last executing test programs: 7m57.912523251s ago: executing program 0 (id=1657): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000013c845a80b00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000500210000000000"], 0x28}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x583, 0x3ff}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe5d, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x112) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 7m57.758117574s ago: executing program 0 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x7000000, 0x0, 0x2004d808}, 0x0) 7m57.488139577s ago: executing program 0 (id=1661): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/108, &(0x7f00000001c0)=0x6c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m57.409902568s ago: executing program 0 (id=1662): syz_clone(0x400a200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x210003, 0x0, 0x210ca8, 0x200000a00000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x8, 0x15702a, 0x1f09a7}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r5, &(0x7f0000000240)='./file0\x00') r6 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m57.256111615s ago: executing program 0 (id=1664): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x12, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0x2, 0x7, 0x6, 0xf97, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40000000}, 0x10}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) personality(0xfe47fef9f5ff7379) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SLAVE(r1, 0x703, 0x60) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4000000000006, 0x40000) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004851}, 0x80) close(r3) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ppoll(&(0x7f0000000100)=[{r4, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x3c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xf, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) 7m56.94865118s ago: executing program 0 (id=1665): r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000000)=ANY=[], 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/28], 0x0) 7m56.835685592s ago: executing program 32 (id=1665): r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000000)=ANY=[], 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/28], 0x0) 5m11.719347901s ago: executing program 3 (id=3145): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB="6800000000006d57a8fe60f628885b0d11000008000000000000002000000000"], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0xfffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8801) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 5m11.638478783s ago: executing program 3 (id=3146): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x2, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0) 5m11.638179603s ago: executing program 3 (id=3147): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) 5m11.606348036s ago: executing program 3 (id=3149): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m11.489480278s ago: executing program 3 (id=3150): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m10.667147574s ago: executing program 3 (id=3155): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB="6800000000006d57a8fe60f628885b0d11000008000000000000002000000000"], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0xfffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8801) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 4m55.419267032s ago: executing program 33 (id=3155): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB="6800000000006d57a8fe60f628885b0d11000008000000000000002000000000"], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0xfffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8801) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 52.178742635s ago: executing program 2 (id=6567): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 52.106203404s ago: executing program 2 (id=6569): openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e", @ANYRES32=r1], 0x22) 51.927620303s ago: executing program 2 (id=6573): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000280)) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c79"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 51.847393434s ago: executing program 2 (id=6574): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x712, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000608e0000000000000000040000009034bfe6f32211a92d14d108750f7574aebc09f0970ef4764272eb2c0021e18bdfdc2544ac223380b0106d378addf92c5a18c374e0b2ff5d15494cfb038f8cc108ff469cb21e6c7dc679dc525ded1b06f261eb803bba9ce63ddece66a605ca991ff2c19a72eb742ff51d76357aee44cab87a89dc728000"/149, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000001c00)=r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r4) r5 = socket$packet(0x11, 0x2, 0x300) unshare(0x8040480) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0xff08) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd23, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x20, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) 51.737742762s ago: executing program 2 (id=6576): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}], 0x1}}], 0x4, 0x4000000) 51.407437659s ago: executing program 2 (id=6582): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000280)) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c79"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 51.270536318s ago: executing program 34 (id=6582): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000280)) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c79"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 7.234512684s ago: executing program 1 (id=7014): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000009, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 7.096963982s ago: executing program 1 (id=7017): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000380)="0efb18e617048dae506fb6119eb0536e7984081783e7584cd5d8d27033ed437c6246b2b94a22bd62d589a8e3886d9977523fd3e8fd174d51cd86a159d2ef88ab0632d7eb46c792f365df9d56fdd2299f44da364e2ef035705a084bbf2d3fdbeea8f05b35502c909a69f9be0405607e6eed6bcfb3acbf182ba4a2016e207bdacb6f240adf181a764f79d7dd3c93fc3e74f5c0985587deb47eec917dab82f4a194a186cb5515e0133dbdea3633abe499b978e798c2a5a64913d677d3b99927638735b214566ae0f4ca2ec80d1dd27f3249f9f6dd0b7a5ba70c0e7ad0be90ef56c6dc2ef3f445cae39675ff73fffb3aaccbb5f823bd80d94e112b970b266f9e380432314c39fe589e3174bc10b87f3e8f221d46ee42a2544e4b0c26e947fe2667555001e5beefe950450ee8d41080e6fbba3effec8484de4a6f1314e5aaf19d40296a986bc0500f0d731d8bd1f6fa147ba791d1eff8a5d68ece936cc6336ede0e8686c34d3e9f8d12249ef52a61171be50635d5aaf7bc6140128b65220f88aac07fce9ce944f875b7255cbfd1e401a32217573adf2304c47e7c8c9bacfdc2b3ba7b9450c8bb8b44c4b39292f09240d6d3d47f7d421286c1e0e78cde078f74f3c2b53544ca683aa1a8", 0x1c7}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.784482909s ago: executing program 6 (id=7020): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b", 0x73}, {&(0x7f0000000380)="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", 0x320}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.102905116s ago: executing program 6 (id=7022): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file1', [], 0xa, "c638a17740a3b042087d3843175d0c139c71ab5c85ba84d38033e800"}, 0x27) (fail_nth: 4) 4.102072026s ago: executing program 1 (id=7024): io_uring_setup(0x2a8c, &(0x7f0000000240)={0x0, 0x86a1, 0x80, 0x3, 0x24}) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xa, 0x3, 0x10, @private1, @empty, 0x700, 0x10, 0x2e0, 0x8}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4622, @loopback}, {0x2, 0x200, @local}, {0x2, 0x0, @private=0xa010102}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x8800, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) sysfs$2(0x2, 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f00000002c0), 0x2, 0x0) sendfile(r11, r11, 0x0, 0x8000002) 3.957011435s ago: executing program 6 (id=7026): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x3c, 0x4000880) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 3.95625546s ago: executing program 4 (id=7028): r0 = syz_clone(0x1000000, &(0x7f00000000c0)="f27f02afe639792e7104a987f1ca", 0xe, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="e055f0d8a9e416fdbac4a45f718615eda09b4d5506792a0b4d55a58afc3927fcb6835d37d5314e6b20f9d528e5abd0b84eb98787d73aa4e17974dc8aaaafd0247e27d346a9872421a4") prlimit64(r0, 0x9, &(0x7f0000000240)={0x40000, 0x57}, 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setrlimit(0x6, &(0x7f0000000080)={0x5, 0x9}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0xc01) 3.747660575s ago: executing program 5 (id=7031): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/108, &(0x7f00000001c0)=0x6c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 3.40797929s ago: executing program 5 (id=7032): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x141a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xffffffff, @private0, 0xfffffffe}]}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0414"], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000012620400200018800b000100697036746e6c00001000028005000900040000000400130008000400000500405165143427f06966d12ea9573d0089380a6d1b9de89ff7620d5db3e6fc39f4de751f8e0acd4e7926df69f09cd7bd74360d8be21386c55a1a1eaa57043d135e4b232c79d29ae625184ee3a5347b74c8383fe6c75a6f7245639558a1c78085bf15b5ac916fc5c4ab7d5120d6b8ce3511847a4abf44969e9f0facb696b98b3b495bf3fe0c40e4d11889"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.328006736s ago: executing program 5 (id=7033): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0xf15cf2e2a005dc3f}, 0x40000) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 3.19813003s ago: executing program 6 (id=7034): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e6", 0x6f}, {&(0x7f0000000380)="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", 0x392}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.017678966s ago: executing program 4 (id=7035): r0 = gettid() r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2, 0xb, 0x0, 0x9, 0x1e, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x17, 0x18, 0x4, 0x80, 0xac, "aec8c029f5838e76cf9a654230fa6a865b5eab3317d6f424e0e92eefba003b062e822cc09196025ddb6aad665e7f7e39f7c503750c7656240bd681c59ef2c32af1e138b51005b61ce01bbecad4e1e2009a8f86c6c92a38aebc172934aa27dc8c2bde8457b67b71c2c619db6fba2170c2e87ac614cb3c3e5d5f8692754fe833fac2dcc2a78b6081f6c7b003d781d0081ee360ff425775652e188311309d7f5bce10f35b75c6a198874169cb2e"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x6}}}]}, 0xf0}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x2}, {0x0, 0x2}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30]}}, 0x0, 0x4b, 0x0, 0x1, 0x10001}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) sched_setparam(r0, &(0x7f0000000200)=0x5) r5 = fsopen(0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xb, 0xffffffff9080edc4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x4, 0x0, 0x800, 0x200000000003, 0x0, 0x96, {0x6, 0xfffffffffffffffd, 0x5, 0x10000000000008, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, 0x0, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './config/usb_gadget/g1/functions/gser.usb0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.146382218s ago: executing program 1 (id=7036): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fcffffff000000000a00000008000300", @ANYRES32=r1, @ANYBLOB="1000508004000a00050002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.838885897s ago: executing program 4 (id=7037): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d866", 0x3a}, {&(0x7f0000000380)="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", 0x399}], 0x2}, 0x8841) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 225.236421ms ago: executing program 1 (id=7038): syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) (fail_nth: 4) 224.873095ms ago: executing program 6 (id=7039): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf250400000004001980"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x100000500) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x5, 0xcef, 0x5, 0x2140, r1, 0xbe, '\x00', r3, r4, 0x0, 0x5, 0x2}, 0x50) 223.911305ms ago: executing program 4 (id=7040): syz_emit_ethernet(0x620, &(0x7f00000004c0)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x5ea, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [{0x1f, 0xb8, "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"}]}}}}}}, 0x0) 223.174948ms ago: executing program 5 (id=7041): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000380)="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", 0x1c7}], 0x1}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 137.512615ms ago: executing program 6 (id=7042): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x3c, 0x4000880) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 113.362094ms ago: executing program 1 (id=7043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_PIT2(r1, 0x4020aeb2, 0x0) 83.524563ms ago: executing program 5 (id=7044): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x280, 0x60) 81.072313ms ago: executing program 4 (id=7045): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb0\x00', 0x1ff) 3.182709ms ago: executing program 5 (id=7046): syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x8041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0x5c07, {0x6, 0x1}, {0x17, 0x2}, @rumble={0x81, 0xd}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\\\xbf\x9e\xfb\x88\xfb\x94G\x0f\xf6\xce\f\xab_\x80g\x81\xdf\x84\x88\x8dw\x9e\xb5g,\xaa\v\xe1\xc6\x13\xabyC*\xb2\x966\xb8\xae\x0e\xb8\xa4\xa2\x95\xa1#\xe8\xa9\xf0f\xb17\xec\xcf\x93\n\xe9\x12#\x8a\x80\xd9\x06\f[\xa0!\xd1v\xc8U\x91\x00\x94\xe6\x18\xbf8T\xe9(_\xba\x9a\xab\xb0\xb9~|\xd3\xbb\r\xf2\x1cX\x87\xf0o\xac\xa4\xc5/\xce\xd5\xc5\xf9T\x03\xe7\b\xee,\a%\xa3\xa5\xa0*\x11\xa8\xf4u\xfd\xbd\xb0\f#\x93Q\x9d\xe7\xf5O\xab\x96\xa9\xd4` \xb3\x9e*h\xfa\x1aO\xf3sq\xed\x9al\xdc|^\xed\x93}\xf9\xc5/\"', &(0x7f0000000080)='\'V\x00']}) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772264656661756c7420747275737465643a77797a20303030303030303030303030303030303032303300895120ff86509e741a311f1589c912d8eaa233f3124377b25532f954f754a7ec986f88ad72271ec4ca51f227ba7d5d66a46925879bc6789c1e7534ff214f7bd07644f5556e0b6736582484b3795183f504f5b2ab094b5fe48802cd089d0a5797bbcb58802f9700"/160], 0x2d, 0xfffffffffffffff9) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r1, 0x6801, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 0s ago: executing program 4 (id=7047): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="cc665fc8b2ab37e31636fa1ec287521a3ec292054d26e4c301cce96ebd1d25e55107674570387b565cc6c7aefe2b1a693778c1760cf6c6a5024f5f65833a008b9cd0142b89e84c02a0bc5c5e215d58941468c4ebc76b245251d4bab7e3b87252c785d8133aabaae7a5df5a13452643e785f4ca53822c015ebe49b322c8389833728ba81f261e47bd700dcfffdec92b5240d5b92c03f1b4d768601f392ff928ca7625b37ad72b9d5391bfba09ae4ae741d5eb594024dfeccae282185cbd"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x114, 0x29, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x103, 0x4e, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x5}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='vcan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @dev}, &(0x7f0000000140)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', r3, 0x98, 0x40, 0x100, 0x2, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x65, 0x0, 0x4, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0x1b, [@empty, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp={0x44, 0x18, 0xf5, 0x0, 0x6, [0x6, 0x5, 0x8001, 0x5, 0x9]}, @ssrr={0x89, 0x1f, 0x97, [@local, @broadcast, @remote, @empty, @remote, @local, @empty]}, @timestamp={0x44, 0xc, 0x79, 0x0, 0x2, [0x68, 0x8]}, @lsrr={0x83, 0x3, 0x70}]}}}}}) syz_emit_ethernet(0x2ba, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x5, 0x6, "7f2ee6", 0x27c, 0xff, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, {[@srh={0x3b, 0x6, 0x4, 0x3, 0x9, 0x40, 0x6, [@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x5e, 0x4, '\x00', [@enc_lim, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @routing={0x1d, 0xc, 0x2, 0xff, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}]}, @hopopts={0x2f, 0x10, '\x00', [@generic={0x3, 0x6e, "6a1cb8fc51ed76313ffc71e585e92064ba375ca139776ddf1bc452a67a701104e2383c3d3850ad65c70adabb07059de6f1a11019324d0976be9799fd453351dd1fc62603fbc783a29e6715fa6cb10ab5fcc66c776682e7d958f72476689f2faebb6d508db75f0d0460d5451d158f"}, @hao={0xc9, 0x10, @private1}]}, @dstopts={0x88, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @pad1]}, @routing={0x3b, 0x2, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}]}], "5faf694ef7a498d4129645e593cf2c1be552abc3d4515f02749045b8f7bd9b6bc55110201a789ff8383e088ac02bdd4d7550346d0a0b7c7b871f26be2ba38c89999864cee0e9d1c228a4d90b3fe98bb7d0f9d9dc055b8da67ddf43a949c2b340aa991a4a1659aaf403edaa3f40d475d7a98dc16ea773c98b027bddb348fd2b5c342f0bd8e695d99175b57b5998341960f26a784bbbb796c22bd9015c456ee430982d355fd545946d5b84b81b4cda83ceb0f2c027584bc930cc7aad534b932ed6f255fc3e664398e6d82eae0178b71468cba4427cd472f516e444184870d817512fcd65afe76440250467772c2f152dfdf50d9218"}}}}}, &(0x7f00000006c0)={0x1, 0x4, [0xe4f, 0x4a3, 0x84a, 0x50d]}) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x70/0xc0 [ 741.500137][T24889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.500156][T24889] RIP: 0033:0x7f56dbf9e0d9 [ 741.500173][T24889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.500190][T24889] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 741.500209][T24889] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 741.500220][T24889] RDX: 0000000000000003 RSI: 0000200000000130 RDI: 0000000000000003 [ 741.500231][T24889] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 741.500242][T24889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.500253][T24889] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 741.500279][T24889] [ 741.656348][T24895] FAULT_INJECTION: forcing a failure. [ 741.656348][T24895] name failslab, interval 1, probability 0, space 0, times 0 [ 741.661536][T24895] CPU: 0 UID: 0 PID: 24895 Comm: syz.4.6639 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.661565][T24895] Tainted: [L]=SOFTLOCKUP [ 741.661572][T24895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 741.661582][T24895] Call Trace: [ 741.661591][T24895] [ 741.661605][T24895] dump_stack_lvl+0x100/0x190 [ 741.661648][T24895] should_fail_ex.cold+0x5/0xa [ 741.661675][T24895] should_failslab+0xc2/0x120 [ 741.661714][T24895] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 741.661737][T24895] ? __alloc_skb+0x5b7/0x710 [ 741.661759][T24895] ? __alloc_skb+0x140/0x710 [ 741.661784][T24895] __alloc_skb+0x140/0x710 [ 741.661804][T24895] ? __alloc_skb+0x5b7/0x710 [ 741.661824][T24895] ? __pfx___alloc_skb+0x10/0x10 [ 741.661848][T24895] ? find_held_lock+0x2b/0x80 [ 741.661878][T24895] sock_wmalloc+0xd4/0x120 [ 741.661900][T24895] packet_sendmsg_spkt+0x9e3/0x1490 [ 741.661935][T24895] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 741.661961][T24895] ? selinux_socket_sendmsg+0x198/0x2f0 [ 741.661992][T24895] __sys_sendto+0x48b/0x4e0 [ 741.662012][T24895] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 741.662038][T24895] ? __pfx___sys_sendto+0x10/0x10 [ 741.662066][T24895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.662101][T24895] ? ksys_write+0x1ac/0x250 [ 741.662118][T24895] ? __pfx_ksys_write+0x10/0x10 [ 741.662138][T24895] __x64_sys_sendto+0xe0/0x1c0 [ 741.662159][T24895] ? do_syscall_64+0x90/0x870 [ 741.662182][T24895] ? lockdep_hardirqs_on+0x78/0x100 [ 741.662205][T24895] do_syscall_64+0x115/0x870 [ 741.662227][T24895] ? clear_bhb_loop+0x70/0xc0 [ 741.662249][T24895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.662266][T24895] RIP: 0033:0x7ff87019e0d9 [ 741.662284][T24895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.662301][T24895] RSP: 002b:00007ff871133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 741.662319][T24895] RAX: ffffffffffffffda RBX: 00007ff870425fa0 RCX: 00007ff87019e0d9 [ 741.662332][T24895] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000003 [ 741.662343][T24895] RBP: 00007ff871133090 R08: 0000200000000040 R09: 0000000000000010 [ 741.662354][T24895] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 741.662365][T24895] R13: 00007ff870426038 R14: 00007ff870425fa0 R15: 00007fffcabe9848 [ 741.662390][T24895] [ 741.852224][T24899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 741.853173][ T40] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 742.014852][ T40] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 742.021087][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 742.027556][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 742.032277][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.040861][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 742.052776][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 742.062689][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 742.071883][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 742.076307][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6645'. [ 742.086015][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.096300][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 742.100532][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6646'. [ 742.104630][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 742.110607][T24914] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 742.110849][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 742.117404][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 742.121936][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.129946][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 742.134761][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 742.142202][ T40] usb 6-1: string descriptor 0 read error: -22 [ 742.146131][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.160718][ T40] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 742.262782][T24916] fuse: Unknown parameter '0x0000000000000003' [ 742.421697][ T57] usb 6-1: USB disconnect, device number 91 [ 742.688579][T24931] fuse: Bad value for 'fd' [ 742.703040][ T5749] Bluetooth: hci0: command tx timeout [ 742.987820][T24952] fuse: Bad value for 'fd' [ 743.119204][T24954] kvm: kvm [24953]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 743.171047][ T57] usb 10-1: USB disconnect, device number 26 [ 743.486623][T24970] bridge0: port 3(syz_tun) entered blocking state [ 743.489117][T24970] bridge0: port 3(syz_tun) entered disabled state [ 743.491766][T24970] syz_tun: entered allmulticast mode [ 743.498032][T24970] syz_tun: entered promiscuous mode [ 743.500872][T24970] bridge0: port 3(syz_tun) entered blocking state [ 743.503503][T24970] bridge0: port 3(syz_tun) entered forwarding state [ 743.634026][T24962] FAULT_INJECTION: forcing a failure. [ 743.634026][T24962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.642791][T24962] CPU: 1 UID: 0 PID: 24962 Comm: syz.5.6664 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.642844][T24962] Tainted: [L]=SOFTLOCKUP [ 743.642851][T24962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 743.642863][T24962] Call Trace: [ 743.642872][T24962] [ 743.642882][T24962] dump_stack_lvl+0x100/0x190 [ 743.642913][T24962] should_fail_ex.cold+0x5/0xa [ 743.642938][T24962] _copy_to_user+0x32/0xd0 [ 743.642965][T24962] simple_read_from_buffer+0xcb/0x170 [ 743.642989][T24962] proc_fail_nth_read+0x1af/0x230 [ 743.643020][T24962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.643050][T24962] ? rw_verify_area+0xce/0x6d0 [ 743.643075][T24962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.643104][T24962] vfs_read+0x1e4/0xb40 [ 743.643135][T24962] ? __pfx_vfs_read+0x10/0x10 [ 743.643161][T24962] ? __fget_files+0x215/0x3d0 [ 743.643187][T24962] ? __fget_files+0x21f/0x3d0 [ 743.643213][T24962] ksys_read+0x12a/0x250 [ 743.643229][T24962] ? __pfx_ksys_read+0x10/0x10 [ 743.643249][T24962] do_syscall_64+0x115/0x870 [ 743.643271][T24962] ? clear_bhb_loop+0x70/0xc0 [ 743.643292][T24962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.643309][T24962] RIP: 0033:0x7fc434f5e90e [ 743.643324][T24962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 743.643340][T24962] RSP: 002b:00007fc435d7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 743.643358][T24962] RAX: ffffffffffffffda RBX: 00007fc435d7f6c0 RCX: 00007fc434f5e90e [ 743.643373][T24962] RDX: 000000000000000f RSI: 00007fc435d7f0a0 RDI: 0000000000000003 [ 743.643384][T24962] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 743.643394][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.643405][T24962] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 743.643437][T24962] [ 743.748113][T24981] FAULT_INJECTION: forcing a failure. [ 743.748113][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.753479][T24981] CPU: 3 UID: 0 PID: 24981 Comm: syz.6.6670 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.753512][T24981] Tainted: [L]=SOFTLOCKUP [ 743.753519][T24981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 743.753528][T24981] Call Trace: [ 743.753536][T24981] [ 743.753545][T24981] dump_stack_lvl+0x100/0x190 [ 743.753579][T24981] should_fail_ex.cold+0x5/0xa [ 743.753601][T24981] _copy_to_user+0x32/0xd0 [ 743.753628][T24981] simple_read_from_buffer+0xcb/0x170 [ 743.753652][T24981] proc_fail_nth_read+0x1af/0x230 [ 743.753683][T24981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.753716][T24981] ? rw_verify_area+0xce/0x6d0 [ 743.753740][T24981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.753768][T24981] vfs_read+0x1e4/0xb40 [ 743.753805][T24981] ? __pfx_vfs_read+0x10/0x10 [ 743.753830][T24981] ? __fget_files+0x215/0x3d0 [ 743.753857][T24981] ? __fget_files+0x21f/0x3d0 [ 743.753883][T24981] ksys_read+0x12a/0x250 [ 743.753903][T24981] ? __pfx_ksys_read+0x10/0x10 [ 743.753929][T24981] do_syscall_64+0x115/0x870 [ 743.753954][T24981] ? clear_bhb_loop+0x70/0xc0 [ 743.753977][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.754003][T24981] RIP: 0033:0x7f002e95e90e [ 743.754018][T24981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 743.754036][T24981] RSP: 002b:00007f002f929fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 743.754057][T24981] RAX: ffffffffffffffda RBX: 00007f002f92a6c0 RCX: 00007f002e95e90e [ 743.754070][T24981] RDX: 000000000000000f RSI: 00007f002f92a0a0 RDI: 0000000000000005 [ 743.754083][T24981] RBP: 00007f002f92a090 R08: 0000000000000000 R09: 0000000000000000 [ 743.754096][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.754108][T24981] R13: 00007f002ec26128 R14: 00007f002ec26090 R15: 00007ffcf2426978 [ 743.754136][T24981] [ 743.956593][T24997] FAULT_INJECTION: forcing a failure. [ 743.956593][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.968127][T24997] CPU: 2 UID: 0 PID: 24997 Comm: syz.5.6678 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.968158][T24997] Tainted: [L]=SOFTLOCKUP [ 743.968165][T24997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 743.968176][T24997] Call Trace: [ 743.968182][T24997] [ 743.968190][T24997] dump_stack_lvl+0x100/0x190 [ 743.968238][T24997] should_fail_ex.cold+0x5/0xa [ 743.968263][T24997] _copy_to_iter+0x1f3/0x1720 [ 743.968290][T24997] ? __mutex_unlock_slowpath+0x35d/0x930 [ 743.968317][T24997] ? __pfx__copy_to_iter+0x10/0x10 [ 743.968341][T24997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.968371][T24997] ? kernfs_put_active+0x93/0xe0 [ 743.968399][T24997] seq_read_iter+0xdab/0x1270 [ 743.968430][T24997] kernfs_fop_read_iter+0x46c/0x610 [ 743.968457][T24997] ? rw_verify_area+0xce/0x6d0 [ 743.968483][T24997] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 743.968511][T24997] vfs_read+0x82e/0xb40 [ 743.968522][T25000] FAULT_INJECTION: forcing a failure. [ 743.968522][T25000] name failslab, interval 1, probability 0, space 0, times 0 [ 743.968542][T24997] ? __pfx_vfs_read+0x10/0x10 [ 743.968586][T24997] ksys_read+0x12a/0x250 [ 743.968603][T24997] ? __pfx_ksys_read+0x10/0x10 [ 743.968627][T24997] do_syscall_64+0x115/0x870 [ 743.968650][T24997] ? clear_bhb_loop+0x70/0xc0 [ 743.968673][T24997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.968691][T24997] RIP: 0033:0x7fc434f9e0d9 [ 743.968708][T24997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.968725][T24997] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 743.968744][T24997] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 743.968756][T24997] RDX: 0000000000002020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 743.968770][T24997] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 743.968780][T24997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.968791][T24997] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 743.968817][T24997] [ 744.091987][T25002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6680'. [ 744.093189][T25000] CPU: 0 UID: 0 PID: 25000 Comm: syz.6.6679 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.093217][T25000] Tainted: [L]=SOFTLOCKUP [ 744.093225][T25000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.093236][T25000] Call Trace: [ 744.093243][T25000] [ 744.093251][T25000] dump_stack_lvl+0x100/0x190 [ 744.093283][T25000] should_fail_ex.cold+0x5/0xa [ 744.093304][T25000] ? __lock_acquire+0x49f/0x1a40 [ 744.093332][T25000] should_failslab+0xc2/0x120 [ 744.093358][T25000] kmem_cache_alloc_noprof+0x91/0x6a0 [ 744.093383][T25000] ? dst_alloc+0x99/0x1a0 [ 744.093409][T25000] dst_alloc+0x99/0x1a0 [ 744.093429][T25000] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 744.093465][T25000] rt_dst_alloc+0x35/0x3a0 [ 744.093496][T25000] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 744.093530][T25000] ip_route_output_key_hash+0x118/0x2b0 [ 744.093559][T25000] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 744.093598][T25000] __ip4_datagram_connect+0x846/0x1480 [ 744.093634][T25000] __ip6_datagram_connect+0xc70/0x1500 [ 744.093669][T25000] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 744.093724][T25000] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 744.093750][T25000] ip6_datagram_connect_v6_only+0x73/0xa0 [ 744.093780][T25000] inet_dgram_connect+0x143/0x200 [ 744.093809][T25000] ? __pfx_inet_dgram_connect+0x10/0x10 [ 744.093831][T25000] __sys_connect_file+0x141/0x1a0 [ 744.093856][T25000] __sys_connect+0x141/0x170 [ 744.093877][T25000] ? __pfx___sys_connect+0x10/0x10 [ 744.093897][T25000] ? __fget_files+0x21f/0x3d0 [ 744.093927][T25000] ? __pfx_ksys_write+0x10/0x10 [ 744.093952][T25000] __x64_sys_connect+0x72/0xb0 [ 744.093972][T25000] ? lockdep_hardirqs_on+0x78/0x100 [ 744.094003][T25000] do_syscall_64+0x115/0x870 [ 744.094026][T25000] ? clear_bhb_loop+0x70/0xc0 [ 744.094051][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.094070][T25000] RIP: 0033:0x7f002e99e0d9 [ 744.094087][T25000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.094104][T25000] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 744.094124][T25000] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 744.094137][T25000] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 744.094149][T25000] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 744.094160][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.094171][T25000] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 744.094198][T25000] [ 744.207215][T25008] kvm: kvm [25007]: vcpu0, guest rIP: 0x540a3 Unhandled RDMSR(0x40000005) [ 744.345594][T25019] FAULT_INJECTION: forcing a failure. [ 744.345594][T25019] name failslab, interval 1, probability 0, space 0, times 0 [ 744.353437][T25019] CPU: 2 UID: 0 PID: 25019 Comm: syz.6.6686 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.353469][T25019] Tainted: [L]=SOFTLOCKUP [ 744.353476][T25019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.353487][T25019] Call Trace: [ 744.353494][T25019] [ 744.353502][T25019] dump_stack_lvl+0x100/0x190 [ 744.353533][T25019] should_fail_ex.cold+0x5/0xa [ 744.353557][T25019] should_failslab+0xc2/0x120 [ 744.353582][T25019] __kmalloc_noprof+0xfc/0x820 [ 744.353604][T25019] ? __pfx_dynamic_dname+0x10/0x10 [ 744.353631][T25019] ? tomoyo_encode2+0xfb/0x3c0 [ 744.353654][T25019] tomoyo_encode2+0xfb/0x3c0 [ 744.353674][T25019] tomoyo_encode+0x29/0x50 [ 744.353691][T25019] tomoyo_realpath_from_path+0x18c/0x690 [ 744.353713][T25019] tomoyo_path_number_perm+0x23c/0x580 [ 744.353737][T25019] ? tomoyo_path_number_perm+0x22e/0x580 [ 744.353764][T25019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.353815][T25019] ? find_held_lock+0x2b/0x80 [ 744.353832][T25019] ? __fget_files+0x215/0x3d0 [ 744.353850][T25019] ? hook_file_ioctl_common+0x140/0x440 [ 744.353870][T25019] ? __fget_files+0x215/0x3d0 [ 744.353899][T25019] ? __fget_files+0x21f/0x3d0 [ 744.353922][T25019] security_file_ioctl+0xd3/0x230 [ 744.353950][T25019] __x64_sys_ioctl+0xb7/0x210 [ 744.353980][T25019] do_syscall_64+0x115/0x870 [ 744.354003][T25019] ? clear_bhb_loop+0x70/0xc0 [ 744.354026][T25019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.354044][T25019] RIP: 0033:0x7f002e99e0d9 [ 744.354061][T25019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.354078][T25019] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.354096][T25019] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 744.354107][T25019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 744.354117][T25019] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 744.354128][T25019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.354137][T25019] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 744.354163][T25019] [ 744.354181][T25019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 744.765862][T25038] FAULT_INJECTION: forcing a failure. [ 744.765862][T25038] name failslab, interval 1, probability 0, space 0, times 0 [ 744.774745][T25038] CPU: 2 UID: 0 PID: 25038 Comm: syz.6.6693 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.774780][T25038] Tainted: [L]=SOFTLOCKUP [ 744.774787][T25038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.774798][T25038] Call Trace: [ 744.774805][T25038] [ 744.774813][T25038] dump_stack_lvl+0x100/0x190 [ 744.774846][T25038] should_fail_ex.cold+0x5/0xa [ 744.774871][T25038] should_failslab+0xc2/0x120 [ 744.774898][T25038] __kmalloc_cache_noprof+0x91/0x6c0 [ 744.774919][T25038] ? kvm_create_pit+0x52/0x780 [ 744.774966][T25038] kvm_create_pit+0x52/0x780 [ 744.774995][T25038] kvm_arch_vm_ioctl+0x1325/0x18d0 [ 744.775020][T25038] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 744.775039][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775069][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775098][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775144][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775173][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775209][T25038] ? find_held_lock+0x2b/0x80 [ 744.775228][T25038] ? is_bpf_text_address+0x8a/0x1a0 [ 744.775266][T25038] ? is_bpf_text_address+0x8a/0x1a0 [ 744.775291][T25038] ? bpf_ksym_find+0x128/0x1c0 [ 744.775321][T25038] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 744.775353][T25038] ? is_bpf_text_address+0x94/0x1a0 [ 744.775378][T25038] ? kernel_text_address+0x8d/0x100 [ 744.775408][T25038] ? __pfx_widen_string+0x10/0x10 [ 744.775428][T25038] ? __kernel_text_address+0xd/0x30 [ 744.775449][T25038] ? unwind_get_return_address+0x59/0xa0 [ 744.775479][T25038] ? arch_stack_walk+0xa6/0xf0 [ 744.775524][T25038] ? tomoyo_path_number_perm+0x46d/0x580 [ 744.775552][T25038] ? stack_trace_save+0x8e/0xc0 [ 744.775572][T25038] ? __pfx_stack_trace_save+0x10/0x10 [ 744.775599][T25038] ? stack_depot_save_flags+0x27/0x9d0 [ 744.775627][T25038] ? __lock_acquire+0x49f/0x1a40 [ 744.775650][T25038] ? tomoyo_path_number_perm+0x46d/0x580 [ 744.775680][T25038] kvm_vm_ioctl+0x1560/0x4180 [ 744.775743][T25038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.775776][T25038] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 744.775822][T25038] ? kasan_quarantine_put+0x104/0x240 [ 744.775844][T25038] ? lockdep_hardirqs_on+0x78/0x100 [ 744.775870][T25038] ? find_held_lock+0x2b/0x80 [ 744.775886][T25038] ? tomoyo_path_number_perm+0x28f/0x580 [ 744.775911][T25038] ? tomoyo_path_number_perm+0x28f/0x580 [ 744.775942][T25038] ? tomoyo_path_number_perm+0x188/0x580 [ 744.775969][T25038] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.776003][T25038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 744.776038][T25038] ? do_vfs_ioctl+0x226/0x13e0 [ 744.776067][T25038] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 744.776093][T25038] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 744.776131][T25038] ? __fget_files+0x215/0x3d0 [ 744.776149][T25038] ? hook_file_ioctl_common+0x140/0x440 [ 744.776179][T25038] ? selinux_file_ioctl+0x13b/0x290 [ 744.776205][T25038] ? selinux_file_ioctl+0xb6/0x290 [ 744.776234][T25038] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 744.776263][T25038] __x64_sys_ioctl+0x18e/0x210 [ 744.776293][T25038] do_syscall_64+0x115/0x870 [ 744.776316][T25038] ? clear_bhb_loop+0x70/0xc0 [ 744.776338][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.776357][T25038] RIP: 0033:0x7f002e99e0d9 [ 744.776375][T25038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.776392][T25038] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.776412][T25038] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 744.776425][T25038] RDX: 0000000000000000 RSI: 000000000000ae64 RDI: 0000000000000004 [ 744.776437][T25038] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 744.776449][T25038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.776460][T25038] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 744.776488][T25038] [ 744.783127][ T5749] Bluetooth: hci0: command tx timeout [ 744.880001][T25042] FAULT_INJECTION: forcing a failure. [ 744.880001][T25042] name failslab, interval 1, probability 0, space 0, times 0 [ 744.934842][ T29] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 744.939868][T25042] CPU: 2 UID: 0 PID: 25042 Comm: syz.4.6695 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.939899][T25042] Tainted: [L]=SOFTLOCKUP [ 744.939906][T25042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.939919][T25042] Call Trace: [ 744.939925][T25042] [ 744.939934][T25042] dump_stack_lvl+0x100/0x190 [ 744.939962][T25042] should_fail_ex.cold+0x5/0xa [ 744.939987][T25042] should_failslab+0xc2/0x120 [ 744.940014][T25042] __kmalloc_noprof+0xfc/0x820 [ 744.940035][T25042] ? bpf_test_init.isra.0+0x88/0x100 [ 744.940068][T25042] bpf_test_init.isra.0+0x88/0x100 [ 744.940098][T25042] bpf_prog_test_run_xdp+0x57e/0x1670 [ 744.940125][T25042] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 744.940154][T25042] ? fput+0x79/0x100 [ 744.940175][T25042] ? __bpf_prog_get+0x97/0x2a0 [ 744.940218][T25042] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 744.940236][T25042] __sys_bpf+0x2a12/0x4e80 [ 744.940257][T25042] ? __pfx___sys_bpf+0x10/0x10 [ 744.940278][T25042] ? find_held_lock+0x2b/0x80 [ 744.940299][T25042] ? get_pid_task+0xfc/0x250 [ 744.940315][T25042] ? get_pid_task+0xfc/0x250 [ 744.940335][T25042] ? find_held_lock+0x2b/0x80 [ 744.940355][T25042] ? rcu_read_lock_any_held+0x6a/0xa0 [ 744.940385][T25042] ? find_held_lock+0x2b/0x80 [ 744.940402][T25042] ? ksys_write+0x190/0x250 [ 744.940422][T25042] ? ksys_write+0x190/0x250 [ 744.940458][T25042] ? fput+0x79/0x100 [ 744.940484][T25042] ? __x64_sys_bpf+0xce/0x140 [ 744.940505][T25042] __x64_sys_bpf+0xce/0x140 [ 744.940522][T25042] ? do_syscall_64+0x90/0x870 [ 744.940544][T25042] do_syscall_64+0x115/0x870 [ 744.940567][T25042] ? clear_bhb_loop+0x70/0xc0 [ 744.940590][T25042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.940605][T25042] RIP: 0033:0x7ff87019e0d9 [ 744.940624][T25042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.940642][T25042] RSP: 002b:00007ff871133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.940658][T25042] RAX: ffffffffffffffda RBX: 00007ff870425fa0 RCX: 00007ff87019e0d9 [ 744.940668][T25042] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 744.940677][T25042] RBP: 00007ff871133090 R08: 0000000000000000 R09: 0000000000000000 [ 744.940689][T25042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.940700][T25042] R13: 00007ff870426038 R14: 00007ff870425fa0 R15: 00007fffcabe9848 [ 744.940724][T25042] [ 745.237692][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 745.267430][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 745.288645][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 745.293033][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.297397][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 745.302491][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 745.309051][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 745.312041][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 745.325209][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.332794][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 745.338065][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 745.372069][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 745.395047][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 745.399925][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.406333][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 745.414201][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 745.427215][ T29] usb 6-1: string descriptor 0 read error: -22 [ 745.432242][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.451196][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 745.487420][T25065] __nla_validate_parse: 1 callbacks suppressed [ 745.487442][T25065] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6701'. [ 745.571437][T25067] FAULT_INJECTION: forcing a failure. [ 745.571437][T25067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.579210][T25067] CPU: 1 UID: 0 PID: 25067 Comm: syz.6.6703 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.579263][T25067] Tainted: [L]=SOFTLOCKUP [ 745.579270][T25067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.579281][T25067] Call Trace: [ 745.579294][T25067] [ 745.579302][T25067] dump_stack_lvl+0x100/0x190 [ 745.579355][T25067] should_fail_ex.cold+0x5/0xa [ 745.579387][T25067] _copy_from_iter+0x1f4/0x1690 [ 745.579421][T25067] ? __asan_memset+0x23/0x50 [ 745.579449][T25067] ? __pfx__copy_from_iter+0x10/0x10 [ 745.579473][T25067] ? __pfx___alloc_skb+0x10/0x10 [ 745.579510][T25067] netlink_sendmsg+0x808/0xda0 [ 745.579536][T25067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.579558][T25067] ? selinux_socket_sendmsg+0x198/0x2f0 [ 745.579595][T25067] ____sys_sendmsg+0xa4d/0xbe0 [ 745.579621][T25067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.579643][T25067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.579682][T25067] ___sys_sendmsg+0x190/0x1e0 [ 745.579725][T25067] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.579744][T25067] ? __lock_acquire+0x49f/0x1a40 [ 745.579777][T25067] ? get_pid_task+0x106/0x250 [ 745.579838][T25067] __sys_sendmsg+0x160/0x210 [ 745.579862][T25067] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.579900][T25067] do_syscall_64+0x115/0x870 [ 745.579924][T25067] ? clear_bhb_loop+0x70/0xc0 [ 745.579947][T25067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.579966][T25067] RIP: 0033:0x7f002e99e0d9 [ 745.579983][T25067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.580001][T25067] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.580025][T25067] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 745.580037][T25067] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 745.580048][T25067] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 745.580059][T25067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.580069][T25067] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 745.580095][T25067] [ 745.603698][T25069] random: crng reseeded on system resumption [ 745.786864][T25080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=25080 comm=syz.6.6707 [ 745.793237][T25082] tipc: Failed to obtain node identity [ 745.795681][T25082] tipc: Enabling of bearer rejected, failed to enable media [ 746.027337][ T42] audit: type=1800 audit(1786448951.761:21926): pid=25094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6713" name="host_addr" dev="configfs" ino=110727 res=0 errno=0 [ 746.776759][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 746.931086][T25115] FAULT_INJECTION: forcing a failure. [ 746.931086][T25115] name failslab, interval 1, probability 0, space 0, times 0 [ 746.937791][T25115] CPU: 0 UID: 0 PID: 25115 Comm: syz.5.6719 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.937826][T25115] Tainted: [L]=SOFTLOCKUP [ 746.937834][T25115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.937846][T25115] Call Trace: [ 746.937853][T25115] [ 746.937862][T25115] dump_stack_lvl+0x100/0x190 [ 746.937893][T25115] should_fail_ex.cold+0x5/0xa [ 746.937918][T25115] should_failslab+0xc2/0x120 [ 746.937961][T25115] __kmalloc_noprof+0xfc/0x820 [ 746.937984][T25115] ? tomoyo_encode2+0xfb/0x3c0 [ 746.938005][T25115] tomoyo_encode2+0xfb/0x3c0 [ 746.938026][T25115] tomoyo_encode+0x29/0x50 [ 746.938042][T25115] tomoyo_realpath_from_path+0x18c/0x690 [ 746.938065][T25115] tomoyo_path_number_perm+0x23c/0x580 [ 746.938091][T25115] ? tomoyo_path_number_perm+0x22e/0x580 [ 746.938118][T25115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 746.938167][T25115] ? find_held_lock+0x2b/0x80 [ 746.938187][T25115] ? __fget_files+0x215/0x3d0 [ 746.938217][T25115] ? hook_file_ioctl_common+0x140/0x440 [ 746.938236][T25115] ? __fget_files+0x215/0x3d0 [ 746.938259][T25115] ? __fget_files+0x21f/0x3d0 [ 746.938284][T25115] security_file_ioctl+0xd3/0x230 [ 746.938314][T25115] __x64_sys_ioctl+0xb7/0x210 [ 746.938346][T25115] do_syscall_64+0x115/0x870 [ 746.938370][T25115] ? clear_bhb_loop+0x70/0xc0 [ 746.938401][T25115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.938422][T25115] RIP: 0033:0x7fc434f9e0d9 [ 746.938440][T25115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.938458][T25115] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.938478][T25115] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 746.938490][T25115] RDX: 0000200000000000 RSI: 0000000080045505 RDI: 0000000000000003 [ 746.938502][T25115] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 746.938514][T25115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.938525][T25115] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 746.938563][T25115] [ 746.938660][T25115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 747.296970][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6721'. [ 747.906063][T11455] usb 6-1: USB disconnect, device number 92 [ 747.979723][T25154] FAULT_INJECTION: forcing a failure. [ 747.979723][T25154] name failslab, interval 1, probability 0, space 0, times 0 [ 747.988865][T25154] CPU: 3 UID: 0 PID: 25154 Comm: syz.5.6736 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.988897][T25154] Tainted: [L]=SOFTLOCKUP [ 747.988904][T25154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.988916][T25154] Call Trace: [ 747.988923][T25154] [ 747.988931][T25154] dump_stack_lvl+0x100/0x190 [ 747.988963][T25154] should_fail_ex.cold+0x5/0xa [ 747.988982][T25154] ? tomoyo_write_log2+0x17a/0xbc0 [ 747.989013][T25154] should_failslab+0xc2/0x120 [ 747.989039][T25154] kmem_cache_alloc_noprof+0x91/0x6a0 [ 747.989063][T25154] ? dst_alloc+0x99/0x1a0 [ 747.989089][T25154] dst_alloc+0x99/0x1a0 [ 747.989112][T25154] rt_dst_alloc+0x35/0x3a0 [ 747.989137][T25154] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 747.989171][T25154] ip_route_output_key_hash+0x118/0x2b0 [ 747.989200][T25154] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 747.989235][T25154] ? find_held_lock+0x2b/0x80 [ 747.989257][T25154] ip_route_output_flow+0x27/0x150 [ 747.989285][T25154] udp_sendmsg+0x198a/0x2720 [ 747.989313][T25154] ? __pfx_udp_sendmsg+0x10/0x10 [ 747.989348][T25154] ? reacquire_held_locks+0xce/0x1e0 [ 747.989371][T25154] ? release_sock+0x21/0x280 [ 747.989397][T25154] ? inet_autobind+0x145/0x1a0 [ 747.989418][T25154] ? find_held_lock+0x2b/0x80 [ 747.989440][T25154] ? lockdep_hardirqs_on+0x78/0x100 [ 747.989463][T25154] ? inet_autobind+0x145/0x1a0 [ 747.989483][T25154] ? __local_bh_enable_ip+0x9e/0x120 [ 747.989524][T25154] ? inet_autobind+0x14a/0x1a0 [ 747.989545][T25154] ? __pfx_udp_sendmsg+0x10/0x10 [ 747.989567][T25154] inet_sendmsg+0x105/0x140 [ 747.989598][T25154] ____sys_sendmsg+0x9c9/0xbe0 [ 747.989624][T25154] ? __pfx_inet_sendmsg+0x10/0x10 [ 747.989650][T25154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.989681][T25154] ? __pfx__kstrtoull+0x10/0x10 [ 747.989706][T25154] ___sys_sendmsg+0x190/0x1e0 [ 747.989727][T25154] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.989758][T25154] ? find_held_lock+0x2b/0x80 [ 747.989790][T25154] __sys_sendmmsg+0x20c/0x440 [ 747.989817][T25154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 747.989839][T25154] ? ksys_write+0x190/0x250 [ 747.989876][T25154] ? fput+0x79/0x100 [ 747.989897][T25154] ? ksys_write+0x1ac/0x250 [ 747.989914][T25154] ? __pfx_ksys_write+0x10/0x10 [ 747.989935][T25154] __x64_sys_sendmmsg+0x9c/0x100 [ 747.989958][T25154] ? lockdep_hardirqs_on+0x78/0x100 [ 747.989980][T25154] do_syscall_64+0x115/0x870 [ 747.990002][T25154] ? clear_bhb_loop+0x70/0xc0 [ 747.990024][T25154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.990043][T25154] RIP: 0033:0x7fc434f9e0d9 [ 747.990059][T25154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.990076][T25154] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 747.990095][T25154] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 747.990107][T25154] RDX: 0000000000000001 RSI: 0000200000003240 RDI: 0000000000000003 [ 747.990117][T25154] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 747.990128][T25154] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 747.990139][T25154] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 747.990163][T25154] [ 748.177369][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6737'. [ 748.263033][T14854] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 748.323089][T25162] loop5: detected capacity change from 0 to 231 [ 748.329767][T25162] loop5: unable to read partition table [ 748.332790][T25162] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 748.415449][T14854] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 748.424711][T14854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.608587][T25169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 748.611605][T25169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.617543][T25169] vhci_hcd vhci_hcd.0: Device attached [ 748.624456][T25175] vhci_hcd: connection closed [ 748.630954][ T12] vhci_hcd vhci_hcd.1: stop threads [ 748.635422][ T12] vhci_hcd vhci_hcd.1: release socket [ 748.637853][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 748.642805][T14854] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 748.844337][ T56] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 748.893983][T14854] usb 9-1: USB disconnect, device number 61 [ 749.004155][ T56] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 749.009329][ T56] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 749.012541][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.017396][ T56] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.022667][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.028403][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.034223][ T56] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 749.037431][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.041699][ T56] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.046999][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.051543][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.057628][ T56] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 749.060717][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.064861][ T56] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.069478][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.075384][ T56] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.082631][ T56] usb 11-1: string descriptor 0 read error: -22 [ 749.085920][ T56] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.099320][ T56] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 749.547901][ T42] audit: type=1400 audit(1786448955.281:21927): avc: denied { create } for pid=25194 comm="syz.1.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 749.656401][T25200] overlayfs: failed to resolve 'rootcontext=staff_u': -2 [ 749.741947][T25206] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6755'. [ 749.884994][ T42] audit: type=1400 audit(1786448955.621:21928): avc: denied { write } for pid=25194 comm="syz.1.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 749.928496][ T42] audit: type=1400 audit(1786448955.661:21929): avc: denied { write } for pid=25216 comm="syz.4.6760" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 749.980592][T25219] loop5: detected capacity change from 0 to 7 [ 749.989748][T25219] Dev loop5: unable to read RDB block 7 [ 749.994727][T25219] loop5: AHDI p1 p3 p4 [ 749.996629][T25219] loop5: partition table partially beyond EOD, truncated [ 750.001417][T25219] loop5: p1 size 100663296 extends beyond EOD, truncated [ 750.007989][T25219] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 750.090856][T25219] Dev loop5: unable to read RDB block 7 [ 750.098835][T25219] loop5: AHDI p1 p3 p4 [ 750.100831][T25219] loop5: partition table partially beyond EOD, truncated [ 750.105753][T25219] loop5: p1 size 100663296 extends beyond EOD, truncated [ 750.110849][T25219] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 750.182206][T22858] udevd[22858]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 750.193121][T22732] udevd[22732]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 750.271310][T25231] FAULT_INJECTION: forcing a failure. [ 750.271310][T25231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.280762][T25231] CPU: 1 UID: 0 PID: 25231 Comm: syz.1.6766 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.280795][T25231] Tainted: [L]=SOFTLOCKUP [ 750.280802][T25231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 750.280813][T25231] Call Trace: [ 750.280820][T25231] [ 750.280828][T25231] dump_stack_lvl+0x100/0x190 [ 750.280859][T25231] should_fail_ex.cold+0x5/0xa [ 750.280890][T25231] _copy_from_iter+0x1f4/0x1690 [ 750.280952][T25231] ? __pfx__copy_from_iter+0x10/0x10 [ 750.280974][T25231] ? trace_kmalloc+0xeb/0x110 [ 750.280996][T25231] ? __kasan_kmalloc+0xaa/0xb0 [ 750.281013][T25231] ? __kmalloc_noprof+0x343/0x820 [ 750.281028][T25231] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 750.281053][T25231] kernfs_fop_write_iter+0x186/0x5f0 [ 750.281081][T25231] vfs_write+0x6ac/0x1050 [ 750.281098][T25231] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 750.281126][T25231] ? __pfx_vfs_write+0x10/0x10 [ 750.281160][T25231] ksys_write+0x12a/0x250 [ 750.281177][T25231] ? __pfx_ksys_write+0x10/0x10 [ 750.281202][T25231] do_syscall_64+0x115/0x870 [ 750.281227][T25231] ? clear_bhb_loop+0x70/0xc0 [ 750.281251][T25231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.281270][T25231] RIP: 0033:0x7f56dbf9e0d9 [ 750.281287][T25231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.281304][T25231] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.281322][T25231] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 750.281334][T25231] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000003 [ 750.281345][T25231] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 750.281357][T25231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.281367][T25231] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 750.281392][T25231] [ 750.430525][T25235] gretap0: entered promiscuous mode [ 750.526456][T25240] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 3864 at bInterval 1 > max ISOC 1023, may drop data! [ 750.537648][T25240] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 750.541402][T25240] udc dummy_udc.0: failed to start g1: -19 [ 750.551680][T25240] UDC core: g1: couldn't find an available UDC or it's busy [ 750.726307][T25250] netlink: 'syz.4.6769': attribute type 12 has an invalid length. [ 750.732409][T25250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6769'. [ 750.987540][T25258] pch_udc 0000:00:03.0: dma_pool_destroy data_requests busy [ 750.992313][T25258] pch_udc 0000:00:03.0: dma_pool_destroy setup requests busy [ 751.168583][T25260] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 751.425308][ T40] usb 11-1: USB disconnect, device number 2 [ 751.609566][T25278] FAULT_INJECTION: forcing a failure. [ 751.609566][T25278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.616147][T25278] CPU: 1 UID: 0 PID: 25278 Comm: syz.5.6787 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.616178][T25278] Tainted: [L]=SOFTLOCKUP [ 751.616185][T25278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 751.616196][T25278] Call Trace: [ 751.616203][T25278] [ 751.616211][T25278] dump_stack_lvl+0x100/0x190 [ 751.616241][T25278] should_fail_ex.cold+0x5/0xa [ 751.616265][T25278] _copy_from_user+0x2e/0xd0 [ 751.616291][T25278] binder_ioctl+0x4cb/0x74a0 [ 751.616325][T25278] ? tomoyo_path_number_perm+0x188/0x580 [ 751.616356][T25278] ? __pfx_binder_ioctl+0x10/0x10 [ 751.616383][T25278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 751.616424][T25278] ? do_vfs_ioctl+0x226/0x13e0 [ 751.616451][T25278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 751.616478][T25278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 751.616514][T25278] ? hook_file_ioctl_common+0x140/0x440 [ 751.616541][T25278] ? selinux_file_ioctl+0x13b/0x290 [ 751.616567][T25278] ? selinux_file_ioctl+0xb6/0x290 [ 751.616595][T25278] ? __pfx_binder_ioctl+0x10/0x10 [ 751.616621][T25278] __x64_sys_ioctl+0x18e/0x210 [ 751.616649][T25278] do_syscall_64+0x115/0x870 [ 751.616673][T25278] ? clear_bhb_loop+0x70/0xc0 [ 751.616696][T25278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.616715][T25278] RIP: 0033:0x7fc434f9e0d9 [ 751.616731][T25278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.616748][T25278] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.616767][T25278] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 751.616779][T25278] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000005 [ 751.616790][T25278] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 751.616801][T25278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.616812][T25278] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 751.616842][T25278] [ 751.616850][T25278] binder: 25276:25278 ioctl c0306201 200000000280 returned -14 [ 751.790867][T25284] veth0: entered promiscuous mode [ 751.797347][T25283] veth0: left promiscuous mode [ 751.896783][T25288] No control pipe specified [ 751.900093][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 752.213282][T11455] usb 9-1: new low-speed USB device number 62 using dummy_hcd [ 752.374976][T11455] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.382025][T11455] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 752.388444][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.393474][T11455] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.398860][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.404640][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.410355][T11455] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 752.414158][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.418858][T11455] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.425436][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.430275][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.437373][T11455] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 752.440563][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.447897][T11455] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.452716][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.458422][T11455] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.467464][T11455] usb 9-1: string descriptor 0 read error: -22 [ 752.471302][T11455] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.485790][T11455] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 753.070480][T25309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6797'. [ 753.243433][T25312] tipc: Started in network mode [ 753.245802][T25312] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 753.251237][T25312] FAULT_INJECTION: forcing a failure. [ 753.251237][T25312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.260156][T25312] CPU: 0 UID: 0 PID: 25312 Comm: syz.5.6798 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.260190][T25312] Tainted: [L]=SOFTLOCKUP [ 753.260199][T25312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.260221][T25312] Call Trace: [ 753.260235][T25312] [ 753.260243][T25312] dump_stack_lvl+0x100/0x190 [ 753.260302][T25312] should_fail_ex.cold+0x5/0xa [ 753.260339][T25312] _copy_to_user+0x32/0xd0 [ 753.260374][T25312] simple_read_from_buffer+0xcb/0x170 [ 753.260416][T25312] proc_fail_nth_read+0x1af/0x230 [ 753.260449][T25312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.260482][T25312] ? rw_verify_area+0xce/0x6d0 [ 753.260509][T25312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.260538][T25312] vfs_read+0x1e4/0xb40 [ 753.260571][T25312] ? __pfx_vfs_read+0x10/0x10 [ 753.260596][T25312] ? __fget_files+0x215/0x3d0 [ 753.260622][T25312] ? __fget_files+0x21f/0x3d0 [ 753.260650][T25312] ksys_read+0x12a/0x250 [ 753.260667][T25312] ? __pfx_ksys_read+0x10/0x10 [ 753.260692][T25312] do_syscall_64+0x115/0x870 [ 753.260722][T25312] ? clear_bhb_loop+0x70/0xc0 [ 753.260745][T25312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.260764][T25312] RIP: 0033:0x7fc434f5e90e [ 753.260779][T25312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.260796][T25312] RSP: 002b:00007fc435d7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.260820][T25312] RAX: ffffffffffffffda RBX: 00007fc435d7f6c0 RCX: 00007fc434f5e90e [ 753.260832][T25312] RDX: 000000000000000f RSI: 00007fc435d7f0a0 RDI: 000000000000000a [ 753.260844][T25312] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 753.260856][T25312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.260867][T25312] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 753.260908][T25312] [ 753.551514][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6799'. [ 753.593224][T25321] syzkaller0: entered promiscuous mode [ 753.597009][T25321] syzkaller0: entered allmulticast mode [ 753.601350][T25319] FAULT_INJECTION: forcing a failure. [ 753.601350][T25319] name failslab, interval 1, probability 0, space 0, times 0 [ 753.607066][T25319] CPU: 1 UID: 0 PID: 25319 Comm: syz.1.6801 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.607094][T25319] Tainted: [L]=SOFTLOCKUP [ 753.607100][T25319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.607109][T25319] Call Trace: [ 753.607114][T25319] [ 753.607121][T25319] dump_stack_lvl+0x100/0x190 [ 753.607150][T25319] should_fail_ex.cold+0x5/0xa [ 753.607172][T25319] should_failslab+0xc2/0x120 [ 753.607214][T25319] __kmalloc_noprof+0xfc/0x820 [ 753.607235][T25319] ? tomoyo_encode2+0xfb/0x3c0 [ 753.607255][T25319] tomoyo_encode2+0xfb/0x3c0 [ 753.607273][T25319] tomoyo_encode+0x29/0x50 [ 753.607288][T25319] tomoyo_realpath_from_path+0x18c/0x690 [ 753.607310][T25319] tomoyo_path_number_perm+0x23c/0x580 [ 753.607331][T25319] ? tomoyo_path_number_perm+0x22e/0x580 [ 753.607354][T25319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 753.607398][T25319] ? find_held_lock+0x2b/0x80 [ 753.607424][T25319] ? __fget_files+0x215/0x3d0 [ 753.607441][T25319] ? hook_file_ioctl_common+0x140/0x440 [ 753.607465][T25319] ? __fget_files+0x215/0x3d0 [ 753.607486][T25319] ? __fget_files+0x21f/0x3d0 [ 753.607507][T25319] security_file_ioctl+0xd3/0x230 [ 753.607532][T25319] __x64_sys_ioctl+0xb7/0x210 [ 753.607559][T25319] do_syscall_64+0x115/0x870 [ 753.607579][T25319] ? clear_bhb_loop+0x70/0xc0 [ 753.607600][T25319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.607616][T25319] RIP: 0033:0x7f56dbf9e0d9 [ 753.607630][T25319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.607646][T25319] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.607663][T25319] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 753.607702][T25319] RDX: 0000200000000000 RSI: 00000000401070c9 RDI: 0000000000000004 [ 753.607712][T25319] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 753.607722][T25319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.607732][T25319] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 753.607754][T25319] [ 753.607927][T25319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 753.709154][T25319] sd 0:0:0:0: PR command failed: 1026 [ 753.711724][T25319] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 753.715088][T25319] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 754.938537][ T63] usb 9-1: USB disconnect, device number 62 [ 755.211618][ T42] audit: type=1400 audit(1786448960.941:21930): avc: denied { setopt } for pid=25335 comm="syz.4.6808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 755.232326][ T42] audit: type=1400 audit(1786448960.961:21931): avc: denied { getopt } for pid=25335 comm="syz.4.6808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 758.626226][T25356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25356 comm=syz.5.6816 [ 758.670431][T25361] KVM: debugfs: duplicate directory 25361-6 [ 758.724186][T25358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6815'. [ 760.055611][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.604616][T25363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.795539][T25389] syzkaller0: entered promiscuous mode [ 761.797758][T25389] syzkaller0: entered allmulticast mode [ 761.888994][T25403] FAULT_INJECTION: forcing a failure. [ 761.888994][T25403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.899836][T25403] CPU: 3 UID: 0 PID: 25403 Comm: syz.1.6830 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.899954][T25403] Tainted: [L]=SOFTLOCKUP [ 761.899960][T25403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.899971][T25403] Call Trace: [ 761.899979][T25403] [ 761.900060][T25403] dump_stack_lvl+0x100/0x190 [ 761.900582][T25403] should_fail_ex.cold+0x5/0xa [ 761.900656][T25403] _copy_from_iter+0x1f4/0x1690 [ 761.900731][T25403] ? __pfx__copy_from_iter+0x10/0x10 [ 761.900826][T25403] ? __pfx___might_resched+0x10/0x10 [ 761.901003][T25403] ? kfree+0x1e5/0x6c0 [ 761.901146][T25403] file_tty_write.isra.0+0x45b/0x890 [ 761.901177][T25403] vfs_write+0x6ac/0x1050 [ 761.901247][T25403] ? __pfx_tty_write+0x10/0x10 [ 761.901270][T25403] ? __pfx_vfs_write+0x10/0x10 [ 761.901285][T25403] ? find_held_lock+0x2b/0x80 [ 761.901357][T25403] ksys_write+0x12a/0x250 [ 761.901375][T25403] ? __pfx_ksys_write+0x10/0x10 [ 761.901458][T25403] do_syscall_64+0x115/0x870 [ 761.901485][T25403] ? clear_bhb_loop+0x70/0xc0 [ 761.901525][T25403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.901556][T25403] RIP: 0033:0x7f56dbf9e0d9 [ 761.901573][T25403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.901586][T25403] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 761.901601][T25403] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 761.901612][T25403] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 761.901622][T25403] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 761.901632][T25403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.901642][T25403] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 761.901665][T25403] [ 766.189657][T25411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25411 comm=syz.6.6834 [ 766.395951][T25437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25437 comm=syz.4.6844 [ 766.421486][T25437] macsec1: entered allmulticast mode [ 766.423755][T25437] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 766.426971][T25437] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 766.435356][T25437] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 766.446861][ T5417] hid-generic 0000:0000:0006.0019: unknown main item tag 0x0 [ 766.454412][T25442] FAULT_INJECTION: forcing a failure. [ 766.454412][T25442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.459471][T25442] CPU: 2 UID: 0 PID: 25442 Comm: syz.5.6843 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.459501][T25442] Tainted: [L]=SOFTLOCKUP [ 766.459507][T25442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.459519][T25442] Call Trace: [ 766.459526][T25442] [ 766.459534][T25442] dump_stack_lvl+0x100/0x190 [ 766.459566][T25442] should_fail_ex.cold+0x5/0xa [ 766.459589][T25442] _copy_from_user+0x2e/0xd0 [ 766.459640][T25442] restore_sigcontext+0xcd/0x6a0 [ 766.459682][T25442] ? __pfx_restore_sigcontext+0x10/0x10 [ 766.459720][T25442] ? __pfx_restore_altstack+0x10/0x10 [ 766.459742][T25442] ? _raw_spin_unlock_irq+0x23/0x50 [ 766.459764][T25442] ? lockdep_hardirqs_on+0x78/0x100 [ 766.459792][T25442] __do_sys_rt_sigreturn+0x229/0x2c0 [ 766.459813][T25442] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 766.459827][ T5417] hid-generic 0000:0000:0006.0019: unknown main item tag 0x0 [ 766.459843][T25442] do_syscall_64+0x115/0x870 [ 766.459867][T25442] ? clear_bhb_loop+0x70/0xc0 [ 766.459891][T25442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.459910][T25442] RIP: 0033:0x7fc434f3f459 [ 766.459924][T25442] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 766.459942][T25442] RSP: 002b:00007fc435d7e300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 766.459961][T25442] RAX: ffffffffffffffda RBX: 00007fc435d7f6c0 RCX: 00007fc434f3f459 [ 766.459972][T25442] RDX: 00007fc435d7e300 RSI: 00007fc435d7e430 RDI: 0000000000000021 [ 766.459985][T25442] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 766.459995][T25442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 766.460007][T25442] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 766.460031][T25442] [ 766.543550][ T5417] hid-generic 0000:0000:0006.0019: unknown main item tag 0x0 [ 766.546883][ T5417] hid-generic 0000:0000:0006.0019: unknown main item tag 0x0 [ 766.550064][ T5417] hid-generic 0000:0000:0006.0019: unknown main item tag 0x0 [ 766.562048][ T5417] hid-generic 0000:0000:0006.0019: hidraw1: HID v0.0d Device [syz0] on syz1 [ 766.653723][T25448] fido_id[25448]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 769.190303][T25417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.320416][T25466] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 769.494038][T25482] ip_tables: iptables: counters copy to user failed while replacing table [ 769.563469][T25488] FAULT_INJECTION: forcing a failure. [ 769.563469][T25488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.591621][T25488] CPU: 2 UID: 0 PID: 25488 Comm: syz.6.6859 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.591655][T25488] Tainted: [L]=SOFTLOCKUP [ 769.591662][T25488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 769.591674][T25488] Call Trace: [ 769.591681][T25488] [ 769.591689][T25488] dump_stack_lvl+0x100/0x190 [ 769.591720][T25488] should_fail_ex.cold+0x5/0xa [ 769.591745][T25488] _copy_to_user+0x32/0xd0 [ 769.591774][T25488] simple_read_from_buffer+0xcb/0x170 [ 769.591804][T25488] proc_fail_nth_read+0x1af/0x230 [ 769.591838][T25488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.591869][T25488] ? rw_verify_area+0xce/0x6d0 [ 769.591902][T25488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.591949][T25488] vfs_read+0x1e4/0xb40 [ 769.591980][T25488] ? __pfx_vfs_read+0x10/0x10 [ 769.592010][T25488] ? __fget_files+0x215/0x3d0 [ 769.592037][T25488] ? __fget_files+0x21f/0x3d0 [ 769.592064][T25488] ksys_read+0x12a/0x250 [ 769.592080][T25488] ? __pfx_ksys_read+0x10/0x10 [ 769.592105][T25488] do_syscall_64+0x115/0x870 [ 769.592129][T25488] ? clear_bhb_loop+0x70/0xc0 [ 769.592152][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.592170][T25488] RIP: 0033:0x7f002e95e90e [ 769.592187][T25488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 769.592204][T25488] RSP: 002b:00007f002f94afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.592223][T25488] RAX: ffffffffffffffda RBX: 00007f002f94b6c0 RCX: 00007f002e95e90e [ 769.592235][T25488] RDX: 000000000000000f RSI: 00007f002f94b0a0 RDI: 0000000000000005 [ 769.592246][T25488] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 769.592257][T25488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.592268][T25488] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 769.592294][T25488] [ 769.764030][ T42] audit: type=1400 audit(1786448975.491:21932): avc: denied { setattr } for pid=25495 comm="syz.1.6865" path="socket:[110503]" dev="sockfs" ino=110503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 769.776780][T25501] fuse: Bad value for 'user_id' [ 769.779220][T25501] fuse: Bad value for 'user_id' [ 769.780001][T25500] loop5: detected capacity change from 0 to 7 [ 769.787053][T25500] Dev loop5: unable to read RDB block 7 [ 769.789664][T25500] loop5: AHDI p1 p3 p4 [ 769.791588][T25500] loop5: partition table partially beyond EOD, truncated [ 769.795677][T25500] loop5: p1 size 100663296 extends beyond EOD, truncated [ 769.801145][T25500] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 769.817538][T25495] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 769.850679][T25505] FAULT_INJECTION: forcing a failure. [ 769.850679][T25505] name failslab, interval 1, probability 0, space 0, times 0 [ 769.865248][T25505] CPU: 1 UID: 0 PID: 25505 Comm: syz.6.6867 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.865270][T25505] Tainted: [L]=SOFTLOCKUP [ 769.865274][T25505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 769.865282][T25505] Call Trace: [ 769.865286][T25505] [ 769.865292][T25505] dump_stack_lvl+0x100/0x190 [ 769.865313][T25505] should_fail_ex.cold+0x5/0xa [ 769.865330][T25505] should_failslab+0xc2/0x120 [ 769.865358][T25505] __kmalloc_cache_noprof+0x91/0x6c0 [ 769.865371][T25505] ? kobject_uevent_env+0x263/0x18b0 [ 769.865387][T25505] kobject_uevent_env+0x263/0x18b0 [ 769.865403][T25505] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 769.865423][T25505] usb_del_gadget+0x197/0x2d0 [ 769.865434][T25505] ? mark_held_locks+0x40/0x70 [ 769.865451][T25505] usb_del_gadget_udc+0x15/0x30 [ 769.865462][T25505] pch_udc_remove+0x47/0x510 [ 769.865477][T25505] ? pm_runtime_barrier+0x151/0x190 [ 769.865494][T25505] pci_device_remove+0xb2/0x1d0 [ 769.865506][T25505] ? __pfx_pci_device_remove+0x10/0x10 [ 769.865518][T25505] device_remove+0xcb/0x180 [ 769.865532][T25505] device_release_driver_internal+0x44e/0x620 [ 769.865552][T25505] unbind_store+0xf8/0x110 [ 769.865563][T25505] ? __pfx_unbind_store+0x10/0x10 [ 769.865575][T25505] drv_attr_store+0x74/0xb0 [ 769.865593][T25505] ? __pfx_drv_attr_store+0x10/0x10 [ 769.865610][T25505] sysfs_kf_write+0xf2/0x150 [ 769.865623][T25505] kernfs_fop_write_iter+0x3e0/0x5f0 [ 769.865639][T25505] ? __pfx_sysfs_kf_write+0x10/0x10 [ 769.865652][T25505] vfs_write+0x6ac/0x1050 [ 769.865663][T25505] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 769.865681][T25505] ? __pfx_vfs_write+0x10/0x10 [ 769.865701][T25505] ksys_write+0x12a/0x250 [ 769.865711][T25505] ? __pfx_ksys_write+0x10/0x10 [ 769.865726][T25505] do_syscall_64+0x115/0x870 [ 769.865742][T25505] ? clear_bhb_loop+0x70/0xc0 [ 769.865756][T25505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.865768][T25505] RIP: 0033:0x7f002e99e0d9 [ 769.865779][T25505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.865791][T25505] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.865803][T25505] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 769.865810][T25505] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000003 [ 769.865816][T25505] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 769.865823][T25505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.865829][T25505] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 769.865844][T25505] [ 769.881966][T25500] Dev loop5: unable to read RDB block 7 [ 769.885830][T25505] pch_udc 0000:00:03.0: dma_pool_destroy data_requests busy [ 769.887022][T25500] loop5: AHDI p1 p3 p4 [ 769.888519][T25505] pch_udc 0000:00:03.0: dma_pool_destroy setup requests busy [ 769.890255][T25500] loop5: partition table partially beyond EOD, truncated [ 770.016786][T25500] loop5: p1 size 100663296 extends beyond EOD, truncated [ 770.020969][T25500] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 770.043360][T25513] FAULT_INJECTION: forcing a failure. [ 770.043360][T25513] name failslab, interval 1, probability 0, space 0, times 0 [ 770.065334][T25500] Process accounting resumed [ 770.067287][T25513] CPU: 2 UID: 0 PID: 25513 Comm: syz.1.6873 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.067318][T25513] Tainted: [L]=SOFTLOCKUP [ 770.067325][T25513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.067337][T25513] Call Trace: [ 770.067345][T25513] [ 770.067352][T25513] dump_stack_lvl+0x100/0x190 [ 770.067392][T25513] should_fail_ex.cold+0x5/0xa [ 770.067418][T25513] should_failslab+0xc2/0x120 [ 770.067444][T25513] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 770.067468][T25513] ? dyn_event_create+0x1f/0x70 [ 770.067503][T25513] ? __lock_acquire+0x49f/0x1a40 [ 770.067526][T25513] ? argv_split+0x35/0x420 [ 770.067556][T25513] kstrndup+0x64/0x120 [ 770.067588][T25513] ? __pfx___trace_uprobe_create+0x10/0x10 [ 770.067645][T25513] argv_split+0x35/0x420 [ 770.067670][T25513] ? __pfx___trace_uprobe_create+0x10/0x10 [ 770.067694][T25513] trace_probe_create+0x7d/0x100 [ 770.067715][T25513] ? __pfx_trace_probe_create+0x10/0x10 [ 770.067742][T25513] dyn_event_create+0x46/0x70 [ 770.067759][T25513] create_or_delete_trace_uprobe+0x5a/0xb0 [ 770.067784][T25513] trace_parse_run_command+0x1ab/0x3b0 [ 770.067804][T25513] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 770.067834][T25513] vfs_write+0x2aa/0x1050 [ 770.067852][T25513] ? __pfx_probes_write+0x10/0x10 [ 770.067875][T25513] ? __pfx_vfs_write+0x10/0x10 [ 770.067892][T25513] ? __fget_files+0x215/0x3d0 [ 770.067920][T25513] ? __fget_files+0x21f/0x3d0 [ 770.067949][T25513] ksys_write+0x12a/0x250 [ 770.067966][T25513] ? __pfx_ksys_write+0x10/0x10 [ 770.067992][T25513] do_syscall_64+0x115/0x870 [ 770.068014][T25513] ? clear_bhb_loop+0x70/0xc0 [ 770.068037][T25513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.068056][T25513] RIP: 0033:0x7f56dbf9e0d9 [ 770.068073][T25513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.068089][T25513] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.068108][T25513] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 770.068121][T25513] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003 [ 770.068132][T25513] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 770.068143][T25513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.068153][T25513] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 770.068179][T25513] [ 770.080544][T25422] udevd[25422]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 770.104778][T25413] udevd[25413]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 770.168300][T25522] FAULT_INJECTION: forcing a failure. [ 770.168300][T25522] name failslab, interval 1, probability 0, space 0, times 0 [ 770.201004][T25520] udevd[25520]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 770.205162][T25518] udevd[25518]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 770.209382][T25522] CPU: 1 UID: 0 PID: 25522 Comm: syz.1.6874 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.209411][T25522] Tainted: [L]=SOFTLOCKUP [ 770.209417][T25522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.209428][T25522] Call Trace: [ 770.209435][T25522] [ 770.209442][T25522] dump_stack_lvl+0x100/0x190 [ 770.209472][T25522] should_fail_ex.cold+0x5/0xa [ 770.209511][T25522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 770.209540][T25522] should_failslab+0xc2/0x120 [ 770.209566][T25522] kmem_cache_alloc_noprof+0x91/0x6a0 [ 770.209587][T25522] ? skb_clone+0x190/0x400 [ 770.209610][T25522] skb_clone+0x190/0x400 [ 770.209625][T25522] netlink_deliver_tap+0xaed/0xcc0 [ 770.209640][T25522] netlink_unicast+0x62b/0x850 [ 770.209655][T25522] ? __pfx_netlink_unicast+0x10/0x10 [ 770.209671][T25522] netlink_sendmsg+0x8b0/0xda0 [ 770.209686][T25522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.209700][T25522] ? selinux_socket_sendmsg+0x198/0x2f0 [ 770.209719][T25522] ____sys_sendmsg+0xa4d/0xbe0 [ 770.209737][T25522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.209751][T25522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.209775][T25522] ___sys_sendmsg+0x190/0x1e0 [ 770.209788][T25522] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.209799][T25522] ? __lock_acquire+0x49f/0x1a40 [ 770.209814][T25522] ? get_pid_task+0x106/0x250 [ 770.209841][T25522] __sys_sendmsg+0x160/0x210 [ 770.209857][T25522] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.209880][T25522] do_syscall_64+0x115/0x870 [ 770.209900][T25522] ? clear_bhb_loop+0x70/0xc0 [ 770.209915][T25522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.209927][T25522] RIP: 0033:0x7f56dbf9e0d9 [ 770.209938][T25522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.209949][T25522] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.209962][T25522] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 770.209969][T25522] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 770.209976][T25522] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 770.209983][T25522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.209989][T25522] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 770.210004][T25522] [ 770.463152][T25539] binder: 25523:25539 ioctl 4604 2000000012c0 returned -22 [ 770.506833][T25543] FAULT_INJECTION: forcing a failure. [ 770.506833][T25543] name failslab, interval 1, probability 0, space 0, times 0 [ 770.515916][T25543] CPU: 3 UID: 0 PID: 25543 Comm: syz.1.6882 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.515953][T25543] Tainted: [L]=SOFTLOCKUP [ 770.515962][T25543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.515985][T25543] Call Trace: [ 770.515999][T25543] [ 770.516008][T25543] dump_stack_lvl+0x100/0x190 [ 770.516089][T25543] should_fail_ex.cold+0x5/0xa [ 770.516136][T25543] should_failslab+0xc2/0x120 [ 770.516187][T25543] kmem_cache_alloc_noprof+0x91/0x6a0 [ 770.516216][T25543] ? skb_clone+0x190/0x400 [ 770.516255][T25543] skb_clone+0x190/0x400 [ 770.516284][T25543] netem_enqueue+0x1f51/0x3b00 [ 770.516320][T25543] __dev_queue_xmit+0x2ffa/0x4970 [ 770.516356][T25543] ? __pfx___dev_queue_xmit+0x10/0x10 [ 770.516382][T25543] ? __local_bh_enable_ip+0x9e/0x120 [ 770.516427][T25543] ? __lock_acquire+0x49f/0x1a40 [ 770.516494][T25543] ip6_finish_output2+0xfd4/0x1ce0 [ 770.516536][T25543] __ip6_finish_output+0x357/0xdf0 [ 770.516571][T25543] ip6_output+0x2aa/0xa60 [ 770.516602][T25543] ? __pfx_ip6_output+0x10/0x10 [ 770.516635][T25543] ? __pfx_ip6_finish_output+0x10/0x10 [ 770.516671][T25543] ? __pfx_ip6_output+0x10/0x10 [ 770.516700][T25543] ip6_xmit+0x1006/0x24a0 [ 770.516728][T25543] ? __pfx_stack_trace_save+0x10/0x10 [ 770.516772][T25543] ? __pfx_ip6_xmit+0x10/0x10 [ 770.516805][T25543] ? __pfx_dst_output+0x10/0x10 [ 770.516847][T25543] inet6_csk_xmit+0x387/0x760 [ 770.516862][T25543] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 770.516876][T25543] __tcp_transmit_skb+0x1fb2/0x4f20 [ 770.516898][T25543] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 770.516911][T25543] ? kmalloc_reserve+0x148/0x350 [ 770.516944][T25543] ? lockdep_hardirqs_on+0x78/0x100 [ 770.516968][T25543] ? ktime_get+0x23e/0x320 [ 770.516990][T25543] ? ktime_get+0x1a4/0x320 [ 770.517021][T25543] tcp_send_active_reset+0x4e1/0x9c0 [ 770.517051][T25543] __tcp_close+0x41e/0x1110 [ 770.517091][T25543] tcp_close+0x28/0x110 [ 770.517123][T25543] inet_release+0xed/0x200 [ 770.517155][T25543] inet6_release+0x4f/0x70 [ 770.517178][T25543] __sock_release+0xb3/0x260 [ 770.517208][T25543] ? __pfx_sock_close+0x10/0x10 [ 770.517243][T25543] sock_close+0x1c/0x30 [ 770.517270][T25543] __fput+0x3ff/0xb50 [ 770.517313][T25543] fput_close_sync+0x118/0x250 [ 770.517340][T25543] ? __pfx_fput_close_sync+0x10/0x10 [ 770.517378][T25543] __x64_sys_close+0x8b/0x120 [ 770.517408][T25543] do_syscall_64+0x115/0x870 [ 770.517436][T25543] ? clear_bhb_loop+0x70/0xc0 [ 770.517465][T25543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.517484][T25543] RIP: 0033:0x7f56dbf9e0d9 [ 770.517501][T25543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.517519][T25543] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 770.517543][T25543] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 770.517555][T25543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 770.517569][T25543] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 770.517579][T25543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.517589][T25543] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 770.517621][T25543] [ 770.872123][T25567] syzkaller0: entered promiscuous mode [ 770.874494][T25567] syzkaller0: entered allmulticast mode [ 770.893386][T25564] syzkaller1: entered promiscuous mode [ 770.900198][T25564] syzkaller1: entered allmulticast mode [ 770.961745][ T42] audit: type=1400 audit(1786448976.691:21933): avc: denied { map } for pid=25558 comm="syz.6.6889" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 770.961745][T25572] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 770.979999][T25559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25559 comm=syz.6.6889 [ 771.155195][T25582] FAULT_INJECTION: forcing a failure. [ 771.155195][T25582] name failslab, interval 1, probability 0, space 0, times 0 [ 771.164158][T25582] CPU: 0 UID: 0 PID: 25582 Comm: syz.1.6897 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.164192][T25582] Tainted: [L]=SOFTLOCKUP [ 771.164199][T25582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.164211][T25582] Call Trace: [ 771.164218][T25582] [ 771.164225][T25582] dump_stack_lvl+0x100/0x190 [ 771.164283][T25582] should_fail_ex.cold+0x5/0xa [ 771.164316][T25582] should_failslab+0xc2/0x120 [ 771.164356][T25582] __kmalloc_noprof+0xfc/0x820 [ 771.164380][T25582] ? kvm_vm_ioctl_set_pmu_event_filter+0x138/0xb70 [ 771.164422][T25582] kvm_vm_ioctl_set_pmu_event_filter+0x138/0xb70 [ 771.164461][T25582] ? __pfx_kvm_vm_ioctl_set_pmu_event_filter+0x10/0x10 [ 771.164488][T25582] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 771.164525][T25582] ? look_up_lock_class+0x55/0x120 [ 771.164558][T25582] kvm_arch_vm_ioctl+0xdb8/0x18d0 [ 771.164582][T25582] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 771.164600][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.164636][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.164666][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.164694][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.164722][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.164756][T25582] ? find_held_lock+0x2b/0x80 [ 771.164772][T25582] ? is_bpf_text_address+0x8a/0x1a0 [ 771.164802][T25582] ? is_bpf_text_address+0x8a/0x1a0 [ 771.164831][T25582] ? bpf_ksym_find+0x128/0x1c0 [ 771.164860][T25582] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.164893][T25582] ? is_bpf_text_address+0x94/0x1a0 [ 771.164918][T25582] ? kernel_text_address+0x8d/0x100 [ 771.164948][T25582] ? __pfx_widen_string+0x10/0x10 [ 771.164967][T25582] ? __kernel_text_address+0xd/0x30 [ 771.164988][T25582] ? unwind_get_return_address+0x59/0xa0 [ 771.165017][T25582] ? arch_stack_walk+0xa6/0xf0 [ 771.165043][T25582] ? tomoyo_path_number_perm+0x46d/0x580 [ 771.165070][T25582] ? stack_trace_save+0x8e/0xc0 [ 771.165090][T25582] ? __pfx_stack_trace_save+0x10/0x10 [ 771.165110][T25582] ? stack_depot_save_flags+0x27/0x9d0 [ 771.165137][T25582] ? __lock_acquire+0x49f/0x1a40 [ 771.165161][T25582] ? tomoyo_path_number_perm+0x46d/0x580 [ 771.165191][T25582] kvm_vm_ioctl+0x1560/0x4180 [ 771.165230][T25582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.165261][T25582] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 771.165323][T25582] ? kasan_quarantine_put+0x104/0x240 [ 771.165343][T25582] ? lockdep_hardirqs_on+0x78/0x100 [ 771.165368][T25582] ? find_held_lock+0x2b/0x80 [ 771.165385][T25582] ? tomoyo_path_number_perm+0x28f/0x580 [ 771.165410][T25582] ? tomoyo_path_number_perm+0x28f/0x580 [ 771.165439][T25582] ? tomoyo_path_number_perm+0x188/0x580 [ 771.165467][T25582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 771.165502][T25582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.165536][T25582] ? do_vfs_ioctl+0x226/0x13e0 [ 771.165571][T25582] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 771.165599][T25582] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 771.165636][T25582] ? __fget_files+0x215/0x3d0 [ 771.165656][T25582] ? hook_file_ioctl_common+0x140/0x440 [ 771.165678][T25582] ? selinux_file_ioctl+0x13b/0x290 [ 771.165702][T25582] ? selinux_file_ioctl+0xb6/0x290 [ 771.165730][T25582] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 771.165759][T25582] __x64_sys_ioctl+0x18e/0x210 [ 771.165788][T25582] do_syscall_64+0x115/0x870 [ 771.165811][T25582] ? clear_bhb_loop+0x70/0xc0 [ 771.165835][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.165856][T25582] RIP: 0033:0x7f56dbf9e0d9 [ 771.165875][T25582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.165894][T25582] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.165915][T25582] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 771.165927][T25582] RDX: 00002000000006c0 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 771.165938][T25582] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 771.165949][T25582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.165960][T25582] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 771.165985][T25582] [ 771.184947][T25583] xt_l2tp: wrong L2TP version: 4 [ 771.273029][ T5534] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 771.281073][T25580] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6896'. [ 771.315190][T25591] Bluetooth: MGMT ver 1.23 [ 771.385774][T25580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.424510][ T5534] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.430242][ T5534] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 771.439617][ T5534] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.474605][ T5534] usb 10-1: config 0 descriptor?? [ 771.487773][T25601] FAULT_INJECTION: forcing a failure. [ 771.487773][T25601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.490177][ T5534] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 771.494722][T25601] CPU: 2 UID: 0 PID: 25601 Comm: syz.4.6903 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.494743][T25601] Tainted: [L]=SOFTLOCKUP [ 771.494747][T25601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.494754][T25601] Call Trace: [ 771.494758][T25601] [ 771.494764][T25601] dump_stack_lvl+0x100/0x190 [ 771.494787][T25601] should_fail_ex.cold+0x5/0xa [ 771.494803][T25601] _copy_to_user+0x32/0xd0 [ 771.494821][T25601] simple_read_from_buffer+0xcb/0x170 [ 771.494836][T25601] proc_fail_nth_read+0x1af/0x230 [ 771.494855][T25601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.494875][T25601] ? rw_verify_area+0xce/0x6d0 [ 771.494892][T25601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.494911][T25601] vfs_read+0x1e4/0xb40 [ 771.494931][T25601] ? __pfx_vfs_read+0x10/0x10 [ 771.494949][T25601] ? __fget_files+0x215/0x3d0 [ 771.494964][T25601] ? __fget_files+0x21f/0x3d0 [ 771.495084][T25601] ksys_read+0x12a/0x250 [ 771.495103][T25601] ? __pfx_ksys_read+0x10/0x10 [ 771.495127][T25601] do_syscall_64+0x115/0x870 [ 771.495149][T25601] ? clear_bhb_loop+0x70/0xc0 [ 771.495170][T25601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.495184][T25601] RIP: 0033:0x7ff87015e90e [ 771.495194][T25601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 771.495205][T25601] RSP: 002b:00007ff871132fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 771.495219][T25601] RAX: ffffffffffffffda RBX: 00007ff8711336c0 RCX: 00007ff87015e90e [ 771.495227][T25601] RDX: 000000000000000f RSI: 00007ff8711330a0 RDI: 0000000000000004 [ 771.495234][T25601] RBP: 00007ff871133090 R08: 0000000000000000 R09: 0000000000000000 [ 771.495240][T25601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.495247][T25601] R13: 00007ff870426038 R14: 00007ff870425fa0 R15: 00007fffcabe9848 [ 771.495262][T25601] [ 771.526034][T25600] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 3864 at bInterval 1 > max ISOC 1023, may drop data! [ 771.610563][T25600] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 771.615135][T25600] udc dummy_udc.0: failed to start g1: -19 [ 771.621624][T25600] UDC core: g1: couldn't find an available UDC or it's busy [ 771.754058][T25617] SELinux: policydb string does not match my string SE Linux [ 771.757214][T25617] SELinux: failed to load policy [ 771.932643][T25627] fuse: Bad value for 'fd' [ 772.004688][ T5896] usb 10-1: USB disconnect, device number 27 [ 772.090379][T25633] loop4: detected capacity change from 0 to 2640 [ 772.098025][T25422] buffer_io_error: 10 callbacks suppressed [ 772.098038][T25422] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.116438][T25633] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.123953][T25422] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.130147][T25633] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.134872][T25633] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.139318][T25633] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.142456][ T42] audit: type=1400 audit(1786448977.871:21934): avc: denied { map } for pid=25632 comm="syz.4.6917" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.142939][T25633] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.158277][ T42] audit: type=1400 audit(1786448977.871:21935): avc: denied { execute } for pid=25632 comm="syz.4.6917" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.160168][T25422] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.161510][T25636] Buffer I/O error on dev loop4, logical block 73, async page read [ 772.161838][T25636] Buffer I/O error on dev loop4, logical block 73, async page read [ 772.170730][T25635] FAULT_INJECTION: forcing a failure. [ 772.170730][T25635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.170765][T25635] CPU: 0 UID: 0 PID: 25635 Comm: syz.6.6918 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.170789][T25635] Tainted: [L]=SOFTLOCKUP [ 772.170795][T25635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 772.170806][T25635] Call Trace: [ 772.170812][T25635] [ 772.170819][T25635] dump_stack_lvl+0x100/0x190 [ 772.170846][T25635] should_fail_ex.cold+0x5/0xa [ 772.170869][T25635] _copy_from_iter+0x1f4/0x1690 [ 772.170893][T25635] ? __asan_memset+0x23/0x50 [ 772.170913][T25635] ? __pfx__copy_from_iter+0x10/0x10 [ 772.170937][T25635] ? __pfx___alloc_skb+0x10/0x10 [ 772.170970][T25635] netlink_sendmsg+0x808/0xda0 [ 772.170994][T25635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.171016][T25635] ? selinux_socket_sendmsg+0x198/0x2f0 [ 772.171046][T25635] ____sys_sendmsg+0xa4d/0xbe0 [ 772.171072][T25635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.171093][T25635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.171133][T25635] ___sys_sendmsg+0x190/0x1e0 [ 772.171153][T25635] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.171169][T25635] ? __lock_acquire+0x49f/0x1a40 [ 772.171193][T25635] ? get_pid_task+0x106/0x250 [ 772.171238][T25635] __sys_sendmsg+0x160/0x210 [ 772.171262][T25635] ? __pfx___sys_sendmsg+0x10/0x10 [ 772.171299][T25635] do_syscall_64+0x115/0x870 [ 772.171322][T25635] ? clear_bhb_loop+0x70/0xc0 [ 772.171351][T25635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.171369][T25635] RIP: 0033:0x7f002e99e0d9 [ 772.171385][T25635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.171402][T25635] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.171420][T25635] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 772.171431][T25635] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000008 [ 772.171442][T25635] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 772.171453][T25635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.171463][T25635] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 772.171489][T25635] [ 772.289335][T25633] ldm_validate_partition_table(): Disk read failed. [ 772.293626][T25633] Dev loop4: unable to read RDB block 0 [ 772.296245][T25633] loop4: unable to read partition table [ 772.301068][T25633] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 772.331848][T25638] syzkaller0: entered promiscuous mode [ 772.333188][ T5138] ldm_validate_partition_table(): Disk read failed. [ 772.335704][T25638] syzkaller0: entered allmulticast mode [ 772.337485][ T5138] Dev loop4: unable to read RDB block 0 [ 772.342142][ T5138] loop4: unable to read partition table [ 772.709277][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6927'. [ 772.807448][T25662] syzkaller0: entered promiscuous mode [ 772.809433][T25662] syzkaller0: entered allmulticast mode [ 772.964675][T25667] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.6932'. [ 773.131223][T25672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6934'. [ 773.336321][T25678] syzkaller0: entered promiscuous mode [ 773.353667][T25678] syzkaller0: entered allmulticast mode [ 773.392424][T25680] netlink: 'syz.6.6938': attribute type 8 has an invalid length. [ 773.693093][T25694] FAULT_INJECTION: forcing a failure. [ 773.693093][T25694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.698788][T25694] CPU: 2 UID: 0 PID: 25694 Comm: syz.1.6942 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.698819][T25694] Tainted: [L]=SOFTLOCKUP [ 773.698826][T25694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.698835][T25694] Call Trace: [ 773.698843][T25694] [ 773.698850][T25694] dump_stack_lvl+0x100/0x190 [ 773.698880][T25694] should_fail_ex.cold+0x5/0xa [ 773.698903][T25694] _copy_from_user+0x2e/0xd0 [ 773.698928][T25694] move_addr_to_kernel+0x65/0x170 [ 773.698948][T25694] __sys_sendto+0x1b8/0x4e0 [ 773.698970][T25694] ? __pfx___sys_sendto+0x10/0x10 [ 773.698999][T25694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 773.699034][T25694] ? ksys_write+0x1ac/0x250 [ 773.699052][T25694] ? __pfx_ksys_write+0x10/0x10 [ 773.699071][T25694] __x64_sys_sendto+0xe0/0x1c0 [ 773.699092][T25694] ? do_syscall_64+0x90/0x870 [ 773.699115][T25694] ? lockdep_hardirqs_on+0x78/0x100 [ 773.699138][T25694] do_syscall_64+0x115/0x870 [ 773.699160][T25694] ? clear_bhb_loop+0x70/0xc0 [ 773.699182][T25694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.699200][T25694] RIP: 0033:0x7f56dbf9e0d9 [ 773.699216][T25694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.699233][T25694] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 773.699252][T25694] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 773.699263][T25694] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 773.699274][T25694] RBP: 00007f56dcd9e090 R08: 0000200000000140 R09: 0000000000000014 [ 773.699285][T25694] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 773.699295][T25694] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 773.699337][T25694] [ 776.443274][T25684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.993947][T17080] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 777.145323][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 777.152679][T25709] FAULT_INJECTION: forcing a failure. [ 777.152679][T25709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.166206][T25709] CPU: 0 UID: 0 PID: 25709 Comm: syz.1.6947 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.166242][T25709] Tainted: [L]=SOFTLOCKUP [ 777.166250][T25709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 777.166260][T25709] Call Trace: [ 777.166267][T25709] [ 777.166274][T25709] dump_stack_lvl+0x100/0x190 [ 777.166307][T25709] should_fail_ex.cold+0x5/0xa [ 777.166331][T25709] _copy_to_user+0x32/0xd0 [ 777.166359][T25709] raw_ioctl+0x1c73/0x2b80 [ 777.166393][T25709] ? __pfx_raw_ioctl+0x10/0x10 [ 777.166418][T25709] ? selinux_file_ioctl+0x13b/0x290 [ 777.166446][T25709] ? selinux_file_ioctl+0xb6/0x290 [ 777.166473][T25709] ? __pfx_raw_ioctl+0x10/0x10 [ 777.166500][T25709] __x64_sys_ioctl+0x18e/0x210 [ 777.166531][T25709] do_syscall_64+0x115/0x870 [ 777.166556][T25709] ? clear_bhb_loop+0x70/0xc0 [ 777.166578][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.166597][T25709] RIP: 0033:0x7f56dbf9e0d9 [ 777.166614][T25709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.166630][T25709] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.166651][T25709] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 777.166663][T25709] RDX: 0000200000000140 RSI: 0000000083c0550b RDI: 0000000000000003 [ 777.166675][T25709] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 777.166685][T25709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.166695][T25709] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 777.166720][T25709] [ 777.168576][T17080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 777.254044][T17080] usb 6-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 777.258221][T17080] usb 6-1: no configurations [ 777.260200][T17080] usb 6-1: can't read configurations, error -22 [ 777.347040][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 777.350554][ T10] usb 10-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 777.356284][ T10] usb 10-1: no configurations [ 777.358601][ T10] usb 10-1: can't read configurations, error -22 [ 777.461931][T25742] sysfs: Unknown parameter 'default_permissions' [ 777.479330][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6959'. [ 777.484328][T25742] smc: net device lo applied user defined pnetid SYZ0 [ 777.663915][T25753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52727 sclass=netlink_route_socket pid=25753 comm=syz.4.6965 [ 777.686996][T25753] fuse: Unknown parameter '' [ 777.827688][T25765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6970'. [ 777.833908][T25765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6970'. [ 777.871243][ T42] audit: type=1326 audit(1786448983.601:21936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.892904][ T42] audit: type=1326 audit(1786448983.601:21937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.903121][ T42] audit: type=1326 audit(1786448983.601:21938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.912442][ T42] audit: type=1326 audit(1786448983.601:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.930127][ T42] audit: type=1326 audit(1786448983.661:21940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.943528][ T42] audit: type=1326 audit(1786448983.661:21941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.954257][ T42] audit: type=1326 audit(1786448983.661:21942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff87015e90e code=0x7ffc0000 [ 777.964142][ T42] audit: type=1326 audit(1786448983.661:21943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.975860][ T42] audit: type=1326 audit(1786448983.661:21944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 777.986174][ T42] audit: type=1326 audit(1786448983.661:21945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25760 comm="syz.4.6969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87019e0d9 code=0x7ffc0000 [ 778.003330][T11455] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 778.009146][T25776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6971'. [ 778.183405][T11455] usb 11-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 778.190158][T11455] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.214759][T11455] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.237865][T25781] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 778.246927][T11455] as10x_usb: device has been detected [ 778.261539][T11455] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 778.290496][T11455] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 778.314942][T11455] as10x_usb: error during firmware upload part1 [ 778.318421][T11455] Registered device Abilis Systems DVB-Titan [ 778.544815][T25790] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 778.856773][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6985'. [ 778.863991][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6985'. [ 778.980505][T25815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.982335][T25805] FAULT_INJECTION: forcing a failure. [ 778.982335][T25805] name failslab, interval 1, probability 0, space 0, times 0 [ 779.002500][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.6.6967 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.002532][T25805] Tainted: [L]=SOFTLOCKUP [ 779.002538][T25805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.002548][T25805] Call Trace: [ 779.002556][T25805] [ 779.002563][T25805] dump_stack_lvl+0x100/0x190 [ 779.002591][T25805] should_fail_ex.cold+0x5/0xa [ 779.002614][T25805] should_failslab+0xc2/0x120 [ 779.002638][T25805] kmem_cache_alloc_noprof+0x91/0x6a0 [ 779.002659][T25805] ? trace_kmem_cache_alloc+0xdd/0x100 [ 779.002682][T25805] ? security_file_alloc+0x34/0x2c0 [ 779.002703][T25805] security_file_alloc+0x34/0x2c0 [ 779.002738][T25805] init_file+0x95/0x480 [ 779.002761][T25805] alloc_empty_file+0x79/0x1c0 [ 779.002783][T25805] path_openat+0xe7/0x4280 [ 779.002801][T25805] ? __kasan_slab_alloc+0x89/0x90 [ 779.002838][T25805] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 779.002856][T25805] ? do_getname+0x35/0x390 [ 779.002892][T25805] ? do_sys_openat2+0xc7/0x1e0 [ 779.002912][T25805] ? __x64_sys_openat+0x12d/0x210 [ 779.002932][T25805] ? do_syscall_64+0x115/0x870 [ 779.002954][T25805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.002979][T25805] ? __pfx_path_openat+0x10/0x10 [ 779.003003][T25805] do_file_open+0x20e/0x430 [ 779.003023][T25805] ? __pfx_do_file_open+0x10/0x10 [ 779.003058][T25805] ? alloc_fd+0x471/0x7a0 [ 779.003080][T25805] ? do_getname+0x191/0x390 [ 779.003104][T25805] do_sys_openat2+0x10f/0x1e0 [ 779.003125][T25805] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.003144][T25805] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.003168][T25805] ? __fget_files+0x21f/0x3d0 [ 779.003189][T25805] __x64_sys_openat+0x12d/0x210 [ 779.003211][T25805] ? __pfx___x64_sys_openat+0x10/0x10 [ 779.003231][T25805] ? ksys_write+0x1ac/0x250 [ 779.003255][T25805] do_syscall_64+0x115/0x870 [ 779.003272][T25805] ? clear_bhb_loop+0x70/0xc0 [ 779.003293][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.003310][T25805] RIP: 0033:0x7f002e95e90e [ 779.003325][T25805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 779.003341][T25805] RSP: 002b:00007f002f929b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 779.003355][T25805] RAX: ffffffffffffffda RBX: 00007f002f92a6c0 RCX: 00007f002e95e90e [ 779.003366][T25805] RDX: 0000000000000802 RSI: 00007f002f929c00 RDI: ffffffffffffff9c [ 779.003377][T25805] RBP: 00007f002f929c00 R08: 0000000000000000 R09: 0000000000000000 [ 779.003387][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 779.003397][T25805] R13: 00007f002ec26128 R14: 00007f002ec26090 R15: 00007ffcf2426978 [ 779.003420][T25805] [ 779.157859][T25817] FAULT_INJECTION: forcing a failure. [ 779.157859][T25817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.163926][T25817] CPU: 1 UID: 0 PID: 25817 Comm: syz.1.6990 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.163963][T25817] Tainted: [L]=SOFTLOCKUP [ 779.163971][T25817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.163984][T25817] Call Trace: [ 779.163993][T25817] [ 779.164004][T25817] dump_stack_lvl+0x100/0x190 [ 779.164041][T25817] should_fail_ex.cold+0x5/0xa [ 779.164069][T25817] _copy_from_iter+0x1f4/0x1690 [ 779.164103][T25817] ? __asan_memset+0x23/0x50 [ 779.164127][T25817] ? __pfx__copy_from_iter+0x10/0x10 [ 779.164156][T25817] ? __pfx___alloc_skb+0x10/0x10 [ 779.164181][T25817] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 779.164213][T25817] ? sock_has_perm+0x25a/0x2f0 [ 779.164241][T25817] ? __pfx_sock_has_perm+0x10/0x10 [ 779.164275][T25817] netlink_sendmsg+0x808/0xda0 [ 779.164305][T25817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.164330][T25817] ? selinux_socket_sendmsg+0x198/0x2f0 [ 779.164361][T25817] ____sys_sendmsg+0xa4d/0xbe0 [ 779.164390][T25817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.164414][T25817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.164467][T25817] ___sys_sendmsg+0x190/0x1e0 [ 779.164490][T25817] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.164508][T25817] ? __lock_acquire+0x49f/0x1a40 [ 779.164535][T25817] ? get_pid_task+0x106/0x250 [ 779.164589][T25817] __sys_sendmsg+0x160/0x210 [ 779.164617][T25817] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.164661][T25817] do_syscall_64+0x115/0x870 [ 779.164688][T25817] ? clear_bhb_loop+0x70/0xc0 [ 779.164711][T25817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.164730][T25817] RIP: 0033:0x7f56dbf9e0d9 [ 779.164748][T25817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.164765][T25817] RSP: 002b:00007f56dcd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.164783][T25817] RAX: ffffffffffffffda RBX: 00007f56dc225fa0 RCX: 00007f56dbf9e0d9 [ 779.164794][T25817] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000003 [ 779.164806][T25817] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 779.164817][T25817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.164827][T25817] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 779.164853][T25817] [ 779.479549][T25833] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 779.499712][T25833] FAULT_INJECTION: forcing a failure. [ 779.499712][T25833] name failslab, interval 1, probability 0, space 0, times 0 [ 779.504845][T25833] CPU: 2 UID: 0 PID: 25833 Comm: syz.4.6996 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.504876][T25833] Tainted: [L]=SOFTLOCKUP [ 779.504883][T25833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.504895][T25833] Call Trace: [ 779.504902][T25833] [ 779.504910][T25833] dump_stack_lvl+0x100/0x190 [ 779.504942][T25833] should_fail_ex.cold+0x5/0xa [ 779.504963][T25833] ? __lock_acquire+0x49f/0x1a40 [ 779.504990][T25833] should_failslab+0xc2/0x120 [ 779.505016][T25833] kmem_cache_alloc_noprof+0x91/0x6a0 [ 779.505038][T25833] ? ebt_do_table+0x1938/0x2250 [ 779.505060][T25833] ? __skb_ext_alloc+0x1a/0x80 [ 779.505083][T25833] __skb_ext_alloc+0x1a/0x80 [ 779.505098][T25833] skb_ext_add+0x40b/0x810 [ 779.505112][T25833] ? __asan_memset+0x23/0x50 [ 779.505129][T25833] ? br_validate_ipv4+0x422/0x780 [ 779.505159][T25833] br_nf_pre_routing+0xc8d/0x1560 [ 779.505180][T25833] br_handle_frame+0xce9/0x1540 [ 779.505211][T25833] ? __pfx_br_handle_frame+0x10/0x10 [ 779.505238][T25833] ? packet_rcv+0x171/0x17b0 [ 779.505262][T25833] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 779.505300][T25833] ? __pfx_packet_rcv+0x10/0x10 [ 779.505324][T25833] ? __pfx_br_handle_frame+0x10/0x10 [ 779.505351][T25833] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 779.505384][T25833] ? __skb_flow_dissect+0x1dec/0x6c30 [ 779.505404][T25833] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 779.505433][T25833] ? __pfx___skb_flow_dissect+0x10/0x10 [ 779.505462][T25833] ? __lock_acquire+0x49f/0x1a40 [ 779.505490][T25833] __netif_receive_skb_one_core+0xb0/0x1e0 [ 779.505511][T25833] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 779.505532][T25833] ? lock_acquire+0x1b9/0x370 [ 779.505561][T25833] __netif_receive_skb+0x1f/0x120 [ 779.505583][T25833] netif_receive_skb+0x139/0x7d0 [ 779.505603][T25833] ? __pfx_netif_receive_skb+0x10/0x10 [ 779.505632][T25833] tun_rx_batched.isra.0+0x3f6/0x750 [ 779.505665][T25833] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 779.505700][T25833] ? tun_get_user+0x1cc8/0x3c20 [ 779.505725][T25833] tun_get_user+0x1e31/0x3c20 [ 779.505755][T25833] ? __pfx_tun_get_user+0x10/0x10 [ 779.505776][T25833] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 779.505810][T25833] ? find_held_lock+0x2b/0x80 [ 779.505827][T25833] ? tun_get+0x191/0x370 [ 779.505842][T25833] ? tun_get+0x191/0x370 [ 779.505865][T25833] tun_chr_write_iter+0xdc/0x200 [ 779.505888][T25833] vfs_write+0x6ac/0x1050 [ 779.505908][T25833] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 779.505930][T25833] ? __pfx_vfs_write+0x10/0x10 [ 779.505945][T25833] ? find_held_lock+0x2b/0x80 [ 779.505979][T25833] ksys_write+0x12a/0x250 [ 779.505997][T25833] ? __pfx_ksys_write+0x10/0x10 [ 779.506022][T25833] do_syscall_64+0x115/0x870 [ 779.506046][T25833] ? clear_bhb_loop+0x70/0xc0 [ 779.506069][T25833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.506088][T25833] RIP: 0033:0x7ff87015e90e [ 779.506105][T25833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 779.506122][T25833] RSP: 002b:00007ff871132fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.506141][T25833] RAX: ffffffffffffffda RBX: 00007ff8711336c0 RCX: 00007ff87015e90e [ 779.506152][T25833] RDX: 0000000000000026 RSI: 0000200000000200 RDI: 00000000000000c8 [ 779.506163][T25833] RBP: 00007ff871133090 R08: 0000000000000000 R09: 0000000000000000 [ 779.506174][T25833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.506185][T25833] R13: 00007ff870426038 R14: 00007ff870425fa0 R15: 00007fffcabe9848 [ 779.506210][T25833] [ 779.665478][T25843] binder: 25838:25843 ioctl c0306201 0 returned -14 [ 780.026107][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7006'. [ 780.178448][T25873] FAULT_INJECTION: forcing a failure. [ 780.178448][T25873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.184232][T25873] CPU: 2 UID: 0 PID: 25873 Comm: syz.5.7011 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.184265][T25873] Tainted: [L]=SOFTLOCKUP [ 780.184272][T25873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.184283][T25873] Call Trace: [ 780.184290][T25873] [ 780.184298][T25873] dump_stack_lvl+0x100/0x190 [ 780.184331][T25873] should_fail_ex.cold+0x5/0xa [ 780.184357][T25873] _copy_from_iter+0x1f4/0x1690 [ 780.184390][T25873] ? __pfx__copy_from_iter+0x10/0x10 [ 780.184422][T25873] ? __pfx___might_resched+0x10/0x10 [ 780.184446][T25873] ? kfree+0x1e5/0x6c0 [ 780.184469][T25873] file_tty_write.isra.0+0x45b/0x890 [ 780.184500][T25873] vfs_write+0x6ac/0x1050 [ 780.184520][T25873] ? __pfx_tty_write+0x10/0x10 [ 780.184544][T25873] ? __pfx_vfs_write+0x10/0x10 [ 780.184561][T25873] ? find_held_lock+0x2b/0x80 [ 780.184596][T25873] ksys_write+0x12a/0x250 [ 780.184615][T25873] ? __pfx_ksys_write+0x10/0x10 [ 780.184641][T25873] do_syscall_64+0x115/0x870 [ 780.184666][T25873] ? clear_bhb_loop+0x70/0xc0 [ 780.184690][T25873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.184710][T25873] RIP: 0033:0x7fc434f9e0d9 [ 780.184727][T25873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.184750][T25873] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.184771][T25873] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 780.184784][T25873] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 780.184794][T25873] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 780.184807][T25873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.184817][T25873] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 780.184843][T25873] [ 780.754510][T11455] usb 11-1: USB disconnect, device number 3 [ 780.779463][T11455] Unregistered device Abilis Systems DVB-Titan [ 780.783371][T11455] as10x_usb: device has been disconnected [ 780.887038][T25901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7021'. [ 783.395017][T25882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.494829][T25906] __vm_enough_memory: pid: 25906, comm: syz.4.7023, bytes: 4503599627366400 not enough memory for the allocation [ 783.498739][T25911] FAULT_INJECTION: forcing a failure. [ 783.498739][T25911] name failslab, interval 1, probability 0, space 0, times 0 [ 783.505587][T25911] CPU: 0 UID: 0 PID: 25911 Comm: syz.6.7022 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.505619][T25911] Tainted: [L]=SOFTLOCKUP [ 783.505625][T25911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 783.505637][T25911] Call Trace: [ 783.505644][T25911] [ 783.505652][T25911] dump_stack_lvl+0x100/0x190 [ 783.505682][T25911] should_fail_ex.cold+0x5/0xa [ 783.505707][T25911] should_failslab+0xc2/0x120 [ 783.505733][T25911] __kmalloc_noprof+0xfc/0x820 [ 783.505755][T25911] ? argv_split+0x173/0x420 [ 783.505783][T25911] argv_split+0x173/0x420 [ 783.505807][T25911] ? __pfx___trace_uprobe_create+0x10/0x10 [ 783.505835][T25911] trace_probe_create+0x7d/0x100 [ 783.505855][T25911] ? __pfx_trace_probe_create+0x10/0x10 [ 783.505884][T25911] dyn_event_create+0x46/0x70 [ 783.505902][T25911] create_or_delete_trace_uprobe+0x5a/0xb0 [ 783.505927][T25911] trace_parse_run_command+0x1ab/0x3b0 [ 783.505949][T25911] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 783.505978][T25911] vfs_write+0x2aa/0x1050 [ 783.505997][T25911] ? __pfx_probes_write+0x10/0x10 [ 783.506022][T25911] ? __pfx_vfs_write+0x10/0x10 [ 783.506039][T25911] ? __fget_files+0x215/0x3d0 [ 783.506066][T25911] ? __fget_files+0x21f/0x3d0 [ 783.506093][T25911] ksys_write+0x12a/0x250 [ 783.506110][T25911] ? __pfx_ksys_write+0x10/0x10 [ 783.506136][T25911] do_syscall_64+0x115/0x870 [ 783.506159][T25911] ? clear_bhb_loop+0x70/0xc0 [ 783.506183][T25911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.506201][T25911] RIP: 0033:0x7f002e99e0d9 [ 783.506218][T25911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.506235][T25911] RSP: 002b:00007f002f94b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.506253][T25911] RAX: ffffffffffffffda RBX: 00007f002ec25fa0 RCX: 00007f002e99e0d9 [ 783.506266][T25911] RDX: 0000000000000027 RSI: 0000200000000380 RDI: 0000000000000003 [ 783.506277][T25911] RBP: 00007f002f94b090 R08: 0000000000000000 R09: 0000000000000000 [ 783.506288][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.506299][T25911] R13: 00007f002ec26038 R14: 00007f002ec25fa0 R15: 00007ffcf2426978 [ 783.506325][T25911] [ 783.531356][T25913] fuse: Unknown parameter 'use00000000000000000000' [ 783.545442][T25914] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7024'. [ 783.767180][T25927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.803660][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7026'. [ 783.811396][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7026'. [ 783.845558][T25933] FAULT_INJECTION: forcing a failure. [ 783.845558][T25933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.850922][T25933] CPU: 3 UID: 0 PID: 25933 Comm: syz.5.7031 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.850951][T25933] Tainted: [L]=SOFTLOCKUP [ 783.850958][T25933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 783.850969][T25933] Call Trace: [ 783.850977][T25933] [ 783.850985][T25933] dump_stack_lvl+0x100/0x190 [ 783.851015][T25933] should_fail_ex.cold+0x5/0xa [ 783.851038][T25933] __kvm_read_guest_page+0x186/0x250 [ 783.851062][T25933] kvm_fetch_guest_virt+0x128/0x1a0 [ 783.851086][T25933] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 783.851108][T25933] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 783.851131][T25933] ? emulator_get_segment+0x38d/0x440 [ 783.851152][T25933] ? __pfx_emulator_get_segment+0x10/0x10 [ 783.851175][T25933] x86_decode_insn+0x3ca/0x6da0 [ 783.851194][T25933] ? __lock_acquire+0x49f/0x1a40 [ 783.851224][T25933] ? __pfx_x86_decode_insn+0x10/0x10 [ 783.851237][T25933] ? handle_task_switch+0x6a0/0xa20 [ 783.851263][T25933] ? init_decode_cache+0xd/0x2b0 [ 783.851275][T25933] ? init_emulate_ctxt+0x43c/0x700 [ 783.851290][T25933] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 783.851305][T25933] ? handle_task_switch+0x6a0/0xa20 [ 783.851325][T25933] ? init_emulate_ctxt+0x43c/0x700 [ 783.851342][T25933] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 783.851363][T25933] x86_emulate_instruction+0x1052/0x1df0 [ 783.851385][T25933] ? mmio_info_in_cache+0x17b/0x550 [ 783.851399][T25933] kvm_mmu_page_fault+0xb9b/0x1ab0 [ 783.851422][T25933] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 783.851439][T25933] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 783.851456][T25933] handle_ept_misconfig+0x11e/0x3f0 [ 783.851476][T25933] vmx_handle_exit+0x1b1c/0x1ef0 [ 783.851502][T25933] vcpu_run+0x35ab/0x5de0 [ 783.851560][T25933] ? __pfx_vcpu_run+0x10/0x10 [ 783.851588][T25933] ? complete_emulated_mmio+0x102/0x710 [ 783.851608][T25933] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 783.851625][T25933] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 783.851647][T25933] kvm_vcpu_ioctl+0x730/0x1700 [ 783.851662][T25933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 783.851675][T25933] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.851691][T25933] ? do_vfs_ioctl+0x226/0x13e0 [ 783.851710][T25933] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 783.851727][T25933] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 783.851754][T25933] ? __fget_files+0x215/0x3d0 [ 783.851770][T25933] ? hook_file_ioctl_common+0x140/0x440 [ 783.851801][T25933] ? selinux_file_ioctl+0x13b/0x290 [ 783.851825][T25933] ? selinux_file_ioctl+0xb6/0x290 [ 783.851852][T25933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 783.851873][T25933] __x64_sys_ioctl+0x18e/0x210 [ 783.851900][T25933] do_syscall_64+0x115/0x870 [ 783.851917][T25933] ? clear_bhb_loop+0x70/0xc0 [ 783.851932][T25933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.851958][T25933] RIP: 0033:0x7fc434f9e0d9 [ 783.851969][T25933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.851981][T25933] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.851993][T25933] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 783.852000][T25933] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 783.852008][T25933] RBP: 00007fc435d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 783.852015][T25933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.852021][T25933] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 783.852037][T25933] [ 783.852993][ T5896] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 784.162961][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 784.168122][ T5896] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 784.176659][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 784.176680][ T42] audit: type=1400 audit(1786448989.911:21996): avc: denied { name_bind } for pid=25935 comm="syz.5.7032" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 784.184176][ T5896] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 784.194271][ T5896] usb 6-1: config 0 has no interface number 0 [ 784.196966][ T5896] usb 6-1: too many endpoints for config 0 interface 209 altsetting 44: 120, using maximum allowed: 30 [ 784.201235][ T5896] usb 6-1: config 0 interface 209 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 784.206718][ T5896] usb 6-1: config 0 interface 209 has no altsetting 0 [ 784.209921][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.215932][ T5896] usb 6-1: config 0 descriptor?? [ 784.224957][ T5896] as10x_usb: device has been detected [ 784.234702][ T5896] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 784.267952][ T5896] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 784.286365][ T5896] as10x_usb: error during firmware upload part1 [ 784.289850][ T5896] Registered device nBox DVB-T Dongle [ 784.425169][ T5417] usb 6-1: USB disconnect, device number 95 [ 784.450225][ T5417] Unregistered device nBox DVB-T Dongle [ 784.481747][ T5417] as10x_usb: device has been disconnected [ 787.232236][T25938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.293472][T25957] FAULT_INJECTION: forcing a failure. [ 787.293472][T25957] name failslab, interval 1, probability 0, space 0, times 0 [ 787.298437][T25957] CPU: 2 UID: 0 PID: 25957 Comm: syz.1.7038 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.298457][T25957] Tainted: [L]=SOFTLOCKUP [ 787.298462][T25957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.298471][T25957] Call Trace: [ 787.298478][T25957] [ 787.298486][T25957] dump_stack_lvl+0x100/0x190 [ 787.298517][T25957] should_fail_ex.cold+0x5/0xa [ 787.298536][T25957] ? __lock_acquire+0x49f/0x1a40 [ 787.298558][T25957] should_failslab+0xc2/0x120 [ 787.298575][T25957] kmem_cache_alloc_noprof+0x91/0x6a0 [ 787.298590][T25957] ? ebt_do_table+0x1938/0x2250 [ 787.298604][T25957] ? __skb_ext_alloc+0x1a/0x80 [ 787.298618][T25957] __skb_ext_alloc+0x1a/0x80 [ 787.298629][T25957] skb_ext_add+0x40b/0x810 [ 787.298644][T25957] ? __asan_memset+0x23/0x50 [ 787.298662][T25957] ? br_validate_ipv4+0x422/0x780 [ 787.298692][T25957] br_nf_pre_routing+0xc8d/0x1560 [ 787.298712][T25957] br_handle_frame+0xce9/0x1540 [ 787.298734][T25957] ? __pfx_br_handle_frame+0x10/0x10 [ 787.298754][T25957] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 787.298773][T25957] ? stack_trace_save+0x8e/0xc0 [ 787.298788][T25957] ? __pfx_br_handle_frame+0x10/0x10 [ 787.298807][T25957] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 787.298826][T25957] ? __skb_flow_dissect+0x1dec/0x6c30 [ 787.298839][T25957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 787.298857][T25957] ? __pfx___skb_flow_dissect+0x10/0x10 [ 787.298874][T25957] ? __lock_acquire+0x49f/0x1a40 [ 787.298891][T25957] __netif_receive_skb_one_core+0xb0/0x1e0 [ 787.298905][T25957] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 787.298919][T25957] ? lock_acquire+0x1b9/0x370 [ 787.298937][T25957] __netif_receive_skb+0x1f/0x120 [ 787.298955][T25957] netif_receive_skb+0x139/0x7d0 [ 787.298973][T25957] ? __pfx_netif_receive_skb+0x10/0x10 [ 787.299000][T25957] tun_rx_batched.isra.0+0x3f6/0x750 [ 787.299030][T25957] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 787.299062][T25957] ? tun_get_user+0x1cc8/0x3c20 [ 787.299083][T25957] tun_get_user+0x1e31/0x3c20 [ 787.299111][T25957] ? __pfx_tun_get_user+0x10/0x10 [ 787.299130][T25957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 787.299164][T25957] ? find_held_lock+0x2b/0x80 [ 787.299180][T25957] ? tun_get+0x191/0x370 [ 787.299195][T25957] ? tun_get+0x191/0x370 [ 787.299223][T25957] tun_chr_write_iter+0xdc/0x200 [ 787.299244][T25957] vfs_write+0x6ac/0x1050 [ 787.299262][T25957] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 787.299282][T25957] ? __pfx_vfs_write+0x10/0x10 [ 787.299292][T25957] ? find_held_lock+0x2b/0x80 [ 787.299311][T25957] ksys_write+0x12a/0x250 [ 787.299322][T25957] ? __pfx_ksys_write+0x10/0x10 [ 787.299341][T25957] do_syscall_64+0x115/0x870 [ 787.299364][T25957] ? clear_bhb_loop+0x70/0xc0 [ 787.299385][T25957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.299402][T25957] RIP: 0033:0x7f56dbf5e90e [ 787.299418][T25957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 787.299434][T25957] RSP: 002b:00007f56dcd9dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.299451][T25957] RAX: ffffffffffffffda RBX: 00007f56dcd9e6c0 RCX: 00007f56dbf5e90e [ 787.299462][T25957] RDX: 0000000000000026 RSI: 0000200000000200 RDI: 00000000000000c8 [ 787.299472][T25957] RBP: 00007f56dcd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 787.299482][T25957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.299492][T25957] R13: 00007f56dc226038 R14: 00007f56dc225fa0 R15: 00007ffe8a9d62d8 [ 787.299542][T25957] [ 787.530614][T25972] macvlan0: entered promiscuous mode [ 787.545194][ T42] audit: type=1400 audit(1786448993.271:21997): avc: denied { write } for pid=25970 comm="syz.4.7045" name="nullb" dev="configfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.558504][T25967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7042'. [ 787.614477][T25979] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7047'. [ 787.625425][T25979] bond0: Error: CAN devices cannot be enslaved [ 787.657738][T25977] ------------[ cut here ]------------ [ 787.659949][T25977] do not call blocking ops when !TASK_RUNNING; state=1 set at [] hpet_read+0x21b/0x6a0 [ 787.664383][T25977] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#2: syz.5.7046/25977 [ 787.668288][T25977] Modules linked in: [ 787.669972][T25977] CPU: 2 UID: 0 PID: 25977 Comm: syz.5.7046 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.675172][T25977] Tainted: [L]=SOFTLOCKUP [ 787.677123][T25977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.678188][T25982] trusted_key: encrypted_key: insufficient parameters specified [ 787.681334][T25977] RIP: 0010:__might_sleep+0x97/0xc0 [ 787.681370][T25977] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 2c 24 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 dd 3d a5 00 eb 9f 89 74 24 04 e8 02 3e a5 [ 787.681393][T25977] RSP: 0018:ffffc9000e18fbc0 EFLAGS: 00010286 [ 787.681463][T25977] RAX: dffffc0000000000 RBX: ffffffff8c52f600 RCX: ffffffff85a8b8eb [ 787.702889][T25977] RDX: ffffffff85a8b8eb RSI: 0000000000000001 RDI: ffffffff9124e850 [ 787.706272][T25977] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 787.709374][T25977] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880564e4a80 [ 787.712375][T25977] R13: 0000000000000000 R14: ffff88802553a380 R15: ffffed100ac9cc5e [ 787.715706][T25977] FS: 00007fc435d7f6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 787.719238][T25977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.721949][T25977] CR2: 00007ff870f556c8 CR3: 0000000057485000 CR4: 0000000000352ef0 [ 787.726305][T25977] Call Trace: [ 787.727838][T25977] [ 787.728890][T25977] __might_fault+0x8b/0x140 [ 787.730906][T25977] hpet_read+0x56f/0x6a0 [ 787.733068][T25977] ? __pfx_hpet_read+0x10/0x10 [ 787.734964][T25977] ? avc_policy_seqno+0x9/0x20 [ 787.736932][T25977] ? selinux_file_permission+0x8f/0x6d0 [ 787.739150][T25977] ? __pfx_default_wake_function+0x10/0x10 [ 787.741469][T25977] ? bpf_lsm_file_permission+0x9/0x10 [ 787.744341][T25977] ? security_file_permission+0x76/0x210 [ 787.746507][T25977] ? rw_verify_area+0xce/0x6d0 [ 787.748403][T25977] ? __pfx_hpet_read+0x10/0x10 [ 787.750506][T25977] vfs_read+0x1e4/0xb40 [ 787.752242][T25977] ? __pfx_vfs_read+0x10/0x10 [ 787.754260][T25977] ? find_held_lock+0x2b/0x80 [ 787.756101][T25977] ? __fget_files+0x215/0x3d0 [ 787.757990][T25977] ? __fget_files+0x215/0x3d0 [ 787.759794][T25977] ? __fget_files+0x21f/0x3d0 [ 787.761682][T25977] ksys_read+0x12a/0x250 [ 787.763474][T25977] ? __pfx_ksys_read+0x10/0x10 [ 787.765115][T25977] do_syscall_64+0x115/0x870 [ 787.766728][T25977] ? clear_bhb_loop+0x70/0xc0 [ 787.768341][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.770482][T25977] RIP: 0033:0x7fc434f9e0d9 [ 787.772220][T25977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.779854][T25977] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.783121][T25977] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 787.785880][T25977] RDX: 0000000000002020 RSI: 0000200000000380 RDI: 0000000000000003 [ 787.788788][T25977] RBP: 00007fc435035024 R08: 0000000000000000 R09: 0000000000000000 [ 787.791794][T25977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.795117][T25977] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 787.798442][T25977] [ 787.799810][T25977] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 787.802938][T25977] CPU: 2 UID: 0 PID: 25977 Comm: syz.5.7046 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.807292][T25977] Tainted: [L]=SOFTLOCKUP [ 787.808976][T25977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.812685][T25977] Call Trace: [ 787.814064][T25977] [ 787.815264][T25977] dump_stack_lvl+0x100/0x190 [ 787.817181][T25977] vpanic+0x552/0x970 [ 787.818788][T25977] ? __pfx_vpanic+0x10/0x10 [ 787.820593][T25977] panic+0xd1/0xe0 [ 787.822035][T25977] ? __pfx_panic+0x10/0x10 [ 787.824173][T25977] check_panic_on_warn.cold+0x19/0x34 [ 787.826564][T25977] ? __might_sleep+0x94/0xc0 [ 787.828795][T25977] __warn.cold+0x191/0x318 [ 787.830636][T25977] __report_bug+0x30f/0x440 [ 787.832536][T25977] ? __might_sleep+0x94/0xc0 [ 787.834677][T25977] ? __pfx___report_bug+0x10/0x10 [ 787.837276][T25977] ? rcu_is_watching+0x12/0xc0 [ 787.839271][T25977] ? hpet_read+0x21b/0x6a0 [ 787.840985][T25977] ? hpet_read+0x21b/0x6a0 [ 787.842768][T25977] ? rcu_is_watching+0x12/0xc0 [ 787.844706][T25977] ? trace_sched_exit_tp+0x120/0x160 [ 787.846702][T25977] report_bug_entry+0xe1/0x290 [ 787.848401][T25977] ? __might_sleep+0x97/0xc0 [ 787.849879][T25977] handle_bug+0x1cd/0x2a0 [ 787.851438][T25977] exc_invalid_op+0x17/0x50 [ 787.853377][T25977] asm_exc_invalid_op+0x1a/0x20 [ 787.855354][T25977] RIP: 0010:__might_sleep+0x97/0xc0 [ 787.857465][T25977] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 2c 24 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 dd 3d a5 00 eb 9f 89 74 24 04 e8 02 3e a5 [ 787.865028][T25977] RSP: 0018:ffffc9000e18fbc0 EFLAGS: 00010286 [ 787.867251][T25977] RAX: dffffc0000000000 RBX: ffffffff8c52f600 RCX: ffffffff85a8b8eb [ 787.870398][T25977] RDX: ffffffff85a8b8eb RSI: 0000000000000001 RDI: ffffffff9124e850 [ 787.874012][T25977] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 787.877086][T25977] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880564e4a80 [ 787.880103][T25977] R13: 0000000000000000 R14: ffff88802553a380 R15: ffffed100ac9cc5e [ 787.883160][T25977] ? hpet_read+0x21b/0x6a0 [ 787.884830][T25977] ? hpet_read+0x21b/0x6a0 [ 787.886568][T25977] __might_fault+0x8b/0x140 [ 787.888110][T25977] hpet_read+0x56f/0x6a0 [ 787.889738][T25977] ? __pfx_hpet_read+0x10/0x10 [ 787.891468][T25977] ? avc_policy_seqno+0x9/0x20 [ 787.892946][T25977] ? selinux_file_permission+0x8f/0x6d0 [ 787.894584][T25977] ? __pfx_default_wake_function+0x10/0x10 [ 787.896690][T25977] ? bpf_lsm_file_permission+0x9/0x10 [ 787.898794][T25977] ? security_file_permission+0x76/0x210 [ 787.900849][T25977] ? rw_verify_area+0xce/0x6d0 [ 787.902573][T25977] ? __pfx_hpet_read+0x10/0x10 [ 787.904644][T25977] vfs_read+0x1e4/0xb40 [ 787.906293][T25977] ? __pfx_vfs_read+0x10/0x10 [ 787.908243][T25977] ? find_held_lock+0x2b/0x80 [ 787.910193][T25977] ? __fget_files+0x215/0x3d0 [ 787.912079][T25977] ? __fget_files+0x215/0x3d0 [ 787.914050][T25977] ? __fget_files+0x21f/0x3d0 [ 787.916115][T25977] ksys_read+0x12a/0x250 [ 787.918040][T25977] ? __pfx_ksys_read+0x10/0x10 [ 787.920073][T25977] do_syscall_64+0x115/0x870 [ 787.921864][T25977] ? clear_bhb_loop+0x70/0xc0 [ 787.923853][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.926360][T25977] RIP: 0033:0x7fc434f9e0d9 [ 787.928060][T25977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.935049][T25977] RSP: 002b:00007fc435d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.938408][T25977] RAX: ffffffffffffffda RBX: 00007fc435225fa0 RCX: 00007fc434f9e0d9 [ 787.941648][T25977] RDX: 0000000000002020 RSI: 0000200000000380 RDI: 0000000000000003 [ 787.944702][T25977] RBP: 00007fc435035024 R08: 0000000000000000 R09: 0000000000000000 [ 787.947616][T25977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.950550][T25977] R13: 00007fc435226038 R14: 00007fc435225fa0 R15: 00007ffef65e4778 [ 787.953557][T25977] [ 787.955469][T25977] Kernel Offset: disabled [ 787.957437][T25977] Rebooting in 86400 seconds..