134502][ T8292] binder_alloc: 8288: binder_alloc_buf, no vma [ 115.256377][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.256752][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.421745][ T65] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.436398][ T5838] usb 9-1: USB disconnect, device number 4 [ 115.990161][ T8326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.704'. [ 116.127139][ T8337] binder: 8336:8337 ioctl c0306201 80001900 returned -22 [ 116.131478][ T8337] netlink: 'syz.1.709': attribute type 3 has an invalid length. [ 116.131495][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 116.131509][ T8337] netlink: 'syz.1.709': attribute type 3 has an invalid length. [ 116.131519][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 116.135725][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 116.189305][ T8340] FAULT_INJECTION: forcing a failure. [ 116.189305][ T8340] name failslab, interval 1, probability 0, space 0, times 0 [ 116.189357][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.3.710 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.189378][ T8340] Tainted: [L]=SOFTLOCKUP [ 116.189384][ T8340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.189393][ T8340] Call Trace: [ 116.189399][ T8340] [ 116.189405][ T8340] dump_stack_lvl+0x100/0x190 [ 116.189430][ T8340] should_fail_ex.cold+0x5/0xa [ 116.189451][ T8340] should_failslab+0xc2/0x120 [ 116.189481][ T8340] __kmalloc_noprof+0xfc/0x840 [ 116.189502][ T8340] ? hash_netportnet4_add+0x14f5/0x3230 [ 116.189531][ T8340] hash_netportnet4_add+0x14f5/0x3230 [ 116.189554][ T8340] ? __pfx___nla_validate_parse+0x10/0x10 [ 116.189577][ T8340] ? arch_stack_walk+0xa6/0xf0 [ 116.189611][ T8340] ? __pfx_hash_netportnet4_add+0x10/0x10 [ 116.189632][ T8340] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 116.189657][ T8340] ? ip_set_range_to_cidr+0xaf/0x110 [ 116.189677][ T8340] hash_netportnet4_uadt+0xcf7/0x17d0 [ 116.189702][ T8340] ? __pfx_hash_netportnet4_add+0x10/0x10 [ 116.189727][ T8340] ? __pfx_hash_netportnet4_uadt+0x10/0x10 [ 116.189752][ T8340] ? is_bpf_text_address+0x25/0x1a0 [ 116.189777][ T8340] ? is_bpf_text_address+0x8a/0x1a0 [ 116.189799][ T8340] ? is_bpf_text_address+0x8a/0x1a0 [ 116.189826][ T8340] call_ad.isra.0+0x171/0x950 [ 116.189853][ T8340] ? __pfx_call_ad.isra.0+0x10/0x10 [ 116.189875][ T8340] ? __pfx___nla_validate_parse+0x10/0x10 [ 116.189906][ T8340] ? __nla_parse+0x40/0x60 [ 116.189931][ T8340] ip_set_ad.isra.0+0x3f1/0x8b0 [ 116.189950][ T8340] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 116.189965][ T8340] ? trace_contention_end+0x126/0x160 [ 116.190007][ T8340] ? find_held_lock+0x2b/0x80 [ 116.190031][ T8340] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 116.190060][ T8340] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.190080][ T8340] ? skb_release_data+0x65e/0x860 [ 116.190102][ T8340] ? kfree_skbmem+0x19f/0x210 [ 116.190146][ T8340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.190165][ T8340] netlink_rcv_skb+0x159/0x420 [ 116.190182][ T8340] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.190205][ T8340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.190232][ T8340] ? ns_capable+0xd2/0xf0 [ 116.190258][ T8340] nfnetlink_rcv+0x1b3/0x440 [ 116.190278][ T8340] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.190299][ T8340] ? netlink_deliver_tap+0x1ae/0xcc0 [ 116.190320][ T8340] netlink_unicast+0x65f/0x950 [ 116.190341][ T8340] ? __pfx_netlink_unicast+0x10/0x10 [ 116.190356][ T8340] ? aa_sk_perm+0x389/0xab0 [ 116.190383][ T8340] netlink_sendmsg+0x8b0/0xda0 [ 116.190404][ T8340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.190424][ T8340] ? apparmor_socket_sendmsg+0x165/0x280 [ 116.190445][ T8340] ____sys_sendmsg+0xa4d/0xbe0 [ 116.190475][ T8340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.190494][ T8340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.190527][ T8340] ___sys_sendmsg+0x190/0x1e0 [ 116.190553][ T8340] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.190588][ T8340] ? find_held_lock+0x2b/0x80 [ 116.190621][ T8340] __sys_sendmsg+0x160/0x210 [ 116.190641][ T8340] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.190666][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 116.190692][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 116.190710][ T8340] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.190727][ T8340] do_fast_syscall_32+0x32/0x70 [ 116.190744][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.190765][ T8340] RIP: 0023:0xf7f54fec [ 116.190785][ T8340] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 116.190792][ T8340] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 116.190808][ T8340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000740 [ 116.190818][ T8340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.190827][ T8340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.190835][ T8340] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.190845][ T8340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.190865][ T8340] [ 116.221563][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 116.476784][ T6427] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.676399][ T8368] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 116.831489][ T5833] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 118.538028][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 129.856855][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 129.856868][ T42] audit: type=1326 audit(1792387222.448:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.856894][ T42] audit: type=1326 audit(1792387222.448:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857411][ T42] audit: type=1326 audit(1792387222.448:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857453][ T42] audit: type=1326 audit(1792387222.448:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857567][ T42] audit: type=1326 audit(1792387222.448:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857722][ T42] audit: type=1326 audit(1792387222.448:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857759][ T42] audit: type=1326 audit(1792387222.448:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857854][ T42] audit: type=1326 audit(1792387222.448:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.857965][ T42] audit: type=1326 audit(1792387222.448:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.858347][ T42] audit: type=1326 audit(1792387222.448:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 129.862040][ T8419] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 130.104558][ T8443] syzkaller0: entered promiscuous mode [ 130.104572][ T8443] syzkaller0: entered allmulticast mode [ 130.441919][ T8457] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 130.496612][ T8459] fuse: Bad value for 'fd' [ 130.525280][ T8461] FAULT_INJECTION: forcing a failure. [ 130.525280][ T8461] name fail_futex, interval 1, probability 0, space 0, times 1 [ 130.525304][ T8461] CPU: 3 UID: 0 PID: 8461 Comm: syz.2.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.525319][ T8461] Tainted: [L]=SOFTLOCKUP [ 130.525323][ T8461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.525329][ T8461] Call Trace: [ 130.525334][ T8461] [ 130.525339][ T8461] dump_stack_lvl+0x100/0x190 [ 130.525359][ T8461] should_fail_ex.cold+0x5/0xa [ 130.525375][ T8461] get_futex_key+0x1c9/0x13e0 [ 130.525390][ T8461] ? __pfx_get_futex_key+0x10/0x10 [ 130.525401][ T8461] ? futex_wake+0x4ea/0x5e0 [ 130.525419][ T8461] futex_wake+0xf4/0x5e0 [ 130.525435][ T8461] ? __pfx_futex_wake+0x10/0x10 [ 130.525451][ T8461] ? rcu_read_lock_any_held+0x6a/0x90 [ 130.525465][ T8461] ? find_held_lock+0x2b/0x80 [ 130.525483][ T8461] ? ksys_write+0x190/0x250 [ 130.525498][ T8461] ? ksys_write+0x190/0x250 [ 130.525513][ T8461] do_futex+0x2b2/0x440 [ 130.525528][ T8461] ? __pfx_do_futex+0x10/0x10 [ 130.525545][ T8461] __ia32_sys_futex_time32+0x2f4/0x470 [ 130.525560][ T8461] ? fput+0x7c/0x100 [ 130.525577][ T8461] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 130.525591][ T8461] ? ksys_write+0x1ac/0x250 [ 130.525610][ T8461] __do_fast_syscall_32+0x13a/0x8b0 [ 130.525625][ T8461] do_fast_syscall_32+0x32/0x70 [ 130.525637][ T8461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.525651][ T8461] RIP: 0023:0xf73befec [ 130.525663][ T8461] Code: Unable to access opcode bytes at 0xf73befc2. [ 130.525668][ T8461] RSP: 002b:00000000f53d65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 130.525679][ T8461] RAX: ffffffffffffffda RBX: 00000000f73e4f8c RCX: 0000000000000081 [ 130.525687][ T8461] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 130.525695][ T8461] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 130.525701][ T8461] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.525708][ T8461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.525722][ T8461] [ 131.262017][ T8478] program syz.1.740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.515567][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 131.526535][ T8488] fuse: Bad value for 'fd' [ 131.996916][ T8511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 131.996938][ T8511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.752'. [ 131.998943][ T8511] FAULT_INJECTION: forcing a failure. [ 131.998943][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 131.998963][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.1.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.998978][ T8511] Tainted: [L]=SOFTLOCKUP [ 131.998982][ T8511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.998988][ T8511] Call Trace: [ 131.998991][ T8511] [ 131.998996][ T8511] dump_stack_lvl+0x100/0x190 [ 131.999016][ T8511] should_fail_ex.cold+0x5/0xa [ 131.999031][ T8511] should_failslab+0xc2/0x120 [ 131.999050][ T8511] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.999067][ T8511] ? copy_pid_ns+0x32b/0x10a0 [ 131.999082][ T8511] copy_pid_ns+0x32b/0x10a0 [ 131.999094][ T8511] ? __pfx_copy_pid_ns+0x10/0x10 [ 131.999107][ T8511] ? __pfx_copy_mnt_ns+0x10/0x10 [ 131.999121][ T8511] ? create_new_namespaces+0x30/0xac0 [ 131.999141][ T8511] create_new_namespaces+0x2aa/0xac0 [ 131.999161][ T8511] unshare_nsproxy_namespaces+0xf2/0x220 [ 131.999179][ T8511] ksys_unshare+0x4a2/0xb30 [ 131.999191][ T8511] ? __pfx_ksys_unshare+0x10/0x10 [ 131.999202][ T8511] ? ksys_write+0x1ac/0x250 [ 131.999221][ T8511] __ia32_sys_unshare+0x30/0x40 [ 131.999232][ T8511] __do_fast_syscall_32+0x13a/0x8b0 [ 131.999244][ T8511] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.999255][ T8511] do_fast_syscall_32+0x32/0x70 [ 131.999267][ T8511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.999281][ T8511] RIP: 0023:0xf740efec [ 131.999294][ T8511] Code: Unable to access opcode bytes at 0xf740efc2. [ 131.999299][ T8511] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 131.999310][ T8511] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 131.999318][ T8511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.999324][ T8511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.999330][ T8511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.999337][ T8511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.999353][ T8511] [ 132.034802][ T8515] FAULT_INJECTION: forcing a failure. [ 132.034802][ T8515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.034838][ T8515] CPU: 2 UID: 0 PID: 8515 Comm: syz.1.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.034863][ T8515] Tainted: [L]=SOFTLOCKUP [ 132.034870][ T8515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.034882][ T8515] Call Trace: [ 132.034889][ T8515] [ 132.034897][ T8515] dump_stack_lvl+0x100/0x190 [ 132.034929][ T8515] should_fail_ex.cold+0x5/0xa [ 132.034951][ T8515] ? choose_idle_cpu+0x18d/0x270 [ 132.034976][ T8515] get_futex_key+0x1c9/0x13e0 [ 132.034999][ T8515] ? __pfx_get_futex_key+0x10/0x10 [ 132.035029][ T8515] ? __pfx___smp_call_single_queue+0x10/0x10 [ 132.035065][ T8515] futex_wait_setup+0x91/0x540 [ 132.035099][ T8515] __futex_wait+0x19f/0x300 [ 132.035127][ T8515] ? __pfx___futex_wait+0x10/0x10 [ 132.035151][ T8515] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.035180][ T8515] ? futex_hash+0x311/0x400 [ 132.035201][ T8515] ? __pfx_futex_wake_mark+0x10/0x10 [ 132.035230][ T8515] ? find_held_lock+0x2b/0x80 [ 132.035251][ T8515] ? futex_wake+0x4ea/0x5e0 [ 132.035283][ T8515] futex_wait+0xe6/0x370 [ 132.035309][ T8515] ? __pfx_futex_wait+0x10/0x10 [ 132.035341][ T8515] ? rcu_read_lock_any_held+0x6a/0x90 [ 132.035364][ T8515] ? locks_remove_posix+0xff/0x4d0 [ 132.035382][ T8515] ? find_held_lock+0x2b/0x80 [ 132.035404][ T8515] ? __pfx_locks_remove_posix+0x10/0x10 [ 132.035421][ T8515] ? ksys_write+0x190/0x250 [ 132.035448][ T8515] do_futex+0x265/0x440 [ 132.035490][ T8515] ? __pfx_do_futex+0x10/0x10 [ 132.035535][ T8515] __ia32_sys_futex_time32+0x2f4/0x470 [ 132.035565][ T8515] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 132.035601][ T8515] __do_fast_syscall_32+0x13a/0x8b0 [ 132.035626][ T8515] do_fast_syscall_32+0x32/0x70 [ 132.035647][ T8515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.035671][ T8515] RIP: 0023:0xf740efec [ 132.035694][ T8515] Code: Unable to access opcode bytes at 0xf740efc2. [ 132.035702][ T8515] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 132.035721][ T8515] RAX: ffffffffffffffda RBX: 00000000f7434f88 RCX: 0000000000000080 [ 132.035734][ T8515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 132.035746][ T8515] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 132.035758][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.035769][ T8515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.035793][ T8515] [ 132.249309][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 132.372239][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.372288][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.504916][ T8527] (syz.4.759,8527,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 132.504936][ T8527] (syz.4.759,8527,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 132.510235][ T8528] (syz.4.759,8528,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 132.510254][ T8528] (syz.4.759,8528,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 132.523233][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 132.523246][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 132.653334][ T8539] capability: warning: `syz.1.764' uses 32-bit capabilities (legacy support in use) [ 133.216715][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 133.526287][ T8598] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 133.526307][ T8598] netlink: 352 bytes leftover after parsing attributes in process `syz.4.772'. [ 133.979675][ T8616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.776'. [ 133.980447][ T8616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'. [ 134.442641][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.442783][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.442883][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.442997][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.443180][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.443370][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.443551][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.443734][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.443909][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.444088][ T8624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.572634][ T8628] kvm: user requested TSC rate below hardware speed [ 135.044299][ T8644] fuse: Bad value for 'group_id' [ 135.044312][ T8644] fuse: Bad value for 'group_id' [ 135.044647][ T8644] FAULT_INJECTION: forcing a failure. [ 135.044647][ T8644] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.044665][ T8644] CPU: 3 UID: 0 PID: 8644 Comm: syz.4.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.044680][ T8644] Tainted: [L]=SOFTLOCKUP [ 135.044684][ T8644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.044690][ T8644] Call Trace: [ 135.044695][ T8644] [ 135.044699][ T8644] dump_stack_lvl+0x100/0x190 [ 135.044732][ T8644] should_fail_ex.cold+0x5/0xa [ 135.044747][ T8644] get_futex_key+0x1c9/0x13e0 [ 135.044762][ T8644] ? __pfx_get_futex_key+0x10/0x10 [ 135.044791][ T8644] futex_wait_setup+0x91/0x540 [ 135.044810][ T8644] __futex_wait+0x19f/0x300 [ 135.044826][ T8644] ? __pfx___futex_wait+0x10/0x10 [ 135.044842][ T8644] ? __pfx_try_to_wake_up+0x10/0x10 [ 135.044859][ T8644] ? futex_hash+0x311/0x400 [ 135.044872][ T8644] ? __pfx_futex_wake_mark+0x10/0x10 [ 135.044889][ T8644] ? find_held_lock+0x2b/0x80 [ 135.044901][ T8644] ? futex_wake+0x4ea/0x5e0 [ 135.044920][ T8644] futex_wait+0xe6/0x370 [ 135.044935][ T8644] ? __pfx_futex_wait+0x10/0x10 [ 135.044955][ T8644] ? __lock_acquire+0x5c0/0x1f40 [ 135.044973][ T8644] do_futex+0x265/0x440 [ 135.044986][ T8644] ? __pfx_do_futex+0x10/0x10 [ 135.045000][ T8644] ? lock_acquire+0x1d1/0x380 [ 135.045018][ T8644] __ia32_sys_futex_time32+0x2f4/0x470 [ 135.045034][ T8644] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 135.045049][ T8644] ? __fget_files+0x21f/0x3d0 [ 135.045069][ T8644] __do_fast_syscall_32+0x13a/0x8b0 [ 135.045083][ T8644] do_fast_syscall_32+0x32/0x70 [ 135.045095][ T8644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.045110][ T8644] RIP: 0023:0xf73cefec [ 135.045123][ T8644] Code: Unable to access opcode bytes at 0xf73cefc2. [ 135.045127][ T8644] RSP: 002b:00000000f53a45bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 135.045138][ T8644] RAX: ffffffffffffffda RBX: 00000000f73f50b8 RCX: 0000000000000080 [ 135.045145][ T8644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f50bc [ 135.045152][ T8644] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 135.045160][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.045166][ T8644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.045181][ T8644] [ 136.611535][ T8609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.616626][ T8602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.716327][ T65] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 136.719635][ T8657] __nla_validate_parse: 34 callbacks suppressed [ 136.719651][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 136.719757][ T8657] bridge_slave_1: left allmulticast mode [ 136.719774][ T8657] bridge_slave_1: left promiscuous mode [ 136.719962][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.721010][ T8661] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 136.735684][ T8657] bridge_slave_0: left allmulticast mode [ 136.735707][ T8657] bridge_slave_0: left promiscuous mode [ 136.735887][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.773932][ T8666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.789'. [ 137.925538][ T8703] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.804' sets config #0 [ 137.978911][ T8706] FAULT_INJECTION: forcing a failure. [ 137.978911][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.978943][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.1.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.978970][ T8706] Tainted: [L]=SOFTLOCKUP [ 137.978978][ T8706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.978988][ T8706] Call Trace: [ 137.978996][ T8706] [ 137.979004][ T8706] dump_stack_lvl+0x100/0x190 [ 137.979035][ T8706] should_fail_ex.cold+0x5/0xa [ 137.979062][ T8706] _copy_from_iter+0x1f4/0x1690 [ 137.979089][ T8706] ? __pfx__copy_from_iter+0x10/0x10 [ 137.979110][ T8706] ? trace_kmalloc+0xeb/0x110 [ 137.979139][ T8706] ? __kasan_kmalloc+0xaa/0xb0 [ 137.979167][ T8706] ? __kmalloc_noprof+0x350/0x840 [ 137.979193][ T8706] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 137.979222][ T8706] kernfs_fop_write_iter+0x186/0x5f0 [ 137.979249][ T8706] vfs_write+0x6af/0x1050 [ 137.979281][ T8706] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.979306][ T8706] ? __pfx_vfs_write+0x10/0x10 [ 137.979329][ T8706] ? find_held_lock+0x2b/0x80 [ 137.979371][ T8706] ksys_write+0x12a/0x250 [ 137.979395][ T8706] ? __pfx_ksys_write+0x10/0x10 [ 137.979418][ T8706] ? ksys_write+0x1ac/0x250 [ 137.979441][ T8706] ? __pfx_ksys_write+0x10/0x10 [ 137.979472][ T8706] __do_fast_syscall_32+0x13a/0x8b0 [ 137.979494][ T8706] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.979515][ T8706] do_fast_syscall_32+0x32/0x70 [ 137.979537][ T8706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.979562][ T8706] RIP: 0023:0xf740efec [ 137.979581][ T8706] Code: Unable to access opcode bytes at 0xf740efc2. [ 137.979591][ T8706] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 137.979611][ T8706] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 137.979623][ T8706] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.979635][ T8706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.979644][ T8706] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.979657][ T8706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.979682][ T8706] [ 138.066328][ T8708] netlink: 216 bytes leftover after parsing attributes in process `syz.1.806'. [ 138.066741][ T8708] program syz.1.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.119797][ T8716] No such timeout policy "syz1" [ 138.189497][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 138.189515][ T42] audit: type=1326 audit(1792387230.778:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8709 comm="syz.4.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7fc00000 [ 138.625054][ T8752] syzkaller0: entered promiscuous mode [ 138.625069][ T8752] syzkaller0: entered allmulticast mode [ 138.627798][ T8752] tipc: Started in network mode [ 138.627813][ T8752] tipc: Node identity c23b98fc1529, cluster identity 4711 [ 138.628664][ T8752] tipc: Enabled bearer , priority 0 [ 138.647763][ T8751] tipc: Resetting bearer [ 138.666985][ T8751] tipc: Disabling bearer [ 139.601535][ T8799] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 139.641811][ T8801] bridge0: port 3(syz_tun) entered blocking state [ 139.642080][ T8801] bridge0: port 3(syz_tun) entered disabled state [ 139.642277][ T8801] syz_tun: entered allmulticast mode [ 139.643598][ T8801] syz_tun: entered promiscuous mode [ 139.645105][ T8801] bridge0: port 3(syz_tun) entered blocking state [ 139.645172][ T8801] bridge0: port 3(syz_tun) entered forwarding state [ 139.662989][ T8802] bridge0: port 3(syz_tun) entered disabled state [ 139.663137][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.663566][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.821259][ T62] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 139.884433][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 139.991880][ T62] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.991906][ T62] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 139.992822][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.992846][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.992859][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.993702][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.993731][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.993743][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.995605][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.995627][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.995639][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.997694][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.997721][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.997734][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.998489][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.998510][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.998522][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.999270][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.999291][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.999303][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 140.000213][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.000234][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.000247][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 140.001734][ T62] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.001755][ T62] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.001768][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 140.003898][ T62] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 140.003911][ T62] usb 9-1: Product: syz [ 140.003923][ T62] usb 9-1: Manufacturer: syz [ 140.003930][ T62] usb 9-1: SerialNumber: syz [ 140.005199][ T62] usb 9-1: config 0 descriptor?? [ 140.010617][ T62] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 140.265793][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.266128][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.361746][ T8797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.366944][ T8797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.418829][ T6427] usb 9-1: USB disconnect, device number 5 [ 140.423801][ T6427] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 140.551219][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.551247][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.551265][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.551282][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.562824][ T8831] netlink: 'syz.2.840': attribute type 6 has an invalid length. [ 140.562837][ T8831] netlink: 'syz.2.840': attribute type 5 has an invalid length. [ 140.562843][ T8831] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.840'. [ 140.628231][ T65] Bluetooth: unknown link type 48 [ 140.628263][ T65] Bluetooth: hci0: connection err: -111 [ 140.630085][ T65] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 140.755018][ T8841] XFS (nbd2): no-recovery mounts must be read-only. [ 140.871268][ T1159] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 140.876509][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.876523][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.945817][ T8856] FAULT_INJECTION: forcing a failure. [ 140.945817][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.945846][ T8856] CPU: 2 UID: 0 PID: 8856 Comm: syz.2.850 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.945862][ T8856] Tainted: [L]=SOFTLOCKUP [ 140.945866][ T8856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.945872][ T8856] Call Trace: [ 140.945877][ T8856] [ 140.945882][ T8856] dump_stack_lvl+0x100/0x190 [ 140.945902][ T8856] should_fail_ex.cold+0x5/0xa [ 140.945917][ T8856] _copy_from_user+0x2e/0xd0 [ 140.945930][ T8856] __sys_bpf+0x2f5/0x4a30 [ 140.945948][ T8856] ? __pfx___sys_bpf+0x10/0x10 [ 140.945960][ T8856] ? find_held_lock+0x2b/0x80 [ 140.945974][ T8856] ? futex_wake+0x4ea/0x5e0 [ 140.946001][ T8856] ? __pfx_poll_select_finish+0x10/0x10 [ 140.946027][ T8856] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 140.946042][ T8856] ? xfd_validate_state+0x129/0x190 [ 140.946063][ T8856] ? __ia32_sys_bpf+0xcc/0x170 [ 140.946076][ T8856] __ia32_sys_bpf+0xcc/0x170 [ 140.946090][ T8856] ? __do_fast_syscall_32+0xb3/0x8b0 [ 140.946105][ T8856] __do_fast_syscall_32+0x13a/0x8b0 [ 140.946116][ T8856] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.946128][ T8856] do_fast_syscall_32+0x32/0x70 [ 140.946139][ T8856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.946154][ T8856] RIP: 0023:0xf73befec [ 140.946165][ T8856] Code: Unable to access opcode bytes at 0xf73befc2. [ 140.946170][ T8856] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 140.946181][ T8856] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000140 [ 140.946188][ T8856] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.946196][ T8856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.946203][ T8856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.946210][ T8856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.946224][ T8856] [ 141.044555][ T8866] FAULT_INJECTION: forcing a failure. [ 141.044555][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 141.044578][ T8866] CPU: 2 UID: 0 PID: 8866 Comm: syz.2.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.044593][ T8866] Tainted: [L]=SOFTLOCKUP [ 141.044597][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.044603][ T8866] Call Trace: [ 141.044607][ T8866] [ 141.044611][ T8866] dump_stack_lvl+0x100/0x190 [ 141.044630][ T8866] should_fail_ex.cold+0x5/0xa [ 141.044645][ T8866] should_failslab+0xc2/0x120 [ 141.044663][ T8866] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 141.044681][ T8866] ? __alloc_skb+0x140/0x710 [ 141.044697][ T8866] __alloc_skb+0x140/0x710 [ 141.044709][ T8866] ? __alloc_skb+0x5b7/0x710 [ 141.044721][ T8866] ? __pfx___alloc_skb+0x10/0x10 [ 141.044734][ T8866] ? trace_contention_end+0x126/0x160 [ 141.044765][ T8866] ? __mutex_lock+0x26c/0x1bd0 [ 141.044779][ T8866] netlink_dump+0x194/0xd00 [ 141.044794][ T8866] ? __pfx_netlink_dump+0x10/0x10 [ 141.044814][ T8866] __netlink_dump_start+0x6d6/0x990 [ 141.044829][ T8866] nfnl_cthelper_get+0x5df/0x6d0 [ 141.044848][ T8866] ? __pfx_nfnl_cthelper_get+0x10/0x10 [ 141.044866][ T8866] ? __pfx___mutex_lock+0x10/0x10 [ 141.044877][ T8866] ? __pfx_nfnl_cthelper_dump_table+0x10/0x10 [ 141.044897][ T8866] ? net_generic+0x25/0x2a0 [ 141.044913][ T8866] ? find_held_lock+0x2b/0x80 [ 141.044930][ T8866] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 141.044951][ T8866] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 141.044966][ T8866] ? skb_release_data+0x65e/0x860 [ 141.044981][ T8866] ? kfree_skbmem+0x19f/0x210 [ 141.045011][ T8866] ? __pfx___dev_queue_xmit+0x10/0x10 [ 141.045024][ T8866] netlink_rcv_skb+0x159/0x420 [ 141.045037][ T8866] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 141.045054][ T8866] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.045072][ T8866] ? ns_capable+0xd2/0xf0 [ 141.045090][ T8866] nfnetlink_rcv+0x1b3/0x440 [ 141.045106][ T8866] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 141.045121][ T8866] ? netlink_deliver_tap+0x1ae/0xcc0 [ 141.045135][ T8866] netlink_unicast+0x65f/0x950 [ 141.045149][ T8866] ? __pfx_netlink_unicast+0x10/0x10 [ 141.045166][ T8866] netlink_sendmsg+0x8b0/0xda0 [ 141.045180][ T8866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.045194][ T8866] ? apparmor_socket_sendmsg+0x165/0x280 [ 141.045209][ T8866] ____sys_sendmsg+0xa4d/0xbe0 [ 141.045247][ T8866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.045261][ T8866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.045285][ T8866] ___sys_sendmsg+0x190/0x1e0 [ 141.045307][ T8866] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.045332][ T8866] ? find_held_lock+0x2b/0x80 [ 141.045354][ T8866] __sys_sendmsg+0x160/0x210 [ 141.045368][ T8866] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.045386][ T8866] ? __pfx_ksys_write+0x10/0x10 [ 141.045404][ T8866] __do_fast_syscall_32+0x13a/0x8b0 [ 141.045415][ T8866] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.045428][ T8866] do_fast_syscall_32+0x32/0x70 [ 141.045440][ T8866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.045455][ T8866] RIP: 0023:0xf73befec [ 141.045468][ T8866] Code: Unable to access opcode bytes at 0xf73befc2. [ 141.045473][ T8866] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 141.045484][ T8866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 141.045491][ T8866] RDX: 0000000000020004 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.045497][ T8866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.045504][ T8866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.045510][ T8866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.045524][ T8866] [ 141.179551][ T8873] FAULT_INJECTION: forcing a failure. [ 141.179551][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 141.179584][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.3.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.179611][ T8873] Tainted: [L]=SOFTLOCKUP [ 141.179617][ T8873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.179628][ T8873] Call Trace: [ 141.179635][ T8873] [ 141.179643][ T8873] dump_stack_lvl+0x100/0x190 [ 141.179673][ T8873] should_fail_ex.cold+0x5/0xa [ 141.179696][ T8873] should_failslab+0xc2/0x120 [ 141.179723][ T8873] kmem_cache_alloc_noprof+0x92/0x6a0 [ 141.179748][ T8873] ? security_file_alloc+0x34/0x2c0 [ 141.179775][ T8873] security_file_alloc+0x34/0x2c0 [ 141.179798][ T8873] init_file+0x95/0x480 [ 141.179824][ T8873] alloc_empty_file+0x79/0x1c0 [ 141.179841][ T8873] alloc_file_pseudo+0x183/0x290 [ 141.179860][ T8873] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 141.179878][ T8873] ? alloc_fd+0x471/0x7a0 [ 141.179906][ T8873] sock_alloc_file+0x50/0x210 [ 141.179929][ T8873] __sys_socket+0x1c0/0x260 [ 141.179946][ T8873] ? __pfx___sys_socket+0x10/0x10 [ 141.179970][ T8873] __ia32_sys_socket+0x72/0xb0 [ 141.179986][ T8873] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.180004][ T8873] __do_fast_syscall_32+0x13a/0x8b0 [ 141.180022][ T8873] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.180040][ T8873] do_fast_syscall_32+0x32/0x70 [ 141.180059][ T8873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.180081][ T8873] RIP: 0023:0xf7f54fec [ 141.180099][ T8873] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 141.180107][ T8873] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 141.180124][ T8873] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000003 [ 141.180135][ T8873] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 00000000f540653c [ 141.180146][ T8873] RBP: 00000000f54065ec R08: 0000000000000000 R09: 0000000000000000 [ 141.180156][ T8873] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 141.180166][ T8873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.180190][ T8873] [ 141.218668][ T8873] netlink: 64 bytes leftover after parsing attributes in process `syz.3.857'. [ 141.230410][ T8873] syzkaller1: entered promiscuous mode [ 141.230423][ T8873] syzkaller1: entered allmulticast mode [ 141.260777][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.858'. [ 141.270412][ T8824] Process accounting resumed [ 141.316810][ T8880] syz.1.860 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.324633][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.860'. [ 141.400082][ T8889] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.0), cmd(15) [ 141.446438][ T8892] input: syz0 as /devices/virtual/input/input20 [ 141.684356][ T8908] netlink: 'syz.1.869': attribute type 11 has an invalid length. [ 141.689510][ T8905] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 141.771280][ T853] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 141.933024][ T853] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 141.934793][ T853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.934813][ T853] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.936779][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 141.936800][ T853] usb 7-1: Product: syz [ 141.936813][ T853] usb 7-1: Manufacturer: syz [ 141.942249][ T853] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 141.947673][ T853] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 141.968885][ T8925] netlink: 'syz.1.871': attribute type 3 has an invalid length. [ 141.979413][ T8926] netlink: 14 bytes leftover after parsing attributes in process `syz.4.872'. [ 141.988714][ T8926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.997935][ T8926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.999446][ T8926] bond0 (unregistering): Released all slaves [ 142.139069][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 142.144993][ T8902] FAULT_INJECTION: forcing a failure. [ 142.144993][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 142.145022][ T8902] CPU: 2 UID: 0 PID: 8902 Comm: syz.2.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.145046][ T8902] Tainted: [L]=SOFTLOCKUP [ 142.145053][ T8902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.145064][ T8902] Call Trace: [ 142.145071][ T8902] [ 142.145078][ T8902] dump_stack_lvl+0x100/0x190 [ 142.145108][ T8902] should_fail_ex.cold+0x5/0xa [ 142.145130][ T8902] should_failslab+0xc2/0x120 [ 142.145158][ T8902] __kmalloc_noprof+0xfc/0x840 [ 142.145181][ T8902] ? tomoyo_encode2+0xfb/0x3c0 [ 142.145234][ T8902] tomoyo_encode2+0xfb/0x3c0 [ 142.145272][ T8902] tomoyo_encode+0x29/0x50 [ 142.145296][ T8902] tomoyo_realpath_from_path+0x18c/0x690 [ 142.145344][ T8902] tomoyo_check_open_permission+0x2af/0x3c0 [ 142.145368][ T8902] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 142.145390][ T8902] ? __do_fast_syscall_32+0x13a/0x8b0 [ 142.145420][ T8902] ? hook_file_open+0x248/0x8e0 [ 142.145464][ T8902] ? path_get+0x61/0x80 [ 142.145494][ T8902] tomoyo_file_open+0x6b/0x90 [ 142.145514][ T8902] security_file_open+0xb5/0x1e0 [ 142.145539][ T8902] do_dentry_open+0x588/0x14d0 [ 142.145572][ T8902] vfs_open+0x82/0x3f0 [ 142.145594][ T8902] path_openat+0x1a23/0x2450 [ 142.145624][ T8902] ? __pfx_path_openat+0x10/0x10 [ 142.145658][ T8902] do_file_open+0x20e/0x430 [ 142.145685][ T8902] ? __pfx_do_file_open+0x10/0x10 [ 142.145732][ T8902] ? _raw_spin_unlock+0x28/0x50 [ 142.145756][ T8902] ? alloc_fd+0x471/0x7a0 [ 142.145788][ T8902] do_sys_openat2+0x10f/0x1e0 [ 142.145806][ T8902] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.145828][ T8902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.145851][ T8902] __ia32_compat_sys_openat+0x12d/0x210 [ 142.145869][ T8902] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 142.145881][ T8902] ? fput+0x7c/0x100 [ 142.145897][ T8902] ? ksys_write+0x1ac/0x250 [ 142.145911][ T8902] ? __pfx_ksys_write+0x10/0x10 [ 142.145928][ T8902] __do_fast_syscall_32+0x13a/0x8b0 [ 142.145940][ T8902] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.145952][ T8902] do_fast_syscall_32+0x32/0x70 [ 142.145964][ T8902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.145979][ T8902] RIP: 0023:0xf73befec [ 142.145992][ T8902] Code: Unable to access opcode bytes at 0xf73befc2. [ 142.145997][ T8902] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 142.146007][ T8902] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 142.146014][ T8902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.146021][ T8902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.146027][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.146035][ T8902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.146057][ T8902] [ 142.146178][ T8902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.262288][ T8935] block nbd3: not configured, cannot reconfigure [ 142.304234][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 142.342809][ T8939] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.922856][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.933718][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.942940][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.230042][ T8902] FAULT_INJECTION: forcing a failure. [ 143.230042][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 143.230321][ T8902] CPU: 2 UID: 0 PID: 8902 Comm: syz.2.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.230362][ T8902] Tainted: [L]=SOFTLOCKUP [ 143.230368][ T8902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.230378][ T8902] Call Trace: [ 143.230384][ T8902] [ 143.230391][ T8902] dump_stack_lvl+0x100/0x190 [ 143.230419][ T8902] should_fail_ex.cold+0x5/0xa [ 143.230443][ T8902] should_failslab+0xc2/0x120 [ 143.230468][ T8902] __kmalloc_noprof+0xfc/0x840 [ 143.230491][ T8902] ? usb_alloc_urb+0x66/0xa0 [ 143.230515][ T8902] usb_alloc_urb+0x66/0xa0 [ 143.230534][ T8902] usb_bulk_msg+0xb5/0x590 [ 143.230558][ T8902] bulk_immediate+0x11d/0x260 [ 143.230582][ T8902] ? __kasan_kmalloc+0xaa/0xb0 [ 143.230605][ T8902] ? __pfx_bulk_immediate+0x10/0x10 [ 143.230627][ T8902] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 143.230648][ T8902] ? iuu_uart_baud+0x5d/0x420 [ 143.230676][ T8902] iuu_uart_baud+0x271/0x420 [ 143.230704][ T8902] iuu_open+0x63e/0xd90 [ 143.230729][ T8902] ? __pfx_iuu_open+0x10/0x10 [ 143.230754][ T8902] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 143.230780][ T8902] ? __pm_runtime_resume+0xc3/0x170 [ 143.230806][ T8902] serial_port_activate+0x181/0x290 [ 143.230833][ T8902] ? __pfx_serial_port_activate+0x10/0x10 [ 143.230858][ T8902] tty_port_open+0x161/0x220 [ 143.230882][ T8902] ? __pfx_serial_open+0x10/0x10 [ 143.230910][ T8902] tty_open+0x2cc/0xe20 [ 143.230936][ T8902] ? __pfx_tty_open+0x10/0x10 [ 143.230955][ T8902] ? chrdev_open+0x589/0x6a0 [ 143.230977][ T8902] ? chrdev_open+0x589/0x6a0 [ 143.231003][ T8902] ? __pfx_tty_open+0x10/0x10 [ 143.231023][ T8902] chrdev_open+0x234/0x6a0 [ 143.231063][ T8902] ? __pfx_chrdev_open+0x10/0x10 [ 143.231088][ T8902] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 143.231111][ T8902] do_dentry_open+0x6ab/0x14d0 [ 143.231133][ T8902] ? __pfx_chrdev_open+0x10/0x10 [ 143.231162][ T8902] vfs_open+0x82/0x3f0 [ 143.231182][ T8902] path_openat+0x1a23/0x2450 [ 143.231210][ T8902] ? __pfx_path_openat+0x10/0x10 [ 143.231240][ T8902] do_file_open+0x20e/0x430 [ 143.231267][ T8902] ? __pfx_do_file_open+0x10/0x10 [ 143.231309][ T8902] ? _raw_spin_unlock+0x28/0x50 [ 143.231332][ T8902] ? alloc_fd+0x471/0x7a0 [ 143.231362][ T8902] do_sys_openat2+0x10f/0x1e0 [ 143.231380][ T8902] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.231400][ T8902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.231423][ T8902] __ia32_compat_sys_openat+0x12d/0x210 [ 143.231442][ T8902] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 143.231459][ T8902] ? fput+0x7c/0x100 [ 143.231482][ T8902] ? ksys_write+0x1ac/0x250 [ 143.231503][ T8902] ? __pfx_ksys_write+0x10/0x10 [ 143.231529][ T8902] __do_fast_syscall_32+0x13a/0x8b0 [ 143.231547][ T8902] ? lockdep_hardirqs_on+0x7d/0x110 [ 143.231566][ T8902] do_fast_syscall_32+0x32/0x70 [ 143.231583][ T8902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.231604][ T8902] RIP: 0023:0xf73befec [ 143.231622][ T8902] Code: Unable to access opcode bytes at 0xf73befc2. [ 143.231629][ T8902] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 143.231646][ T8902] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 143.231657][ T8902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.231667][ T8902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.231677][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.231687][ T8902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.231711][ T8902] [ 143.248687][ T8902] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 143.295230][ T57] usb 7-1: USB disconnect, device number 8 [ 143.298649][ T57] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 143.298937][ T57] iuu_phoenix 7-1:1.0: device disconnected [ 143.698215][ T8979] (syz.3.883,8979,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 143.698275][ T8979] (syz.3.883,8979,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 143.698329][ T8979] (syz.3.883,8979,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 143.698455][ T8979] (syz.3.883,8979,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 144.438114][ T8999] netlink: 108 bytes leftover after parsing attributes in process `syz.3.890'. [ 144.655914][ T9005] process 'syz.3.892' launched '/dev/fd/11' with NULL argv: empty string added [ 145.246609][ T9023] FAULT_INJECTION: forcing a failure. [ 145.246609][ T9023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.246633][ T9023] CPU: 2 UID: 0 PID: 9023 Comm: syz.1.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.246649][ T9023] Tainted: [L]=SOFTLOCKUP [ 145.246653][ T9023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.246659][ T9023] Call Trace: [ 145.246663][ T9023] [ 145.246668][ T9023] dump_stack_lvl+0x100/0x190 [ 145.246687][ T9023] should_fail_ex.cold+0x5/0xa [ 145.246700][ T9023] ? prepare_alloc_pages+0x16d/0x5b0 [ 145.246718][ T9023] should_fail_alloc_page+0xeb/0x140 [ 145.246737][ T9023] prepare_alloc_pages+0x1f0/0x5b0 [ 145.246756][ T9023] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 145.246771][ T9023] ? mlock_drain_local+0x254/0x4e0 [ 145.246789][ T9023] ? try_to_migrate_one+0x14a6/0x30d0 [ 145.246803][ T9023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.246820][ T9023] ? __pfx_try_to_migrate_one+0x10/0x10 [ 145.246834][ T9023] ? lock_acquire+0x1d1/0x380 [ 145.246855][ T9023] ? __asan_memcpy+0x3c/0x60 [ 145.246871][ T9023] ? __pfx_interleave_nid+0x10/0x10 [ 145.246889][ T9023] ? rcu_is_watching+0x13/0xc0 [ 145.246908][ T9023] ? policy_nodemask+0xed/0x4f0 [ 145.246919][ T9023] alloc_pages_mpol+0x201/0x550 [ 145.246931][ T9023] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 145.246945][ T9023] folio_alloc_mpol_noprof+0x36/0x260 [ 145.246959][ T9023] alloc_migration_target_by_mpol+0x2c1/0x650 [ 145.246973][ T9023] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 145.246987][ T9023] ? __pfx___might_resched+0x10/0x10 [ 145.247002][ T9023] ? folio_get_anon_vma+0x16b/0x980 [ 145.247016][ T9023] migrate_pages_batch+0x5c4/0x4680 [ 145.247029][ T9023] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 145.247046][ T9023] ? walk_pgd_range+0x11d1/0x1e00 [ 145.247060][ T9023] ? __pfx_migrate_pages_batch+0x10/0x10 [ 145.247081][ T9023] migrate_pages_sync+0x12c/0x880 [ 145.247094][ T9023] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 145.247108][ T9023] ? vma_migratable+0x380/0x450 [ 145.247120][ T9023] ? __pfx_migrate_pages_sync+0x10/0x10 [ 145.247131][ T9023] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 145.247146][ T9023] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 145.247163][ T9023] migrate_pages+0x1a83/0x2850 [ 145.247177][ T9023] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 145.247194][ T9023] ? __pfx_migrate_pages+0x10/0x10 [ 145.247208][ T9023] ? do_mbind+0x555/0xfd0 [ 145.247225][ T9023] do_mbind+0x5a4/0xfd0 [ 145.247242][ T9023] ? __pfx_do_mbind+0x10/0x10 [ 145.247256][ T9023] ? find_held_lock+0x2b/0x80 [ 145.247269][ T9023] ? ksys_write+0x190/0x250 [ 145.247287][ T9023] ? __pfx_get_nodes+0x10/0x10 [ 145.247307][ T9023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.247325][ T9023] ? __fget_files+0x21f/0x3d0 [ 145.247351][ T9023] kernel_mbind+0x1b7/0x200 [ 145.247375][ T9023] ? __pfx_kernel_mbind+0x10/0x10 [ 145.247392][ T9023] ? ksys_write+0x1ac/0x250 [ 145.247408][ T9023] ? __pfx_ksys_write+0x10/0x10 [ 145.247424][ T9023] __do_fast_syscall_32+0x13a/0x8b0 [ 145.247436][ T9023] ? lockdep_hardirqs_on+0x7d/0x110 [ 145.247448][ T9023] do_fast_syscall_32+0x32/0x70 [ 145.247460][ T9023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.247474][ T9023] RIP: 0023:0xf740efec [ 145.247489][ T9023] Code: Unable to access opcode bytes at 0xf740efc2. [ 145.247497][ T9023] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 145.247514][ T9023] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000 [ 145.247542][ T9023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000001fffffff [ 145.247552][ T9023] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 145.247561][ T9023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.247570][ T9023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.247592][ T9023] [ 145.477094][ T9005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.477110][ T9005] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 145.483388][ T9005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.483408][ T9005] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.998252][ T9072] tmpfs: Bad value for 'size' [ 147.018477][ T9072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.076322][ T9075] FAULT_FLAG_ALLOW_RETRY missing 801 [ 147.076346][ T9075] CPU: 1 UID: 0 PID: 9075 Comm: syz.1.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.076374][ T9075] Tainted: [L]=SOFTLOCKUP [ 147.076381][ T9075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.076402][ T9075] Call Trace: [ 147.076409][ T9075] [ 147.076417][ T9075] dump_stack_lvl+0x100/0x190 [ 147.076449][ T9075] handle_userfault.cold+0x38/0x65 [ 147.076478][ T9075] ? do_raw_spin_unlock+0x145/0x1e0 [ 147.076501][ T9075] ? _raw_spin_unlock+0x28/0x50 [ 147.076527][ T9075] ? __free_frozen_pages+0x751/0x10f0 [ 147.076549][ T9075] ? __pfx_handle_userfault+0x10/0x10 [ 147.076586][ T9075] ? rcu_read_unlock+0x2d/0xb0 [ 147.076607][ T9075] ? rcu_read_unlock+0x2d/0xb0 [ 147.076634][ T9075] do_anonymous_page+0x186d/0x2050 [ 147.076662][ T9075] ? __pfx_do_anonymous_page+0x10/0x10 [ 147.076680][ T9075] ? rcu_read_unlock+0x2d/0xb0 [ 147.076699][ T9075] ? rcu_read_unlock+0x2d/0xb0 [ 147.076720][ T9075] ? __pte_offset_map+0x179/0x310 [ 147.076749][ T9075] __handle_mm_fault+0x1ff3/0x2f60 [ 147.076774][ T9075] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.076794][ T9075] ? pte_offset_map_lock+0x174/0x320 [ 147.076820][ T9075] ? find_held_lock+0x2b/0x80 [ 147.076841][ T9075] ? find_held_lock+0x2b/0x80 [ 147.076861][ T9075] ? follow_page_pte+0x536/0x1050 [ 147.076902][ T9075] handle_mm_fault+0x363/0xa20 [ 147.076928][ T9075] __get_user_pages+0x8ae/0x2c30 [ 147.076965][ T9075] ? __pfx___get_user_pages+0x10/0x10 [ 147.077003][ T9075] populate_vma_page_range+0x267/0x3f0 [ 147.077032][ T9075] ? __pfx_populate_vma_page_range+0x10/0x10 [ 147.077060][ T9075] ? __pfx___vma_start_write+0x10/0x10 [ 147.077086][ T9075] mprotect_fixup+0x925/0xe00 [ 147.077112][ T9075] ? __pfx_mprotect_fixup+0x10/0x10 [ 147.077159][ T9075] do_mprotect_pkey+0xa51/0xdd0 [ 147.077213][ T9075] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 147.077246][ T9075] ? do_raw_spin_lock+0x128/0x260 [ 147.077268][ T9075] ? fdget+0x17a/0x210 [ 147.077313][ T9075] __ia32_sys_mprotect+0x75/0xb0 [ 147.077333][ T9075] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.077352][ T9075] __do_fast_syscall_32+0x13a/0x8b0 [ 147.077376][ T9075] do_fast_syscall_32+0x32/0x70 [ 147.077401][ T9075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.077425][ T9075] RIP: 0023:0xf740efec [ 147.077445][ T9075] Code: Unable to access opcode bytes at 0xf740efc2. [ 147.077453][ T9075] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 147.077472][ T9075] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 147.077484][ T9075] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 147.077494][ T9075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.077505][ T9075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.077516][ T9075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.077542][ T9075] [ 147.321550][ T9090] FAULT_INJECTION: forcing a failure. [ 147.321550][ T9090] name failslab, interval 1, probability 0, space 0, times 0 [ 147.321583][ T9090] CPU: 1 UID: 0 PID: 9090 Comm: syz.2.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.321608][ T9090] Tainted: [L]=SOFTLOCKUP [ 147.321615][ T9090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.321626][ T9090] Call Trace: [ 147.321633][ T9090] [ 147.321640][ T9090] dump_stack_lvl+0x100/0x190 [ 147.321673][ T9090] should_fail_ex.cold+0x5/0xa [ 147.321699][ T9090] should_failslab+0xc2/0x120 [ 147.321728][ T9090] __kmalloc_cache_noprof+0x91/0x6d0 [ 147.321752][ T9090] ? ip_set_create+0x342/0x1510 [ 147.321778][ T9090] ip_set_create+0x342/0x1510 [ 147.321798][ T9090] ? rcu_is_watching+0x13/0xc0 [ 147.321818][ T9090] ? trace_contention_end+0x126/0x160 [ 147.321849][ T9090] ? __pfx_ip_set_create+0x10/0x10 [ 147.321888][ T9090] ? find_held_lock+0x2b/0x80 [ 147.321918][ T9090] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 147.321954][ T9090] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.321978][ T9090] ? skb_release_data+0x65e/0x860 [ 147.322006][ T9090] ? kfree_skbmem+0x19f/0x210 [ 147.322060][ T9090] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.322081][ T9090] netlink_rcv_skb+0x159/0x420 [ 147.322100][ T9090] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.322125][ T9090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.322156][ T9090] ? ns_capable+0xd2/0xf0 [ 147.322184][ T9090] nfnetlink_rcv+0x1b3/0x440 [ 147.322204][ T9090] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.322219][ T9090] ? netlink_deliver_tap+0x1ae/0xcc0 [ 147.322233][ T9090] netlink_unicast+0x65f/0x950 [ 147.322248][ T9090] ? __pfx_netlink_unicast+0x10/0x10 [ 147.322264][ T9090] netlink_sendmsg+0x8b0/0xda0 [ 147.322279][ T9090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.322293][ T9090] ? apparmor_socket_sendmsg+0x165/0x280 [ 147.322309][ T9090] ____sys_sendmsg+0xa4d/0xbe0 [ 147.322324][ T9090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.322338][ T9090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.322361][ T9090] ___sys_sendmsg+0x190/0x1e0 [ 147.322380][ T9090] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.322405][ T9090] ? find_held_lock+0x2b/0x80 [ 147.322434][ T9090] __sys_sendmsg+0x160/0x210 [ 147.322449][ T9090] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.322467][ T9090] ? __pfx_ksys_write+0x10/0x10 [ 147.322484][ T9090] __do_fast_syscall_32+0x13a/0x8b0 [ 147.322496][ T9090] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.322508][ T9090] do_fast_syscall_32+0x32/0x70 [ 147.322521][ T9090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.322535][ T9090] RIP: 0023:0xf73befec [ 147.322548][ T9090] Code: Unable to access opcode bytes at 0xf73befc2. [ 147.322553][ T9090] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 147.322564][ T9090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004b80 [ 147.322571][ T9090] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.322577][ T9090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.322584][ T9090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.322590][ T9090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.322604][ T9090] [ 147.368413][ T9093] FAULT_INJECTION: forcing a failure. [ 147.368413][ T9093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.368441][ T9093] CPU: 2 UID: 0 PID: 9093 Comm: syz.2.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.368461][ T9093] Tainted: [L]=SOFTLOCKUP [ 147.368466][ T9093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.368475][ T9093] Call Trace: [ 147.368480][ T9093] [ 147.368485][ T9093] dump_stack_lvl+0x100/0x190 [ 147.368509][ T9093] should_fail_ex.cold+0x5/0xa [ 147.368526][ T9093] ? prepare_alloc_pages+0x16d/0x5b0 [ 147.368550][ T9093] should_fail_alloc_page+0xeb/0x140 [ 147.368573][ T9093] prepare_alloc_pages+0x1f0/0x5b0 [ 147.368602][ T9093] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 147.368626][ T9093] ? __pfx_get_page_from_freelist+0x10/0x10 [ 147.368644][ T9093] ? prepare_alloc_pages+0x1f0/0x5b0 [ 147.368665][ T9093] ? is_bpf_text_address+0x94/0x1a0 [ 147.368689][ T9093] ? rcu_is_watching+0x13/0xc0 [ 147.368705][ T9093] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 147.368725][ T9093] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.368747][ T9093] ? stack_trace_save+0x8e/0xc0 [ 147.368766][ T9093] ? __pfx_stack_trace_save+0x10/0x10 [ 147.368784][ T9093] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.368804][ T9093] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.368821][ T9093] ? is_bpf_text_address+0x94/0x1a0 [ 147.368846][ T9093] ? kasan_save_track+0x14/0x30 [ 147.368864][ T9093] ? __kasan_slab_alloc+0x89/0x90 [ 147.368884][ T9093] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 147.368902][ T9093] ? alloc_vmap_area+0x1814/0x2bb0 [ 147.368926][ T9093] ? __get_vm_area_node+0x1ed/0x350 [ 147.368950][ T9093] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 147.368966][ T9093] ? __vmalloc_node_noprof+0xad/0xf0 [ 147.369004][ T9093] ? __vmalloc_noprof+0xa3/0x120 [ 147.369017][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369036][ T9093] ? bpf_prog_alloc+0x3b/0x200 [ 147.369055][ T9093] ? bpf_prog_load+0x49e/0x2ab0 [ 147.369075][ T9093] ? __sys_bpf+0x1f46/0x4a30 [ 147.369091][ T9093] ? __ia32_sys_bpf+0xcc/0x170 [ 147.369108][ T9093] ? __do_fast_syscall_32+0x13a/0x8b0 [ 147.369124][ T9093] ? do_fast_syscall_32+0x32/0x70 [ 147.369144][ T9093] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 147.369167][ T9093] ? policy_nodemask+0xed/0x4f0 [ 147.369208][ T9093] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 147.369241][ T9093] __kasan_populate_vmalloc+0xf0/0x210 [ 147.369266][ T9093] alloc_vmap_area+0x95d/0x2bb0 [ 147.369292][ T9093] ? kasan_save_track+0x14/0x30 [ 147.369312][ T9093] ? __kasan_kmalloc+0xaa/0xb0 [ 147.369332][ T9093] ? __pfx_alloc_vmap_area+0x10/0x10 [ 147.369353][ T9093] ? __get_vm_area_node+0x124/0x350 [ 147.369376][ T9093] __get_vm_area_node+0x1ed/0x350 [ 147.369401][ T9093] __vmalloc_node_range_noprof+0x268/0x1420 [ 147.369416][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369437][ T9093] ? process_measurement+0x4c8/0x2350 [ 147.369453][ T9093] ? down_write+0x146/0x1f0 [ 147.369472][ T9093] ? up_write+0x2dc/0x5b0 [ 147.369488][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369512][ T9093] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.369535][ T9093] ? __lock_acquire+0x5c0/0x1f40 [ 147.369564][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369584][ T9093] __vmalloc_node_noprof+0xad/0xf0 [ 147.369607][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369631][ T9093] __vmalloc_noprof+0xa3/0x120 [ 147.369644][ T9093] ? __pfx___vmalloc_noprof+0x10/0x10 [ 147.369657][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.369677][ T9093] ? is_bpf_text_address+0x25/0x1a0 [ 147.369698][ T9093] ? rcu_is_watching+0x13/0xc0 [ 147.369715][ T9093] ? apparmor_capable+0x1d7/0x4d0 [ 147.369734][ T9093] bpf_prog_alloc_no_stats+0x58/0x690 [ 147.369754][ T9093] ? security_capable+0x80/0x260 [ 147.369771][ T9093] bpf_prog_alloc+0x3b/0x200 [ 147.369789][ T9093] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.369812][ T9093] bpf_prog_load+0x49e/0x2ab0 [ 147.369832][ T9093] ? __lock_acquire+0x5c0/0x1f40 [ 147.369855][ T9093] ? __pfx_bpf_prog_load+0x10/0x10 [ 147.369894][ T9093] __sys_bpf+0x1f46/0x4a30 [ 147.369922][ T9093] ? __pfx___sys_bpf+0x10/0x10 [ 147.369937][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.369956][ T9093] ? get_pid_task+0x2a/0x250 [ 147.369973][ T9093] ? find_held_lock+0x2b/0x80 [ 147.369988][ T9093] ? get_pid_task+0xfc/0x250 [ 147.370002][ T9093] ? get_pid_task+0xfc/0x250 [ 147.370021][ T9093] ? proc_fail_nth_write+0x9f/0x220 [ 147.370041][ T9093] ? find_held_lock+0x2b/0x80 [ 147.370061][ T9093] ? rcu_read_lock_any_held+0x6a/0x90 [ 147.370078][ T9093] ? find_held_lock+0x2b/0x80 [ 147.370093][ T9093] ? ksys_write+0x190/0x250 [ 147.370111][ T9093] ? ksys_write+0x190/0x250 [ 147.370127][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.370160][ T9093] ? fput+0x7c/0x100 [ 147.370182][ T9093] ? __ia32_sys_bpf+0xcc/0x170 [ 147.370198][ T9093] __ia32_sys_bpf+0xcc/0x170 [ 147.370215][ T9093] ? __do_fast_syscall_32+0xb3/0x8b0 [ 147.370231][ T9093] __do_fast_syscall_32+0x13a/0x8b0 [ 147.370245][ T9093] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.370260][ T9093] do_fast_syscall_32+0x32/0x70 [ 147.370275][ T9093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.370293][ T9093] RIP: 0023:0xf73befec [ 147.370310][ T9093] Code: Unable to access opcode bytes at 0xf73befc2. [ 147.370316][ T9093] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 147.370330][ T9093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 147.370339][ T9093] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.370347][ T9093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.370355][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.370365][ T9093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.370386][ T9093] [ 147.370465][ T9093] syz.2.920: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.376433][ T9093] CPU: 2 UID: 0 PID: 9093 Comm: syz.2.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.376452][ T9093] Tainted: [L]=SOFTLOCKUP [ 147.376458][ T9093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.376466][ T9093] Call Trace: [ 147.376472][ T9093] [ 147.376478][ T9093] dump_stack_lvl+0x100/0x190 [ 147.376501][ T9093] warn_alloc.cold+0x9e/0xb2 [ 147.376518][ T9093] ? __pfx_warn_alloc+0x10/0x10 [ 147.376537][ T9093] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.376555][ T9093] ? __get_vm_area_node+0x2f0/0x350 [ 147.376582][ T9093] ? __get_vm_area_node+0x22b/0x350 [ 147.376607][ T9093] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 147.376622][ T9093] ? process_measurement+0x4c8/0x2350 [ 147.376637][ T9093] ? down_write+0x146/0x1f0 [ 147.376654][ T9093] ? up_write+0x2dc/0x5b0 [ 147.376670][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.376696][ T9093] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.376718][ T9093] ? __lock_acquire+0x5c0/0x1f40 [ 147.376746][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.376766][ T9093] __vmalloc_node_noprof+0xad/0xf0 [ 147.376789][ T9093] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 147.376812][ T9093] __vmalloc_noprof+0xa3/0x120 [ 147.376826][ T9093] ? __pfx___vmalloc_noprof+0x10/0x10 [ 147.376839][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.376858][ T9093] ? is_bpf_text_address+0x25/0x1a0 [ 147.376885][ T9093] ? rcu_is_watching+0x13/0xc0 [ 147.376901][ T9093] ? apparmor_capable+0x1d7/0x4d0 [ 147.376923][ T9093] bpf_prog_alloc_no_stats+0x58/0x690 [ 147.376942][ T9093] ? security_capable+0x80/0x260 [ 147.376958][ T9093] bpf_prog_alloc+0x3b/0x200 [ 147.376976][ T9093] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.377000][ T9093] bpf_prog_load+0x49e/0x2ab0 [ 147.377021][ T9093] ? __lock_acquire+0x5c0/0x1f40 [ 147.377045][ T9093] ? __pfx_bpf_prog_load+0x10/0x10 [ 147.377085][ T9093] __sys_bpf+0x1f46/0x4a30 [ 147.377108][ T9093] ? __pfx___sys_bpf+0x10/0x10 [ 147.377123][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.377143][ T9093] ? get_pid_task+0x2a/0x250 [ 147.377159][ T9093] ? find_held_lock+0x2b/0x80 [ 147.377176][ T9093] ? get_pid_task+0xfc/0x250 [ 147.377221][ T9093] ? get_pid_task+0xfc/0x250 [ 147.377241][ T9093] ? proc_fail_nth_write+0x9f/0x220 [ 147.377261][ T9093] ? find_held_lock+0x2b/0x80 [ 147.377283][ T9093] ? rcu_read_lock_any_held+0x6a/0x90 [ 147.377301][ T9093] ? find_held_lock+0x2b/0x80 [ 147.377318][ T9093] ? ksys_write+0x190/0x250 [ 147.377336][ T9093] ? ksys_write+0x190/0x250 [ 147.377354][ T9093] ? lock_acquire+0x1d1/0x380 [ 147.377389][ T9093] ? fput+0x7c/0x100 [ 147.377412][ T9093] ? __ia32_sys_bpf+0xcc/0x170 [ 147.377431][ T9093] __ia32_sys_bpf+0xcc/0x170 [ 147.377448][ T9093] ? __do_fast_syscall_32+0xb3/0x8b0 [ 147.377466][ T9093] __do_fast_syscall_32+0x13a/0x8b0 [ 147.377481][ T9093] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.377497][ T9093] do_fast_syscall_32+0x32/0x70 [ 147.377512][ T9093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.377529][ T9093] RIP: 0023:0xf73befec [ 147.377547][ T9093] Code: Unable to access opcode bytes at 0xf73befc2. [ 147.377554][ T9093] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 147.377568][ T9093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 147.377580][ T9093] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.377590][ T9093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.377601][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.377613][ T9093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.377651][ T9093] [ 147.377674][ T9093] Mem-Info: [ 147.377683][ T9093] active_anon:5718 inactive_anon:193 isolated_anon:0 [ 147.377683][ T9093] active_file:4312 inactive_file:39080 isolated_file:0 [ 147.377683][ T9093] unevictable:1000 dirty:376 writeback:0 [ 147.377683][ T9093] slab_reclaimable:7600 slab_unreclaimable:62885 [ 147.377683][ T9093] mapped:30149 shmem:1110 pagetables:1327 [ 147.377683][ T9093] sec_pagetables:301 bounce:0 [ 147.377683][ T9093] kernel_misc_reclaimable:0 [ 147.377683][ T9093] free:24012 free_pcp:15025 free_cma:0 [ 147.377727][ T9093] Node 0 active_anon:24kB inactive_anon:76kB active_file:364kB inactive_file:1908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:380kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:988kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.377768][ T9093] Node 1 active_anon:22848kB inactive_anon:696kB active_file:16884kB inactive_file:154412kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:120216kB dirty:1504kB writeback:0kB shmem:4440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5772kB pagetables:4320kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.377810][ T9093] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:48kB free_cma:0kB [ 147.377851][ T9093] lowmem_reserve[]: 0 259 259 259 259 [ 147.377880][ T9093] Node 0 DMA32 free:16184kB boost:4096kB min:15800kB low:18724kB high:21648kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:76kB active_file:364kB inactive_file:1908kB unevictable:0kB writepending:0kB zspages:192kB present:1032196kB managed:265348kB mlocked:0kB bounce:0kB free_pcp:8180kB local_pcp:2208kB free_cma:0kB [ 147.377957][ T9093] lowmem_reserve[]: 0 0 0 0 0 [ 147.377980][ T9093] Node 1 DMA32 free:76812kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22848kB inactive_anon:696kB active_file:16884kB inactive_file:154412kB unevictable:4000kB writepending:1504kB zspages:2220kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:51780kB local_pcp:16332kB free_cma:0kB [ 147.378020][ T9093] lowmem_reserve[]: 0 0 0 0 0 [ 147.378042][ T9093] Node 0 DMA: 141*4kB (U) 15*8kB (U) 14*16kB (U) 31*32kB (U) 14*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 147.378128][ T9093] Node 0 DMA32: 0*4kB 15*8kB (UME) 10*16kB (UME) 41*32kB (UME) 30*64kB (UME) 13*128kB (UM) 11*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 16184kB [ 147.378221][ T9093] Node 1 DMA32: 99*4kB (UM) 52*8kB (UME) 5*16kB (UM) 133*32kB (UME) 155*64kB (UME) 75*128kB (UME) 44*256kB (UME) 22*512kB (UME) 9*1024kB (UM) 6*2048kB (UM) 2*4096kB (U) = 76892kB [ 147.378324][ T9093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.378335][ T9093] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.378346][ T9093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.378356][ T9093] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.378366][ T9093] 44802 total pagecache pages [ 147.378371][ T9093] 304 pages in swap cache [ 147.378375][ T9093] Free swap = 118252kB [ 147.378380][ T9093] Total swap = 124996kB [ 147.378385][ T9093] 524155 pages RAM [ 147.378389][ T9093] 0 pages HighMem/MovableOnly [ 147.378394][ T9093] 216926 pages reserved [ 147.378398][ T9093] 0 pages cma reserved [ 147.848984][ T9104] FAULT_INJECTION: forcing a failure. [ 147.848984][ T9104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.849007][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.3.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.849023][ T9104] Tainted: [L]=SOFTLOCKUP [ 147.849027][ T9104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.849033][ T9104] Call Trace: [ 147.849037][ T9104] [ 147.849042][ T9104] dump_stack_lvl+0x100/0x190 [ 147.849062][ T9104] should_fail_ex.cold+0x5/0xa [ 147.849077][ T9104] _copy_to_user+0x32/0xd0 [ 147.849090][ T9104] simple_read_from_buffer+0xcb/0x170 [ 147.849107][ T9104] proc_fail_nth_read+0x1af/0x230 [ 147.849123][ T9104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.849139][ T9104] ? rw_verify_area+0xce/0x6d0 [ 147.849152][ T9104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.849166][ T9104] vfs_read+0x1e4/0xb40 [ 147.849199][ T9104] ? lock_acquire+0x1d1/0x380 [ 147.849217][ T9104] ? __fget_files+0x34/0x3d0 [ 147.849232][ T9104] ? __pfx_vfs_read+0x10/0x10 [ 147.849245][ T9104] ? find_held_lock+0x2b/0x80 [ 147.849258][ T9104] ? __fget_files+0x215/0x3d0 [ 147.849275][ T9104] ? __fget_files+0x21f/0x3d0 [ 147.849294][ T9104] ksys_read+0x12a/0x250 [ 147.849308][ T9104] ? __pfx_ksys_read+0x10/0x10 [ 147.849326][ T9104] do_int80_emulation+0x166/0x650 [ 147.849341][ T9104] asm_int80_emulation+0x1a/0x20 [ 147.849352][ T9104] RIP: 0023:0xf71477eb [ 147.849361][ T9104] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 147.849372][ T9104] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 147.849383][ T9104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 147.849389][ T9104] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 147.849395][ T9104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.849402][ T9104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.849408][ T9104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.849422][ T9104] [ 148.003691][ T9116] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.135170][ T9116] lo speed is unknown, defaulting to 1000 [ 148.353934][ T9146] FAULT_INJECTION: forcing a failure. [ 148.353934][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 148.353956][ T9146] CPU: 3 UID: 0 PID: 9146 Comm: syz.2.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.353971][ T9146] Tainted: [L]=SOFTLOCKUP [ 148.353975][ T9146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.353981][ T9146] Call Trace: [ 148.353985][ T9146] [ 148.353990][ T9146] dump_stack_lvl+0x100/0x190 [ 148.354008][ T9146] should_fail_ex.cold+0x5/0xa [ 148.354023][ T9146] should_failslab+0xc2/0x120 [ 148.354041][ T9146] __kmalloc_cache_noprof+0x91/0x6d0 [ 148.354053][ T9146] ? __kasan_kmalloc+0xaa/0xb0 [ 148.354068][ T9146] ? omfs_init_fs_context+0x49/0x320 [ 148.354097][ T9146] omfs_init_fs_context+0x49/0x320 [ 148.354111][ T9146] alloc_fs_context+0x60c/0xf40 [ 148.354125][ T9146] __ia32_sys_fsopen+0xef/0x230 [ 148.354139][ T9146] __do_fast_syscall_32+0x13a/0x8b0 [ 148.354151][ T9146] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.354163][ T9146] do_fast_syscall_32+0x32/0x70 [ 148.354175][ T9146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.354189][ T9146] RIP: 0023:0xf73befec [ 148.354201][ T9146] Code: Unable to access opcode bytes at 0xf73befc2. [ 148.354206][ T9146] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 148.354217][ T9146] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000001 [ 148.354223][ T9146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.354229][ T9146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.354235][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.354241][ T9146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.354255][ T9146] [ 148.661246][ T6427] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 148.700109][ T9177] nicvf0: renamed from team0 (while UP) [ 148.707874][ T9177] nicvf0: Cannot enslave team device to itself [ 148.707889][ T9177] net_ratelimit: 27 callbacks suppressed [ 148.707897][ T9177] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 148.808618][ T9183] FAULT_INJECTION: forcing a failure. [ 148.808618][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 148.808641][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.4.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.808656][ T9183] Tainted: [L]=SOFTLOCKUP [ 148.808660][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.808666][ T9183] Call Trace: [ 148.808670][ T9183] [ 148.808674][ T9183] dump_stack_lvl+0x100/0x190 [ 148.808693][ T9183] should_fail_ex.cold+0x5/0xa [ 148.808709][ T9183] should_failslab+0xc2/0x120 [ 148.808728][ T9183] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 148.808749][ T9183] ? __alloc_skb+0x140/0x710 [ 148.808765][ T9183] __alloc_skb+0x140/0x710 [ 148.808777][ T9183] ? __alloc_skb+0x5b7/0x710 [ 148.808790][ T9183] ? __pfx___alloc_skb+0x10/0x10 [ 148.808807][ T9183] netlink_dump+0x194/0xd00 [ 148.808820][ T9183] ? __pfx_netlink_dump+0x10/0x10 [ 148.808836][ T9183] ? __asan_memset+0x23/0x50 [ 148.808850][ T9183] ? genl_start+0x67a/0x970 [ 148.808865][ T9183] __netlink_dump_start+0x6d6/0x990 [ 148.808879][ T9183] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 148.808895][ T9183] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 148.808913][ T9183] ? __pfx_genl_get_cmd+0x10/0x10 [ 148.808925][ T9183] ? __pfx_genl_start+0x10/0x10 [ 148.808937][ T9183] ? __pfx_genl_dumpit+0x10/0x10 [ 148.808950][ T9183] ? __pfx_genl_done+0x10/0x10 [ 148.808964][ T9183] ? netlink_sendmsg+0x680/0xda0 [ 148.808976][ T9183] ? ____sys_sendmsg+0xa4d/0xbe0 [ 148.808991][ T9183] ? __radix_tree_lookup+0x217/0x2b0 [ 148.809011][ T9183] genl_rcv_msg+0x471/0x800 [ 148.809027][ T9183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.809041][ T9183] ? __lock_acquire+0x5c0/0x1f40 [ 148.809057][ T9183] ? __pfx_nl80211_dump_station+0x10/0x10 [ 148.809072][ T9183] ? __pfx_nl80211_dump_station_done+0x10/0x10 [ 148.809085][ T9183] ? __lock_acquire+0x5c0/0x1f40 [ 148.809105][ T9183] netlink_rcv_skb+0x159/0x420 [ 148.809117][ T9183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.809131][ T9183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.809150][ T9183] ? netlink_deliver_tap+0x1ae/0xcc0 [ 148.809163][ T9183] genl_rcv+0x28/0x40 [ 148.809198][ T9183] netlink_unicast+0x65f/0x950 [ 148.809220][ T9183] ? __pfx_netlink_unicast+0x10/0x10 [ 148.809241][ T9183] netlink_sendmsg+0x8b0/0xda0 [ 148.809256][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.809270][ T9183] ? apparmor_socket_sendmsg+0x165/0x280 [ 148.809285][ T9183] ____sys_sendmsg+0xa4d/0xbe0 [ 148.809300][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.809314][ T9183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.809337][ T9183] ___sys_sendmsg+0x190/0x1e0 [ 148.809356][ T9183] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.809380][ T9183] ? find_held_lock+0x2b/0x80 [ 148.809403][ T9183] __sys_sendmsg+0x160/0x210 [ 148.809417][ T9183] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.809435][ T9183] ? __pfx_ksys_write+0x10/0x10 [ 148.809453][ T9183] __do_fast_syscall_32+0x13a/0x8b0 [ 148.809464][ T9183] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.809476][ T9183] do_fast_syscall_32+0x32/0x70 [ 148.809488][ T9183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.809503][ T9183] RIP: 0023:0xf73cefec [ 148.809517][ T9183] Code: Unable to access opcode bytes at 0xf73cefc2. [ 148.809522][ T9183] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 148.809533][ T9183] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000540 [ 148.809540][ T9183] RDX: 0000000020040890 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.809546][ T9183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.809552][ T9183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.809559][ T9183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.809573][ T9183] [ 148.815263][ T6427] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 148.816095][ T6427] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.816108][ T6427] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 148.819594][ T6427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.819607][ T6427] usb 6-1: Product: syz [ 148.819614][ T6427] usb 6-1: Manufacturer: syz [ 148.824281][ T6427] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 148.850121][ T6427] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 148.915479][ T9192] binder: 9191:9192 ioctl c0306201 800000c0 returned -14 [ 148.921982][ T9192] binder: 9191:9192 ioctl 5412 80000980 returned -22 [ 148.923027][ T9192] binder: 9191:9192 ioctl c0306201 800001c0 returned -14 [ 148.923190][ T9192] binder_alloc: 9191: binder_alloc_buf, no vma [ 149.453307][ T9217] FAULT_INJECTION: forcing a failure. [ 149.453307][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 149.453329][ T9217] CPU: 2 UID: 0 PID: 9217 Comm: syz.3.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.453344][ T9217] Tainted: [L]=SOFTLOCKUP [ 149.453348][ T9217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.453354][ T9217] Call Trace: [ 149.453358][ T9217] [ 149.453363][ T9217] dump_stack_lvl+0x100/0x190 [ 149.453383][ T9217] should_fail_ex.cold+0x5/0xa [ 149.453397][ T9217] should_failslab+0xc2/0x120 [ 149.453415][ T9217] kmem_cache_alloc_noprof+0x92/0x6a0 [ 149.453431][ T9217] ? skb_clone+0x190/0x400 [ 149.453447][ T9217] skb_clone+0x190/0x400 [ 149.453461][ T9217] netlink_deliver_tap+0xaed/0xcc0 [ 149.453476][ T9217] netlink_unicast+0x77b/0x950 [ 149.453490][ T9217] ? __pfx_netlink_unicast+0x10/0x10 [ 149.453507][ T9217] netlink_ack+0x655/0xb80 [ 149.453528][ T9217] netlink_rcv_skb+0x333/0x420 [ 149.453545][ T9217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.453566][ T9217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.453590][ T9217] ? netlink_deliver_tap+0x1ae/0xcc0 [ 149.453605][ T9217] netlink_unicast+0x65f/0x950 [ 149.453619][ T9217] ? __pfx_netlink_unicast+0x10/0x10 [ 149.453635][ T9217] netlink_sendmsg+0x8b0/0xda0 [ 149.453650][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.453664][ T9217] ? apparmor_socket_sendmsg+0x165/0x280 [ 149.453679][ T9217] ____sys_sendmsg+0xa4d/0xbe0 [ 149.453695][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.453708][ T9217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.453731][ T9217] ___sys_sendmsg+0x190/0x1e0 [ 149.453750][ T9217] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.453774][ T9217] ? find_held_lock+0x2b/0x80 [ 149.453800][ T9217] __sys_sendmsg+0x160/0x210 [ 149.453814][ T9217] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.453832][ T9217] ? __pfx_ksys_write+0x10/0x10 [ 149.453849][ T9217] __do_fast_syscall_32+0x13a/0x8b0 [ 149.453861][ T9217] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.453873][ T9217] do_fast_syscall_32+0x32/0x70 [ 149.453885][ T9217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.453899][ T9217] RIP: 0023:0xf7f54fec [ 149.453912][ T9217] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 149.453917][ T9217] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 149.453928][ T9217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005940 [ 149.453935][ T9217] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.453941][ T9217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.453947][ T9217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.453954][ T9217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.453968][ T9217] [ 149.707541][ T9227] FAULT_INJECTION: forcing a failure. [ 149.707541][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.707571][ T9227] CPU: 2 UID: 0 PID: 9227 Comm: syz.2.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.707593][ T9227] Tainted: [L]=SOFTLOCKUP [ 149.707599][ T9227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.707609][ T9227] Call Trace: [ 149.707615][ T9227] [ 149.707622][ T9227] dump_stack_lvl+0x100/0x190 [ 149.707649][ T9227] should_fail_ex.cold+0x5/0xa [ 149.707672][ T9227] _copy_from_user+0x2e/0xd0 [ 149.707692][ T9227] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 149.707729][ T9227] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 149.707752][ T9227] ? rcu_is_watching+0x13/0xc0 [ 149.707772][ T9227] ? trace_kmalloc+0xeb/0x110 [ 149.707797][ T9227] ? __kasan_kmalloc+0xaa/0xb0 [ 149.707821][ T9227] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 149.707846][ T9227] ? __alloc_skb+0x185/0x710 [ 149.707868][ T9227] ip_generic_getfrag+0x172/0x270 [ 149.707892][ T9227] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 149.707914][ T9227] ? do_csum+0x1e5/0x380 [ 149.707944][ T9227] raw_getfrag+0x235/0x2a0 [ 149.707964][ T9227] __ip_append_data+0x3965/0x44d0 [ 149.707992][ T9227] ? __pfx_raw_getfrag+0x10/0x10 [ 149.708016][ T9227] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 149.708071][ T9227] ? __pfx___ip_append_data+0x10/0x10 [ 149.708097][ T9227] ? lock_acquire+0x1d1/0x380 [ 149.708127][ T9227] ip_append_data+0x10f/0x1a0 [ 149.708153][ T9227] ? __pfx_raw_getfrag+0x10/0x10 [ 149.708171][ T9227] raw_sendmsg+0xcc0/0x3770 [ 149.708198][ T9227] ? __pfx_raw_sendmsg+0x10/0x10 [ 149.708214][ T9227] ? tomoyo_check_inet_address+0x40d/0x6d0 [ 149.708241][ T9227] ? tomoyo_check_inet_address+0x42a/0x6d0 [ 149.708266][ T9227] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 149.708311][ T9227] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 149.708341][ T9227] ? aa_sock_msg_perm+0x11e/0x200 [ 149.708360][ T9227] ? __pfx_raw_sendmsg+0x10/0x10 [ 149.708379][ T9227] inet_sendmsg+0x11c/0x140 [ 149.708398][ T9227] __sys_sendto+0x453/0x4e0 [ 149.708416][ T9227] ? __pfx_inet_sendmsg+0x10/0x10 [ 149.708434][ T9227] ? __pfx___sys_sendto+0x10/0x10 [ 149.708471][ T9227] ? fput+0x7c/0x100 [ 149.708496][ T9227] ? ksys_write+0x1ac/0x250 [ 149.708519][ T9227] __ia32_sys_sendto+0xdd/0x1b0 [ 149.708537][ T9227] ? __do_fast_syscall_32+0xb3/0x8b0 [ 149.708556][ T9227] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.708572][ T9227] __do_fast_syscall_32+0x13a/0x8b0 [ 149.708589][ T9227] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.708607][ T9227] do_fast_syscall_32+0x32/0x70 [ 149.708625][ T9227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.708645][ T9227] RIP: 0023:0xf73befec [ 149.708664][ T9227] Code: Unable to access opcode bytes at 0xf73befc2. [ 149.708672][ T9227] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 149.708689][ T9227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 149.708700][ T9227] RDX: 000000000000ffeb RSI: 0000000000000000 RDI: 0000000080000240 [ 149.708710][ T9227] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 149.708719][ T9227] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.708729][ T9227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.708753][ T9227] [ 150.053474][ T9148] FAULT_INJECTION: forcing a failure. [ 150.053474][ T9148] name failslab, interval 1, probability 0, space 0, times 0 [ 150.053510][ T9148] CPU: 2 UID: 0 PID: 9148 Comm: syz.1.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.053536][ T9148] Tainted: [L]=SOFTLOCKUP [ 150.053542][ T9148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.053553][ T9148] Call Trace: [ 150.053559][ T9148] [ 150.053565][ T9148] dump_stack_lvl+0x100/0x190 [ 150.053595][ T9148] should_fail_ex.cold+0x5/0xa [ 150.053617][ T9148] should_failslab+0xc2/0x120 [ 150.053645][ T9148] __kmalloc_noprof+0xfc/0x840 [ 150.053669][ T9148] ? usb_alloc_urb+0x66/0xa0 [ 150.053692][ T9148] usb_alloc_urb+0x66/0xa0 [ 150.053710][ T9148] usb_bulk_msg+0xb5/0x590 [ 150.053736][ T9148] bulk_immediate+0x11d/0x260 [ 150.053761][ T9148] ? __kasan_kmalloc+0xaa/0xb0 [ 150.053785][ T9148] ? __pfx_bulk_immediate+0x10/0x10 [ 150.053808][ T9148] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 150.053829][ T9148] ? iuu_uart_baud+0x5d/0x420 [ 150.053858][ T9148] iuu_uart_baud+0x271/0x420 [ 150.053886][ T9148] iuu_open+0x63e/0xd90 [ 150.053912][ T9148] ? __pfx_iuu_open+0x10/0x10 [ 150.053936][ T9148] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 150.053964][ T9148] ? __pm_runtime_resume+0xc3/0x170 [ 150.053990][ T9148] serial_port_activate+0x181/0x290 [ 150.054016][ T9148] ? __pfx_serial_port_activate+0x10/0x10 [ 150.054042][ T9148] tty_port_open+0x161/0x220 [ 150.054067][ T9148] ? __pfx_serial_open+0x10/0x10 [ 150.054090][ T9148] tty_open+0x2cc/0xe20 [ 150.054116][ T9148] ? __pfx_tty_open+0x10/0x10 [ 150.054134][ T9148] ? chrdev_open+0x589/0x6a0 [ 150.054157][ T9148] ? chrdev_open+0x589/0x6a0 [ 150.054183][ T9148] ? __pfx_tty_open+0x10/0x10 [ 150.054204][ T9148] chrdev_open+0x234/0x6a0 [ 150.054229][ T9148] ? __pfx_chrdev_open+0x10/0x10 [ 150.054254][ T9148] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 150.054302][ T9148] do_dentry_open+0x6ab/0x14d0 [ 150.054326][ T9148] ? __pfx_chrdev_open+0x10/0x10 [ 150.054357][ T9148] vfs_open+0x82/0x3f0 [ 150.054378][ T9148] path_openat+0x1a23/0x2450 [ 150.054413][ T9148] ? __pfx_path_openat+0x10/0x10 [ 150.054447][ T9148] do_file_open+0x20e/0x430 [ 150.054473][ T9148] ? __pfx_do_file_open+0x10/0x10 [ 150.054515][ T9148] ? _raw_spin_unlock+0x28/0x50 [ 150.054538][ T9148] ? alloc_fd+0x471/0x7a0 [ 150.054568][ T9148] do_sys_openat2+0x10f/0x1e0 [ 150.054587][ T9148] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.054614][ T9148] __ia32_compat_sys_openat+0x12d/0x210 [ 150.054634][ T9148] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 150.054663][ T9148] __do_fast_syscall_32+0x13a/0x8b0 [ 150.054681][ T9148] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.054701][ T9148] do_fast_syscall_32+0x32/0x70 [ 150.054719][ T9148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.054740][ T9148] RIP: 0023:0xf740efec [ 150.054760][ T9148] Code: Unable to access opcode bytes at 0xf740efc2. [ 150.054768][ T9148] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 150.054787][ T9148] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 150.054799][ T9148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.054810][ T9148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.054821][ T9148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.054831][ T9148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.054856][ T9148] [ 150.055083][ T9148] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 150.059230][ T24] usb 6-1: USB disconnect, device number 19 [ 150.076832][ T24] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 150.077851][ T24] iuu_phoenix 6-1:1.0: device disconnected [ 150.317466][ T9252] syzkaller0: entered promiscuous mode [ 150.317479][ T9252] syzkaller0: entered allmulticast mode [ 150.482733][ T9254] FAULT_INJECTION: forcing a failure. [ 150.482733][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.482764][ T9254] CPU: 3 UID: 0 PID: 9254 Comm: syz.2.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.482788][ T9254] Tainted: [L]=SOFTLOCKUP [ 150.482795][ T9254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.482805][ T9254] Call Trace: [ 150.482812][ T9254] [ 150.482819][ T9254] dump_stack_lvl+0x100/0x190 [ 150.482849][ T9254] should_fail_ex.cold+0x5/0xa [ 150.482874][ T9254] _copy_to_user+0x32/0xd0 [ 150.482903][ T9254] simple_read_from_buffer+0xcb/0x170 [ 150.482930][ T9254] proc_fail_nth_read+0x1af/0x230 [ 150.482955][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.482982][ T9254] ? rw_verify_area+0xce/0x6d0 [ 150.483002][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.483026][ T9254] vfs_read+0x1e4/0xb40 [ 150.483049][ T9254] ? lock_acquire+0x1d1/0x380 [ 150.483075][ T9254] ? __fget_files+0x34/0x3d0 [ 150.483101][ T9254] ? __pfx_vfs_read+0x10/0x10 [ 150.483121][ T9254] ? find_held_lock+0x2b/0x80 [ 150.483144][ T9254] ? __fget_files+0x215/0x3d0 [ 150.483172][ T9254] ? __fget_files+0x21f/0x3d0 [ 150.483204][ T9254] ksys_read+0x12a/0x250 [ 150.483227][ T9254] ? __pfx_ksys_read+0x10/0x10 [ 150.483258][ T9254] do_int80_emulation+0x166/0x650 [ 150.483282][ T9254] asm_int80_emulation+0x1a/0x20 [ 150.483301][ T9254] RIP: 0023:0xf71177eb [ 150.483316][ T9254] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 150.483333][ T9254] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 150.483352][ T9254] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 150.483380][ T9254] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 150.483389][ T9254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.483400][ T9254] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.483410][ T9254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.483437][ T9254] [ 151.058367][ T9276] xt_LOG: prefix is not null-terminated [ 151.059063][ T9276] netlink: 'syz.1.982': attribute type 16 has an invalid length. [ 151.059080][ T9276] netlink: 'syz.1.982': attribute type 3 has an invalid length. [ 151.059091][ T9276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.982'. [ 151.188733][ T9275] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 151.685390][ T9296] sctp: [Deprecated]: syz.1.990 (pid 9296) Use of int in max_burst socket option. [ 151.685390][ T9296] Use struct sctp_assoc_value instead [ 151.965496][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 151.966460][ T1127] ata1.00: configured for UDMA/100 [ 152.310239][ T9310] fuse: Unknown parameter '0x0000000000000003' [ 153.233050][ T9322] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.271272][ T9325] fuse: Unknown parameter '0x0000000000000003' [ 153.539345][ T9336] batman_adv: batadv0: Adding interface: syz_tun [ 153.539356][ T9336] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.539373][ T9336] batman_adv: batadv0: Interface activated: syz_tun [ 153.931618][ T6427] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 154.088260][ T9345] 9p: Bad value for 'wfdno' [ 154.104159][ T6427] usb 9-1: unable to get BOS descriptor or descriptor too short [ 154.104198][ T6427] usb 9-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 154.105013][ T6427] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 154.105146][ T6427] usb 9-1: can't read configurations, error -71 [ 154.566410][ T9363] syzkaller0: entered promiscuous mode [ 154.566427][ T9363] syzkaller0: entered allmulticast mode [ 154.652158][ T9365] tipc: Started in network mode [ 154.652173][ T9365] tipc: Node identity 4, cluster identity 4711 [ 154.652179][ T9365] tipc: Node number set to 4 [ 154.662555][ T9365] tipc: Enabling of bearer rejected, failed to enable media [ 154.668532][ T9369] FAULT_INJECTION: forcing a failure. [ 154.668532][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.668561][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.1.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.668585][ T9369] Tainted: [L]=SOFTLOCKUP [ 154.668590][ T9369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.668599][ T9369] Call Trace: [ 154.668605][ T9369] [ 154.668613][ T9369] dump_stack_lvl+0x100/0x190 [ 154.668643][ T9369] should_fail_ex.cold+0x5/0xa [ 154.668668][ T9369] _copy_from_user+0x2e/0xd0 [ 154.668687][ T9369] kstrtouint_from_user+0xd6/0x1d0 [ 154.668707][ T9369] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 154.668744][ T9369] ? lock_acquire+0x1d1/0x380 [ 154.668776][ T9369] proc_fail_nth_write+0x83/0x220 [ 154.668799][ T9369] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.668830][ T9369] vfs_write+0x2aa/0x1050 [ 154.668869][ T9369] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.668895][ T9369] ? lock_acquire+0x1d1/0x380 [ 154.668920][ T9369] ? __fget_files+0x34/0x3d0 [ 154.668944][ T9369] ? __pfx_vfs_write+0x10/0x10 [ 154.668963][ T9369] ? find_held_lock+0x2b/0x80 [ 154.668986][ T9369] ? __fget_files+0x215/0x3d0 [ 154.669013][ T9369] ? __fget_files+0x21f/0x3d0 [ 154.669044][ T9369] ksys_write+0x12a/0x250 [ 154.669065][ T9369] ? __pfx_ksys_write+0x10/0x10 [ 154.669095][ T9369] do_int80_emulation+0x166/0x650 [ 154.669120][ T9369] asm_int80_emulation+0x1a/0x20 [ 154.669138][ T9369] RIP: 0023:0xf71677eb [ 154.669173][ T9369] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 154.669190][ T9369] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 154.669207][ T9369] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 154.669220][ T9369] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.669230][ T9369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.669240][ T9369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.669251][ T9369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.669276][ T9369] [ 154.829398][ T9378] CIFS: Attempting to mount //127.0.0.1/share [ 154.830557][ T9378] CIFS: VFS: Error connecting to socket. Aborting operation. [ 154.830581][ T9378] CIFS: VFS: cifs_mount failed w/return code = -111 [ 155.634835][ T9390] netlink: 'syz.1.1024': attribute type 4 has an invalid length. [ 155.634869][ T9390] FAULT_INJECTION: forcing a failure. [ 155.634869][ T9390] name failslab, interval 1, probability 0, space 0, times 0 [ 155.634885][ T9390] CPU: 3 UID: 0 PID: 9390 Comm: syz.1.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.634900][ T9390] Tainted: [L]=SOFTLOCKUP [ 155.634904][ T9390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.634911][ T9390] Call Trace: [ 155.634915][ T9390] [ 155.634919][ T9390] dump_stack_lvl+0x100/0x190 [ 155.634938][ T9390] should_fail_ex.cold+0x5/0xa [ 155.634953][ T9390] should_failslab+0xc2/0x120 [ 155.634971][ T9390] __kmalloc_cache_noprof+0x91/0x6d0 [ 155.634985][ T9390] ? __find_set_type_get+0x78/0x440 [ 155.634998][ T9390] ? hash_mac_create+0x358/0x1080 [ 155.635013][ T9390] hash_mac_create+0x358/0x1080 [ 155.635028][ T9390] ? __pfx_hash_mac_create+0x10/0x10 [ 155.635042][ T9390] ip_set_create+0x6c4/0x1510 [ 155.635057][ T9390] ? __pfx_ip_set_create+0x10/0x10 [ 155.635078][ T9390] ? find_held_lock+0x2b/0x80 [ 155.635096][ T9390] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 155.635116][ T9390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 155.635131][ T9390] ? skb_release_data+0x65e/0x860 [ 155.635147][ T9390] ? kfree_skbmem+0x19f/0x210 [ 155.635178][ T9390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 155.635191][ T9390] netlink_rcv_skb+0x159/0x420 [ 155.635204][ T9390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 155.635221][ T9390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.635240][ T9390] ? ns_capable+0xd2/0xf0 [ 155.635257][ T9390] nfnetlink_rcv+0x1b3/0x440 [ 155.635273][ T9390] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 155.635288][ T9390] ? netlink_deliver_tap+0x1ae/0xcc0 [ 155.635302][ T9390] netlink_unicast+0x65f/0x950 [ 155.635316][ T9390] ? __pfx_netlink_unicast+0x10/0x10 [ 155.635333][ T9390] netlink_sendmsg+0x8b0/0xda0 [ 155.635348][ T9390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.635364][ T9390] ? apparmor_socket_sendmsg+0x165/0x280 [ 155.635379][ T9390] ____sys_sendmsg+0xa4d/0xbe0 [ 155.635395][ T9390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.635408][ T9390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.635431][ T9390] ___sys_sendmsg+0x190/0x1e0 [ 155.635449][ T9390] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.635471][ T9390] ? futex_wait+0x11e/0x370 [ 155.635501][ T9390] ? find_held_lock+0x2b/0x80 [ 155.635538][ T9390] __sys_sendmsg+0x160/0x210 [ 155.635562][ T9390] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.635598][ T9390] __do_fast_syscall_32+0x13a/0x8b0 [ 155.635613][ T9390] do_fast_syscall_32+0x32/0x70 [ 155.635626][ T9390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.635640][ T9390] RIP: 0023:0xf740efec [ 155.635651][ qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) T9390] Cod ** replaying previous printk message ** [ 155.635651][ T9390] Code: Unable to access opcode bytes at 0xf740efc2. [ 155.635656][ T9390] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 155.635667][ T9390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 155.635674][ T9390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.635681][ T9390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.635687][ T9390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.635693][ T9390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.635707][ T9390] [ 155.735014][ T9396] ------------[ cut here ]------------ [ 155.735023][ T9396] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 155.735031][ T9396] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#1: syz.1.1025/9396 [ 155.765896][ T9396] Modules linked in: [ 155.767520][ T9396] CPU: 1 UID: 0 PID: 9396 Comm: syz.1.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.771659][ T9396] Tainted: [L]=SOFTLOCKUP [ 155.773446][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.776938][ T9396] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 155.779236][ T9396] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 89 e3 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 80 7c 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 8c ad 49 ff 48 8d 7d 18 48 b8 00 [ 155.786975][ T9396] RSP: 0018:ffffc9000e1176a0 EFLAGS: 00010246 [ 155.789620][ T9396] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff8880717d049c [ 155.792907][ T9396] RDX: ffff88801dfa85dc RSI: ffffffff8c0b7c80 RDI: ffffffff924bd9f0 [ 155.795362][ T9396] RBP: ffff8880717d0478 R08: ffff88806c8099dc R09: ffffed100e2fa07b [ 155.798105][ T9396] R10: ffff8880717d03db R11: 0000000000000000 R12: ffff8880717d03c0 [ 155.801582][ T9396] R13: ffff88801dfa8500 R14: ffff88806c8099b8 R15: dffffc0000000000 [ 155.804938][ T9396] FS: 0000000000000000(0000) GS:ffff88809584a000(0063) knlGS:00000000f5426b40 [ 155.808612][ T9396] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 155.811179][ T9396] CR2: 00000000f53e3ff4 CR3: 0000000078d93000 CR4: 0000000000352ef0 [ 155.814134][ T9396] Call Trace: [ 155.815191][ T9396] [ 155.816086][ T9396] ? __pfx_remove_proc_entry+0x10/0x10 [ 155.817708][ T9396] ? mtree_load+0x3a4/0xb50 [ 155.819205][ T9396] ? __pfx_mtree_load+0x10/0x10 [ 155.820735][ T9396] ? rcu_is_watching+0x13/0xc0 [ 155.822237][ T9396] unregister_irq_proc+0x206/0x2a0 [ 155.823675][ T9396] ? __pfx_unregister_irq_proc+0x10/0x10 [ 155.825433][ T9396] free_desc+0x89/0x330 [ 155.826712][ T9396] ? __pfx_free_desc+0x10/0x10 [ 155.828152][ T9396] ? kasan_quarantine_put+0x104/0x240 [ 155.830186][ T9396] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.831936][ T9396] ? irq_domain_free_irqs+0x420/0x5c0 [ 155.833645][ T9396] irq_free_descs+0x84/0xc0 [ 155.835342][ T9396] irq_domain_free_irqs+0x46a/0x5c0 [ 155.837539][ T9396] mp_unmap_irq+0xf8/0x130 [ 155.839337][ T9396] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 155.841813][ T9396] acpi_unregister_gsi_ioapic+0x40/0x60 [ 155.843564][ T9396] acpi_unregister_gsi+0x25/0x40 [ 155.845159][ T9396] acpi_pci_irq_disable+0x275/0x360 [ 155.846719][ T9396] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 155.849102][ T9396] pcibios_disable_device+0x89/0xb0 [ 155.851129][ T9396] do_pci_disable_device+0x9f/0x100 [ 155.852705][ T9396] ? __pfx_do_pci_disable_device+0x10/0x10 [ 155.854516][ T9396] pci_disable_device+0x130/0x270 [ 155.856122][ T9396] pci_device_remove+0xb2/0x1d0 [ 155.857674][ T9396] ? __pfx_pci_device_remove+0x10/0x10 [ 155.859564][ T9396] device_remove+0xcb/0x180 [ 155.861367][ T9396] device_release_driver_internal+0x44e/0x620 [ 155.863515][ T9396] pci_stop_bus_device+0x120/0x160 [ 155.865158][ T9396] pci_stop_and_remove_bus_device+0x58/0xa0 [ 155.866928][ T9396] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 155.868910][ T9396] remove_store+0x123/0x140 [ 155.870284][ T9396] ? __pfx_remove_store+0x10/0x10 [ 155.872013][ T9396] ? find_held_lock+0x2b/0x80 [ 155.873564][ T9396] ? sysfs_file_kobj+0xe4/0x290 [ 155.875601][ T9396] ? sysfs_file_kobj+0xe4/0x290 [ 155.877427][ T9396] ? __pfx_remove_store+0x10/0x10 [ 155.879064][ T9396] dev_attr_store+0x58/0x80 [ 155.880509][ T9396] ? __pfx_dev_attr_store+0x10/0x10 [ 155.882176][ T9396] sysfs_kf_write+0xf2/0x150 [ 155.883566][ T9396] kernfs_fop_write_iter+0x3e0/0x5f0 [ 155.885197][ T9396] ? __pfx_sysfs_kf_write+0x10/0x10 [ 155.886880][ T9396] vfs_write+0x6af/0x1050 [ 155.888238][ T9396] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 155.890071][ T9396] ? __pfx_vfs_write+0x10/0x10 [ 155.891800][ T9396] ? find_held_lock+0x2b/0x80 [ 155.893479][ T9396] ksys_write+0x12a/0x250 [ 155.894895][ T9396] ? __pfx_ksys_write+0x10/0x10 [ 155.896433][ T9396] __do_fast_syscall_32+0x13a/0x8b0 [ 155.898082][ T9396] do_fast_syscall_32+0x32/0x70 [ 155.899688][ T9396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.901760][ T9396] RIP: 0023:0xf740efec [ 155.903067][ T9396] Code: Unable to access opcode bytes at 0xf740efc2. [ 155.905140][ T9396] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 155.908388][ T9396] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 155.911510][ T9396] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.914004][ T9396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.916482][ T9396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.919122][ T9396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.921665][ T9396] [ 155.922651][ T9396] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.924943][ T9396] CPU: 1 UID: 0 PID: 9396 Comm: syz.1.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.928277][ T9396] Tainted: [L]=SOFTLOCKUP [ 155.929677][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.932807][ T9396] Call Trace: [ 155.933873][ T9396] [ 155.934824][ T9396] dump_stack_lvl+0x100/0x190 [ 155.936315][ T9396] vpanic+0x553/0x970 [ 155.937698][ T9396] ? __pfx_vpanic+0x10/0x10 [ 155.939634][ T9396] panic+0xd1/0xe0 [ 155.941202][ T9396] ? __pfx_panic+0x10/0x10 [ 155.943046][ T9396] check_panic_on_warn.cold+0x19/0x34 [ 155.945284][ T9396] ? remove_proc_entry+0x4e7/0x610 [ 155.947421][ T9396] __warn.cold+0x191/0x318 [ 155.949338][ T9396] __report_bug+0x30f/0x440 [ 155.951171][ T9396] ? remove_proc_entry+0x4e7/0x610 [ 155.953283][ T9396] ? __pfx___report_bug+0x10/0x10 [ 155.955373][ T9396] ? __do_fast_syscall_32+0x13a/0x8b0 [ 155.957652][ T9396] ? do_raw_spin_lock+0x128/0x260 [ 155.959812][ T9396] ? find_held_lock+0x2b/0x80 [ 155.961865][ T9396] ? proc_entry_rundown+0x158/0x1e0 [ 155.964060][ T9396] ? proc_entry_rundown+0x158/0x1e0 [ 155.966285][ T9396] report_bug_entry+0xe2/0x290 [ 155.968346][ T9396] ? remove_proc_entry+0x4f5/0x610 [ 155.970493][ T9396] handle_bug+0x1cd/0x2a0 [ 155.972326][ T9396] exc_invalid_op+0x17/0x50 [ 155.974258][ T9396] asm_exc_invalid_op+0x1a/0x20 [ 155.976312][ T9396] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 155.978572][ T9396] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 89 e3 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 80 7c 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 8c ad 49 ff 48 8d 7d 18 48 b8 00 [ 155.986375][ T9396] RSP: 0018:ffffc9000e1176a0 EFLAGS: 00010246 [ 155.988704][ T9396] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff8880717d049c [ 155.991649][ T9396] RDX: ffff88801dfa85dc RSI: ffffffff8c0b7c80 RDI: ffffffff924bd9f0 [ 155.994611][ T9396] RBP: ffff8880717d0478 R08: ffff88806c8099dc R09: ffffed100e2fa07b [ 155.997129][ T9396] R10: ffff8880717d03db R11: 0000000000000000 R12: ffff8880717d03c0 [ 156.000209][ T9396] R13: ffff88801dfa8500 R14: ffff88806c8099b8 R15: dffffc0000000000 [ 156.003592][ T9396] ? __pfx_remove_proc_entry+0x10/0x10 [ 156.006044][ T9396] ? mtree_load+0x3a4/0xb50 [ 156.008000][ T9396] ? __pfx_mtree_load+0x10/0x10 [ 156.010228][ T9396] ? rcu_is_watching+0x13/0xc0 [ 156.012282][ T9396] unregister_irq_proc+0x206/0x2a0 [ 156.014544][ T9396] ? __pfx_unregister_irq_proc+0x10/0x10 [ 156.016944][ T9396] free_desc+0x89/0x330 [ 156.018737][ T9396] ? __pfx_free_desc+0x10/0x10 [ 156.020777][ T9396] ? kasan_quarantine_put+0x104/0x240 [ 156.023074][ T9396] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.025318][ T9396] ? irq_domain_free_irqs+0x420/0x5c0 [ 156.027700][ T9396] irq_free_descs+0x84/0xc0 [ 156.029844][ T9396] irq_domain_free_irqs+0x46a/0x5c0 [ 156.032098][ T9396] mp_unmap_irq+0xf8/0x130 [ 156.034021][ T9396] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 156.036641][ T9396] acpi_unregister_gsi_ioapic+0x40/0x60 [ 156.039024][ T9396] acpi_unregister_gsi+0x25/0x40 [ 156.041131][ T9396] acpi_pci_irq_disable+0x275/0x360 [ 156.043369][ T9396] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 156.045824][ T9396] pcibios_disable_device+0x89/0xb0 [ 156.048024][ T9396] do_pci_disable_device+0x9f/0x100 [ 156.050182][ T9396] ? __pfx_do_pci_disable_device+0x10/0x10 [ 156.052631][ T9396] pci_disable_device+0x130/0x270 [ 156.054780][ T9396] pci_device_remove+0xb2/0x1d0 [ 156.056753][ T9396] ? __pfx_pci_device_remove+0x10/0x10 [ 156.058615][ T9396] device_remove+0xcb/0x180 [ 156.060343][ T9396] device_release_driver_internal+0x44e/0x620 [ 156.062263][ T9396] pci_stop_bus_device+0x120/0x160 [ 156.063927][ T9396] pci_stop_and_remove_bus_device+0x58/0xa0 [ 156.065939][ T9396] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 156.068037][ T9396] remove_store+0x123/0x140 [ 156.069908][ T9396] ? __pfx_remove_store+0x10/0x10 [ 156.072036][ T9396] ? find_held_lock+0x2b/0x80 [ 156.074047][ T9396] ? sysfs_file_kobj+0xe4/0x290 [ 156.076127][ T9396] ? sysfs_file_kobj+0xe4/0x290 [ 156.078215][ T9396] ? __pfx_remove_store+0x10/0x10 [ 156.080368][ T9396] dev_attr_store+0x58/0x80 [ 156.082339][ T9396] ? __pfx_dev_attr_store+0x10/0x10 [ 156.084548][ T9396] sysfs_kf_write+0xf2/0x150 [ 156.086759][ T9396] kernfs_fop_write_iter+0x3e0/0x5f0 [ 156.089191][ T9396] ? __pfx_sysfs_kf_write+0x10/0x10 [ 156.091767][ T9396] vfs_write+0x6af/0x1050 [ 156.093773][ T9396] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 156.096014][ T9396] ? __pfx_vfs_write+0x10/0x10 [ 156.097599][ T9396] ? find_held_lock+0x2b/0x80 [ 156.099388][ T9396] ksys_write+0x12a/0x250 [ 156.100898][ T9396] ? __pfx_ksys_write+0x10/0x10 [ 156.102986][ T9396] __do_fast_syscall_32+0x13a/0x8b0 [ 156.104903][ T9396] do_fast_syscall_32+0x32/0x70 [ 156.106516][ T9396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.108770][ T9396] RIP: 0023:0xf740efec [ 156.110335][ T9396] Code: Unable to access opcode bytes at 0xf740efc2. [ 156.112455][ T9396] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 156.115358][ T9396] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 156.117922][ T9396] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.120672][ T9396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.123254][ T9396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.125719][ T9396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.128195][ T9396] [ 156.129954][ T9396] Kernel Offset: disabled [ 156.131193][ T9396] Rebooting in 86400 seconds..