last executing test programs: 6m37.45421592s ago: executing program 1 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000380)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000400)={0x1, 0x0, 0x98, &(0x7f0000000800)={0x3, 0xfffe, 0x12}}) 6m37.073068755s ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c000018003780130001007174"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 6m37.072683414s ago: executing program 1 (id=791): setuid(0xee00) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 6m37.02247569s ago: executing program 1 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000900)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 6m37.022329806s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x1000000, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m36.962439445s ago: executing program 1 (id=794): mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='rd_pages=6', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\x00', 0x2) 6m21.586332575s ago: executing program 32 (id=794): mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='rd_pages=6', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\x00', 0x2) 1m11.430521256s ago: executing program 3 (id=3757): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000040)={0x2, 0x3, 0xd, 0x81, 0x2, 0xff}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x4400, 0x0) syz_usb_connect(0x0, 0x504, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xa1, 0x7b, 0xc7, 0xf7, 0x5c6, 0x9046, 0xff3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f2, 0x1, 0x10, 0x7, 0x80, 0x9, "", [{{0x9, 0x4, 0x5, 0x1, 0x10, 0x9a, 0xa1, 0xdc, 0x9, [], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x6, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x3, 0x397, 0x83, 0x3, 0x5}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x0, 0x4, 0x4, [@generic={0x2, 0x8}, @generic={0x15, 0x31, "bf1c39e48814e5bdfacb1d458c4ff4e9608196"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x4, 0xf}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0x1, 0x10, [@generic={0xb3, 0x21, "a61cc81c105bd8539542a0191e5bdc8a26c295023c9d37ef59e09b1ce5093e9b0aa65fdd301d2bb4ee6e7b2320de77b6e9a3cf983312308e5b689ae48a030d6de6db850934603b8a151232b28f29a099afc86cdfd48ba61cbe0b3b53f93a2dfde655d4808aea80c8d9fa0da0cbf33d7d427421c63ffd7ff2802623de6d7d0e5e90dc155f5a4e055f3c619ac7d368994b75924b1bd1636ba6a33e265d31fd0703a9c768f475200fb70448e44f7345957e4c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7f, 0x9, 0x1}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0xb, 0x81, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x1, 0x2e, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xfff8}, @generic={0x37, 0x21, "13397e447e965940ad5b59b74fed6b4334560a5b58413559f08e96ee491ca2fd7f87d2f083d2491374a3fda0635422f26a9e8dd002"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x408, 0xfe, 0xb6, 0xc, [@generic={0xcb, 0xe, "f60ff2fd41130f0cef92c3f2509c037bbfa6ee7991f26a95913f55ea5f63a893b3df00a5f4011f2b4da429abaecc7d8677831f0516d03e06e5da4588e9ad3b9fda8192c1b1ec42cb00d0533dbe50e5723a8f58603cfcb0b856449409d642c9ef3ec363c992bf20bef2ed80dc67941ca90b32a6bb28b3356d535754a2e5e090f429589635938892093b59548d63d8dc7c11868c5cb0c0ae7b8c96262c5c8d333d6bb7f6cc4394783c1cf191015b067dee9dae991ba90b5739134df718e10b61b9d8a0a4da97c6babaef"}, @generic={0xa2, 0xc, "a5ecc8393f417d737dcef4c4506604cc16562545d963fb9e5534dcf5cecfe755a26f2edf0bfb15cf03c4431f1e2e9f15bffedb2e188c6d68ef3dd42a00f86f24564b7c125346c19b19335da21809e24f4a4c0b389d2ebd8fcb6c52d0b438291d9e60c97eee0ebff741e2a7ee23ed44c6750312863df41d7463e9a318c5c29bfa2986f1fe1286099f68699fb2509c01449efbff037b220dea544b97b39eaabd65"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xc1, 0xc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x8}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x81, 0x6, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x8000}, @generic={0x7f, 0x22, "b21f251d8bd23bf17c542224d9d9810899bcedcd7a2cefc65d276ebc94eb80796634cdb28eb3207464282802fdc9e62ff967580459ce9e786063f8054e94c978342f6ae77710c4add2418399f9481d76a868b406b7c02da4a88101863646d3175679b3cfb693c2dad9bd6c9790fd49709d330d83785d06f4059a121349"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x80, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4e64}, @generic={0x34, 0x2, "f1155be331caa6f2d2934034831634a6a10dda2f13ba70f98598708ee5a163bac25d9d6a98d9360318f4b2344834bdd75284"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0xc, 0xb, [@generic={0xf0, 0x21, "41492e2849fb97b81fee7879aaefab176e8ddbae808a9a3083265213f9d6ba2204c8de6589d87ff9b682255fb3eab99d6202d7c11da7d43d690db4501d3bda003138049ce0e65b843224d9fb46a5ff7d4eb5e76f6133885ff41ce683fb7b1193a8759858ab7b1f3712f5cee7abab6291c22e60dcc6700944856d37d1c6987c34941a5a10ef77cb917b83d08aaed00f0feeda0ff669391b4bceba8fcfc0fdd245981ba6f43e50291f2aa07fb9920e5f33854ffdfd3082b62badfd33f703d255b8ebb8489652bbc00a511b04f77e48d87d0bf3ae1e628cf8286c592ac63d1de8753847b6efb237c356cbc1a7cf070d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x29, 0x5000}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0xfa, 0x80, 0x7f}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x10, 0xf8, 0x1a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0xc16}]}}, {{0x9, 0x5, 0x6, 0x1c, 0x3ff, 0xf, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x14, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x250, 0xff, 0x3, 0x1, 0x10, 0x5}, 0x7b, &(0x7f0000001080)={0x5, 0xf, 0x7b, 0x2, [@generic={0x6b, 0x10, 0x4, "b6e0d4e66899179f09bc858079d3b4d1e07ace7ca4a4d40a1801e57a026adfa6b95326fcd62a9e15ba20de75595caf67e9f4da5b1108f66f5c017686473e4ead0390a3477fcea41ba30787ebdc3283a1717a962e1a4b7fe8f3ced09a0aedf50422dcdcc6a6d13d13"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x55, 0x4, 0xd, 0x8c3, 0x5}]}, 0x7, [{0xe0, &(0x7f0000001100)=@string={0xe0, 0x3, "f4e3376a0d4636997cbb05c425ab08913f5b47546a82c991ac4e0679ea09105f2e8fcb7b6542159c290090013d22259ae2b1ee9af1cc9738e1d63cc7e5a3e09b05bcc3a1824af05ff34d585a497a7567c51be1afe6ab6751ceaefd05bd78c1968c4843d13d5b75ae0dbb0815e94560bc29a57b16a4b56945ad490e02b368d22ed87c8252bf6ccf77d4b91fa6c3cf7489d194f3d935ef2ea3b783a9b302d79b48b223b1cb124767af7f47951c1c5a1174547fbe5fc449425b22f33040a83bfe466a44a5d3526aca58612ccef27116418fc3d5de475209e2275796195eca77"}}, {0x94, &(0x7f0000001200)=@string={0x94, 0x3, "1ed77a1d411a22d85c046f8506eaa66b1c93a1e95a65cb01529d05841a6fd4e7d40316cd6c9305e8f379831ebef86271a5aace85a4a3a258b114f2703aa146381c7a41f4efefce53d29919a0152a1c7054763a066209d5078c0fe07a66ffb1338516c23d72f92bba78e90084cafcb5a605103d61238c37794ce0b55b1cc460e70176a19598af745a9d08685733272dad54ad"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x3409}}, {0xcd, &(0x7f0000001300)=@string={0xcd, 0x3, "04c318faf8f527de4eeccfbdc768ea9376686a24cd860771530ecb87265cade4bf1ee9dd1226e21630b2fd9c0761911cf4062c782665443441c99f5ff808f8071f5b1485eefb002230085bc9584744bacceabe7988234a4527ddd073c67b2f43753dd74926f8c2354e546c43fddf3121ec463ed0cd3f63111b7533e05274cc867c71eea96b40a47afead4acff7b9a98ba15ab11957a5884703c22034736276ed8f926c5f9baff062816a482aef277fc6f902885d8515831bf3fb0473315991b9b2f188a61eba3df3f87119"}}, {0xdd, &(0x7f0000001400)=@string={0xdd, 0x3, "53542bcd8a206f5ccc440ece37316e79ad331fb44c47d7ddde92fb9ff8e8479b780bb55184403342e7b6ed45a619c886c2f3a81396c3731296e8b4b21b3a440f7df35d09c6902e09b58bb3b561a803f04f3909ec6ebee6fabeab6814029bc472ffa1ced0887977b1c42db8ba15c9f81e6538d86ad39b1452f049de88a558c521ad9b71b93b5840ad6b3e0b0f312a761c364e3c7de6589a1efe478394423b0500d769170d38559b7ab9f8086e1b9928e3459d12501735efe358b092503b64e820063ad1b3f3ae9cc66d2eedf20af50013cf472e038421fee974d1b4"}}, {0x5f, &(0x7f0000001500)=@string={0x5f, 0x3, "c36edabf687dd748f89ac913a1f03550ab6d2060d8a2569e3dcb5708e2b65f7b5f1e0e1b470715a3bffac3b7cc2b276c203b282ee3578d0262b538885155f067db1fd9ca82d1eb7a80374410916822e8e1b1272f92792f22103a88875f"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x814}}]}) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001640), 0x3) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001680)={'veth0_to_team\x00', {0x2, 0x4e24, @empty}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r1, 0x0, 0xf8, 0x3b, &(0x7f00000016c0)="49ca5db888d3e7a345721e1127251ecac0236dfd1f4b128c8641bc316c056542f432d124c9e5c5956aaf62378f993bfcd2781cbdec85a1730a03edc9ee2dc9ceaaf1ef1fc41fc14629331b6bcc2db69510d0adb61cea711538b65c6930adf8108a58346c077b1bc0c0aef4d0cdcfc9f746394eafccfd8ec0b627ce6725c745447b0c7af767779bb701b72bb3259d65dec6f3d3122197e93eed9f3bb4721371acaa7cae3ddbed4ec87a5cec81135009c9ba7176b6c9c6d1547fd46b9f90c482eaabeac84280fa487e747a73336ce4c9623338102f1ceb690eac451694221e14adb9e0f0ffe1e52bd965da8b901eed01651bd190e2f498eb7d", &(0x7f00000017c0)=""/59, 0xffff1790, 0x0, 0xc6, 0x14, &(0x7f0000001800)="aa8b6100aec0052ed7f03111f8309389382785a560f8dd136470d9ecf4c013f4252249b4cec854b9175e2e77e0a1bc43cf5bfadd6cec1b4df15e7a7b0d0d258e8ee1c9e9e8879a96ded045b5621f65ed92cfa2abcc2ff9e571abd9c8cb1b54c3dce9d3caae5a7a8c80b5e31d5619a2ecd4fb19eea13c0cdad92970b06be61b3a0ba60ec1ed656c4ada87b6117bcfd08ea8f05653a56d1da5d4f95f1cb757bea93a56238f1f0d23a6c2e70f64cf4416be01bc28f9b2ef413efcd3b071898610f5d5d8a1d25514", &(0x7f0000001900)="355fdc0205eed407e6f251bc2c07addc03246d61", 0x0, 0x0, 0x6}, 0x50) r3 = socket$kcm(0x29, 0xb, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000019c0)={0x9, 0xffffffffffffffff}) (async, rerun: 64) r5 = syz_usb_connect$cdc_ncm(0x5, 0x73, &(0x7f0000001a00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0xff, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f4cfbca052"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x58, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x800, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x9b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x7, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xe, 0xfa}}}}}}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x250, 0x4, 0xd, 0x5, 0x20, 0xd}, 0x1c, &(0x7f0000001ac0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "91e574d0d7378ef8c4c8f96a22040fc8"}]}, 0x9, [{0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x41d}}, {0xad, &(0x7f0000001b40)=@string={0xad, 0x3, "0def027f59e26c2aa8fcc3c3d48440eecdf9b203456f50b557d33f8784bd800aa090b960f75a7c77798970e543f068ffe136d8e586df207bb3b7e9c5c3cdc1edff518d1eb7cbe34f3ad6c4548cd0374cd7c0cc71e39b5abacda40cae7aadf00ab9606c6249978310ba262fd1bf3e30b8a94eabb105b2357f800c97fc0b530492d174ce8b6dd61bae2b67a9a47fae935160ca3d9988696626cc543bc27f16700ff97c5f4ab00d0c3a81d9f5"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x140a}}, {0x11, &(0x7f0000001c40)=@string={0x11, 0x3, "5e8f6d71308d65a6beb5bb61e63a58"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x1009}}, {0x7e, &(0x7f0000001cc0)=@string={0x7e, 0x3, "9e5135d25c9263f5e68d4658c11f78babe946e6467342eaa322b27150749962d12b71294ff66ded3ec8e8e4da1fe1e1cf94111326e06832ffe0df23218af84979dc0df44be56b61c9b3183d4b8a95de2c0220d147c59a4b09259d92e5c8ca4725c5cbdc10dd45ea0e4db64faf10ed6b79b9508c65ba37090bc1f17e9"}}, {0x4e, &(0x7f0000001d40)=@string={0x4e, 0x3, "2ea1a6d070fd294937d8f415a731926e16835116af2aeb7a5ae04aba0ada4d57348e64ab8800dd65b400118c7909d16d71c0dd17a076ed8860a48b571ec6c401022a3453eb81107ee708fcda"}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x429}}, {0xa, &(0x7f0000001e00)=@string={0xa, 0x3, "1348083f2728ce22"}}]}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001f00)={r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001f40)={'batadv_slave_1\x00'}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000002080)=@get={0x1, &(0x7f0000001f80)=""/217}) syz_usb_disconnect(r5) (async) r7 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000043c0)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) (async) getgroups(0x5, &(0x7f0000004400)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01]) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000044c0)={0x5, 0xffffffff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x3}) (async) r11 = getegid() (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000046c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f00000047c0)=0xe8) (async, rerun: 32) getresgid(&(0x7f0000004800)=0x0, &(0x7f0000004840), &(0x7f0000004880)) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000048c0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000049c0)=0xe8) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004a00)={0x0, 0x0}, &(0x7f0000004a40)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000004a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000006ac0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000006bc0)=0xe8) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000006c00)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) read$FUSE(r6, &(0x7f0000006c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r20 = getgid() syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000009940)={&(0x7f00000040c0)={0x50, 0x0, 0xfffffffffffff001, {0x7, 0x2d, 0x2, 0x12014, 0x1, 0xfc01, 0x4, 0xc86, 0x0, 0x0, 0x4, 0x2}}, &(0x7f0000004140)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000004180)={0x18, 0xffffffffffffffda, 0x1ff, {0x3b7b}}, &(0x7f00000041c0)={0x18, 0x0, 0xfe, {0x2000000}}, &(0x7f0000004200)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000004240)={0x28, 0x0, 0x2, {{0x8, 0x87, 0x0, r7}}}, &(0x7f0000004280)={0x60, 0x0, 0x80, {{0x9, 0x0, 0x7, 0x2, 0x7, 0x0, 0xffffffff, 0xfffffffa}}}, &(0x7f0000004300)={0x18, 0x0, 0x3, {0xc4d9}}, &(0x7f0000004340)={0x14, 0x0, 0x0, {'},!\x00'}}, &(0x7f0000004380)={0x20, 0x0, 0x4, {0x0, 0xc}}, &(0x7f0000004440)={0x78, 0x0, 0x3c905f96, {0xa1, 0x658, 0x0, {0x2, 0x1, 0x85c8, 0x1, 0x3, 0x7fffffff0, 0x0, 0x7, 0x6, 0x0, 0x9, r8, r9, 0x800, 0x1}}}, &(0x7f0000004500)={0x90, 0x0, 0x6, {0x2, 0x1, 0x4, 0x4, 0x1, 0x7, {0x5, 0x0, 0x5a, 0x2, 0x6, 0x1, 0xac35, 0x3, 0xc, 0x6000, 0x101, r10, r11, 0x3, 0x10000}}}, &(0x7f00000045c0)={0xd0, 0xfffffffffffffffe, 0x7, [{0x4, 0x7, 0xb, 0x7f, '/dev/cdrom\x00'}, {0x4, 0x4, 0x1, 0x6, '@'}, {0x0, 0x0, 0xf, 0x4, 'batadv_slave_1\x00'}, {0x3, 0xfffffffffffffff8, 0xf, 0x1, 'batadv_slave_1\x00'}, {0x3, 0xfffffffffffff931, 0xf, 0xffffffff, 'batadv_slave_1\x00'}]}, &(0x7f0000008ec0)={0x5a8, 0x0, 0x7, [{{0x5, 0x2, 0x2, 0x81, 0xf, 0x5, {0x3, 0x6, 0x9, 0x401, 0x10000, 0x8, 0x9, 0x6, 0x0, 0xa000, 0x7, r12, r13, 0x5cf8, 0x1000}}, {0x5, 0x1, 0xa, 0x6, '/dev/vcsu\x00'}}, {{0x2, 0x0, 0x80000000, 0x1, 0x9, 0x7, {0x1, 0x9, 0xfffffffffffffff7, 0x1000, 0x2a3c, 0xff, 0x9, 0xf, 0xc6fe, 0x4000, 0xfffffffe, r14, 0xffffffffffffffff, 0x9, 0x4}}, {0x5, 0x80}}, {{0x5, 0x2, 0x3, 0x2, 0x6, 0x1, {0x6, 0x9, 0x4, 0x8001, 0x503, 0x96, 0x80, 0x9, 0x9, 0x0, 0x3ff, r15, r16, 0x6, 0x5}}, {0x6, 0x7ff, 0x1, 0xffff, '\x00'}}, {{0x1, 0x0, 0x6, 0xa48, 0x0, 0x2, {0x4, 0x7, 0x7, 0xfffffffffffff6fe, 0xc, 0x80, 0x4, 0x5, 0x9, 0x0, 0x5, 0xee01, 0x0, 0x7fffffff, 0x4}}, {0x1, 0x87, 0x5, 0x5, '}}{+#'}}, {{0x2, 0x0, 0x1ff, 0x8, 0x10, 0x1, {0x2, 0x1, 0x5260c050, 0x2, 0x1, 0x7, 0x105, 0x1ff, 0x9, 0xc000, 0x100, r17, r18, 0x4, 0x1}}, {0x0, 0x23000000000000, 0x0, 0xfffffff8}}, {{0x6, 0x1, 0x101, 0x0, 0x7, 0x0, {0x4, 0x5, 0x0, 0x9, 0x6, 0x7fff, 0x5, 0xb58b, 0x0, 0x4000, 0x353, r19, r20, 0xffff, 0x6}}, {0x2, 0x61c, 0x3, 0x800, 'tls'}}, {{0x0, 0x2, 0x2, 0xfffffffffffffffa, 0xd, 0x3, {0x1, 0x7fff, 0xd9a, 0x23ee, 0x7, 0x0, 0x3, 0xe, 0x3, 0xc000, 0x1, 0x0, 0x0, 0x0, 0xd8}}, {0x5, 0x2fde, 0x3, 0x3, '#]{'}}, {{0x3, 0x1, 0xfffffffffffffffd, 0x10000, 0xd233, 0x2, {0x4, 0x8001, 0x9, 0xff, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x7, 0xfffffffc, 0xc000, 0x0, 0xee00, 0x0, 0x1ff, 0x9}}, {0x4, 0x3, 0x3, 0x8, 'tls'}}, {{0x4, 0x3, 0x8, 0x8, 0x8, 0x7, {0x6, 0x3, 0x9, 0x2, 0x2, 0x9, 0xc97, 0x8, 0xb079, 0x1000, 0x7ff, 0x0, 0x0, 0xa4, 0x4}}, {0x2, 0x6, 0x4, 0x40a, '+)))'}}]}, &(0x7f0000009500)={0xa0, 0x0, 0xf4e, {{0x3, 0x0, 0xffffffffffffff7f, 0x4494, 0x6, 0x7, {0x4, 0x1, 0xc1, 0xdf17, 0xff6, 0x80000000, 0x6, 0x8, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0xffff4145, 0x3}}, {0x0, 0x4}}}, &(0x7f00000095c0)={0x20, 0x0, 0xffffffff, {0x0, 0x4, 0x9, 0x7fff}}, &(0x7f0000009800)={0x130, 0x0, 0x8, {0xffffffffffffff08, 0x5, 0x0, '\x00', {0x80, 0xfffffffa, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x4000, '\x00', 0x3, 0xf4, 0x2, 0x6, {0x8, 0xa}, {0xfffffffffffffffa, 0x9}, {0x3, 0xe}, {0x101, 0x2}, 0x80000000, 0x7, 0x0, 0xffff}}}}) 1m8.165683055s ago: executing program 3 (id=3768): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 1m6.746305s ago: executing program 3 (id=3771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='haltpoll', 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 1m2.302084516s ago: executing program 3 (id=3775): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14e, 0x14e, 0x3, [@const={0x9, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x6}}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1}, @enum64={0xf, 0x8, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x5, 0x24000}, {0x1, 0x1ff, 0xe}, {0x9, 0x80000000}, {0x4, 0x3, 0x3}, {0x7, 0x1, 0x7}, {0x3, 0x7ff, 0x1000}, {0x1, 0x4, 0x9}, {0x10, 0x1f5}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x28, [{0xc, 0x3, 0x7}, {0x0, 0x0, 0x5}]}, @type_tag={0xfffffff1, 0x0, 0x0, 0x12, 0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x1, 0x48, 0x0, 0x8, 0x7}, @const={0xe}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x9, 0x1}, {0x2, 0x5}]}, @datasec={0x3, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x1ed, 0x6}, {0x5, 0x5, 0x7fff}, {0x3, 0x3, 0x80000000}, {0x5, 0xd8cb, 0x4a9}], "791c"}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/165, 0x16b, 0xa5, 0x0, 0x8001, 0x10000}, 0x28) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000640)={0x1, 0x0, 0x3ff, 0xdc51, 0x5, 0x80000000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9}, 0x94) remap_file_pages(&(0x7f0000c8b000/0x4000)=nil, 0x4000, 0x0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f) 1m2.301349424s ago: executing program 3 (id=3777): bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f00000002c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x3, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="16"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f00000004c0)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}}) io_uring_enter(r1, 0x2219, 0x16c08, 0x1e, 0x0, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f0000010048ff00000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0x16, &(0x7f0000000940)=@raw=[@exit, @cb_func={0x18, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfda2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5b}, @cb_func={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000a00)='GPL\x00', 0x6, 0xe9, &(0x7f0000000a40)=""/233, 0x41000, 0xd8f08d1339a546a2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x3, 0x6, 0x9, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000c80)=[r2, r2], &(0x7f0000000cc0)=[{0x1, 0x5, 0xb, 0x8}, {0x0, 0x5, 0x6, 0x3}, {0x1, 0x1, 0xd, 0x5}], 0x10, 0x9}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x37, 0x2, 0xfffffffe}}, 0xe8) write(r6, 0x0, 0x0) timer_delete(r4) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xfffffffa, '\x00', 0x0, r8, 0x4, 0x3, 0x3}, 0x50) write(r9, &(0x7f0000000540)="b0716a7146ffffd7040000ff", 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 1m2.257072186s ago: executing program 3 (id=3784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8e141, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0xb, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000006c0)=0x58, 0x5) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="0f79670935020000000f22e043dad548b85f000000000000000f23c00f21f83503000a000f23f8402a944b24c9a1f4f3400f0965460f0766baf80cb872152284ef66bafc0cb000ee0f20c037000078cc767622c0c7442400817f0000c744240280d10000c7442406000000000f011c24f4", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.370416374s ago: executing program 33 (id=3784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8e141, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0xb, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000006c0)=0x58, 0x5) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="0f79670935020000000f22e043dad548b85f000000000000000f23c00f21f83503000a000f23f8402a944b24c9a1f4f3400f0965460f0766baf80cb872152284ef66bafc0cb000ee0f20c037000078cc767622c0c7442400817f0000c744240280d10000c7442406000000000f011c24f4", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.968466852s ago: executing program 0 (id=3838): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (fail_nth: 3) 18.866382271s ago: executing program 0 (id=3840): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 8.920851476s ago: executing program 0 (id=3844): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='GPL\x00'}, 0x94) openat$sysctl(0xffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000001300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001380)='./sys\x00', &(0x7f00000013c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./config\x00', &(0x7f0000001480)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001600)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001740)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @local}, 0x14) write(r3, &(0x7f0000001780)='fc', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r6, &(0x7f0000001800)='fc', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r7, &(0x7f0000001880)='nn-0x1000000044001122:pn-0x2000000044001122', 0x2b) symlinkat(&(0x7f00000018c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001900)='./config/nvmet/ports/1/subsystems/testsubsys\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001940)={0x1, 0x0, [{0x4b564d01, 0x0, 0x4000000001}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001980), 0x400, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xe) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000100)={0x2, 0x200, "f7ff00", 0x0, 0x1}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x42c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfd, {0x4, 0x0, 0x24, [0xbb, 0x2, 0x8, 0xfffffff9, 0x1000, 0x3, 0xfffffffe, 0x8, 0x2, 0x3, 0x9f15, 0xffff, 0xd, 0xeff, 0x40, 0x5, 0x7ac, 0x7, 0xbb0, 0x1, 0x2, 0x3, 0x5, 0x3, 0x0, 0xc78, 0x8, 0xfff, 0x80000001, 0x80000000, 0x0, 0x6, 0xffff7fff, 0xfffffffe, 0x5, 0x1ff, 0x3, 0x400, 0x4, 0x9, 0x0, 0x5, 0x1000, 0x9, 0x9, 0x1a, 0x80, 0xbd6, 0x6fd, 0x8, 0x3, 0xcce4, 0x2, 0x5, 0xf, 0x0, 0x7, 0x0, 0x2, 0x1, 0x3, 0xb56d, 0xb65, 0x6], [0x3, 0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x4, 0xffff8001, 0x5, 0x7, 0x8fd, 0x7, 0x10000, 0x4, 0x4, 0x3, 0x8, 0xb, 0x5843, 0x3, 0x4, 0x0, 0x9, 0xc49, 0x101, 0x3, 0x4, 0x5, 0x10001, 0x40, 0xc424, 0x2, 0x7f, 0x10001, 0x6, 0x60693788, 0x2, 0x9, 0x3, 0x80, 0x1, 0x2, 0x8, 0x4, 0x9, 0x5, 0x7, 0x4, 0x8001, 0xfffffff0, 0x0, 0x9, 0x101, 0xb1, 0x5f, 0x9a2, 0x3, 0x0, 0xfffffffa, 0x6, 0xf, 0x3, 0x7], [0xd10, 0x8, 0xe, 0x4, 0x8, 0x7, 0x3, 0x2, 0x5, 0xf, 0x3, 0x1ff, 0x3, 0x8, 0x9, 0xffffffff, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0xfffffffc, 0x3, 0x354f6a0, 0x1, 0x4, 0x6, 0x34, 0x2, 0x8, 0x9, 0x4, 0x3, 0x3, 0x0, 0x3ff, 0x6, 0x4, 0x3, 0x0, 0x8, 0x1, 0xf64c, 0x5, 0x3, 0x0, 0x3, 0x5, 0x1, 0x2, 0x7fffffff, 0x9, 0xc, 0x6, 0x2, 0x4, 0x9b, 0x10, 0xf3, 0x834c, 0x10001, 0x1, 0xc789, 0x3], [0xecfc, 0x7fffffff, 0xfffff800, 0x1, 0xc0b3, 0x9, 0x4, 0x47, 0x4, 0x400, 0x81, 0x800, 0x4, 0x1, 0x2, 0x7, 0xc7f, 0x5, 0x9, 0xc, 0x1, 0x4, 0x2, 0x1, 0x4, 0x1, 0x34, 0x94, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0xd, 0x8, 0x0, 0x6f6e0ddf, 0x1, 0xff, 0xb, 0x9, 0x423d, 0x73f9, 0x5, 0xa58d, 0xe2, 0x10001, 0x9, 0x7, 0x25, 0x80, 0x0, 0x4, 0xb, 0x1, 0x6, 0x80000000, 0x10000, 0x1, 0xfffffffd, 0x401, 0x0, 0xffffff3f], 0xb, ['#\x00', '+#\x00', '/\x00', '*\x00', ')\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40}, 0x2004c081) 8.681535234s ago: executing program 0 (id=3846): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05070b20"], 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000700)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="bf46d6b37a6005b0c996de3f28923f1eb4046534eadd5e54326d83adc440bcb01310cfbbe5c577c3ce890549b08d42af23369f19cb31c8c01c083869ac013b88dea6110feb2cba14688cac4799f1eb80ad856298b1fb51bf969e83570d9d930352efbcbf1d32442a6dcb7ee974cee4e81675d74344e151d2e8cb0abf17bc5bb50f89bb3a688f7d1566f913b471512200ed77ce20c9371d193a62e478ea0d2e97c2e5f97d9ddc711ca3318c80e5b09a3d0b0a1edee18674645c3a4944fd925547e049a16fc0662c3b21ff4e1ca574fc71e445dd6b55bf94798270a09ca4a511c3d2e3f31a6cf8d11ce589365c82add80067144b9b8c0ada995f3d3a9f641749c7f90e6758ff74d5784acfc0fc01af2e9e955cc2ec25acdc859caea29854c45675da0f851715fa9249ed226bb0ace474cee10a63ea45741316c07e8f11c96f5c7700b6f8c2dd16d2c210c1f4c94ecbb28d7b35e3052d0d6662306881736c95f035d90461afa1de58eaeabca21cd026c7a27c456c652545635a6d86d1ab85131ac60bec1de14a48c74bcd6e0cc3d7162f39bfd6b7da70eb827a5213a568ba2a2e577f6b59936370ffbaf564e03f2f274833d94119fbe8eca6112ea0437f10f8233b8790fc2559c093beaecf3f596c2ae831169337ce3ce9758df131150a479bd80316aae84dbb321247270544a88222bf04dda5036dbe80a7cf5752bdb1a1578aab6ef38099f17684ed2196b46f5d120173d21735331b954d566d90823d3ebd8ac6db2d94fad6e83e3bb77240f8a293662cc59a906c94e6fe8438f1c52a78d9025ced046542e78cf923e1f2ae1ab67fb4adfed6b40c97f66753171f0189c9ead771d351e85d6532be2ff80fa8aa05abb3a5393f394b8cff328a576d6a675c8dd7dbb34c01522a9d0931e473cf8139c8c23efdaa05e8121208e45305d8b9c5139f0de0d1e5a2072b00ea07ff5a3f5aa5abdbdde1040b8fb52f955978bbedddc32a9b239501372d2d1613dcad8ab74df5e03ab05ed44006ab937c8ab98f5615c8e0f8bad1cea05ebaffdb8605e6865c6a9cc67ae5cbb184d94c4caa0c7d2fb5b1b981ead723a04a309c4a00e3d2a3613c9496b58cd2621f65dae0276adbb101b359e2bc7487f69947d06e56bbad28b23a2e6e0bb899eaba6a62c1ab570ee49db456390fb9b4fd646603e40e6f4d47d851d96a71389ff14cc12559601b9212310047adbc652eb3806c6fb222d71b0239f8896cce963d0d0a41b75bde9ba7fc6e5c208db4bf564e461e4820adc21e164bd15bb8e5163647c63eb3c9b0748599f1963fc3f5f56de3ffe5d419a548cf268477a01a43c3d613b06d8d31538973c6d54adb84e03f90a5eae79f1952fb948c14a465a7e090fb277c91888499ad5910ca68bbec26ce401e89cef660eb967c666c4401a0cf72ac3e8ce13451ee2c6ea1b08bc11b32d4782e22849341b18a4cac56fee493c304d20c8df041cbeb4463e39c84771b26b2b22c22b32389b066c448dceae47075f443c3df0ed5c1a06bc6f4c48a3d4418f406541dccb289c7efff91075cb834df1227737d0c355a37cb20ee9f62fc475df2d19067d1ae47ef148bef24337319c5f2984a48cdc3dc43a51559bfc3be649a629113f6497d6fcd1f93498fd589e627452bea3545a3811172ed96f04d2d48bc4a581dd3c06194bc5e8e3c19a6443d99a90104da6639eb38a7d199115ce9746b2b213c466e9d8640fb33797288ef15c31a8b1da51d71f687bc63f019eb7f19f3e1e226c485c26cf7692f92d88da6b8972cb6533192b24a66c35041790c52e271b415b46a8dcc3c51486cc8465b679ffc36e008e3521aecba6d78296f80990829c43bff3aa4041e7876fbb0d97dbe287afaf3b9d7b52fae423fbcd911bce29f424495a27edeea5bc787f2225e6051b82ae3a58a2d69195d96441fb542c1dea30b02b372a31957363e0a6f822b33f9b2d43054f1f642b2d5b2cbc68da27e15308e4ce83291193c1997f0cec793ed32ca1d334c4b7e580a28c7db0431fde60e98a0dc4290503829b1f15ebac5e7cab79f805c3ca5def919c2b04e70c03c605400a3c75d827149195cc353a90a929ac9b70aa9392b7dfec97c21e7f8a2d59316a4d41968d13cee3d1eb8a5d2afc275a365302928a964784f73e17d02212818509bad040fb53806ab589235e9d4b8192795a547c8c521f7be1fc5c40f411322e048de8ddbcaef826c6ce84ef98cced5277a9824ecb790c2289dccd186c6189469e5f6ba197c87cd161a45bea6291e135cb111ef832183b330d9883628a2ae207c838ca312c80fc1abcae8e2f175b42754a1a7dd0f4062e4e5427aa2ee0b07a24f1f65875c77a41acc623c7613a37787ef8b25d110c74166dadc855de59252d1324abf23886a1730e2d118c76d0b8eb61aedabc74fbf9c8693617d114d5928e411159152eda4768c4109d73b3d95f4b07a19f23c12a64f35255c01d9ac69ce51ff63199cbd2f74fa6d979bb53188785f793ee900049e16df704e91a63cc2fdefbd60b08946fc6ac60d0cd170b91bc76c56e944af09ea1c71f1e3ff63cffa31a28d93c1c6830e34be7efe1bf93d81c90237a3626aaa81e76179f3284c3f12774def1b5b7b4ab13d532f2007fc645f54bf4c0111ad0d4a0e39177cdd95001f3671f5ce6626a3edae4fef8222f4ff6ffe15c078b96dabf61a29ae6537600b61f64d2f7d66e2dc49e466035db97552c789c6cbc91a5840332cd4c80ea2f95025605a2631cfba738ea62cc2a263778044f2a3895c2e65aeb6d3308d7816377cafcc6c5a25f05e39f3d9f3bcd26bec94788d2197e646e544e3e62962f4d59ec8e01409e00865da6ea3bf8c4ebd4dcfa04056001c1d9766e73b877e2334729fe62f6e86f71a1a2c9055d7409161ad4c6b248db48f3ebdec2e25f68388bd5a4231f67b1b6cf9b1a2327b3335cdb536a86e6195fa59983cfaf1010cfe3a9fe6149b1314dfa60cbdcb3be66f24803298fbfb01881bb31f448424af298dc6109d091d8c77a45bfa0521624650ba91aab2c66ab9395d079a152eecc4e56d6fb44631351291de5d9f0595379b79869697b431edd9361ec8c8a2539a6d0c0c04cf2f3f3c6b5bf2abc18433d5c80143ee0dcd49236e38bd0b382152dcf741d6054ad98c1a2e656e2616ff412dbd777ffb755b07ad31d7210e0103ff9e9cd8be3636745af89b1bdc40fc6ea25ce9fdb38b9f6ae8413f68039406da75a2b00a9a69d41b3261f311894adb4020d0ff6b6a503bfcdfab74e68974a2e16aeb2ddb6ba10f73faa593089fca2091aa90a5b2378d5ff998d825a7f5355f35c34881b05992cf8ee3123cb2955e7334f92966fc7a95d654189c13728e1e900dc16952c6df7311d8d5bef8f1457c63a88b818e75379998815725e5f9cd8ea0aa0f0b7fb8429d910d81c19b5bc7f0c861993d2083636b8bad84b3ff14c982bf09b0161ffcf279bee3f444652726392343ec04d7c03b2d0ccb939e902ba8f3bd6e927ee30119bfcca2ce6959df2d8b725fc4408b473158283ed8fb184325e7e083aa3747e726e433d66669a37e079e75e3e0488203db1cefacc7218161e6a65b54aed689bdc6c22e99bb0ea2998e3564c04e0448dccc3ccc4b9c7754979be57940eed6a430f9e26673788f78e140af65011b5dc521983d0dfc077333b5a0851006d68e77ce142b62fec179ec2e88fe9a3aa467070eff16df9e2f23683cceb2f5d91c35b1e41faf08763b470b9a6aa938bc9d1740925840205e43f94bad81843950d6b07712fdf4f4dbb24ea10166c73f42dc8a3fb586f8d33a7ce25795b5602dc2539a4a1fbe0252a04998c8dfbbd63f8a449685447d2412b9def5cc80db457da8689c2e65874ccb16e920163486a2f9ded1d9cf9e93c371930d87a2b7e7c8a1a14b8925f8b7e59f5a74ea8cf7a1c4ed75bb45b1ce7dbd9964c340a0c147cf41c87d4d558f07aa4b2fe8327d740ca82b8f2976d7ccacd38f78bc29465fa5c756b79c45451fe217155965cadcc3beb2e5ba6dac4e242b6f3d6e20a9669af041b2659fb8358357ceb267f5a28e0ff69cf4b363c08b2a5ab4964b4001e1efc38ed810dc5571a177d33211002235f287a9f216aa1ba11b355babe822b02e950f0d8ba2a8cbf3ab3467b31b03d702ea78a116e4e17c62ae9f5ded8db3d7f59736c6fc038a5e3b98475586b74cb895ecf3289527ecb997c4b494576a3d5d0b57fd4ce301f4965d65b78efde778d7e712fd3fed092af61165fe1fcd223bce1ae4c3264d08ea5091113b24d1f254a8e36aa8af2a3ade6c0c88644293240d74ff567961cd9d8cda42a4473ca08da92868c6fb6b122dcd550e90bc1376dfce785d2568ca16bd0d0d78f08c78765ee1160974eb18261bf7278c76770a56ee547e0e01ab9e3590f2b59475085e45a4d7c4286e38652593ae22bb109f477b7989760475b651f1a289ec7e51ed894d5159e29b7025284e261524313ede441fce8855bad1d801eae1ec4f4c9bfe9bcf24789a916e44740ea6006dec8be94263bb8e378ca27088a8ed72584a77da015caf079f057d95d100a16a916c3aaf26f4b6dab5f5649ee902b15c9d9eb773bd0b93b248f87500360881183529b5a5d7ed40e0c3846897378fc4b9a1090f5af3fa7f70dccf80ab026829932905170a0e5e4dd5ac3e98cad5717dd5288bcb8bb6e3ddbcd653ba2cb9eb1234111ebfc95af67f8375a9440b79137bcafbba95dd872a5fffe4ade4c862a8e796ddab0bb4fe0b83e683cef13d8cb972a41c20435c1764cad8e176b0c69814f1d6a3831232a2c308e577866f3d7a2ea3e103b1c3bbeb7663ac06eb101de1e01b1961b92a257d01097b9f4241387cdfeb6c5b431455f49d849965197883bdbc578e3b73770a3b0af0cddf3481b0f7d9ad5e35f1445a9ba9595e1d46823f643c0badfd83a52b704d9cb1e88fc90c6ee2dcf6db33e30ee238f5d910a77d0e91ffaccdfeb8d3121fa62d43e0de07828bd9b14c0be05e1d59f2f118e2adfc0aae1b70401c4fa86d4880ae5766730646a805f288cec24d6d90c5aa066b9832c05ffc5d376ced4060e221203ac72d50070fbae0a99177d64ec6426e566b88a683f8823d71db61b9b5abaa652d19c8700a156b933828efe63085f1602cc9ee76a067c798dfb1a58486f03b723fd737f0119436a0cb1848cb4fd22f6d314e3e81da50a8fbf9ef946ed731ca44dc0a2c54db349eee29915146a39cdbe22085142d595f97d713f8d2bb1fabe2f103a866c416b94dae0c22b07cd64fe0e1b4f64d6de7d68a87cf1946918bd51533cf6293fcd43007c5f82b4f702e78c1a67e4c59b4f15b94f701281911272db0c14a93e17f7ef872ecfc1999b66fe2431ec8d54f227c9132d91e3896caa081158128a4851e85b29b8dc98b9329aac9f8874d5ce409d846497084f40971736147a05ffccf371bc21159fbd62361fe6b75d368323c2d870f91d315d3471dad3b062232dad41fdd13bd3bdf7bebbbacb02b1b42fd9a7473723ffebc3e3ff9f58fd3c60c6b62b84b11e59cc16a7d303a69cdf748929264a9fda66ab2ead811264552b3e3da9249faeecb72f7b38571f60190ca298aeef4b6831b35cbd49d0644af1fc166ee7651ba13d13cf4333c2ed38476bad279582d5d2aaa24529034e21e9a58c6593a668ae7167a6b8a81dc017d0239c139bb73b0deb44c2026b15675ee2f823d46c08d9130d1460052453d6f05c4b24a26640b653d3a4f01276f91a3f279d211fdfd57ff1a563e900e107cf06549da739e6e27c482c1be", @ANYBLOB="30be9af765a970dc26f077ba23404cb7d81853ab5720b10779ddc81b6fde58b3a93680a499b9b3473abfb960c0dddef6316476a02c1f05dfd7decdf983fd572e2358042d5e8281b604e11c7965"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000880)='dum', 0x3) 8.681099308s ago: executing program 2 (id=3847): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) mount(0x0, 0x0, &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0}, 0x4090) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16) 8.680926798s ago: executing program 4 (id=3848): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee00, &(0x7f0000000240)={0x401, 0x8, 0x1, 0x80000001, 0x8, 0x7, 0x1, 0x6, 0xe}) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="2c08d6b23c1ca4b8b84ae90d68ffc2cfbc73e0a827f05b5e92a8c23846e2c19481a510cc54b88d7a9d5f839bbd5447d77bba97facf58ede4b097e880012fdcd905e4e16baaf885808a1ea878fc73dfafa4311cbf4fe272bad5aaae0076c3152ee4246b152362b945ae8b792619131cd014e51a10c14e4ec0d1ae4a1eabf00f972b48fd840397d64861", 0x89}, {&(0x7f0000000700)="e8fa3a42a0351243af60118f136dfffe664552dcaa24b8acc490d6043bcb49875672d3f783d7b52b71d31f8f571249bdbc9b4b81758520870314cd47b0df59", 0x3f}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000001000951aca8900f00e3cd4a1d6f6613948f78f922ea772fe39159445085221bd061cef04b3944889ba8d0f1a4c29372d6a01bc9c79a40ba31f1b925489c5dbfd4067ed1f96d1ef20fd6cff7e9be279105513f2b257d72e2e63d8420bc91578966ce67bde2340d80baf54eaf381bccc8f79484c34d9d40bbd1b069d1f1f9c0c5ba0c71d7f589e8e178fa0ff11f107001a358c4038d8bcf821a9a3ae93d7fe3857d67ff2a341e9ef136ebbbbb58e0c5f0a9f0268fbea39af09c87731b496e09af593aace52e58d412abcfb4ca5c0072cb7011f3bba0167c85f21c9c337"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) r6 = getpgrp(0xffffffffffffffff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x8000]}, 0x8, 0x800) fcntl$setownex(r7, 0xf, &(0x7f0000000440)={0x2, r6}) prlimit64(r6, 0xa, &(0x7f0000000480)={0x100000000}, &(0x7f00000004c0)) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x0, {0xd84, 0x6, 0x7}}) 8.680719081s ago: executing program 0 (id=3849): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="3400000068000100000000000000000002000027000000000c000880180005000000000008000600000a0000080005"], 0x34}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000017c0)={0xaa, 0x5cc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001800)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r3, &(0x7f0000001840)=[{&(0x7f0000001880)=""/13, 0xd}, {&(0x7f00000018c0)=""/15, 0x13}], 0x1d) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xd, 0x0) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd36, 0x80, 0x4, 0x81}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001400)={@fallback=r5, r5, 0x2f}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000001440)={r2}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001480)={0x0, 0x0}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x48, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@cgroup=r5, r6, 0x2f, 0x30, 0x4, @void, @void, @void, @value=r7}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={r7}, 0x4) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001540)='/dev/bsg/0:0:0:0\x00', 0x40880, 0x0) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) mmap$usbfs(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x1) 8.676691899s ago: executing program 2 (id=3850): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='iocharset', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000540)='9', 0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000580)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000680)={0x1, r5, 0x68, 0x1, 0xffff8001, 0x8, 0x1, 0x2, 0x3}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000340)=0x5, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x20000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x2, 0x0) ptrace$getregset(0x4204, r7, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x800001d, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000280)={0x0, 0x1, 0x1, 0x0, 0x0, 0x2080, 0x6ae0}) 7.179974285s ago: executing program 4 (id=3851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) (fail_nth: 4) 6.55144373s ago: executing program 4 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000008cf4000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x10000, 0x7fffffff, {{0xa, 0x4, 0x0, 0x37, 0x28, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xba, [@loopback, @broadcast, @empty]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', r1, 0x8, 0x8000, 0x1ff, 0x8000, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x67, 0x0, 0x60, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@rr={0x7, 0x27, 0xa7, [@remote, @local, @multicast1, @empty, @private=0xa010101, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x8a, 0x1, 0x2, [{@multicast1, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x6}, {@empty}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1000}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x0, [{@private=0xa010100}, {@remote, 0x6}]}, @end, @generic={0x89, 0x10, "4f6acdf70c714e13f073ea25a6cb"}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./gadget\x00', 0x930aa59063c1a109) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) write$UHID_INPUT(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./gadget\x00', &(0x7f0000000380)='gadgetfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=0xed) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x200}], 0x1, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e23, @multicast2}}) getpeername(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000100)=""/53}, 0x20) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0xfff, 0x1) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x55b300, 0x0) dup2(r5, r6) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2040, &(0x7f0000000700)={[{@xattr}], [{@subj_type={'subj_type', 0x3d, 'xattr'}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsdef={'smackfsdef', 0x3d, 'xattr'}}]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000300)={@mcast1, 0x4a, r1}) 6.011553471s ago: executing program 2 (id=3853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x4ebc0000) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x58, 0x68, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast}, {{}, {}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 5.578206707s ago: executing program 4 (id=3854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}], {0x14}}, 0x70}, 0x1, 0x1400000000000000}, 0x0) 5.483191283s ago: executing program 2 (id=3855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x80000000, 0x3, '\x00', &(0x7f00000000c0)=0x40}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100, 0x0, 0xc}]}) 4.714306092s ago: executing program 4 (id=3856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002780)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) r4 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x9, 0x2, 0xa200, 0x6, 0x2}, 0x30, 0x7) landlock_restrict_self(r4, 0x10) syz_fuse_handle_req(r1, &(0x7f0000002800)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004900)="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", 0x2000, &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000069c0)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x200000, 0x8000, 0x0, r3, 0xee01, 0x0, 0x7fffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006a40)=@newae={0x4c, 0x1e, 0x300, 0x70bd25, 0x25dfdbfc, {{@in=@loopback, 0x4d2, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xd}, [@lastused={0xc, 0xf, 0x3}]}, 0x4c}}, 0x41) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0xb, 0x4}]}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0x9}, {0x6, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xffffffff, 0x6, 0x8e, 0x4, 0x3, 0x4, 0x200, 0xf96}}}}]}, 0x58}}, 0x2000400c) write$FUSE_GETXATTR(r1, &(0x7f0000000380)={0x18, 0xffffffffffffffda, r2, {0x4}}, 0x18) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r14, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0x40000000}}], 0x18}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd60164508001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078cc0f714d12c1"], 0x0) r15 = eventfd2(0x7, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x3, r15}) 4.616008216s ago: executing program 2 (id=3857): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05070b20"], 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000006c0)={0x4004, r1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYBLOB="30be9af765a970dc26f077ba23404cb7d81853ab5720b10779ddc81b6fde58b3a93680a499b9b3473abfb960c0dddef6316476a02c1f05dfd7decdf983fd572e2358042d5e8281b604e11c7965"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000880)='dum', 0x3) 3.440860861s ago: executing program 2 (id=3858): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000300)={'dummy0\x00', @ifru_flags}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000340)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1}) nanosleep(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000420)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='proc\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/bonding/bond0\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/4096, 0x1000) 197.902124ms ago: executing program 0 (id=3859): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000020) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) (fail_nth: 4) 0s ago: executing program 4 (id=3860): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = fsopen(&(0x7f00000001c0)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='sec\x00', &(0x7f0000000240)='krb5i\xfd', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/sem\x00', 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {0x3, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x2, 0x7, 0x6, 0x0, 0x8000, 0x8, 0x1000, 0xd}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): 2f0 [ 429.454587][T15678] ____sys_sendmsg+0xa4d/0xbe0 [ 429.454600][T15678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.454618][T15678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.454635][T15678] ? lock_acquire+0x1d1/0x380 [ 429.454648][T15678] ? get_pid_task+0x2a/0x250 [ 429.454665][T15678] ___sys_sendmsg+0x190/0x1e0 [ 429.454680][T15678] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.454695][T15678] ? get_pid_task+0x106/0x250 [ 429.454715][T15678] ? find_held_lock+0x2b/0x80 [ 429.454740][T15678] __sys_sendmsg+0x160/0x210 [ 429.454752][T15678] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.454770][T15678] do_syscall_64+0x123/0x790 [ 429.454787][T15678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.454799][T15678] RIP: 0033:0x7fd89139e2d9 [ 429.454808][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.454825][T15678] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.454836][T15678] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 429.454843][T15678] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 429.454850][T15678] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 429.454857][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.454864][T15678] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 429.454878][T15678] [ 429.568931][T15686] FAULT_INJECTION: forcing a failure. [ 429.568931][T15686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.568953][T15686] CPU: 3 UID: 0 PID: 15686 Comm: syz.2.3665 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.568969][T15686] Tainted: [L]=SOFTLOCKUP [ 429.568973][T15686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.568980][T15686] Call Trace: [ 429.568984][T15686] [ 429.568989][T15686] dump_stack_lvl+0x100/0x190 [ 429.569009][T15686] should_fail_ex.cold+0x5/0xa [ 429.569025][T15686] _copy_from_user+0x2e/0xd0 [ 429.569041][T15686] vcs_write+0x30d/0xda0 [ 429.569062][T15686] ? __pfx_vcs_write+0x10/0x10 [ 429.569077][T15686] ? bpf_lsm_file_permission+0x9/0x10 [ 429.569093][T15686] ? security_file_permission+0x76/0x210 [ 429.569110][T15686] ? rw_verify_area+0xce/0x6d0 [ 429.569124][T15686] ? __pfx_vcs_write+0x10/0x10 [ 429.569137][T15686] vfs_writev+0x5ed/0xdd0 [ 429.569153][T15686] ? __pfx_vfs_writev+0x10/0x10 [ 429.569168][T15686] ? lock_acquire+0x1d1/0x380 [ 429.569181][T15686] ? __fget_files+0x34/0x3d0 [ 429.569201][T15686] ? __fget_files+0x21f/0x3d0 [ 429.569220][T15686] ? do_writev+0x13e/0x340 [ 429.569232][T15686] do_writev+0x13e/0x340 [ 429.569245][T15686] ? __pfx_do_writev+0x10/0x10 [ 429.569261][T15686] do_syscall_64+0x123/0x790 [ 429.569279][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.569291][T15686] RIP: 0033:0x7fec7979e2d9 [ 429.569301][T15686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.569318][T15686] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 429.569329][T15686] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 429.569337][T15686] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 429.569344][T15686] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 429.569350][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.569357][T15686] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 429.569371][T15686] [ 429.630160][T15690] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 429.630440][T15690] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 429.630632][T15690] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 429.673213][ T5797] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 429.825341][ T5797] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.826263][ T5797] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.826290][ T5797] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.826306][ T5797] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.826341][ T5797] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.826362][ T5797] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.828326][ T5797] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.828346][ T5797] usb 9-1: Product: syz [ 429.828358][ T5797] usb 9-1: Manufacturer: syz [ 429.836314][ T5797] cdc_wdm 9-1:1.0: skipping garbage [ 429.836330][ T5797] cdc_wdm 9-1:1.0: skipping garbage [ 429.838485][ T5797] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 429.838500][ T5797] cdc_wdm 9-1:1.0: Unknown control protocol [ 429.843507][ T5923] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 430.013928][ T5923] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 430.013952][ T5923] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 430.014872][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.014892][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.014922][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.014943][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.014965][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.015850][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.015869][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.015907][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.015920][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.015933][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.016757][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.016774][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.016790][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.016803][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.016815][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.017657][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.017669][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.017685][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.017697][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.017709][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.018527][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.018539][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.018555][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.018568][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.018580][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.019444][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.019457][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.019474][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.019487][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.019499][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.020316][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.020335][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.020364][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.020386][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.020405][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.021240][ T5923] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.021252][ T5923] usb 7-1: config 1 has no interface number 0 [ 430.021272][ T5923] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 430.021284][ T5923] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 430.021296][ T5923] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.022985][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.023051][ T5923] usb 7-1: Product: syz [ 430.023061][ T5923] usb 7-1: Manufacturer: syz [ 430.023068][ T5923] usb 7-1: SerialNumber: syz [ 430.026127][T15689] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 430.037341][T14476] usb 9-1: USB disconnect, device number 63 [ 430.245290][T15689] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 430.273463][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.301744][ T43] audit: type=1400 audit(1793526465.325:8672): avc: denied { write } for pid=15698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.360307][ T43] audit: type=1400 audit(1793526465.385:8673): avc: denied { write } for pid=15704 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.442198][ T43] audit: type=1400 audit(1793526465.465:8674): avc: denied { write } for pid=15707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.578294][ T5923] usb 7-1: Incompatible driver and firmware versions [ 430.586317][ T5923] usb 7-1: USB disconnect, device number 89 [ 431.794290][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.794515][T15690] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 432.354462][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 432.596783][T15690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.596942][T15690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.615618][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 432.615636][ T43] audit: type=1804 audit(1793526467.634:8682): pid=15695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3669" name="/newroot/354/file0" dev="tmpfs" ino=1964 res=1 errno=0 [ 432.630181][T15733] netlink: 'syz.2.3671': attribute type 10 has an invalid length. [ 432.642050][T15733] team0: Port device dummy0 added [ 432.654730][T15734] netlink: 'syz.2.3671': attribute type 10 has an invalid length. [ 432.673709][T15734] team0: Port device dummy0 removed [ 432.688631][T15738] Cannot find set identified by id 0 to match [ 432.826138][T15755] FAULT_INJECTION: forcing a failure. [ 432.826138][T15755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.826160][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.2.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.826176][T15755] Tainted: [L]=SOFTLOCKUP [ 432.826180][T15755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.826187][T15755] Call Trace: [ 432.826191][T15755] [ 432.826195][T15755] dump_stack_lvl+0x100/0x190 [ 432.826216][T15755] should_fail_ex.cold+0x5/0xa [ 432.826232][T15755] strncpy_from_user+0x3b/0x2d0 [ 432.826251][T15755] do_getname+0x78/0x390 [ 432.826264][T15755] do_sys_openat2+0xc7/0x1e0 [ 432.826275][T15755] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.826286][T15755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.826304][T15755] ? __fget_files+0x21f/0x3d0 [ 432.826321][T15755] __x64_sys_openat+0x12d/0x210 [ 432.826333][T15755] ? __pfx___x64_sys_openat+0x10/0x10 [ 432.826343][T15755] ? ksys_write+0x1ac/0x250 [ 432.826366][T15755] do_syscall_64+0x123/0x790 [ 432.826383][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.826395][T15755] RIP: 0033:0x7fec7979e2d9 [ 432.826404][T15755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.826415][T15755] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 432.826427][T15755] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 432.826434][T15755] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 432.826441][T15755] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 432.826448][T15755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.826455][T15755] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 432.826469][T15755] [ 432.892892][T15761] FAULT_INJECTION: forcing a failure. [ 432.892892][T15761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.892914][T15761] CPU: 3 UID: 0 PID: 15761 Comm: syz.4.3684 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.892929][T15761] Tainted: [L]=SOFTLOCKUP [ 432.892934][T15761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.892940][T15761] Call Trace: [ 432.892944][T15761] [ 432.892949][T15761] dump_stack_lvl+0x100/0x190 [ 432.892969][T15761] should_fail_ex.cold+0x5/0xa [ 432.892985][T15761] _copy_to_iter+0x1f3/0x1720 [ 432.893003][T15761] ? __mutex_unlock_slowpath+0x35d/0x930 [ 432.893021][T15761] ? __pfx__copy_to_iter+0x10/0x10 [ 432.893037][T15761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.893056][T15761] ? kernfs_put_active+0x93/0xe0 [ 432.893071][T15761] seq_read_iter+0xdab/0x1270 [ 432.893092][T15761] kernfs_fop_read_iter+0x46c/0x610 [ 432.893108][T15761] ? rw_verify_area+0xce/0x6d0 [ 432.893121][T15761] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 432.893137][T15761] vfs_read+0x82e/0xb40 [ 432.893152][T15761] ? __pfx_vfs_read+0x10/0x10 [ 432.893165][T15761] ? find_held_lock+0x2b/0x80 [ 432.893190][T15761] ksys_read+0x12a/0x250 [ 432.893203][T15761] ? __pfx_ksys_read+0x10/0x10 [ 432.893221][T15761] do_syscall_64+0x123/0x790 [ 432.893238][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.893249][T15761] RIP: 0033:0x7f1108d9e2d9 [ 432.893259][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.893269][T15761] RSP: 002b:00007f1109c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.893280][T15761] RAX: ffffffffffffffda RBX: 00007f1109025fa0 RCX: 00007f1108d9e2d9 [ 432.893288][T15761] RDX: 0000000000000100 RSI: 00002000000005c0 RDI: 0000000000000003 [ 432.893294][T15761] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 432.893301][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.893308][T15761] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 432.893328][T15761] [ 432.931910][T14476] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 432.956346][T15767] FAULT_INJECTION: forcing a failure. [ 432.956346][T15767] name failslab, interval 1, probability 5, space 0, times 9896 [ 432.956367][T15767] CPU: 3 UID: 0 PID: 15767 Comm: syz.2.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.956382][T15767] Tainted: [L]=SOFTLOCKUP [ 432.956387][T15767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.956393][T15767] Call Trace: [ 432.956398][T15767] [ 432.956403][T15767] dump_stack_lvl+0x100/0x190 [ 432.956423][T15767] should_fail_ex.cold+0x5/0xa [ 432.956439][T15767] should_failslab+0xc2/0x120 [ 432.956456][T15767] __kmalloc_noprof+0xfc/0x840 [ 432.956470][T15767] ? rcu_is_watching+0x13/0xc0 [ 432.956486][T15767] ? tomoyo_realpath_from_path+0xb6/0x690 [ 432.956507][T15767] tomoyo_realpath_from_path+0xb6/0x690 [ 432.956527][T15767] tomoyo_check_open_permission+0x2af/0x3c0 [ 432.956543][T15767] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 432.956563][T15767] ? hook_file_open+0x248/0x8e0 [ 432.956587][T15767] tomoyo_file_open+0x6b/0x90 [ 432.956600][T15767] security_file_open+0xb5/0x1e0 [ 432.956618][T15767] do_dentry_open+0x588/0x14d0 [ 432.956636][T15767] vfs_open+0x82/0x3f0 [ 432.956654][T15767] path_openat+0x19fa/0x2440 [ 432.956673][T15767] ? __pfx_path_openat+0x10/0x10 [ 432.956693][T15767] do_file_open+0x20e/0x430 [ 432.956711][T15767] ? __pfx_do_file_open+0x10/0x10 [ 432.956732][T15767] ? __pfx_kfree_link+0x10/0x10 [ 432.956750][T15767] ? _raw_spin_unlock+0x28/0x50 [ 432.956764][T15767] ? alloc_fd+0x471/0x7a0 [ 432.956784][T15767] do_sys_openat2+0x10f/0x1e0 [ 432.956795][T15767] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.956811][T15767] __x64_sys_openat+0x12d/0x210 [ 432.956822][T15767] ? __pfx___x64_sys_openat+0x10/0x10 [ 432.956838][T15767] do_syscall_64+0x123/0x790 [ 432.956855][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.956867][T15767] RIP: 0033:0x7fec7975eb0e [ 432.956877][T15767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.956887][T15767] RSP: 002b:00007fec7a6d4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 432.956898][T15767] RAX: ffffffffffffffda RBX: 00007fec7a6d56c0 RCX: 00007fec7975eb0e [ 432.956906][T15767] RDX: 0000000000000002 RSI: 00007fec79835182 RDI: ffffffffffffff9c [ 432.956912][T15767] RBP: 00007fec79835888 R08: 0000000000000000 R09: 0000000000000000 [ 432.956919][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.956946][T15767] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 432.956962][T15767] [ 432.957004][T15767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.957037][T15767] FAULT_INJECTION: forcing a failure. [ 432.957037][T15767] name failslab, interval 1, probability 5, space 0, times 9895 [ 432.957052][T15767] CPU: 3 UID: 0 PID: 15767 Comm: syz.2.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.957066][T15767] Tainted: [L]=SOFTLOCKUP [ 432.957070][T15767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.957076][T15767] Call Trace: [ 432.957080][T15767] [ 432.957084][T15767] dump_stack_lvl+0x100/0x190 [ 432.957101][T15767] should_fail_ex.cold+0x5/0xa [ 432.957117][T15767] should_failslab+0xc2/0x120 [ 432.957133][T15767] __kmalloc_noprof+0xfc/0x840 [ 432.957146][T15767] ? rcu_is_watching+0x13/0xc0 [ 432.957162][T15767] ? tomoyo_realpath_from_path+0xb6/0x690 [ 432.957182][T15767] tomoyo_realpath_from_path+0xb6/0x690 [ 432.957202][T15767] tomoyo_path_number_perm+0x23c/0x580 [ 432.957216][T15767] ? tomoyo_path_number_perm+0x22e/0x580 [ 432.957232][T15767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.957252][T15767] ? __lock_acquire+0x5c0/0x1f40 [ 432.957271][T15767] ? __fget_files+0x34/0x3d0 [ 432.957287][T15767] ? find_held_lock+0x2b/0x80 [ 432.957303][T15767] ? hook_file_ioctl_common+0x140/0x440 [ 432.957322][T15767] ? __fget_files+0x21f/0x3d0 [ 432.957341][T15767] security_file_ioctl+0xd3/0x230 [ 432.957357][T15767] __x64_sys_ioctl+0xb7/0x210 [ 432.957372][T15767] do_syscall_64+0x123/0x790 [ 432.957389][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.957400][T15767] RIP: 0033:0x7fec7979e2d9 [ 432.957409][T15767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.957419][T15767] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.957430][T15767] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 432.957437][T15767] RDX: 0000200000000400 RSI: 0000000000001269 RDI: 0000000000000004 [ 432.957443][T15767] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 432.957450][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.957457][T15767] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 432.957471][T15767] [ 432.957496][T15767] 0x000000000003-0x000000010001 : "" [ 432.964958][T15767] ftl_cs: FTL header corrupt! [ 433.034685][T15772] FAULT_INJECTION: forcing a failure. [ 433.034685][T15772] name failslab, interval 1, probability 5, space 0, times 9894 [ 433.034706][T15772] CPU: 0 UID: 0 PID: 15772 Comm: syz.2.3688 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.034738][T15772] Tainted: [L]=SOFTLOCKUP [ 433.034743][T15772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.034750][T15772] Call Trace: [ 433.034755][T15772] [ 433.034760][T15772] dump_stack_lvl+0x100/0x190 [ 433.034780][T15772] should_fail_ex.cold+0x5/0xa [ 433.034796][T15772] should_failslab+0xc2/0x120 [ 433.034814][T15772] __kmalloc_noprof+0xfc/0x840 [ 433.034829][T15772] ? tomoyo_encode2+0xfb/0x3c0 [ 433.034849][T15772] tomoyo_encode2+0xfb/0x3c0 [ 433.034867][T15772] tomoyo_encode+0x29/0x50 [ 433.034883][T15772] tomoyo_realpath_from_path+0x18c/0x690 [ 433.034904][T15772] tomoyo_check_open_permission+0x2af/0x3c0 [ 433.034920][T15772] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 433.034936][T15772] ? __pfx_timestamp_truncate+0x10/0x10 [ 433.034953][T15772] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.034971][T15772] ? hook_file_open+0x248/0x8e0 [ 433.034997][T15772] tomoyo_file_open+0x6b/0x90 [ 433.035010][T15772] security_file_open+0xb5/0x1e0 [ 433.035027][T15772] do_dentry_open+0x588/0x14d0 [ 433.035046][T15772] vfs_open+0x82/0x3f0 [ 433.035065][T15772] path_openat+0x19fa/0x2440 [ 433.035084][T15772] ? __pfx_path_openat+0x10/0x10 [ 433.035106][T15772] do_file_open+0x20e/0x430 [ 433.035124][T15772] ? __pfx_do_file_open+0x10/0x10 [ 433.035151][T15772] ? _raw_spin_unlock+0x28/0x50 [ 433.035164][T15772] ? alloc_fd+0x471/0x7a0 [ 433.035185][T15772] do_sys_openat2+0x10f/0x1e0 [ 433.035195][T15772] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.035206][T15772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.035232][T15772] __x64_sys_openat+0x12d/0x210 [ 433.035243][T15772] ? __pfx___x64_sys_openat+0x10/0x10 [ 433.035254][T15772] ? ksys_write+0x1ac/0x250 [ 433.035274][T15772] do_syscall_64+0x123/0x790 [ 433.035291][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.035304][T15772] RIP: 0033:0x7fec7979e2d9 [ 433.035315][T15772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.035325][T15772] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.035337][T15772] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 433.035344][T15772] RDX: 0000000000000442 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 433.035351][T15772] RBP: 00007fec79835888 R08: 0000000000000000 R09: 0000000000000000 [ 433.035358][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.035364][T15772] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 433.035380][T15772] [ 433.035503][T15772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.085953][T14476] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 433.085990][T14476] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 433.086863][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.086877][T14476] usb 5-1: config 1 has no interface number 0 [ 433.086895][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.086909][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.086924][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.087731][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.087745][T14476] usb 5-1: config 1 has no interface number 0 [ 433.087762][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.087775][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.087788][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.088555][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.088568][T14476] usb 5-1: config 1 has no interface number 0 [ 433.088585][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.088599][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.088613][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.089336][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.089348][T14476] usb 5-1: config 1 has no interface number 0 [ 433.089365][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.089378][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.089391][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.090101][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.090113][T14476] usb 5-1: config 1 has no interface number 0 [ 433.090130][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.090144][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.090157][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.090880][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.090893][T14476] usb 5-1: config 1 has no interface number 0 [ 433.090910][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.090923][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.090936][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.091670][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.091682][T14476] usb 5-1: config 1 has no interface number 0 [ 433.091701][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.091715][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.091729][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.092447][T14476] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 433.092459][T14476] usb 5-1: config 1 has no interface number 0 [ 433.092476][T14476] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 433.092531][T14476] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 433.092545][T14476] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.094035][T14476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.094055][T14476] usb 5-1: Product: syz [ 433.094068][T14476] usb 5-1: Manufacturer: syz [ 433.094081][T14476] usb 5-1: SerialNumber: syz [ 433.098852][T15739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.106443][T15772] 0x000000000001-0x00000000ffff : "" [ 433.110929][T15772] ftl_cs: FTL header corrupt! [ 433.217015][ T43] audit: type=1400 audit(1793526468.244:8683): avc: denied { write } for pid=15776 comm="syz.2.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 433.291488][T15782] FAULT_INJECTION: forcing a failure. [ 433.291488][T15782] name failslab, interval 1, probability 5, space 0, times 9893 [ 433.291517][T15782] CPU: 0 UID: 0 PID: 15782 Comm: syz.2.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.291540][T15782] Tainted: [L]=SOFTLOCKUP [ 433.291547][T15782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.291558][T15782] Call Trace: [ 433.291564][T15782] [ 433.291572][T15782] dump_stack_lvl+0x100/0x190 [ 433.291601][T15782] should_fail_ex.cold+0x5/0xa [ 433.291626][T15782] should_failslab+0xc2/0x120 [ 433.291650][T15782] __kmalloc_noprof+0xfc/0x840 [ 433.291670][T15782] ? __pfx_dynamic_dname+0x10/0x10 [ 433.291690][T15782] ? tomoyo_encode2+0xfb/0x3c0 [ 433.291721][T15782] tomoyo_encode2+0xfb/0x3c0 [ 433.291749][T15782] tomoyo_encode+0x29/0x50 [ 433.291772][T15782] tomoyo_realpath_from_path+0x18c/0x690 [ 433.291821][T15782] tomoyo_path_number_perm+0x23c/0x580 [ 433.291845][T15782] ? tomoyo_path_number_perm+0x22e/0x580 [ 433.291868][T15782] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.291900][T15782] ? __lock_acquire+0x5c0/0x1f40 [ 433.291930][T15782] ? __fget_files+0x34/0x3d0 [ 433.291954][T15782] ? find_held_lock+0x2b/0x80 [ 433.291978][T15782] ? hook_file_ioctl_common+0x140/0x440 [ 433.292001][T15782] ? __fget_files+0x21f/0x3d0 [ 433.292027][T15782] security_file_ioctl+0xd3/0x230 [ 433.292051][T15782] __x64_sys_ioctl+0xb7/0x210 [ 433.292074][T15782] do_syscall_64+0x123/0x790 [ 433.292100][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.292117][T15782] RIP: 0033:0x7fec7979e2d9 [ 433.292132][T15782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.292169][T15782] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.292186][T15782] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 433.292197][T15782] RDX: 0000200000003980 RSI: 00000000c080aebe RDI: 0000000000000005 [ 433.292208][T15782] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 433.292219][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.292229][T15782] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 433.292253][T15782] [ 433.292319][T15782] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.307080][T15739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.389499][ T43] audit: type=1400 audit(1793526468.414:8684): avc: denied { write } for pid=15784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.437249][ T43] audit: type=1400 audit(1793526468.464:8685): avc: denied { write } for pid=15787 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.508338][T15739] FAULT_INJECTION: forcing a failure. [ 433.508338][T15739] name failslab, interval 1, probability 5, space 0, times 9892 [ 433.508360][T15739] CPU: 3 UID: 0 PID: 15739 Comm: syz.0.3673 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.508375][T15739] Tainted: [L]=SOFTLOCKUP [ 433.508380][T15739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.508387][T15739] Call Trace: [ 433.508391][T15739] [ 433.508396][T15739] dump_stack_lvl+0x100/0x190 [ 433.508416][T15739] should_fail_ex.cold+0x5/0xa [ 433.508436][T15739] should_failslab+0xc2/0x120 [ 433.508452][T15739] __kmalloc_noprof+0xfc/0x840 [ 433.508467][T15739] ? tomoyo_encode2+0xfb/0x3c0 [ 433.508487][T15739] tomoyo_encode2+0xfb/0x3c0 [ 433.508505][T15739] tomoyo_encode+0x29/0x50 [ 433.508522][T15739] tomoyo_realpath_from_path+0x18c/0x690 [ 433.508543][T15739] tomoyo_path_number_perm+0x23c/0x580 [ 433.508557][T15739] ? tomoyo_path_number_perm+0x22e/0x580 [ 433.508573][T15739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.508593][T15739] ? __lock_acquire+0x5c0/0x1f40 [ 433.508613][T15739] ? __fget_files+0x34/0x3d0 [ 433.508629][T15739] ? find_held_lock+0x2b/0x80 [ 433.508644][T15739] ? hook_file_ioctl_common+0x140/0x440 [ 433.508659][T15739] ? __fget_files+0x21f/0x3d0 [ 433.508684][T15739] security_file_ioctl+0xd3/0x230 [ 433.508700][T15739] __x64_sys_ioctl+0xb7/0x210 [ 433.508715][T15739] do_syscall_64+0x123/0x790 [ 433.508733][T15739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.508745][T15739] RIP: 0033:0x7fd89139e2d9 [ 433.508754][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.508766][T15739] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.508777][T15739] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 433.508784][T15739] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004 [ 433.508791][T15739] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 433.508798][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.508804][T15739] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 433.508819][T15739] [ 433.508829][T15739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.554308][ T43] audit: type=1400 audit(1793526468.574:8686): avc: denied { write } for pid=15790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.571257][T14476] usb 5-1: Incompatible driver and firmware versions [ 433.577845][T14476] usb 5-1: USB disconnect, device number 84 [ 433.616536][ T43] audit: type=1400 audit(1793526468.643:8687): avc: denied { write } for pid=15795 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.678967][ T43] audit: type=1400 audit(1793526468.703:8688): avc: denied { write } for pid=15799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.738285][ T43] audit: type=1400 audit(1793526468.763:8689): avc: denied { write } for pid=15802 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.746083][T15804] geneve2: entered promiscuous mode [ 433.746098][T15804] geneve2: entered allmulticast mode [ 433.796563][T15812] geneve2: entered promiscuous mode [ 433.796577][T15812] geneve2: entered allmulticast mode [ 433.809205][ T43] audit: type=1400 audit(1793526468.833:8690): avc: denied { write } for pid=15806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.847451][T15820] netlink: 'syz.4.3696': attribute type 11 has an invalid length. [ 433.847987][ T43] audit: type=1400 audit(1793526468.873:8691): avc: denied { sqpoll } for pid=15818 comm="syz.4.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 433.875396][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.953506][T15828] trusted_key: encrypted_key: insufficient parameters specified [ 434.065691][T14476] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 434.139267][T15834] FAULT_INJECTION: forcing a failure. [ 434.139267][T15834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.139289][T15834] CPU: 0 UID: 0 PID: 15834 Comm: syz.0.3699 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.139304][T15834] Tainted: [L]=SOFTLOCKUP [ 434.139309][T15834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.139315][T15834] Call Trace: [ 434.139319][T15834] [ 434.139324][T15834] dump_stack_lvl+0x100/0x190 [ 434.139345][T15834] should_fail_ex.cold+0x5/0xa [ 434.139366][T15834] _copy_from_user+0x2e/0xd0 [ 434.139389][T15834] copy_msghdr_from_user+0x9f/0x4c0 [ 434.139413][T15834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 434.139440][T15834] ? lock_acquire+0x1d1/0x380 [ 434.139459][T15834] ? get_pid_task+0x2a/0x250 [ 434.139495][T15834] ___sys_sendmsg+0x106/0x1e0 [ 434.139511][T15834] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.139526][T15834] ? get_pid_task+0x106/0x250 [ 434.139546][T15834] ? find_held_lock+0x2b/0x80 [ 434.139571][T15834] __sys_sendmsg+0x160/0x210 [ 434.139583][T15834] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.139602][T15834] do_syscall_64+0x123/0x790 [ 434.139619][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.139631][T15834] RIP: 0033:0x7fd89139e2d9 [ 434.139641][T15834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.139652][T15834] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.139666][T15834] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 434.139673][T15834] RDX: 000000002404c0c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 434.139680][T15834] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 434.139687][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.139693][T15834] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 434.139707][T15834] [ 434.181896][T15836] bridge5: entered promiscuous mode [ 434.225679][T14476] usb 8-1: Using ep0 maxpacket: 8 [ 434.226419][T14476] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.227350][T14476] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 434.227395][T14476] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 434.227417][T14476] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.227437][T14476] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 434.227459][T14476] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 434.227479][T14476] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.227512][T14476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.274560][T15841] FAULT_INJECTION: forcing a failure. [ 434.274560][T15841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.274582][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.0.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.274598][T15841] Tainted: [L]=SOFTLOCKUP [ 434.274602][T15841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.274609][T15841] Call Trace: [ 434.274613][T15841] [ 434.274618][T15841] dump_stack_lvl+0x100/0x190 [ 434.274637][T15841] should_fail_ex.cold+0x5/0xa [ 434.274653][T15841] _copy_from_user+0x2e/0xd0 [ 434.274670][T15841] io_uring_setup+0xc0/0x160 [ 434.274688][T15841] ? lock_acquire+0x1d1/0x380 [ 434.274701][T15841] ? avc_has_perm_noaudit+0x56/0x470 [ 434.274713][T15841] ? __pfx_io_uring_setup+0x10/0x10 [ 434.274729][T15841] ? find_held_lock+0x2b/0x80 [ 434.274745][T15841] ? avc_has_perm_noaudit+0x11e/0x470 [ 434.274756][T15841] ? avc_has_perm_noaudit+0x11e/0x470 [ 434.274776][T15841] ? ksys_write+0x1ac/0x250 [ 434.274790][T15841] ? __pfx_ksys_write+0x10/0x10 [ 434.274806][T15841] __x64_sys_io_uring_setup+0xc2/0x170 [ 434.274824][T15841] do_syscall_64+0x123/0x790 [ 434.274841][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.274853][T15841] RIP: 0033:0x7fd89139e2d9 [ 434.274862][T15841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.274873][T15841] RSP: 002b:00007fd8922ecfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 434.274885][T15841] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fd89139e2d9 [ 434.274892][T15841] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000001d [ 434.274899][T15841] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000101 [ 434.274905][T15841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.274912][T15841] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd545fe118 [ 434.274926][T15841] [ 434.437959][T14476] usb 8-1: GET_CAPABILITIES returned 0 [ 434.437984][T14476] usbtmc 8-1:16.0: can't read capabilities [ 434.639468][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 434.639523][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 434.639583][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 434.639637][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 434.644590][T15817] usbtmc 8-1:16.0: Unable to send data, error -71 [ 434.645462][T14476] usb 8-1: USB disconnect, device number 92 [ 434.685878][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.709171][T15849] FAULT_INJECTION: forcing a failure. [ 434.709171][T15849] name failslab, interval 1, probability 5, space 0, times 9890 [ 434.709194][T15849] CPU: 0 UID: 0 PID: 15849 Comm: syz.4.3703 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.709218][T15849] Tainted: [L]=SOFTLOCKUP [ 434.709223][T15849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.709231][T15849] Call Trace: [ 434.709237][T15849] [ 434.709242][T15849] dump_stack_lvl+0x100/0x190 [ 434.709273][T15849] should_fail_ex.cold+0x5/0xa [ 434.709301][T15849] should_failslab+0xc2/0x120 [ 434.709331][T15849] __kmalloc_cache_noprof+0x91/0x6d0 [ 434.709354][T15849] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 434.709382][T15849] __io_uring_add_tctx_node+0x179/0x4f0 [ 434.709398][T15849] ? security_inode_init_security_anon+0x11/0x230 [ 434.709416][T15849] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 434.709433][T15849] ? __anon_inode_getfile+0x17c/0x280 [ 434.709451][T15849] io_uring_setup.cold+0x19c4/0x1c7e [ 434.709466][T15849] ? __pfx_io_uring_setup+0x10/0x10 [ 434.709484][T15849] ? find_held_lock+0x2b/0x80 [ 434.709512][T15849] ? __pfx___x64_sys_futex+0x10/0x10 [ 434.709531][T15849] ? ksys_write+0x1ac/0x250 [ 434.709546][T15849] ? __pfx_ksys_write+0x10/0x10 [ 434.709564][T15849] __x64_sys_io_uring_setup+0xc2/0x170 [ 434.709584][T15849] do_syscall_64+0x123/0x790 [ 434.709603][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.709617][T15849] RIP: 0033:0x7f1108d9e2d9 [ 434.709629][T15849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.709642][T15849] RSP: 002b:00007f1109c6ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 434.709656][T15849] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f1108d9e2d9 [ 434.709665][T15849] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000001d [ 434.709673][T15849] RBP: 00007f1108e35888 R08: 0000000000000000 R09: 0000000000000000 [ 434.709680][T15849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.709688][T15849] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc22e0888 [ 434.709705][T15849] [ 434.755281][T15851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3705'. [ 434.759676][T15851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 434.761064][T15851] FAULT_INJECTION: forcing a failure. [ 434.761064][T15851] name failslab, interval 1, probability 5, space 0, times 9889 [ 434.761083][T15851] CPU: 2 UID: 0 PID: 15851 Comm: syz.2.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.761117][T15851] Tainted: [L]=SOFTLOCKUP [ 434.761121][T15851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.761128][T15851] Call Trace: [ 434.761133][T15851] [ 434.761138][T15851] dump_stack_lvl+0x100/0x190 [ 434.761159][T15851] should_fail_ex.cold+0x5/0xa [ 434.761176][T15851] should_failslab+0xc2/0x120 [ 434.761194][T15851] __kmalloc_cache_noprof+0x91/0x6d0 [ 434.761207][T15851] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 434.761224][T15851] __io_uring_add_tctx_node+0x179/0x4f0 [ 434.761237][T15851] ? security_inode_init_security_anon+0x11/0x230 [ 434.761253][T15851] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 434.761274][T15851] ? __anon_inode_getfile+0x17c/0x280 [ 434.761297][T15851] io_uring_setup.cold+0x19c4/0x1c7e [ 434.761315][T15851] ? __pfx_io_uring_setup+0x10/0x10 [ 434.761337][T15851] ? find_held_lock+0x2b/0x80 [ 434.761366][T15851] ? xfd_validate_state+0x129/0x190 [ 434.761383][T15851] __x64_sys_io_uring_setup+0xc2/0x170 [ 434.761400][T15851] do_syscall_64+0x123/0x790 [ 434.761418][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.761429][T15851] RIP: 0033:0x7fec7979e2d9 [ 434.761439][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.761450][T15851] RSP: 002b:00007fec7a6d4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 434.761462][T15851] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fec7979e2d9 [ 434.761469][T15851] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000001d [ 434.761476][T15851] RBP: 00007fec79835888 R08: 0000000000000000 R09: 0000000000000000 [ 434.761484][T15851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.761491][T15851] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd85cf3bd8 [ 434.761507][T15851] [ 434.791971][T15855] FAULT_INJECTION: forcing a failure. [ 434.791971][T15855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.792002][T15855] CPU: 1 UID: 0 PID: 15855 Comm: syz.2.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.792027][T15855] Tainted: [L]=SOFTLOCKUP [ 434.792034][T15855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.792045][T15855] Call Trace: [ 434.792052][T15855] [ 434.792059][T15855] dump_stack_lvl+0x100/0x190 [ 434.792091][T15855] should_fail_ex.cold+0x5/0xa [ 434.792120][T15855] _copy_from_iter+0x1f4/0x1690 [ 434.792192][T15855] ? __pfx__copy_from_iter+0x10/0x10 [ 434.792219][T15855] ? kasan_save_track+0x14/0x30 [ 434.792244][T15855] ? __kasan_kmalloc+0xaa/0xb0 [ 434.792269][T15855] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 434.792289][T15855] ? configfs_write_iter+0x388/0x4e0 [ 434.792314][T15855] configfs_write_iter+0xb3/0x4e0 [ 434.792339][T15855] vfs_write+0x6af/0x1050 [ 434.792362][T15855] ? __pfx_configfs_write_iter+0x10/0x10 [ 434.792385][T15855] ? __pfx_vfs_write+0x10/0x10 [ 434.792403][T15855] ? find_held_lock+0x2b/0x80 [ 434.792447][T15855] ksys_write+0x12a/0x250 [ 434.792467][T15855] ? __pfx_ksys_write+0x10/0x10 [ 434.792496][T15855] do_syscall_64+0x123/0x790 [ 434.792524][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.792542][T15855] RIP: 0033:0x7fec7979e2d9 [ 434.792558][T15855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.792573][T15855] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.792592][T15855] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 434.792603][T15855] RDX: 0000000000000009 RSI: 0000200000000780 RDI: 0000000000000004 [ 434.792615][T15855] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 434.792625][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.792651][T15855] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 434.792676][T15855] [ 435.227284][T15863] FAULT_INJECTION: forcing a failure. [ 435.227284][T15863] name failslab, interval 1, probability 5, space 0, times 9888 [ 435.227306][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.3.3709 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.227322][T15863] Tainted: [L]=SOFTLOCKUP [ 435.227326][T15863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.227333][T15863] Call Trace: [ 435.227337][T15863] [ 435.227342][T15863] dump_stack_lvl+0x100/0x190 [ 435.227362][T15863] should_fail_ex.cold+0x5/0xa [ 435.227379][T15863] should_failslab+0xc2/0x120 [ 435.227396][T15863] __kmalloc_noprof+0xfc/0x840 [ 435.227410][T15863] ? io_cache_alloc_new+0x45/0xe0 [ 435.227426][T15863] io_cache_alloc_new+0x45/0xe0 [ 435.227439][T15863] __io_prep_rw+0x21d/0xfb0 [ 435.227454][T15863] ? __pfx___io_prep_rw+0x10/0x10 [ 435.227467][T15863] ? lock_acquire+0x1d1/0x380 [ 435.227480][T15863] ? rcu_lock_acquire.constprop.0+0x17/0x30 [ 435.227500][T15863] ? find_held_lock+0x2b/0x80 [ 435.227518][T15863] io_prep_rw+0x76/0x2c0 [ 435.227532][T15863] ? __pfx_io_prep_rw+0x10/0x10 [ 435.227546][T15863] ? __io_alloc_req_refill+0x2e1/0x330 [ 435.227560][T15863] io_prep_readv+0x78/0x2e0 [ 435.227575][T15863] ? __pfx_io_prep_readv+0x10/0x10 [ 435.227594][T15863] io_submit_sqes+0xa03/0x2480 [ 435.227617][T15863] __do_sys_io_uring_enter+0xa88/0x1b10 [ 435.227635][T15863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.227663][T15863] ? __fget_files+0x21f/0x3d0 [ 435.227680][T15863] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 435.227700][T15863] ? fput+0x7c/0x100 [ 435.227717][T15863] ? ksys_write+0x1ac/0x250 [ 435.227731][T15863] ? __pfx_ksys_write+0x10/0x10 [ 435.227748][T15863] do_syscall_64+0x123/0x790 [ 435.227766][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.227777][T15863] RIP: 0033:0x7fbce319e2d9 [ 435.227787][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.227798][T15863] RSP: 002b:00007fbce400bfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 435.227809][T15863] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fbce319e2d9 [ 435.227817][T15863] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004 [ 435.227823][T15863] RBP: 0000200000000240 R08: 0000000000000000 R09: 0000000000000008 [ 435.227830][T15863] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 435.227837][T15863] R13: 00007fbce3426038 R14: 00007fbce3425fa0 R15: 00007ffcc725d178 [ 435.227851][T15863] [ 435.419576][T15867] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 435.426162][ T1041] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 435.586157][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 435.587354][ T1041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.588307][ T1041] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 435.588356][ T1041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 435.588386][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.588408][ T1041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 435.588432][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 435.588455][ T1041] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.588489][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.637064][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3714'. [ 435.688088][T15879] FAULT_INJECTION: forcing a failure. [ 435.688088][T15879] name failslab, interval 1, probability 5, space 0, times 9887 [ 435.688110][T15879] CPU: 2 UID: 0 PID: 15879 Comm: syz.4.3715 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.688125][T15879] Tainted: [L]=SOFTLOCKUP [ 435.688157][T15879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.688164][T15879] Call Trace: [ 435.688173][T15879] [ 435.688178][T15879] dump_stack_lvl+0x100/0x190 [ 435.688205][T15879] should_fail_ex.cold+0x5/0xa [ 435.688222][T15879] should_failslab+0xc2/0x120 [ 435.688242][T15879] __kmalloc_noprof+0xfc/0x840 [ 435.688256][T15879] ? __pfx_dynamic_dname+0x10/0x10 [ 435.688270][T15879] ? tomoyo_encode2+0xfb/0x3c0 [ 435.688290][T15879] tomoyo_encode2+0xfb/0x3c0 [ 435.688309][T15879] tomoyo_encode+0x29/0x50 [ 435.688325][T15879] tomoyo_realpath_from_path+0x18c/0x690 [ 435.688346][T15879] tomoyo_path_number_perm+0x23c/0x580 [ 435.688360][T15879] ? tomoyo_path_number_perm+0x22e/0x580 [ 435.688381][T15879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 435.688402][T15879] ? __lock_acquire+0x5c0/0x1f40 [ 435.688421][T15879] ? __fget_files+0x34/0x3d0 [ 435.688440][T15879] ? find_held_lock+0x2b/0x80 [ 435.688457][T15879] ? hook_file_ioctl_common+0x140/0x440 [ 435.688472][T15879] ? __fget_files+0x21f/0x3d0 [ 435.688490][T15879] security_file_ioctl+0xd3/0x230 [ 435.688507][T15879] __x64_sys_ioctl+0xb7/0x210 [ 435.688522][T15879] do_syscall_64+0x123/0x790 [ 435.688543][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.688555][T15879] RIP: 0033:0x7f1108d9e2d9 [ 435.688565][T15879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.688576][T15879] RSP: 002b:00007f1109c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.688591][T15879] RAX: ffffffffffffffda RBX: 00007f1109025fa0 RCX: 00007f1108d9e2d9 [ 435.688598][T15879] RDX: 00002000000006c0 RSI: 00000000000089e2 RDI: 0000000000000003 [ 435.688605][T15879] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 435.688612][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.688619][T15879] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 435.688634][T15879] [ 435.688680][T15879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.731844][ T5731] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 435.733917][T15881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.734534][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3716'. [ 435.734555][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3716'. [ 435.737532][T15880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.794942][ T1041] usb 5-1: GET_CAPABILITIES returned 0 [ 435.794980][ T1041] usbtmc 5-1:16.0: can't read capabilities [ 435.866313][ T5986] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 435.997226][T15859] FAULT_INJECTION: forcing a failure. [ 435.997226][T15859] name failslab, interval 1, probability 5, space 0, times 9886 [ 435.997260][T15859] CPU: 0 UID: 0 PID: 15859 Comm: syz.0.3707 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.997285][T15859] Tainted: [L]=SOFTLOCKUP [ 435.997292][T15859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.997304][T15859] Call Trace: [ 435.997311][T15859] [ 435.997318][T15859] dump_stack_lvl+0x100/0x190 [ 435.997350][T15859] should_fail_ex.cold+0x5/0xa [ 435.997376][T15859] should_failslab+0xc2/0x120 [ 435.997403][T15859] __kmalloc_cache_noprof+0x91/0x6d0 [ 435.997424][T15859] ? usbtmc_create_urb+0x59/0x150 [ 435.997460][T15859] usbtmc_create_urb+0x59/0x150 [ 435.997482][T15859] usbtmc_write+0x23f/0xcc0 [ 435.997506][T15859] ? avc_policy_seqno+0x9/0x20 [ 435.997524][T15859] ? selinux_file_permission+0x8f/0x6d0 [ 435.997553][T15859] ? __pfx_usbtmc_write+0x10/0x10 [ 435.997574][T15859] ? bpf_lsm_file_permission+0x9/0x10 [ 435.997597][T15859] ? security_file_permission+0x76/0x210 [ 435.997622][T15859] ? rw_verify_area+0xce/0x6d0 [ 435.997642][T15859] vfs_write+0x2aa/0x1050 [ 435.997663][T15859] ? __pfx_usbtmc_write+0x10/0x10 [ 435.997684][T15859] ? lock_acquire+0x1d1/0x380 [ 435.997704][T15859] ? __fget_files+0x34/0x3d0 [ 435.997731][T15859] ? __pfx_vfs_write+0x10/0x10 [ 435.997751][T15859] ? find_held_lock+0x2b/0x80 [ 435.997777][T15859] ? __fget_files+0x215/0x3d0 [ 435.997802][T15859] ? __fget_files+0x215/0x3d0 [ 435.997837][T15859] ? __fget_files+0x21f/0x3d0 [ 435.997870][T15859] ksys_write+0x12a/0x250 [ 435.997893][T15859] ? __pfx_ksys_write+0x10/0x10 [ 435.997923][T15859] do_syscall_64+0x123/0x790 [ 435.997970][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.997990][T15859] RIP: 0033:0x7fd89139e2d9 [ 435.998005][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.998022][T15859] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.998040][T15859] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 435.998053][T15859] RDX: 000000000000fe64 RSI: 0000200000001180 RDI: 0000000000000004 [ 435.998064][T15859] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 435.998075][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.998086][T15859] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 435.998112][T15859] [ 436.001857][ T1041] usb 5-1: USB disconnect, device number 85 [ 436.026367][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 436.026851][ T5986] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 436.027271][ T5986] usb 8-1: config 0 has no interfaces? [ 436.028843][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.028858][ T5986] usb 8-1: Product: syz [ 436.028865][ T5986] usb 8-1: Manufacturer: syz [ 436.028873][ T5986] usb 8-1: SerialNumber: syz [ 436.031658][ T5986] usb 8-1: config 0 descriptor?? [ 436.234762][ T2394] usb 8-1: USB disconnect, device number 93 [ 436.329860][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3719'. [ 436.369449][ T66] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 436.464063][T15894] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 436.466227][T15894] netlink: 'syz.4.3721': attribute type 2 has an invalid length. [ 436.472808][ T66] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 436.604961][T15904] loop9: detected capacity change from 0 to 255852544 [ 436.697721][T15910] block nbd0: NBD_DISCONNECT [ 436.759127][T15912] block nbd0: Disconnected due to user request. [ 436.759691][T15912] block nbd0: shutting down sockets [ 437.074953][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3736'. [ 437.074975][T15937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3736'. [ 437.240185][T15941] FAULT_INJECTION: forcing a failure. [ 437.240185][T15941] name failslab, interval 1, probability 5, space 0, times 9885 [ 437.240208][T15941] CPU: 2 UID: 0 PID: 15941 Comm: syz.2.3738 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.240223][T15941] Tainted: [L]=SOFTLOCKUP [ 437.240228][T15941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.240235][T15941] Call Trace: [ 437.240239][T15941] [ 437.240244][T15941] dump_stack_lvl+0x100/0x190 [ 437.240265][T15941] should_fail_ex.cold+0x5/0xa [ 437.240281][T15941] should_failslab+0xc2/0x120 [ 437.240298][T15941] __kmalloc_noprof+0xfc/0x840 [ 437.240312][T15941] ? __pfx_dynamic_dname+0x10/0x10 [ 437.240327][T15941] ? tomoyo_encode2+0xfb/0x3c0 [ 437.240346][T15941] tomoyo_encode2+0xfb/0x3c0 [ 437.240365][T15941] tomoyo_encode+0x29/0x50 [ 437.240381][T15941] tomoyo_realpath_from_path+0x18c/0x690 [ 437.240402][T15941] tomoyo_path_number_perm+0x23c/0x580 [ 437.240417][T15941] ? tomoyo_path_number_perm+0x22e/0x580 [ 437.240433][T15941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.240453][T15941] ? __lock_acquire+0x5c0/0x1f40 [ 437.240473][T15941] ? __fget_files+0x34/0x3d0 [ 437.240489][T15941] ? find_held_lock+0x2b/0x80 [ 437.240505][T15941] ? hook_file_ioctl_common+0x140/0x440 [ 437.240520][T15941] ? __fget_files+0x21f/0x3d0 [ 437.240538][T15941] security_file_ioctl+0xd3/0x230 [ 437.240554][T15941] __x64_sys_ioctl+0xb7/0x210 [ 437.240569][T15941] do_syscall_64+0x123/0x790 [ 437.240586][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.240598][T15941] RIP: 0033:0x7fec7979e2d9 [ 437.240608][T15941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.240619][T15941] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.240630][T15941] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 437.240637][T15941] RDX: 00002000000000c0 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 437.240644][T15941] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 437.240651][T15941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.240657][T15941] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 437.240677][T15941] [ 437.240687][T15941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.299958][T15939] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 437.315418][T15945] FAULT_INJECTION: forcing a failure. [ 437.315418][T15945] name failslab, interval 1, probability 5, space 0, times 9884 [ 437.315449][T15945] CPU: 3 UID: 0 PID: 15945 Comm: syz.2.3739 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.315475][T15945] Tainted: [L]=SOFTLOCKUP [ 437.315481][T15945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.315492][T15945] Call Trace: [ 437.315499][T15945] [ 437.315507][T15945] dump_stack_lvl+0x100/0x190 [ 437.315537][T15945] should_fail_ex.cold+0x5/0xa [ 437.315563][T15945] should_failslab+0xc2/0x120 [ 437.315589][T15945] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 437.315612][T15945] ? __alloc_skb+0x5b7/0x710 [ 437.315640][T15945] ? __alloc_skb+0x140/0x710 [ 437.315671][T15945] __alloc_skb+0x140/0x710 [ 437.315697][T15945] ? __alloc_skb+0x5b7/0x710 [ 437.315723][T15945] ? __pfx___alloc_skb+0x10/0x10 [ 437.315757][T15945] pfkey_sendmsg+0x161/0x840 [ 437.315785][T15945] ____sys_sendmsg+0xa4d/0xbe0 [ 437.315806][T15945] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 437.315838][T15945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.315867][T15945] ? lock_acquire+0x1d1/0x380 [ 437.315889][T15945] ? get_pid_task+0x2a/0x250 [ 437.315916][T15945] ___sys_sendmsg+0x190/0x1e0 [ 437.315941][T15945] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.315965][T15945] ? get_pid_task+0x106/0x250 [ 437.315997][T15945] ? find_held_lock+0x2b/0x80 [ 437.316040][T15945] __sys_sendmsg+0x160/0x210 [ 437.316061][T15945] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.316094][T15945] do_syscall_64+0x123/0x790 [ 437.316148][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.316169][T15945] RIP: 0033:0x7fec7979e2d9 [ 437.316185][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.316202][T15945] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.316221][T15945] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 437.316232][T15945] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 437.316242][T15945] RBP: 00007fec7a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 437.316253][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.316264][T15945] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 437.316289][T15945] [ 437.344711][T15948] comedi: No check for data length of config insn id 9 is implemented [ 437.344722][T15948] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 437.344728][T15948] comedi: Assuming n=15 is correct [ 437.500412][T15954] FAULT_INJECTION: forcing a failure. [ 437.500412][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.500437][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.4.3743 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.500459][T15954] Tainted: [L]=SOFTLOCKUP [ 437.500465][T15954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.500474][T15954] Call Trace: [ 437.500480][T15954] [ 437.500487][T15954] dump_stack_lvl+0x100/0x190 [ 437.500519][T15954] should_fail_ex.cold+0x5/0xa [ 437.500544][T15954] _copy_from_iter+0x1f4/0x1690 [ 437.500576][T15954] ? __pfx__copy_from_iter+0x10/0x10 [ 437.500601][T15954] ? kasan_save_track+0x14/0x30 [ 437.500627][T15954] ? __kasan_kmalloc+0xaa/0xb0 [ 437.500653][T15954] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 437.500672][T15954] ? configfs_write_iter+0x388/0x4e0 [ 437.500700][T15954] configfs_write_iter+0xb3/0x4e0 [ 437.500726][T15954] vfs_write+0x6af/0x1050 [ 437.500750][T15954] ? __pfx_configfs_write_iter+0x10/0x10 [ 437.500775][T15954] ? __pfx_vfs_write+0x10/0x10 [ 437.500794][T15954] ? find_held_lock+0x2b/0x80 [ 437.500836][T15954] ksys_write+0x12a/0x250 [ 437.500853][T15954] ? __pfx_ksys_write+0x10/0x10 [ 437.500873][T15954] do_syscall_64+0x123/0x790 [ 437.500892][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.500904][T15954] RIP: 0033:0x7f1108d9e2d9 [ 437.500914][T15954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.500925][T15954] RSP: 002b:00007f1109c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.500938][T15954] RAX: ffffffffffffffda RBX: 00007f1109025fa0 RCX: 00007f1108d9e2d9 [ 437.500945][T15954] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000003 [ 437.500952][T15954] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 437.500959][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.500965][T15954] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 437.500980][T15954] [ 437.539028][T15958] FAULT_INJECTION: forcing a failure. [ 437.539028][T15958] name failslab, interval 1, probability 5, space 0, times 9883 [ 437.539059][T15958] CPU: 2 UID: 0 PID: 15958 Comm: syz.4.3745 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.539082][T15958] Tainted: [L]=SOFTLOCKUP [ 437.539089][T15958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.539099][T15958] Call Trace: [ 437.539105][T15958] [ 437.539113][T15958] dump_stack_lvl+0x100/0x190 [ 437.539141][T15958] should_fail_ex.cold+0x5/0xa [ 437.539165][T15958] should_failslab+0xc2/0x120 [ 437.539190][T15958] __kmalloc_noprof+0xfc/0x840 [ 437.539211][T15958] ? tomoyo_encode2+0xfb/0x3c0 [ 437.539241][T15958] tomoyo_encode2+0xfb/0x3c0 [ 437.539268][T15958] tomoyo_encode+0x29/0x50 [ 437.539292][T15958] tomoyo_realpath_from_path+0x18c/0x690 [ 437.539323][T15958] tomoyo_path_number_perm+0x23c/0x580 [ 437.539344][T15958] ? tomoyo_path_number_perm+0x22e/0x580 [ 437.539368][T15958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.539399][T15958] ? __lock_acquire+0x5c0/0x1f40 [ 437.539429][T15958] ? __fget_files+0x34/0x3d0 [ 437.539452][T15958] ? find_held_lock+0x2b/0x80 [ 437.539476][T15958] ? hook_file_ioctl_common+0x140/0x440 [ 437.539499][T15958] ? __fget_files+0x21f/0x3d0 [ 437.539526][T15958] security_file_ioctl+0xd3/0x230 [ 437.539550][T15958] __x64_sys_ioctl+0xb7/0x210 [ 437.539573][T15958] do_syscall_64+0x123/0x790 [ 437.539599][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.539617][T15958] RIP: 0033:0x7f1108d9e2d9 [ 437.539631][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.539647][T15958] RSP: 002b:00007f1109c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.539665][T15958] RAX: ffffffffffffffda RBX: 00007f1109025fa0 RCX: 00007f1108d9e2d9 [ 437.539677][T15958] RDX: 0000200000000980 RSI: 0000000040445637 RDI: 0000000000000003 [ 437.539688][T15958] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 437.539698][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.539708][T15958] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 437.539738][T15958] [ 437.539753][T15958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 439.013126][T15970] binder: 15969:15970 ioctl c0306201 200000000b80 returned -22 [ 439.789166][ T9] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 439.953896][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 439.970674][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.970973][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.007172][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.007205][ T9] usb 9-1: Product: syz [ 440.007228][ T9] usb 9-1: Manufacturer: syz [ 440.007251][ T9] usb 9-1: SerialNumber: syz [ 440.521616][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.528812][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.998617][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 441.998637][ T43] audit: type=1400 audit(1793526476.999:8699): avc: denied { mounton } for pid=15981 comm="syz.2.3754" path="/241/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 442.007413][ T5986] usb 9-1: USB disconnect, device number 64 [ 442.098658][ T43] audit: type=1400 audit(1793526477.109:8700): avc: denied { setopt } for pid=15980 comm="syz.3.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 442.105713][T15983] FAULT_INJECTION: forcing a failure. [ 442.105713][T15983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.105754][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.3.3753 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.105779][T15983] Tainted: [L]=SOFTLOCKUP [ 442.105791][T15983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.105805][T15983] Call Trace: [ 442.105830][T15983] [ 442.105858][T15983] dump_stack_lvl+0x100/0x190 [ 442.105954][T15983] should_fail_ex.cold+0x5/0xa [ 442.105982][T15983] ? fs_reclaim_acquire+0x70/0x100 [ 442.106070][T15983] should_fail_alloc_page+0xeb/0x140 [ 442.106154][T15983] prepare_alloc_pages+0x1f0/0x5b0 [ 442.106307][T15983] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 442.106465][T15983] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 442.106570][T15983] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 442.106704][T15983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 442.106855][T15983] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 442.106907][T15983] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 442.107136][T15983] ? find_held_lock+0x2b/0x80 [ 442.107171][T15983] ? rcu_read_unlock+0x17/0x60 [ 442.107205][T15983] ? rcu_read_unlock+0x17/0x60 [ 442.107354][T15983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.107487][T15983] ? policy_nodemask+0xed/0x4f0 [ 442.107603][T15983] alloc_pages_mpol+0x201/0x550 [ 442.107768][T15983] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 442.107920][T15983] ? __kmalloc_noprof+0x350/0x840 [ 442.107956][T15983] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 442.108089][T15983] alloc_pages_noprof+0x1a/0x160 [ 442.108222][T15983] relay_open_buf.part.0+0x261/0xb70 [ 442.108480][T15983] relay_open+0x7b9/0xa00 [ 442.108652][T15983] blk_trace_setup_prepare+0x35c/0x6c0 [ 442.108747][T15983] blk_trace_setup+0x217/0x440 [ 442.108915][T15983] ? __pfx_blk_trace_setup+0x10/0x10 [ 442.109043][T15983] ? find_held_lock+0x2b/0x80 [ 442.109090][T15983] ? tomoyo_path_number_perm+0x28f/0x580 [ 442.109523][T15983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.109624][T15983] sg_ioctl+0x1103/0x26d0 [ 442.109713][T15983] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 442.109802][T15983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 442.109865][T15983] ? __pfx_sg_ioctl+0x10/0x10 [ 442.109896][T15983] ? __fget_files+0x34/0x3d0 [ 442.110158][T15983] ? selinux_file_ioctl+0x13b/0x290 [ 442.110189][T15983] ? selinux_file_ioctl+0xb6/0x290 [ 442.110286][T15983] ? __pfx_sg_ioctl+0x10/0x10 [ 442.110396][T15983] __x64_sys_ioctl+0x18e/0x210 [ 442.110465][T15983] do_syscall_64+0x123/0x790 [ 442.110576][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.110617][T15983] RIP: 0033:0x7fbce319e2d9 [ 442.110686][T15983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.110707][T15983] RSP: 002b:00007fbce400c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.110723][T15983] RAX: ffffffffffffffda RBX: 00007fbce3425fa0 RCX: 00007fbce319e2d9 [ 442.110733][T15983] RDX: 0000200000001640 RSI: 00000000c0481273 RDI: 0000000000000007 [ 442.110742][T15983] RBP: 00007fbce3235888 R08: 0000000000000000 R09: 0000000000000000 [ 442.110752][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.110761][T15983] R13: 00007fbce3426038 R14: 00007fbce3425fa0 R15: 00007ffcc725d178 [ 442.111024][T15983] [ 443.278374][T15994] FAULT_INJECTION: forcing a failure. [ 443.278374][T15994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.278407][T15994] CPU: 3 UID: 0 PID: 15994 Comm: syz.0.3756 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.278427][T15994] Tainted: [L]=SOFTLOCKUP [ 443.278436][T15994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.278446][T15994] Call Trace: [ 443.278463][T15994] [ 443.278481][T15994] dump_stack_lvl+0x100/0x190 [ 443.278587][T15994] should_fail_ex.cold+0x5/0xa [ 443.278718][T15994] _copy_from_user+0x2e/0xd0 [ 443.278778][T15994] memdup_user+0x6b/0xe0 [ 443.278843][T15994] strndup_user+0x78/0xe0 [ 443.278939][T15994] __x64_sys_mount+0x136/0x310 [ 443.279015][T15994] ? __pfx___x64_sys_mount+0x10/0x10 [ 443.279261][T15994] do_syscall_64+0x123/0x790 [ 443.279373][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.279398][T15994] RIP: 0033:0x7fd89139e2d9 [ 443.279436][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.279452][T15994] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.279473][T15994] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 443.279485][T15994] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 443.279497][T15994] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 443.279510][T15994] R10: 0000000023000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.279522][T15994] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 443.279787][T15994] [ 444.036781][T15997] rdma_rxe: rxe_newlink: failed to add wg0 [ 444.379113][ T5811] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 444.556633][ T5811] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 444.571793][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 444.571814][ T5811] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 444.599719][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 444.599739][ T5811] usb 5-1: Product: syz [ 444.599752][ T5811] usb 5-1: Manufacturer: syz [ 444.879912][ T5811] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 444.970996][ T5811] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 445.166007][ T9] usb 5-1: USB disconnect, device number 86 [ 445.245745][T16006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.266023][T16006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.501948][ T5811] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 445.504120][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 445.521034][ T9] iuu_phoenix 5-1:1.0: device disconnected [ 445.662150][ T5811] usb 8-1: device descriptor read/64, error -71 [ 445.931667][ T5811] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 446.132726][ T5811] usb 8-1: device descriptor read/64, error -71 [ 446.256441][ T5811] usb usb8-port1: attempt power cycle [ 446.642274][ T5811] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 446.678530][ T5811] usb 8-1: device descriptor read/8, error -71 [ 446.929359][T16017] FAULT_INJECTION: forcing a failure. [ 446.929359][T16017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.929402][T16017] CPU: 0 UID: 0 PID: 16017 Comm: syz.0.3763 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.929437][T16017] Tainted: [L]=SOFTLOCKUP [ 446.929452][T16017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.929472][T16017] Call Trace: [ 446.929505][T16017] [ 446.929530][T16017] dump_stack_lvl+0x100/0x190 [ 446.929651][T16017] should_fail_ex.cold+0x5/0xa [ 446.929752][T16017] _copy_from_user+0x2e/0xd0 [ 446.929825][T16017] kstrtouint_from_user+0xd6/0x1d0 [ 446.929887][T16017] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 446.930169][T16017] proc_fail_nth_write+0x83/0x220 [ 446.930282][T16017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 446.930454][T16017] vfs_write+0x2aa/0x1050 [ 446.930602][T16017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 446.930684][T16017] ? lock_acquire+0x1d1/0x380 [ 446.930713][T16017] ? __fget_files+0x34/0x3d0 [ 446.930750][T16017] ? __pfx_vfs_write+0x10/0x10 [ 446.930775][T16017] ? find_held_lock+0x2b/0x80 [ 446.930835][T16017] ? __fget_files+0x215/0x3d0 [ 446.931014][T16017] ? __fget_files+0x21f/0x3d0 [ 446.931181][T16017] ksys_write+0x12a/0x250 [ 446.931256][T16017] ? __pfx_ksys_write+0x10/0x10 [ 446.931424][T16017] do_syscall_64+0x123/0x790 [ 446.931560][T16017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.931591][T16017] RIP: 0033:0x7fd89135eb0e [ 446.931623][T16017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.931645][T16017] RSP: 002b:00007fd8922cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.931678][T16017] RAX: ffffffffffffffda RBX: 00007fd8922cc6c0 RCX: 00007fd89135eb0e [ 446.931699][T16017] RDX: 0000000000000001 RSI: 00007fd8922cc0a0 RDI: 0000000000000005 [ 446.931718][T16017] RBP: 00007fd8922cc090 R08: 0000000000000000 R09: 0000000000000000 [ 446.931736][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.931756][T16017] R13: 00007fd891626128 R14: 00007fd891626090 R15: 00007ffd545fe118 [ 446.932019][T16017] [ 446.942088][ T5811] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 446.981346][ T5811] usb 8-1: device descriptor read/8, error -71 [ 447.095070][ T5811] usb usb8-port1: unable to enumerate USB device [ 447.359986][T16009] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3760'. [ 447.409216][ T1162] IPVS: starting estimator thread 0... [ 447.536584][T16021] IPVS: using max 7 ests per chain, 16800 per kthread [ 448.787394][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 448.899038][T16034] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3769'. [ 449.798277][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 450.224802][T16047] FAULT_INJECTION: forcing a failure. [ 450.224802][T16047] name failslab, interval 1, probability 5, space 0, times 9882 [ 450.224832][T16047] CPU: 0 UID: 0 PID: 16047 Comm: syz.0.3774 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.224851][T16047] Tainted: [L]=SOFTLOCKUP [ 450.224859][T16047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.224869][T16047] Call Trace: [ 450.224885][T16047] [ 450.224902][T16047] dump_stack_lvl+0x100/0x190 [ 450.224998][T16047] should_fail_ex.cold+0x5/0xa [ 450.225139][T16047] should_failslab+0xc2/0x120 [ 450.225179][T16047] __kmalloc_noprof+0xfc/0x840 [ 450.225235][T16047] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 450.225419][T16047] kernfs_fop_write_iter+0x26a/0x5f0 [ 450.225515][T16047] vfs_write+0x6af/0x1050 [ 450.225594][T16047] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 450.225726][T16047] ? __pfx_vfs_write+0x10/0x10 [ 450.225757][T16047] ? find_held_lock+0x2b/0x80 [ 450.226080][T16047] ksys_write+0x12a/0x250 [ 450.226136][T16047] ? __pfx_ksys_write+0x10/0x10 [ 450.226337][T16047] do_syscall_64+0x123/0x790 [ 450.226449][T16047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.226489][T16047] RIP: 0033:0x7fd89139e2d9 [ 450.226551][T16047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.226571][T16047] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.226599][T16047] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 450.226616][T16047] RDX: 000000000000002f RSI: 0000200000000380 RDI: 0000000000000003 [ 450.226632][T16047] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 450.226646][T16047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.226655][T16047] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 450.226916][T16047] [ 450.475848][T16049] mmap: syz.3.3775 (16049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 450.847431][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 452.404514][T16065] FAULT_INJECTION: forcing a failure. [ 452.404514][T16065] name failslab, interval 1, probability 5, space 0, times 9881 [ 452.404574][T16065] CPU: 0 UID: 0 PID: 16065 Comm: syz.4.3779 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.404629][T16065] Tainted: [L]=SOFTLOCKUP [ 452.404645][T16065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.404666][T16065] Call Trace: [ 452.404701][T16065] [ 452.404739][T16065] dump_stack_lvl+0x100/0x190 [ 452.404943][T16065] should_fail_ex.cold+0x5/0xa [ 452.405103][T16065] should_failslab+0xc2/0x120 [ 452.405191][T16065] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 452.405273][T16065] ? __alloc_skb+0x5b7/0x710 [ 452.405356][T16065] ? __alloc_skb+0x140/0x710 [ 452.405615][T16065] __alloc_skb+0x140/0x710 [ 452.405666][T16065] ? __alloc_skb+0x5b7/0x710 [ 452.405746][T16065] ? __pfx___alloc_skb+0x10/0x10 [ 452.405799][T16065] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 452.405898][T16065] ? sock_has_perm+0x25a/0x2f0 [ 452.406031][T16065] ? __pfx_sock_has_perm+0x10/0x10 [ 452.406196][T16065] netlink_alloc_large_skb+0x69/0x150 [ 452.406315][T16065] netlink_sendmsg+0x680/0xda0 [ 452.406635][T16065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.406760][T16065] ? selinux_socket_sendmsg+0x198/0x2f0 [ 452.407063][T16065] ____sys_sendmsg+0xa4d/0xbe0 [ 452.407140][T16065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.407247][T16065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.407535][T16065] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 452.407777][T16065] ___sys_sendmsg+0x190/0x1e0 [ 452.407967][T16065] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.408104][T16065] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 452.408544][T16065] ? find_held_lock+0x2b/0x80 [ 452.409132][T16065] __sys_sendmsg+0x160/0x210 [ 452.409247][T16065] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.409821][T16065] do_syscall_64+0x123/0x790 [ 452.410016][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.410057][T16065] RIP: 0033:0x7f1108d9e2d9 [ 452.410119][T16065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.410145][T16065] RSP: 002b:00007f1109c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.410181][T16065] RAX: ffffffffffffffda RBX: 00007f1109025fa0 RCX: 00007f1108d9e2d9 [ 452.410202][T16065] RDX: 0000000000000000 RSI: 0000200000001880 RDI: 0000000000000003 [ 452.410222][T16065] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 452.410243][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.410264][T16065] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 452.410719][T16065] [ 452.526867][ T1176] IPVS: starting estimator thread 0... [ 452.533664][T16066] IPVS: set_ctl: invalid protocol: 7 10.1.1.1:20004 [ 452.565256][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 452.635173][T16069] IPVS: using max 7 ests per chain, 16800 per kthread [ 453.171163][ T66] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 454.174450][T16055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.183805][T16055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.191899][T16055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.291621][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 455.145591][T16090] FAULT_INJECTION: forcing a failure. [ 455.145591][T16090] name failslab, interval 1, probability 5, space 0, times 9880 [ 455.145654][T16090] CPU: 2 UID: 0 PID: 16090 Comm: syz.2.3786 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.145689][T16090] Tainted: [L]=SOFTLOCKUP [ 455.145705][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.145726][T16090] Call Trace: [ 455.145760][T16090] [ 455.145799][T16090] dump_stack_lvl+0x100/0x190 [ 455.146014][T16090] should_fail_ex.cold+0x5/0xa [ 455.146158][T16090] should_failslab+0xc2/0x120 [ 455.146250][T16090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 455.146377][T16090] ? do_getname+0x35/0x390 [ 455.146614][T16090] do_getname+0x35/0x390 [ 455.146787][T16090] do_sys_openat2+0xc7/0x1e0 [ 455.146922][T16090] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.147059][T16090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.147153][T16090] ? __fget_files+0x21f/0x3d0 [ 455.147396][T16090] __x64_sys_openat+0x12d/0x210 [ 455.147465][T16090] ? fput+0x7c/0x100 [ 455.147599][T16090] ? __pfx___x64_sys_openat+0x10/0x10 [ 455.147631][T16090] ? ksys_write+0x1ac/0x250 [ 455.148003][T16090] do_syscall_64+0x123/0x790 [ 455.148168][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.148216][T16090] RIP: 0033:0x7fec7979e2d9 [ 455.148291][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.148320][T16090] RSP: 002b:00007fec7a6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.148358][T16090] RAX: ffffffffffffffda RBX: 00007fec79a26090 RCX: 00007fec7979e2d9 [ 455.148382][T16090] RDX: 0000000000260a41 RSI: 0000200000004700 RDI: ffffffffffffff9c [ 455.148405][T16090] RBP: 00007fec7a6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 455.148428][T16090] R10: 0b3836f6d7a15f29 R11: 0000000000000246 R12: 0000000000000001 [ 455.148450][T16090] R13: 00007fec79a26128 R14: 00007fec79a26090 R15: 00007ffd85cf3bd8 [ 455.148904][T16090] [ 456.206936][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.207106][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.335210][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=16097 comm=syz.0.3787 [ 456.485321][T16097] Could not find key with description: [syz] [ 456.485338][T16097] process_request_key_err: No key [ 456.485348][T16097] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 456.485360][T16097] One or more global auth toks could not properly register; rc = [-2] [ 456.485729][T16097] Error validating options; rc = [-2] [ 457.484301][ T66] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 457.966076][T16111] FAULT_INJECTION: forcing a failure. [ 457.966076][T16111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.966108][T16111] CPU: 2 UID: 0 PID: 16111 Comm: syz.4.3793 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.966129][T16111] Tainted: [L]=SOFTLOCKUP [ 457.966138][T16111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.966149][T16111] Call Trace: [ 457.966168][T16111] [ 457.966188][T16111] dump_stack_lvl+0x100/0x190 [ 457.966299][T16111] should_fail_ex.cold+0x5/0xa [ 457.966415][T16111] _copy_from_user+0x2e/0xd0 [ 457.966480][T16111] kstrtouint_from_user+0xd6/0x1d0 [ 457.966537][T16111] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 457.966821][T16111] proc_fail_nth_write+0x83/0x220 [ 457.966896][T16111] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.967060][T16111] vfs_write+0x2aa/0x1050 [ 457.967152][T16111] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.967209][T16111] ? lock_acquire+0x1d1/0x380 [ 457.967262][T16111] ? __fget_files+0x34/0x3d0 [ 457.967295][T16111] ? __pfx_vfs_write+0x10/0x10 [ 457.967317][T16111] ? find_held_lock+0x2b/0x80 [ 457.967371][T16111] ? __fget_files+0x215/0x3d0 [ 457.967566][T16111] ? __fget_files+0x21f/0x3d0 [ 457.967736][T16111] ksys_write+0x12a/0x250 [ 457.967805][T16111] ? __pfx_ksys_write+0x10/0x10 [ 457.967981][T16111] do_syscall_64+0x123/0x790 [ 457.968125][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.968173][T16111] RIP: 0033:0x7f1108d5eb0e [ 457.968210][T16111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.968223][T16111] RSP: 002b:00007f1109c4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.968241][T16111] RAX: ffffffffffffffda RBX: 00007f1109c4f6c0 RCX: 00007f1108d5eb0e [ 457.968252][T16111] RDX: 0000000000000001 RSI: 00007f1109c4f0a0 RDI: 0000000000000005 [ 457.968262][T16111] RBP: 00007f1109c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.968272][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.968283][T16111] R13: 00007f1109026128 R14: 00007f1109026090 R15: 00007fffc22e0888 [ 457.968544][T16111] [ 458.290148][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 462.197365][T16116] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 462.207171][T16116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 462.210687][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 462.211041][T16116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.923613][T16134] hfs: can't find a HFS filesystem on dev sr0 [ 463.334505][ T66] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 463.381626][ T62] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 463.571196][ T62] usb 5-1: not running at top speed; connect to a high speed hub [ 463.571394][ T62] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 463.591254][ T62] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.591482][ T62] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.591499][ T62] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 463.591627][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.692585][ T62] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 463.788824][ T62] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 463.821967][ T62] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 463.822954][ T62] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 463.859111][ T62] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 464.291090][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.414428][ T5923] usb 5-1: USB disconnect, device number 87 [ 464.626339][ T5923] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 464.689517][ T5923] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 464.708111][ T5923] keyspan 5-1:1.0: device disconnected [ 465.157997][ T43] audit: type=1400 audit(1793526500.158:8701): avc: denied { ioctl } for pid=16144 comm="syz.2.3804" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 465.445963][ T62] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 465.596174][T16148] batman_adv: Routing algorithm '' is not supported [ 465.614155][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 465.619841][ T62] usb 7-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 465.636308][ T62] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.636337][ T62] usb 7-1: config 1 interface 0 has no altsetting 0 [ 465.674007][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.674032][ T62] usb 7-1: Product: 蔝뻸妲瀱洞ꩊ승ﶶ䴄뒆ଏ꾯㭧貃隌ꄅ왞긐뚰겉ǣị੒ڟ溛個惜同㲳梗灶䏷룷눭ᤦ믌⌁䇿ở暳䑥뢅ଉ⼬Ꝁ叙᥄▟ [ 465.674054][ T62] usb 7-1: Manufacturer: 맃裎믕ꐣ큈꽃糖邷驡굣㣧趑蓼찾꩘甌꭪ᣦ肿疵鷂ƫ矷Ȭ읎ϋ朐酗끧╄퓇쓫〕륣㱎㺭뙆塌篠Ƽ☍霬歂漵阺㞻쫓눻䞉㐰祤欖文猵멑窘詔ർ잦ཧ뒢䰪倭⫈ꩿꈒ廗鎌 [ 465.674075][ T62] usb 7-1: SerialNumber: ى [ 466.066276][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.244435][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.262919][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.373103][ T62] usbhid 7-1:1.0: can't add hid device: -71 [ 466.373485][ T62] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 466.435566][ T62] usb 7-1: USB disconnect, device number 90 [ 466.791080][T16151] netlink: 'syz.0.3806': attribute type 10 has an invalid length. [ 466.797059][T16151] bridge0: port 3(syz_tun) entered disabled state [ 466.799344][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.807011][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.915445][T16151] bridge0: port 3(syz_tun) entered blocking state [ 466.916506][T16151] bridge0: port 3(syz_tun) entered forwarding state [ 466.919823][T16151] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.920892][T16151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.923405][T16151] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.924561][T16151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.976751][T16151] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 467.415808][ T66] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 467.417848][ T66] Bluetooth: hci1: Injecting HCI hardware error event [ 467.422818][ T5731] Bluetooth: hci1: hardware error 0x00 [ 468.406987][T16160] rdma_rxe: rxe_newlink: failed to add wg0 [ 468.886109][T14476] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 469.087453][T14476] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 469.103934][T14476] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.103956][T14476] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.128591][T14476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 469.128610][T14476] usb 5-1: Product: syz [ 469.128621][T14476] usb 5-1: Manufacturer: syz [ 469.270791][T14476] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 469.400729][T14476] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 469.497667][ T5731] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 469.750798][ T9] usb 5-1: USB disconnect, device number 88 [ 470.019110][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 470.047915][ T9] iuu_phoenix 5-1:1.0: device disconnected [ 470.923248][T16170] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 470.944669][T16170] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 470.950725][T16170] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 471.348534][T16177] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3813'. [ 471.369554][T16170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.372518][T16170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.510343][ T43] audit: type=1400 audit(1793526506.514:8702): avc: denied { nlmsg_read } for pid=16175 comm="syz.0.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.513660][T16177] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3813'. [ 472.369641][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.391114][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.395406][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.436097][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.457772][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.843592][T16180] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 473.105883][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.436779][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 473.491930][T16080] syz.3.3784 (16080): drop_caches: 1 [ 473.537328][ T5830] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 473.715807][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 473.723130][ T5830] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.744623][ T5830] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 473.744645][ T5830] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 473.744871][ T5830] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.744886][ T5830] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.744902][ T5830] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.745019][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.988576][ T5830] usbtmc 9-1:16.0: bulk endpoints not found [ 474.541124][ T5731] Bluetooth: hci4: command tx timeout [ 475.479974][T16187] wg0 speed is unknown, defaulting to 1000 [ 476.544490][ T1041] usb 9-1: USB disconnect, device number 65 [ 476.627578][ T5731] Bluetooth: hci4: command tx timeout [ 477.961097][ T5830] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 478.153910][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 478.172435][ T5830] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.238573][ T5830] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 478.238594][ T5830] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.238867][ T5830] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.238883][ T5830] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.238897][ T5830] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.238981][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.385967][ T5830] usbtmc 9-1:16.0: bulk endpoints not found [ 478.698151][ T5731] Bluetooth: hci4: command tx timeout [ 478.902928][ T43] audit: type=1400 audit(1793526513.901:8703): avc: denied { connect } for pid=16232 comm="syz.2.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.989285][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.141301][ T43] audit: type=1400 audit(1793526514.131:8704): avc: denied { map } for pid=16230 comm="syz.0.3822" path="/proc/mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 479.144394][ T43] audit: type=1400 audit(1793526514.140:8705): avc: denied { execute } for pid=16230 comm="syz.0.3822" path="/proc/mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 479.361277][ T43] audit: type=1400 audit(1793526514.360:8706): avc: denied { read } for pid=13099 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.364819][ T43] audit: type=1400 audit(1793526514.360:8707): avc: denied { open } for pid=13099 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.368949][ T43] audit: type=1400 audit(1793526514.360:8708): avc: denied { ioctl } for pid=13099 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.796756][ T43] audit: type=1400 audit(1793526514.790:8709): avc: denied { mounton } for pid=16238 comm="syz.2.3824" path="/263/sys" dev="tmpfs" ino=1501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.500157][ T1041] usb 9-1: USB disconnect, device number 66 [ 480.781964][ T5731] Bluetooth: hci4: command tx timeout [ 481.572414][T16249] fuse: Bad value for 'group_id' [ 481.572433][T16249] fuse: Bad value for 'group_id' [ 481.586305][T16249] --map-set only usable from mangle table [ 481.595351][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3827'. [ 482.429916][ T5731] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 482.429964][ T5731] Bluetooth: hci2: unexpected event for opcode 0x200b [ 484.797022][ T43] audit: type=1400 audit(1793526519.788:8710): avc: denied { watch watch_reads } for pid=16260 comm="syz.4.3830" path="/142" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 485.112708][T16264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3830'. [ 487.406483][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.744502][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.153596][ T1041] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 489.202950][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.279688][ T43] audit: type=1800 audit(1793526524.275:8711): pid=16267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3831" name=08 dev="sda1" ino=2038 res=0 errno=0 [ 489.321001][ T1041] usb 9-1: Using ep0 maxpacket: 8 [ 489.334067][ T1041] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.354184][ T1041] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 489.354204][ T1041] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 489.354431][ T1041] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.354451][ T1041] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.354475][ T1041] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.354556][ T1041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.521420][ T1041] usbtmc 9-1:16.0: bulk endpoints not found [ 492.511742][ T35] usb 9-1: USB disconnect, device number 67 [ 494.102269][ T12] bridge_slave_1: left allmulticast mode [ 494.102303][ T12] bridge_slave_1: left promiscuous mode [ 494.104858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.253764][ T12] bridge_slave_0: left allmulticast mode [ 494.253798][ T12] bridge_slave_0: left promiscuous mode [ 494.256391][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.320119][T16300] FAULT_INJECTION: forcing a failure. [ 494.320119][T16300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.320152][T16300] CPU: 0 UID: 0 PID: 16300 Comm: syz.0.3838 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.320172][T16300] Tainted: [L]=SOFTLOCKUP [ 494.320181][T16300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.320192][T16300] Call Trace: [ 494.320211][T16300] [ 494.320231][T16300] dump_stack_lvl+0x100/0x190 [ 494.320342][T16300] should_fail_ex.cold+0x5/0xa [ 494.320456][T16300] _copy_from_user+0x2e/0xd0 [ 494.320523][T16300] drm_ioctl+0x520/0xc60 [ 494.320702][T16300] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 494.320748][T16300] ? __pfx_drm_ioctl+0x10/0x10 [ 494.320769][T16300] ? __fget_files+0x34/0x3d0 [ 494.321029][T16300] ? selinux_file_ioctl+0x13b/0x290 [ 494.321057][T16300] ? selinux_file_ioctl+0xb6/0x290 [ 494.321141][T16300] ? __pfx_drm_ioctl+0x10/0x10 [ 494.321245][T16300] __x64_sys_ioctl+0x18e/0x210 [ 494.321328][T16300] do_syscall_64+0x123/0x790 [ 494.321422][T16300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.321462][T16300] RIP: 0033:0x7fd89139e2d9 [ 494.321523][T16300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.321541][T16300] RSP: 002b:00007fd8922cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.321569][T16300] RAX: ffffffffffffffda RBX: 00007fd891626090 RCX: 00007fd89139e2d9 [ 494.321585][T16300] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000004 [ 494.321600][T16300] RBP: 00007fd8922cc090 R08: 0000000000000000 R09: 0000000000000000 [ 494.321616][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.321631][T16300] R13: 00007fd891626128 R14: 00007fd891626090 R15: 00007ffd545fe118 [ 494.321905][T16300] [ 495.164940][ T43] audit: type=1400 audit(1793526530.152:8712): avc: denied { write } for pid=16301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.990105][ T43] audit: type=1400 audit(1793526530.982:8713): avc: denied { write } for pid=16304 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.324923][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 496.583399][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.635945][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.670957][ T12] bond0 (unregistering): Released all slaves [ 496.781417][ T12] bond1 (unregistering): Released all slaves [ 497.498391][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 497.796335][ T12] ovs-system: left promiscuous mode [ 498.576710][T16311] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3839'. [ 501.944799][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.945092][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.408534][ T43] audit: type=1400 audit(1793526537.389:8714): avc: denied { write } for pid=16317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.814702][T16330] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 502.859570][T16330] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 502.971600][T16330] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 503.582606][T16330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.583917][T16330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.602299][T16330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.602834][T16330] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 503.709702][T16330] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 504.732361][ T43] audit: type=1400 audit(1793526539.718:8715): avc: denied { write } for pid=16337 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.603544][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 505.616024][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 505.762257][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 505.835123][ T66] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 505.835158][ T66] Bluetooth: hci3: unexpected event for opcode 0x200b [ 506.302805][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 506.310162][T16187] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.319375][T16187] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.345192][T16187] bridge_slave_0: entered allmulticast mode [ 506.431189][T16187] bridge_slave_0: entered promiscuous mode [ 506.576940][T16187] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.581510][T16187] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.604145][T16187] bridge_slave_1: entered allmulticast mode [ 506.788630][T16357] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 506.829932][T16187] bridge_slave_1: entered promiscuous mode [ 507.832905][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 508.126265][T16365] FAULT_INJECTION: forcing a failure. [ 508.126265][T16365] name failslab, interval 1, probability 5, space 0, times 9878 [ 508.126310][T16365] CPU: 2 UID: 0 PID: 16365 Comm: syz.2.3850 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.126328][T16365] Tainted: [L]=SOFTLOCKUP [ 508.126335][T16365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 508.126345][T16365] Call Trace: [ 508.126357][T16365] [ 508.126370][T16365] dump_stack_lvl+0x100/0x190 [ 508.126460][T16365] should_fail_ex.cold+0x5/0xa [ 508.126615][T16365] should_failslab+0xc2/0x120 [ 508.126679][T16365] kmem_cache_alloc_noprof+0x92/0x6a0 [ 508.126741][T16365] ? vm_area_dup+0x27/0x9d0 [ 508.126890][T16365] vm_area_dup+0x27/0x9d0 [ 508.126998][T16365] __split_vma+0x19c/0x1de0 [ 508.127134][T16365] ? __pfx___split_vma+0x10/0x10 [ 508.127181][T16365] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 508.127548][T16365] vma_modify+0x137b/0x29b0 [ 508.127999][T16365] ? __pfx_vma_modify+0x10/0x10 [ 508.128103][T16365] ? __pfx___might_resched+0x10/0x10 [ 508.128131][T16365] ? change_protection+0x111e/0x1c80 [ 508.128578][T16365] vma_modify_flags_uffd+0x312/0x470 [ 508.128750][T16365] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 508.129230][T16365] ? userfaultfd_rwp+0xd1/0x120 [ 508.129323][T16365] ? __pfx_userfaultfd_rwp+0x10/0x10 [ 508.129483][T16365] userfaultfd_clear_vma+0x3fe/0x5b0 [ 508.129780][T16365] ? __pfx_userfaultfd_clear_vma+0x10/0x10 [ 508.130032][T16365] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 508.130417][T16365] ? __pfx___might_resched+0x10/0x10 [ 508.130640][T16365] userfaultfd_unregister+0x8a3/0x1040 [ 508.131062][T16365] ? __pfx_userfaultfd_unregister+0x10/0x10 [ 508.131516][T16365] ? tomoyo_path_number_perm+0x188/0x580 [ 508.131773][T16365] userfaultfd_ioctl+0xd48/0x61d0 [ 508.131950][T16365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.132084][T16365] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 508.132114][T16365] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 508.132139][T16365] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 508.132212][T16365] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 508.132334][T16365] ? __fget_files+0x34/0x3d0 [ 508.132597][T16365] ? selinux_file_ioctl+0x13b/0x290 [ 508.132638][T16365] ? selinux_file_ioctl+0xb6/0x290 [ 508.132698][T16365] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 508.132769][T16365] ? __x64_sys_ioctl+0x18e/0x210 [ 508.132800][T16365] __x64_sys_ioctl+0x18e/0x210 [ 508.132983][T16365] do_syscall_64+0x123/0x790 [ 508.133132][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.133171][T16365] RIP: 0033:0x7fec7979e2d9 [ 508.133234][T16365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.133260][T16365] RSP: 002b:00007fec7a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.133296][T16365] RAX: ffffffffffffffda RBX: 00007fec79a25fa0 RCX: 00007fec7979e2d9 [ 508.133318][T16365] RDX: 0000200000000580 RSI: 000000008010aa01 RDI: 0000000000000006 [ 508.133335][T16365] RBP: 00007fec79835888 R08: 0000000000000000 R09: 0000000000000000 [ 508.133349][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.133362][T16365] R13: 00007fec79a26038 R14: 00007fec79a25fa0 R15: 00007ffd85cf3bd8 [ 508.133750][T16365] [ 508.607334][ T43] audit: type=1400 audit(1793526543.596:8716): avc: denied { prog_run } for pid=16359 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1 [ 508.952253][T16365] bridge_slave_0: left allmulticast mode [ 508.952292][T16365] bridge_slave_0: left promiscuous mode [ 508.980052][T16365] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.165027][T16365] bridge_slave_1: left allmulticast mode [ 509.165081][T16365] bridge_slave_1: left promiscuous mode [ 509.172122][T16365] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.449964][T16365] bond0: (slave bond_slave_0): Releasing backup interface [ 509.498251][T16365] bond0: (slave bond_slave_1): Releasing backup interface [ 509.578830][T16365] team0: Port device team_slave_0 removed [ 509.619080][T16365] team0: Port device team_slave_1 removed [ 509.626049][T16365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.626091][T16365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.636365][T16374] FAULT_INJECTION: forcing a failure. [ 509.636365][T16374] name failslab, interval 1, probability 5, space 0, times 9877 [ 509.636395][T16374] CPU: 1 UID: 0 PID: 16374 Comm: syz.4.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.636414][T16374] Tainted: [L]=SOFTLOCKUP [ 509.636422][T16374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.636433][T16374] Call Trace: [ 509.636450][T16374] [ 509.636468][T16374] dump_stack_lvl+0x100/0x190 [ 509.636567][T16374] should_fail_ex.cold+0x5/0xa [ 509.636610][T16374] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 509.636717][T16374] should_failslab+0xc2/0x120 [ 509.636760][T16374] kmem_cache_alloc_noprof+0x92/0x6a0 [ 509.636822][T16374] ? dst_alloc+0x99/0x1a0 [ 509.637003][T16374] dst_alloc+0x99/0x1a0 [ 509.637079][T16374] rt_dst_alloc+0x35/0x3a0 [ 509.637173][T16374] ip_route_input_slow+0x15b8/0x3fa0 [ 509.637332][T16374] ? __pfx_ip_route_input_slow+0x10/0x10 [ 509.637415][T16374] ? __lock_acquire+0x5c0/0x1f40 [ 509.637888][T16374] ip_route_input_noref+0x122/0x2e0 [ 509.637972][T16374] ? __pfx_ip_route_input_noref+0x10/0x10 [ 509.638127][T16374] ? __pfx_ip_rcv_finish+0x10/0x10 [ 509.638171][T16374] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 509.638293][T16374] ip_rcv_finish_core+0x459/0x2c30 [ 509.638469][T16374] ip_rcv+0x1c0/0x3c0 [ 509.638553][T16374] ? __pfx_ip_rcv+0x10/0x10 [ 509.638585][T16374] __netif_receive_skb_one_core+0x197/0x1e0 [ 509.638666][T16374] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 509.638715][T16374] ? lock_acquire+0x1d1/0x380 [ 509.638911][T16374] __netif_receive_skb+0x1f/0x120 [ 509.638990][T16374] netif_receive_skb+0x139/0x7d0 [ 509.639042][T16374] ? __pfx_netif_receive_skb+0x10/0x10 [ 509.639273][T16374] tun_rx_batched.isra.0+0x3f6/0x750 [ 509.639383][T16374] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 509.639582][T16374] ? tun_get_user+0x1dc9/0x3da0 [ 509.639765][T16374] tun_get_user+0x1f05/0x3da0 [ 509.640083][T16374] ? __pfx_tun_get_user+0x10/0x10 [ 509.640141][T16374] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 509.640167][T16374] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 509.640395][T16374] ? find_held_lock+0x2b/0x80 [ 509.640427][T16374] ? tun_get+0x191/0x370 [ 509.640461][T16374] ? tun_get+0x191/0x370 [ 509.640685][T16374] tun_chr_write_iter+0xdc/0x200 [ 509.640755][T16374] vfs_write+0x6af/0x1050 [ 509.640834][T16374] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 509.640965][T16374] ? __pfx_vfs_write+0x10/0x10 [ 509.640995][T16374] ? find_held_lock+0x2b/0x80 [ 509.641329][T16374] ksys_write+0x12a/0x250 [ 509.641391][T16374] ? __pfx_ksys_write+0x10/0x10 [ 509.641588][T16374] do_syscall_64+0x123/0x790 [ 509.641687][T16374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.641726][T16374] RIP: 0033:0x7f1108d5eb0e [ 509.641789][T16374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.641808][T16374] RSP: 002b:00007f1109c6ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.641837][T16374] RAX: ffffffffffffffda RBX: 00007f1109c706c0 RCX: 00007f1108d5eb0e [ 509.641853][T16374] RDX: 000000000000003a RSI: 0000200000001380 RDI: 00000000000000c8 [ 509.641868][T16374] RBP: 00007f1109c70090 R08: 0000000000000000 R09: 0000000000000000 [ 509.641881][T16374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.641890][T16374] R13: 00007f1109026038 R14: 00007f1109025fa0 R15: 00007fffc22e0888 [ 509.642148][T16374] [ 509.650497][T16365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.650520][T16365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.706855][T16365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.844987][T16187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.902422][T16187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.913936][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.374806][ T12] hsr_slave_0: left promiscuous mode [ 510.419043][ T12] hsr_slave_1: left promiscuous mode [ 510.441060][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.445459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.468983][ T43] audit: type=1400 audit(1793526545.455:8717): avc: denied { append } for pid=16375 comm="syz.4.3852" path="socket:[81279]" dev="sockfs" ino=81279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 510.499803][ T43] audit: type=1400 audit(1793526545.455:8718): avc: denied { write } for pid=16375 comm="syz.4.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 510.507974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.508050][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.620996][ T12] veth1_macvtap: left promiscuous mode [ 510.621272][ T12] veth0_macvtap: left promiscuous mode [ 510.622891][ T12] veth1_vlan: left promiscuous mode [ 510.623533][ T12] veth0_vlan: left promiscuous mode [ 510.714870][ T43] audit: type=1400 audit(1793526545.695:8719): avc: denied { map } for pid=16377 comm="syz.2.3853" path="socket:[78467]" dev="sockfs" ino=78467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 514.006045][ T12] team0 (unregistering): Port device team_slave_1 removed [ 514.223904][ T12] team0 (unregistering): Port device team_slave_0 removed [ 515.837651][ T1041] wg0 speed is unknown, defaulting to 1000 [ 516.050077][T16396] bond0: option mode: unable to set because the bond device is up [ 516.116792][T16187] team0: Port device team_slave_0 added [ 516.241075][T16187] team0: Port device team_slave_1 added [ 516.571251][T16405] FAULT_INJECTION: forcing a failure. [ 516.571251][T16405] name failslab, interval 1, probability 5, space 0, times 9876 [ 516.571294][T16405] CPU: 1 UID: 0 PID: 16405 Comm: syz.0.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.571317][T16405] Tainted: [L]=SOFTLOCKUP [ 516.571335][T16405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.571349][T16405] Call Trace: [ 516.571377][T16405] [ 516.571406][T16405] dump_stack_lvl+0x100/0x190 [ 516.571499][T16405] should_fail_ex.cold+0x5/0xa [ 516.571605][T16405] should_failslab+0xc2/0x120 [ 516.571677][T16405] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 516.571794][T16405] ? kvasprintf_const+0x66/0x1a0 [ 516.571906][T16405] kvasprintf+0xbc/0x150 [ 516.571973][T16405] ? __pfx_kvasprintf+0x10/0x10 [ 516.572088][T16405] ? acpi_dev_for_each_child+0x88/0xc0 [ 516.572145][T16405] ? find_held_lock+0x2b/0x80 [ 516.572253][T16405] kvasprintf_const+0x66/0x1a0 [ 516.572363][T16405] kobject_set_name_vargs+0x5a/0x140 [ 516.572421][T16405] dev_set_name+0xc7/0x100 [ 516.572463][T16405] ? __pfx_dev_set_name+0x10/0x10 [ 516.572662][T16405] ? set_primary_fwnode+0x11a/0x2a0 [ 516.572695][T16405] ? pci_dev_assign_slot+0x1ea/0x270 [ 516.572774][T16405] pci_setup_device+0x5f5/0x2500 [ 516.572950][T16405] ? __pfx_pci_setup_device+0x10/0x10 [ 516.573045][T16405] ? kasan_save_track+0x14/0x30 [ 516.573086][T16405] ? __kasan_kmalloc+0xaa/0xb0 [ 516.573171][T16405] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 516.573273][T16405] ? lockdep_init_map_type+0x5c/0x250 [ 516.573310][T16405] ? __raw_spin_lock_init+0x3a/0x110 [ 516.573430][T16405] pci_scan_single_device+0x1ac/0x240 [ 516.573501][T16405] ? __pfx_pci_scan_single_device+0x10/0x10 [ 516.573573][T16405] ? trace_event_buffer_commit+0x20a/0xa80 [ 516.573700][T16405] pci_scan_slot+0x1c9/0x7c0 [ 516.573779][T16405] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 516.573879][T16405] ? __pfx_pci_scan_slot+0x10/0x10 [ 516.573931][T16405] ? rcu_is_watching+0x13/0xc0 [ 516.574066][T16405] pci_scan_child_bus_extend+0x6b/0x7b0 [ 516.574111][T16405] ? pci_find_next_bus+0x60/0xb0 [ 516.574243][T16405] pci_rescan_bus+0x18/0x40 [ 516.574299][T16405] rescan_store+0xfb/0x130 [ 516.574368][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.574452][T16405] ? sysfs_file_kobj+0xe4/0x290 [ 516.574522][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.574564][T16405] bus_attr_store+0x74/0xb0 [ 516.574618][T16405] ? __pfx_bus_attr_store+0x10/0x10 [ 516.574661][T16405] sysfs_kf_write+0xf2/0x150 [ 516.574800][T16405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 516.574823][T16405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 516.574904][T16405] vfs_write+0x6af/0x1050 [ 516.574989][T16405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 516.575112][T16405] ? __pfx_vfs_write+0x10/0x10 [ 516.575132][T16405] ? find_held_lock+0x2b/0x80 [ 516.575467][T16405] ksys_write+0x12a/0x250 [ 516.575527][T16405] ? __pfx_ksys_write+0x10/0x10 [ 516.575718][T16405] do_syscall_64+0x123/0x790 [ 516.575840][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.575884][T16405] RIP: 0033:0x7fd89139e2d9 [ 516.575950][T16405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.575970][T16405] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.575993][T16405] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 516.576003][T16405] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 516.576012][T16405] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 516.576021][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.576031][T16405] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 516.576289][T16405] [ 516.730452][T16405] pci (null): [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 516.766502][T16405] ------------[ cut here ]------------ [ 516.766519][T16405] ret < 0 [ 516.766531][T16405] WARNING: drivers/pci/probe.c:2770 at pci_device_add+0x1343/0x1820, CPU#2: syz.0.3859/16405 [ 516.773774][T16405] Modules linked in: [ 516.775136][T16405] CPU: 2 UID: 0 PID: 16405 Comm: syz.0.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.779190][T16405] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.780537][T16405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.783769][T16405] RIP: 0010:pci_device_add+0x1343/0x1820 [ 516.785469][T16405] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 c0 be a1 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ae be a1 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 a0 be a1 fc 90 0f 0b 90 e9 11 fa ff ff [ 516.791622][T16405] RSP: 0018:ffffc90022937930 EFLAGS: 00010293 [ 516.793451][T16405] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 516.795845][T16405] RDX: ffff888043e70000 RSI: ffffffff856a97e2 RDI: ffff888043e70000 [ 516.798606][T16405] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 516.801017][T16405] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff8880242fe028 [ 516.803466][T16405] R13: ffff8880242fe000 R14: 0000000000000001 R15: ffff88802436c000 [ 516.805940][T16405] FS: 00007fd8922ed6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 516.808909][T16405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.810990][T16405] CR2: 00007f1108ff34b8 CR3: 000000002ccce000 CR4: 0000000000352ef0 [ 516.813509][T16405] Call Trace: [ 516.814594][T16405] [ 516.815607][T16405] ? __pfx_pci_device_add+0x10/0x10 [ 516.817380][T16405] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 516.819175][T16405] ? __raw_spin_lock_init+0x3a/0x110 [ 516.820959][T16405] pci_scan_single_device+0x1d0/0x240 [ 516.822626][T16405] ? __pfx_pci_scan_single_device+0x10/0x10 [ 516.824499][T16405] ? trace_event_buffer_commit+0x20a/0xa80 [ 516.826487][T16405] pci_scan_slot+0x1c9/0x7c0 [ 516.828142][T16405] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 516.830173][T16405] ? __pfx_pci_scan_slot+0x10/0x10 [ 516.833662][T16405] ? rcu_is_watching+0x13/0xc0 [ 516.835293][T16405] pci_scan_child_bus_extend+0x6b/0x7b0 [ 516.838735][T16405] ? pci_find_next_bus+0x60/0xb0 [ 516.840558][T16405] pci_rescan_bus+0x18/0x40 [ 516.842036][T16405] rescan_store+0xfb/0x130 [ 516.843480][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.845120][T16405] ? sysfs_file_kobj+0xe4/0x290 [ 516.846749][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.848472][T16405] bus_attr_store+0x74/0xb0 [ 516.849947][T16405] ? __pfx_bus_attr_store+0x10/0x10 [ 516.851615][T16405] sysfs_kf_write+0xf2/0x150 [ 516.853226][T16405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 516.854874][T16405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 516.856531][T16405] vfs_write+0x6af/0x1050 [ 516.858080][T16405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 516.859963][T16405] ? __pfx_vfs_write+0x10/0x10 [ 516.861482][T16405] ? find_held_lock+0x2b/0x80 [ 516.863330][T16405] ksys_write+0x12a/0x250 [ 516.864785][T16405] ? __pfx_ksys_write+0x10/0x10 [ 516.866486][T16405] do_syscall_64+0x123/0x790 [ 516.868176][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.870056][T16405] RIP: 0033:0x7fd89139e2d9 [ 516.871500][T16405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.881168][T16405] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.883835][T16405] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 516.887220][T16405] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 516.889722][T16405] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 516.892187][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.894622][T16405] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 516.897341][T16405] [ 516.898308][T16405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 516.900499][T16405] CPU: 2 UID: 0 PID: 16405 Comm: syz.0.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.903806][T16405] Tainted: [L]=SOFTLOCKUP [ 516.905129][T16405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.908210][T16405] Call Trace: [ 516.909296][T16405] [ 516.910243][T16405] dump_stack_lvl+0x100/0x190 [ 516.911808][T16405] vpanic+0x553/0x970 [ 516.913084][T16405] ? __pfx_vpanic+0x10/0x10 [ 516.914691][T16405] panic+0xd1/0xe0 [ 516.915878][T16405] ? __pfx_panic+0x10/0x10 [ 516.917387][T16405] check_panic_on_warn.cold+0x19/0x34 [ 516.918957][T16405] ? pci_device_add+0x1343/0x1820 [ 516.920546][T16405] __warn.cold+0x191/0x318 [ 516.922061][T16405] __report_bug+0x30f/0x440 [ 516.923495][T16405] ? pci_device_add+0x1343/0x1820 [ 516.925080][T16405] ? __pfx___report_bug+0x10/0x10 [ 516.926791][T16405] ? kasan_quarantine_put+0x104/0x240 [ 516.928512][T16405] ? lockdep_hardirqs_on+0x7d/0x110 [ 516.930142][T16405] ? device_add+0x320/0x1970 [ 516.931577][T16405] ? pci_device_add+0x1343/0x1820 [ 516.933134][T16405] report_bug+0xb3/0x220 [ 516.934458][T16405] ? pci_device_add+0x1343/0x1820 [ 516.936071][T16405] handle_bug+0x16a/0x2a0 [ 516.937473][T16405] exc_invalid_op+0x17/0x50 [ 516.938905][T16405] asm_exc_invalid_op+0x1a/0x20 [ 516.940462][T16405] RIP: 0010:pci_device_add+0x1343/0x1820 [ 516.942258][T16405] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 c0 be a1 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ae be a1 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 a0 be a1 fc 90 0f 0b 90 e9 11 fa ff ff [ 516.948139][T16405] RSP: 0018:ffffc90022937930 EFLAGS: 00010293 [ 516.949997][T16405] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 516.952427][T16405] RDX: ffff888043e70000 RSI: ffffffff856a97e2 RDI: ffff888043e70000 [ 516.954832][T16405] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 516.957258][T16405] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff8880242fe028 [ 516.959655][T16405] R13: ffff8880242fe000 R14: 0000000000000001 R15: ffff88802436c000 [ 516.962238][T16405] ? pci_device_add+0x1342/0x1820 [ 516.963953][T16405] ? __pfx_pci_device_add+0x10/0x10 [ 516.965592][T16405] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 516.967474][T16405] ? __raw_spin_lock_init+0x3a/0x110 [ 516.969240][T16405] pci_scan_single_device+0x1d0/0x240 [ 516.970938][T16405] ? __pfx_pci_scan_single_device+0x10/0x10 [ 516.972808][T16405] ? trace_event_buffer_commit+0x20a/0xa80 [ 516.974702][T16405] pci_scan_slot+0x1c9/0x7c0 [ 516.976190][T16405] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 516.978076][T16405] ? __pfx_pci_scan_slot+0x10/0x10 [ 516.979708][T16405] ? rcu_is_watching+0x13/0xc0 [ 516.981301][T16405] pci_scan_child_bus_extend+0x6b/0x7b0 [ 516.983036][T16405] ? pci_find_next_bus+0x60/0xb0 [ 516.984671][T16405] pci_rescan_bus+0x18/0x40 [ 516.986084][T16405] rescan_store+0xfb/0x130 [ 516.987499][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.989046][T16405] ? sysfs_file_kobj+0xe4/0x290 [ 516.990563][T16405] ? __pfx_rescan_store+0x10/0x10 [ 516.992146][T16405] bus_attr_store+0x74/0xb0 [ 516.993589][T16405] ? __pfx_bus_attr_store+0x10/0x10 [ 516.995180][T16405] sysfs_kf_write+0xf2/0x150 [ 516.996716][T16405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 516.998297][T16405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 516.999968][T16405] vfs_write+0x6af/0x1050 [ 517.001377][T16405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 517.003239][T16405] ? __pfx_vfs_write+0x10/0x10 [ 517.004699][T16405] ? find_held_lock+0x2b/0x80 [ 517.006455][T16405] ksys_write+0x12a/0x250 [ 517.007827][T16405] ? __pfx_ksys_write+0x10/0x10 [ 517.009457][T16405] do_syscall_64+0x123/0x790 [ 517.010957][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.012787][T16405] RIP: 0033:0x7fd89139e2d9 [ 517.014156][T16405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.019811][T16405] RSP: 002b:00007fd8922ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.022259][T16405] RAX: ffffffffffffffda RBX: 00007fd891625fa0 RCX: 00007fd89139e2d9 [ 517.024619][T16405] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 517.026949][T16405] RBP: 00007fd8922ed090 R08: 0000000000000000 R09: 0000000000000000 [ 517.029398][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.031886][T16405] R13: 00007fd891626038 R14: 00007fd891625fa0 R15: 00007ffd545fe118 [ 517.034565][T16405] [ 517.036161][T16405] Kernel Offset: disabled [ 517.037480][T16405] Rebooting in 86400 seconds..