last executing test programs: 5.870288257s ago: executing program 2 (id=737): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r1, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="49352fd4", 0x4, 0x40000, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040024130bdcef57e05cc8b44bfd7f43", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r4, 0x26, 0x0, @val=@iter={0x0}}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000140)={r8, 0x9, 0xf, 0x3, 0x10001, 0x8}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9200a00060e0000000002000600"], 0xf) landlock_restrict_self(0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="5b236f2e2984e8b839059dda92928c50198faeccdc7d3fdd89f7ce1f825696c66abe003a07cdcc626fc02e716c9bd787eba1cec56ad20faf28dc367419ff173013d94faca1ba674794a57fb35e3859083322cd9bda8eb4e47d9e86c944d9724e2f3565654cead104a7357126031a8733d611938754572b9bee68c84fbf117fb0c31c841bd35948b0f7487e5374c99cd2afc657ab28981b3a4234ee2494f21ae911b3c730d2585d2049ae8d2b00e549a416bb8fd451a5c212279949605699c1"], 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 5.79105667s ago: executing program 2 (id=740): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) 5.768002944s ago: executing program 2 (id=741): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 3.38570829s ago: executing program 3 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 5) 3.209118882s ago: executing program 3 (id=757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509) (async) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509) close(r2) (async) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 3.208856162s ago: executing program 3 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) (fail_nth: 1) 3.085136621s ago: executing program 3 (id=761): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) read$dsp(r0, &(0x7f0000000100)=""/145, 0x91) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x80800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000004c0)=0x209, 0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="318dffffffff000000000500000008000300", @ANYRES32=r4, @ANYBLOB="8d4c02cecde64176e51da6e0bf5e277e219b8d13bb6777f1ae1093f6fb558bd223987459068b41c17abaaaa79634220008c82410bd2faad308b594d35fe0b13b3b1e03fafc39cd514db39ea7714078d74df3ad5b084728b5f3aa2a2ca6ddcfb7620c0052d32268600b2d8b3e4496ff23c02fa4c56372dd92dad6dec4dfb6a943409c0408bb5070487dff2f78adf1041d4b55cba7f946285ba26a5dbc30a5381cb82cfffabf9d9d4f93b32c17e831439b0e641deaa6dda50a65ac38933bde0a0c833853702a3dc92060b30af84616"], 0x1c}}, 0x4c044) r5 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000804, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) bind$bt_hci(r6, &(0x7f00000003c0)={0x1f, 0x2, 0x2}, 0x6) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) recvmsg(r9, &(0x7f0000000380)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/142, 0x8e}, 0x42) r10 = socket(0x1e, 0x4, 0x100400) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49) write(r11, &(0x7f0000000340)="08000000010000", 0x7) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x400, 0x400, 0x1, 0xd, 0x1, 0x20000006, 0x80000006}, 0x1c) bind$tipc(r10, 0x0, 0x0) 2.701171084s ago: executing program 2 (id=764): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x8081}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_deladdr={0x48, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {0xa, 0x18, 0x5, 0x0, r0}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008890}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r8, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}}, 0x4801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlinkprop={0x80, 0x6c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x4, 0x42010}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private1}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_LOCAL6={0x14, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.599008795s ago: executing program 2 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xa, 0xfe, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='devpts\x00', 0x801, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000380)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x1}}, 0x26) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r6, 0xad5f, 0x80000}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r7, &(0x7f0000003000), 0x100) read(r7, &(0x7f0000004000), 0x100) read(r7, &(0x7f0000005000), 0x100) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x10000000007) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.610646411s ago: executing program 3 (id=768): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = dup(r0) r4 = fcntl$getown(r0, 0x9) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000001c0)={0x0, 0xd40a, 0x400, 0x0, 0x390, 0x0, r3}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d79, 0x80, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc0de, 0x8, 0x0, 0x39b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5188, 0x40, 0x0, 0x25}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9488, 0x80, 0x1, 0x12, 0x0, r3}}], 0x4, &(0x7f0000002b00)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x0, 0xa19, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80)) io_uring_setup(0x109d, &(0x7f0000002bc0)={0x0, 0xf66a, 0x8000, 0x2, 0x303, 0x0, r7}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000003240)={0x27f4, 0x11, 0x100, 0x70bd28, 0x25dfdbfb, {0x10}, [@nested={0x27dd, 0x11b, 0x0, 0x1, [@nested={0x1789, 0x3e, 0x0, 0x1, [@nested={0x12c9, 0xe8, 0x0, 0x1, [@nested={0x4, 0x5c}, @generic="4d22476bdcd30d2325c679fc212455be874ba4f7fff9a13a3a6650b4ec722d488ff0e713151e4ce8090dfdfe81af70d00583eeaf0aa8c801c444b08516993dbf045cd4f597a6d4e0ab940871ab044bdd85ad4162d481b3537d9ebbac4abfcdb4cf9e472f944530aa6998f512037e29a5dfeb593898781d622ef85a020a8f12a19192b5518ef69ff59634012aa96a6c788289e89fa68cfb0b4bbdbbe27ee742f3219568ea57c871bfb3f65751163aa2baa90770b2", @generic="f14959172d4df079323d5b613fc23c17ff7e5dba1b826e14f0e26733de77f26b304c50c8d6911d3c660a93496104d1a10a0932c7570fcae15c2cf6969d1dff535995c547fd19e97389860e00723e0d4664a830262bb5a023252785b5ffaf616300f06b1c27df2c9d35d0f6da393a976a6cdb7fde47a7b8a74e56b39730171e8056bd67500b6199e1422f9e467e211e2b50ff82d1724f024fb35e9b73f7", @nested={0x4, 0x102}, @nested={0x1169, 0x122, 0x0, 0x1, [@generic="9f0105a843f60461fc140e3332e4560cf2f8ce61d97d8495a1469e82aecce889b2472c34357c0afcef7ec4d43aaca5739b25a048f7548a9c9202c2350dbd024c92ed68a93e1b5b5642782737f1798358d5c4d80dee90b84afa24f81646215f5aeb8356f7a013221ea37156ed3a4170d7409a3cc44a5c1261a89b84359b11d4c14d3cb72fd29cc91ee69433521d1be6b56d79977553facf66ba9f4a6f48e2a0068dfeae73facdb31b88d05e00e7e040809e54105e17be9200f0777a88abc8815c86640313c1baf96c72b14a05952d4dd7f9c02d9e8fbf57cacaeb74e69b743e7b515ed82548957fcb623301c0b81f65bf7144638694fdf358b8abc8e8007e2140b3c3ebe5035063184e1a1446359e0c038fb3444d05a82cd7d8cd85877cd65c276dc5344b070dba633531f1576109d184548177e75a3ff6b3edb9c4ff38631b3d039d5ac5a0da41d55e5bd7c2fe90e058e1bab069702e225496a802058edd783709b0e7de0d3583b60599eaa2cd76c67fdc33702b52c6226a84e27b3b56399d02630d5b2493a042c9ce95deaa6155982065bf968de309d5afb9b05d3d58c66fe3d00e0855e161fd5aeb3cf227085ef367634de70303d4ea9c0607930dc2b024df1a2054d8b8ce4279c60d027502623d202c8ade8882e98d76c4d0aac879e43bbaf6eb277a224f77644fd579c31345b3c93aa64277f6bf6c1408b2dee07f6f7c7d5a310036626d39efac5539124eaac7ab37dbacde292749ac37e23d32dec17a02328f850cff6605c29290653ff16bce83563624f009ac15b0abea3715b38de08a06cb47a46bdc06943eda17bdd2610cdb8a08ab48299baae4414000409759f17f59e662f360748f1e69a5dc35eae4e96a30d712c05b91ca25fca31c986eb50078c70868a6a85cc311e949b6b6e7fbac3828035552781d3dd5cc90caec6864a22b0ecd68d5a93f601727e1e74eb7dc1e45a8a91cf7e59aabf87ee353384967b9deebba44881626f38d0e5cf5ce4f3388657a56e49e35ca2feb154a439d87d7238b5de4bab1254b08730af723c8e35f99a8348d617b74f1b632049944c1a6b34b41c8e81a3d45aadbf4e466b2c6c0c0f01ad16b9018f4f46d2a6727dde5dbd0064d103bee6d992294bc5e82e8d2602c9874c25f2e14cc5631d0ad067701b330e720e22e5b6c85887878e4acaaf034184d51cf6951dba15f34be3f06c3183bf4a1c09f75eeae998db3f8ff568636dfa45c81339e34679c8c4c67ebee2d590c460c5730642319cd16f5ff56edfb7da13f3a54fa3ff0c3e59e10b0caae48ee1a0339b0d683c9f62dbaf39b31a352c87c48bc84e5be37d803cb94f6c029e6762b2f1427f58f87292c6950b192688620af0fe795125be6964f399077708a974b07ec36eb72d57a773f7794fe80f3f5a4f320f7894af4719dbafafbc22367357c8e53436ab73ce342dc724ca16ef6c14c20991baf8eafeb1d112f46e1fc78747576e5a00a3a264348e6376e3437699de04818f132d8eec471562698588c094a62b69be68e5fead9506343bb80a527ca8b4666fa22c724a6522cf29c802ac28c2a60b096a883d09fb449da4ee114791911c2039fd99c4b5417d6e33aebdb3c8865f759a68f11b8aa33cea14fdff8512e1ec4dbca628d54542cc6e3c6a0ea8e03ae0b82ca402041e35b9fec334f8be26b1a5027dfc3b981ccf391d89e34db32e3ea226dc8166b47b2974d92e9fd9b9c5fd05b159a44ff084fe2bbf78e4d55ae01f4d5af88af9e7b018ef3124b79c026417f47b4255fefc828f3957c4d608f4adf5d08964b0556b3c91bdd1a1222a30bb6ec58ad98eb14d334c8dd886aca85c12e0ab4d978066ad237024304bc553ef246c4a9ff4a1a601fc579131622837f7b0724b86ca44e16929fe9bd5f9aa24fafd12dc150441a1cc0664e421975bf19e9e8703e92a7c20ae161ebfc07e681e7dd884dea50cb681313e894a8b705b508f25ff4e2c851af158ab9ed396a9f986dc30fe9918fce68ee3fcd768aff71fde67052e14eacfbac90e9c1dab53e5baa4c957e37c758d39aa9711d84bad4aa73554efaa70ff2e87e39a82f658045d19d8b6268c28e7eeefcb49faf4e239afad5ecc8f56b17676ccba922211df8b0f7e53a502ba334100482ee8e3fe72d04c2162809155b838164fbe2b8bf55ad88177e03e2135ca6c51a31c48d8bcce67111d34c8982e21c6dd48e7a9bfd61322d39fc330be1dd199c6e8b625069863bd47c2cdfd63e4db1e0ebbdefdb9704f0a714a276741ffb44b0f5ef4288305ae4b821be0a842b5f8005bbfb57ff0343c08ebbe3b5da3609095a413572f5ff731a43e9e3f95c53ff328a5a068e575bcfcb16eb3d1fa5d2a70dd3fa299ed9fc1014d1c32ba2b725c684771e2e53c79031ba457f1724b0fb994849cec3d1363cedcc52bf866dd9bfdee85d00576a4925665f09b5bfed6e60bdaaaecc84ca8dc00648ba30acda14c75f1c340effb55fd37df0727af2271ae7ba47e1c9fa20fe4fe800bf50e2733efe3625ff5024c4d1e9ded360534df89424668262451e7daeac502e4cbdf3b0e7cc35c96fdb85787624d95fd06fad70ab5adef7b6b2d496ca7eb859c17a8eaa3400b78da24b0c0663de5c98864e3d5320558501d63fda8518cf2c803e07a3ed56d1289190b64ca20ca30d74f7dac4cac070840c18f0cfcf8bc8e0cb2a5941a5e4e5ebe28161ab08aaf84377d79927d53f20fcff7da4ba2553d06ee5ed9a6ab827ca8b13b12211bb3ec2b96faf7412db73e4e717c8913beeb915d24b2f0499010d203a2bf00bd9a4332239f5b3d3a763f626aa2eb4c5146a53dece1d64bebdb14c634285fb5ee10e837bfa71e7539d70e9fd58efea9dfc3e82d65d7c6270606379fc3667428d5ae4e1d904275b699d77f175c58ff999fa95e156a4b27ed4a99cf33b33596ae17ec6ad142c96ffea485518aa5bb4b86b902528c5487459a55b766617714664825cf7b8e8776850a6b5dfd6d835c79124399a454a0b605b9c7646697cd80766d22293446e7cb598bc0b8500b278edabc17ad92ed88a7f86ca274e4da28cf1e1a76b6bccedfb0e05278c4c86c2fe87510cc3fb71303317f40478fd138dd1ddea3a9496bc58c115fa9011dfd8220e3b09a16499eb98a671906d7e9706d265edd2c3e93bf2fdd6610613ba74371629956c267ecea4a63c7ddf96cd03b6f5593489ba546bc522a9e509a1de6384f470168025fdba0a938fcb3413f55496b081d00e18f1c3cfb490a2fc7994105f13447f35065f9120cea656e6e1d77637d05e2390500444bb48b6ad673dc118fcb0e6e225eeab0b86b35ce7c6abc45c1d77c690c2b821f0f8a5b6bbee4ccc755d205e52105fa25a46a0e836b93319f3dd0cfd3417b5e80b84241e6cb3a9950a6acffe3b4c854fd13f959cc9728c6cf252367ce7c9313af1fe07385aee333ad2a82b9a43a4b63d36e98546bc8893d2c14d3e4fa0d25d1327dacdc9ba6531579953998fa81cc4bfac65e9d9ff1d9e7d67b100b49ff15543713cf90d9e4c54383f088bdf7edda2937404d2c801bb47b99e5922f9abf6182e28c6e71e1316066b0c24b3f5d6d944e0a83b3407977f735a052d0f08213891e03b7dc4033e4047ee69397ec74a614907abd9a1ffc0a7957ba130993e348b0fab92b459c45a2a8e45cd9de1ff12e8a4ba57228a651b6c25ef0e7b3e36e24007fd2f868024443a641cae597566b12ebef7a4c65622182b4eb046719388a1e06b4383344bc744a056aa0b69a39cf7cd124bca6128d69c405c4589469d29691cca4bfce56c2b9bb3bbe1859caeea3552595662b6477b92ff49a9a0ea1a71fec600adf51e61ed97623e73a8998205e0c50cf85972e62e2557dc77c1152ca0f67a3f58041be29e71bb29247e1a29ed60606b2f7149c678936873a385e1957dc125490e5f61ffe0cd284794406158aa4ab8ba149f58fafe12178f047f9af590df106eda9d00fd4a0227905232283c4b11c29d2accd4243693acbedef43c9f6b9a0e4b84faa8af0306d46109b2b85a2fab5a09dd4f39f0d7a3f0f791fcc3f71688cc3d0f8079cb6f6ebd4a897302eb55b7073dc208c2164c585730b9b25edb4575ca1f82c65857f81e92c05e0f59b613bea840fc6352dba2ae2678cce2dcc7c72c47d256071218d63eda0174413a2c7f4e58c8d6d2af4253f2477817fefd633faded74494f086d0269deccbf07c1496d825d685bf4950798a7ca7c3151b597b71d96ae177d7d9053e1ceede6e1911468ec7bc9109899b7ab11fe281c77b59710b6919a5d2d79822066c7a3464bb17cd92177627ff7e5a8bc6961fa09e27eb0f97ca8cce1ef6d22b564446f285718299dada4d01b3f86d9fc68a0a5f80332dcdb3c66060e67c5e1c282e8e4fee6801b1d483ca1c089cc70b0be4e8e0063d5b10525c48931a4365704edaa5c04b5b0b8cdefcdade54bb58162efe21750b6830a0c8e48e7793fccc5548da04599f3302625a7bed1cb5c685718a0b40d618ea998eb9ecd53d2b0bd1735cc3c6c456ac3dbd9afd10229789178334264c910ef80700ec05655f75d53d4868e576326717464146d6ce41810a52a852eb88e13319b49eb4eeda1ec903f5d4c38fd75879bf4518e852fe17879a5542c933e14762d7fba7d84b6c6c6f504c5535fcce0aeb925a0cc6310e8fd1475f51420b070433166237b9f2125589e59d33f1fa7d4a3a3658491be88a12553d59b480c40bb303d84b81f18ecfcd53621254bb891c524122d203c3ca89577582e3e752af68b6ae07cfddc43924a002289ad3ed906e2ce61bb7ffbbedfd8288a9f346a1c7caedb9eab4097de5da74ae648ff83897f354a78f3ce1bcf2c73b44d630259004c7e3ad5929bc033f243cb730c6b5ded01bec019e8d84346a8aba20ba194ba25c4ce680961da64a6ede083a34301e7f08ded3c12dbd52816fe185eba73a02dddbf1015854dbad9de8deeaa70689e4918ee169d6de7ae07938ee9043f6be10c72b0ca576462bb7ed65785e88b917b920695b356b059fe09d64d8d99753857b89ad7e4deab1c644db9d75a370581775ef2ed7078057ad3a5d8087d19eda6f17a099bd925583a1ca1286ca01ea3e3297d17f9279dc251eca59ae1fc956eedcd364ae1ad3cd9a93dd7ced705c3f1db4fa43cce3dd71b5c551e54a61142e5ca45179fd410c54d12b4fca48ac1c795ad5499af8ba506f3c749ee3caf78e6d1c04567242f78397d55cf0b81d53adb792f268541e54a65baf1b0e4fdd4b2cc98e4bd2aac7c022196cbeefe07cfda4fd863a5826482c88418c12fca3154d22c3824a6f0ca08dda4c01ce76470fd77572a80c82dcd23580346ab726197b0584b13c7813efd254fa44606d34dd4e6609ac256a0ae49def6341b403c6b4fd880fd7a04c4bef6d0a5a3d62168be5f2b45eaec4abee60ffdfd56530f31d2ba9eef6bdd2f07a5168101a1134e66219279f40d584bf22a777f23741aaac8a1d109e519c3f710bcbb2b70541d7ccf715c61a8f29934412c032a8f66617a76a1e7b6d41938e6ef6f55ad116e3d3ed7f44079feb09cb90964bf7377b32ad1a4738545b0149d31f561da6abce28aace761da3984af08f60bfdf9e9538b669d910bb3174d9309b7a4517bcd4f2ae1b7cef37648d5d455462296318f4a64dd15c6addde0f865ef0dcec2ff135d663059590d27d99eb87537a83070ff5256978f38b790e4b1c4bb2cd9c9794c5d2e96e26ba554db7ccc577e256e40bce6698d1f4919f67f896c3c5710c6721747ff96f5a4e359305b24", @typed={0x4, 0x24}, @generic="9ba51f1383a30de81060a8495fd37b791f932d1f6e89c156f9b07c7e33783a5765da41d687d7d6289ef956f271aa3f8a17526f8120ae1b85a5bee9fa1d2af1ecdb03e7093a82c6c72f7942eed99bb045e25dc52516e810e3b0fcbd92ec568d3313009899d0ed4773cce0256353f8c6ae0c5a02087e3477", @generic="d7cef39dd52d55dea6252d34a47460e2b9da3f6e585ce11fb8a46b8637d6229a888bbb9e9b5dc16a4154987691126b389fa88e1243a77d4da419512e794795bca0c06f", @generic="cd5fe839cfac679aba8dcbc02bf4e2b11baec3b2172046c6687a07a814b014a9d2ea43dd7c357c1d51e8d0cf62cfe2d975483b9c5fc1c5bfd6372b5c9348e76cb6be2988cdd46610ba7c34cfb47f25b945bffe23592e156f80c0b9f45c2754ba7645e3d266745c0f2ae01017418919e9a044d176f2c7134178777a546d756ffd80e7f812584216dae5d103d3e768e9d7fcd9013d5c4ab49981ce68adcb09a2", @typed={0x8, 0x147, 0x0, 0x0, @uid=r5}]}]}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x23}, @nested={0x4, 0x26}]}, @nested={0x4, 0x37}, @nested={0x2fc, 0x149, 0x0, 0x1, [@generic="510ad27d3b33f4ba22fc50e5e1aaa3bdf687a85a5948182ec53f3390a5be0a2b1326ef2c6c6461b7ad6635c9ae6fafb4165d620f1c2c5c30f2668b99643cbdeb111eaccd6c7e17cb8a6790803eddae4e42ee75b096aa6f262e3a5a4c93803a2fc3e799b1299e28581e41e606e6b8763f6d2bc93c0a2bdd8d661ca25a9517322e92e75e67fac742592082998225a0f1049c80b7ddd1028543fd4f8a8221ae0141ca6fe21bca63b79cd6a50650cb10944b6f8c6155a7b1505e64a44329acc780fd75b7c9bdbd236b396e16b568", @generic="dcccc4df2b6f782bfaea1e47f0a93f9a73b0aa789d2acff2715318e21f2b5ac899824f770b77cc01723d6775f3d2ee3d70e4e605884bf55e598027868652f43d8165461dd5fb64d9d3a57b34e95dfe0dd2b5508ab2e96beaa9c07b90c28744b4a16014509897d8dde3409606db55aa7bfb71d140e0f65f1f7dc55a51e361d6fb71e26870c2080f39c0d3fb1ae90fdbcff8a85a1bc2a010dcad81907a1d89aa7fb88c7e031b1f3d8f0bc0511f5df852e8c39035015a5a4792e721b07da72b36213b60593e6d31db236e50b620b78178", @generic="e37dd1c6458c0c51fec2c88f6713aa71f19a98bced88de228ca5b6b12f1084b78bb3418244e620553fde7ec116345c7d54ff70756572c2ed0646cd868d118d431dd040c451bb5b99319d690ed48f9af5821dc7a07983500cc710e4905103dbfeb7d2d39c4ee601bf671a9c3995fda585b531fbabf5738dfcd315f56c24b404620f062530f0cb096c8b7cab810b6a07c43ce11ce555622e96490016aa7532fca6bf87d1bc846802f760e740c549f0a654af5e678b8041ffd4b767157579a34c7cb5e6abf5fcc95bbc23", @generic="b298c58050b4740bb93ea2edb52020db94d593de7bab6f8081f43d71f51bcecda806ff20f2451d86b677844ead49e2e3e922325a0d27aaec48a7aed6e0365e9430c73d743f94147b356bbb46ac4b5549ca97d7920ba2c337e446a71f08928c6e286e7daf80c7bd6c5fd24d3df7997395f344c643dbbbf937b7be924587886b6e7792ae0dfbfaa2424994b8aa23b3be1810165a09"]}, @generic="59f61317dbf5249d72675f0d7984ecad4ba60391c664", @generic="5d4e27de0130806d0c87a7ab4673ef1e172ee2a3b23b22b03c0181c9413b769e5bebb628b47c260d00000000ce000000d7c6b54778682b71730fb54b1dcafe9ebef7a56a6d54b92e03b9d58c5937a95de9d9c1265a3eb90ab2fa08939a8ae110ced06fd7f10c3dfba1854e160a039ee0f562ff", @generic="6535d377d1707948a377d060d33b7ca5343ddf9f90aab9df5a049bcacf30ba25097aa9f0ca453a64286f979002342558e3ed4bc1c9d4ffc88223559527c201c7ef06f93f668ade56ebffb3b0db2205ff47f3fdbb9ec5a9b62fa5208148", @nested={0x70, 0x152, 0x0, 0x1, [@generic="fe5b918bccc1e8cf56e6b76cec43262bba874ba4715ad5b43639e59bc9c80a05a854fd1aa18fbd6b0d038a848152dc981610c75dbfe95590d91ce9ea7fc2afc2c9449f998100c759b684e7c51d8afb7ab7759ed0047a856f28d37c575df87d744e0d6c1ef1674d84", @generic, @nested={0x4, 0x24}]}, @generic="abdebfb75d189ac0bbd2dbd83cfb549d8e4966a9498af727e9f34324f9491e94221e978bdcf52e00d1c8b1605c96bab897ba69eff8272fc85ebbbea508f547b505245c2cd7b98176c52c8481c69e8a"]}, @generic="104d5569168b07f39b0fa190", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x113}, @typed={0x4, 0xee}, @generic="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", @typed={0x4, 0x84}, @generic="303d61f8b7fa602abc94cb80b8fab41a81aa64764f3daf801020192c63", @typed={0x8, 0x105, 0x0, 0x0, @u32=0x33a}]}]}, 0x27f4}, 0x1, 0x0, 0x0, 0x40041}, 0x8070) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe99f, 0xfffffffe, 0x0, 0xa9ba, 0x7, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x2, 0x4001, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x9, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0xa, 0xa, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x6, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x8, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xffff932d, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x3, 0x2, 0x0, 0x9, 0x13, 0x20000001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x2, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x9, 0x10, 0xd, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0xc, 0x4e22, 0x6, 0x40, 0xfffffff3, 0x497, 0x9, 0x1, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x797, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x10, 0x9, 0x0, 0x4, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0x10001, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 1.610396077s ago: executing program 2 (id=769): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x0, 0x1, {0x2, 0x3, 0x5, 0x1}, 0x7f}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000006c0)='P') write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.539092248s ago: executing program 3 (id=772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 1.011009509s ago: executing program 0 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) (fail_nth: 5) 761.352388ms ago: executing program 0 (id=779): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c'], 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2400) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0xfffffffd, 0x0, 0x1, 0x5}) r2 = syz_socket_connect_nvme_tcp() mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r4 = creat(&(0x7f00000001c0)='./config\x00', 0xecf86c37d53049c2) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f0000000380)={[{@favordynmods}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000580)={0xc4}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRESHEX=r5, @ANYRES8, @ANYRES16=r9, @ANYRESOCT=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="18070000000000f8070000000000000018110000ba2a96c07a54613a76ff2ff443278f1e618bc3e7a7a463b7620c46235aef89de836ae261b1751c79d4198d0734cc0412e25bee7d3b5532323c7f59b5d93cf4a239926bdae8f36e9f7e3c5f3e0ec5498170e4b2d9", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) 490.124653ms ago: executing program 1 (id=781): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000102000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x60, 0x31, 0x5, 0x1, 0x0, 0x6, 0x0}) 430.973372ms ago: executing program 1 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 273.439711ms ago: executing program 1 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003"], 0x68}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000140)={[{@flock_write}]}) (fail_nth: 4) 220.345661ms ago: executing program 1 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) 220.181054ms ago: executing program 1 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003"], 0x68}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000140)={[{@flock_write}]}) 151.060592ms ago: executing program 1 (id=786): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x600}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000080), &(0x7f0000000240)=0x4) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x40) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) fdatasync(r9) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x44800) ioctl$CEC_ADAP_G_CAPS(r3, 0xc04c6100, &(0x7f0000000300)) read$char_usb(r10, 0x0, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000000)={@empty, @broadcast, 0x0, 0x6, [@private=0xa010102, @empty, @rand_addr=0x64010101, @loopback, @remote, @private=0xa010101]}, 0x28) 150.810911ms ago: executing program 0 (id=787): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0xf0b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xf}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x24) 81.372113ms ago: executing program 0 (id=788): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x5a, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) 1.20923ms ago: executing program 0 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00', 0x200}) 0s ago: executing program 0 (id=790): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f00000004c0)=' ', 0x1}], 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000002c0)="0f32640f07f2af0f6830ba430066b80700000066ef670fc79e28dc0000360fc736969366b9800000c00f326635010000000f3036260f01f19a00ffde00", 0x3d}], 0x1, 0xa, &(0x7f0000000380)=[@dstype3={0x7, 0xa}, @cr0={0x0, 0x80000078}], 0x2) r5 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x5, 0x0, 0x4, 0x0, &(0x7f0000000300)={&(0x7f0000003000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000191d32200aeb010ac307401c987204de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200"/4112, 0x1010, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {0x0, 0xdc8}, 0x0, 0xffffffff}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x30000000) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) clock_gettime(0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000180)) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0x8000, 0x0, 0x4, 0x10, 0x10001, {0x0, 0xea60}, {0x0, 0x2, 0x6, 0x8, 0x9, 0x81, "5faaf6da"}, 0x8, 0x4, {&(0x7f0000000440)=[{0x205, 0x5e, {}, 0x34250b55}, {0x3, 0x7fff, {r6}, 0xc54}]}, 0x4}) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.079603][ T7448] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 92.091624][ T5829] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 92.100383][ T7448] bond2: entered promiscuous mode [ 92.103184][ T7448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.113608][ T7448] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.117614][ T7448] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 92.122004][ T7448] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 92.126970][ T7448] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.175580][ T7450] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.179435][ T7450] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 92.184093][ T7450] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.241175][ T5829] usb 8-1: Using ep0 maxpacket: 32 [ 92.244171][ T5829] usb 8-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 92.248088][ T5829] usb 8-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.252614][ T5829] usb 8-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.256013][ T5829] usb 8-1: config 1 interface 0 has no altsetting 0 [ 92.260321][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.263659][ T5829] usb 8-1: Product: syz [ 92.265139][ T5829] usb 8-1: Manufacturer: syz [ 92.266690][ T5829] usb 8-1: SerialNumber: syz [ 92.383640][ T42] audit: type=1400 audit(1786476777.992:515): avc: denied { map } for pid=7454 comm="syz.1.591" path="socket:[22552]" dev="sockfs" ino=22552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.393364][ T42] audit: type=1400 audit(1786476777.992:516): avc: denied { read } for pid=7454 comm="syz.1.591" path="socket:[22552]" dev="sockfs" ino=22552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.447025][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.450980][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.490157][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input17 [ 92.500335][ T5118] bcm5974 8-1:1.0: could not read from device [ 92.505830][ T5118] bcm5974 8-1:1.0: could not read from device [ 92.515976][ T5118] bcm5974 8-1:1.0: could not read from device [ 92.518541][ T5829] usb 8-1: USB disconnect, device number 16 [ 92.980921][ T5829] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 92.998747][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 93.003385][ T7472] FAULT_INJECTION: forcing a failure. [ 93.003385][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.007710][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.0.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.007729][ T7472] Tainted: [L]=SOFTLOCKUP [ 93.007733][ T7472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.007739][ T7472] Call Trace: [ 93.007744][ T7472] [ 93.007749][ T7472] dump_stack_lvl+0x100/0x190 [ 93.007768][ T7472] should_fail_ex.cold+0x5/0xa [ 93.007784][ T7472] _copy_from_iter+0x1f4/0x1690 [ 93.007802][ T7472] ? __asan_memset+0x23/0x50 [ 93.007815][ T7472] ? __pfx__copy_from_iter+0x10/0x10 [ 93.007830][ T7472] ? __pfx___alloc_skb+0x10/0x10 [ 93.007850][ T7472] netlink_sendmsg+0x808/0xda0 [ 93.007865][ T7472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.007878][ T7472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.007897][ T7472] ____sys_sendmsg+0xa4d/0xbe0 [ 93.007915][ T7472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.007928][ T7472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.007951][ T7472] ___sys_sendmsg+0x190/0x1e0 [ 93.007963][ T7472] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.007973][ T7472] ? __lock_acquire+0x49f/0x1a40 [ 93.007988][ T7472] ? get_pid_task+0x106/0x250 [ 93.008012][ T7472] __sys_sendmsg+0x160/0x210 [ 93.008029][ T7472] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.008051][ T7472] do_syscall_64+0x115/0x870 [ 93.008067][ T7472] ? clear_bhb_loop+0x70/0xc0 [ 93.008081][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.008093][ T7472] RIP: 0033:0x7f0928b9e0d9 [ 93.008103][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.008114][ T7472] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.008125][ T7472] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 93.008132][ T7472] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000008 [ 93.008139][ T7472] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.008145][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.008152][ T7472] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 93.008165][ T7472] [ 93.171589][ T5829] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 93.175900][ T5829] usb 8-1: config 0 has no interfaces? [ 93.178089][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.183502][ T5829] usb 8-1: config 0 descriptor?? [ 93.239664][ T7477] FAULT_INJECTION: forcing a failure. [ 93.239664][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.244248][ T7477] CPU: 2 UID: 0 PID: 7477 Comm: syz.1.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.244281][ T7477] Tainted: [L]=SOFTLOCKUP [ 93.244287][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.244298][ T7477] Call Trace: [ 93.244304][ T7477] [ 93.244309][ T7477] dump_stack_lvl+0x100/0x190 [ 93.244336][ T7477] should_fail_ex.cold+0x5/0xa [ 93.244356][ T7477] _copy_from_iter+0x1f4/0x1690 [ 93.244381][ T7477] ? __asan_memset+0x23/0x50 [ 93.244397][ T7477] ? __pfx__copy_from_iter+0x10/0x10 [ 93.244418][ T7477] ? __pfx___alloc_skb+0x10/0x10 [ 93.244446][ T7477] netlink_sendmsg+0x808/0xda0 [ 93.244469][ T7477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.244496][ T7477] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.244525][ T7477] ____sys_sendmsg+0xa4d/0xbe0 [ 93.244549][ T7477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.244570][ T7477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.244605][ T7477] ___sys_sendmsg+0x190/0x1e0 [ 93.244625][ T7477] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.244640][ T7477] ? __lock_acquire+0x49f/0x1a40 [ 93.244663][ T7477] ? get_pid_task+0x106/0x250 [ 93.244703][ T7477] __sys_sendmsg+0x160/0x210 [ 93.244727][ T7477] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.244760][ T7477] do_syscall_64+0x115/0x870 [ 93.244783][ T7477] ? clear_bhb_loop+0x70/0xc0 [ 93.244804][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.244823][ T7477] RIP: 0033:0x7f053839e0d9 [ 93.244857][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.244872][ T7477] RSP: 002b:00007f0539230028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.244891][ T7477] RAX: ffffffffffffffda RBX: 00007f0538625fa0 RCX: 00007f053839e0d9 [ 93.244902][ T7477] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 93.244913][ T7477] RBP: 00007f0539230090 R08: 0000000000000000 R09: 0000000000000000 [ 93.244923][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.244933][ T7477] R13: 00007f0538626038 R14: 00007f0538625fa0 R15: 00007ffcfc5379d8 [ 93.244955][ T7477] [ 93.390767][ T5871] usb 8-1: USB disconnect, device number 17 [ 93.530832][ T3260] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 93.681520][ T3260] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 93.685525][ T3260] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.688800][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.691961][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.695191][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 93.698205][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 93.701437][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 93.705154][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 93.708268][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 93.711420][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 93.714633][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 93.717906][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 93.721046][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 93.724131][ T3260] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 93.727777][ T3260] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 93.736285][ T3260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.739025][ T3260] usb 6-1: Product: syz [ 93.740407][ T3260] usb 6-1: Manufacturer: syz [ 93.741963][ T3260] usb 6-1: SerialNumber: syz [ 93.747414][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.749987][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.752567][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.754942][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.757268][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.759598][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.762127][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.765440][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.768643][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.771543][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.774374][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.777323][ T7479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.783333][ T3260] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 93.786734][ T3260] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 93.791675][ T3260] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 93.795352][ T3260] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 93.798771][ T3260] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 93.984643][ T5829] usb 6-1: USB disconnect, device number 19 [ 93.999167][ T5829] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 94.004445][ T5829] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 94.008884][ T5829] keyspan 6-1:1.0: device disconnected [ 94.073604][ T7495] FAULT_INJECTION: forcing a failure. [ 94.073604][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 94.078525][ T7495] CPU: 2 UID: 0 PID: 7495 Comm: syz.3.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.078560][ T7495] Tainted: [L]=SOFTLOCKUP [ 94.078566][ T7495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.078576][ T7495] Call Trace: [ 94.078583][ T7495] [ 94.078590][ T7495] dump_stack_lvl+0x100/0x190 [ 94.078619][ T7495] should_fail_ex.cold+0x5/0xa [ 94.078642][ T7495] should_failslab+0xc2/0x120 [ 94.078665][ T7495] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.078687][ T7495] ? do_getname+0x35/0x390 [ 94.078715][ T7495] do_getname+0x35/0x390 [ 94.078738][ T7495] __x64_sys_mkdirat+0x78/0xc0 [ 94.078758][ T7495] do_syscall_64+0x115/0x870 [ 94.078781][ T7495] ? clear_bhb_loop+0x70/0xc0 [ 94.078803][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.078821][ T7495] RIP: 0033:0x7f110bb9e0d9 [ 94.078836][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.078852][ T7495] RSP: 002b:00007f110cab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.078871][ T7495] RAX: ffffffffffffffda RBX: 00007f110be25fa0 RCX: 00007f110bb9e0d9 [ 94.078882][ T7495] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 94.078892][ T7495] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.078903][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.078913][ T7495] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 94.078933][ T7495] [ 94.211507][ T5829] syzkaller0: tun_net_xmit 76 [ 94.305206][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.308340][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.340987][ T5829] syzkaller0: tun_net_xmit 76 [ 94.544439][ T7515] syzkaller0: entered promiscuous mode [ 94.546800][ T7515] syzkaller0: entered allmulticast mode [ 94.720930][ T5829] syzkaller0: tun_net_xmit 76 [ 94.849972][ T7530] Mass Storage Function, version: 2009/09/11 [ 94.852408][ T7530] LUN: removable file: (no medium) [ 94.893356][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.897367][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.200834][ T5829] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 95.351461][ T5829] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 95.355283][ T5829] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 95.359546][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.364330][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.368790][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.374480][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.378337][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.383320][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.387421][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.391718][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.396331][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.400371][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.404268][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.408835][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.413802][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.417642][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.422641][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.429512][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.433743][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.438412][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.442507][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.446281][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.451242][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.455135][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.459044][ T5829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.463919][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.469064][ T5829] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 95.473018][ T5829] usb 8-1: Product: syz [ 95.474869][ T5829] usb 8-1: Manufacturer: syz [ 95.477693][ T5829] usb 8-1: SerialNumber: syz [ 95.482718][ T5829] usb 8-1: config 0 descriptor?? [ 95.494669][ T5829] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 95.505509][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.512784][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.562235][ T7556] FAULT_INJECTION: forcing a failure. [ 95.562235][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 95.566253][ T7556] CPU: 3 UID: 0 PID: 7556 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.566272][ T7556] Tainted: [L]=SOFTLOCKUP [ 95.566275][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.566293][ T7556] Call Trace: [ 95.566300][ T7556] [ 95.566304][ T7556] dump_stack_lvl+0x100/0x190 [ 95.566336][ T7556] should_fail_ex.cold+0x5/0xa [ 95.566353][ T7556] should_failslab+0xc2/0x120 [ 95.566370][ T7556] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 95.566390][ T7556] ? register_pidns_sysctls+0x48/0x1c0 [ 95.566406][ T7556] kmemdup_noprof+0x29/0x60 [ 95.566429][ T7556] register_pidns_sysctls+0x48/0x1c0 [ 95.566440][ T7556] ? __ns_common_init+0x299/0x4b0 [ 95.566459][ T7556] copy_pid_ns+0x680/0x10a0 [ 95.566478][ T7556] ? __pfx_copy_pid_ns+0x10/0x10 [ 95.566493][ T7556] ? rcu_is_watching+0x12/0xc0 [ 95.566518][ T7556] ? __pfx_copy_mnt_ns+0x10/0x10 [ 95.566534][ T7556] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 95.566548][ T7556] ? create_new_namespaces+0x30/0xac0 [ 95.566566][ T7556] create_new_namespaces+0x2aa/0xac0 [ 95.566585][ T7556] unshare_nsproxy_namespaces+0xf2/0x220 [ 95.566603][ T7556] ksys_unshare+0x438/0xab0 [ 95.566623][ T7556] ? __pfx_ksys_unshare+0x10/0x10 [ 95.566639][ T7556] ? ksys_write+0x1ac/0x250 [ 95.566653][ T7556] __x64_sys_unshare+0x31/0x40 [ 95.566670][ T7556] do_syscall_64+0x115/0x870 [ 95.566686][ T7556] ? clear_bhb_loop+0x70/0xc0 [ 95.566699][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.566711][ T7556] RIP: 0033:0x7f8c84f9e0d9 [ 95.566722][ T7556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.566733][ T7556] RSP: 002b:00007f8c85e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.566745][ T7556] RAX: ffffffffffffffda RBX: 00007f8c85225fa0 RCX: 00007f8c84f9e0d9 [ 95.566753][ T7556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 95.566759][ T7556] RBP: 00007f8c85e93090 R08: 0000000000000000 R09: 0000000000000000 [ 95.566765][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.566771][ T7556] R13: 00007f8c85226038 R14: 00007f8c85225fa0 R15: 00007fff11111928 [ 95.566785][ T7556] [ 95.673809][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 95.716850][ T7560] syzkaller0: entered promiscuous mode [ 95.719205][ T7560] syzkaller0: entered allmulticast mode [ 95.793687][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 95.796507][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 95.804990][ T7564] bridge0: port 3(bond0) entered blocking state [ 95.807320][ T7564] bridge0: port 3(bond0) entered disabled state [ 95.809443][ T7564] bond0: entered allmulticast mode [ 95.811261][ T7564] bond_slave_0: entered allmulticast mode [ 95.813182][ T7564] bond_slave_1: entered allmulticast mode [ 95.825735][ T7564] bond0: entered promiscuous mode [ 95.830704][ T7564] bond_slave_0: entered promiscuous mode [ 95.832767][ T7564] bond_slave_1: entered promiscuous mode [ 96.069276][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 96.069289][ T42] audit: type=1400 audit(1786476781.672:526): avc: denied { bind } for pid=7574 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.091088][ T5829] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 96.241399][ T5829] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 96.245295][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.248542][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.252169][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.255270][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 96.258349][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 96.261384][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 96.264496][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 96.267555][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 96.270689][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 96.273828][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 96.276889][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 96.279857][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 96.280772][ T55] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 96.283245][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 96.288416][ T5829] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.294906][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.297489][ T5829] usb 6-1: Product: syz [ 96.298862][ T5829] usb 6-1: Manufacturer: syz [ 96.300371][ T5829] usb 6-1: SerialNumber: syz [ 96.305905][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.310380][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.313190][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.315404][ T7582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 96.315977][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.322191][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.325295][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.328336][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.331659][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.334859][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.337909][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.342056][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.345809][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.350545][ T5829] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 96.354405][ T5829] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 96.358924][ T5829] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.368189][ T5829] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 96.373229][ T5829] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.431426][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 96.434498][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.439364][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 96.443902][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.448037][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.451826][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.457013][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.559727][ T5871] usb 6-1: USB disconnect, device number 20 [ 96.578740][ T5871] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 96.586613][ T5871] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 96.592392][ T5871] keyspan 6-1:1.0: device disconnected [ 96.665186][ T55] usb 7-1: GET_CAPABILITIES returned 0 [ 96.667662][ T55] usbtmc 7-1:16.0: can't read capabilities [ 97.091647][ T7588] FAULT_INJECTION: forcing a failure. [ 97.091647][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.095839][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.1.641 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.095861][ T7588] Tainted: [L]=SOFTLOCKUP [ 97.095865][ T7588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.095871][ T7588] Call Trace: [ 97.095876][ T7588] [ 97.095881][ T7588] dump_stack_lvl+0x100/0x190 [ 97.095914][ T7588] should_fail_ex.cold+0x5/0xa [ 97.095930][ T7588] _copy_from_iter+0x1f4/0x1690 [ 97.095949][ T7588] ? __asan_memset+0x23/0x50 [ 97.095962][ T7588] ? __pfx__copy_from_iter+0x10/0x10 [ 97.095978][ T7588] ? __pfx___alloc_skb+0x10/0x10 [ 97.095997][ T7588] netlink_sendmsg+0x808/0xda0 [ 97.096013][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.096026][ T7588] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.096046][ T7588] ____sys_sendmsg+0xa4d/0xbe0 [ 97.096064][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.096076][ T7588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.096100][ T7588] ___sys_sendmsg+0x190/0x1e0 [ 97.096113][ T7588] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.096123][ T7588] ? __lock_acquire+0x49f/0x1a40 [ 97.096137][ T7588] ? get_pid_task+0x106/0x250 [ 97.096162][ T7588] __sys_sendmsg+0x160/0x210 [ 97.096177][ T7588] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.096199][ T7588] do_syscall_64+0x115/0x870 [ 97.096214][ T7588] ? clear_bhb_loop+0x70/0xc0 [ 97.096228][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.096240][ T7588] RIP: 0033:0x7f053839e0d9 [ 97.096249][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.096260][ T7588] RSP: 002b:00007f0539230028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.096273][ T7588] RAX: ffffffffffffffda RBX: 00007f0538625fa0 RCX: 00007f053839e0d9 [ 97.096280][ T7588] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 97.096286][ T7588] RBP: 00007f0539230090 R08: 0000000000000000 R09: 0000000000000000 [ 97.096292][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.096299][ T7588] R13: 00007f0538626038 R14: 00007f0538625fa0 R15: 00007ffcfc5379d8 [ 97.096312][ T7588] [ 97.189784][ T42] audit: type=1400 audit(1786476782.792:527): avc: denied { name_connect } for pid=7589 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 97.253843][ T7597] syzkaller0: entered promiscuous mode [ 97.255681][ T7597] syzkaller0: entered allmulticast mode [ 97.376987][ T7601] FAULT_INJECTION: forcing a failure. [ 97.376987][ T7601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.381365][ T7601] CPU: 2 UID: 0 PID: 7601 Comm: syz.0.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.381385][ T7601] Tainted: [L]=SOFTLOCKUP [ 97.381389][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.381396][ T7601] Call Trace: [ 97.381400][ T7601] [ 97.381404][ T7601] dump_stack_lvl+0x100/0x190 [ 97.381424][ T7601] should_fail_ex.cold+0x5/0xa [ 97.381440][ T7601] _copy_from_iter+0x1f4/0x1690 [ 97.381457][ T7601] ? __asan_memset+0x23/0x50 [ 97.381470][ T7601] ? __pfx__copy_from_iter+0x10/0x10 [ 97.381486][ T7601] ? __pfx___alloc_skb+0x10/0x10 [ 97.381542][ T7601] netlink_sendmsg+0x808/0xda0 [ 97.381558][ T7601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.381572][ T7601] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.381590][ T7601] ____sys_sendmsg+0xa4d/0xbe0 [ 97.381609][ T7601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.381621][ T7601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.381645][ T7601] ___sys_sendmsg+0x190/0x1e0 [ 97.381657][ T7601] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.381667][ T7601] ? __lock_acquire+0x49f/0x1a40 [ 97.381682][ T7601] ? get_pid_task+0x106/0x250 [ 97.381706][ T7601] __sys_sendmsg+0x160/0x210 [ 97.381721][ T7601] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.381748][ T7601] do_syscall_64+0x115/0x870 [ 97.381768][ T7601] ? clear_bhb_loop+0x70/0xc0 [ 97.381788][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.381803][ T7601] RIP: 0033:0x7f0928b9e0d9 [ 97.381817][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.381832][ T7601] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.381849][ T7601] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 97.381859][ T7601] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 97.381878][ T7601] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.381884][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.381891][ T7601] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 97.381905][ T7601] [ 97.474604][ T42] audit: type=1400 audit(1786476783.082:528): avc: denied { mount } for pid=7604 comm="syz.0.648" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 system_u:object_.ª)3Í<ÎÔºcr:ksm_device_ in/dhclient 000000000[ 97.510775][ T5829] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 97.661561][ T5829] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 97.665166][ T5829] usb 6-1: config 0 has no interfaces? [ 97.666914][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.671616][ T5829] usb 6-1: config 0 descriptor?? [ 97.701009][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 97.703625][ C0] usb 8-1: yurex_control_callback - control failed: -32 [ 97.707151][ T5829] usb 8-1: USB disconnect, device number 18 [ 97.707626][ T34] usb 7-1: USB disconnect, device number 24 [ 97.719222][ T5829] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 97.766652][ T42] audit: type=1400 audit(1786476783.372:529): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.787602][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.790501][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.876776][ T3260] usb 6-1: USB disconnect, device number 21 [ 98.256656][ T42] audit: type=1400 audit(1786476783.862:530): avc: denied { ioctl } for pid=7610 comm="syz.3.650" path="socket:[20213]" dev="sockfs" ino=20213 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.257213][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.650'. [ 98.320594][ T7613] tipc: Started in network mode [ 98.322963][ T7613] tipc: Node identity , cluster identity 4711 [ 98.325625][ T7613] tipc: Failed to obtain node identity [ 98.328051][ T7613] tipc: Enabling of bearer rejected, failed to enable media [ 98.335949][ T42] audit: type=1400 audit(1786476783.942:531): avc: denied { mount } for pid=7615 comm="syz.0.653" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.349054][ T7619] netlink: 76 bytes leftover after parsing attributes in process `syz.2.654'. [ 98.449093][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 98.467674][ T7631] syzkaller0: entered promiscuous mode [ 98.469459][ T7631] syzkaller0: entered allmulticast mode [ 98.567613][ T7633] FAULT_INJECTION: forcing a failure. [ 98.567613][ T7633] name failslab, interval 1, probability 0, space 0, times 0 [ 98.571670][ T7633] CPU: 0 UID: 0 PID: 7633 Comm: syz.2.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.571688][ T7633] Tainted: [L]=SOFTLOCKUP [ 98.571692][ T7633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.571699][ T7633] Call Trace: [ 98.571703][ T7633] [ 98.571707][ T7633] dump_stack_lvl+0x100/0x190 [ 98.571744][ T7633] should_fail_ex.cold+0x5/0xa [ 98.571766][ T7633] should_failslab+0xc2/0x120 [ 98.571793][ T7633] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 98.571808][ T7633] ? __alloc_skb+0x5b7/0x710 [ 98.571830][ T7633] ? __alloc_skb+0x140/0x710 [ 98.571845][ T7633] __alloc_skb+0x140/0x710 [ 98.571862][ T7633] ? __alloc_skb+0x5b7/0x710 [ 98.571875][ T7633] ? __pfx___alloc_skb+0x10/0x10 [ 98.571887][ T7633] ? find_held_lock+0x2b/0x80 [ 98.571904][ T7633] ? is_bpf_text_address+0x8a/0x1a0 [ 98.571926][ T7633] ? is_bpf_text_address+0x8a/0x1a0 [ 98.571941][ T7633] ? bpf_ksym_find+0x128/0x1c0 [ 98.571960][ T7633] alloc_skb_with_frags+0xdd/0x760 [ 98.571980][ T7633] sock_alloc_send_pskb+0x801/0x980 [ 98.572003][ T7633] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 98.572016][ T7633] ? __lock_acquire+0x49f/0x1a40 [ 98.572030][ T7633] ? rcu_is_watching+0x12/0xc0 [ 98.572066][ T7633] ? __lock_acquire+0x49f/0x1a40 [ 98.572082][ T7633] __ip_append_data+0x20d3/0x44d0 [ 98.572105][ T7633] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.572118][ T7633] ? find_held_lock+0x2b/0x80 [ 98.572131][ T7633] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 98.572150][ T7633] ? __pfx___ip_append_data+0x10/0x10 [ 98.572163][ T7633] ? dst_alloc+0xc0/0x1a0 [ 98.572177][ T7633] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 98.572198][ T7633] ip_make_skb+0x28b/0x310 [ 98.572214][ T7633] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.572229][ T7633] ? __pfx_ip_make_skb+0x10/0x10 [ 98.572243][ T7633] ? ip_route_output_key_hash+0x14c/0x2b0 [ 98.572267][ T7633] ? udp_sendmsg+0x171c/0x2720 [ 98.572280][ T7633] udp_sendmsg+0x171c/0x2720 [ 98.572297][ T7633] ? __pfx_udp_sendmsg+0x10/0x10 [ 98.572316][ T7633] ? reacquire_held_locks+0xce/0x1e0 [ 98.572331][ T7633] ? release_sock+0x21/0x280 [ 98.572347][ T7633] ? inet_autobind+0x145/0x1a0 [ 98.572365][ T7633] ? find_held_lock+0x2b/0x80 [ 98.572378][ T7633] ? lockdep_hardirqs_on+0x78/0x100 [ 98.572398][ T7633] ? inet_autobind+0x145/0x1a0 [ 98.572411][ T7633] ? __local_bh_enable_ip+0x9e/0x120 [ 98.572432][ T7633] ? inet_autobind+0x14a/0x1a0 [ 98.572446][ T7633] ? __pfx_udp_sendmsg+0x10/0x10 [ 98.572459][ T7633] inet_sendmsg+0x105/0x140 [ 98.572476][ T7633] __sys_sendto+0x453/0x4e0 [ 98.572489][ T7633] ? __pfx_inet_sendmsg+0x10/0x10 [ 98.572505][ T7633] ? __pfx___sys_sendto+0x10/0x10 [ 98.572522][ T7633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.572543][ T7633] ? ksys_write+0x1ac/0x250 [ 98.572559][ T7633] ? __pfx_ksys_write+0x10/0x10 [ 98.572570][ T7633] __x64_sys_sendto+0xe0/0x1c0 [ 98.572583][ T7633] ? do_syscall_64+0x90/0x870 [ 98.572604][ T7633] ? lockdep_hardirqs_on+0x78/0x100 [ 98.572618][ T7633] do_syscall_64+0x115/0x870 [ 98.572632][ T7633] ? clear_bhb_loop+0x70/0xc0 [ 98.572646][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.572658][ T7633] RIP: 0033:0x7f8c84f9e0d9 [ 98.572668][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.572680][ T7633] RSP: 002b:00007f8c85e93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 98.572699][ T7633] RAX: ffffffffffffffda RBX: 00007f8c85225fa0 RCX: 00007f8c84f9e0d9 [ 98.572706][ T7633] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 98.572713][ T7633] RBP: 00007f8c85e93090 R08: 0000200000000700 R09: 0000000000000010 [ 98.572720][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.572726][ T7633] R13: 00007f8c85226038 R14: 00007f8c85225fa0 R15: 00007fff11111928 [ 98.572739][ T7633] [ 98.621051][ T40] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 98.850792][ T40] usb 8-1: device descriptor read/64, error -71 [ 98.900941][ C2] syzkaller0: tun_net_xmit 48 [ 98.993116][ T5871] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 99.090912][ T40] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 99.151948][ T5871] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 99.162173][ T5871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.165673][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 99.168752][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.172681][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 99.175800][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 99.179021][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 99.182924][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 99.186726][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 99.190601][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 99.194478][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.198214][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 99.202244][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 99.206100][ T5871] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 99.209872][ T5871] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 99.215970][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.218453][ T5871] usb 7-1: Product: syz [ 99.220140][ T5871] usb 7-1: Manufacturer: syz [ 99.220786][ T40] usb 8-1: device descriptor read/64, error -71 [ 99.222463][ T5871] usb 7-1: SerialNumber: syz [ 99.231221][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.234401][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.237544][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.240975][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.244109][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.247166][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.250259][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.253426][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.256108][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.258984][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.261872][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.265067][ T7639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.269506][ T5871] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 99.273042][ T5871] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 99.278061][ T5871] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 99.283160][ T5871] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 99.287151][ T5871] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 99.292471][ T42] audit: type=1400 audit(1786476784.902:532): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.319934][ T7643] FAULT_INJECTION: forcing a failure. [ 99.319934][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.324210][ T7643] CPU: 2 UID: 0 PID: 7643 Comm: syz.0.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.324229][ T7643] Tainted: [L]=SOFTLOCKUP [ 99.324233][ T7643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.324240][ T7643] Call Trace: [ 99.324245][ T7643] [ 99.324249][ T7643] dump_stack_lvl+0x100/0x190 [ 99.324270][ T7643] should_fail_ex.cold+0x5/0xa [ 99.324286][ T7643] _copy_from_iter+0x1f4/0x1690 [ 99.324311][ T7643] ? __asan_memset+0x23/0x50 [ 99.324324][ T7643] ? __pfx__copy_from_iter+0x10/0x10 [ 99.324339][ T7643] ? __pfx___alloc_skb+0x10/0x10 [ 99.324359][ T7643] netlink_sendmsg+0x808/0xda0 [ 99.324381][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.324395][ T7643] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.324413][ T7643] ____sys_sendmsg+0xa4d/0xbe0 [ 99.324432][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.324445][ T7643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.324469][ T7643] ___sys_sendmsg+0x190/0x1e0 [ 99.324480][ T7643] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.324490][ T7643] ? __lock_acquire+0x49f/0x1a40 [ 99.324506][ T7643] ? get_pid_task+0x106/0x250 [ 99.324537][ T7643] __sys_sendmsg+0x160/0x210 [ 99.324552][ T7643] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.324573][ T7643] do_syscall_64+0x115/0x870 [ 99.324588][ T7643] ? clear_bhb_loop+0x70/0xc0 [ 99.324602][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.324614][ T7643] RIP: 0033:0x7f0928b9e0d9 [ 99.324624][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.324635][ T7643] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.324647][ T7643] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 99.324654][ T7643] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 99.324660][ T7643] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.324666][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.324673][ T7643] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 99.324686][ T7643] [ 99.331182][ T40] usb usb8-port1: attempt power cycle [ 99.430993][ T5829] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 99.454803][ T42] audit: type=1400 audit(1786476785.062:533): avc: denied { mount } for pid=7644 comm="syz.0.665" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.463773][ T42] audit: type=1400 audit(1786476785.062:534): avc: denied { search } for pid=7644 comm="syz.0.665" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.473536][ T42] audit: type=1400 audit(1786476785.062:535): avc: denied { write } for pid=7644 comm="syz.0.665" name="current_tracer" dev="tracefs" ino=3180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.493144][ T34] usb 7-1: USB disconnect, device number 25 [ 99.508577][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 99.516275][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 99.521894][ T34] keyspan 7-1:1.0: device disconnected [ 99.582423][ T5829] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.586209][ T5829] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.589624][ T5829] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.592851][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.597523][ T7641] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.602114][ T5829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.760844][ T40] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 99.781412][ T40] usb 8-1: device descriptor read/8, error -71 [ 99.806873][ T34] usb 6-1: USB disconnect, device number 22 [ 99.894126][ T7653] syzkaller0: entered promiscuous mode [ 99.895971][ T7653] syzkaller0: entered allmulticast mode [ 100.063008][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.066499][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.073936][ T40] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 100.091836][ T40] usb 8-1: device descriptor read/8, error -71 [ 100.201066][ T40] usb usb8-port1: unable to enumerate USB device [ 100.270777][ T3260] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 100.431391][ T3260] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.435459][ T3260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.438962][ T3260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.442083][ T3260] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.446082][ T3260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.452306][ T3260] usb 7-1: config 0 descriptor?? [ 100.606179][ T34] IPVS: starting estimator thread 0... [ 100.606607][ T7665] FAULT_INJECTION: forcing a failure. [ 100.606607][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 100.613525][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.0.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.613557][ T7665] Tainted: [L]=SOFTLOCKUP [ 100.613561][ T7665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.613569][ T7665] Call Trace: [ 100.613573][ T7665] [ 100.613578][ T7665] dump_stack_lvl+0x100/0x190 [ 100.613597][ T7665] should_fail_ex.cold+0x5/0xa [ 100.613614][ T7665] should_failslab+0xc2/0x120 [ 100.613635][ T7665] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.613654][ T7665] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.613681][ T7665] ? __inet_hash_connect+0x6da/0x2000 [ 100.613703][ T7665] __inet_hash_connect+0x6da/0x2000 [ 100.613728][ T7665] ? __pfx___inet_check_established+0x10/0x10 [ 100.613757][ T7665] ? __pfx___inet_hash_connect+0x10/0x10 [ 100.613775][ T7665] ? inet_init_ehash_secret+0xd/0x60 [ 100.613791][ T7665] ? inet_hash_connect+0x9f/0x340 [ 100.613803][ T7665] tcp_v4_connect+0xeb3/0x1b40 [ 100.613824][ T7665] ? __pfx_tcp_v4_connect+0x10/0x10 [ 100.613841][ T7665] ? __lock_acquire+0x49f/0x1a40 [ 100.613855][ T7665] ? __lock_acquire+0x49f/0x1a40 [ 100.613870][ T7665] __inet_stream_connect+0x208/0xfa0 [ 100.613902][ T7665] ? __pfx___inet_stream_connect+0x10/0x10 [ 100.613918][ T7665] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.613936][ T7665] ? __pfx_inet_stream_connect+0x10/0x10 [ 100.613952][ T7665] ? __local_bh_enable_ip+0x9e/0x120 [ 100.613969][ T7665] ? __pfx_inet_stream_connect+0x10/0x10 [ 100.613984][ T7665] inet_stream_connect+0x57/0xa0 [ 100.614000][ T7665] __sys_connect_file+0x141/0x1a0 [ 100.614015][ T7665] __sys_connect+0x141/0x170 [ 100.614032][ T7665] ? __pfx___sys_connect+0x10/0x10 [ 100.614044][ T7665] ? __fget_files+0x21f/0x3d0 [ 100.614061][ T7665] ? __pfx_ksys_write+0x10/0x10 [ 100.614074][ T7665] __x64_sys_connect+0x72/0xb0 [ 100.614086][ T7665] ? lockdep_hardirqs_on+0x78/0x100 [ 100.614101][ T7665] do_syscall_64+0x115/0x870 [ 100.614116][ T7665] ? clear_bhb_loop+0x70/0xc0 [ 100.614149][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.614163][ T7665] RIP: 0033:0x7f0928b9e0d9 [ 100.614173][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.614184][ T7665] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.614197][ T7665] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 100.614203][ T7665] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 100.614210][ T7665] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.614216][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.614223][ T7665] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 100.614235][ T7665] [ 100.685345][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 100.702601][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 100.710828][ T7666] IPVS: using max 29 ests per chain, 69600 per kthread [ 100.860817][ T5871] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 100.911407][ T3260] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 101.011672][ T5871] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.016435][ T5871] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.021059][ T5871] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.024977][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.031316][ T7668] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.036608][ T5871] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.157050][ T3260] usb 7-1: USB disconnect, device number 26 [ 101.160877][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 101.160888][ T42] audit: type=1400 audit(1786476786.762:577): avc: denied { associate } for pid=7658 comm="syz.2.670" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.238418][ T34] usb 6-1: USB disconnect, device number 23 [ 101.403745][ T7678] FAULT_INJECTION: forcing a failure. [ 101.403745][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.408887][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.3.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.408915][ T7678] Tainted: [L]=SOFTLOCKUP [ 101.408921][ T7678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.408933][ T7678] Call Trace: [ 101.408939][ T7678] [ 101.408945][ T7678] dump_stack_lvl+0x100/0x190 [ 101.408971][ T7678] should_fail_ex.cold+0x5/0xa [ 101.408993][ T7678] _copy_from_user+0x2e/0xd0 [ 101.409017][ T7678] copy_msghdr_from_user+0x9f/0x4c0 [ 101.409035][ T7678] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.409052][ T7678] ? rcu_is_watching+0x12/0xc0 [ 101.409075][ T7678] ? ___sys_sendmsg+0x19d/0x1e0 [ 101.409090][ T7678] ? kfree+0x1e5/0x6c0 [ 101.409108][ T7678] ___sys_sendmsg+0x106/0x1e0 [ 101.409125][ T7678] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.409162][ T7678] ? __pfx___might_resched+0x10/0x10 [ 101.409184][ T7678] __sys_sendmmsg+0x20c/0x440 [ 101.409208][ T7678] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.409228][ T7678] ? ksys_write+0x190/0x250 [ 101.409260][ T7678] ? fput+0x79/0x100 [ 101.409276][ T7678] ? ksys_write+0x1ac/0x250 [ 101.409290][ T7678] ? __pfx_ksys_write+0x10/0x10 [ 101.409309][ T7678] __x64_sys_sendmmsg+0x9c/0x100 [ 101.409329][ T7678] ? lockdep_hardirqs_on+0x78/0x100 [ 101.409351][ T7678] do_syscall_64+0x115/0x870 [ 101.409368][ T7678] ? clear_bhb_loop+0x70/0xc0 [ 101.409388][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.409405][ T7678] RIP: 0033:0x7f110bb9e0d9 [ 101.409420][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.409436][ T7678] RSP: 002b:00007f110cab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.409454][ T7678] RAX: ffffffffffffffda RBX: 00007f110be25fa0 RCX: 00007f110bb9e0d9 [ 101.409462][ T7678] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 101.409470][ T7678] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.409480][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.409489][ T7678] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 101.409511][ T7678] [ 101.632471][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.636161][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.860921][ T5871] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 101.974198][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 101.978450][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 102.011441][ T5871] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 102.015138][ T5871] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.018342][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.021756][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.024822][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 102.027831][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 102.031298][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 102.034365][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 102.037364][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 102.040374][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 102.041019][ T34] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 102.044937][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 102.048901][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 102.051957][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 102.054938][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 102.057906][ T5871] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 102.063710][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.066236][ T5871] usb 8-1: Product: syz [ 102.067553][ T5871] usb 8-1: Manufacturer: syz [ 102.069002][ T5871] usb 8-1: SerialNumber: syz [ 102.072422][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.074773][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.077068][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.079385][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.081729][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.084035][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.086343][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.088625][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.090977][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.093306][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.095605][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.097899][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.101754][ T5871] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 102.104734][ T5871] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 102.108883][ T5871] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 102.112349][ T5871] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 102.115586][ T5871] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 102.191334][ T34] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 102.195513][ T34] usb 7-1: config 0 has no interfaces? [ 102.197354][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.202933][ T34] usb 7-1: config 0 descriptor?? [ 102.227085][ T7701] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 102.232465][ T42] audit: type=1400 audit(1786476787.842:578): avc: denied { write } for pid=7700 comm="syz.0.687" name="nullb1" dev="configfs" ino=15549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.237068][ T7701] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:21 [ 102.241972][ T42] audit: type=1400 audit(1786476787.842:579): avc: denied { create } for pid=7700 comm="syz.0.687" name="power" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 102.246015][ T7701] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 102.252004][ T42] audit: type=1800 audit(1786476787.842:580): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.687" name="power" dev="configfs" ino=21918 res=0 errno=0 [ 102.263361][ T42] audit: type=1400 audit(1786476787.842:581): avc: denied { mounton } for pid=7700 comm="syz.0.687" path="/209/config" dev="configfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.272854][ T42] audit: type=1400 audit(1786476787.862:582): avc: denied { mount } for pid=7700 comm="syz.0.687" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.328932][ T34] usb 8-1: USB disconnect, device number 23 [ 102.352155][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 102.366817][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 102.370927][ T34] keyspan 8-1:1.0: device disconnected [ 102.410780][ T5871] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 102.428208][ T29] usb 7-1: USB disconnect, device number 27 [ 102.452534][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 102.458496][ T7712] block nbd0: Unsupported socket: should be TCP or UNIX. [ 102.500442][ T7715] FAULT_INJECTION: forcing a failure. [ 102.500442][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.505691][ T7715] CPU: 2 UID: 0 PID: 7715 Comm: syz.0.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.505719][ T7715] Tainted: [L]=SOFTLOCKUP [ 102.505725][ T7715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.505735][ T7715] Call Trace: [ 102.505742][ T7715] [ 102.505750][ T7715] dump_stack_lvl+0x100/0x190 [ 102.505780][ T7715] should_fail_ex.cold+0x5/0xa [ 102.505804][ T7715] _copy_from_iter+0x1f4/0x1690 [ 102.505831][ T7715] ? __asan_memset+0x23/0x50 [ 102.505850][ T7715] ? __pfx__copy_from_iter+0x10/0x10 [ 102.505873][ T7715] ? __pfx___alloc_skb+0x10/0x10 [ 102.505905][ T7715] netlink_sendmsg+0x808/0xda0 [ 102.505929][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.505950][ T7715] ? selinux_socket_sendmsg+0x198/0x2f0 [ 102.505986][ T7715] ____sys_sendmsg+0xa4d/0xbe0 [ 102.506013][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.506033][ T7715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.506071][ T7715] ___sys_sendmsg+0x190/0x1e0 [ 102.506090][ T7715] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.506105][ T7715] ? __lock_acquire+0x49f/0x1a40 [ 102.506154][ T7715] ? get_pid_task+0x106/0x250 [ 102.506197][ T7715] __sys_sendmsg+0x160/0x210 [ 102.506221][ T7715] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.506255][ T7715] do_syscall_64+0x115/0x870 [ 102.506278][ T7715] ? clear_bhb_loop+0x70/0xc0 [ 102.506300][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.506318][ T7715] RIP: 0033:0x7f0928b9e0d9 [ 102.506334][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.506365][ T7715] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.506385][ T7715] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 102.506396][ T7715] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 102.506406][ T7715] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.506415][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.506427][ T7715] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 102.506448][ T7715] [ 102.576121][ T5871] usb 6-1: device descriptor read/64, error -71 [ 102.606295][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 102.609894][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 102.653617][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 102.688945][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.692747][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.811793][ T5871] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 102.858318][ T7724] ip_tables: iptables: counters copy to user failed while replacing table [ 102.950823][ T5871] usb 6-1: device descriptor read/64, error -71 [ 102.982942][ T7730] kvm: pic: non byte write [ 102.986189][ T7730] kvm: pic: level sensitive irq not supported [ 102.986847][ T7730] kvm: pic: non byte write [ 102.992131][ T7730] kvm: pic: non byte write [ 102.994325][ T7730] kvm: pic: non byte write [ 102.996568][ T7730] kvm: pic: non byte write [ 102.998818][ T7730] kvm: pic: non byte write [ 103.001106][ T7730] kvm: pic: non byte write [ 103.003685][ T7730] kvm: pic: non byte write [ 103.006574][ T7730] kvm: pic: non byte write [ 103.009414][ T7730] kvm: pic: non byte write [ 103.061566][ T5871] usb usb6-port1: attempt power cycle [ 103.284759][ T42] audit: type=1400 audit(1786476788.892:583): avc: denied { create } for pid=7736 comm="syz.2.701" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.349417][ T7739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.702'. [ 103.355397][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 103.396468][ T42] audit: type=1400 audit(1786476789.002:584): avc: denied { unlink } for pid=5732 comm="syz-executor" name="file0" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.400771][ T5871] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 103.407404][ T7745] tipc: Started in network mode [ 103.409093][ T7745] tipc: Node identity , cluster identity 4711 [ 103.411845][ T42] audit: type=1400 audit(1786476789.012:585): avc: denied { unlink } for pid=7742 comm="syz.0.704" name="#1" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.412882][ T7745] tipc: Failed to obtain node identity [ 103.418728][ T42] audit: type=1400 audit(1786476789.022:586): avc: denied { mount } for pid=7742 comm="syz.0.704" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.428482][ T7745] tipc: Enabling of bearer rejected, failed to enable media [ 103.432218][ T5871] usb 6-1: device descriptor read/8, error -71 [ 103.467781][ T7751] openvswitch: netlink: Missing key (keys=40, expected=100) [ 103.620911][ T7761] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 103.642115][ T7761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.658895][ T7761] bond2: (slave ip6gretap1): making interface the new active one [ 103.664221][ T7761] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 103.673676][ T5871] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 103.691815][ T5871] usb 6-1: device descriptor read/8, error -71 [ 103.698337][ T7764] FAULT_INJECTION: forcing a failure. [ 103.698337][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.703199][ T7764] CPU: 1 UID: 0 PID: 7764 Comm: syz.0.713 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.703218][ T7764] Tainted: [L]=SOFTLOCKUP [ 103.703222][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.703228][ T7764] Call Trace: [ 103.703233][ T7764] [ 103.703237][ T7764] dump_stack_lvl+0x100/0x190 [ 103.703275][ T7764] should_fail_ex.cold+0x5/0xa [ 103.703297][ T7764] _copy_from_iter+0x1f4/0x1690 [ 103.703320][ T7764] ? __pfx__copy_from_iter+0x10/0x10 [ 103.703336][ T7764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.703365][ T7764] copy_page_from_iter+0x238/0x300 [ 103.703382][ T7764] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 103.703399][ T7764] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 103.703411][ T7764] ? unwind_get_return_address+0x59/0xa0 [ 103.703436][ T7764] ? arch_stack_walk+0xa6/0xf0 [ 103.703454][ T7764] ? _kstrtoull+0x13c/0x1f0 [ 103.703464][ T7764] ? __pfx__kstrtoull+0x10/0x10 [ 103.703476][ T7764] tun_get_user+0x16d6/0x3c20 [ 103.703492][ T7764] ? __pfx_tun_get_user+0x10/0x10 [ 103.703505][ T7764] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.703526][ T7764] ? find_held_lock+0x2b/0x80 [ 103.703541][ T7764] ? tun_get+0x191/0x370 [ 103.703550][ T7764] ? tun_get+0x191/0x370 [ 103.703563][ T7764] tun_chr_write_iter+0xdc/0x200 [ 103.703575][ T7764] vfs_write+0x6ac/0x1050 [ 103.703592][ T7764] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.703605][ T7764] ? __pfx_vfs_write+0x10/0x10 [ 103.703615][ T7764] ? find_held_lock+0x2b/0x80 [ 103.703632][ T7764] ksys_write+0x12a/0x250 [ 103.703642][ T7764] ? __pfx_ksys_write+0x10/0x10 [ 103.703656][ T7764] do_syscall_64+0x115/0x870 [ 103.703679][ T7764] ? clear_bhb_loop+0x70/0xc0 [ 103.703694][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.703705][ T7764] RIP: 0033:0x7f0928b5e90e [ 103.703715][ T7764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.703726][ T7764] RSP: 002b:00007f0929a4efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.703746][ T7764] RAX: ffffffffffffffda RBX: 00007f0929a4f6c0 RCX: 00007f0928b5e90e [ 103.703753][ T7764] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 103.703759][ T7764] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.703766][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.703772][ T7764] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 103.703786][ T7764] [ 103.800928][ T55] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 103.804446][ T5871] usb usb6-port1: unable to enumerate USB device [ 103.841397][ T7768] FAULT_INJECTION: forcing a failure. [ 103.841397][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 103.845289][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.845308][ T7768] Tainted: [L]=SOFTLOCKUP [ 103.845312][ T7768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.845318][ T7768] Call Trace: [ 103.845323][ T7768] [ 103.845328][ T7768] dump_stack_lvl+0x100/0x190 [ 103.845347][ T7768] should_fail_ex.cold+0x5/0xa [ 103.845362][ T7768] should_failslab+0xc2/0x120 [ 103.845389][ T7768] __kmalloc_noprof+0xfc/0x820 [ 103.845404][ T7768] ? alloc_pipe_info+0x1ec/0x590 [ 103.845419][ T7768] alloc_pipe_info+0x1ec/0x590 [ 103.845433][ T7768] splice_direct_to_actor+0x78f/0xa30 [ 103.845449][ T7768] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.845462][ T7768] ? inode_has_perm+0x16d/0x1d0 [ 103.845477][ T7768] ? __file_has_perm+0x336/0x460 [ 103.845492][ T7768] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.845506][ T7768] ? __pfx___file_has_perm+0x10/0x10 [ 103.845525][ T7768] do_splice_direct+0x174/0x240 [ 103.845538][ T7768] ? __pfx_do_splice_direct+0x10/0x10 [ 103.845552][ T7768] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.845566][ T7768] ? bpf_lsm_file_permission+0x9/0x10 [ 103.845591][ T7768] ? security_file_permission+0x76/0x210 [ 103.845611][ T7768] ? rw_verify_area+0xce/0x6d0 [ 103.845629][ T7768] do_sendfile+0xadc/0xe20 [ 103.845648][ T7768] ? __pfx_do_sendfile+0x10/0x10 [ 103.845665][ T7768] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.845690][ T7768] ? __fget_files+0x21f/0x3d0 [ 103.845706][ T7768] __x64_sys_sendfile64+0x1d8/0x220 [ 103.845719][ T7768] ? ksys_write+0x1ac/0x250 [ 103.845729][ T7768] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 103.845746][ T7768] do_syscall_64+0x115/0x870 [ 103.845775][ T7768] ? clear_bhb_loop+0x70/0xc0 [ 103.845790][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.845801][ T7768] RIP: 0033:0x7f0928b9e0d9 [ 103.845812][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.845824][ T7768] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.845835][ T7768] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 103.845842][ T7768] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 103.845849][ T7768] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.845855][ T7768] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001 [ 103.845862][ T7768] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 103.845875][ T7768] [ 103.952985][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 103.955123][ T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.960103][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.963524][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.968543][ T55] usb 7-1: config 0 descriptor?? [ 104.375826][ T7783] FAULT_INJECTION: forcing a failure. [ 104.375826][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.384034][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.3.721 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.384066][ T7783] Tainted: [L]=SOFTLOCKUP [ 104.384072][ T7783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.384082][ T7783] Call Trace: [ 104.384089][ T7783] [ 104.384096][ T7783] dump_stack_lvl+0x100/0x190 [ 104.384125][ T7783] should_fail_ex.cold+0x5/0xa [ 104.384149][ T7783] _copy_from_user+0x2e/0xd0 [ 104.384175][ T7783] kstrtouint_from_user+0xd6/0x1d0 [ 104.384194][ T7783] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.384212][ T7783] ? __lock_acquire+0x49f/0x1a40 [ 104.384245][ T7783] proc_fail_nth_write+0x83/0x220 [ 104.384265][ T7783] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.384290][ T7783] vfs_write+0x2aa/0x1050 [ 104.384309][ T7783] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.384329][ T7783] ? __pfx_vfs_write+0x10/0x10 [ 104.384345][ T7783] ? __fget_files+0x215/0x3d0 [ 104.384370][ T7783] ? __fget_files+0x21f/0x3d0 [ 104.384396][ T7783] ksys_write+0x12a/0x250 [ 104.384413][ T7783] ? __pfx_ksys_write+0x10/0x10 [ 104.384436][ T7783] do_syscall_64+0x115/0x870 [ 104.384460][ T7783] ? clear_bhb_loop+0x70/0xc0 [ 104.384482][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.384507][ T7783] RIP: 0033:0x7f110bb5e90e [ 104.384523][ T7783] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.384540][ T7783] RSP: 002b:00007f110cab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.384559][ T7783] RAX: ffffffffffffffda RBX: 00007f110cab76c0 RCX: 00007f110bb5e90e [ 104.384570][ T7783] RDX: 0000000000000001 RSI: 00007f110cab70a0 RDI: 0000000000000004 [ 104.384581][ T7783] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.384591][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.384601][ T7783] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 104.384624][ T7783] [ 104.606760][ T7793] FAULT_INJECTION: forcing a failure. [ 104.606760][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.610722][ T7793] CPU: 2 UID: 0 PID: 7793 Comm: syz.3.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.610740][ T7793] Tainted: [L]=SOFTLOCKUP [ 104.610745][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.610751][ T7793] Call Trace: [ 104.610755][ T7793] [ 104.610760][ T7793] dump_stack_lvl+0x100/0x190 [ 104.610779][ T7793] should_fail_ex.cold+0x5/0xa [ 104.610809][ T7793] _copy_from_iter+0x1f4/0x1690 [ 104.610828][ T7793] ? __asan_memset+0x23/0x50 [ 104.610841][ T7793] ? __pfx__copy_from_iter+0x10/0x10 [ 104.610856][ T7793] ? __pfx___alloc_skb+0x10/0x10 [ 104.610885][ T7793] netlink_sendmsg+0x808/0xda0 [ 104.610906][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.610919][ T7793] ? selinux_socket_sendmsg+0x198/0x2f0 [ 104.610939][ T7793] ____sys_sendmsg+0xa4d/0xbe0 [ 104.610961][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.610978][ T7793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.611002][ T7793] ___sys_sendmsg+0x190/0x1e0 [ 104.611014][ T7793] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.611024][ T7793] ? __lock_acquire+0x49f/0x1a40 [ 104.611039][ T7793] ? get_pid_task+0x106/0x250 [ 104.611069][ T7793] __sys_sendmsg+0x160/0x210 [ 104.611084][ T7793] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.611106][ T7793] do_syscall_64+0x115/0x870 [ 104.611122][ T7793] ? clear_bhb_loop+0x70/0xc0 [ 104.611136][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.611148][ T7793] RIP: 0033:0x7f110bb9e0d9 [ 104.611158][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.611169][ T7793] RSP: 002b:00007f110cab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.611181][ T7793] RAX: ffffffffffffffda RBX: 00007f110be25fa0 RCX: 00007f110bb9e0d9 [ 104.611188][ T7793] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 104.611195][ T7793] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.611202][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.611209][ T7793] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 104.611222][ T7793] [ 104.926431][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 104.928468][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 104.932189][ T55] usb 7-1: USB disconnect, device number 28 [ 105.032472][ T7819] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 105.048941][ T7819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.341035][ T29] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 105.503251][ T29] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 105.509920][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.512888][ T7837] FAULT_INJECTION: forcing a failure. [ 105.512888][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.513816][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.518529][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.0.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.518557][ T7837] Tainted: [L]=SOFTLOCKUP [ 105.518563][ T7837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.518574][ T7837] Call Trace: [ 105.518581][ T7837] [ 105.518588][ T7837] dump_stack_lvl+0x100/0x190 [ 105.518619][ T7837] should_fail_ex.cold+0x5/0xa [ 105.518643][ T7837] _copy_from_iter+0x1f4/0x1690 [ 105.518671][ T7837] ? __asan_memset+0x23/0x50 [ 105.518691][ T7837] ? __pfx__copy_from_iter+0x10/0x10 [ 105.518716][ T7837] ? __pfx___alloc_skb+0x10/0x10 [ 105.518737][ T7837] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 105.518764][ T7837] ? sock_has_perm+0x25a/0x2f0 [ 105.518785][ T7837] ? __pfx_sock_has_perm+0x10/0x10 [ 105.518813][ T7837] netlink_sendmsg+0x808/0xda0 [ 105.518837][ T7837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.518858][ T7837] ? selinux_socket_sendmsg+0x198/0x2f0 [ 105.518887][ T7837] ____sys_sendmsg+0xa4d/0xbe0 [ 105.518913][ T7837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.518933][ T7837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.518964][ T7837] ? __pfx__kstrtoull+0x10/0x10 [ 105.518985][ T7837] ___sys_sendmsg+0x190/0x1e0 [ 105.519005][ T7837] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.519034][ T7837] ? find_held_lock+0x2b/0x80 [ 105.519065][ T7837] __sys_sendmmsg+0x20c/0x440 [ 105.519091][ T7837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.519113][ T7837] ? ksys_write+0x190/0x250 [ 105.519147][ T7837] ? fput+0x79/0x100 [ 105.519168][ T7837] ? ksys_write+0x1ac/0x250 [ 105.519184][ T7837] ? __pfx_ksys_write+0x10/0x10 [ 105.519205][ T7837] __x64_sys_sendmmsg+0x9c/0x100 [ 105.519227][ T7837] ? lockdep_hardirqs_on+0x78/0x100 [ 105.519251][ T7837] do_syscall_64+0x115/0x870 [ 105.519273][ T7837] ? clear_bhb_loop+0x70/0xc0 [ 105.519296][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.519314][ T7837] RIP: 0033:0x7f0928b9e0d9 [ 105.519329][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.519345][ T7837] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.519363][ T7837] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 105.519375][ T7837] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.519386][ T7837] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.519397][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.519407][ T7837] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 105.519430][ T7837] [ 105.582429][ T7840] FAULT_INJECTION: forcing a failure. [ 105.582429][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.582463][ T7840] CPU: 3 UID: 0 PID: 7840 Comm: syz.0.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.582500][ T7840] Tainted: [L]=SOFTLOCKUP [ 105.582507][ T7840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.582515][ T7840] Call Trace: [ 105.582520][ T7840] [ 105.582526][ T7840] dump_stack_lvl+0x100/0x190 [ 105.582553][ T7840] should_fail_ex.cold+0x5/0xa [ 105.582575][ T7840] _copy_to_user+0x32/0xd0 [ 105.582599][ T7840] simple_read_from_buffer+0xcb/0x170 [ 105.582617][ T7840] proc_fail_nth_read+0x1af/0x230 [ 105.582644][ T7840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.582671][ T7840] ? rw_verify_area+0xce/0x6d0 [ 105.582693][ T7840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.582716][ T7840] vfs_read+0x1e4/0xb40 [ 105.582743][ T7840] ? __pfx_vfs_read+0x10/0x10 [ 105.582766][ T7840] ? __fget_files+0x215/0x3d0 [ 105.582789][ T7840] ? __fget_files+0x21f/0x3d0 [ 105.582812][ T7840] ksys_read+0x12a/0x250 [ 105.582824][ T7840] ? __pfx_ksys_read+0x10/0x10 [ 105.582843][ T7840] do_syscall_64+0x115/0x870 [ 105.582865][ T7840] ? clear_bhb_loop+0x70/0xc0 [ 105.582885][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.582902][ T7840] RIP: 0033:0x7f0928b5e90e [ 105.582915][ T7840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.582928][ T7840] RSP: 002b:00007f0929a4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.582945][ T7840] RAX: ffffffffffffffda RBX: 00007f0929a4f6c0 RCX: 00007f0928b5e90e [ 105.582956][ T7840] RDX: 000000000000000f RSI: 00007f0929a4f0a0 RDI: 0000000000000005 [ 105.582965][ T7840] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.582975][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.582984][ T7840] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 105.583006][ T7840] [ 105.683273][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.686535][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 105.689720][ T29] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.693280][ T29] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 105.699213][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.702437][ T29] usb 8-1: Product: syz [ 105.703822][ T29] usb 8-1: Manufacturer: syz [ 105.705392][ T29] usb 8-1: SerialNumber: syz [ 105.709317][ T7822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.711904][ T7822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.714326][ T7822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.718058][ T29] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 105.721254][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 87 [ 105.723758][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 105.726919][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 105.729379][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 105.731833][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 85 [ 105.734428][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 105.737777][ T29] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 105.741173][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 105.743612][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 105.746017][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 105.748444][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 86 [ 105.750918][ T29] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 105.754211][ T29] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 105.850771][ T5721] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 105.990801][ T5721] usb 7-1: device descriptor read/64, error -71 [ 106.034543][ T55] usb 8-1: USB disconnect, device number 24 [ 106.042868][ T55] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 106.047470][ T55] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 106.051774][ T55] keyspan 8-1:1.0: device disconnected [ 106.230715][ T5721] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 106.360899][ T5721] usb 7-1: device descriptor read/64, error -71 [ 106.363864][ T7855] __nla_validate_parse: 8 callbacks suppressed [ 106.363878][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 106.369376][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 106.473136][ T5721] usb usb7-port1: attempt power cycle [ 106.510743][ T29] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 106.587485][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 106.587539][ T42] audit: type=1400 audit(1786476792.192:594): avc: denied { bind } for pid=7858 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.660784][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 106.666197][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.672945][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.677483][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.683165][ T29] usb 6-1: config 0 descriptor?? [ 106.810778][ T5721] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 106.831373][ T5721] usb 7-1: device descriptor read/8, error -71 [ 106.940746][ T34] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 107.070787][ T5721] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 107.091596][ T5721] usb 7-1: device descriptor read/8, error -71 [ 107.111682][ T34] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 107.116311][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.119816][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.122982][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.125977][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 107.128955][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 107.132197][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 107.135802][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 107.138747][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 107.141750][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 107.144706][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.147609][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 107.150837][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 107.154396][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 107.157549][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 107.163424][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.165898][ T34] usb 8-1: Product: syz [ 107.167231][ T34] usb 8-1: Manufacturer: syz [ 107.168720][ T34] usb 8-1: SerialNumber: syz [ 107.174728][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.177055][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.179278][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.181595][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.184536][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.187218][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.189648][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.192409][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.194732][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.197374][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.200089][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.200920][ T5721] usb usb7-port1: unable to enumerate USB device [ 107.202963][ T7870] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.209603][ T34] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 107.214288][ T34] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 107.223824][ T34] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 107.228977][ T34] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.234261][ T34] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.420106][ T6541] usb 8-1: USB disconnect, device number 25 [ 107.433226][ T6541] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.436738][ T7872] syzkaller0: entered promiscuous mode [ 107.438244][ T6541] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.439143][ T7872] syzkaller0: entered allmulticast mode [ 107.443690][ T6541] keyspan 8-1:1.0: device disconnected [ 107.635245][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 107.637224][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 107.640935][ T29] usb 6-1: USB disconnect, device number 28 [ 108.001610][ T7880] ip_tables: iptables: counters copy to user failed while replacing table [ 108.004928][ T7880] FAULT_INJECTION: forcing a failure. [ 108.004928][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 108.008974][ T7880] CPU: 3 UID: 0 PID: 7880 Comm: syz.3.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.008992][ T7880] Tainted: [L]=SOFTLOCKUP [ 108.008996][ T7880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.009002][ T7880] Call Trace: [ 108.009007][ T7880] [ 108.009012][ T7880] dump_stack_lvl+0x100/0x190 [ 108.009046][ T7880] should_fail_ex.cold+0x5/0xa [ 108.009061][ T7880] should_failslab+0xc2/0x120 [ 108.009078][ T7880] __kmalloc_noprof+0xfc/0x820 [ 108.009091][ T7880] ? trace_kmalloc+0xeb/0x110 [ 108.009106][ T7880] ? lsm_blob_alloc+0x68/0x90 [ 108.009121][ T7880] lsm_blob_alloc+0x68/0x90 [ 108.009135][ T7880] security_sk_alloc+0x2d/0x290 [ 108.009151][ T7880] sk_prot_alloc+0x12a/0x2a0 [ 108.009170][ T7880] sk_alloc+0x36/0xe80 [ 108.009184][ T7880] bpf_prog_test_run_skb+0x4db/0x3540 [ 108.009201][ T7880] ? find_held_lock+0x2b/0x80 [ 108.009213][ T7880] ? __fget_files+0x1d1/0x3d0 [ 108.009229][ T7880] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 108.009242][ T7880] ? fput+0x79/0x100 [ 108.009257][ T7880] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 108.009268][ T7880] __sys_bpf+0x2a12/0x4e80 [ 108.009294][ T7880] ? __pfx___sys_bpf+0x10/0x10 [ 108.009306][ T7880] ? find_held_lock+0x2b/0x80 [ 108.009316][ T7880] ? get_pid_task+0xfc/0x250 [ 108.009326][ T7880] ? get_pid_task+0xfc/0x250 [ 108.009341][ T7880] ? find_held_lock+0x2b/0x80 [ 108.009354][ T7880] ? rcu_read_lock_any_held+0x6a/0xa0 [ 108.009372][ T7880] ? find_held_lock+0x2b/0x80 [ 108.009382][ T7880] ? ksys_write+0x190/0x250 [ 108.009391][ T7880] ? ksys_write+0x190/0x250 [ 108.009411][ T7880] ? fput+0x79/0x100 [ 108.009427][ T7880] ? __x64_sys_bpf+0xce/0x140 [ 108.009438][ T7880] __x64_sys_bpf+0xce/0x140 [ 108.009450][ T7880] ? do_syscall_64+0x90/0x870 [ 108.009467][ T7880] do_syscall_64+0x115/0x870 [ 108.009481][ T7880] ? clear_bhb_loop+0x70/0xc0 [ 108.009495][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.009507][ T7880] RIP: 0033:0x7f110bb9e0d9 [ 108.009517][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.009528][ T7880] RSP: 002b:00007f110cab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.009540][ T7880] RAX: ffffffffffffffda RBX: 00007f110be25fa0 RCX: 00007f110bb9e0d9 [ 108.009547][ T7880] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 108.009553][ T7880] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.009560][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.009566][ T7880] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 108.009580][ T7880] [ 108.130752][ T7882] process 'syz.3.757' launched './file0' with NULL argv: empty string added [ 108.167651][ T7885] syzkaller0: left promiscuous mode [ 108.169234][ T7885] syzkaller0: left allmulticast mode [ 108.174568][ T7885] FAULT_INJECTION: forcing a failure. [ 108.174568][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.180323][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.3.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.180350][ T7885] Tainted: [L]=SOFTLOCKUP [ 108.180358][ T7885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.180370][ T7885] Call Trace: [ 108.180379][ T7885] [ 108.180386][ T7885] dump_stack_lvl+0x100/0x190 [ 108.180418][ T7885] should_fail_ex.cold+0x5/0xa [ 108.180444][ T7885] _copy_to_user+0x32/0xd0 [ 108.180473][ T7885] simple_read_from_buffer+0xcb/0x170 [ 108.180497][ T7885] proc_fail_nth_read+0x1af/0x230 [ 108.180528][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.180560][ T7885] ? rw_verify_area+0xce/0x6d0 [ 108.180587][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.180633][ T7885] vfs_read+0x1e4/0xb40 [ 108.180665][ T7885] ? __pfx_vfs_read+0x10/0x10 [ 108.180693][ T7885] ? __fget_files+0x215/0x3d0 [ 108.180720][ T7885] ? __fget_files+0x21f/0x3d0 [ 108.180747][ T7885] ksys_read+0x12a/0x250 [ 108.180764][ T7885] ? __pfx_ksys_read+0x10/0x10 [ 108.180789][ T7885] do_syscall_64+0x115/0x870 [ 108.180814][ T7885] ? clear_bhb_loop+0x70/0xc0 [ 108.180838][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.180858][ T7885] RIP: 0033:0x7f110bb5e90e [ 108.180875][ T7885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.180898][ T7885] RSP: 002b:00007f110cab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.180919][ T7885] RAX: ffffffffffffffda RBX: 00007f110cab76c0 RCX: 00007f110bb5e90e [ 108.180932][ T7885] RDX: 000000000000000f RSI: 00007f110cab70a0 RDI: 0000000000000006 [ 108.180943][ T7885] RBP: 00007f110cab7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.180954][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.180965][ T7885] R13: 00007f110be26038 R14: 00007f110be25fa0 R15: 00007ffccc3cc798 [ 108.180991][ T7885] [ 108.263499][ T5829] syzkaller0: tun_net_xmit 76 [ 108.363374][ T7895] syzkaller0: entered promiscuous mode [ 108.365587][ T7895] syzkaller0: entered allmulticast mode [ 108.512081][ T55] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 108.571459][ T12] syzkaller0: tun_net_xmit 76 [ 108.578342][ C3] syzkaller0: tun_net_xmit 48 [ 108.654274][ T55] usb 7-1: device descriptor read/64, error -71 [ 108.696010][ T7917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7917 comm=syz.2.764 [ 108.711144][ T5829] syzkaller0: tun_net_xmit 76 [ 108.720773][ T6541] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 108.808188][ T7923] FAULT_INJECTION: forcing a failure. [ 108.808188][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 108.813664][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.0.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.813684][ T7923] Tainted: [L]=SOFTLOCKUP [ 108.813688][ T7923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.813694][ T7923] Call Trace: [ 108.813699][ T7923] [ 108.813704][ T7923] dump_stack_lvl+0x100/0x190 [ 108.813723][ T7923] should_fail_ex.cold+0x5/0xa [ 108.813739][ T7923] should_failslab+0xc2/0x120 [ 108.813755][ T7923] __kmalloc_noprof+0xfc/0x820 [ 108.813769][ T7923] ? lsm_blob_alloc+0x68/0x90 [ 108.813784][ T7923] lsm_blob_alloc+0x68/0x90 [ 108.813797][ T7923] security_task_alloc+0x2a/0x260 [ 108.813808][ T7923] copy_process+0x2b94/0x8030 [ 108.813843][ T7923] ? __pfx_copy_process+0x10/0x10 [ 108.813859][ T7923] ? __kasan_kmalloc+0xaa/0xb0 [ 108.813875][ T7923] ? lockdep_init_map_type+0x5c/0x250 [ 108.813893][ T7923] ? lockdep_init_map_type+0x5c/0x250 [ 108.813908][ T7923] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 108.813930][ T7923] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 108.813943][ T7923] vhost_task_create+0x1db/0x370 [ 108.813958][ T7923] ? __pfx_vhost_task_create+0x10/0x10 [ 108.813975][ T7923] ? __pfx_vhost_task_fn+0x10/0x10 [ 108.813989][ T7923] ? __pfx___mutex_lock+0x10/0x10 [ 108.814006][ T7923] ? kasan_quarantine_put+0x104/0x240 [ 108.814021][ T7923] kvm_mmu_post_init_vm+0x1b3/0x360 [ 108.814040][ T7923] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 108.814059][ T7923] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 108.814082][ T7923] kvm_vcpu_ioctl+0x730/0x1700 [ 108.814118][ T7923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.814133][ T7923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.814157][ T7923] ? do_vfs_ioctl+0x226/0x13e0 [ 108.814175][ T7923] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.814193][ T7923] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.814215][ T7923] ? __fget_files+0x215/0x3d0 [ 108.814227][ T7923] ? hook_file_ioctl_common+0x140/0x440 [ 108.814244][ T7923] ? selinux_file_ioctl+0x13b/0x290 [ 108.814261][ T7923] ? selinux_file_ioctl+0xb6/0x290 [ 108.814279][ T7923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.814292][ T7923] __x64_sys_ioctl+0x18e/0x210 [ 108.814311][ T7923] do_syscall_64+0x115/0x870 [ 108.814325][ T7923] ? clear_bhb_loop+0x70/0xc0 [ 108.814339][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.814351][ T7923] RIP: 0033:0x7f0928b9e0d9 [ 108.814361][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.814372][ T7923] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.814384][ T7923] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 108.814391][ T7923] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 108.814397][ T7923] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.814403][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.814410][ T7923] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 108.814427][ T7923] [ 108.881924][ T6541] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 108.898461][ T7924] kvm: user requested TSC rate below hardware speed [ 108.901892][ T6541] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.933015][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 108.937144][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.941632][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 108.945686][ T7924] kvm: kvm [7920]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 108.945930][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 108.949066][ T7924] kvm: kvm [7920]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 108.953174][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 108.959979][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 108.964473][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 108.968589][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 108.972923][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 108.977071][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 108.981517][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 108.985729][ T6541] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 108.989821][ T6541] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 108.997718][ T6541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.001433][ T6541] usb 6-1: Product: syz [ 109.003284][ T6541] usb 6-1: Manufacturer: syz [ 109.005244][ T6541] usb 6-1: SerialNumber: syz [ 109.010280][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.013978][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.015208][ T7924] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 109.017131][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.024291][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.027399][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.030371][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.033493][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.036472][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.038776][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.041451][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.043749][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.046766][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.050230][ T6541] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 109.054380][ T6541] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 109.060960][ T6541] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 109.069852][ T6541] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 109.074764][ T6541] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 109.153904][ T7927] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 109.156142][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.165294][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 109.171961][ T7927] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 109.174774][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.177995][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 109.181906][ T7927] Cannot find set identified by id 0 to match [ 109.191462][ T7931] vhci_hcd: connection closed [ 109.191968][ T7929] vhci_hcd: connection closed [ 109.193553][ T5799] vhci_hcd vhci_hcd.0: stop threads [ 109.199661][ T5799] vhci_hcd vhci_hcd.0: release socket [ 109.202141][ T5799] vhci_hcd vhci_hcd.0: disconnect device [ 109.204998][ T5799] vhci_hcd vhci_hcd.0: stop threads [ 109.207166][ T5799] vhci_hcd vhci_hcd.0: release socket [ 109.209427][ T5799] vhci_hcd vhci_hcd.0: disconnect device [ 109.253969][ T6541] usb 6-1: USB disconnect, device number 29 [ 109.268119][ T6541] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 109.277172][ T6541] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 109.282518][ T6541] keyspan 6-1:1.0: device disconnected [ 109.543364][ T5815] syzkaller0: tun_net_xmit 76 [ 109.720270][ T42] audit: type=1400 audit(1786476795.322:595): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.742921][ T42] audit: type=1400 audit(1786476795.352:596): avc: denied { wake_alarm } for pid=7934 comm="syz.3.768" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.766915][ T7936] input: syz0 as /devices/virtual/input/input18 [ 109.836651][ T7940] syzkaller0: entered promiscuous mode [ 109.839071][ T7940] syzkaller0: entered allmulticast mode [ 109.913910][ T7944] kvm: user requested TSC rate below hardware speed [ 109.970778][ T6541] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 110.020116][ T7946] FAULT_INJECTION: forcing a failure. [ 110.020116][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 110.025627][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.025655][ T7946] Tainted: [L]=SOFTLOCKUP [ 110.025661][ T7946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.025673][ T7946] Call Trace: [ 110.025680][ T7946] [ 110.025687][ T7946] dump_stack_lvl+0x100/0x190 [ 110.025716][ T7946] should_fail_ex.cold+0x5/0xa [ 110.025737][ T7946] should_failslab+0xc2/0x120 [ 110.025759][ T7946] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 110.025782][ T7946] ? __get_vm_area_node+0x101/0x330 [ 110.025823][ T7946] __get_vm_area_node+0x101/0x330 [ 110.025852][ T7946] __vmalloc_node_range_noprof+0x228/0x1630 [ 110.025876][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.025894][ T7946] ? rcu_is_watching+0x12/0xc0 [ 110.025926][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.025948][ T7946] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 110.025978][ T7946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.026011][ T7946] ? trace_kmem_cache_alloc+0xdd/0x100 [ 110.026035][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.026053][ T7946] __vmalloc_node_noprof+0xad/0xf0 [ 110.026075][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.026118][ T7946] copy_process+0x7fb/0x8030 [ 110.026159][ T7946] ? __pfx_copy_process+0x10/0x10 [ 110.026182][ T7946] ? __kasan_kmalloc+0xaa/0xb0 [ 110.026202][ T7946] ? lockdep_init_map_type+0x5c/0x250 [ 110.026224][ T7946] ? lockdep_init_map_type+0x5c/0x250 [ 110.026245][ T7946] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.026266][ T7946] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.026288][ T7946] vhost_task_create+0x1db/0x370 [ 110.026311][ T7946] ? __pfx_vhost_task_create+0x10/0x10 [ 110.026336][ T7946] ? __pfx_vhost_task_fn+0x10/0x10 [ 110.026356][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 110.026378][ T7946] ? kasan_quarantine_put+0x104/0x240 [ 110.026406][ T7946] kvm_mmu_post_init_vm+0x1b3/0x360 [ 110.026433][ T7946] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 110.026462][ T7946] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 110.026486][ T7946] kvm_vcpu_ioctl+0x730/0x1700 [ 110.026505][ T7946] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.026523][ T7946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.026544][ T7946] ? do_vfs_ioctl+0x226/0x13e0 [ 110.026568][ T7946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.026596][ T7946] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.026631][ T7946] ? __fget_files+0x215/0x3d0 [ 110.026647][ T7946] ? hook_file_ioctl_common+0x140/0x440 [ 110.026670][ T7946] ? selinux_file_ioctl+0x13b/0x290 [ 110.026692][ T7946] ? selinux_file_ioctl+0xb6/0x290 [ 110.026717][ T7946] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.026739][ T7946] __x64_sys_ioctl+0x18e/0x210 [ 110.026768][ T7946] do_syscall_64+0x115/0x870 [ 110.026788][ T7946] ? clear_bhb_loop+0x70/0xc0 [ 110.026808][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.026824][ T7946] RIP: 0033:0x7f053839e0d9 [ 110.026838][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.026852][ T7946] RSP: 002b:00007f0539230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.026869][ T7946] RAX: ffffffffffffffda RBX: 00007f0538625fa0 RCX: 00007f053839e0d9 [ 110.026881][ T7946] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 110.026891][ T7946] RBP: 00007f0539230090 R08: 0000000000000000 R09: 0000000000000000 [ 110.026901][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.026912][ T7946] R13: 00007f0538626038 R14: 00007f0538625fa0 R15: 00007ffcfc5379d8 [ 110.026936][ T7946] [ 110.027115][ T7946] syz.1.774: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 110.045870][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 110.048493][ T7946] ,cpuset= [ 110.087491][ T7950] FAULT_INJECTION: forcing a failure. [ 110.087491][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 110.090888][ T7946] / [ 110.092495][ T7950] CPU: 2 UID: 0 PID: 7950 Comm: syz.0.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.092520][ T7950] Tainted: [L]=SOFTLOCKUP [ 110.092525][ T7950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.092534][ T7950] Call Trace: [ 110.092540][ T7950] [ 110.092546][ T7950] dump_stack_lvl+0x100/0x190 [ 110.092574][ T7950] should_fail_ex.cold+0x5/0xa [ 110.092591][ T7950] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.092617][ T7950] should_failslab+0xc2/0x120 [ 110.092640][ T7950] kmem_cache_alloc_noprof+0x91/0x6a0 [ 110.092661][ T7950] ? skb_clone+0x190/0x400 [ 110.092686][ T7950] skb_clone+0x190/0x400 [ 110.092706][ T7950] netlink_deliver_tap+0xaed/0xcc0 [ 110.092728][ T7950] netlink_unicast+0x62b/0x850 [ 110.092748][ T7950] ? __pfx_netlink_unicast+0x10/0x10 [ 110.092764][ T7950] ? __pfx_sock_has_perm+0x10/0x10 [ 110.092789][ T7950] netlink_sendmsg+0x8b0/0xda0 [ 110.092810][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.092829][ T7950] ? selinux_socket_sendmsg+0x198/0x2f0 [ 110.092855][ T7950] ____sys_sendmsg+0xa4d/0xbe0 [ 110.092878][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.092897][ T7950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.092931][ T7950] ___sys_sendmsg+0x190/0x1e0 [ 110.092968][ T7950] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.092983][ T7950] ? __lock_acquire+0x49f/0x1a40 [ 110.093003][ T7950] ? get_pid_task+0x106/0x250 [ 110.093042][ T7950] __sys_sendmsg+0x160/0x210 [ 110.093062][ T7950] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.093094][ T7950] do_syscall_64+0x115/0x870 [ 110.093115][ T7950] ? clear_bhb_loop+0x70/0xc0 [ 110.093135][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.093151][ T7950] RIP: 0033:0x7f0928b9e0d9 [ 110.093165][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.093180][ T7950] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.093197][ T7950] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 110.093207][ T7950] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 110.093217][ T7950] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.093225][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.093233][ T7950] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 110.093255][ T7950] [ 110.120752][ T6541] usb 7-1: Using ep0 maxpacket: 16 [ 110.124104][ T5829] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 110.126503][ T6541] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.128719][ T7946] ,mems_allowed=0-1 [ 110.131020][ T6541] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.133938][ T7946] [ 110.135727][ T6541] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.137505][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.137531][ T7946] Tainted: [L]=SOFTLOCKUP [ 110.137537][ T7946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.137546][ T7946] Call Trace: [ 110.137553][ T7946] [ 110.137559][ T7946] dump_stack_lvl+0x100/0x190 [ 110.137585][ T7946] warn_alloc.cold+0x94/0xa8 [ 110.137616][ T7946] ? __pfx_warn_alloc+0x10/0x10 [ 110.137635][ T7946] ? __kasan_kmalloc+0x8a/0xb0 [ 110.137668][ T7946] ? __get_vm_area_node+0x208/0x330 [ 110.137697][ T7946] __vmalloc_node_range_noprof+0xccd/0x1630 [ 110.137720][ T7946] ? rcu_is_watching+0x12/0xc0 [ 110.137751][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.137776][ T7946] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 110.137806][ T7946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.137838][ T7946] ? trace_kmem_cache_alloc+0xdd/0x100 [ 110.137863][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.137880][ T7946] __vmalloc_node_noprof+0xad/0xf0 [ 110.137902][ T7946] ? vhost_task_create+0x1db/0x370 [ 110.137922][ T7946] copy_process+0x7fb/0x8030 [ 110.137961][ T7946] ? __pfx_copy_process+0x10/0x10 [ 110.137986][ T7946] ? __kasan_kmalloc+0xaa/0xb0 [ 110.138005][ T7946] ? lockdep_init_map_type+0x5c/0x250 [ 110.138027][ T7946] ? lockdep_init_map_type+0x5c/0x250 [ 110.138048][ T7946] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.138068][ T7946] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.138086][ T7946] vhost_task_create+0x1db/0x370 [ 110.138129][ T7946] ? __pfx_vhost_task_create+0x10/0x10 [ 110.138158][ T7946] ? __pfx_vhost_task_fn+0x10/0x10 [ 110.138178][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 110.138199][ T7946] ? kasan_quarantine_put+0x104/0x240 [ 110.138223][ T7946] kvm_mmu_post_init_vm+0x1b3/0x360 [ 110.138247][ T7946] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 110.138276][ T7946] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 110.138303][ T7946] kvm_vcpu_ioctl+0x730/0x1700 [ 110.138324][ T7946] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.138342][ T7946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.138363][ T7946] ? do_vfs_ioctl+0x226/0x13e0 [ 110.138387][ T7946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.138417][ T7946] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.138454][ T7946] ? __fget_files+0x215/0x3d0 [ 110.138470][ T7946] ? hook_file_ioctl_common+0x140/0x440 [ 110.138494][ T7946] ? selinux_file_ioctl+0x13b/0x290 [ 110.138516][ T7946] ? selinux_file_ioctl+0xb6/0x290 [ 110.138540][ T7946] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.138558][ T7946] __x64_sys_ioctl+0x18e/0x210 [ 110.138588][ T7946] do_syscall_64+0x115/0x870 [ 110.138611][ T7946] ? clear_bhb_loop+0x70/0xc0 [ 110.138630][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.138646][ T7946] RIP: 0033:0x7f053839e0d9 [ 110.138660][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.138674][ T7946] RSP: 002b:00007f0539230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.138690][ T7946] RAX: ffffffffffffffda RBX: 00007f0538625fa0 RCX: 00007f053839e0d9 [ 110.138700][ T7946] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 110.138709][ T7946] RBP: 00007f0539230090 R08: 0000000000000000 R09: 0000000000000000 [ 110.138719][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.138730][ T7946] R13: 00007f0538626038 R14: 00007f0538625fa0 R15: 00007ffcfc5379d8 [ 110.138756][ T7946] [ 110.138762][ T7946] Mem-Info: [ 110.142727][ T6541] usb 7-1: config 0 descriptor?? [ 110.146575][ T7946] active_anon:11004 inactive_anon:0 isolated_anon:0 [ 110.146575][ T7946] active_file:0 inactive_file:65385 isolated_file:0 [ 110.146575][ T7946] unevictable:1000 dirty:185 writeback:0 [ 110.146575][ T7946] slab_reclaimable:12006 slab_unreclaimable:69973 [ 110.146575][ T7946] mapped:26152 shmem:1560 pagetables:3666 [ 110.146575][ T7946] sec_pagetables:298 bounce:0 [ 110.146575][ T7946] kernel_misc_reclaimable:0 [ 110.146575][ T7946] free:440345 free_pcp:14721 free_cma:0 [ 110.280760][ T5829] usb 8-1: Using ep0 maxpacket: 16 [ 110.281582][ T7946] Node 0 active_anon:44124kB inactive_anon:0kB active_file:0kB inactive_file:243564kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104680kB dirty:740kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:5576kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.286257][ T5829] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.286989][ T7946] Node 1 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:17976kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9088kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.291548][ T5829] usb 8-1: config 0 has no interfaces? [ 110.292195][ T7946] Node 0 [ 110.303368][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.304724][ T7946] DMA free:14956kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.306526][ T5829] usb 8-1: Product: syz [ 110.308026][ T7946] lowmem_reserve[]: [ 110.310163][ T5829] usb 8-1: Manufacturer: syz [ 110.311894][ T7946] 0 1225 1225 [ 110.315068][ T5829] usb 8-1: SerialNumber: syz [ 110.317039][ T7946] 1225 [ 110.324239][ T5829] usb 8-1: config 0 descriptor?? [ 110.324615][ T7946] 1225 [ 110.351651][ T7955] FAULT_INJECTION: forcing a failure. [ 110.351651][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 110.352958][ T7946] [ 110.352966][ T7946] Node 0 DMA32 free:126604kB boost:0kB min:27792kB low:34740kB high:41688kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44124kB inactive_anon:0kB active_file:0kB inactive_file:243564kB unevictable:2000kB writepending:740kB zspages:0kB present:2080628kB managed:1255328kB mlocked:0kB bounce:0kB free_pcp:52740kB local_pcp:20812kB free_cma:0kB [ 110.353000][ T7946] lowmem_reserve[]: 0 0 0 0 0 [ 110.353023][ T7946] Node 1 Normal free:1619820kB boost:0kB min:39448kB low:49308kB high:59168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:17976kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6256kB local_pcp:48kB free_cma:0kB [ 110.355080][ T7955] CPU: 3 UID: 0 PID: 7955 Comm: syz.0.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.355105][ T7955] Tainted: [L]=SOFTLOCKUP [ 110.355110][ T7955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.355120][ T7955] Call Trace: [ 110.355127][ T7955] [ 110.355134][ T7955] dump_stack_lvl+0x100/0x190 [ 110.355161][ T7955] should_fail_ex.cold+0x5/0xa [ 110.355179][ T7955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.355222][ T7955] should_failslab+0xc2/0x120 [ 110.355244][ T7955] kmem_cache_alloc_noprof+0x91/0x6a0 [ 110.355266][ T7955] ? skb_clone+0x190/0x400 [ 110.355290][ T7955] skb_clone+0x190/0x400 [ 110.355311][ T7955] netlink_deliver_tap+0xaed/0xcc0 [ 110.355333][ T7955] netlink_unicast+0x62b/0x850 [ 110.355360][ T7955] ? __pfx_netlink_unicast+0x10/0x10 [ 110.355381][ T7955] netlink_sendmsg+0x8b0/0xda0 [ 110.355402][ T7955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.355421][ T7955] ? selinux_socket_sendmsg+0x198/0x2f0 [ 110.355449][ T7955] ____sys_sendmsg+0xa4d/0xbe0 [ 110.355472][ T7955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.355491][ T7955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.355525][ T7955] ___sys_sendmsg+0x190/0x1e0 [ 110.355543][ T7955] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.355558][ T7955] ? __lock_acquire+0x49f/0x1a40 [ 110.355578][ T7955] ? get_pid_task+0x106/0x250 [ 110.355617][ T7955] __sys_sendmsg+0x160/0x210 [ 110.355638][ T7955] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.355671][ T7955] do_syscall_64+0x115/0x870 [ 110.355691][ T7955] ? clear_bhb_loop+0x70/0xc0 [ 110.355712][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.355728][ T7955] RIP: 0033:0x7f0928b9e0d9 [ 110.355743][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.355757][ T7955] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.355773][ T7955] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 110.355784][ T7955] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.355793][ T7955] RBP: 00007f0929a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.355802][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.355811][ T7955] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 110.355832][ T7955] [ 110.557522][ T7946] lowmem_reserve[]: 0 0 0 0 0 [ 110.559188][ T7946] Node 0 DMA: 11*4kB (U) 10*8kB (U) 9*16kB (U) 9*32kB (U) 7*64kB (U) 9*128kB (U) 4*256kB (U) 7*512kB (U) 2*1024kB (U) 1*2048kB (U) 1*4096kB (M) = 14956kB [ 110.564405][ T7946] Node 0 DMA32: 373*4kB (UME) 677*8kB (UME) 198*16kB (UME) 177*32kB (UME) 99*64kB (UME) 62*128kB (UM) 52*256kB (UME) 46*512kB (UM) 28*1024kB (UME) 5*2048kB (ME) 5*4096kB (M) = 126268kB [ 110.570076][ T7946] Node 1 Normal: 257*4kB (UM) 261*8kB (UME) 252*16kB (UME) 246*32kB (UME) 227*64kB (UME) 224*128kB (UME) 202*256kB (UM) 191*512kB (UME) 181*1024kB (UME) 11*2048kB (UME) 294*4096kB (UM) = 1619820kB [ 110.576329][ T7946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.579267][ T7946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.582302][ T7946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.585382][ T7946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.588757][ T7946] 66941 total pagecache pages [ 110.590265][ T7946] 0 pages in swap cache [ 110.591726][ T7946] Free swap = 124996kB [ 110.593073][ T7946] Total swap = 124996kB [ 110.594390][ T7946] 1048443 pages RAM [ 110.595390][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.595604][ T7946] 0 pages HighMem/MovableOnly [ 110.595610][ T7946] 285300 pages reserved [ 110.595615][ T7946] 0 pages cma reserved [ 110.599108][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.637298][ T7957] misc userio: No port type given on /dev/userio [ 110.920094][ T7967] syzkaller0: entered promiscuous mode [ 110.929534][ T7967] syzkaller0: entered allmulticast mode [ 111.036962][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 111.043805][ T7970] FAULT_INJECTION: forcing a failure. [ 111.043805][ T7970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.047908][ T7970] CPU: 3 UID: 0 PID: 7970 Comm: syz.1.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.047926][ T7970] Tainted: [L]=SOFTLOCKUP [ 111.047930][ T7970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.047937][ T7970] Call Trace: [ 111.047942][ T7970] [ 111.047950][ T7970] dump_stack_lvl+0x100/0x190 [ 111.047970][ T7970] should_fail_ex.cold+0x5/0xa [ 111.047986][ T7970] _copy_from_user+0x2e/0xd0 [ 111.048003][ T7970] memdup_user+0x6b/0xe0 [ 111.048037][ T7970] strndup_user+0x78/0xe0 [ 111.048051][ T7970] __x64_sys_mount+0x17f/0x310 [ 111.048067][ T7970] ? __pfx___x64_sys_mount+0x10/0x10 [ 111.048086][ T7970] do_syscall_64+0x115/0x870 [ 111.048102][ T7970] ? clear_bhb_loop+0x70/0xc0 [ 111.048117][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.048128][ T7970] RIP: 0033:0x7f053839e0d9 [ 111.048138][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.048150][ T7970] RSP: 002b:00007f0539230028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.048162][ T7970] RAX: ffffffffffffffda RBX: 00007f0538625fa0 RCX: 00007f053839e0d9 [ 111.048169][ T7970] RDX: 00002000000000e0 RSI: 0000200000000000 RDI: 0000200000000200 [ 111.048176][ T7970] RBP: 00007f0539230090 R08: 0000200000000140 R09: 0000000000000000 [ 111.048183][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.048189][ T7970] R13: 00007f0538626038 R14: 00007f0538625fa0 R15: 00007ffcfc5379d8 [ 111.048203][ T7970] [ 111.103583][ T6541] usbhid 7-1:0.0: can't add hid device: -71 [ 111.106110][ T6541] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 111.111918][ T6541] usb 7-1: USB disconnect, device number 35 [ 111.158071][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 111.163701][ T7975] kAFS: No cell specified [ 111.385058][ T42] audit: type=1400 audit(1786476796.992:597): avc: denied { search } for pid=7985 comm="syz.0.790" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.392570][ T42] audit: type=1400 audit(1786476796.992:598): avc: denied { read } for pid=7985 comm="syz.0.790" name="set_event" dev="tracefs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.430750][ T5829] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 111.450600][ T7986] ------------[ cut here ]------------ [ 111.453128][ T7986] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 111.455435][ T7986] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#2: syz.0.790/7986 [ 111.458929][ T7986] Modules linked in: [ 111.460572][ T7986] CPU: 2 UID: 0 PID: 7986 Comm: syz.0.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.464082][ T7986] Tainted: [L]=SOFTLOCKUP [ 111.465539][ T7986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.469609][ T7986] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 111.471749][ T7986] Code: 89 c5 89 c6 e8 f7 39 6a f8 45 85 ed 0f 85 be fb ff ff e8 79 3f 6a f8 48 8d 3d 92 50 90 07 ba 48 00 00 00 48 c7 c6 e0 35 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 3f 6a f8 48 8d bd 00 08 00 00 [ 111.477863][ T7986] RSP: 0018:ffffc90004657a80 EFLAGS: 00010287 [ 111.479797][ T7986] RAX: 000000000000023a RBX: ffff88802ad5a000 RCX: ffffc900076f2000 [ 111.482514][ T7986] RDX: 0000000000000048 RSI: ffffffff8d1835e0 RDI: ffffffff913084a0 [ 111.485034][ T7986] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 111.487576][ T7986] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 111.490068][ T7986] R13: 0000000000000000 R14: ffff88802df50568 R15: ffffc90004657be0 [ 111.492724][ T7986] FS: 00007f0929a4f6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 111.495869][ T7986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.497976][ T7986] CR2: 0000200000002000 CR3: 000000002a51d000 CR4: 0000000000352ef0 [ 111.500567][ T7986] Call Trace: [ 111.501716][ T7986] [ 111.502692][ T7986] io_register_zcrx+0xe94/0x1d30 [ 111.503327][ T42] audit: type=1400 audit(1786476797.112:599): avc: denied { ioctl } for pid=7985 comm="syz.0.790" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 111.504275][ T7986] ? __pfx_io_register_zcrx+0x10/0x10 [ 111.504318][ T7986] ? __pfx___futex_wait+0x10/0x10 [ 111.516750][ T7986] ? lock_acquire+0x1b9/0x370 [ 111.518277][ T7986] ? rcu_is_watching+0x12/0xc0 [ 111.519807][ T7986] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 111.521876][ T7986] ? __fget_files+0x215/0x3d0 [ 111.523405][ T7986] ? __fget_files+0x215/0x3d0 [ 111.524943][ T7986] __do_sys_io_uring_register+0x1193/0x1bc0 [ 111.526871][ T7986] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 111.528836][ T7986] ? __x64_sys_futex+0x34f/0x4d0 [ 111.530464][ T7986] ? __x64_sys_futex+0x358/0x4d0 [ 111.532180][ T7986] ? xfd_validate_state+0x129/0x190 [ 111.533889][ T7986] do_syscall_64+0x115/0x870 [ 111.535412][ T7986] ? clear_bhb_loop+0x70/0xc0 [ 111.536912][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.538758][ T7986] RIP: 0033:0x7f0928b9e0d9 [ 111.540186][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.546888][ T7986] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 111.549625][ T7986] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 111.552628][ T7986] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000008 [ 111.555381][ T7986] RBP: 00007f0928c35024 R08: 0000000000000000 R09: 0000000000000000 [ 111.557911][ T7986] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 111.560330][ T7986] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 111.563133][ T7986] [ 111.564143][ T7986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.566440][ T7986] CPU: 2 UID: 0 PID: 7986 Comm: syz.0.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.569774][ T7986] Tainted: [L]=SOFTLOCKUP [ 111.571279][ T7986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.574965][ T7986] Call Trace: [ 111.576213][ T7986] [ 111.577280][ T7986] dump_stack_lvl+0x100/0x190 [ 111.578901][ T7986] vpanic+0x552/0x970 [ 111.580388][ T7986] ? __pfx_vpanic+0x10/0x10 [ 111.582055][ T7986] panic+0xd1/0xe0 [ 111.583351][ T7986] ? __pfx_panic+0x10/0x10 [ 111.585008][ T7986] check_panic_on_warn.cold+0x19/0x34 [ 111.586988][ T7986] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 111.589041][ T7986] __warn.cold+0x191/0x318 [ 111.590588][ T7986] __report_bug+0x30f/0x440 [ 111.592206][ T7986] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 111.594309][ T7986] ? __pfx___report_bug+0x10/0x10 [ 111.596180][ T7986] ? find_held_lock+0x2b/0x80 [ 111.597851][ T7986] ? mark_held_locks+0x40/0x70 [ 111.599585][ T7986] report_bug_entry+0xe1/0x290 [ 111.601363][ T7986] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 111.603487][ T7986] handle_bug+0x1cd/0x2a0 [ 111.604981][ T7986] exc_invalid_op+0x17/0x50 [ 111.606634][ T7986] asm_exc_invalid_op+0x1a/0x20 [ 111.608426][ T7986] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 111.610749][ T7986] Code: 89 c5 89 c6 e8 f7 39 6a f8 45 85 ed 0f 85 be fb ff ff e8 79 3f 6a f8 48 8d 3d 92 50 90 07 ba 48 00 00 00 48 c7 c6 e0 35 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 3f 6a f8 48 8d bd 00 08 00 00 [ 111.617555][ T7986] RSP: 0018:ffffc90004657a80 EFLAGS: 00010287 [ 111.619784][ T7986] RAX: 000000000000023a RBX: ffff88802ad5a000 RCX: ffffc900076f2000 [ 111.622691][ T7986] RDX: 0000000000000048 RSI: ffffffff8d1835e0 RDI: ffffffff913084a0 [ 111.625564][ T7986] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 111.628435][ T7986] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 111.631316][ T7986] R13: 0000000000000000 R14: ffff88802df50568 R15: ffffc90004657be0 [ 111.634253][ T7986] io_register_zcrx+0xe94/0x1d30 [ 111.636084][ T7986] ? __pfx_io_register_zcrx+0x10/0x10 [ 111.638048][ T7986] ? __pfx___futex_wait+0x10/0x10 [ 111.639908][ T7986] ? lock_acquire+0x1b9/0x370 [ 111.641651][ T7986] ? rcu_is_watching+0x12/0xc0 [ 111.643459][ T7986] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 111.645624][ T7986] ? __fget_files+0x215/0x3d0 [ 111.647365][ T7986] ? __fget_files+0x215/0x3d0 [ 111.649113][ T7986] __do_sys_io_uring_register+0x1193/0x1bc0 [ 111.651301][ T7986] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 111.653595][ T7986] ? __x64_sys_futex+0x34f/0x4d0 [ 111.655438][ T7986] ? __x64_sys_futex+0x358/0x4d0 [ 111.657270][ T7986] ? xfd_validate_state+0x129/0x190 [ 111.659210][ T7986] do_syscall_64+0x115/0x870 [ 111.660938][ T7986] ? clear_bhb_loop+0x70/0xc0 [ 111.662656][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.664781][ T7986] RIP: 0033:0x7f0928b9e0d9 [ 111.666445][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.673278][ T7986] RSP: 002b:00007f0929a4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 111.676042][ T7986] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 111.678527][ T7986] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000008 [ 111.680998][ T7986] RBP: 00007f0928c35024 R08: 0000000000000000 R09: 0000000000000000 [ 111.683495][ T7986] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 111.685966][ T7986] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007fff9e5559d8 [ 111.688456][ T7986] [ 111.690200][ T7986] Kernel Offset: disabled [ 111.691582][ T7986] Rebooting in 86400 seconds..