last executing test programs: 1m35.343112647s ago: executing program 1 (id=918): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000801) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x7335, &(0x7f00000001c0)={0x0, 0x611a, 0x0, 0x3, 0xaa}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa000000e}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000040)={'wlan1\x00', @link_local}) connect$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000040)="0303ec5809e623eae9e05fdffbe5000000004500001c0d7400004011", 0x1c, 0x4808, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) 1m34.410864888s ago: executing program 1 (id=926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xc997405dd37fff69, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe6c, 0x70}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001080)={r7, 0x5, 0xd370, 0x1338c0fa}, &(0x7f00000010c0)=0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x14, r5, 0x301}, 0x14}}, 0x0) 1m34.405881953s ago: executing program 1 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x42200, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110027bd7000fddbdf2503000000050035000d0000008845fc58dbe8f3c05fed7c420a32dfbc20cb050c849ac6346818cf4ac88275bc321db02b552ab35e94462988271afa503e7600fef6936480655981bbc49e417a3830f1676ef0541fdc24de14f040fc7e40ad3bd2c1654145c06ef5afa4f7306e0069ba0e6c941b200a5a349a4b0013d7699911e031ce4118217033ab37efcf0df66329c8a156a436b6a22eae54dd9f1ec42f912a2c712d6cace71cc0251fb8a204840b4cb40cb42baac4b107768225fdf1142f6d57521d37635e83d914322b16169d5f8c2ef20442610e766adb356aa0eedfe1263d8fe329683fad9a80dfa730eeb652"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4c085) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20008088) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000200)={'pcl818\x00', [0x0, 0x2, 0x403, 0xfb, 0x0, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e99, 0x400101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0x10000ffd, 0x2000006, 0xaf, 0x0, 0x10001fc, 0x7, 0x4]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x2040800) 1m34.251316936s ago: executing program 1 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m34.250724002s ago: executing program 1 (id=929): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x7, 0x44, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1a4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "302763400d025dcf501a71403112bf3ccd5edd2070afed3792891f371dfbf0bbbb7bc6f8fe096e2b74d2da2b14a9243defb10e748005f79d635d4bff2a5fe5b7ec4e36bc2a3a93d6d9344f016af884d83e6433234836ca1f3c94fcdc6dce706885ea1e71905747bc801e3675abaa5d0a9f60cc8218c6682cf3074aa69f217f5f05b7701784af46d09111e4688ca4b1979bd5c76a963065279f3aa0dcc8a8af3ca0f67ea6a77bbdca408118e087971713566c432b4f042feb7c138ad3dd4bd4cfb7a0f4723174bb0da99a7f440aee405527c3"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m34.021323851s ago: executing program 1 (id=930): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x110) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x1100, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000001c00128009000100766c616e000000000c0002800600010001000000080005009435ffdb1c87512d466763a96fb46941187af9fe97afef5bdd95ddc297eeedb03e3f0f3f614ebf3f9f4bd18195037c24bd5d6bfd66ae3e46d82cc6f64ac0d6c5632f4204b4b812d6d97500f01a143bc5b0ab8c9ce9372739eb8cdbaed23d9ff2909b4b7a9c21624b160e1a08555589bf6465e9bd3490e8774915e417cf5f9675cd5bcc2b162acebe8148c9cfd618b251da93439b87adf25f84ed5e7a87a294b5ed9d046b214cc20c9d00e2eee5e510127aa8f8589d54e793f2cd6a78829b23674532479b9b49f5f83c925caa7ca9b1b8663f384e50ca0611ef20364489e4937e7d73f431962ccd0a0e9c1ddd58b09c0dd08f38c4bf50a5709d5609749afdd68ff51af8521b57b56ea2ba6bdc92e891f9a4a6cad4bdf119910bb1923142cac67438b011519287b05b9dfbd13366752bfd39c9cd", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m33.952617185s ago: executing program 32 (id=930): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x110) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x1100, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.621295185s ago: executing program 0 (id=984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9}, 0x8) (fail_nth: 1) 1m24.620854263s ago: executing program 0 (id=985): setns(0xc9, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/132, 0x84}], 0x3}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r5, 0x800}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x890c}], 0x20, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r6}}], 0x1c, 0x2400e044}, 0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={r6, @in={{0x2, 0x4e22, @remote}}}, 0x84) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1m24.480591352s ago: executing program 0 (id=986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x280800, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) clock_gettime(0xcfe5324c3e7c0fc0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) 1m24.411303151s ago: executing program 0 (id=987): prlimit64(0x0, 0xe, 0x0, 0x0) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) (async) waitid(0x2, r1, 0x0, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) r4 = socket(0x10, 0x3, 0x0) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1, 0x4, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}}, 0x0) 1m23.291169616s ago: executing program 0 (id=996): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x41090}, 0xd0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000044000701fe7cedf0f1c0be54bbbd3df078c1948fff500000000000000000000400458004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 1m21.640662738s ago: executing program 0 (id=1006): mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x8140, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m21.499927105s ago: executing program 33 (id=1006): mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x8140, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.90758154s ago: executing program 5 (id=1323): socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) (async) socket$inet(0x2, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032a81f100fddbff25050000001e8ede3af7cf185a0ead6c4b6cf8b86b2930d66d1f9d613719598786c9f63fcdb5715b0f36bd60c2fb289964a0b7ea6097a4048795c8a99647470783652c5e9638aa589dac38f93f85c8c0cc608a78deab25b8174d4d74"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) (async) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000480)='./mysys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000000540)=""/1000, 0x3e8) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 3.24739141s ago: executing program 3 (id=1325): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xb00, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 3.244318797s ago: executing program 3 (id=1327): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff090000000000040000000000000002000000070e0000010000000000000002000000000000000180000000000000e0420100000000040000000000000000000000000000000080090000000000000000000000000000f5a9ba6017c103a9acd0422f68276115793cca5f4a7b209414ab3b6db7df1028ef1cde954e03568e5fb1e6b33caaa400863d9eb98ae5c79c9c5126fd588b9f7ff50e16cdf9351b50f0eed4c2cdbce1eb4f22ac58a281857a39dea0f17830f47ad2e572ae2ef92a8ecab1d153756f667271f9867f77d051a5f14d058dfa66af701305"]) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2) writev(r2, &(0x7f0000005200)=[{&(0x7f0000003c40)="fb", 0x1}], 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f00000000c0)=0x80000001) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000100)='n,', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) nanosleep(&(0x7f0000000340)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=ANY=[], 0x10) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4800) setpgid(r9, r9) setpgid(0x0, r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000800)={0x1, 0x0, 0x8080000, 0x2000, &(0x7f0000229000/0x2000)=nil}) 3.158530784s ago: executing program 2 (id=1328): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_CMP_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) unshare(0x2c020400) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x80000) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000001c0)={0x0, 0x16, 0x4, &(0x7f0000000040)={0x1, "6c02112eaf4c4cb6e7de6e83c793e374435592cb7bda8a8b208ce0298d775e326a"}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 3.039981565s ago: executing program 5 (id=1329): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x41090}, 0xd0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000044000701fe7cedf0f1c0be54bbbd3df078c1948fff500000000000000000000400458004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 2.120814123s ago: executing program 5 (id=1331): r0 = syz_open_dev$loop(0x0, 0x80000a, 0x212682) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) write$char_usb(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000540)={'\x00', 0x1, 0xfffffff7, 0xd4, 0x3, 0x8, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r3, 0x3fa3b000) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x2, @vbi={0x2000000, 0x9, 0x7, 0x32314d56, [0x41e5, 0xc53], [0x8, 0x10000], 0x1}}) openat$sr(0xffffff9c, 0x0, 0x9aa40, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000300), &(0x7f0000000280)=0x3) 1.650975772s ago: executing program 3 (id=1333): setns(0xc9, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/132, 0x84}], 0x3}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r5, 0x800}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x890c}], 0x20, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r6}}], 0x1c, 0x2400e044}, 0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={r6, @in={{0x2, 0x4e22, @remote}}}, 0x84) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b8c94bf3f008bbb1d721c61289e0310"}]}, 0x3c}}, 0x22044804) 1.309296485s ago: executing program 2 (id=1334): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) (async) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x1001, 0x1, 0x5}) (async) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x1001, 0x1, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe6, 0xc, "bb9a65cad798ff7c56bb828f661d79eeb2e86687c412e5bf1fa855d2da30af2f86020ddf427aa848b118cc73f87019a87b60c1f8a7bf8b62a39bb89561c7d849e2e50e4616d00ed09e9917b70495e6ac9c2c81be27b0b994d6468bac5c4bbde17325a1ba73c5d725ae1c1d50f620f37431bbd6970018b81779939d5008e44acaec689eeede60efa2704e174bc3f297aafdf20c2da546e60932621ee74542bcf41ca06575ec5f2cb478aa48cb7a2b86eee6e84986f748bdfd223573c47fd9e4bbba88c043d60d9c1d6771270453174317c937f06c6f985c14f2a23c9dc25847f51620"}]}, @NFT_MSG_NEWRULE={0x180, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x158, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x120, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x114, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x3c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_DATA={0xcc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "0a1511535dd5e498da20051ac657bc040faceb825f1640d59ba735223b7fae5db56054dc3536e3c22dcdc6231f2c6411cc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2d0}}, 0x0) 1.309049611s ago: executing program 2 (id=1335): setns(0xc9, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/132, 0x84}], 0x3}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r3, 0x800}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.191140396s ago: executing program 2 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.190527964s ago: executing program 2 (id=1337): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x4000000000, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x78) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x3, 0x301, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x7, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001440)=[{&(0x7f0000004b40)="80", 0x1}], 0x1) (fail_nth: 2) write$FUSE_INIT(r3, 0x0, 0x0) close(r1) 950.366319ms ago: executing program 4 (id=1338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000fd3f000000000000090000001801000020646ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0000008500000006000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0xac) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000400)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x30, '\x00', @buffer={"01bafa6c508131f7c158db180015b4d676632457dad1eea8176fd41e95e7c393", 0x20}, 0x7f}, {0x46, '\x00', @data=0xd8f, 0x3}]}) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@local, 0xffffffff}, @host, 0x0, 0x3, 0x1, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000000c0)="85cb894407551321361007420b65a81ce520c67afe8b60746602acf9e1cd68f10283307c68dc64ebf8cd572e6e4bcda5d42a15000d1fe061a424459cca896d29968b13b07d87abb7875d10537d5547c411377fd70a7f6112b228204007949e9e85babe127190e03197e5", 0x6a) socket$nl_netfilter(0x10, 0x3, 0xc) 950.067349ms ago: executing program 2 (id=1339): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff090000000000040000000000000002000000070e0000010000000000000002000000000000000180000000000000e0420100000000040000000000000000000000000000000080090000000000000000000000000000f5a9ba6017c103a9acd0422f68276115793cca5f4a7b209414ab3b6db7df1028ef1cde954e03568e5fb1e6b33caaa400863d9eb98ae5c79c9c5126fd588b9f7ff50e16cdf9351b50f0eed4c2cdbce1eb4f22ac58a281857a39dea0f17830f47ad2e572ae2ef92a8ecab1d153756f667271f9867f77d051a5f14d058dfa66af7013"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2) writev(r2, &(0x7f0000005200)=[{&(0x7f0000003c40)="fb", 0x1}], 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f00000000c0)=0x80000001) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000100)='n,', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) nanosleep(&(0x7f0000000340)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=ANY=[], 0x10) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4800) setpgid(r9, r9) setpgid(0x0, r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000800)={0x1, 0x0, 0x8080000, 0x2000, &(0x7f0000229000/0x2000)=nil}) 701.242732ms ago: executing program 3 (id=1340): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 700.235727ms ago: executing program 3 (id=1341): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/features\x00', 0x1b6, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000084000000050000001f"], 0x14, 0x4855}, 0x24000052) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r5, @ANYBLOB="0100000000000400000001000000240003000000000000000000000000000000000000000000000000000000000000000000140002007767"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000e500004779f6ba4f4cbbec5253ea9f37e1", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xa9f3, 0x8fb, 0x1, 0xfffffffd}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000002440)={0xfe0, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x60c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3be8ee917672a178665e423f376fe58f9ff399091eb7584b47802fd7edb39dad"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f589ea49790ddf342581d6acf9b5384237455b6687c15fd53416e12543394c1c"}]}, {0x56c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x478, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2211bd980609e6fe3981ba08962d1f18a794b08bc7e19e80bdca45532b4d9bb"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x964, 0x8, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4af8243e68e81bccbe94e428dfba540bcbf5c63f388783fb6d5f1833bd8063a6"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4099}, @WGPEER_A_ALLOWEDIPS={0x1f4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "450d6350995bcb0afeffd51e5523073e010000005cc4eea0faef82430489b6a8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @private2, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4}, {0x5bc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @private0, 0xe}}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0xfe0}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='v', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x7fff, 0x2) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x1, 0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc) 580.609568ms ago: executing program 4 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x0, 0x7, 0x1}, 0x8) openat$hpet(0xffffff9c, &(0x7f0000000000), 0x80280, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x120000, 0x0, {[0x0, 0x1, 0xfffffffffffffffd, 0x1, 0x7fffffffffffffff, 0x8, 0x9, 0x7fff]}}) 470.609806ms ago: executing program 3 (id=1343): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4008030) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000780)=@newtaction={0x164, 0x30, 0x9, 0x0, 0x0, {}, [{0x150, 0x1, [@m_simple={0x14c, 0x1c, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x7ef0, 0x10000000, 0x86, 0x40}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x27, 0x3, '>\xcd|+0ToO\xaf\xf9\xb2x7e\xf0E^>\xf0\x13h|*\xb0n*\xe6\xa1\x8e\xdeZ\xe0\xea7\x10'}]}, {0xc1, 0x6, "4e0452023650f0b1ea5d316fcc345d95bcc00ea9f7bf39425e81acc347d70db29f543d6df1ebcebb8c71bdcfda3881fdf3c975dcac6e479c8a9ad93f840c94a406c6c9019a4716f5f21b76ecec31ac512a0b8d3f865e45563eb12f49717603fbe5240e0d782bd9b98e06d5b4db94d8c32a004c8c7bdb62572dbec8786cbeeb084b67ecdf7edcb61fbb61320f52015aeafb3b05949d74b60c297d7b5a5de42578b2fb4889d274ec56d721d10e42cb86a7fa4439d591b6275ce793e8cdb8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x164}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) sendmmsg$unix(r3, &(0x7f000000bf40)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000004dc0)=[@rights={{0xc}}], 0xc, 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x0, 0x4) pipe2(&(0x7f0000000040), 0x800) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x2004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) 400.999256ms ago: executing program 4 (id=1344): setns(0xc9, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r3, 0x800}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 388.124932ms ago: executing program 5 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 310.070961ms ago: executing program 4 (id=1346): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) 309.530128ms ago: executing program 5 (id=1347): socket$inet_udp(0x2, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (fail_nth: 9) 223.900233ms ago: executing program 5 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="deee0d5716dc6d4318f52d0c203d58da55d31a34c782345807c3da68c470d3c7862c3ffcf818f58f26c02212f4043c7625a9f514c1d084372770269cc78ddd313c80c17be050d21ded1c5c2cdfefd9044103208919f99592df39c8f82f790408caf0e176983bbbf50925bc69ffcbefebd4305dbc0200ed6ad6f1921e83b54cee10a8958b18131221360d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x24483) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x2, 0xfffffffc}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, r5, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000575080000010000185100000b00000000000000000000001841000008000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000000c0603820000000019110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000005bbfcfff0ffffff18000000060000000000000004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 71.812298ms ago: executing program 4 (id=1349): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 0s ago: executing program 4 (id=1350): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40e01}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) kernel console output (not intermixed with test programs): 13a/0x8b0 [ 187.338977][ T7823] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.338996][ T7823] do_fast_syscall_32+0x32/0x70 [ 187.339014][ T7823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.339039][ T7823] RIP: 0023:0xf7fa2fec [ 187.339061][ T7823] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 187.339068][ T7823] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 187.339083][ T7823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c04 [ 187.339093][ T7823] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.339103][ T7823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.339112][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.339121][ T7823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.339143][ T7823] [ 187.339161][ T7823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.406662][ T1160] wlan1: authentication with 08:02:11:00:00:00 timed out [ 187.450435][ T7822] Dev loop5: unable to read RDB block 7 [ 187.453160][ T7822] loop5: unable to read partition table [ 187.455277][ T7822] loop5: partition table beyond EOD, truncated [ 187.457648][ T7822] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 187.479097][ T7823] support for the xor transformation has been removed. [ 187.570251][ T7826] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 187.570251][ T7826]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 187.570251][ T7826] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 187.810595][ T7833] fuse: Unknown parameter '' [ 188.072816][ T7844] netlink: 'syz.1.565': attribute type 11 has an invalid length. [ 188.103074][ T7846] syzkaller0: entered promiscuous mode [ 188.105648][ T7846] syzkaller0: entered allmulticast mode [ 188.139320][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.569'. [ 188.191897][ T7848] busy [ 188.449146][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 188.487381][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.575001][ T7861] busy [ 188.604055][ T7858] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 188.638388][ T7858] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 188.642335][ T7858] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 188.670557][ T7858] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 188.677310][ T7858] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 188.715691][ T7865] syzkaller0: entered promiscuous mode [ 188.717738][ T7865] syzkaller0: entered allmulticast mode [ 188.721518][ T7865] FAULT_INJECTION: forcing a failure. [ 188.721518][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 188.725775][ T7865] CPU: 0 UID: 0 PID: 7865 Comm: syz.2.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.725792][ T7865] Tainted: [L]=SOFTLOCKUP [ 188.725796][ T7865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.725808][ T7865] Call Trace: [ 188.725819][ T7865] [ 188.725824][ T7865] dump_stack_lvl+0x100/0x190 [ 188.725897][ T7865] should_fail_ex.cold+0x5/0xa [ 188.725915][ T7865] should_failslab+0xc2/0x120 [ 188.725938][ T7865] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 188.725960][ T7865] ? __alloc_skb+0x5b7/0x710 [ 188.726002][ T7865] ? __alloc_skb+0x140/0x710 [ 188.726016][ T7865] __alloc_skb+0x140/0x710 [ 188.726027][ T7865] ? __alloc_skb+0x5b7/0x710 [ 188.726038][ T7865] ? __pfx___alloc_skb+0x10/0x10 [ 188.726054][ T7865] alloc_skb_with_frags+0xdd/0x760 [ 188.726069][ T7865] ? bpf_ksym_find+0x124/0x1c0 [ 188.726094][ T7865] sock_alloc_send_pskb+0x801/0x980 [ 188.726107][ T7865] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 188.726146][ T7865] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 188.726158][ T7865] ? find_held_lock+0x2b/0x80 [ 188.726179][ T7865] ? dev_get_by_index+0x180/0x380 [ 188.726191][ T7865] ? dev_get_by_index+0x180/0x380 [ 188.726207][ T7865] packet_sendmsg+0x1ed7/0x4f00 [ 188.726229][ T7865] ? __pfx___might_resched+0x10/0x10 [ 188.726247][ T7865] ? aa_sk_perm+0x30c/0xaa0 [ 188.726264][ T7865] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.726278][ T7865] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.726288][ T7865] ? __might_fault+0xc5/0x140 [ 188.726311][ T7865] ? apparmor_socket_sendmsg+0x15b/0x270 [ 188.726326][ T7865] __sys_sendto+0x48b/0x4e0 [ 188.726337][ T7865] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.726347][ T7865] ? __pfx___sys_sendto+0x10/0x10 [ 188.726368][ T7865] ? fput+0x7c/0x100 [ 188.726388][ T7865] ? ksys_write+0x1ac/0x250 [ 188.726401][ T7865] __ia32_sys_sendto+0xdd/0x1b0 [ 188.726413][ T7865] ? __do_fast_syscall_32+0xb3/0x8b0 [ 188.726441][ T7865] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.726452][ T7865] __do_fast_syscall_32+0x13a/0x8b0 [ 188.726463][ T7865] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.726474][ T7865] do_fast_syscall_32+0x32/0x70 [ 188.726486][ T7865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.726501][ T7865] RIP: 0023:0xf7fa2fec [ 188.726543][ T7865] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 188.726555][ T7865] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 188.726566][ T7865] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 188.726573][ T7865] RDX: 00000000000005dc RSI: 0000000000004009 RDI: 0000000080000140 [ 188.726584][ T7865] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 188.726590][ T7865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.726596][ T7865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.726616][ T7865] [ 188.913727][ T7867] FAULT_INJECTION: forcing a failure. [ 188.913727][ T7867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.940457][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.940477][ T7867] Tainted: [L]=SOFTLOCKUP [ 188.940480][ T7867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.940488][ T7867] Call Trace: [ 188.940494][ T7867] [ 188.940499][ T7867] dump_stack_lvl+0x100/0x190 [ 188.940518][ T7867] should_fail_ex.cold+0x5/0xa [ 188.940531][ T7867] _copy_to_user+0x32/0xd0 [ 188.940545][ T7867] simple_read_from_buffer+0xcb/0x170 [ 188.940560][ T7867] proc_fail_nth_read+0x1af/0x230 [ 188.940573][ T7867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.940586][ T7867] ? rw_verify_area+0xce/0x6d0 [ 188.940596][ T7867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.940608][ T7867] vfs_read+0x1e4/0xb40 [ 188.940622][ T7867] ? __pfx_vfs_read+0x10/0x10 [ 188.940632][ T7867] ? find_held_lock+0x2b/0x80 [ 188.940648][ T7867] ? __fget_files+0x215/0x3d0 [ 188.940663][ T7867] ? __fget_files+0x21f/0x3d0 [ 188.940679][ T7867] ksys_read+0x12a/0x250 [ 188.940690][ T7867] ? __pfx_ksys_read+0x10/0x10 [ 188.940705][ T7867] do_int80_emulation+0x166/0x650 [ 188.940719][ T7867] asm_int80_emulation+0x1a/0x20 [ 188.940731][ T7867] RIP: 0023:0xf71074eb [ 188.940740][ T7867] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 188.940751][ T7867] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 188.940762][ T7867] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53c65d0 [ 188.940769][ T7867] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 188.940775][ T7867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.940781][ T7867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.940787][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.940800][ T7867] [ 189.093376][ T7858] pci 0000:00:01.0: Adding to iommu group 1 [ 189.112114][ T7858] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 189.115074][ T7858] pci 0000:00:01.0: vgaarb: bridge control possible [ 189.117608][ T7858] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 189.121645][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.149063][ T7858] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 189.171957][ T7858] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 189.181468][ T7858] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 189.211599][ T7874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.244141][ T7858] [drm] Found bochs VGA, ID 0xb0c5. [ 189.247562][ T7858] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 189.256152][ T7858] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 189.294019][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.377528][ T7881] hpfs: hpfs_map_sector(): read error [ 189.573179][ T7887] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 189.577613][ T7888] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 189.577613][ T7888]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 189.577613][ T7888] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 189.580859][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.580908][ T7887] Tainted: [L]=SOFTLOCKUP [ 189.580916][ T7887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.580940][ T7887] Call Trace: [ 189.580957][ T7887] [ 189.580966][ T7887] dump_stack_lvl+0x100/0x190 [ 189.581070][ T7887] sysfs_warn_dup.cold+0x1c/0x28 [ 189.581110][ T7887] sysfs_create_dir_ns+0x24b/0x2b0 [ 189.581158][ T7887] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 189.581182][ T7887] ? find_held_lock+0x2b/0x80 [ 189.581218][ T7887] ? kobject_add_internal+0x25f/0x930 [ 189.581292][ T7887] ? kobject_add_internal+0x25f/0x930 [ 189.581322][ T7887] ? class_dir_child_ns_type+0xd/0x60 [ 189.581362][ T7887] kobject_add_internal+0x2c8/0x930 [ 189.581394][ T7887] kobject_add+0x16a/0x1e0 [ 189.581420][ T7887] ? __pfx_kobject_add+0x10/0x10 [ 189.581446][ T7887] ? get_device_parent+0x1b3/0x4c0 [ 189.581469][ T7887] ? kobject_put+0xb9/0x640 [ 189.581500][ T7887] device_add+0x294/0x1970 [ 189.581525][ T7887] ? lockdep_init_map_type+0x5c/0x250 [ 189.581546][ T7887] ? __pfx_device_add+0x10/0x10 [ 189.581570][ T7887] ? lockdep_init_map_type+0x5c/0x250 [ 189.581590][ T7887] ? __init_waitqueue_head+0xca/0x150 [ 189.581629][ T7887] tty_register_device_attr+0x388/0x7f0 [ 189.581655][ T7887] ? lockdep_init_map_type+0x5c/0x250 [ 189.581679][ T7887] ? __pfx_tty_register_device_attr+0x10/0x10 [ 189.581708][ T7887] ? tty_port_init+0x156/0x1c0 [ 189.581734][ T7887] gsm_activate_mux+0x155/0x2a0 [ 189.581758][ T7887] gsmld_ioctl+0xbbc/0x15c0 [ 189.581808][ T7887] ? __pfx_gsmld_ioctl+0x10/0x10 [ 189.581855][ T7887] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.581899][ T7887] ? __pfx_gsmld_ioctl+0x10/0x10 [ 189.581926][ T7887] tty_compat_ioctl+0x396/0x420 [ 189.581950][ T7887] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 189.581975][ T7887] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 189.582008][ T7887] __do_fast_syscall_32+0x13a/0x8b0 [ 189.582050][ T7887] do_fast_syscall_32+0x32/0x70 [ 189.582073][ T7887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.582100][ T7887] RIP: 0023:0xf70befec [ 189.582123][ T7887] Code: Unable to access opcode bytes at 0xf70befc2. [ 189.582141][ T7887] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 189.582163][ T7887] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000404c4701 [ 189.582177][ T7887] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.582189][ T7887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.582201][ T7887] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.582214][ T7887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.582240][ T7887] [ 189.582407][ T7887] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.532102][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.591344][ T7906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.651187][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.065153][ T7913] autofs4:pid:7913:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 191.287505][ T7915] Cannot find add_set index 2 as target [ 191.306726][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 191.458677][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 191.462570][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 191.465869][ T24] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 191.470752][ T24] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 191.474407][ T24] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 191.477970][ T24] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 191.482142][ T24] usb 8-1: config 14 has no interface number 0 [ 191.484724][ T24] usb 8-1: config 14 has no interface number 1 [ 191.487457][ T24] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 191.491851][ T24] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 191.496834][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.501436][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 191.505937][ T24] usb 8-1: config 14 interface 57 has no altsetting 0 [ 191.508910][ T24] usb 8-1: config 14 interface 228 has no altsetting 0 [ 191.513847][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.519016][ T24] usb 8-1: Product: syz [ 191.520965][ T24] usb 8-1: Manufacturer: syz [ 191.522934][ T24] usb 8-1: SerialNumber: syz [ 191.976129][ T7922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.980389][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.993429][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.011101][ T24] legousbtower 8-1:14.57: interrupt endpoints not found [ 192.023639][ T24] legousbtower 8-1:14.228: get version request failed: -71 [ 192.027347][ T24] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 192.042318][ T24] usb 8-1: USB disconnect, device number 11 [ 192.049478][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.119141][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.590'. [ 192.129565][ T7928] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 192.133009][ T7928] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 192.136500][ T7928] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.590'. [ 192.142522][ T7928] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 192.145855][ T7928] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 192.149467][ T7928] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.590'. [ 192.152806][ T7929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.177743][ T7931] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 192.177743][ T7931]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 192.177743][ T7931] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 192.582368][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.651976][ T7934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.710386][ T7935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.974878][ T7938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.985850][ T7938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.995257][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'. [ 193.019556][ T24] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 193.023342][ T24] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 193.078437][ T7940] busy [ 193.136646][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 193.246658][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 193.370104][ T221] wlan1: authentication with 08:02:11:00:00:00 timed out [ 193.604962][ T7958] Cannot find add_set index 2 as target [ 193.715095][ T7963] netlink: 104 bytes leftover after parsing attributes in process `syz.0.601'. [ 193.718827][ T7963] netlink: 104 bytes leftover after parsing attributes in process `syz.0.601'. [ 193.724218][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 193.843236][ T7966] comedi comedi2: pcl818: a I/O base address must be specified [ 193.848252][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.851861][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.136698][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.187884][ T7973] netlink: 'syz.3.604': attribute type 11 has an invalid length. [ 194.276679][ T24] usb 5-1: device descriptor read/64, error -71 [ 194.341131][ T7979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.350448][ T7980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.398582][ T7981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.454806][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.526759][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.666696][ T24] usb 5-1: device descriptor read/64, error -71 [ 194.785498][ T24] usb usb5-port1: attempt power cycle [ 194.915026][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 194.978323][ T7987] busy [ 195.167042][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.187449][ T24] usb 5-1: device descriptor read/8, error -71 [ 195.320852][ T7995] warning: `syz.1.610' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.437617][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.457536][ T24] usb 5-1: device descriptor read/8, error -71 [ 195.460188][ T7995] usb3503 0-0008: unknown mode is requested [ 195.462746][ T7995] usb3503 0-0008: usb3503_probe: probed in standby mode [ 195.469082][ T7995] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 195.568264][ T24] usb usb5-port1: unable to enumerate USB device [ 195.754576][ T8005] FAULT_INJECTION: forcing a failure. [ 195.754576][ T8005] name failslab, interval 1, probability 0, space 0, times 0 [ 195.758770][ T8005] CPU: 3 UID: 0 PID: 8005 Comm: syz.2.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.758787][ T8005] Tainted: [L]=SOFTLOCKUP [ 195.758802][ T8005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.758810][ T8005] Call Trace: [ 195.758814][ T8005] [ 195.758819][ T8005] dump_stack_lvl+0x100/0x190 [ 195.758837][ T8005] should_fail_ex.cold+0x5/0xa [ 195.758857][ T8005] should_failslab+0xc2/0x120 [ 195.758880][ T8005] __kvmalloc_node_noprof+0x116/0x970 [ 195.758903][ T8005] ? __do_sys_add_key+0x244/0x460 [ 195.758917][ T8005] __do_sys_add_key+0x244/0x460 [ 195.758929][ T8005] ? __pfx___do_sys_add_key+0x10/0x10 [ 195.758939][ T8005] ? fput+0x7c/0x100 [ 195.758955][ T8005] ? __pfx_ksys_write+0x10/0x10 [ 195.758969][ T8005] __do_fast_syscall_32+0x13a/0x8b0 [ 195.758983][ T8005] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.758996][ T8005] do_fast_syscall_32+0x32/0x70 [ 195.759008][ T8005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.759022][ T8005] RIP: 0023:0xf7fa2fec [ 195.759037][ T8005] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 195.759042][ T8005] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 195.759053][ T8005] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 195.759059][ T8005] RDX: 0000000080000200 RSI: 0000000000000002 RDI: 00000000fffffffd [ 195.759065][ T8005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.759071][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.759077][ T8005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.759090][ T8005] [ 196.308731][ T8018] Cannot find add_set index 2 as target [ 196.344825][ T8020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.407086][ T8021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.475777][ T8026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.790668][ T8034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.622'. [ 196.795830][ T8034] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 196.798447][ T8034] netlink: 'syz.2.622': attribute type 4 has an invalid length. [ 196.801227][ T8034] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.622'. [ 196.805252][ T8034] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 196.807756][ T8034] netlink: 'syz.2.622': attribute type 4 has an invalid length. [ 196.810206][ T8034] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.622'. [ 196.924280][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.941608][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.040330][ T8043] ½ [ 197.400079][ T8049] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 197.400079][ T8049]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 197.400079][ T8049] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 198.027598][ T8057] Cannot find add_set index 2 as target [ 198.126668][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.267985][ T24] usb 5-1: device descriptor read/64, error -71 [ 198.335879][ T8068] jffs2: notice: (8068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.506741][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 198.636705][ T24] usb 5-1: device descriptor read/64, error -71 [ 198.747729][ T24] usb usb5-port1: attempt power cycle [ 199.046047][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.052068][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.096895][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 199.110505][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.121940][ T24] usb 5-1: device descriptor read/8, error -71 [ 199.168421][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.253495][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.356868][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 199.377488][ T24] usb 5-1: device descriptor read/8, error -71 [ 199.487103][ T24] usb usb5-port1: unable to enumerate USB device [ 200.259211][ T8094] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 200.259211][ T8094]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 200.259211][ T8094] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 200.901514][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.948181][ T8109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.954447][ T8109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.015242][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.071574][ T8114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.274708][ T8137] kAFS: unable to lookup cell 'syz0' [ 202.466711][ T998] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 202.596645][ T998] usb 8-1: device descriptor read/64, error -71 [ 202.606991][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 202.709606][ T8151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.715801][ T8151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.756777][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 202.760949][ T50] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 202.764322][ T5820] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 202.765665][ T50] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 202.768183][ T5820] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 202.771706][ T50] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.774694][ T221] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 202.777912][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.781714][ T221] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 202.784139][ T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 202.786273][ T221] wlan1: authentication with 08:02:11:00:00:00 timed out [ 202.790142][ T50] usb 7-1: config 1 has no interface number 0 [ 202.796399][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.817800][ T50] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 202.836660][ T998] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 202.976652][ T998] usb 8-1: device descriptor read/64, error -71 [ 203.096873][ T998] usb usb8-port1: attempt power cycle [ 203.222483][ T50] snd_usb_pod 7-1:1.1: set_interface failed [ 203.228898][ T50] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 203.231992][ T50] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 203.237590][ T50] usb 7-1: USB disconnect, device number 12 [ 203.446802][ T998] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 203.468260][ T998] usb 8-1: device descriptor read/8, error -71 [ 203.494292][ T8158] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 203.534490][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.592446][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.649847][ T8163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.726779][ T998] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 203.757473][ T998] usb 8-1: device descriptor read/8, error -71 [ 203.876898][ T998] usb usb8-port1: unable to enumerate USB device [ 204.178347][ T8177] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 204.209594][ T8177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.294497][ T8177] syz_tun: left promiscuous mode [ 204.306077][ T8177] bond0: (slave syz_tun): Releasing backup interface [ 204.314613][ T8177] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 204.946707][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 205.091072][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.095839][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.099089][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 205.101329][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.104998][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.108090][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.110957][ T10] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 205.114495][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 205.118094][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 205.121230][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.125581][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.132819][ T5822] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 205.136717][ T5822] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 205.141501][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 205.143511][ T221] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 205.157028][ T221] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 205.164273][ T221] wlan1: authentication with 08:02:11:00:00:00 timed out [ 205.344605][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 205.350403][ T10] usbtmc 7-1:16.0: can't read capabilities [ 205.649018][ T8180] FAULT_INJECTION: forcing a failure. [ 205.649018][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 205.664851][ T8180] CPU: 2 UID: 0 PID: 8180 Comm: syz.2.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.664885][ T8180] Tainted: [L]=SOFTLOCKUP [ 205.664894][ T8180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.664904][ T8180] Call Trace: [ 205.664913][ T8180] [ 205.664920][ T8180] dump_stack_lvl+0x100/0x190 [ 205.664949][ T8180] should_fail_ex.cold+0x5/0xa [ 205.664971][ T8180] should_failslab+0xc2/0x120 [ 205.665001][ T8180] __kmalloc_noprof+0xfc/0x820 [ 205.665028][ T8180] ? tomoyo_encode2+0xfb/0x3c0 [ 205.665059][ T8180] tomoyo_encode2+0xfb/0x3c0 [ 205.665089][ T8180] tomoyo_encode+0x29/0x50 [ 205.665115][ T8180] tomoyo_realpath_from_path+0x18c/0x690 [ 205.665148][ T8180] tomoyo_path_number_perm+0x23c/0x580 [ 205.665172][ T8180] ? tomoyo_path_number_perm+0x22e/0x580 [ 205.665197][ T8180] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.665221][ T8180] ? get_pid_task+0x106/0x250 [ 205.665283][ T8180] ? find_held_lock+0x2b/0x80 [ 205.665306][ T8180] ? __fget_files+0x215/0x3d0 [ 205.665327][ T8180] ? hook_file_ioctl_common+0x140/0x440 [ 205.665352][ T8180] ? __fget_files+0x215/0x3d0 [ 205.665377][ T8180] ? __fget_files+0x21f/0x3d0 [ 205.665402][ T8180] security_file_ioctl_compat+0xd3/0x230 [ 205.665430][ T8180] __ia32_compat_sys_ioctl+0xc2/0x360 [ 205.665453][ T8180] __do_fast_syscall_32+0x13a/0x8b0 [ 205.665480][ T8180] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.665500][ T8180] do_fast_syscall_32+0x32/0x70 [ 205.665521][ T8180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.665543][ T8180] RIP: 0023:0xf7fa2fec [ 205.665565][ T8180] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 205.665574][ T8180] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 205.665593][ T8180] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145b0e [ 205.665606][ T8180] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.665616][ T8180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.665627][ T8180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.665637][ T8180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.665660][ T8180] [ 205.665680][ T8180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.776870][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.801863][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.804786][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.808007][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.810980][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.813884][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.833120][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.836078][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.839060][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.841952][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.844786][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.847639][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.850426][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.855094][ T5820] e1000 0000:00:06.0 eth0: Reset adapter [ 205.874818][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.877894][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.880649][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 205.889657][ T24] usb 7-1: USB disconnect, device number 13 [ 206.166779][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 206.180344][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 206.183911][ T5751] Bluetooth: hci2: command 0x0406 tx timeout [ 206.187308][ T5749] Bluetooth: hci3: command 0x0406 tx timeout [ 206.488043][ T8218] netlink: 104 bytes leftover after parsing attributes in process `syz.2.678'. [ 206.491635][ T8218] netlink: 104 bytes leftover after parsing attributes in process `syz.2.678'. [ 206.496439][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 206.854407][ T8232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.913664][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.973795][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.168880][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 223.327212][ T8264] jffs2: notice: (8264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.335893][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 223.372019][ T8266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 223.373202][ T8266] kvm: Disabled LAPIC found during irq injection [ 223.389422][ T8268] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 223.416511][ T8275] tipc: Started in network mode [ 223.424135][ T8275] tipc: Node identity ac14142f, cluster identity 4711 [ 223.428601][ T8275] tipc: New replicast peer: 172.20.20.170 [ 223.432030][ T8275] tipc: Enabled bearer , priority 10 [ 223.436426][ T8275] tipc: New replicast peer: 0.0.0.0 [ 223.606429][ T8281] autofs: Unknown parameter '0' [ 223.709598][ T8283] ceph: Path missing in source [ 224.312641][ T8296] netlink: 'syz.3.693': attribute type 12 has an invalid length. [ 224.370098][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.380653][ T8280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.408832][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.411385][ T8280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.415857][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.420840][ T8280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.428269][ T1038] tipc: Node number set to 2886997039 [ 224.437207][ T8280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.439626][ T8280] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.532490][ T8309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.548415][ T8311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 224.774335][ T8309] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 225.187477][ T8322] loop2: detected capacity change from 0 to 7 [ 225.195135][ T8322] Dev loop2: unable to read RDB block 7 [ 225.197310][ T8322] loop2: unable to read partition table [ 225.199605][ T8322] loop2: partition table beyond EOD, truncated [ 225.202149][ T8322] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.237256][ T8322] device-mapper: table: 248:0: too large device [ 225.241460][ T8322] device-mapper: ioctl: error adding target to table [ 225.252082][ T5146] Dev loop2: unable to read RDB block 7 [ 225.260284][ T5146] loop2: unable to read partition table [ 225.262385][ T5146] loop2: partition table beyond EOD, truncated [ 225.333851][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 225.349683][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.353149][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.856822][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 226.101595][ T8356] jffs2: notice: (8356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.209269][ T8365] jffs2: notice: (8365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.234076][ T42] audit: type=1800 audit(1787127786.865:78): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.705" name="size" dev="configfs" ino=20368 res=0 errno=0 [ 226.368461][ T8338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.371490][ T8338] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 226.389946][ T8338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.391666][ T8338] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 226.399265][ T8338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.400948][ T8338] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 226.403843][ T8338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.405548][ T8338] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 226.420521][ T8377] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 226.420521][ T8377]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 226.420521][ T8377] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 226.711496][ T42] audit: type=1800 audit(1787127787.345:79): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.705" name="zoned" dev="configfs" ino=21295 res=0 errno=0 [ 227.232438][ T8402] jffs2: notice: (8402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.286755][ T8407] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 227.286755][ T8407]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 227.286755][ T8407] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 227.557292][ T8409] Invalid ELF header magic: != ELF [ 227.729335][ T8409] overlayfs: overlapping lowerdir path [ 228.372748][ T8415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 228.374558][ T8417] jffs2: notice: (8417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.426070][ T8421] binder: 8418:8421 ioctl 401c7012 0 returned -22 [ 228.449292][ T8421] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 228.509021][ T8421] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 228.573830][ T8427] netlink: 'syz.1.717': attribute type 5 has an invalid length. [ 228.613559][ T42] audit: type=1800 audit(1787127789.245:80): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.719" name="size" dev="configfs" ino=21972 res=0 errno=0 [ 228.823455][ T8438] jffs2: notice: (8438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.877222][ T8440] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 228.877222][ T8440]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 228.877222][ T8440] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 228.890288][ T42] audit: type=1800 audit(1787127789.525:81): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.719" name="zoned" dev="configfs" ino=21982 res=0 errno=0 [ 228.970905][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 229.010736][ T8446] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 230.083758][ T8465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.088332][ T8466] binder: 8464:8466 ioctl c0306201 0 returned -14 [ 230.095443][ T8466] binder: 8464:8466 ioctl f503 0 returned -22 [ 230.432030][ T8481] jffs2: notice: (8481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.440147][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.735'. [ 230.568387][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 231.440425][ T8516] Invalid ELF header magic: != ELF [ 231.446074][ T8516] overlayfs: overlapping lowerdir path [ 232.644109][ T8536] jffs2: notice: (8536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.656416][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 232.660085][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.745'. [ 232.748545][ T8543] comedi comedi2: pcl818: a I/O base address must be specified [ 233.531936][ T8572] jffs2: notice: (8572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.695767][ T8579] comedi comedi2: pcl818: a I/O base address must be specified [ 234.005598][ T8589] netlink: 88 bytes leftover after parsing attributes in process `syz.2.760'. [ 234.093466][ T8597] jffs2: notice: (8597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.432217][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.500848][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.607924][ T8616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.770339][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.846362][ T8620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.916012][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.316207][ T8634] jffs2: notice: (8634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.165646][ T8657] syzkaller0: entered promiscuous mode [ 236.168213][ T8657] syzkaller0: entered allmulticast mode [ 236.496134][ T8662] comedi comedi2: pcl818: a I/O base address must be specified [ 236.799192][ T8668] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 236.799192][ T8668]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 236.799192][ T8668] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 236.800920][ T8670] jffs2: notice: (8670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.221468][ T8682] fuse: Unknown parameter 'user_i00000000000000000000' [ 237.256868][ T50] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 237.282185][ T8673] vivid-000: unregistering video7 [ 237.293476][ T8673] vivid-000: unregistering video8 [ 237.301723][ T8673] vivid-000: unregistering vbi0 [ 237.334671][ T8673] vivid-000: unregistering vbi1 [ 237.341078][ T8673] vivid-000: unregistering swradio0 [ 237.354837][ T8673] vivid-000: unregistering radio0 [ 237.361304][ T8673] vivid-000: unregistering radio1 [ 237.368618][ T8673] vivid-000: unregistering video9 [ 237.396675][ T8673] vivid-000: unregistering video10 [ 237.416515][ T8673] vivid-000: unregistering v4l-touch0 [ 237.416631][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 237.424718][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 237.427977][ T50] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 237.432613][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.435727][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.440797][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.444543][ T50] usb 8-1: Product: syz [ 237.446832][ T50] usb 8-1: Manufacturer: syz [ 237.449390][ T50] usb 8-1: SerialNumber: syz [ 237.489439][ T8673] vivid-001: unregistering video11 [ 237.503347][ T8673] vivid-001: unregistering video12 [ 237.519284][ T8673] vivid-001: unregistering vbi2 [ 237.545704][ T8673] vivid-001: unregistering vbi3 [ 237.554134][ T8673] vivid-001: unregistering swradio1 [ 237.570400][ T8673] vivid-001: unregistering radio2 [ 237.587933][ T8673] vivid-001: unregistering radio3 [ 237.599242][ T8673] vivid-001: unregistering video13 [ 237.605371][ T8673] vivid-001: unregistering video14 [ 237.611778][ T8673] vivid-001: unregistering v4l-touch1 [ 237.667630][ T8673] vivid-002: unregistering video15 [ 237.672746][ T8673] vivid-002: unregistering video16 [ 237.681352][ T8673] vivid-002: unregistering vbi4 [ 237.711562][ T8673] vivid-002: unregistering vbi5 [ 237.735024][ T8673] vivid-002: unregistering swradio2 [ 237.751631][ T8685] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 237.754707][ T8673] vivid-002: unregistering radio4 [ 237.757523][ T8673] vivid-002: unregistering radio5 [ 237.778341][ T8673] vivid-002: unregistering video17 [ 237.790764][ T8673] vivid-002: unregistering video18 [ 237.809025][ T8673] vivid-002: unregistering v4l-touch2 [ 237.889864][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.890182][ T8673] vivid-003: unregistering video19 [ 237.907551][ T8673] vivid-003: unregistering video20 [ 237.907657][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.914364][ T8673] vivid-003: unregistering vbi6 [ 237.925180][ T8673] vivid-003: unregistering vbi7 [ 237.932856][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.945695][ T8673] vivid-003: unregistering swradio3 [ 237.960268][ T8673] vivid-003: unregistering radio6 [ 237.968187][ T8673] vivid-003: unregistering radio7 [ 237.974649][ T8673] vivid-003: unregistering video21 [ 237.981446][ T8673] vivid-003: unregistering video22 [ 237.987351][ T8673] vivid-003: unregistering v4l-touch3 [ 237.998615][ T8689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.024484][ T8673] vivid-004: unregistering video23 [ 238.030864][ T8673] vivid-004: unregistering video24 [ 238.036836][ T8673] vivid-004: unregistering vbi8 [ 238.046394][ T8673] vivid-004: unregistering vbi9 [ 238.064178][ T8673] vivid-004: unregistering swradio4 [ 238.093125][ T8691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.105267][ T8673] vivid-004: unregistering radio8 [ 238.113322][ T8673] vivid-004: unregistering radio9 [ 238.118492][ T8673] vivid-004: unregistering video25 [ 238.123976][ T8673] vivid-004: unregistering video26 [ 238.130035][ T8673] vivid-004: unregistering v4l-touch4 [ 238.170434][ T8673] vivid-005: unregistering video27 [ 238.173804][ T8673] vivid-005: unregistering video28 [ 238.182624][ T8673] vivid-005: unregistering vbi10 [ 238.190638][ T8673] vivid-005: unregistering vbi11 [ 238.199666][ T8673] vivid-005: unregistering swradio5 [ 238.207875][ T8673] vivid-005: unregistering radio10 [ 238.212261][ T8673] vivid-005: unregistering radio11 [ 238.215968][ T8673] vivid-005: unregistering video29 [ 238.219308][ T8673] vivid-005: unregistering video30 [ 238.221834][ T8673] vivid-005: unregistering v4l-touch5 [ 238.275710][ T50] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 238.281115][ T8673] vivid-006: unregistering video31 [ 238.286599][ T50] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 238.286623][ T8673] vivid-006: unregistering video32 [ 238.293699][ T8673] vivid-006: unregistering vbi12 [ 238.306230][ T8673] vivid-006: unregistering vbi13 [ 238.313080][ T8673] vivid-006: unregistering swradio6 [ 238.333960][ T8673] vivid-006: unregistering radio12 [ 238.342296][ T8673] vivid-006: unregistering radio13 [ 238.347253][ T8673] vivid-006: unregistering video33 [ 238.348098][ T50] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.352512][ T8673] vivid-006: unregistering video34 [ 238.354464][ T50] usb 8-1: USB disconnect, device number 16 [ 238.367158][ T8673] vivid-006: unregistering v4l-touch6 [ 238.378088][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.430624][ T8673] vivid-007: unregistering video35 [ 238.433848][ T8673] vivid-007: unregistering video36 [ 238.440937][ T8673] vivid-007: unregistering vbi14 [ 238.449320][ T8673] vivid-007: unregistering vbi15 [ 238.456374][ T8673] vivid-007: unregistering swradio7 [ 238.473322][ T8673] vivid-007: unregistering radio14 [ 238.476775][ T8673] vivid-007: unregistering radio15 [ 238.479558][ T8673] vivid-007: unregistering video37 [ 238.484739][ T8673] vivid-007: unregistering video38 [ 238.488861][ T8673] vivid-007: unregistering v4l-touch7 [ 238.511785][ T8673] vivid-008: unregistering video39 [ 238.515838][ T8673] vivid-008: unregistering video40 [ 238.518874][ T8673] vivid-008: unregistering vbi16 [ 238.524331][ T8673] vivid-008: unregistering vbi17 [ 238.527717][ T8673] vivid-008: unregistering swradio8 [ 238.539996][ T8673] vivid-008: unregistering radio16 [ 238.546948][ T8673] vivid-008: unregistering radio17 [ 238.550918][ T8673] vivid-008: unregistering video41 [ 238.554015][ T8673] vivid-008: unregistering video42 [ 238.557538][ T8673] vivid-008: unregistering v4l-touch8 [ 238.581512][ T8673] vivid-009: unregistering video43 [ 238.584041][ T8673] vivid-009: unregistering video44 [ 238.589546][ T8673] vivid-009: unregistering vbi18 [ 238.595545][ T8673] vivid-009: unregistering vbi19 [ 238.603747][ T8673] vivid-009: unregistering swradio9 [ 238.618716][ T8673] vivid-009: unregistering radio18 [ 238.624122][ T8673] vivid-009: unregistering radio19 [ 238.632032][ T8673] vivid-009: unregistering video45 [ 238.637564][ T8673] vivid-009: unregistering video46 [ 238.642299][ T8673] vivid-009: unregistering v4l-touch9 [ 238.674017][ T8673] vivid-010: unregistering video47 [ 238.677619][ T8673] vivid-010: unregistering video48 [ 238.680856][ T8673] vivid-010: unregistering vbi20 [ 238.686455][ T8673] vivid-010: unregistering vbi21 [ 238.694258][ T8673] vivid-010: unregistering swradio10 [ 238.753617][ T8673] vivid-010: unregistering radio20 [ 238.768053][ T8673] vivid-010: unregistering radio21 [ 238.771548][ T8673] vivid-010: unregistering video49 [ 238.774735][ T8673] vivid-010: unregistering video50 [ 238.783610][ T8673] vivid-010: unregistering v4l-touch10 [ 238.820376][ T8673] vivid-011: unregistering video51 [ 238.823632][ T8673] vivid-011: unregistering video52 [ 238.831905][ T8673] vivid-011: unregistering vbi22 [ 238.838174][ T8673] vivid-011: unregistering vbi23 [ 238.845794][ T8673] vivid-011: unregistering swradio11 [ 238.859746][ T8673] vivid-011: unregistering radio22 [ 238.865853][ T8673] vivid-011: unregistering radio23 [ 238.870139][ T8673] vivid-011: unregistering video53 [ 238.874711][ T8673] vivid-011: unregistering video54 [ 238.880877][ T8673] vivid-011: unregistering v4l-touch11 [ 238.922513][ T8673] vivid-012: unregistering video55 [ 238.925256][ T8673] vivid-012: unregistering video56 [ 238.930031][ T8673] vivid-012: unregistering vbi24 [ 238.935972][ T8673] vivid-012: unregistering vbi25 [ 238.944174][ T8673] vivid-012: unregistering swradio12 [ 238.952026][ T8673] vivid-012: unregistering radio24 [ 238.961060][ T8673] vivid-012: unregistering radio25 [ 238.968214][ T8673] vivid-012: unregistering video57 [ 238.975288][ T8673] vivid-012: unregistering video58 [ 238.982074][ T8673] vivid-012: unregistering v4l-touch12 [ 239.042559][ T8673] vivid-013: unregistering video59 [ 239.045008][ T8673] vivid-013: unregistering video60 [ 239.048911][ T8673] vivid-013: unregistering vbi26 [ 239.052553][ T8705] comedi comedi2: pcl818: a I/O base address must be specified [ 239.054001][ T8673] vivid-013: unregistering vbi27 [ 239.065277][ T8673] vivid-013: unregistering swradio13 [ 239.074624][ T8673] vivid-013: unregistering radio26 [ 239.077209][ T8673] vivid-013: unregistering radio27 [ 239.080275][ T8673] vivid-013: unregistering video61 [ 239.082682][ T8673] vivid-013: unregistering video62 [ 239.085245][ T8673] vivid-013: unregistering v4l-touch13 [ 239.110630][ T8673] vivid-014: unregistering video63 [ 239.113175][ T8673] vivid-014: unregistering video64 [ 239.119255][ T8673] vivid-014: unregistering vbi28 [ 239.124178][ T8673] vivid-014: unregistering vbi29 [ 239.132773][ T8673] vivid-014: unregistering swradio14 [ 239.136864][ T8673] vivid-014: unregistering radio28 [ 239.139471][ T8673] vivid-014: unregistering radio29 [ 239.144550][ T8673] vivid-014: unregistering video65 [ 239.157607][ T8673] vivid-014: unregistering video66 [ 239.162412][ T8708] jffs2: notice: (8708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.163095][ T8673] vivid-014: unregistering v4l-touch14 [ 239.210471][ T8673] vivid-015: unregistering video67 [ 239.213952][ T8673] vivid-015: unregistering video68 [ 239.219121][ T8673] vivid-015: unregistering vbi30 [ 239.226419][ T8673] vivid-015: unregistering vbi31 [ 239.231930][ T8673] vivid-015: unregistering swradio15 [ 239.234384][ T8673] vivid-015: unregistering radio30 [ 239.237818][ T8673] vivid-015: unregistering radio31 [ 239.240740][ T8673] vivid-015: unregistering video69 [ 239.242986][ T8673] vivid-015: unregistering video70 [ 239.246399][ T8673] vivid-015: unregistering v4l-touch15 [ 239.272444][ T8673] vivid-016: unregistering video71 [ 239.274772][ T8673] vivid-016: unregistering video72 [ 239.279572][ T8673] vivid-016: unregistering vbi32 [ 239.285090][ T8673] vivid-016: unregistering vbi33 [ 239.292449][ T8673] vivid-016: unregistering swradio16 [ 239.299459][ T8673] vivid-016: unregistering radio32 [ 239.303460][ T8673] vivid-016: unregistering radio33 [ 239.308688][ T8673] vivid-016: unregistering video73 [ 239.311043][ T8673] vivid-016: unregistering video74 [ 239.313593][ T8673] vivid-016: unregistering v4l-touch16 [ 239.346517][ T8673] vivid-017: unregistering video75 [ 239.349264][ T8673] vivid-017: unregistering video76 [ 239.353912][ T8673] vivid-017: unregistering vbi34 [ 239.360055][ T8673] vivid-017: unregistering vbi35 [ 239.365475][ T8673] vivid-017: unregistering swradio17 [ 239.371534][ T8673] vivid-017: unregistering radio34 [ 239.373899][ T8673] vivid-017: unregistering radio35 [ 239.376339][ T8673] vivid-017: unregistering video77 [ 239.379025][ T8673] vivid-017: unregistering video78 [ 239.385158][ T8673] vivid-017: unregistering v4l-touch17 [ 239.440575][ T8673] vivid-018: unregistering video79 [ 239.444702][ T8673] vivid-018: unregistering video80 [ 239.449296][ T8673] vivid-018: unregistering vbi36 [ 239.453275][ T8673] vivid-018: unregistering vbi37 [ 239.455591][ T8673] vivid-018: unregistering swradio18 [ 239.463543][ T8673] vivid-018: unregistering radio36 [ 239.467167][ T8673] vivid-018: unregistering radio37 [ 239.470710][ T8673] vivid-018: unregistering video81 [ 239.473395][ T8673] vivid-018: unregistering video82 [ 239.475946][ T8673] vivid-018: unregistering v4l-touch18 [ 239.494825][ T8673] vivid-019: unregistering video83 [ 239.497626][ T8673] vivid-019: unregistering video84 [ 239.500197][ T8673] vivid-019: unregistering vbi38 [ 239.509328][ T8673] vivid-019: unregistering vbi39 [ 239.514692][ T8673] vivid-019: unregistering swradio19 [ 239.519044][ T8673] vivid-019: unregistering radio38 [ 239.535785][ T8673] vivid-019: unregistering radio39 [ 239.538374][ T8673] vivid-019: unregistering video85 [ 239.542591][ T8673] vivid-019: unregistering video86 [ 239.548673][ T8673] vivid-019: unregistering v4l-touch19 [ 239.583455][ T8673] vivid-020: unregistering video87 [ 239.597273][ T8673] vivid-020: unregistering video88 [ 239.603194][ T8673] vivid-020: unregistering vbi40 [ 239.618238][ T8673] vivid-020: unregistering vbi41 [ 239.638169][ T8673] vivid-020: unregistering swradio20 [ 239.666197][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 239.680742][ T8673] vivid-020: unregistering radio40 [ 239.723919][ T8673] vivid-020: unregistering radio41 [ 239.735638][ T8673] vivid-020: unregistering video89 [ 239.744912][ T8727] busy [ 239.776865][ T8673] vivid-020: unregistering video90 [ 239.797663][ T8673] vivid-020: unregistering v4l-touch20 [ 239.848343][ T8673] vivid-021: unregistering video91 [ 239.850675][ T8673] vivid-021: unregistering video92 [ 239.853238][ T8673] vivid-021: unregistering vbi42 [ 239.856833][ T8673] vivid-021: unregistering vbi43 [ 239.859018][ T8673] vivid-021: unregistering swradio21 [ 239.865490][ T8673] vivid-021: unregistering radio42 [ 239.865713][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 239.867892][ T8673] vivid-021: unregistering radio43 [ 239.873639][ T8673] vivid-021: unregistering video93 [ 239.875897][ T8673] vivid-021: unregistering video94 [ 239.878876][ T8673] vivid-021: unregistering v4l-touch21 [ 239.905930][ T8673] vivid-022: unregistering video95 [ 239.908312][ T8673] vivid-022: unregistering video96 [ 239.910510][ T8673] vivid-022: unregistering vbi44 [ 239.914423][ T8673] vivid-022: unregistering vbi45 [ 239.917408][ T8673] vivid-022: unregistering swradio22 [ 239.920155][ T8673] vivid-022: unregistering radio44 [ 239.923011][ T8673] vivid-022: unregistering radio45 [ 239.925620][ T8673] vivid-022: unregistering video97 [ 239.929916][ T8673] vivid-022: unregistering video98 [ 239.932621][ T8673] vivid-022: unregistering v4l-touch22 [ 239.967881][ T8673] vivid-023: unregistering video99 [ 239.970985][ T8673] vivid-023: unregistering video100 [ 239.978446][ T8673] vivid-023: unregistering vbi46 [ 239.981565][ T8673] vivid-023: unregistering vbi47 [ 239.983940][ T8673] vivid-023: unregistering swradio23 [ 239.986289][ T8673] vivid-023: unregistering radio46 [ 239.989344][ T8673] vivid-023: unregistering radio47 [ 239.991759][ T8673] vivid-023: unregistering video101 [ 239.996722][ T8673] vivid-023: unregistering video102 [ 240.000174][ T8673] vivid-023: unregistering v4l-touch23 [ 240.171413][ T9] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 240.348154][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 240.357934][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.363273][ T9] usb 6-1: config 0 has no interface number 0 [ 240.376757][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 240.381173][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 240.385551][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.407595][ T9] usb 6-1: config 0 descriptor?? [ 240.410667][ T8733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.420168][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 240.529741][ T8745] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 240.529741][ T8745]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 240.529741][ T8745] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 240.620352][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.639053][ T9] usb 6-1: USB disconnect, device number 15 [ 240.688091][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.746032][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.942429][ T8756] jffs2: notice: (8756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.178245][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'. [ 241.203081][ T8766] FAULT_INJECTION: forcing a failure. [ 241.203081][ T8766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.211640][ T8766] CPU: 2 UID: 0 PID: 8766 Comm: syz.3.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.211667][ T8766] Tainted: [L]=SOFTLOCKUP [ 241.211672][ T8766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.211689][ T8766] Call Trace: [ 241.211705][ T8766] [ 241.211711][ T8766] dump_stack_lvl+0x100/0x190 [ 241.211760][ T8766] should_fail_ex.cold+0x5/0xa [ 241.211784][ T8766] _copy_from_user+0x2e/0xd0 [ 241.211806][ T8766] __ia32_compat_sys_socketcall+0x187/0x770 [ 241.211853][ T8766] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 241.211874][ T8766] ? __fget_files+0x21f/0x3d0 [ 241.211891][ T8766] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 241.211924][ T8766] do_int80_emulation+0x166/0x650 [ 241.211966][ T8766] asm_int80_emulation+0x1a/0x20 [ 241.211981][ T8766] RIP: 0023:0xf71f74eb [ 241.211993][ T8766] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 241.212008][ T8766] RSP: 002b:00000000f54ac30c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 241.212030][ T8766] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54ac3b4 [ 241.212039][ T8766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.212048][ T8766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.212056][ T8766] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 241.212064][ T8766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.212082][ T8766] [ 241.214396][ T8766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.239781][ T8763] busy [ 241.481450][ T8773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.487816][ T8773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.799802][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.806835][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.785733][ T8790] jffs2: notice: (8790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.965140][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 243.056293][ T8807] loop4: detected capacity change from 0 to 7 [ 243.060728][ T8807] Dev loop4: unable to read RDB block 7 [ 243.062561][ T8807] loop4: unable to read partition table [ 243.064568][ T8807] loop4: partition table beyond EOD, truncated [ 243.066486][ T8807] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.075088][ T8801] busy [ 243.081291][ T8807] affs: No valid root block on device sr0 [ 243.087041][ T8807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.822'. [ 243.097105][ T5146] Dev loop4: unable to read RDB block 7 [ 243.098802][ T5146] loop4: unable to read partition table [ 243.101845][ T5146] loop4: partition table beyond EOD, truncated [ 243.144360][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.149421][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.222572][ T8814] comedi comedi2: pcl818: a I/O base address must be specified [ 244.026137][ T8833] FAULT_INJECTION: forcing a failure. [ 244.026137][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 244.030445][ T8833] CPU: 3 UID: 0 PID: 8833 Comm: syz.2.831 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.030464][ T8833] Tainted: [L]=SOFTLOCKUP [ 244.030479][ T8833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.030487][ T8833] Call Trace: [ 244.030491][ T8833] [ 244.030496][ T8833] dump_stack_lvl+0x100/0x190 [ 244.030513][ T8833] should_fail_ex.cold+0x5/0xa [ 244.030525][ T8833] should_failslab+0xc2/0x120 [ 244.030555][ T8833] kmem_cache_alloc_noprof+0x91/0x6a0 [ 244.030576][ T8833] ? find_held_lock+0x2b/0x80 [ 244.030597][ T8833] ? fuse_request_alloc+0x22/0x200 [ 244.030614][ T8833] fuse_request_alloc+0x22/0x200 [ 244.030628][ T8833] fuse_get_req+0x20a/0x400 [ 244.030643][ T8833] ? __pfx_fuse_get_req+0x10/0x10 [ 244.030659][ T8833] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.030681][ T8833] ? __pfx_from_kgid+0x10/0x10 [ 244.030700][ T8833] fuse_chan_send+0x257/0x9a0 [ 244.030712][ T8833] __fuse_simple_request+0x18e/0x1e0 [ 244.030730][ T8833] fuse_send_open+0x220/0x2d0 [ 244.030745][ T8833] ? __pfx_fuse_send_open+0x10/0x10 [ 244.030766][ T8833] ? lockdep_init_map_type+0x5c/0x250 [ 244.030779][ T8833] ? __init_waitqueue_head+0xca/0x150 [ 244.030794][ T8833] fuse_file_open+0x172/0x820 [ 244.030813][ T8833] fuse_do_open+0x50/0xd0 [ 244.030829][ T8833] fuse_dir_open+0x12c/0x2a0 [ 244.030841][ T8833] do_dentry_open+0x6ab/0x14d0 [ 244.030865][ T8833] ? __pfx_fuse_dir_open+0x10/0x10 [ 244.030879][ T8833] vfs_open+0x82/0x3f0 [ 244.030896][ T8833] path_openat+0x19fa/0x2440 [ 244.030912][ T8833] ? __pfx_path_openat+0x10/0x10 [ 244.030929][ T8833] do_file_open+0x20e/0x430 [ 244.030944][ T8833] ? __pfx_do_file_open+0x10/0x10 [ 244.030966][ T8833] ? _raw_spin_unlock+0x28/0x50 [ 244.031003][ T8833] ? alloc_fd+0x471/0x7a0 [ 244.031020][ T8833] do_sys_openat2+0x10f/0x1e0 [ 244.031036][ T8833] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.031054][ T8833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.031068][ T8833] __ia32_compat_sys_openat+0x12d/0x210 [ 244.031085][ T8833] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 244.031101][ T8833] ? fput+0x7c/0x100 [ 244.031115][ T8833] ? ksys_write+0x1ac/0x250 [ 244.031127][ T8833] ? __pfx_ksys_write+0x10/0x10 [ 244.031141][ T8833] __do_fast_syscall_32+0x13a/0x8b0 [ 244.031153][ T8833] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.031165][ T8833] do_fast_syscall_32+0x32/0x70 [ 244.031177][ T8833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.031191][ T8833] RIP: 0023:0xf7fa2fec [ 244.031205][ T8833] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 244.031210][ T8833] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 244.031221][ T8833] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002180 [ 244.031228][ T8833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.031234][ T8833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.031240][ T8833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.031246][ T8833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.031258][ T8833] [ 244.189098][ T998] IPVS: starting estimator thread 0... [ 244.297082][ T8845] IPVS: using max 40 ests per chain, 96000 per kthread [ 245.153775][ T8855] block nbd2: shutting down sockets [ 245.187570][ T8864] FAULT_INJECTION: forcing a failure. [ 245.187570][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 245.209169][ T8864] CPU: 3 UID: 0 PID: 8864 Comm: syz.1.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.209202][ T8864] Tainted: [L]=SOFTLOCKUP [ 245.209208][ T8864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.209219][ T8864] Call Trace: [ 245.209232][ T8864] [ 245.209239][ T8864] dump_stack_lvl+0x100/0x190 [ 245.209266][ T8864] should_fail_ex.cold+0x5/0xa [ 245.209287][ T8864] should_failslab+0xc2/0x120 [ 245.209314][ T8864] __kvmalloc_node_noprof+0x116/0x970 [ 245.209340][ T8864] ? trace_contention_end+0x126/0x160 [ 245.209361][ T8864] ? fuse_dev_splice_read+0x109/0x5f0 [ 245.209394][ T8864] fuse_dev_splice_read+0x109/0x5f0 [ 245.209423][ T8864] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 245.209463][ T8864] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 245.209489][ T8864] do_splice_read+0x285/0x370 [ 245.209514][ T8864] splice_file_to_pipe+0x82/0x120 [ 245.209541][ T8864] do_splice+0xda1/0x1fa0 [ 245.209565][ T8864] ? __lock_acquire+0x4c5/0x1ec0 [ 245.209584][ T8864] ? rcu_read_lock_any_held+0x6a/0x90 [ 245.209630][ T8864] ? __pfx_do_splice+0x10/0x10 [ 245.209650][ T8864] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 245.209673][ T8864] ? find_held_lock+0x2b/0x80 [ 245.209699][ T8864] __do_splice+0x113/0x370 [ 245.209724][ T8864] ? __pfx___do_splice+0x10/0x10 [ 245.209754][ T8864] __ia32_sys_splice+0x189/0x250 [ 245.209780][ T8864] __do_fast_syscall_32+0x13a/0x8b0 [ 245.209802][ T8864] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.209823][ T8864] do_fast_syscall_32+0x32/0x70 [ 245.209843][ T8864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.209865][ T8864] RIP: 0023:0xf701efec [ 245.209887][ T8864] Code: Unable to access opcode bytes at 0xf701efc2. [ 245.209896][ T8864] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 245.209914][ T8864] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 245.209925][ T8864] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000007c1f [ 245.209936][ T8864] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 245.209946][ T8864] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.209957][ T8864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.209981][ T8864] [ 245.734031][ T8881] FAULT_INJECTION: forcing a failure. [ 245.734031][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 245.738673][ T8881] CPU: 2 UID: 0 PID: 8881 Comm: syz.2.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.738691][ T8881] Tainted: [L]=SOFTLOCKUP [ 245.738695][ T8881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.738701][ T8881] Call Trace: [ 245.738705][ T8881] [ 245.738710][ T8881] dump_stack_lvl+0x100/0x190 [ 245.738727][ T8881] should_fail_ex.cold+0x5/0xa [ 245.738740][ T8881] should_failslab+0xc2/0x120 [ 245.738757][ T8881] kmem_cache_alloc_noprof+0x91/0x6a0 [ 245.738773][ T8881] ? __asan_memcpy+0x3c/0x60 [ 245.738785][ T8881] ? __kernfs_new_node+0xd2/0xa10 [ 245.738807][ T8881] __kernfs_new_node+0xd2/0xa10 [ 245.738824][ T8881] ? __pfx___kernfs_new_node+0x10/0x10 [ 245.738842][ T8881] ? find_held_lock+0x2b/0x80 [ 245.738856][ T8881] ? kernfs_root+0xee/0x2a0 [ 245.738869][ T8881] ? kernfs_root+0xee/0x2a0 [ 245.738885][ T8881] kernfs_new_node+0x117/0x150 [ 245.738902][ T8881] kernfs_create_link+0xcc/0x240 [ 245.738915][ T8881] sysfs_do_create_link_sd+0x90/0x140 [ 245.738929][ T8881] sysfs_create_link+0x61/0xc0 [ 245.738942][ T8881] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 245.738989][ T8881] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 245.739008][ T8881] __netdev_upper_dev_link+0x3d8/0x7e0 [ 245.739034][ T8881] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 245.739055][ T8881] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.739076][ T8881] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 245.739100][ T8881] ? batadv_hardif_enable_interface+0x246/0xaa0 [ 245.739126][ T8881] ? batadv_meshif_slave_add+0xfc/0x120 [ 245.739146][ T8881] ? do_set_master+0x40f/0x730 [ 245.739169][ T8881] netdev_master_upper_dev_link+0x9f/0xd0 [ 245.739193][ T8881] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 245.739214][ T8881] batadv_hardif_enable_interface+0x2a3/0xaa0 [ 245.739229][ T8881] ? __pfx_batadv_meshif_slave_add+0x10/0x10 [ 245.739242][ T8881] batadv_meshif_slave_add+0xfc/0x120 [ 245.739255][ T8881] do_set_master+0x40f/0x730 [ 245.739267][ T8881] ? netif_change_flags+0xd0/0x160 [ 245.739281][ T8881] do_setlink.isra.0+0xb2b/0x3e60 [ 245.739297][ T8881] ? stack_trace_save+0x8e/0xc0 [ 245.739314][ T8881] ? __pfx_stack_trace_save+0x10/0x10 [ 245.739330][ T8881] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 245.739346][ T8881] ? __lock_acquire+0x4c5/0x1ec0 [ 245.739357][ T8881] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 245.739369][ T8881] ? rtnl_newlink+0x126/0x2380 [ 245.739382][ T8881] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 245.739396][ T8881] ? netlink_rcv_skb+0x159/0x420 [ 245.739413][ T8881] ? netlink_unicast+0x585/0x850 [ 245.739422][ T8881] ? netlink_sendmsg+0x8b0/0xda0 [ 245.739431][ T8881] ? ____sys_sendmsg+0xa4d/0xbe0 [ 245.739467][ T8881] ? ___sys_sendmsg+0x190/0x1e0 [ 245.739482][ T8881] ? __sys_sendmsg+0x160/0x210 [ 245.739497][ T8881] ? lock_acquire+0x1b9/0x370 [ 245.739510][ T8881] ? rcu_is_watching+0x13/0xc0 [ 245.739524][ T8881] ? trace_contention_end+0x126/0x160 [ 245.739537][ T8881] ? __mutex_lock+0x26c/0x1bc0 [ 245.739548][ T8881] ? rtnl_newlink+0x8bb/0x2380 [ 245.739561][ T8881] ? __nla_validate_parse+0x1e7/0x28b0 [ 245.739573][ T8881] ? __pfx___mutex_lock+0x10/0x10 [ 245.739584][ T8881] ? rcu_is_watching+0x13/0xc0 [ 245.739598][ T8881] ? apparmor_capable+0x1d7/0x4d0 [ 245.739614][ T8881] ? full_name_hash+0xbc/0x100 [ 245.739631][ T8881] ? netdev_name_node_lookup+0x107/0x150 [ 245.739644][ T8881] rtnl_newlink+0x11c2/0x2380 [ 245.739663][ T8881] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.739676][ T8881] ? rcu_is_watching+0x13/0xc0 [ 245.739690][ T8881] ? kasan_quarantine_put+0x104/0x240 [ 245.739704][ T8881] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.739716][ T8881] ? kfree_skbmem+0x19a/0x210 [ 245.739731][ T8881] ? kmem_cache_free+0x127/0x6b0 [ 245.739747][ T8881] ? __lock_acquire+0x4c5/0x1ec0 [ 245.739759][ T8881] ? find_held_lock+0x2b/0x80 [ 245.739778][ T8881] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 245.739792][ T8881] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 245.739810][ T8881] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.739824][ T8881] rtnetlink_rcv_msg+0x95e/0xe90 [ 245.739840][ T8881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.739858][ T8881] ? ref_tracker_free+0x37e/0x6c0 [ 245.739874][ T8881] netlink_rcv_skb+0x159/0x420 [ 245.739885][ T8881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.739900][ T8881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.739915][ T8881] ? netlink_deliver_tap+0x1ae/0xcc0 [ 245.739934][ T8881] netlink_unicast+0x585/0x850 [ 245.739946][ T8881] ? __pfx_netlink_unicast+0x10/0x10 [ 245.739960][ T8881] netlink_sendmsg+0x8b0/0xda0 [ 245.739972][ T8881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.739985][ T8881] ? apparmor_socket_sendmsg+0x15b/0x270 [ 245.739999][ T8881] ____sys_sendmsg+0xa4d/0xbe0 [ 245.740014][ T8881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.740025][ T8881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.740047][ T8881] ___sys_sendmsg+0x190/0x1e0 [ 245.740065][ T8881] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.740089][ T8881] ? find_held_lock+0x2b/0x80 [ 245.740111][ T8881] __sys_sendmsg+0x160/0x210 [ 245.740125][ T8881] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.740142][ T8881] ? __pfx_ksys_write+0x10/0x10 [ 245.740156][ T8881] __do_fast_syscall_32+0x13a/0x8b0 [ 245.740168][ T8881] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.740180][ T8881] do_fast_syscall_32+0x32/0x70 [ 245.740192][ T8881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.740206][ T8881] RIP: 0023:0xf7fa2fec [ 245.740221][ T8881] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 245.740226][ T8881] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 245.740237][ T8881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 245.740244][ T8881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.740250][ T8881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.740256][ T8881] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.740262][ T8881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.740275][ T8881] [ 245.740941][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.978553][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.987758][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.993900][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.035630][ T8885] comedi comedi2: pcl818: a I/O base address must be specified [ 246.131698][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 246.225040][ T8894] batman_adv: batadv0: Adding interface: veth0 [ 246.227769][ T8894] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.236024][ T8894] batman_adv: batadv0: Interface activated: veth0 [ 246.244999][ T8887] busy [ 246.254097][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.257628][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.266240][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.268891][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.278181][ T8894] batman_adv: batadv0: Interface deactivated: veth0 [ 246.280596][ T8894] batman_adv: batadv0: Removing interface: veth0 [ 246.519416][ T8911] pim6reg: entered allmulticast mode [ 246.675671][ T8920] comedi comedi2: pcl818: a I/O base address must be specified [ 246.696625][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.736524][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.757008][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.858'. [ 246.767157][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.866716][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 246.868873][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 246.872399][ T9] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 246.876238][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.880628][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.884665][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.889332][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.893372][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.897611][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.901657][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.905752][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.910044][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 246.912793][ T9] usb 5-1: SerialNumber: syz [ 246.915744][ T9] usb 5-1: config 0 descriptor?? [ 246.923076][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8 [ 247.182890][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.188744][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.244743][ T8962] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.870'. [ 248.251225][ T8962] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 248.305375][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.870'. [ 248.396794][ T50] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 248.546670][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 248.549514][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.554591][ T50] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 248.558428][ T50] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 248.562105][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.565596][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.568746][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.573625][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.584849][ T50] usbtmc 8-1:16.0: bulk endpoints not found [ 249.147049][ T8976] FAULT_INJECTION: forcing a failure. [ 249.147049][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 249.165240][ T8976] CPU: 2 UID: 0 PID: 8976 Comm: syz.2.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.165271][ T8976] Tainted: [L]=SOFTLOCKUP [ 249.165276][ T8976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.165283][ T8976] Call Trace: [ 249.165288][ T8976] [ 249.165293][ T8976] dump_stack_lvl+0x100/0x190 [ 249.165311][ T8976] should_fail_ex.cold+0x5/0xa [ 249.165325][ T8976] should_failslab+0xc2/0x120 [ 249.165342][ T8976] __kmalloc_cache_noprof+0x91/0x6b0 [ 249.165357][ T8976] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.165386][ T8976] ? nf_tables_commit+0x78c/0x92f0 [ 249.165409][ T8976] nf_tables_commit+0x78c/0x92f0 [ 249.165420][ T8976] ? _raw_spin_unlock+0x28/0x50 [ 249.165442][ T8976] ? nf_tables_newrule+0x10ed/0x2be0 [ 249.165461][ T8976] ? __pfx_nf_tables_commit+0x10/0x10 [ 249.165472][ T8976] ? __pfx_nf_tables_newrule+0x10/0x10 [ 249.165491][ T8976] ? __nla_parse+0x40/0x60 [ 249.165504][ T8976] nfnetlink_rcv_batch+0x1a4d/0x2880 [ 249.165526][ T8976] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 249.165540][ T8976] ? find_held_lock+0x2b/0x80 [ 249.165556][ T8976] ? __local_bh_enable_ip+0xa5/0x120 [ 249.165576][ T8976] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.165587][ T8976] ? __dev_queue_xmit+0xa12/0x4970 [ 249.165617][ T8976] ? __nla_parse+0x40/0x60 [ 249.165628][ T8976] nfnetlink_rcv+0x3bd/0x440 [ 249.165641][ T8976] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 249.165658][ T8976] netlink_unicast+0x585/0x850 [ 249.165673][ T8976] ? __pfx_netlink_unicast+0x10/0x10 [ 249.165687][ T8976] netlink_sendmsg+0x8b0/0xda0 [ 249.165700][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.165712][ T8976] ? apparmor_socket_sendmsg+0x15b/0x270 [ 249.165727][ T8976] ____sys_sendmsg+0xa4d/0xbe0 [ 249.165743][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.165754][ T8976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.165776][ T8976] ___sys_sendmsg+0x190/0x1e0 [ 249.165795][ T8976] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.165818][ T8976] ? find_held_lock+0x2b/0x80 [ 249.165841][ T8976] __sys_sendmsg+0x160/0x210 [ 249.165855][ T8976] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.165872][ T8976] ? __pfx_ksys_write+0x10/0x10 [ 249.165888][ T8976] __do_fast_syscall_32+0x13a/0x8b0 [ 249.165900][ T8976] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.165912][ T8976] do_fast_syscall_32+0x32/0x70 [ 249.165924][ T8976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.165938][ T8976] RIP: 0023:0xf7fa2fec [ 249.165954][ T8976] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 249.165959][ T8976] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 249.165970][ T8976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 249.165977][ T8976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.165983][ T8976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.165989][ T8976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.165995][ T8976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.166009][ T8976] [ 249.418778][ T5131] bcm5974 5-1:0.0: could not read from device [ 249.425668][ T5131] bcm5974 5-1:0.0: could not read from device [ 249.449322][ T9] usb 5-1: USB disconnect, device number 18 [ 249.458996][ T5131] bcm5974 5-1:0.0: could not read from device [ 249.668105][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 249.671223][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 249.690651][ T8995] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 249.743029][ T8995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.779256][ T8995] bond2: (slave geneve2): making interface the new active one [ 249.790057][ T8995] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 250.150928][ T9008] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 250.194299][ T9008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.213784][ T9008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.882'. [ 250.525149][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 250.598793][ T9016] snd_dummy snd_dummy.0: control 2:0:7:syz0:0 is already present [ 250.903446][ T9026] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 250.918737][ T9026] bond1: entered promiscuous mode [ 250.920602][ T9026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.930238][ T9026] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.934062][ T9026] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 250.937445][ T9026] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 250.981734][ T9032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.888'. [ 251.155253][ T34] usb 8-1: USB disconnect, device number 17 [ 251.315806][ T9048] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 251.335774][ T9048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.396130][ T50] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 251.431849][ T9048] bond2: (slave geneve2): making interface the new active one [ 251.455021][ T9048] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 251.458365][ T9055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 251.488135][ T9055] IPv6: addrconf: prefix option has invalid lifetime [ 251.587875][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 251.589983][ T50] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 251.593612][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.597251][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.600161][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.602095][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.605758][ T50] usb 6-1: config 0 descriptor?? [ 252.056394][ T50] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 252.059655][ T50] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 252.062569][ T50] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 252.064758][ T50] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 252.067440][ T50] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 252.070756][ T50] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 252.072901][ T9058] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 252.240002][ T50] usb 6-1: USB disconnect, device number 16 [ 252.593686][ T9074] comedi comedi2: pcl818: a I/O base address must be specified [ 252.772550][ T9083] netlink: 'syz.2.906': attribute type 4 has an invalid length. [ 252.780608][ T9085] 9p: Bad value for 'rfdno' [ 252.785033][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'. [ 252.810119][ T5820] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 252.873137][ T9091] tmpfs: User quota block hardlimit too large. [ 252.876821][ T9091] capability: warning: `syz.0.910' uses deprecated v2 capabilities in a way that may be insecure [ 252.886291][ T9091] team0: entered allmulticast mode [ 252.890443][ T9091] team_slave_0: entered allmulticast mode [ 252.892860][ T9091] team_slave_1: entered allmulticast mode [ 252.895100][ T9091] vlan0: entered allmulticast mode [ 252.897003][ T9091] veth0_vlan: entered allmulticast mode [ 252.911094][ T9091] FAULT_INJECTION: forcing a failure. [ 252.911094][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 252.917809][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.0.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.917828][ T9091] Tainted: [L]=SOFTLOCKUP [ 252.917832][ T9091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.917838][ T9091] Call Trace: [ 252.917842][ T9091] [ 252.917847][ T9091] dump_stack_lvl+0x100/0x190 [ 252.917864][ T9091] should_fail_ex.cold+0x5/0xa [ 252.917879][ T9091] should_failslab+0xc2/0x120 [ 252.917903][ T9091] __kmalloc_noprof+0xfc/0x820 [ 252.917941][ T9091] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 252.917973][ T9091] kernfs_fop_write_iter+0x26a/0x5f0 [ 252.918002][ T9091] vfs_write+0x6af/0x1050 [ 252.918026][ T9091] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 252.918052][ T9091] ? __pfx_vfs_write+0x10/0x10 [ 252.918069][ T9091] ? find_held_lock+0x2b/0x80 [ 252.918108][ T9091] ksys_pwrite64+0x161/0x1a0 [ 252.918128][ T9091] ? __pfx_ksys_pwrite64+0x10/0x10 [ 252.918148][ T9091] ? ksys_write+0x1ac/0x250 [ 252.918165][ T9091] ? __pfx_ksys_write+0x10/0x10 [ 252.918188][ T9091] __do_fast_syscall_32+0x13a/0x8b0 [ 252.918207][ T9091] ? lockdep_hardirqs_on+0x7d/0x110 [ 252.918226][ T9091] do_fast_syscall_32+0x32/0x70 [ 252.918239][ T9091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.918253][ T9091] RIP: 0023:0xf7f08fec [ 252.918268][ T9091] Code: Unable to access opcode bytes at 0xf7f08fc2. [ 252.918273][ T9091] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b5 [ 252.918284][ T9091] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 252.918290][ T9091] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000000 [ 252.918297][ T9091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.918303][ T9091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.918309][ T9091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.918323][ T9091] [ 253.003069][ T5820] usb 8-1: Using ep0 maxpacket: 8 [ 253.007315][ T5820] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.023255][ T9097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.913'. [ 253.029548][ T5820] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 253.034759][ T5820] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.044267][ T5820] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.046732][ T5822] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 253.050464][ T5820] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.054058][ T5820] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.059359][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.065787][ T5820] usbtmc 8-1:16.0: bulk endpoints not found [ 253.100875][ T9097] busy [ 253.217222][ T5822] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 253.220969][ T5822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.224268][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 253.227620][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.230565][ T5822] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.234359][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.240847][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.243140][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.246880][ T5822] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 253.251884][ T5822] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 253.254357][ T5822] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 253.260763][ T5822] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 253.266055][ T5822] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 253.268668][ T5822] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 253.277620][ T5822] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 253.426448][ T9108] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 253.458043][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.595318][ T50] usb 6-1: USB disconnect, device number 17 [ 253.608438][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.623019][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.628487][ T50] keyspan 6-1:1.0: device disconnected [ 253.902155][ T9122] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 253.923312][ T9122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.206482][ T42] audit: type=1326 audit(1787127814.835:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.221045][ T42] audit: type=1326 audit(1787127814.835:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.232785][ T42] audit: type=1326 audit(1787127814.845:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.240947][ T42] audit: type=1326 audit(1787127814.845:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.247772][ T42] audit: type=1326 audit(1787127814.845:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.254417][ T42] audit: type=1326 audit(1787127814.845:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.260872][ T42] audit: type=1326 audit(1787127814.845:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.277660][ T42] audit: type=1326 audit(1787127814.845:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.285842][ T42] audit: type=1326 audit(1787127814.845:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.292493][ T42] audit: type=1326 audit(1787127814.845:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.1.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 254.378398][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 254.448196][ T9135] busy [ 254.634780][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.694228][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.753457][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.904641][ T9151] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 254.926056][ T9151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.937919][ T9151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.925'. [ 255.038450][ T9154] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 255.090542][ T9156] comedi comedi2: pcl818: a I/O base address must be specified [ 255.288305][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.290621][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.374947][ T5813] bridge_slave_1: left allmulticast mode [ 255.377302][ T5813] bridge_slave_1: left promiscuous mode [ 255.383594][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.389660][ T5813] bridge_slave_0: left allmulticast mode [ 255.391544][ T5813] bridge_slave_0: left promiscuous mode [ 255.394320][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.402899][ T5813] pim6reg: left allmulticast mode [ 255.544668][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.551686][ T10] usb 8-1: USB disconnect, device number 18 [ 255.573390][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.585965][ T5813] bond0 (unregistering): Released all slaves [ 255.599721][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.608545][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.611449][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.614786][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.617554][ T5813] bond1 (unregistering): Released all slaves [ 255.624136][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.645899][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'. [ 255.646352][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.653011][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.657440][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.662707][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.665559][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.724175][ T9163] busy [ 256.194060][ T5813] hsr_slave_0: left promiscuous mode [ 256.199415][ T5813] hsr_slave_1: left promiscuous mode [ 256.230598][ T5813] veth1_macvtap: left promiscuous mode [ 256.236680][ T5813] veth0_macvtap: left promiscuous mode [ 256.240919][ T5813] veth1_vlan: left promiscuous mode [ 256.242723][ T5813] veth0_vlan: left promiscuous mode [ 256.364958][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.426369][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.490327][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.500589][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 256.525928][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 256.560532][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.627289][ T9215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.665077][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.675448][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.679969][ T9160] bridge_slave_0: entered allmulticast mode [ 256.683929][ T9160] bridge_slave_0: entered promiscuous mode [ 256.687804][ T9218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.689634][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.695167][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.698363][ T9160] bridge_slave_1: entered allmulticast mode [ 256.701044][ T9160] bridge_slave_1: entered promiscuous mode [ 256.734413][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.747220][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.765814][ T9160] team0: Port device team_slave_0 added [ 256.769083][ T9160] team0: Port device team_slave_1 added [ 256.785328][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.787784][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.795535][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.800629][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.802939][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.811936][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.848502][ T9160] hsr_slave_0: entered promiscuous mode [ 256.850939][ T9160] hsr_slave_1: entered promiscuous mode [ 256.853056][ T9160] debugfs: 'hsr0' already exists in 'hsr' [ 256.855035][ T9160] Cannot create hsr debugfs directory [ 257.020195][ T9160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.034842][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.038829][ T9160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.093345][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.096134][ T9160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.100392][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.103125][ T9160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.177046][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.311883][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.314303][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.421672][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.456209][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.618514][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.630147][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.632497][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.686743][ T5095] Bluetooth: hci2: command tx timeout [ 257.749669][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.752188][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.034963][ T9240] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 258.034963][ T9240]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 258.034963][ T9240] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 258.071092][ T9243] jffs2: notice: (9243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.071478][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.254252][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 258.261065][ T9264] comedi comedi2: pcl818: a I/O base address must be specified [ 258.263743][ T9160] veth0_vlan: entered promiscuous mode [ 258.274409][ T9160] veth1_vlan: entered promiscuous mode [ 258.296493][ T9160] veth0_macvtap: entered promiscuous mode [ 258.302825][ T9160] veth1_macvtap: entered promiscuous mode [ 258.314499][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.324327][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.335140][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.338379][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.389115][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.396080][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.454073][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.458885][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.466765][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.499649][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.503983][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.516982][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.517039][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.556862][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.575366][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.614285][ T9275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.697081][ T9273] 9p: Bad value for 'rfdno' [ 259.060201][ T9281] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 259.060201][ T9281]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 259.060201][ T9281] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 259.766783][ T5095] Bluetooth: hci2: command tx timeout [ 260.120457][ T9295] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 260.163589][ T9295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.222554][ T9295] bond1: (slave geneve2): making interface the new active one [ 260.228801][ T9295] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 260.920178][ T9303] syz.0.960 (9303): drop_caches: 2 [ 261.296999][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 261.441968][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.457327][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 261.471938][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 261.486673][ T24] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 261.491291][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.499454][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.501026][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.512003][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.517188][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.536801][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.549427][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.554674][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.555646][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.560165][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.586466][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 261.590072][ T24] usb 8-1: SerialNumber: syz [ 261.595961][ T24] usb 8-1: config 0 descriptor?? [ 261.610158][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input10 [ 261.789884][ T9328] jffs2: notice: (9328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.850638][ T5095] Bluetooth: hci2: command tx timeout [ 263.146945][ T9348] loop4: detected capacity change from 0 to 7 [ 263.157344][ T9348] Dev loop4: unable to read RDB block 7 [ 263.161645][ T9348] loop4: unable to read partition table [ 263.170141][ T9348] loop4: partition table beyond EOD, truncated [ 263.175820][ T9348] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.222812][ T9348] affs: No valid root block on device sr0 [ 263.252687][ T9348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.975'. [ 263.261636][ T9349] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 263.312971][ T9349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.936628][ T5095] Bluetooth: hci2: command tx timeout [ 264.131208][ T5131] bcm5974 8-1:0.0: could not read from device [ 264.138069][ T5131] bcm5974 8-1:0.0: could not read from device [ 264.193974][ T5131] bcm5974 8-1:0.0: could not read from device [ 264.206804][ T24] usb 8-1: USB disconnect, device number 19 [ 264.235730][ T9359] jffs2: notice: (9359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 264.410354][ T9364] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 264.420880][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 264.450596][ T9364] bridge0: port 4(dummy0) entered blocking state [ 264.455208][ T9364] bridge0: port 4(dummy0) entered disabled state [ 264.462084][ T9364] dummy0: entered allmulticast mode [ 264.468636][ T9364] bridge0: port 4(dummy0) entered blocking state [ 264.471207][ T9364] bridge0: port 4(dummy0) entered forwarding state [ 264.549778][ T9364] fuse: Bad value for 'group_id' [ 264.551916][ T9364] fuse: Bad value for 'group_id' [ 264.770555][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 265.428960][ T9396] jffs2: notice: (9396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 265.701083][ T9403] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 265.703658][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.992'. [ 265.706990][ T9403] dummy0: entered promiscuous mode [ 265.712629][ T9403] bridge0: port 3(dummy0) entered blocking state [ 265.714975][ T9403] bridge0: port 3(dummy0) entered disabled state [ 265.717662][ T9403] dummy0: entered allmulticast mode [ 265.720734][ T9403] bridge0: port 3(dummy0) entered blocking state [ 265.722861][ T9403] bridge0: port 3(dummy0) entered forwarding state [ 265.781026][ T9403] fuse: Bad value for 'group_id' [ 265.782721][ T9403] fuse: Bad value for 'group_id' [ 266.332247][ T9389] bond1: (slave syz_tun): Removing an active aggregator [ 266.335229][ T9389] bond1: (slave syz_tun): Releasing backup interface [ 266.404613][ T9421] FAULT_INJECTION: forcing a failure. [ 266.404613][ T9421] name failslab, interval 1, probability 0, space 0, times 0 [ 266.408792][ T9421] CPU: 3 UID: 0 PID: 9421 Comm: syz.4.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.408810][ T9421] Tainted: [L]=SOFTLOCKUP [ 266.408814][ T9421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.408821][ T9421] Call Trace: [ 266.408825][ T9421] [ 266.408830][ T9421] dump_stack_lvl+0x100/0x190 [ 266.408847][ T9421] should_fail_ex.cold+0x5/0xa [ 266.408860][ T9421] should_failslab+0xc2/0x120 [ 266.408878][ T9421] __kmalloc_noprof+0xfc/0x820 [ 266.408894][ T9421] ? rcu_is_watching+0x13/0xc0 [ 266.408908][ T9421] ? tomoyo_realpath_from_path+0xb6/0x690 [ 266.408928][ T9421] tomoyo_realpath_from_path+0xb6/0x690 [ 266.408947][ T9421] tomoyo_path_number_perm+0x23c/0x580 [ 266.408961][ T9421] ? tomoyo_path_number_perm+0x22e/0x580 [ 266.408976][ T9421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.408991][ T9421] ? get_pid_task+0x106/0x250 [ 266.409017][ T9421] ? find_held_lock+0x2b/0x80 [ 266.409032][ T9421] ? __fget_files+0x215/0x3d0 [ 266.409044][ T9421] ? hook_file_ioctl_common+0x140/0x440 [ 266.409059][ T9421] ? __fget_files+0x215/0x3d0 [ 266.409073][ T9421] ? __fget_files+0x21f/0x3d0 [ 266.409087][ T9421] security_file_ioctl_compat+0xd3/0x230 [ 266.409103][ T9421] __ia32_compat_sys_ioctl+0xc2/0x360 [ 266.409117][ T9421] __do_fast_syscall_32+0x13a/0x8b0 [ 266.409129][ T9421] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.409141][ T9421] do_fast_syscall_32+0x32/0x70 [ 266.409153][ T9421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.409167][ T9421] RIP: 0023:0xf70befec [ 266.409181][ T9421] Code: Unable to access opcode bytes at 0xf70befc2. [ 266.409186][ T9421] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 266.409197][ T9421] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000aec7 [ 266.409204][ T9421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.409210][ T9421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.409215][ T9421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 266.409221][ T9421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.409234][ T9421] [ 266.409239][ T9421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.601806][ T5836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.771223][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.978852][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.058741][ T9434] FAULT_INJECTION: forcing a failure. [ 267.058741][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 267.069855][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.3.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.069887][ T9434] Tainted: [L]=SOFTLOCKUP [ 267.069893][ T9434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.069904][ T9434] Call Trace: [ 267.069911][ T9434] [ 267.069919][ T9434] dump_stack_lvl+0x100/0x190 [ 267.069946][ T9434] should_fail_ex.cold+0x5/0xa [ 267.069967][ T9434] should_failslab+0xc2/0x120 [ 267.069996][ T9434] __kmalloc_cache_noprof+0x91/0x6b0 [ 267.070020][ T9434] ? append_filter_err+0xb8/0x620 [ 267.070051][ T9434] append_filter_err+0xb8/0x620 [ 267.070081][ T9434] apply_subsystem_event_filter+0x711/0x17a0 [ 267.070118][ T9434] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 267.070152][ T9434] ? _copy_from_user+0x59/0xd0 [ 267.070176][ T9434] subsystem_filter_write+0x95/0x120 [ 267.070207][ T9434] vfs_write+0x2aa/0x1050 [ 267.070229][ T9434] ? __pfx_subsystem_filter_write+0x10/0x10 [ 267.070265][ T9434] ? __pfx_vfs_write+0x10/0x10 [ 267.070283][ T9434] ? find_held_lock+0x2b/0x80 [ 267.070309][ T9434] ? __fget_files+0x215/0x3d0 [ 267.070336][ T9434] ? __fget_files+0x21f/0x3d0 [ 267.070364][ T9434] ksys_write+0x12a/0x250 [ 267.070384][ T9434] ? __pfx_ksys_write+0x10/0x10 [ 267.070403][ T9434] ? ksys_write+0x1ac/0x250 [ 267.070423][ T9434] ? __pfx_ksys_write+0x10/0x10 [ 267.070447][ T9434] __do_fast_syscall_32+0x13a/0x8b0 [ 267.070470][ T9434] ? lockdep_hardirqs_on+0x7d/0x110 [ 267.070489][ T9434] do_fast_syscall_32+0x32/0x70 [ 267.070509][ T9434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.070531][ T9434] RIP: 0023:0xf70befec [ 267.070553][ T9434] Code: Unable to access opcode bytes at 0xf70befc2. [ 267.070563][ T9434] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 267.070581][ T9434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 267.070591][ T9434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.070601][ T9434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.070610][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.070618][ T9434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.070641][ T9434] [ 267.517202][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.614485][ T9439] FAULT_INJECTION: forcing a failure. [ 267.614485][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 267.621466][ T9439] CPU: 0 UID: 0 PID: 9439 Comm: syz.3.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.621498][ T9439] Tainted: [L]=SOFTLOCKUP [ 267.621502][ T9439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.621509][ T9439] Call Trace: [ 267.621513][ T9439] [ 267.621519][ T9439] dump_stack_lvl+0x100/0x190 [ 267.621537][ T9439] should_fail_ex.cold+0x5/0xa [ 267.621549][ T9439] should_failslab+0xc2/0x120 [ 267.621567][ T9439] __kmalloc_noprof+0xfc/0x820 [ 267.621583][ T9439] ? tomoyo_encode2+0xfb/0x3c0 [ 267.621602][ T9439] tomoyo_encode2+0xfb/0x3c0 [ 267.621620][ T9439] tomoyo_encode+0x29/0x50 [ 267.621635][ T9439] tomoyo_realpath_from_path+0x18c/0x690 [ 267.621655][ T9439] tomoyo_mount_acl+0x1b6/0x8b0 [ 267.621680][ T9439] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 267.621703][ T9439] ? __pfx___schedule+0x10/0x10 [ 267.621747][ T9439] ? tomoyo_domain+0xb2/0x150 [ 267.621763][ T9439] ? tomoyo_profile+0x47/0x60 [ 267.621781][ T9439] tomoyo_mount_permission+0x214/0x460 [ 267.621804][ T9439] ? tomoyo_mount_permission+0x1f6/0x460 [ 267.621829][ T9439] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 267.621856][ T9439] security_sb_mount+0xdd/0x270 [ 267.621870][ T9439] path_mount+0x158/0x24c0 [ 267.621888][ T9439] ? __pfx_path_mount+0x10/0x10 [ 267.621903][ T9439] ? lockdep_hardirqs_on+0x7d/0x110 [ 267.621914][ T9439] ? putname+0xb1/0x110 [ 267.621928][ T9439] ? kmem_cache_free+0x127/0x6b0 [ 267.621945][ T9439] ? __ia32_sys_mount+0x292/0x310 [ 267.621960][ T9439] __ia32_sys_mount+0x292/0x310 [ 267.621982][ T9439] ? __pfx___ia32_sys_mount+0x10/0x10 [ 267.622006][ T9439] ? rcu_is_watching+0x13/0xc0 [ 267.622033][ T9439] __do_fast_syscall_32+0x13a/0x8b0 [ 267.622050][ T9439] ? lockdep_hardirqs_on+0x7d/0x110 [ 267.622061][ T9439] do_fast_syscall_32+0x32/0x70 [ 267.622073][ T9439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.622088][ T9439] RIP: 0023:0xf70befec [ 267.622104][ T9439] Code: Unable to access opcode bytes at 0xf70befc2. [ 267.622108][ T9439] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 267.622120][ T9439] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 267.622126][ T9439] RDX: 0000000080000b80 RSI: 0000000000000008 RDI: 0000000080000080 [ 267.622132][ T9439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.622138][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.622144][ T9439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.622158][ T9439] [ 267.622282][ T9439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.774035][ T5836] dummy0: left allmulticast mode [ 267.779713][ T5836] bridge0: port 4(dummy0) entered disabled state [ 267.798574][ T5836] erspan0: left allmulticast mode [ 267.806744][ T5836] erspan0: left promiscuous mode [ 267.809159][ T5836] bridge0: port 3(erspan0) entered disabled state [ 267.829222][ T5836] bridge_slave_1: left allmulticast mode [ 267.832403][ T5836] bridge_slave_1: left promiscuous mode [ 267.836505][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.864428][ T5836] bridge_slave_0: left allmulticast mode [ 267.871577][ T5836] bridge_slave_0: left promiscuous mode [ 267.873699][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.904473][ T5836] team0: left allmulticast mode [ 267.907589][ T5836] team_slave_0: left allmulticast mode [ 267.910022][ T5836] team_slave_1: left allmulticast mode [ 267.912358][ T5836] vlan0: left allmulticast mode [ 267.914449][ T5836] veth0_vlan: left allmulticast mode [ 268.020025][ T9443] <½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 268.020025][ T9443]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 268.020025][ T9443] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 268.088905][ T9449] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.104027][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.110923][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.113723][ T9449] overlayfs: failed to set xattr on upper [ 268.116004][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.116243][ T5836] bond2 (unregistering): (slave geneve2): Releasing active interface [ 268.119840][ T9449] overlayfs: ...falling back to redirect_dir=nofollow. [ 268.127164][ T9449] overlayfs: ...falling back to index=off. [ 268.131247][ T9449] overlayfs: ...falling back to uuid=null. [ 268.133621][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.143672][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.195951][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.200901][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.204656][ T5836] bond0 (unregistering): Released all slaves [ 268.212219][ T5836] bond1 (unregistering): Released all slaves [ 268.221645][ T5836] bond2 (unregistering): Released all slaves [ 268.231339][ T5836] bond3 (unregistering): Released all slaves [ 268.247539][ T5836] bond4 (unregistering): Released all slaves [ 268.260957][ T9447] dvmrp0: entered allmulticast mode [ 268.438528][ T5836] tipc: Disabling bearer [ 268.447004][ T5836] tipc: Left network mode [ 268.464983][ T9472] jffs2: notice: (9472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 268.680284][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.972648][ T5836] hsr_slave_0: left promiscuous mode [ 269.978884][ T5836] hsr_slave_1: left promiscuous mode [ 270.011594][ T9508] nfsd: exp_rootfh path not found Ó¥)3 ¥¼÷@È$Ð/ [ 270.079780][ T9512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.156954][ T9514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.168217][ T5744] Bluetooth: hci3: command tx timeout [ 270.197772][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.200219][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.221558][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.238160][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.243497][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.282034][ T5836] veth1_macvtap: left promiscuous mode [ 270.283841][ T5836] veth0_macvtap: left promiscuous mode [ 270.291774][ T5836] veth1_vlan: left promiscuous mode [ 270.532491][ T5836] team0 (unregistering): Port device vlan0 removed [ 270.590462][ T5836] team0 (unregistering): Port device team_slave_1 removed [ 270.599184][ T5836] team0 (unregistering): Port device team_slave_0 removed [ 270.695809][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.698470][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.700979][ T9451] bridge_slave_0: entered allmulticast mode [ 270.704171][ T9451] bridge_slave_0: entered promiscuous mode [ 270.707745][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.710116][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.712460][ T9451] bridge_slave_1: entered allmulticast mode [ 270.715898][ T9451] bridge_slave_1: entered promiscuous mode [ 270.732193][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.737397][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.750459][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 270.763466][ T9451] team0: Port device team_slave_0 added [ 270.767403][ T9451] team0: Port device team_slave_1 added [ 270.789418][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.791609][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.801610][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.805961][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.808673][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.817107][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.908904][ T9526] jffs2: notice: (9526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.930973][ T9451] hsr_slave_0: entered promiscuous mode [ 270.933826][ T9451] hsr_slave_1: entered promiscuous mode [ 270.936085][ T9451] debugfs: 'hsr0' already exists in 'hsr' [ 270.938349][ T9451] Cannot create hsr debugfs directory [ 271.063019][ T9451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.067620][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.071194][ T9451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.153822][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.157738][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 271.161241][ T9451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.186436][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.203012][ T9451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.217035][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.278686][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.284095][ T5836] IPVS: stop unused estimator thread 0... [ 271.311400][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.322504][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.324830][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.360831][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.363148][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.670731][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 271.873280][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.246800][ T5744] Bluetooth: hci3: command tx timeout [ 272.897390][ T9451] veth0_vlan: entered promiscuous mode [ 272.905111][ T9451] veth1_vlan: entered promiscuous mode [ 272.969760][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1028'. [ 272.988103][ T9451] veth0_macvtap: entered promiscuous mode [ 272.992620][ T9451] veth1_macvtap: entered promiscuous mode [ 273.002306][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.009399][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.058700][ T9599] jffs2: notice: (9599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.099167][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.104029][ T5836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.107672][ T5836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.111128][ T5836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.120078][ T9603] busy [ 273.350750][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.355114][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.396788][ T5820] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 273.423253][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.428890][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.556781][ T5820] usb 9-1: Using ep0 maxpacket: 8 [ 273.561995][ T5820] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.568584][ T5820] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 273.585333][ T5820] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.613076][ T5820] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.625036][ T5820] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.633012][ T5820] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.641428][ T9613] overlay: Unknown parameter 'pcr' [ 273.645119][ T5820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.656405][ T5820] usbtmc 9-1:16.0: bulk endpoints not found [ 273.658590][ T9615] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 273.658590][ T9615]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 273.658590][ T9615] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 273.822394][ T42] kauditd_printk_skb: 553 callbacks suppressed [ 273.824053][ T42] audit: type=1326 audit(1787127834.455:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7fc00000 [ 273.832105][ T9621] hfsplus: unable to find HFS+ superblock [ 273.834482][ T42] audit: type=1326 audit(1787127834.455:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7fa2fec code=0x7fc00000 [ 274.326792][ T5744] Bluetooth: hci3: command tx timeout [ 274.530898][ T42] audit: type=1326 audit(1787127835.165:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7fc00000 [ 274.779731][ T9638] jffs2: notice: (9638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 274.843438][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1038'. [ 274.954009][ T9645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.971239][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 275.080477][ T9645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.085717][ T9649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.152024][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.172566][ T9645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.217672][ T9651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.253236][ T9645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.416745][ T9479] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.419107][ T9479] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.426786][ T9479] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.432280][ T9479] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.567357][ T42] audit: type=1804 audit(1787127836.195:648): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1042" name="/newroot/239/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=28294 res=1 errno=0 [ 275.570138][ T9659] binder: Unknown parameter '18446744073709551615' [ 275.575937][ T42] audit: type=1800 audit(1787127836.205:649): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1042" name="iface_name" dev="configfs" ino=28294 res=0 errno=0 [ 275.579905][ T9659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1042'. [ 275.587804][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1042'. [ 275.668758][ T9667] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 275.668758][ T9667]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 275.668758][ T9667] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 275.700691][ T9668] FAULT_INJECTION: forcing a failure. [ 275.700691][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 275.719608][ T9668] CPU: 3 UID: 0 PID: 9668 Comm: syz.3.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.719637][ T9668] Tainted: [L]=SOFTLOCKUP [ 275.719643][ T9668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.719655][ T9668] Call Trace: [ 275.719662][ T9668] [ 275.719671][ T9668] dump_stack_lvl+0x100/0x190 [ 275.719700][ T9668] should_fail_ex.cold+0x5/0xa [ 275.719730][ T9668] should_failslab+0xc2/0x120 [ 275.719759][ T9668] kmem_cache_alloc_noprof+0x91/0x6a0 [ 275.719788][ T9668] ? do_getname+0x35/0x390 [ 275.719820][ T9668] do_getname+0x35/0x390 [ 275.719849][ T9668] do_sys_openat2+0xc7/0x1e0 [ 275.719877][ T9668] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.719907][ T9668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.719931][ T9668] ? __fget_files+0x21f/0x3d0 [ 275.719955][ T9668] __ia32_compat_sys_open+0xfe/0x1c0 [ 275.719984][ T9668] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 275.720010][ T9668] ? fput+0x7c/0x100 [ 275.720034][ T9668] ? ksys_write+0x1ac/0x250 [ 275.720054][ T9668] ? __pfx_ksys_write+0x10/0x10 [ 275.720079][ T9668] __do_fast_syscall_32+0x13a/0x8b0 [ 275.720100][ T9668] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.720121][ T9668] do_fast_syscall_32+0x32/0x70 [ 275.720141][ T9668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.720165][ T9668] RIP: 0023:0xf70befec [ 275.720189][ T9668] Code: Unable to access opcode bytes at 0xf70befc2. [ 275.720198][ T9668] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 275.720217][ T9668] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000000040280 [ 275.720229][ T9668] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.720240][ T9668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.720251][ T9668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 275.720261][ T9668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.720283][ T9668] [ 275.721040][ T9668] binder: Unknown parameter '18446744073709551615' [ 275.803483][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1046'. [ 275.808112][ T9668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1046'. [ 276.158628][ T50] usb 9-1: USB disconnect, device number 2 [ 276.415544][ T5744] Bluetooth: hci3: command tx timeout [ 277.345872][ T9703] FAULT_INJECTION: forcing a failure. [ 277.345872][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 277.350316][ T9703] CPU: 3 UID: 0 PID: 9703 Comm: syz.2.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.350334][ T9703] Tainted: [L]=SOFTLOCKUP [ 277.350338][ T9703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.350345][ T9703] Call Trace: [ 277.350349][ T9703] [ 277.350353][ T9703] dump_stack_lvl+0x100/0x190 [ 277.350370][ T9703] should_fail_ex.cold+0x5/0xa [ 277.350384][ T9703] should_failslab+0xc2/0x120 [ 277.350401][ T9703] __kmalloc_cache_noprof+0x91/0x6b0 [ 277.350415][ T9703] ? xprt_alloc+0x590/0x9d0 [ 277.350442][ T9703] xprt_alloc+0x590/0x9d0 [ 277.350457][ T9703] xs_setup_xprt+0xaf/0x3c0 [ 277.350475][ T9703] xs_setup_local+0x47/0x820 [ 277.350486][ T9703] xprt_create_transport+0x16c/0x740 [ 277.350501][ T9703] ? bpf_ksym_find+0x124/0x1c0 [ 277.350525][ T9703] rpc_create+0x390/0x7f0 [ 277.350536][ T9703] ? __pfx_rpc_create+0x10/0x10 [ 277.350545][ T9703] ? __kernel_text_address+0xd/0x30 [ 277.350579][ T9703] ? check_prev_add+0x354/0xe60 [ 277.350593][ T9703] rpcb_create_af_local+0x177/0x360 [ 277.350614][ T9703] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 277.350634][ T9703] ? find_held_lock+0x2b/0x80 [ 277.350649][ T9703] ? rpcb_create_local+0x1da/0x270 [ 277.350662][ T9703] ? rpcb_create_local+0x1da/0x270 [ 277.350680][ T9703] rpcb_create_local+0x1ee/0x270 [ 277.350695][ T9703] svc_bind+0x1e8/0x260 [ 277.350712][ T9703] nfsd_create_serv+0x2da/0x4a0 [ 277.350729][ T9703] ? __pfx_nfsd_create_serv+0x10/0x10 [ 277.350744][ T9703] ? net_generic+0xea/0x2a0 [ 277.350758][ T9703] write_ports+0x2ef/0xcc0 [ 277.350770][ T9703] ? __pfx_write_ports+0x10/0x10 [ 277.350783][ T9703] ? find_held_lock+0x2b/0x80 [ 277.350797][ T9703] ? __might_fault+0xc5/0x140 [ 277.350841][ T9703] ? __pfx_write_ports+0x10/0x10 [ 277.350856][ T9703] ? _copy_from_user+0x59/0xd0 [ 277.350870][ T9703] ? __pfx_write_ports+0x10/0x10 [ 277.350880][ T9703] nfsctl_transaction_write+0x106/0x1a0 [ 277.350892][ T9703] vfs_write+0x2aa/0x1050 [ 277.350905][ T9703] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 277.350918][ T9703] ? __pfx_vfs_write+0x10/0x10 [ 277.350928][ T9703] ? find_held_lock+0x2b/0x80 [ 277.350943][ T9703] ? __fget_files+0x215/0x3d0 [ 277.350958][ T9703] ? __fget_files+0x21f/0x3d0 [ 277.350974][ T9703] ksys_write+0x12a/0x250 [ 277.350986][ T9703] ? __pfx_ksys_write+0x10/0x10 [ 277.350997][ T9703] ? ksys_write+0x1ac/0x250 [ 277.351008][ T9703] ? __pfx_ksys_write+0x10/0x10 [ 277.351023][ T9703] __do_fast_syscall_32+0x13a/0x8b0 [ 277.351036][ T9703] ? lockdep_hardirqs_on+0x7d/0x110 [ 277.351048][ T9703] do_fast_syscall_32+0x32/0x70 [ 277.351060][ T9703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.351075][ T9703] RIP: 0023:0xf7fa2fec [ 277.351091][ T9703] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 277.351095][ T9703] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 277.351106][ T9703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 277.351113][ T9703] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.351119][ T9703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.351125][ T9703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 277.351135][ T9703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.351149][ T9703] [ 277.509544][ T5738] svc: failed to register nfsdv3 RPC service (errno 111). [ 277.512985][ T5738] svc: failed to register nfsaclv3 RPC service (errno 111). [ 277.515213][ T5738] failed to unregister tcp with rpcbind [ 277.518728][ T5738] svc: failed to register nfsdv3 RPC service (errno 97). [ 277.521648][ T5738] svc: failed to register nfsaclv3 RPC service (errno 97). [ 277.524001][ T5738] failed to unregister tcp with rpcbind [ 277.596686][ T50] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 277.656007][ T9714] jffs2: notice: (9714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 277.723347][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1061'. [ 277.747454][ T50] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 277.751817][ T50] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.755657][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 277.760288][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 277.766124][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.769361][ T50] usb 8-1: Product: syz [ 277.770835][ T50] usb 8-1: Manufacturer: syz [ 277.772424][ T50] usb 8-1: SerialNumber: syz [ 277.776405][ T50] usb 8-1: config 0 descriptor?? [ 277.779557][ T9698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.827743][ T50] rc_core: IR keymap rc-streamzap not found [ 277.829701][ T50] Registered IR keymap rc-empty [ 277.837304][ T50] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 277.842072][ T9723] busy [ 277.845133][ T50] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 278.018587][ T9726] jffs2: notice: (9726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 278.164106][ T5831] usb 8-1: USB disconnect, device number 20 [ 278.306900][ T9741] FAULT_INJECTION: forcing a failure. [ 278.306900][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.310853][ T9741] CPU: 2 UID: 0 PID: 9741 Comm: syz.5.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.310871][ T9741] Tainted: [L]=SOFTLOCKUP [ 278.310875][ T9741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.310881][ T9741] Call Trace: [ 278.310886][ T9741] [ 278.310892][ T9741] dump_stack_lvl+0x100/0x190 [ 278.310909][ T9741] should_fail_ex.cold+0x5/0xa [ 278.310923][ T9741] __fpu_restore_sig+0x100/0x13b0 [ 278.310947][ T9741] ? __lock_acquire+0x4c5/0x1ec0 [ 278.310963][ T9741] ? __pfx___fpu_restore_sig+0x10/0x10 [ 278.310981][ T9741] ? rcu_is_watching+0x13/0xc0 [ 278.311006][ T9741] ? __might_fault+0xc5/0x140 [ 278.311029][ T9741] fpu__restore_sig+0x151/0x190 [ 278.311045][ T9741] ia32_restore_sigcontext+0x456/0x620 [ 278.311065][ T9741] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 278.311086][ T9741] ? rcu_is_watching+0x13/0xc0 [ 278.311104][ T9741] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.311129][ T9741] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.311148][ T9741] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 278.311167][ T9741] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 278.311191][ T9741] do_int80_emulation+0x166/0x650 [ 278.311212][ T9741] asm_int80_emulation+0x1a/0x20 [ 278.311229][ T9741] RIP: 0023:0xf7f94fea [ 278.311243][ T9741] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.311259][ T9741] RSP: 002b:00000000f545650c EFLAGS: 00000292 [ 278.311270][ T9741] RAX: 0000000000000036 RBX: 0000000000000003 RCX: 0000000000002285 [ 278.311276][ T9741] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.311283][ T9741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.311288][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.311294][ T9741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.311307][ T9741] [ 278.790517][ T9748] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 278.790517][ T9748]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 278.790517][ T9748] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 279.488381][ T9754] jffs2: notice: (9754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.546467][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.607577][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.645778][ T9778] jffs2: notice: (9778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.719964][ T9780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.274359][ T9788] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 281.274359][ T9788]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 281.274359][ T9788] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 281.573289][ T9796] jffs2: notice: (9796) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.880519][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 282.307047][ T5831] e1000 0000:00:06.0 eth0: Reset adapter [ 282.924233][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 282.942258][ T9835] jffs2: notice: (9835) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.125700][ T9831] busy [ 284.568337][ T5831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 291.130394][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1099'. [ 291.282180][ T9906] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 291.282180][ T9906]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 291.282180][ T9906] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 291.290249][ T9905] busy [ 291.490902][ T9911] jffs2: notice: (9911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.859911][ T9933] hpfs: hpfs_map_sector(): read error [ 293.066417][ T9946] jffs2: notice: (9946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.227957][ T9956] comedi comedi2: pcl818: a I/O base address must be specified [ 293.230413][ T9957] ½žé-Áôa È0Y5‰ÌTzÑÚ°f‡H‚+(ãø‡ñ ð2ýÖ"”Âó~™ [ 293.230413][ T9957]  â­:XjŽF='nðé8³H*輺×ì‚iCVfØŒUÊ•ˆúò6¼k\÷4:Ë [ 293.230413][ T9957] „F°Œú’á ¸TÖÂ`Ü4ôtm³}N9ÙÒjíí(Ö¬*A1ûa•¥€UnÅ^êø"zŒK?¢xþaÛÇæÍnqÝ,R1Ý BG›Ú^'­­MÊH-eö8Ûõ6qPÐË-ÿAó׃¬5œj¥ªEnvv”Ê¿È7Èbǘ [ 293.469098][ T9963] comedi comedi2: pcl818: a I/O base address must be specified [ 293.720034][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 294.268917][ T42] audit: type=1800 audit(1787127854.895:650): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1116" name="file1" dev="overlay" ino=208 res=0 errno=0 [ 294.276618][ T5831] e1000 0000:00:06.0 eth0: Reset adapter [ 294.573197][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 294.634382][ T9986] jffs2: notice: (9986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 295.400191][T10012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.127762][ T5831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 303.447999][T10070] FAULT_INJECTION: forcing a failure. [ 303.447999][T10070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.452351][T10070] CPU: 2 UID: 0 PID: 10070 Comm: syz.4.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.452369][T10070] Tainted: [L]=SOFTLOCKUP [ 303.452373][T10070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.452381][T10070] Call Trace: [ 303.452387][T10070] [ 303.452392][T10070] dump_stack_lvl+0x100/0x190 [ 303.452409][T10070] should_fail_ex.cold+0x5/0xa [ 303.452423][T10070] strncpy_from_user+0x3b/0x2d0 [ 303.452439][T10070] __do_sys_add_key+0xd4/0x460 [ 303.452451][T10070] ? __pfx___do_sys_add_key+0x10/0x10 [ 303.452462][T10070] ? fput+0x7c/0x100 [ 303.452478][T10070] ? __pfx_ksys_write+0x10/0x10 [ 303.452492][T10070] __do_fast_syscall_32+0x13a/0x8b0 [ 303.452505][T10070] ? lockdep_hardirqs_on+0x7d/0x110 [ 303.452517][T10070] do_fast_syscall_32+0x32/0x70 [ 303.452528][T10070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.452543][T10070] RIP: 0023:0xf70befec [ 303.452557][T10070] Code: Unable to access opcode bytes at 0xf70befc2. [ 303.452562][T10070] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 303.452573][T10070] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 303.452579][T10070] RDX: 0000000080000780 RSI: 0000000000000559 RDI: 00000000fffffffc [ 303.452585][T10070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.452591][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.452598][T10070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.452623][T10070] [ 303.719698][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.783249][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.846054][T10078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.995212][T10084] syzkaller0: entered promiscuous mode [ 303.997745][T10084] syzkaller0: entered allmulticast mode [ 304.017274][T10084] tipc: Started in network mode [ 304.019206][T10084] tipc: Node identity 0e7ccccf6d89, cluster identity 4711 [ 304.025644][T10084] tipc: Enabled bearer , priority 0 [ 304.045567][T10084] tipc: Resetting bearer [ 304.053181][T10083] tipc: Resetting bearer [ 304.070405][T10083] tipc: Disabling bearer [ 304.205305][T10089] comedi comedi2: pcl818: a I/O base address must be specified [ 304.601849][T10102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1146'. [ 305.359988][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 305.619007][T10129] comedi comedi2: pcl818: a I/O base address must be specified [ 306.571497][T10159] hpfs: hpfs_map_sector(): read error [ 307.708759][ T9608] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 307.816730][ T5821] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 307.857482][ T9608] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 307.863087][ T9608] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.868661][ T9608] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.872395][ T9608] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 307.878712][ T9608] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.882919][ T9608] usb 10-1: Product: syz [ 307.884653][ T9608] usb 10-1: Manufacturer: syz [ 307.886410][ T9608] usb 10-1: SerialNumber: syz [ 307.894925][ T9608] usb 10-1: config 0 descriptor?? [ 307.899426][T10170] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.956725][ T9608] rc_core: IR keymap rc-streamzap not found [ 307.958644][ T9608] Registered IR keymap rc-empty [ 307.966911][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 307.976070][ T9608] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 307.983114][ T5821] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.988222][ T5821] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 307.992960][ T9608] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input18 [ 307.999955][ T5821] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.004486][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.012353][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.018300][ T5821] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.029710][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.197506][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 308.252955][ T5821] usb 9-1: usb_control_msg returned -32 [ 308.255490][ T5821] usbtmc 9-1:16.0: can't read capabilities [ 308.275940][ T998] usb 10-1: USB disconnect, device number 2 [ 308.454356][ T5885] usb 9-1: USB disconnect, device number 3 [ 308.941647][T10188] syzkaller0: entered promiscuous mode [ 308.943968][T10188] syzkaller0: entered allmulticast mode [ 308.951436][T10188] tipc: Started in network mode [ 308.953318][T10188] tipc: Node identity b21177cb981b, cluster identity 4711 [ 308.956347][T10188] tipc: Enabled bearer , priority 0 [ 308.962577][T10187] tipc: Resetting bearer [ 308.976807][T10187] tipc: Disabling bearer [ 316.730003][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.732962][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.152404][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1163'. [ 317.397912][T10223] busy [ 317.592852][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1168'. [ 317.754568][T10233] busy [ 318.123029][T10239] jffs2: notice: (10239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.405898][T10257] FAULT_INJECTION: forcing a failure. [ 318.405898][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 318.414340][T10257] CPU: 3 UID: 0 PID: 10257 Comm: syz.5.1175 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.414359][T10257] Tainted: [L]=SOFTLOCKUP [ 318.414363][T10257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.414369][T10257] Call Trace: [ 318.414374][T10257] [ 318.414379][T10257] dump_stack_lvl+0x100/0x190 [ 318.414397][T10257] should_fail_ex.cold+0x5/0xa [ 318.414411][T10257] should_failslab+0xc2/0x120 [ 318.414429][T10257] __kmalloc_cache_noprof+0x91/0x6b0 [ 318.414442][T10257] ? memtype_get_idx+0xc0/0xc0 [ 318.414468][T10257] ? memtype_get_idx+0x3d/0xc0 [ 318.414481][T10257] memtype_get_idx+0x3d/0xc0 [ 318.414493][T10257] seq_read_iter+0xac5/0x1270 [ 318.414511][T10257] seq_read+0x344/0x4d0 [ 318.414523][T10257] ? __pfx_seq_read+0x10/0x10 [ 318.414538][T10257] ? lock_acquire+0x1b9/0x370 [ 318.414555][T10257] full_proxy_read+0x135/0x1a0 [ 318.414567][T10257] ? __pfx_full_proxy_read+0x10/0x10 [ 318.414579][T10257] vfs_read+0x1e4/0xb40 [ 318.414593][T10257] ? __pfx_vfs_read+0x10/0x10 [ 318.414604][T10257] ? find_held_lock+0x2b/0x80 [ 318.414619][T10257] ? __fget_files+0x215/0x3d0 [ 318.414654][T10257] ? __fget_files+0x21f/0x3d0 [ 318.414672][T10257] ksys_read+0x12a/0x250 [ 318.414684][T10257] ? __pfx_ksys_read+0x10/0x10 [ 318.414694][T10257] ? ksys_write+0x1ac/0x250 [ 318.414706][T10257] ? __pfx_ksys_write+0x10/0x10 [ 318.414720][T10257] __do_fast_syscall_32+0x13a/0x8b0 [ 318.414735][T10257] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.414748][T10257] do_fast_syscall_32+0x32/0x70 [ 318.414760][T10257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.414775][T10257] RIP: 0023:0xf7f94fec [ 318.414789][T10257] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 318.414794][T10257] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 318.414806][T10257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 318.414812][T10257] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.414818][T10257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.414824][T10257] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.414830][T10257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.414843][T10257] [ 318.548563][T10262] FAULT_INJECTION: forcing a failure. [ 318.548563][T10262] name failslab, interval 1, probability 0, space 0, times 0 [ 318.562451][T10262] CPU: 3 UID: 0 PID: 10262 Comm: syz.4.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.562470][T10262] Tainted: [L]=SOFTLOCKUP [ 318.562474][T10262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.562483][T10262] Call Trace: [ 318.562488][T10262] [ 318.562493][T10262] dump_stack_lvl+0x100/0x190 [ 318.562511][T10262] should_fail_ex.cold+0x5/0xa [ 318.562522][T10262] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 318.562539][T10262] should_failslab+0xc2/0x120 [ 318.562556][T10262] kmem_cache_alloc_noprof+0x91/0x6a0 [ 318.562574][T10262] ? skb_clone+0x190/0x400 [ 318.562592][T10262] skb_clone+0x190/0x400 [ 318.562606][T10262] netlink_deliver_tap+0xaed/0xcc0 [ 318.562627][T10262] netlink_unicast+0x6a5/0x850 [ 318.562664][T10262] ? __pfx_netlink_unicast+0x10/0x10 [ 318.562673][T10262] ? genl_rcv_msg+0x4be/0x800 [ 318.562689][T10262] netlink_ack+0x655/0xb80 [ 318.562703][T10262] netlink_rcv_skb+0x333/0x420 [ 318.562713][T10262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.562726][T10262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.562741][T10262] ? netlink_deliver_tap+0x1ae/0xcc0 [ 318.562759][T10262] genl_rcv+0x28/0x40 [ 318.562770][T10262] netlink_unicast+0x585/0x850 [ 318.562782][T10262] ? __pfx_netlink_unicast+0x10/0x10 [ 318.562796][T10262] netlink_sendmsg+0x8b0/0xda0 [ 318.562808][T10262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.562820][T10262] ? apparmor_socket_sendmsg+0x15b/0x270 [ 318.562835][T10262] ____sys_sendmsg+0xa4d/0xbe0 [ 318.562851][T10262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.562863][T10262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.562885][T10262] ___sys_sendmsg+0x190/0x1e0 [ 318.562902][T10262] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.562925][T10262] ? find_held_lock+0x2b/0x80 [ 318.562948][T10262] __sys_sendmsg+0x160/0x210 [ 318.562962][T10262] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.562984][T10262] ? __pfx_ksys_write+0x10/0x10 [ 318.563000][T10262] __do_fast_syscall_32+0x13a/0x8b0 [ 318.563012][T10262] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.563025][T10262] do_fast_syscall_32+0x32/0x70 [ 318.563036][T10262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.563051][T10262] RIP: 0023:0xf70befec [ 318.563067][T10262] Code: Unable to access opcode bytes at 0xf70befc2. [ 318.563072][T10262] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 318.563083][T10262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 318.563090][T10262] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.563096][T10262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.563102][T10262] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.563108][T10262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.563120][T10262] [ 318.598006][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.722505][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.781001][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.046688][ T149] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 319.109813][T10292] FAULT_INJECTION: forcing a failure. [ 319.109813][T10292] name failslab, interval 1, probability 0, space 0, times 0 [ 319.113748][T10292] CPU: 3 UID: 0 PID: 10292 Comm: syz.2.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.113767][T10292] Tainted: [L]=SOFTLOCKUP [ 319.113770][T10292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.113777][T10292] Call Trace: [ 319.113782][T10292] [ 319.113786][T10292] dump_stack_lvl+0x100/0x190 [ 319.113803][T10292] should_fail_ex.cold+0x5/0xa [ 319.113816][T10292] should_failslab+0xc2/0x120 [ 319.113834][T10292] kmem_cache_alloc_noprof+0x91/0x6a0 [ 319.113851][T10292] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 319.113879][T10292] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 319.113895][T10292] mmu_topup_memory_caches+0x25/0x170 [ 319.113920][T10292] kvm_mmu_load+0xe2/0x2570 [ 319.113935][T10292] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 319.113953][T10292] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 319.113972][T10292] ? __pfx_kvm_mmu_load+0x10/0x10 [ 319.113984][T10292] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 319.113996][T10292] ? kvm_check_and_inject_events+0x873/0x12a0 [ 319.114011][T10292] ? record_steal_time+0x3b0/0xbb0 [ 319.114030][T10292] vcpu_run+0x3ab0/0x5df0 [ 319.114044][T10292] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 319.114066][T10292] ? __pfx_vcpu_run+0x10/0x10 [ 319.114085][T10292] ? rcu_is_watching+0x13/0xc0 [ 319.114102][T10292] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 319.114117][T10292] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 319.114135][T10292] kvm_vcpu_ioctl+0x730/0x1700 [ 319.114148][T10292] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.114159][T10292] ? tomoyo_path_number_perm+0x188/0x580 [ 319.114174][T10292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.114189][T10292] ? get_pid_task+0x106/0x250 [ 319.114208][T10292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.114227][T10292] ? do_vfs_ioctl+0x226/0x13e0 [ 319.114239][T10292] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.114255][T10292] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 319.114267][T10292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 319.114279][T10292] ? __fget_files+0x21f/0x3d0 [ 319.114294][T10292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 319.114305][T10292] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 319.114318][T10292] __do_fast_syscall_32+0x13a/0x8b0 [ 319.114331][T10292] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.114343][T10292] do_fast_syscall_32+0x32/0x70 [ 319.114355][T10292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.114369][T10292] RIP: 0023:0xf7fa2fec [ 319.114385][T10292] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 319.114390][T10292] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 319.114400][T10292] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 319.114407][T10292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.114412][T10292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.114418][T10292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.114424][T10292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.114437][T10292] [ 319.225420][T10297] syzkaller0: entered promiscuous mode [ 319.227854][T10297] syzkaller0: entered allmulticast mode [ 319.267397][ T1136] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 319.270589][ T1136] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 319.273152][ T1136] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 319.275761][ T1136] sr 2:0:0:0: [sr0] tag#10 CDB: opcode=0xf0 (vendor) f0 76 8e 74 58 35 d2 b6 ed f9 3d dd [ 319.286736][ T149] usb 9-1: Using ep0 maxpacket: 8 [ 319.289358][ T149] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.294781][ T149] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 319.297416][ T149] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.300389][ T149] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.303378][ T149] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.306415][ T149] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.310865][ T149] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.521469][ T149] usb 9-1: usb_control_msg returned -32 [ 319.523728][ T149] usbtmc 9-1:16.0: can't read capabilities [ 319.725824][ T149] usb 9-1: USB disconnect, device number 4 [ 320.118811][T10307] FAULT_INJECTION: forcing a failure. [ 320.118811][T10307] name failslab, interval 1, probability 0, space 0, times 0 [ 320.123900][T10307] CPU: 2 UID: 0 PID: 10307 Comm: syz.5.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.123919][T10307] Tainted: [L]=SOFTLOCKUP [ 320.123923][T10307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.123930][T10307] Call Trace: [ 320.123935][T10307] [ 320.123940][T10307] dump_stack_lvl+0x100/0x190 [ 320.123956][T10307] should_fail_ex.cold+0x5/0xa [ 320.123969][T10307] should_failslab+0xc2/0x120 [ 320.123986][T10307] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 320.124003][T10307] ? __d_alloc+0x35/0xa50 [ 320.124020][T10307] __d_alloc+0x35/0xa50 [ 320.124036][T10307] d_alloc_parallel+0x105/0x14c0 [ 320.124052][T10307] ? __pfx_d_alloc_parallel+0x10/0x10 [ 320.124063][T10307] ? __pfx___might_resched+0x10/0x10 [ 320.124074][T10307] ? find_held_lock+0x2b/0x80 [ 320.124089][T10307] ? __d_lookup+0x25c/0x4a0 [ 320.124101][T10307] ? down_read+0x13b/0x4c0 [ 320.124115][T10307] ? __pfx_down_read+0x10/0x10 [ 320.124128][T10307] __lookup_slow+0x98/0x320 [ 320.124146][T10307] lookup_slow+0x50/0x70 [ 320.124163][T10307] lookup_one_unlocked+0xb8/0xd0 [ 320.124177][T10307] ovl_lookup_single+0x3df/0x1280 [ 320.124198][T10307] ? __pfx_ovl_lookup_single+0x10/0x10 [ 320.124219][T10307] ovl_lookup_layer+0x3f1/0x4b0 [ 320.124229][T10307] ? trace_kmalloc+0xa0/0x110 [ 320.124248][T10307] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 320.124265][T10307] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 320.124278][T10307] ovl_lookup_layers+0x16d4/0x2ac0 [ 320.124291][T10307] ? __lock_acquire+0x4c5/0x1ec0 [ 320.124306][T10307] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 320.124320][T10307] ? find_held_lock+0x2b/0x80 [ 320.124333][T10307] ? rcu_read_unlock+0x17/0x60 [ 320.124345][T10307] ? rcu_read_unlock+0x17/0x60 [ 320.124360][T10307] ovl_lookup+0x4a8/0x6b0 [ 320.124372][T10307] ? __pfx_ovl_lookup+0x10/0x10 [ 320.124382][T10307] ? trace_kmem_cache_alloc+0xdd/0x100 [ 320.124401][T10307] ? do_raw_spin_lock+0x128/0x260 [ 320.124417][T10307] ? do_raw_spin_unlock+0x145/0x1e0 [ 320.124430][T10307] ? _raw_spin_unlock+0x28/0x50 [ 320.124453][T10307] lookup_one_qstr_excl+0x1cd/0x250 [ 320.124469][T10307] ? mnt_get_write_access+0x52/0x2f0 [ 320.124487][T10307] __start_renaming+0x16d/0x520 [ 320.124507][T10307] filename_renameat2+0x538/0xa60 [ 320.124527][T10307] ? __pfx_filename_renameat2+0x10/0x10 [ 320.124546][T10307] ? __might_fault+0xc5/0x140 [ 320.124566][T10307] ? do_getname+0x191/0x390 [ 320.124583][T10307] __ia32_sys_renameat2+0xee/0x140 [ 320.124600][T10307] __do_fast_syscall_32+0x13a/0x8b0 [ 320.124612][T10307] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.124624][T10307] do_fast_syscall_32+0x32/0x70 [ 320.124637][T10307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.124651][T10307] RIP: 0023:0xf7f94fec [ 320.124666][T10307] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 320.124670][T10307] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000161 [ 320.124681][T10307] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000440 [ 320.124688][T10307] RDX: 00000000ffffff9c RSI: 0000000080000140 RDI: 0000000000000000 [ 320.124694][T10307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.124700][T10307] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.124706][T10307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.124719][T10307] [ 320.502367][T10324] binder: 10323:10324 ioctl c0306201 0 returned -14 [ 320.620500][T10330] jffs2: notice: (10330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 321.441967][T10340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.540838][T10347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.596596][T10348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.291563][T10365] tmpfs: Unknown parameter 'usrquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 322.316449][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1212'. [ 322.382904][T10373] FAULT_INJECTION: forcing a failure. [ 322.382904][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 322.386512][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.5.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.386542][T10373] Tainted: [L]=SOFTLOCKUP [ 322.386546][T10373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.386552][T10373] Call Trace: [ 322.386557][T10373] [ 322.386562][T10373] dump_stack_lvl+0x100/0x190 [ 322.386579][T10373] should_fail_ex.cold+0x5/0xa [ 322.386592][T10373] should_failslab+0xc2/0x120 [ 322.386609][T10373] kmem_cache_alloc_noprof+0x91/0x6a0 [ 322.386644][T10373] ? trace_kmem_cache_alloc+0xdd/0x100 [ 322.386662][T10373] ? security_file_alloc+0x34/0x2c0 [ 322.386680][T10373] security_file_alloc+0x34/0x2c0 [ 322.386695][T10373] init_file+0x95/0x480 [ 322.386711][T10373] alloc_empty_file+0x79/0x1c0 [ 322.386727][T10373] alloc_file_pseudo+0x183/0x290 [ 322.386744][T10373] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 322.386759][T10373] ? alloc_fd+0x471/0x7a0 [ 322.386775][T10373] sock_alloc_file+0x50/0x210 [ 322.386791][T10373] __sys_socket+0x1c0/0x260 [ 322.386801][T10373] ? __pfx___sys_socket+0x10/0x10 [ 322.386811][T10373] ? fput+0x7c/0x100 [ 322.386825][T10373] ? ksys_write+0x1ac/0x250 [ 322.386836][T10373] ? __pfx_ksys_write+0x10/0x10 [ 322.386849][T10373] __ia32_sys_socket+0x72/0xb0 [ 322.386859][T10373] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.386871][T10373] __do_fast_syscall_32+0x13a/0x8b0 [ 322.386882][T10373] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.386894][T10373] do_fast_syscall_32+0x32/0x70 [ 322.386905][T10373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.386919][T10373] RIP: 0023:0xf7f94fec [ 322.386935][T10373] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 322.386940][T10373] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 322.386951][T10373] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000005 [ 322.386958][T10373] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.386964][T10373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.386970][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.386976][T10373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.386989][T10373] [ 322.516671][ T998] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 322.561275][T10381] o2cb: Local heartbeat has not been started. [ 322.565274][T10381] o2cb: Cluster check failed. Fix errors before retrying. [ 322.568395][T10381] (syz.5.1218,10381,3):user_dlm_register:674 ERROR: status = -22 [ 322.570972][T10381] (syz.5.1218,10381,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 322.574593][T10381] FAULT_INJECTION: forcing a failure. [ 322.574593][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.579183][T10381] CPU: 3 UID: 0 PID: 10381 Comm: syz.5.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.579199][T10381] Tainted: [L]=SOFTLOCKUP [ 322.579203][T10381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.579210][T10381] Call Trace: [ 322.579214][T10381] [ 322.579218][T10381] dump_stack_lvl+0x100/0x190 [ 322.579235][T10381] should_fail_ex.cold+0x5/0xa [ 322.579248][T10381] _copy_to_user+0x32/0xd0 [ 322.579262][T10381] simple_read_from_buffer+0xcb/0x170 [ 322.579277][T10381] proc_fail_nth_read+0x1af/0x230 [ 322.579290][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.579303][T10381] ? rw_verify_area+0xce/0x6d0 [ 322.579313][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.579325][T10381] vfs_read+0x1e4/0xb40 [ 322.579339][T10381] ? __pfx_vfs_read+0x10/0x10 [ 322.579349][T10381] ? find_held_lock+0x2b/0x80 [ 322.579364][T10381] ? __fget_files+0x215/0x3d0 [ 322.579380][T10381] ? __fget_files+0x21f/0x3d0 [ 322.579396][T10381] ksys_read+0x12a/0x250 [ 322.579407][T10381] ? __pfx_ksys_read+0x10/0x10 [ 322.579430][T10381] do_int80_emulation+0x166/0x650 [ 322.579444][T10381] asm_int80_emulation+0x1a/0x20 [ 322.579456][T10381] RIP: 0023:0xf71974eb [ 322.579465][T10381] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 322.579476][T10381] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 322.579487][T10381] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54565d0 [ 322.579493][T10381] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 322.579499][T10381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.579505][T10381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.579511][T10381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.579524][T10381] [ 322.666664][ T998] usb 7-1: Using ep0 maxpacket: 8 [ 322.668795][ T998] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.672645][ T998] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 322.675321][ T998] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.678515][ T998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.681549][ T998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.684643][ T998] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.688780][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.916497][ T998] usb 7-1: usb_control_msg returned -32 [ 322.918359][ T998] usbtmc 7-1:16.0: can't read capabilities [ 323.132419][ T998] usb 7-1: USB disconnect, device number 14 [ 323.739152][ T42] audit: type=1326 audit(1787127884.375:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.744587][T10401] FAULT_INJECTION: forcing a failure. [ 323.744587][T10401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.746047][ T42] audit: type=1326 audit(1787127884.375:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.750345][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.5.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.750362][T10401] Tainted: [L]=SOFTLOCKUP [ 323.750366][T10401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.750372][T10401] Call Trace: [ 323.750377][T10401] [ 323.750381][T10401] dump_stack_lvl+0x100/0x190 [ 323.750398][T10401] should_fail_ex.cold+0x5/0xa [ 323.750410][T10401] _copy_to_user+0x32/0xd0 [ 323.750424][T10401] bpf_test_finish.isra.0+0x4aa/0x650 [ 323.750442][T10401] ? __might_fault+0xc5/0x140 [ 323.750456][T10401] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 323.750474][T10401] ? _copy_from_user+0x59/0xd0 [ 323.750488][T10401] bpf_prog_test_run_xdp+0xa70/0x1670 [ 323.750510][T10401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 323.750530][T10401] ? fput+0x7c/0x100 [ 323.750545][T10401] ? __bpf_prog_get+0x97/0x2a0 [ 323.750562][T10401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 323.750579][T10401] __sys_bpf+0x2a12/0x4e80 [ 323.750595][T10401] ? __pfx___sys_bpf+0x10/0x10 [ 323.750657][T10401] ? find_held_lock+0x2b/0x80 [ 323.750674][T10401] ? get_pid_task+0xfc/0x250 [ 323.750688][T10401] ? get_pid_task+0xfc/0x250 [ 323.750705][T10401] ? proc_fail_nth_write+0x9f/0x220 [ 323.750717][T10401] ? find_held_lock+0x2b/0x80 [ 323.750734][T10401] ? rcu_read_lock_any_held+0x6a/0x90 [ 323.750751][T10401] ? find_held_lock+0x2b/0x80 [ 323.750764][T10401] ? ksys_write+0x190/0x250 [ 323.750775][T10401] ? ksys_write+0x190/0x250 [ 323.750796][T10401] ? fput+0x7c/0x100 [ 323.750811][T10401] ? __ia32_sys_bpf+0xcc/0x170 [ 323.750824][T10401] __ia32_sys_bpf+0xcc/0x170 [ 323.750837][T10401] ? __do_fast_syscall_32+0xb3/0x8b0 [ 323.750852][T10401] __do_fast_syscall_32+0x13a/0x8b0 [ 323.750863][T10401] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.750875][T10401] do_fast_syscall_32+0x32/0x70 [ 323.750886][T10401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.750901][T10401] RIP: 0023:0xf7f94fec [ 323.750915][T10401] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 323.750919][T10401] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 323.750930][T10401] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 323.750937][T10401] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.750943][T10401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.750949][T10401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.750955][T10401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.750967][T10401] [ 323.758647][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1225'. [ 323.761019][ T42] audit: type=1326 audit(1787127884.395:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.761605][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 323.764759][ T42] audit: type=1326 audit(1787127884.395:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.880378][ T42] audit: type=1326 audit(1787127884.395:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.883558][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.888452][ T42] audit: type=1326 audit(1787127884.395:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 323.888491][ T42] audit: type=1326 audit(1787127884.395:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.905667][ T42] audit: type=1326 audit(1787127884.395:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.911849][ T42] audit: type=1326 audit(1787127884.395:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.918073][ T42] audit: type=1326 audit(1787127884.395:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.4.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 323.950411][T10410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.018388][T10416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.856644][ T5885] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 325.007201][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 325.009836][ T5885] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.014169][ T5885] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 325.017437][ T5885] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.020903][ T5885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.024196][ T5885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.027278][ T5885] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.031217][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.243799][ T5885] usb 7-1: usb_control_msg returned -32 [ 325.245492][ T5885] usbtmc 7-1:16.0: can't read capabilities [ 325.345146][T10460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1239'. [ 325.449910][ T5885] usb 7-1: USB disconnect, device number 15 [ 325.536298][T10460] overlayfs: failed to resolve './file2': -2 [ 325.607020][ T5848] e1000 0000:00:06.0 eth0: Reset adapter [ 325.737191][ T5848] e1000 0000:00:06.0 eth0: Reset adapter [ 326.400256][T10483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.464203][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.528207][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.847892][ T5848] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 336.085518][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 336.286295][T10527] busy [ 336.551932][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 336.551967][ T42] audit: type=1326 audit(1787127897.185:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.5.1253" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x0 [ 336.796627][ T149] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 336.956613][ T149] usb 7-1: Using ep0 maxpacket: 8 [ 336.959253][ T149] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.964864][ T149] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 336.968008][ T149] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.970934][ T149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.974246][ T149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.977504][ T149] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.981343][ T149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.190768][ T149] usb 7-1: usb_control_msg returned -32 [ 337.193396][ T149] usbtmc 7-1:16.0: can't read capabilities [ 337.394749][ T149] usb 7-1: USB disconnect, device number 16 [ 337.449655][T10575] FAULT_INJECTION: forcing a failure. [ 337.449655][T10575] name failslab, interval 1, probability 0, space 0, times 0 [ 337.454790][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.3.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.454809][T10575] Tainted: [L]=SOFTLOCKUP [ 337.454813][T10575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.454819][T10575] Call Trace: [ 337.454824][T10575] [ 337.454829][T10575] dump_stack_lvl+0x100/0x190 [ 337.454846][T10575] should_fail_ex.cold+0x5/0xa [ 337.454859][T10575] should_failslab+0xc2/0x120 [ 337.454876][T10575] __kmalloc_cache_noprof+0x91/0x6b0 [ 337.454890][T10575] ? sctp_add_bind_addr+0xae/0x3e0 [ 337.454923][T10575] sctp_add_bind_addr+0xae/0x3e0 [ 337.454936][T10575] sctp_copy_local_addr_list+0x349/0x550 [ 337.454953][T10575] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 337.454974][T10575] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 337.454994][T10575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.455019][T10575] sctp_bind_addr_copy+0xe0/0x530 [ 337.455041][T10575] sctp_connect_new_asoc+0x1c9/0x770 [ 337.455061][T10575] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 337.455076][T10575] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 337.455090][T10575] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 337.455106][T10575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.455124][T10575] sctp_sendmsg+0x1743/0x22e0 [ 337.455141][T10575] ? __pfx___might_resched+0x10/0x10 [ 337.455153][T10575] ? __pfx_sctp_sendmsg+0x10/0x10 [ 337.455169][T10575] ? aa_sk_perm+0x30c/0xaa0 [ 337.455188][T10575] ? __might_fault+0xc5/0x140 [ 337.455203][T10575] ? aa_sock_msg_perm.isra.0+0x103/0x1c0 [ 337.455216][T10575] ? __pfx_sctp_sendmsg+0x10/0x10 [ 337.455232][T10575] inet_sendmsg+0x11c/0x140 [ 337.455257][T10575] __sys_sendto+0x453/0x4e0 [ 337.455269][T10575] ? __pfx_inet_sendmsg+0x10/0x10 [ 337.455283][T10575] ? __pfx___sys_sendto+0x10/0x10 [ 337.455305][T10575] ? fput+0x7c/0x100 [ 337.455319][T10575] ? ksys_write+0x1ac/0x250 [ 337.455332][T10575] __ia32_sys_sendto+0xdd/0x1b0 [ 337.455344][T10575] ? __do_fast_syscall_32+0xb3/0x8b0 [ 337.455356][T10575] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.455367][T10575] __do_fast_syscall_32+0x13a/0x8b0 [ 337.455378][T10575] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.455390][T10575] do_fast_syscall_32+0x32/0x70 [ 337.455402][T10575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.455416][T10575] RIP: 0023:0xf70befec [ 337.455432][T10575] Code: Unable to access opcode bytes at 0xf70befc2. [ 337.455437][T10575] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 337.455448][T10575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 337.455455][T10575] RDX: 0000000000000001 RSI: 0000000000040811 RDI: 0000000080000240 [ 337.455461][T10575] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 337.455467][T10575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.455472][T10575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.455485][T10575] [ 337.646093][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.703774][T10592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.762393][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.774523][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.833059][T10602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.891817][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.198695][ T42] audit: type=1804 audit(1787127898.835:673): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1272" name="/newroot/336/configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls" dev="configfs" ino=36038 res=1 errno=0 [ 338.213642][ T42] audit: type=1800 audit(1787127898.845:674): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1272" name="bmControls" dev="configfs" ino=36038 res=0 errno=0 [ 339.447529][ T5821] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 339.682569][ T5821] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 339.703530][ T5821] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 103, changing to 10 [ 339.707268][ T5821] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25954, setting to 1024 [ 339.712533][ T5821] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 103, changing to 10 [ 339.716255][ T5821] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25954, setting to 1024 [ 339.723309][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.726308][ T5821] usb 10-1: Product: syz [ 339.727883][ T5821] usb 10-1: Manufacturer: syz [ 339.729411][ T5821] usb 10-1: SerialNumber: syz [ 339.769937][T10631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.835729][ T5821] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 339.898744][ T5821] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 339.942019][ T5821] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 339.991922][T10631] busy [ 340.853594][T10637] comedi comedi2: pcl818: a I/O base address must be specified [ 340.971649][T10644] comedi comedi2: pcl818: a I/O base address must be specified [ 341.125939][T10648] batadv_slave_1: entered promiscuous mode [ 341.138110][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1285'. [ 341.144727][T10647] batadv_slave_1: left promiscuous mode [ 341.192991][T10652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.199486][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.250617][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.259042][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.307200][T10657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.316411][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.041425][ T9608] usb 10-1: USB disconnect, device number 3 [ 342.053114][ T9608] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 342.059404][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.061125][ T9608] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 342.068326][ T9608] ti_usb_3410_5052 10-1:2.0: device disconnected [ 342.141543][T10674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.690789][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 342.856710][ T5885] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 343.006743][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 343.009794][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.014590][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 343.022424][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.025976][ T5885] usb 7-1: Product: syz [ 343.028234][ T5885] usb 7-1: Manufacturer: syz [ 343.030312][ T5885] usb 7-1: SerialNumber: syz [ 343.034655][ T5885] usb 7-1: config 0 descriptor?? [ 343.038024][T10685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 343.049742][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 343.052643][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 343.221253][T10700] jffs2: notice: (10700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.312410][T10703] comedi comedi2: pcl818: a I/O base address must be specified [ 343.356928][ T5885] usb 7-1: USB disconnect, device number 17 [ 343.451682][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1301'. [ 343.695878][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.753190][T10711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.810193][T10712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.920611][T10715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.977519][T10716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.035245][T10717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.464315][T10726] syz.2.1307: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.469450][T10726] CPU: 3 UID: 0 PID: 10726 Comm: syz.2.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.469479][T10726] Tainted: [L]=SOFTLOCKUP [ 344.469485][T10726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.469497][T10726] Call Trace: [ 344.469503][T10726] [ 344.469511][T10726] dump_stack_lvl+0x100/0x190 [ 344.469540][T10726] warn_alloc.cold+0x94/0xa8 [ 344.469559][T10726] ? __pfx_warn_alloc+0x10/0x10 [ 344.469594][T10726] ? check_noncircular+0x97/0x160 [ 344.469629][T10726] __vmalloc_node_range_noprof+0x136c/0x1630 [ 344.469646][T10726] ? check_prev_add+0x354/0xe60 [ 344.469670][T10726] ? disksize_store+0x11a/0x4d0 [ 344.469694][T10726] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.469714][T10726] ? __pfx___might_resched+0x10/0x10 [ 344.469730][T10726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 344.469761][T10726] ? disksize_store+0x11a/0x4d0 [ 344.469776][T10726] __vmalloc_node_noprof+0xad/0xf0 [ 344.469793][T10726] ? disksize_store+0x11a/0x4d0 [ 344.469811][T10726] disksize_store+0x11a/0x4d0 [ 344.469829][T10726] ? sysfs_file_kobj+0xe4/0x290 [ 344.469848][T10726] ? __pfx_disksize_store+0x10/0x10 [ 344.469864][T10726] dev_attr_store+0x58/0x80 [ 344.469884][T10726] ? __pfx_dev_attr_store+0x10/0x10 [ 344.469915][T10726] sysfs_kf_write+0xf2/0x150 [ 344.469937][T10726] kernfs_fop_write_iter+0x3e0/0x5f0 [ 344.469965][T10726] ? __pfx_sysfs_kf_write+0x10/0x10 [ 344.469989][T10726] vfs_write+0x6af/0x1050 [ 344.470009][T10726] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 344.470036][T10726] ? __pfx_vfs_write+0x10/0x10 [ 344.470052][T10726] ? find_held_lock+0x2b/0x80 [ 344.470088][T10726] ksys_write+0x12a/0x250 [ 344.470105][T10726] ? __pfx_ksys_write+0x10/0x10 [ 344.470130][T10726] __do_fast_syscall_32+0x13a/0x8b0 [ 344.470153][T10726] do_fast_syscall_32+0x32/0x70 [ 344.470170][T10726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.470190][T10726] RIP: 0023:0xf7fa2fec [ 344.470215][T10726] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 344.470223][T10726] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 344.470241][T10726] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 344.470252][T10726] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.470263][T10726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.470273][T10726] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.470284][T10726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.470306][T10726] [ 344.470325][T10726] Mem-Info: [ 344.576860][T10726] active_anon:5402 inactive_anon:394 isolated_anon:0 [ 344.576860][T10726] active_file:1434 inactive_file:47091 isolated_file:0 [ 344.576860][T10726] unevictable:0 dirty:486 writeback:0 [ 344.576860][T10726] slab_reclaimable:6121 slab_unreclaimable:53030 [ 344.576860][T10726] mapped:26086 shmem:268 pagetables:1260 [ 344.576860][T10726] sec_pagetables:306 bounce:0 [ 344.576860][T10726] kernel_misc_reclaimable:0 [ 344.576860][T10726] free:67116 free_pcp:15987 free_cma:0 [ 344.592175][T10726] Node 0 active_anon:156kB inactive_anon:268kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1768kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.602938][T10726] Node 1 active_anon:21452kB inactive_anon:1308kB active_file:5724kB inactive_file:188364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104312kB dirty:1940kB writeback:0kB shmem:1064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2916kB pagetables:3272kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.613667][T10726] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:144kB inactive_anon:56kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:212kB free_cma:0kB [ 344.624428][T10726] lowmem_reserve[]: 0 279 279 279 279 [ 344.626284][T10726] Node 0 DMA32 free:15700kB boost:0kB min:12656kB low:15820kB high:18984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:212kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:286432kB mlocked:0kB bounce:0kB free_pcp:11336kB local_pcp:2212kB free_cma:0kB [ 344.636324][T10726] lowmem_reserve[]: 0 0 0 0 0 [ 344.637955][T10726] Node 1 DMA32 free:250672kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21452kB inactive_anon:1308kB active_file:5724kB inactive_file:188364kB unevictable:0kB writepending:1940kB zspages:2116kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:52216kB local_pcp:12224kB free_cma:0kB [ 344.648470][T10726] lowmem_reserve[]: 0 0 0 0 0 [ 344.649985][T10726] Node 0 DMA: 5*4kB (U) 7*8kB (U) 11*16kB (UM) 19*32kB (UM) 9*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2076kB [ 344.654533][T10726] Node 0 DMA32: 163*4kB (UE) 127*8kB (UME) 103*16kB (UME) 61*32kB (ME) 55*64kB (UME) 28*128kB (UME) 7*256kB (ME) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 15700kB [ 344.659820][T10726] Node 1 DMA32: 580*4kB (UME) 734*8kB (UME) 179*16kB (UME) 155*32kB (UME) 371*64kB (UME) 314*128kB (UME) 147*256kB (UME) 90*512kB (UME) 41*1024kB (UME) 6*2048kB (UM) 8*4096kB (UM) = 250704kB [ 344.665669][T10726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.668718][T10726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 344.671682][T10726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.674671][T10726] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 344.677711][T10726] 49410 total pagecache pages [ 344.679204][T10726] 619 pages in swap cache [ 344.680553][T10726] Free swap = 118368kB [ 344.681961][T10726] Total swap = 124996kB [ 344.683282][T10726] 524155 pages RAM [ 344.684508][T10726] 0 pages HighMem/MovableOnly [ 344.686030][T10726] 211654 pages reserved [ 344.687440][T10726] 0 pages cma reserved [ 344.824187][T10734] comedi comedi2: pcl818: a I/O base address must be specified [ 345.326626][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 345.447057][T10773] FAULT_INJECTION: forcing a failure. [ 345.447057][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 345.452064][T10773] CPU: 2 UID: 0 PID: 10773 Comm: syz.5.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.452083][T10773] Tainted: [L]=SOFTLOCKUP [ 345.452087][T10773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.452094][T10773] Call Trace: [ 345.452098][T10773] [ 345.452103][T10773] dump_stack_lvl+0x100/0x190 [ 345.452120][T10773] should_fail_ex.cold+0x5/0xa [ 345.452133][T10773] should_failslab+0xc2/0x120 [ 345.452150][T10773] kmem_cache_alloc_noprof+0x91/0x6a0 [ 345.452166][T10773] ? __pfx_map_id_range_down+0x10/0x10 [ 345.452184][T10773] ? security_inode_alloc+0x3b/0x2c0 [ 345.452200][T10773] security_inode_alloc+0x3b/0x2c0 [ 345.452213][T10773] inode_init_always_gfp+0xc6f/0xfb0 [ 345.452230][T10773] alloc_inode+0x8e/0x250 [ 345.452240][T10773] new_inode+0x22/0x1c0 [ 345.452251][T10773] __debugfs_create_file+0x105/0x4f0 [ 345.452274][T10773] debugfs_create_file_full+0x41/0x60 [ 345.452291][T10773] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 345.452307][T10773] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 345.452335][T10773] ? lockdep_init_map_type+0x5c/0x250 [ 345.452349][T10773] ? __pfx_br_dev_setup+0x10/0x10 [ 345.452376][T10773] alloc_netdev_mqs+0x314/0x15c0 [ 345.452394][T10773] br_add_bridge+0x33/0xf0 [ 345.452406][T10773] old_deviceless+0x619/0x700 [ 345.452429][T10773] ? lock_acquire+0x1b9/0x370 [ 345.452440][T10773] ? __pfx_old_deviceless+0x10/0x10 [ 345.452456][T10773] ? trace_contention_end+0x126/0x160 [ 345.452469][T10773] ? __mutex_lock+0x26c/0x1bc0 [ 345.452484][T10773] br_ioctl_stub+0x12b/0x4d0 [ 345.452498][T10773] ? __pfx_br_ioctl_stub+0x10/0x10 [ 345.452511][T10773] ? kasan_quarantine_put+0x104/0x240 [ 345.452528][T10773] ? tomoyo_path_number_perm+0x28f/0x580 [ 345.452546][T10773] ? __pfx_br_ioctl_stub+0x10/0x10 [ 345.452559][T10773] br_ioctl_call+0x53/0xa0 [ 345.452570][T10773] sock_ioctl+0x616/0x6b0 [ 345.452580][T10773] ? __pfx_sock_ioctl+0x10/0x10 [ 345.452592][T10773] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 345.452610][T10773] ? do_vfs_ioctl+0x226/0x13e0 [ 345.452621][T10773] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 345.452634][T10773] compat_sock_ioctl+0x595/0x760 [ 345.452646][T10773] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 345.452655][T10773] ? hook_file_ioctl_common+0x140/0x440 [ 345.452674][T10773] ? __fget_files+0x21f/0x3d0 [ 345.452688][T10773] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 345.452699][T10773] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 345.452712][T10773] __do_fast_syscall_32+0x13a/0x8b0 [ 345.452724][T10773] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.452737][T10773] do_fast_syscall_32+0x32/0x70 [ 345.452749][T10773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.452763][T10773] RIP: 0023:0xf7f94fec [ 345.452779][T10773] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 345.452783][T10773] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 345.452794][T10773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008940 [ 345.452800][T10773] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.452807][T10773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.452813][T10773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.452819][T10773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.452832][T10773] [ 345.452868][T10773] debugfs: out of free dentries, can not create file 'netdev@ffff88806d4d8700' [ 345.477714][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 345.560691][ T34] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.564526][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.570056][ T34] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.572852][ T34] usb 9-1: Product: syz [ 345.574299][ T34] usb 9-1: Manufacturer: syz [ 345.575964][ T34] usb 9-1: SerialNumber: syz [ 345.579532][ T34] usb 9-1: config 0 descriptor?? [ 345.581686][T10747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 345.585259][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 345.587263][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 345.906870][ T34] usb 9-1: USB disconnect, device number 5 [ 346.305226][T10791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.385273][T10794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.442176][T10797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.646692][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 346.797054][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 346.799202][ T34] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 346.803001][ T34] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.806859][ T34] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.809883][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 346.811925][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.815674][ T34] usb 7-1: config 0 descriptor?? [ 347.236848][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 347.239625][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 347.242382][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 347.247524][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 347.250075][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 347.253056][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 347.606751][ T998] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 347.756695][ T998] usb 10-1: Using ep0 maxpacket: 8 [ 347.758775][ T998] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.762594][ T998] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 347.765347][ T998] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.768331][ T998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.771203][ T998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.774549][ T998] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.778497][ T998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.992238][ T998] usb 10-1: usb_control_msg returned -32 [ 347.994224][ T998] usbtmc 10-1:16.0: can't read capabilities [ 348.100102][ T34] usb 7-1: USB disconnect, device number 18 [ 348.202175][ T5821] usb 10-1: USB disconnect, device number 4 [ 348.362543][T10828] FAULT_INJECTION: forcing a failure. [ 348.362543][T10828] name failslab, interval 1, probability 0, space 0, times 0 [ 348.367775][T10828] CPU: 1 UID: 0 PID: 10828 Comm: syz.2.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.367801][T10828] Tainted: [L]=SOFTLOCKUP [ 348.367807][T10828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.367816][T10828] Call Trace: [ 348.367822][T10828] [ 348.367828][T10828] dump_stack_lvl+0x100/0x190 [ 348.367854][T10828] should_fail_ex.cold+0x5/0xa [ 348.367872][T10828] should_failslab+0xc2/0x120 [ 348.367900][T10828] __kmalloc_noprof+0xfc/0x820 [ 348.367926][T10828] ? fuse_io_alloc+0x92/0x150 [ 348.367955][T10828] fuse_io_alloc+0x92/0x150 [ 348.367981][T10828] fuse_direct_io+0x310/0x2560 [ 348.368015][T10828] ? __pfx_fuse_direct_io+0x10/0x10 [ 348.368042][T10828] ? __pfx_generic_write_checks+0x10/0x10 [ 348.368061][T10828] ? __pfx_down_write+0x10/0x10 [ 348.368081][T10828] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 348.368108][T10828] fuse_direct_write_iter+0x6ea/0x8f0 [ 348.368127][T10828] ? stack_trace_save+0x8e/0xc0 [ 348.368154][T10828] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 348.368190][T10828] ? irqentry_exit+0x24d/0xa10 [ 348.368208][T10828] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.368227][T10828] fuse_file_write_iter+0x59b/0x960 [ 348.368258][T10828] do_iter_readv_writev+0x6f7/0x930 [ 348.368280][T10828] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 348.368314][T10828] vfs_writev+0x360/0xdd0 [ 348.368340][T10828] ? __pfx_vfs_writev+0x10/0x10 [ 348.368375][T10828] ? __fget_files+0x21f/0x3d0 [ 348.368402][T10828] ? do_writev+0x28a/0x340 [ 348.368417][T10828] do_writev+0x28a/0x340 [ 348.368436][T10828] ? __pfx_do_writev+0x10/0x10 [ 348.368452][T10828] ? ksys_write+0x1ac/0x250 [ 348.368470][T10828] ? __pfx_ksys_write+0x10/0x10 [ 348.368493][T10828] __do_fast_syscall_32+0x13a/0x8b0 [ 348.368513][T10828] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.368531][T10828] do_fast_syscall_32+0x32/0x70 [ 348.368551][T10828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.368575][T10828] RIP: 0023:0xf7fa2fec [ 348.368598][T10828] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 348.368606][T10828] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 348.368622][T10828] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001440 [ 348.368634][T10828] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.368643][T10828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.368651][T10828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.368660][T10828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.368683][T10828] [ 348.520089][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.582364][T10833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.622215][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 348.643004][T10836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.776422][T10842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1341'. [ 349.163903][T10856] Bluetooth: MGMT ver 1.23 [ 349.497380][T10865] option changes via remount are deprecated (pid=10864 comm=syz.4.1350) [ 349.631328][T10865] bridge1: entered allmulticast mode qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Connection to localhost closed by remote host.