last executing test programs: 31.879407897s ago: executing program 2 (id=916): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000340001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) 31.879120642s ago: executing program 2 (id=917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0xfffffffffffffffd, &(0x7f0000000580)={&(0x7f0000000180)={0x3c, r7, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x24044004) 31.830585269s ago: executing program 2 (id=919): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x20000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, &(0x7f00000001c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r7, r5, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x5, 0xb, [{0x6, 0xd382}, {0xdc5, 0x45}, {0x0, 0x5}, {0x8, 0x202}, {0x1000, 0xcb}, {0x5, 0x6}, {0x1, 0x80000001}, {0x8003, 0x7ffe}], 0x7, 0xa, 0x2, 0x1, 0x3}}) 30.87425777s ago: executing program 2 (id=928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000240)={[{@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) move_pages(r2, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000500)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 30.409261338s ago: executing program 2 (id=932): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800200, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ea19a6cd956cec436c74787246d13ca11081dbabebcb76c1d2e8b7d0c8c1aabdd95fc51096c8d57e818ce768ccceed4d115abed88468be323c820ade265a87419a77736785f202fe11a5dd77773ba9a4c83087f956929503b1e1ff5b37da9fe53fb758af2d89f01e0df78efd88cf4a01c0b8766c480a0394b6c8fc9fc12099c5bb81de2cb7a9f7cda5c9b265453e575767fb58b840bfe5d709889eea7579a18472fdd1630e7fbbe9d68f", 0xaa}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832330080b0afe68599b4b850531e65e89deb1e", 0x23}], 0x2}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)}, {&(0x7f0000001200)}, {0x0}, {&(0x7f0000001000)="18a8583924039aadf86313c609284663d89bbf4926f433da348624e066f55a2241069c638f862039561bc732", 0x2c}], 0x4}}], 0x3, 0x200000c0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x50bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x44080) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xd, 0x0, {{0x44, 0x4, 0x3, 0x6, 0x110, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x33, 0xffffffffffffffff, [{0x7, 0xd, "c39771477834cb70c96091"}, {0x0, 0x9, "d36d50615b9266"}, {0x1, 0x6, "57d48635"}, {0x5, 0x7, "b4cd3acd5b"}, {0x0, 0x4, "8cf2"}, {0x6, 0x6, "66f7e06d"}]}, @end, @lsrr={0x83, 0x13, 0xbd, [@multicast1, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x11, 0x2, [{0x6, 0xb, "7de537b010cf959ea9"}]}, @lsrr={0x83, 0x7, 0xb3, [@local]}, @timestamp_addr={0x44, 0x4c, 0xbb, 0x1, 0x0, [{@private=0xa010102, 0x7}, {@multicast1, 0x9}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast1, 0x5}, {@broadcast}, {@multicast1, 0x6}, {@rand_addr=0x800, 0x101}, {@broadcast, 0x80000001}]}, @timestamp_addr={0x44, 0x2c, 0xbd, 0x1, 0x0, [{@loopback, 0x5}, {@private=0xa010101, 0x7}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x25, 0x2, [{0x2, 0xe, "054ac2f45f62d3e0e97107bf"}, {0x2, 0xd, "b80e25051f619f0e796bc0"}, {0x2, 0x4, "aa68"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r14, r13}, 0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x5000}}}}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2c0, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000044}, 0x20040080) r15 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r15, 0xc0106401, &(0x7f0000000080)={0x0, 0x0}) r16 = syz_open_dev$usbfs(&(0x7f0000000100), 0xbb, 0x1) ioctl$USBDEVFS_DROP_PRIVILEGES(r16, 0x4004551e, &(0x7f0000000140)=0xfffff801) ioctl$USBDEVFS_RESET(r16, 0x5514) 30.191268996s ago: executing program 2 (id=934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x39c}}, 0x0) 15.184459069s ago: executing program 32 (id=934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140012001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009000300737959320000000028030000060a010400000000000000000100000008000b400000000000030480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000c80201800c0001006269747769736500b802028008000340000000020800014000000014080002400000001208000580040001000c000480060001008a95000088020580fd0001000856e42387aceb1f87b9e7d10dd1f649676938fc64ba8c84d22d001a3bff1f833f5084df78fb742ec16a04f01d577f2cf2ee0e229b6f5323c322398b3cd01b89e9b6dd77b6751ecf6a2a007ef659a586c15e22b571227db1e45806565735e6d55b6e4ab4f28c4919a97200fd30953a259b44745e0c5f4b93984e215ca610f1a1e259671fe8d86d91b38636730c92f6d1aee3773faf8b91991497f4c588056a6204e38ab8b2891284ea07979b4efeb37c99efcc831084e65ea7fa66d7957ebf6cdb9f8a1e40fa18f39b7c3b551195e23953f642ecb83440355c427e46a5e2ca8d9821cf8cefc72ed0f4638e6697236eb98925b421c8fc1a0e140000004c0002800900020073797a320000000008000180ffffffff0900020073797a3000000000080003400000000108000180fffffffd080003400000000308000180fffffffe08000180000000001800028008000180fffffffe0900020073797a30000000007a00010003025b92bbdb23bc4c84bd584d51a29d70b03679af56871f59f279547af3952d3be2f931b761adad4029718580c7accae30d0b1c46ad1e41d48f7ffefb633620de289c6476d549e8bb92d2f33f1544e528a0c264c090918c5da779d734b1760c677b31b1d0bc6696238e1ffe1822e8819ef1687cc0ac000020000280080001800000000008000180fffffffd0900020073797a32000000004800028008000180fffffffe080003400000000308000340000000010900020073797a320000000008000340000000040800034000000004080003400000000108000180fffffffc3c0002800900020073797a300000000008000340000000010800034000000004080003400000000346760180fffffffc0900020073797a30000000000900010073797a30"], 0x39c}}, 0x0) 7.08870951s ago: executing program 1 (id=1221): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x51) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x1230) 6.256537176s ago: executing program 1 (id=1230): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000840)=0x41f2, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2100, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x2015, 0x0, 0x3, 0x2, 0x2, 0xa4de36948e08189d}}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 6.120561809s ago: executing program 1 (id=1232): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000070000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) 6.027980634s ago: executing program 1 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0xfffffffe, 0x5, 0x10000, 0x40}, 0x8, 0x5, [{0xb, 0x4, 0x0, 0xa, 0xe83, 0x9}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x2, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a0, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x2}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x101, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x70, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffdfe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x82, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x6}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xbe, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x2, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x9, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2, 0x0, 0x0, 0x20000000}, 0x4) 5.900902821s ago: executing program 1 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x39c}}, 0x0) 5.900230778s ago: executing program 1 (id=1240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 810.310248ms ago: executing program 4 (id=1326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000033900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003"], 0x40}}, 0x0) 809.786606ms ago: executing program 4 (id=1328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x66, &(0x7f0000001240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000303a0020010000000000000000000000000001ff0200fffffffffffffff50000000001"], 0x0) 740.636982ms ago: executing program 4 (id=1329): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 600.377972ms ago: executing program 4 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltclass={0x54, 0x29, 0x404, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x7, 0x3}, {0x3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r6}, @enter_looper], 0x0, 0x0, 0x0}) 600.17458ms ago: executing program 0 (id=1334): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (fail_nth: 58) 600.077213ms ago: executing program 4 (id=1335): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x2e7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x80080c4}, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5", 0xf, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = dup3(r1, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000200)={0x4, 0x6, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 540.879467ms ago: executing program 0 (id=1337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 54) 318.91218ms ago: executing program 4 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x6, 0x0, 0x0, 0x7, 0x80003, 0x5, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x6, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 318.67895ms ago: executing program 0 (id=1339): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xbd2f, 0x3, 0x8, 0x7ffffffe, 0x4, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r2, 0x0, r1, 0x0, 0x18, 0x7) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0xffffffff, 0x6e7, 0x6, 0x6, 0x1b, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 260.230004ms ago: executing program 0 (id=1341): syz_init_net_socket$x25(0x9, 0x5, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) r0 = fsopen(&(0x7f0000000080)='aio\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000900)={'macvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x7771, 0x0, 0x0, 0xd7b8dbcd861891a2, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa51c, r4, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000800000025e91de0ceb2652a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006380)=@newtfilter={0x1b0, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x13c, 0x1, [@m_mirred={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x108, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '@%-%X^\x00'}, @TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x1, 0x7, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3c09, 0x136b, 0x2, 0x0, 0xa}}, @TCA_DEF_DATA={0xc, 0x3, 'net/tcp\x00'}, @TCA_DEF_DATA={0x7, 0x3, '}{\x00'}]}, {0x7b, 0x6, "cfb07bb410ade1c10d84547951c30120d609a1dcf50f5ef73e867af0f25c6d43812100ae3c596ff9ba83132cbe2d0a4eb9fb83fa20a0b32c8147e55d2aad41f6eefe8380af4805558ff2a972c789417d7399101087dcba5bb55938a8543ef918ee1b0eb49dc691929e09184a6fa8bc4d28afaf0faacd78"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x7, 0xc, 0x8, 0x1}, {0x7, 0x4, 0x0, 0x1}, {0x38, 0x9, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xd3}, {0xffff, 0x1, 0xe, 0x3}, {0x8, 0xd, 0x9, 0x5}, {0x101, 0xa, 0x1, 0x8}]}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_open_procfs(0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x10bb41) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000140)=0xfffff805) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r11, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) ioctl$USBDEVFS_RESET(r10, 0x5514) 170.372103ms ago: executing program 3 (id=1342): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee000000ffff", "000900000000000200"}, 0x7, 0x4}) 100.848836ms ago: executing program 3 (id=1343): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 100.679989ms ago: executing program 0 (id=1344): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000ffff001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) 100.595912ms ago: executing program 0 (id=1345): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close(0x4) (fail_nth: 60) 100.31334ms ago: executing program 3 (id=1346): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x2, &(0x7f0000000240)=[{0x40, '\x00', @st={0x4, [{0x3, @svalue}, {0x0, @svalue=0x2}, {0x3, @svalue=0x9a}, {0x3, @svalue=0x1}]}, 0x4}, {0x45, '\x00', @data=0x8, 0x3}]}) 1.098537ms ago: executing program 3 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x39c}}, 0x0) 962.472µs ago: executing program 3 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x20000, 0x4}) syz_fuse_handle_req(r0, &(0x7f0000006300)="00000000000000000000000000000000000000000000000500", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1349): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x758ea16d}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040010) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/timers\x00', 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x13, "0ff711e8cd2c"}, 0x8, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000003c0)={0x401, 0x5, 0xff, 0xb, 0x1d00000, 0x44}) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x800) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000440)=""/195) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000006c0)=""/199) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000007c0)={0x0, 0x0, 0x1}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0x4a1862d4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x38}}]}, 0x44}}, 0x84) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000940)='wg0\x00', 0x4) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000980)=""/56, &(0x7f00000009c0)=0x38) getsockopt(r3, 0x9, 0xffffff01, &(0x7f0000000a00)=""/217, &(0x7f0000000b00)=0xd9) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b40)=@gcm_256={{0x304}, "ca30c26ea96a7133", "1d84bdd849ef3f0ec5fc4b31656739548244da3d7aba4db4aead28242045f2f6", "4892979d", "f8b0e4192656e4b5"}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) syz_emit_ethernet(0xbb, &(0x7f0000000bc0)={@remote, @remote, @val={@val={0x88a8, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@generic={0x80f3, "fe9dc3648b5fdb50ef956fc9dbc732ccf0b7f6a027fc1ebae7e1c1bb88f43b6be2ec6bb4df14c502162d36989180ed53c46f97598d0656e5b962c726e0c703a780b9e9a37d2861114dee8c7905b8edb0552695d87f29fbbe2040c4f62930c4e15d3ebd1f7424fe5f791b0aa5b6941f6dd780ef75530b9202087125ca02761d52c0732adf60a5c163a02bbdd913291e3de97800df72d66ab4bfec40f26c2d302c5997acacbd"}}}, &(0x7f0000000c80)={0x1, 0x2, [0xdd5, 0xfb9, 0x475, 0x1d2]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@fallback=r4, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@map=r3, r3, 0x14, 0x2004, 0xffffffffffffffff, @value=r3, @void, @void, @void, r6}, 0x20) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x80, 0xf0, "", [{{0x9, 0x4, 0x0, 0x28, 0x2, 0x3, 0x1, 0x2, 0x38, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0xba1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x7, 0x1a}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xbd, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x300, 0xd, 0x1, 0x0, 0x40, 0x7}, 0x4e, &(0x7f0000000ec0)={0x5, 0xf, 0x4e, 0x1, [@generic={0x49, 0x10, 0x2, "efb754d1e7ba16e1af359e574634f6ec90a0f11f28e4b20f41712f124db292d1821d07d4a5ec071b20ddffc51c039fbc6445837064693938d13437062c6e569af12c27ceb6e4"}]}, 0x4, [{0xa5, &(0x7f0000000f40)=@string={0xa5, 0x3, "d1e64cf97fd355734f355d8cc7ab83fd82bb24190eaf1e405c22ce8924eebfa6afb262c54364281b934bc3994678942e10aaf77fd72b9d51cc3b71d6ae7fed474db49e135c70438e84fb06fd3a833eb9dbd585739fdd374dcd6289472a165f7845a2e97346a53fe54fc71af83fc98e1879fe8d36fa495e206f1e0f1367f5aeef7c724d4c04fe44f393987931b76950314d60ded93db7d8ba8f0efd0c55b9062c3c13b3"}}, {0x43, &(0x7f0000001000)=@string={0x43, 0x3, "441d8a5c1b65cccea81d1f6f2bde7ad2e8bc4a91f65ae3087845538a029c74fe42ee9c867f8b8d198195292c5bf73774965661b2ecc53471cd548a971c1f1ff107"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x40a}}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x34) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xfffa}, {0x8, 0xb, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000) ioctl$COMEDI_LOCK(r5, 0x6405) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000001300)) flistxattr(r7, &(0x7f0000001340)=""/31, 0x1f) kernel console output (not intermixed with test programs): times 0 [ 176.764119][ T9113] CPU: 3 UID: 0 PID: 9113 Comm: syz.3.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.764138][ T9113] Tainted: [L]=SOFTLOCKUP [ 176.764142][ T9113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.764150][ T9113] Call Trace: [ 176.764283][ T9113] [ 176.764288][ T9113] dump_stack_lvl+0x100/0x190 [ 176.765107][ T9113] should_fail_ex.cold+0x5/0xa [ 176.765316][ T9113] should_failslab+0xc2/0x120 [ 176.765563][ T9113] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.765581][ T9113] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.765603][ T9113] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.765625][ T9113] mmu_topup_memory_caches+0x25/0x170 [ 176.765640][ T9113] kvm_mmu_load+0xd6/0x23e0 [ 176.765652][ T9113] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 176.765668][ T9113] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 176.765686][ T9113] ? __pfx_kvm_mmu_load+0x10/0x10 [ 176.765697][ T9113] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 176.765715][ T9113] ? kvm_check_and_inject_events+0x961/0x10c0 [ 176.765729][ T9113] ? record_steal_time+0x410/0xbe0 [ 176.765746][ T9113] vcpu_run+0x39f4/0x5ca0 [ 176.765765][ T9113] ? __pfx_vcpu_run+0x10/0x10 [ 176.765782][ T9113] ? rcu_is_watching+0x12/0xc0 [ 176.765922][ T9113] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.765936][ T9113] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.765953][ T9113] kvm_vcpu_ioctl+0x730/0x1730 [ 176.765971][ T9113] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.765988][ T9113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.766006][ T9113] ? do_vfs_ioctl+0x226/0x13e0 [ 176.766025][ T9113] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.766042][ T9113] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.766412][ T9113] ? __fget_files+0x215/0x3d0 [ 176.766425][ T9113] ? hook_file_ioctl_common+0x146/0x410 [ 176.766443][ T9113] ? selinux_file_ioctl+0x139/0x290 [ 176.766459][ T9113] ? selinux_file_ioctl+0xb4/0x290 [ 176.766476][ T9113] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.766493][ T9113] __x64_sys_ioctl+0x18e/0x210 [ 176.766511][ T9113] do_syscall_64+0x106/0xf80 [ 176.766877][ T9113] ? clear_bhb_loop+0x40/0x90 [ 176.766893][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.766904][ T9113] RIP: 0033:0x7f083619c819 [ 176.766915][ T9113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.766926][ T9113] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.766975][ T9113] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 176.766982][ T9113] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 176.766988][ T9113] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 176.766995][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.767001][ T9113] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 176.767015][ T9113] [ 176.812351][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 176.812362][ T40] audit: type=1400 audit(1775566471.821:797): avc: denied { write } for pid=9117 comm="syz.0.1056" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.821591][ T9118] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1056' resets device [ 176.910355][ T40] audit: type=1400 audit(1775566471.921:798): avc: denied { create } for pid=9119 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.974867][ T40] audit: type=1400 audit(1775566471.991:799): avc: denied { prog_load } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.981292][ T40] audit: type=1400 audit(1775566471.991:800): avc: denied { bpf } for pid=9125 comm="syz.1.1060" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.990009][ T40] audit: type=1400 audit(1775566472.001:801): avc: denied { create } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.998241][ T40] audit: type=1400 audit(1775566472.001:802): avc: denied { getopt } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.008777][ T40] audit: type=1400 audit(1775566472.001:803): avc: denied { connect } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.017126][ T40] audit: type=1400 audit(1775566472.001:804): avc: denied { name_connect } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 177.068704][ T9128] FAULT_INJECTION: forcing a failure. [ 177.068704][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 177.077642][ T9128] CPU: 0 UID: 0 PID: 9128 Comm: syz.0.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.077661][ T9128] Tainted: [L]=SOFTLOCKUP [ 177.077665][ T9128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.077673][ T9128] Call Trace: [ 177.077706][ T9128] [ 177.077711][ T9128] dump_stack_lvl+0x100/0x190 [ 177.077984][ T9128] should_fail_ex.cold+0x5/0xa [ 177.078093][ T9128] should_failslab+0xc2/0x120 [ 177.078184][ T9128] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 177.078231][ T9128] ? vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 177.078563][ T9128] kstrdup+0x51/0xe0 [ 177.078576][ T9128] vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 177.078593][ T9128] vidtv_psi_desc_clone+0x33f/0x5d0 [ 177.078612][ T9128] vidtv_channel_si_init+0x764/0x18d0 [ 177.078634][ T9128] vidtv_mux_init+0x526/0xbf0 [ 177.078653][ T9128] vidtv_start_feed+0x33e/0x4c0 [ 177.078666][ T9128] ? __pfx_vidtv_start_feed+0x10/0x10 [ 177.078679][ T9128] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 177.078699][ T9128] dmx_section_feed_start_filtering+0x3a8/0x660 [ 177.078842][ T9128] ? mark_held_locks+0x40/0x70 [ 177.078908][ T9128] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.079301][ T9128] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 177.079318][ T9128] dvb_dmxdev_filter_stop+0x18b/0x390 [ 177.079333][ T9128] dvb_demux_release+0x92/0x560 [ 177.079345][ T9128] ? evm_file_release+0x133/0x210 [ 177.079543][ T9128] ? __pfx_dvb_demux_release+0x10/0x10 [ 177.079556][ T9128] __fput+0x3ff/0xb40 [ 177.079579][ T9128] fput_close_sync+0x118/0x250 [ 177.079594][ T9128] ? __pfx_fput_close_sync+0x10/0x10 [ 177.079617][ T9128] __x64_sys_close+0x8b/0x120 [ 177.079633][ T9128] do_syscall_64+0x106/0xf80 [ 177.079644][ T9128] ? clear_bhb_loop+0x40/0x90 [ 177.079659][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.079671][ T9128] RIP: 0033:0x7f8c6a19c819 [ 177.079682][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.079692][ T9128] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 177.079722][ T9128] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 177.079729][ T9128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 177.079735][ T9128] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 177.079742][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.079748][ T9128] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 177.079763][ T9128] [ 177.178715][ T40] audit: type=1400 audit(1775566472.191:805): avc: denied { create } for pid=9125 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.192466][ T40] audit: type=1400 audit(1775566472.191:806): avc: denied { connect } for pid=9125 comm="syz.1.1060" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.321266][ T9142] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 177.477439][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 177.548629][ T9158] fuse: Bad value for 'rootmode' [ 177.694347][ T9164] FAULT_INJECTION: forcing a failure. [ 177.694347][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 177.699341][ T9164] CPU: 3 UID: 0 PID: 9164 Comm: syz.3.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.699363][ T9164] Tainted: [L]=SOFTLOCKUP [ 177.699369][ T9164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.699379][ T9164] Call Trace: [ 177.699387][ T9164] [ 177.699394][ T9164] dump_stack_lvl+0x100/0x190 [ 177.699429][ T9164] should_fail_ex.cold+0x5/0xa [ 177.699449][ T9164] should_failslab+0xc2/0x120 [ 177.699470][ T9164] __kmalloc_cache_noprof+0x7a/0x6f0 [ 177.699491][ T9164] ? vidtv_psi_sdt_service_init+0x52/0x200 [ 177.699522][ T9164] vidtv_psi_sdt_service_init+0x52/0x200 [ 177.699543][ T9164] vidtv_channel_si_init+0x5cf/0x18d0 [ 177.699575][ T9164] vidtv_mux_init+0x526/0xbf0 [ 177.699608][ T9164] vidtv_start_feed+0x33e/0x4c0 [ 177.699624][ T9164] ? __pfx_vidtv_start_feed+0x10/0x10 [ 177.699643][ T9164] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 177.699674][ T9164] dmx_section_feed_start_filtering+0x3a8/0x660 [ 177.699705][ T9164] dvb_dmxdev_filter_start+0x767/0xdd0 [ 177.699727][ T9164] dvb_demux_do_ioctl+0xe64/0x1200 [ 177.699753][ T9164] dvb_usercopy+0x167/0x340 [ 177.699768][ T9164] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 177.699787][ T9164] ? __pfx_dvb_usercopy+0x10/0x10 [ 177.699809][ T9164] ? selinux_file_ioctl+0x139/0x290 [ 177.699836][ T9164] ? selinux_file_ioctl+0xb4/0x290 [ 177.699863][ T9164] dvb_demux_ioctl+0x29/0x40 [ 177.699877][ T9164] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 177.699890][ T9164] __x64_sys_ioctl+0x18e/0x210 [ 177.699918][ T9164] do_syscall_64+0x106/0xf80 [ 177.699935][ T9164] ? clear_bhb_loop+0x40/0x90 [ 177.699957][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.699969][ T9164] RIP: 0033:0x7f083619c819 [ 177.699984][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.700000][ T9164] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.700016][ T9164] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 177.700026][ T9164] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 177.700036][ T9164] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 177.700046][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.700052][ T9164] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 177.700074][ T9164] [ 177.701182][ T9163] vidtv vidtv.0: No streaming. Skipping. [ 177.802740][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.802764][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.803057][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 178.107139][ T9174] FAULT_INJECTION: forcing a failure. [ 178.107139][ T9174] name failslab, interval 1, probability 0, space 0, times 0 [ 178.111045][ T9174] CPU: 1 UID: 0 PID: 9174 Comm: syz.1.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.111066][ T9174] Tainted: [L]=SOFTLOCKUP [ 178.111071][ T9174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.111078][ T9174] Call Trace: [ 178.111116][ T9174] [ 178.111122][ T9174] dump_stack_lvl+0x100/0x190 [ 178.111364][ T9174] should_fail_ex.cold+0x5/0xa [ 178.111483][ T9174] should_failslab+0xc2/0x120 [ 178.111594][ T9174] __kmalloc_cache_noprof+0x7a/0x6f0 [ 178.111611][ T9174] ? vidtv_psi_nit_table_init+0x5b/0x5f0 [ 178.111823][ T9174] vidtv_psi_nit_table_init+0x5b/0x5f0 [ 178.111839][ T9174] ? kasan_save_track+0x14/0x30 [ 178.111863][ T9174] vidtv_channel_si_init+0xcd0/0x18d0 [ 178.111885][ T9174] vidtv_mux_init+0x526/0xbf0 [ 178.111904][ T9174] vidtv_start_feed+0x33e/0x4c0 [ 178.111918][ T9174] ? __pfx_vidtv_start_feed+0x10/0x10 [ 178.111932][ T9174] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 178.111952][ T9174] dmx_section_feed_start_filtering+0x3a8/0x660 [ 178.112038][ T9174] ? mark_held_locks+0x40/0x70 [ 178.112142][ T9174] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.112338][ T9174] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 178.112354][ T9174] dvb_dmxdev_filter_stop+0x18b/0x390 [ 178.112369][ T9174] dvb_demux_release+0x92/0x560 [ 178.112381][ T9174] ? evm_file_release+0x133/0x210 [ 178.112535][ T9174] ? __pfx_dvb_demux_release+0x10/0x10 [ 178.112548][ T9174] __fput+0x3ff/0xb40 [ 178.112566][ T9174] fput_close_sync+0x118/0x250 [ 178.112582][ T9174] ? __pfx_fput_close_sync+0x10/0x10 [ 178.112600][ T9174] __x64_sys_close+0x8b/0x120 [ 178.112615][ T9174] do_syscall_64+0x106/0xf80 [ 178.112626][ T9174] ? clear_bhb_loop+0x40/0x90 [ 178.112642][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.112654][ T9174] RIP: 0033:0x7f7ec839c819 [ 178.112665][ T9174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.112675][ T9174] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.112708][ T9174] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 178.112715][ T9174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 178.112720][ T9174] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 178.112727][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.112733][ T9174] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 178.112747][ T9174] [ 178.189246][ T9173] vidtv vidtv.0: No streaming. Skipping. [ 178.216538][ T9178] fuse: Unknown parameter 'use00000000000000000000' [ 178.224115][ T9176] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1080'. [ 178.234244][ T9176] syzkaller0: entered promiscuous mode [ 178.237214][ T9176] syzkaller0: entered allmulticast mode [ 178.258925][ T9176] tc action pedit offset must be on 32 bit boundaries [ 178.407680][ T9186] FAULT_INJECTION: forcing a failure. [ 178.407680][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 178.414162][ T9186] CPU: 1 UID: 0 PID: 9186 Comm: syz.1.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.414208][ T9186] Tainted: [L]=SOFTLOCKUP [ 178.414217][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.414227][ T9186] Call Trace: [ 178.414234][ T9186] [ 178.414242][ T9186] dump_stack_lvl+0x100/0x190 [ 178.414278][ T9186] should_fail_ex.cold+0x5/0xa [ 178.414305][ T9186] should_failslab+0xc2/0x120 [ 178.414320][ T9186] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 178.414337][ T9186] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.414359][ T9186] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.414381][ T9186] mmu_topup_memory_caches+0x25/0x170 [ 178.414397][ T9186] kvm_mmu_load+0xd6/0x23e0 [ 178.414410][ T9186] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 178.414426][ T9186] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.414443][ T9186] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.414455][ T9186] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 178.414474][ T9186] ? kvm_check_and_inject_events+0x961/0x10c0 [ 178.414488][ T9186] ? record_steal_time+0x410/0xbe0 [ 178.414506][ T9186] vcpu_run+0x39f4/0x5ca0 [ 178.414524][ T9186] ? __pfx_vcpu_run+0x10/0x10 [ 178.414544][ T9186] ? rcu_is_watching+0x12/0xc0 [ 178.414561][ T9186] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.414574][ T9186] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.414592][ T9186] kvm_vcpu_ioctl+0x730/0x1730 [ 178.414610][ T9186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.414627][ T9186] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.414645][ T9186] ? do_vfs_ioctl+0x226/0x13e0 [ 178.414663][ T9186] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.414680][ T9186] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.414704][ T9186] ? __fget_files+0x215/0x3d0 [ 178.414716][ T9186] ? hook_file_ioctl_common+0x146/0x410 [ 178.414732][ T9186] ? selinux_file_ioctl+0x139/0x290 [ 178.414749][ T9186] ? selinux_file_ioctl+0xb4/0x290 [ 178.414766][ T9186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.414788][ T9186] __x64_sys_ioctl+0x18e/0x210 [ 178.414806][ T9186] do_syscall_64+0x106/0xf80 [ 178.414818][ T9186] ? clear_bhb_loop+0x40/0x90 [ 178.414832][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.414843][ T9186] RIP: 0033:0x7f7ec839c819 [ 178.414853][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.414864][ T9186] RSP: 002b:00007f7ec92df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.414875][ T9186] RAX: ffffffffffffffda RBX: 00007f7ec8616090 RCX: 00007f7ec839c819 [ 178.414882][ T9186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 178.414888][ T9186] RBP: 00007f7ec92df090 R08: 0000000000000000 R09: 0000000000000000 [ 178.414895][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.414901][ T9186] R13: 00007f7ec8616128 R14: 00007f7ec8616090 R15: 00007ffe04537298 [ 178.414915][ T9186] [ 178.503280][ T9190] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 178.550132][ T9190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.579085][ T9189] bond1: (slave veth3): Enslaving as an active interface with a down link [ 178.593115][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.597580][ T9189] bond1: (slave batadv1): making interface the new active one [ 178.601380][ T9189] batadv1: entered promiscuous mode [ 178.604147][ T9189] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 178.611461][ T9189] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 178.675149][ T9197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 178.677328][ T9197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.681037][ T9197] vhci_hcd vhci_hcd.0: Device attached [ 178.709589][ T9197] sp0: Synchronizing with TNC [ 178.716536][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 178.729327][ T9197] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 178.731869][ T9197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 178.737054][ T9197] vhci_hcd vhci_hcd.0: Device attached [ 178.741041][ T9202] vhci_hcd: connection closed [ 178.741700][ T13] vhci_hcd vhci_hcd.1: stop threads [ 178.746993][ T13] vhci_hcd vhci_hcd.1: release socket [ 178.748846][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 178.821510][ T9205] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 178.845111][ T9198] vhci_hcd: connection closed [ 178.849873][ T9207] fuse: Unknown parameter 'use00000000000000000000' [ 178.853770][ T97] vhci_hcd vhci_hcd.1: stop threads [ 178.853797][ T97] vhci_hcd vhci_hcd.1: release socket [ 178.853832][ T97] vhci_hcd vhci_hcd.1: disconnect device [ 178.862850][ T5936] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 178.913131][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 178.984666][ T9216] xt_policy: too many policy elements [ 179.054619][ T9223] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1097' resets device [ 179.140860][ T9227] FAULT_INJECTION: forcing a failure. [ 179.140860][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 179.146168][ T9227] CPU: 2 UID: 0 PID: 9227 Comm: syz.3.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.146214][ T9227] Tainted: [L]=SOFTLOCKUP [ 179.146221][ T9227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.146231][ T9227] Call Trace: [ 179.146239][ T9227] [ 179.146248][ T9227] dump_stack_lvl+0x100/0x190 [ 179.146284][ T9227] should_fail_ex.cold+0x5/0xa [ 179.146309][ T9227] should_failslab+0xc2/0x120 [ 179.146328][ T9227] __kmalloc_cache_noprof+0x7a/0x6f0 [ 179.146351][ T9227] ? vidtv_psi_sdt_service_init+0x52/0x200 [ 179.146383][ T9227] vidtv_psi_sdt_service_init+0x52/0x200 [ 179.146409][ T9227] vidtv_channel_si_init+0x5cf/0x18d0 [ 179.146442][ T9227] vidtv_mux_init+0x526/0xbf0 [ 179.146468][ T9227] vidtv_start_feed+0x33e/0x4c0 [ 179.146487][ T9227] ? __pfx_vidtv_start_feed+0x10/0x10 [ 179.146506][ T9227] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 179.146533][ T9227] dmx_section_feed_start_filtering+0x3a8/0x660 [ 179.146565][ T9227] dvb_dmxdev_filter_start+0x767/0xdd0 [ 179.146592][ T9227] dvb_demux_do_ioctl+0xe64/0x1200 [ 179.146620][ T9227] dvb_usercopy+0x167/0x340 [ 179.146634][ T9227] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 179.146652][ T9227] ? __pfx_dvb_usercopy+0x10/0x10 [ 179.146677][ T9227] ? selinux_file_ioctl+0x139/0x290 [ 179.146705][ T9227] ? selinux_file_ioctl+0xb4/0x290 [ 179.146733][ T9227] dvb_demux_ioctl+0x29/0x40 [ 179.146749][ T9227] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 179.146765][ T9227] __x64_sys_ioctl+0x18e/0x210 [ 179.146790][ T9227] do_syscall_64+0x106/0xf80 [ 179.146807][ T9227] ? clear_bhb_loop+0x40/0x90 [ 179.146834][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.146850][ T9227] RIP: 0033:0x7f083619c819 [ 179.146865][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.146879][ T9227] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.146895][ T9227] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 179.146905][ T9227] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 179.146915][ T9227] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 179.146924][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.146933][ T9227] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 179.146954][ T9227] [ 179.148015][ T9226] vidtv vidtv.0: No streaming. Skipping. [ 179.285074][ T9229] fuse: Unknown parameter 'use00000000000000000000' [ 179.377949][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 179.585010][ T9244] FAULT_INJECTION: forcing a failure. [ 179.585010][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 179.590488][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.1.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.590523][ T9244] Tainted: [L]=SOFTLOCKUP [ 179.590529][ T9244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.590540][ T9244] Call Trace: [ 179.590550][ T9244] [ 179.590558][ T9244] dump_stack_lvl+0x100/0x190 [ 179.590597][ T9244] should_fail_ex.cold+0x5/0xa [ 179.590623][ T9244] should_failslab+0xc2/0x120 [ 179.590644][ T9244] __kmalloc_cache_noprof+0x7a/0x6f0 [ 179.590668][ T9244] ? vidtv_psi_nit_table_init+0x9b/0x5f0 [ 179.590701][ T9244] vidtv_psi_nit_table_init+0x9b/0x5f0 [ 179.590725][ T9244] ? kasan_save_track+0x14/0x30 [ 179.590755][ T9244] vidtv_channel_si_init+0xcd0/0x18d0 [ 179.590790][ T9244] vidtv_mux_init+0x526/0xbf0 [ 179.590821][ T9244] vidtv_start_feed+0x33e/0x4c0 [ 179.590842][ T9244] ? __pfx_vidtv_start_feed+0x10/0x10 [ 179.590863][ T9244] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 179.590898][ T9244] dmx_section_feed_start_filtering+0x3a8/0x660 [ 179.590926][ T9244] ? mark_held_locks+0x40/0x70 [ 179.590945][ T9244] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.590977][ T9244] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 179.591002][ T9244] dvb_dmxdev_filter_stop+0x18b/0x390 [ 179.591027][ T9244] dvb_demux_release+0x92/0x560 [ 179.591048][ T9244] ? evm_file_release+0x133/0x210 [ 179.591076][ T9244] ? __pfx_dvb_demux_release+0x10/0x10 [ 179.591097][ T9244] __fput+0x3ff/0xb40 [ 179.591127][ T9244] fput_close_sync+0x118/0x250 [ 179.591152][ T9244] ? __pfx_fput_close_sync+0x10/0x10 [ 179.591183][ T9244] __x64_sys_close+0x8b/0x120 [ 179.591208][ T9244] do_syscall_64+0x106/0xf80 [ 179.591224][ T9244] ? clear_bhb_loop+0x40/0x90 [ 179.591247][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.591265][ T9244] RIP: 0033:0x7f7ec839c819 [ 179.591282][ T9244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.591298][ T9244] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 179.591316][ T9244] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 179.591327][ T9244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 179.591337][ T9244] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 179.591348][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.591358][ T9244] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 179.591384][ T9244] [ 179.698498][ T53] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 179.703851][ T9243] vidtv vidtv.0: No streaming. Skipping. [ 179.747321][ T9246] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1108'. [ 179.751802][ T9246] syzkaller0: entered promiscuous mode [ 179.753911][ T9246] syzkaller0: entered allmulticast mode [ 179.758092][ T9246] tc action pedit offset must be on 32 bit boundaries [ 179.802557][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 179.852448][ T53] usb 5-1: Invalid ep0 maxpacket: 16 [ 179.867491][ T9248] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 179.871995][ T9248] team0: Device ipvlan1 failed to register rx_handler [ 179.882510][ T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 179.882543][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.885582][ T29] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 179.916778][ T9250] fuse: Unknown parameter 'user_i00000000000000000000' [ 179.974254][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 179.978280][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.981894][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.982462][ T53] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 180.004652][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.007080][ T10] pvrusb2: ********** [ 180.008744][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.012119][ T10] pvrusb2: Important functionality might not be entirely working. [ 180.014890][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.019116][ T10] pvrusb2: ********** [ 180.132465][ T53] usb 5-1: Invalid ep0 maxpacket: 16 [ 180.136178][ T53] usb usb5-port1: attempt power cycle [ 180.208045][ T2492] pvrusb2: Invalid write control endpoint [ 180.254391][ T9257] FAULT_INJECTION: forcing a failure. [ 180.254391][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 180.256322][ T2492] pvrusb2: Invalid write control endpoint [ 180.258659][ T9257] CPU: 3 UID: 0 PID: 9257 Comm: syz.1.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.258678][ T9257] Tainted: [L]=SOFTLOCKUP [ 180.258682][ T9257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.258689][ T9257] Call Trace: [ 180.258695][ T9257] [ 180.258700][ T9257] dump_stack_lvl+0x100/0x190 [ 180.259091][ T9257] should_fail_ex.cold+0x5/0xa [ 180.259109][ T9257] should_failslab+0xc2/0x120 [ 180.259169][ T9257] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 180.259186][ T9257] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 180.259212][ T9257] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 180.259233][ T9257] mmu_topup_memory_caches+0x25/0x170 [ 180.259247][ T9257] kvm_mmu_load+0xd6/0x23e0 [ 180.259259][ T9257] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 180.259275][ T9257] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 180.259293][ T9257] ? __pfx_kvm_mmu_load+0x10/0x10 [ 180.259304][ T9257] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 180.259323][ T9257] ? kvm_check_and_inject_events+0x961/0x10c0 [ 180.259336][ T9257] ? record_steal_time+0x410/0xbe0 [ 180.259354][ T9257] vcpu_run+0x39f4/0x5ca0 [ 180.259373][ T9257] ? __pfx_vcpu_run+0x10/0x10 [ 180.259391][ T9257] ? rcu_is_watching+0x12/0xc0 [ 180.259436][ T9257] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 180.259450][ T9257] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 180.259468][ T9257] kvm_vcpu_ioctl+0x730/0x1730 [ 180.259486][ T9257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.259504][ T9257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.259522][ T9257] ? do_vfs_ioctl+0x226/0x13e0 [ 180.259545][ T9257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 180.259562][ T9257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 180.259622][ T9257] ? __fget_files+0x215/0x3d0 [ 180.259634][ T9257] ? hook_file_ioctl_common+0x146/0x410 [ 180.259650][ T9257] ? selinux_file_ioctl+0x139/0x290 [ 180.259667][ T9257] ? selinux_file_ioctl+0xb4/0x290 [ 180.259684][ T9257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.259702][ T9257] __x64_sys_ioctl+0x18e/0x210 [ 180.259721][ T9257] do_syscall_64+0x106/0xf80 [ 180.259813][ T9257] ? clear_bhb_loop+0x40/0x90 [ 180.259828][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.259840][ T9257] RIP: 0033:0x7f7ec839c819 [ 180.259851][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.259861][ T9257] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.259873][ T9257] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 180.259880][ T9257] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 180.259887][ T9257] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 180.259893][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.259900][ T9257] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 180.259914][ T9257] [ 180.354830][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.357932][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.360318][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.363534][ T2492] pvrusb2: Device being rendered inoperable [ 180.367435][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 180.369917][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 180.376931][ T2492] pvrusb2: Attached sub-driver cx25840 [ 180.378821][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.381941][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.406822][ T10] usb 8-1: USB disconnect, device number 22 [ 180.473454][ T53] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 180.493269][ T53] usb 5-1: Invalid ep0 maxpacket: 16 [ 180.617125][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 180.622576][ T53] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 180.642801][ T53] usb 5-1: Invalid ep0 maxpacket: 16 [ 180.644845][ T53] usb usb5-port1: unable to enumerate USB device [ 180.823410][ T9270] fuse: Unknown parameter 'user_i00000000000000000000' [ 181.062575][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 181.101759][ T9292] fuse: Unknown parameter 'user_i00000000000000000000' [ 181.184815][ T9299] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1130'. [ 181.965206][ T29] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 181.968016][ T29] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 181.972492][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.981829][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 181.981840][ T40] audit: type=1400 audit(1775566476.991:947): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.025707][ T40] audit: type=1400 audit(1775566477.041:948): avc: denied { write } for pid=9303 comm="syz.3.1131" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 182.040764][ T9304] FAULT_INJECTION: forcing a failure. [ 182.040764][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 182.045814][ T9304] CPU: 0 UID: 0 PID: 9304 Comm: syz.3.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.045834][ T9304] Tainted: [L]=SOFTLOCKUP [ 182.045838][ T9304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.045846][ T9304] Call Trace: [ 182.045851][ T9304] [ 182.045856][ T9304] dump_stack_lvl+0x100/0x190 [ 182.045882][ T9304] should_fail_ex.cold+0x5/0xa [ 182.045899][ T9304] should_failslab+0xc2/0x120 [ 182.045914][ T9304] __kmalloc_cache_noprof+0x7a/0x6f0 [ 182.045930][ T9304] ? vidtv_psi_pat_program_init+0x4d/0x1f0 [ 182.046020][ T9304] vidtv_psi_pat_program_init+0x4d/0x1f0 [ 182.046037][ T9304] vidtv_channel_si_init+0x2cc/0x18d0 [ 182.046061][ T9304] vidtv_mux_init+0x526/0xbf0 [ 182.046082][ T9304] vidtv_start_feed+0x33e/0x4c0 [ 182.046096][ T9304] ? __pfx_vidtv_start_feed+0x10/0x10 [ 182.046110][ T9304] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 182.046131][ T9304] dmx_section_feed_start_filtering+0x3a8/0x660 [ 182.046220][ T9304] dvb_dmxdev_filter_start+0x767/0xdd0 [ 182.046239][ T9304] dvb_demux_do_ioctl+0xe64/0x1200 [ 182.046256][ T9304] dvb_usercopy+0x167/0x340 [ 182.046266][ T9304] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 182.046279][ T9304] ? __pfx_dvb_usercopy+0x10/0x10 [ 182.046296][ T9304] ? selinux_file_ioctl+0x139/0x290 [ 182.046315][ T9304] ? selinux_file_ioctl+0xb4/0x290 [ 182.046333][ T9304] dvb_demux_ioctl+0x29/0x40 [ 182.046343][ T9304] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 182.046354][ T9304] __x64_sys_ioctl+0x18e/0x210 [ 182.046373][ T9304] do_syscall_64+0x106/0xf80 [ 182.046383][ T9304] ? clear_bhb_loop+0x40/0x90 [ 182.046398][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.046409][ T9304] RIP: 0033:0x7f083619c819 [ 182.046420][ T9304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.046430][ T9304] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.046442][ T9304] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 182.046449][ T9304] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 182.046455][ T9304] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 182.046462][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.046468][ T9304] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 182.046482][ T9304] [ 182.047451][ T9303] vidtv vidtv.0: No streaming. Skipping. [ 182.183882][ T40] audit: type=1400 audit(1775566477.201:949): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 182.195831][ T5291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.199739][ T40] audit: type=1400 audit(1775566477.211:950): avc: denied { ioctl } for pid=9218 comm="syz-executor" path="socket:[37435]" dev="sockfs" ino=37435 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.206209][ T5291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.214132][ T5291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.218586][ T5291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.232179][ T40] audit: type=1400 audit(1775566477.231:951): avc: denied { create } for pid=9306 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.240445][ T40] audit: type=1400 audit(1775566477.231:952): avc: denied { connect } for pid=9306 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.247978][ T40] audit: type=1400 audit(1775566477.231:953): avc: denied { node_bind } for pid=9306 comm="syz.3.1132" saddr=ff01::1 src=28193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 182.248274][ T5291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.257437][ T40] audit: type=1400 audit(1775566477.241:954): avc: denied { create } for pid=9306 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.271271][ T40] audit: type=1400 audit(1775566477.281:955): avc: denied { create } for pid=9306 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.277047][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.280790][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.283845][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.289168][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.292879][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.307312][ T40] audit: type=1400 audit(1775566477.321:956): avc: denied { ioctl } for pid=9218 comm="syz-executor" path="socket:[37435]" dev="sockfs" ino=37435 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.404896][ T9319] netlink: 'syz.3.1135': attribute type 3 has an invalid length. [ 182.407926][ T9319] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 182.427933][ T9321] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1136'. [ 182.431222][ T9321] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1136'. [ 182.443908][ T9323] fuse: Unknown parameter 'user_id00000000000000000000' [ 182.483092][ T9327] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1139'. [ 182.488623][ T9327] syzkaller0: entered promiscuous mode [ 182.490992][ T9327] syzkaller0: entered allmulticast mode [ 182.498459][ T9327] tc action pedit offset must be on 32 bit boundaries [ 182.508730][ T9325] FAULT_INJECTION: forcing a failure. [ 182.508730][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 182.514314][ T9325] CPU: 3 UID: 0 PID: 9325 Comm: syz.3.1138 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.514333][ T9325] Tainted: [L]=SOFTLOCKUP [ 182.514337][ T9325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.514344][ T9325] Call Trace: [ 182.514349][ T9325] [ 182.514353][ T9325] dump_stack_lvl+0x100/0x190 [ 182.514379][ T9325] should_fail_ex.cold+0x5/0xa [ 182.514395][ T9325] should_failslab+0xc2/0x120 [ 182.514408][ T9325] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 182.514427][ T9325] ? vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 182.514446][ T9325] kstrdup+0x51/0xe0 [ 182.514458][ T9325] vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 182.514476][ T9325] vidtv_psi_desc_clone+0x33f/0x5d0 [ 182.514491][ T9325] vidtv_channel_si_init+0x764/0x18d0 [ 182.514514][ T9325] vidtv_mux_init+0x526/0xbf0 [ 182.514533][ T9325] vidtv_start_feed+0x33e/0x4c0 [ 182.514547][ T9325] ? __pfx_vidtv_start_feed+0x10/0x10 [ 182.514565][ T9325] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 182.514586][ T9325] dmx_section_feed_start_filtering+0x3a8/0x660 [ 182.514603][ T9325] ? mark_held_locks+0x40/0x70 [ 182.514616][ T9325] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.514635][ T9325] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 182.514651][ T9325] dvb_dmxdev_filter_stop+0x18b/0x390 [ 182.514666][ T9325] dvb_demux_release+0x92/0x560 [ 182.514679][ T9325] ? evm_file_release+0x133/0x210 [ 182.514698][ T9325] ? __pfx_dvb_demux_release+0x10/0x10 [ 182.514711][ T9325] __fput+0x3ff/0xb40 [ 182.514729][ T9325] fput_close_sync+0x118/0x250 [ 182.514745][ T9325] ? __pfx_fput_close_sync+0x10/0x10 [ 182.514764][ T9325] __x64_sys_close+0x8b/0x120 [ 182.514779][ T9325] do_syscall_64+0x106/0xf80 [ 182.514790][ T9325] ? clear_bhb_loop+0x40/0x90 [ 182.514805][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.514817][ T9325] RIP: 0033:0x7f083619c819 [ 182.514828][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.514838][ T9325] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 182.514849][ T9325] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 182.514856][ T9325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 182.514862][ T9325] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 182.514869][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.514875][ T9325] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 182.514889][ T9325] [ 182.757658][ T9338] input: syz0 as /devices/virtual/input/input20 [ 182.793263][ T9338] sctp: [Deprecated]: syz.0.1143 (pid 9338) Use of int in maxseg socket option. [ 182.793263][ T9338] Use struct sctp_assoc_value instead [ 182.810453][ T9339] FAULT_INJECTION: forcing a failure. [ 182.810453][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 182.810489][ T9339] CPU: 2 UID: 0 PID: 9339 Comm: syz.1.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.810516][ T9339] Tainted: [L]=SOFTLOCKUP [ 182.810523][ T9339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.810534][ T9339] Call Trace: [ 182.810541][ T9339] [ 182.810550][ T9339] dump_stack_lvl+0x100/0x190 [ 182.810584][ T9339] should_fail_ex.cold+0x5/0xa [ 182.810605][ T9339] should_failslab+0xc2/0x120 [ 182.810618][ T9339] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 182.810636][ T9339] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 182.810657][ T9339] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 182.810678][ T9339] mmu_topup_memory_caches+0x25/0x170 [ 182.810692][ T9339] kvm_mmu_load+0xd6/0x23e0 [ 182.810704][ T9339] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 182.810720][ T9339] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 182.810742][ T9339] ? __pfx_kvm_mmu_load+0x10/0x10 [ 182.810753][ T9339] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 182.810772][ T9339] ? kvm_check_and_inject_events+0x961/0x10c0 [ 182.810785][ T9339] ? record_steal_time+0x410/0xbe0 [ 182.810803][ T9339] vcpu_run+0x39f4/0x5ca0 [ 182.810822][ T9339] ? __pfx_vcpu_run+0x10/0x10 [ 182.810840][ T9339] ? rcu_is_watching+0x12/0xc0 [ 182.810856][ T9339] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 182.810870][ T9339] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 182.810888][ T9339] kvm_vcpu_ioctl+0x730/0x1730 [ 182.810906][ T9339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.810923][ T9339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.810940][ T9339] ? do_vfs_ioctl+0x226/0x13e0 [ 182.810958][ T9339] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.810975][ T9339] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.810999][ T9339] ? __fget_files+0x215/0x3d0 [ 182.811010][ T9339] ? hook_file_ioctl_common+0x146/0x410 [ 182.811027][ T9339] ? selinux_file_ioctl+0x139/0x290 [ 182.811044][ T9339] ? selinux_file_ioctl+0xb4/0x290 [ 182.811068][ T9339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.811096][ T9339] __x64_sys_ioctl+0x18e/0x210 [ 182.811124][ T9339] do_syscall_64+0x106/0xf80 [ 182.811144][ T9339] ? clear_bhb_loop+0x40/0x90 [ 182.811167][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.811185][ T9339] RIP: 0033:0x7f7ec839c819 [ 182.811218][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.811235][ T9339] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.811253][ T9339] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 182.811279][ T9339] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 182.811291][ T9339] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 182.811302][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.811314][ T9339] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 182.811338][ T9339] [ 182.831094][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 182.983692][ T9350] fuse: Unknown parameter 'user_id00000000000000000000' [ 182.992012][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.994452][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.996819][ T9218] bridge_slave_0: entered allmulticast mode [ 182.999591][ T9218] bridge_slave_0: entered promiscuous mode [ 183.013292][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.016043][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.018805][ T9218] bridge_slave_1: entered allmulticast mode [ 183.021692][ T9218] bridge_slave_1: entered promiscuous mode [ 183.063715][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.079719][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.114035][ T9218] team0: Port device team_slave_0 added [ 183.118459][ T9218] team0: Port device team_slave_1 added [ 183.157901][ T755] bridge_slave_1: left allmulticast mode [ 183.160999][ T755] bridge_slave_1: left promiscuous mode [ 183.168214][ T755] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.175609][ T755] bridge_slave_0: left allmulticast mode [ 183.177968][ T755] bridge_slave_0: left promiscuous mode [ 183.180434][ T755] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.256393][ T755] dvmrp0 (unregistering): left allmulticast mode [ 183.378963][ T9371] fuse: Unknown parameter 'user_id00000000000000000000' [ 183.469624][ T755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.474557][ T755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.478270][ T755] bond0 (unregistering): Released all slaves [ 183.483900][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.486377][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.495480][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.500251][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 183.513767][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.516251][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.527060][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.560283][ T755] tipc: Left network mode [ 183.575557][ T9218] hsr_slave_0: entered promiscuous mode [ 183.578100][ T9218] hsr_slave_1: entered promiscuous mode [ 183.581465][ T9218] debugfs: 'hsr0' already exists in 'hsr' [ 183.584743][ T9218] Cannot create hsr debugfs directory [ 183.664929][ T9386] openvswitch: netlink: IP tunnel dst address not specified [ 183.821862][ T9218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.831665][ T9218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.839514][ T9218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.846302][ T9218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.889080][ T9403] FAULT_INJECTION: forcing a failure. [ 183.889080][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 183.911502][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.0.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.911538][ T9403] Tainted: [L]=SOFTLOCKUP [ 183.911546][ T9403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.911558][ T9403] Call Trace: [ 183.911566][ T9403] [ 183.911575][ T9403] dump_stack_lvl+0x100/0x190 [ 183.911621][ T9403] should_fail_ex.cold+0x5/0xa [ 183.911647][ T9403] should_failslab+0xc2/0x120 [ 183.911669][ T9403] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 183.911699][ T9403] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 183.911730][ T9403] kstrdup+0x51/0xe0 [ 183.911750][ T9403] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 183.911777][ T9403] vidtv_psi_desc_clone+0x496/0x5d0 [ 183.911807][ T9403] vidtv_channel_si_init+0x4b8/0x18d0 [ 183.911847][ T9403] vidtv_mux_init+0x526/0xbf0 [ 183.911879][ T9403] vidtv_start_feed+0x33e/0x4c0 [ 183.911900][ T9403] ? __pfx_vidtv_start_feed+0x10/0x10 [ 183.911922][ T9403] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 183.911958][ T9403] dmx_section_feed_start_filtering+0x3a8/0x660 [ 183.911990][ T9403] dvb_dmxdev_filter_start+0x767/0xdd0 [ 183.912018][ T9403] dvb_demux_do_ioctl+0xe64/0x1200 [ 183.912045][ T9403] dvb_usercopy+0x167/0x340 [ 183.912062][ T9403] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 183.912084][ T9403] ? __pfx_dvb_usercopy+0x10/0x10 [ 183.912114][ T9403] ? selinux_file_ioctl+0x139/0x290 [ 183.912142][ T9403] ? selinux_file_ioctl+0xb4/0x290 [ 183.912168][ T9403] dvb_demux_ioctl+0x29/0x40 [ 183.912183][ T9403] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 183.912200][ T9403] __x64_sys_ioctl+0x18e/0x210 [ 183.912227][ T9403] do_syscall_64+0x106/0xf80 [ 183.912262][ T9403] ? clear_bhb_loop+0x40/0x90 [ 183.912285][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.912304][ T9403] RIP: 0033:0x7f8c6a19c819 [ 183.912321][ T9403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.912339][ T9403] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.912357][ T9403] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 183.912421][ T9403] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 183.912435][ T9403] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 183.912447][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.912461][ T9403] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 183.912493][ T9403] [ 183.948413][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.956675][ T9401] vidtv vidtv.0: No streaming. Skipping. [ 183.966613][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.012388][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 184.034282][ T9408] fuse: Bad value for 'fd' [ 184.054256][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.056718][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.072720][ T755] hsr_slave_0: left promiscuous mode [ 184.076215][ T755] hsr_slave_1: left promiscuous mode [ 184.079464][ T755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.092631][ T755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.154699][ T9415] 9pnet_virtio: no channels available for device syz [ 184.182344][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 184.185235][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 184.190058][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 184.193291][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.196095][ T10] usb 8-1: Product: syz [ 184.197487][ T10] usb 8-1: Manufacturer: syz [ 184.199118][ T10] usb 8-1: SerialNumber: syz [ 184.202016][ T755] team0 (unregistering): Port device team_slave_1 removed [ 184.203835][ T10] usb 8-1: config 0 descriptor?? [ 184.207422][ T9391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.211428][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 184.215612][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 184.224043][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 184.227155][ T755] team0 (unregistering): Port device team_slave_0 removed [ 184.313848][ T9412] bond0: Error: Cannot enslave bond to itself. [ 184.321378][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.324437][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.363352][ T5291] Bluetooth: hci4: command tx timeout [ 184.529656][ T9434] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 184.532367][ T9434] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.535819][ T9434] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.538875][ T9434] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.551017][ C2] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 184.561845][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.573953][ T29] usb 8-1: USB disconnect, device number 23 [ 184.715710][ T9451] FAULT_INJECTION: forcing a failure. [ 184.715710][ T9451] name failslab, interval 1, probability 0, space 0, times 0 [ 184.722335][ T9451] CPU: 2 UID: 0 PID: 9451 Comm: syz.1.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.722355][ T9451] Tainted: [L]=SOFTLOCKUP [ 184.722359][ T9451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.722366][ T9451] Call Trace: [ 184.722371][ T9451] [ 184.722377][ T9451] dump_stack_lvl+0x100/0x190 [ 184.722403][ T9451] should_fail_ex.cold+0x5/0xa [ 184.722420][ T9451] should_failslab+0xc2/0x120 [ 184.722433][ T9451] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 184.722452][ T9451] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 184.722477][ T9451] kstrdup+0x51/0xe0 [ 184.722490][ T9451] vidtv_psi_network_name_desc_init+0x183/0x310 [ 184.722507][ T9451] vidtv_psi_nit_table_init+0x291/0x5f0 [ 184.722523][ T9451] ? kasan_save_track+0x14/0x30 [ 184.722542][ T9451] vidtv_channel_si_init+0xcd0/0x18d0 [ 184.722565][ T9451] vidtv_mux_init+0x526/0xbf0 [ 184.722585][ T9451] vidtv_start_feed+0x33e/0x4c0 [ 184.722598][ T9451] ? __pfx_vidtv_start_feed+0x10/0x10 [ 184.722611][ T9451] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 184.722632][ T9451] dmx_section_feed_start_filtering+0x3a8/0x660 [ 184.722650][ T9451] ? mark_held_locks+0x40/0x70 [ 184.722662][ T9451] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.722682][ T9451] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 184.722698][ T9451] dvb_dmxdev_filter_stop+0x18b/0x390 [ 184.722713][ T9451] dvb_demux_release+0x92/0x560 [ 184.722726][ T9451] ? evm_file_release+0x133/0x210 [ 184.722746][ T9451] ? __pfx_dvb_demux_release+0x10/0x10 [ 184.722759][ T9451] __fput+0x3ff/0xb40 [ 184.722776][ T9451] fput_close_sync+0x118/0x250 [ 184.722792][ T9451] ? __pfx_fput_close_sync+0x10/0x10 [ 184.722811][ T9451] __x64_sys_close+0x8b/0x120 [ 184.722827][ T9451] do_syscall_64+0x106/0xf80 [ 184.722838][ T9451] ? clear_bhb_loop+0x40/0x90 [ 184.722852][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.722864][ T9451] RIP: 0033:0x7f7ec839c819 [ 184.722874][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.722886][ T9451] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 184.722897][ T9451] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 184.722905][ T9451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 184.722911][ T9451] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 184.722917][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.722924][ T9451] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 184.722938][ T9451] [ 184.723658][ T9450] vidtv vidtv.0: No streaming. Skipping. [ 184.738899][ T9218] veth0_vlan: entered promiscuous mode [ 184.785417][ T9458] fuse: Bad value for 'fd' [ 184.794840][ T9218] veth1_vlan: entered promiscuous mode [ 184.835328][ T9218] veth0_macvtap: entered promiscuous mode [ 184.839516][ T9218] veth1_macvtap: entered promiscuous mode [ 184.848168][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.854876][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.862943][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.866619][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.869757][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.873921][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.924562][ T755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.927990][ T755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.954877][ T755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.957588][ T755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.008819][ T9467] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 185.052868][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 185.055870][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 185.125552][ T9473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1173'. [ 185.131257][ T9473] syzkaller0: entered promiscuous mode [ 185.135108][ T9473] syzkaller0: entered allmulticast mode [ 185.139844][ T9473] tc action pedit offset must be on 32 bit boundaries [ 185.258365][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 185.262757][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 185.266091][ T9483] netlink: 'syz.4.1177': attribute type 7 has an invalid length. [ 185.291754][ T9485] fuse: Bad value for 'fd' [ 185.346379][ T9488] FAULT_INJECTION: forcing a failure. [ 185.346379][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 185.351490][ T9488] CPU: 1 UID: 0 PID: 9488 Comm: syz.3.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.351510][ T9488] Tainted: [L]=SOFTLOCKUP [ 185.351514][ T9488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.351520][ T9488] Call Trace: [ 185.351527][ T9488] [ 185.351533][ T9488] dump_stack_lvl+0x100/0x190 [ 185.351557][ T9488] should_fail_ex.cold+0x5/0xa [ 185.351574][ T9488] should_failslab+0xc2/0x120 [ 185.351586][ T9488] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 185.351603][ T9488] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 185.351624][ T9488] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 185.351646][ T9488] mmu_topup_memory_caches+0x25/0x170 [ 185.351661][ T9488] kvm_mmu_load+0xd6/0x23e0 [ 185.351673][ T9488] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 185.351688][ T9488] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.351705][ T9488] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.351717][ T9488] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 185.351734][ T9488] ? kvm_check_and_inject_events+0x961/0x10c0 [ 185.351747][ T9488] ? record_steal_time+0x410/0xbe0 [ 185.351765][ T9488] vcpu_run+0x39f4/0x5ca0 [ 185.351784][ T9488] ? __pfx_vcpu_run+0x10/0x10 [ 185.351801][ T9488] ? rcu_is_watching+0x12/0xc0 [ 185.351822][ T9488] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.351835][ T9488] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.351852][ T9488] kvm_vcpu_ioctl+0x730/0x1730 [ 185.351870][ T9488] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.351887][ T9488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.351904][ T9488] ? do_vfs_ioctl+0x226/0x13e0 [ 185.351922][ T9488] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.351939][ T9488] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.351962][ T9488] ? __fget_files+0x215/0x3d0 [ 185.351973][ T9488] ? hook_file_ioctl_common+0x146/0x410 [ 185.351989][ T9488] ? selinux_file_ioctl+0x139/0x290 [ 185.352005][ T9488] ? selinux_file_ioctl+0xb4/0x290 [ 185.352022][ T9488] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.352039][ T9488] __x64_sys_ioctl+0x18e/0x210 [ 185.352057][ T9488] do_syscall_64+0x106/0xf80 [ 185.352069][ T9488] ? clear_bhb_loop+0x40/0x90 [ 185.352084][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.352095][ T9488] RIP: 0033:0x7f083619c819 [ 185.352107][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.352118][ T9488] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.352129][ T9488] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 185.352135][ T9488] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.352142][ T9488] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 185.352148][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.352154][ T9488] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 185.352168][ T9488] [ 185.558668][ T9493] No such timeout policy "syz1" [ 185.652208][ T9499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9499 comm=syz.4.1184 [ 185.660741][ T9499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9499 comm=syz.4.1184 [ 185.686923][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 185.732830][ T9505] binder: 9504:9505 ioctl 4018620d 0 returned -22 [ 185.733088][ T9507] fuse: Unknown parameter '0x0000000000000003' [ 185.735194][ T9505] binder: 9504:9505 ioctl c0306201 200000000240 returned -11 [ 185.816493][ T9514] FAULT_INJECTION: forcing a failure. [ 185.816493][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 185.822213][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.1.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.822257][ T9514] Tainted: [L]=SOFTLOCKUP [ 185.822264][ T9514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.822275][ T9514] Call Trace: [ 185.822282][ T9514] [ 185.822289][ T9514] dump_stack_lvl+0x100/0x190 [ 185.822324][ T9514] should_fail_ex.cold+0x5/0xa [ 185.822348][ T9514] should_failslab+0xc2/0x120 [ 185.822368][ T9514] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 185.822396][ T9514] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 185.822424][ T9514] kstrdup+0x51/0xe0 [ 185.822442][ T9514] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 185.822467][ T9514] vidtv_psi_desc_clone+0x496/0x5d0 [ 185.822490][ T9514] vidtv_channel_si_init+0x4b8/0x18d0 [ 185.822522][ T9514] vidtv_mux_init+0x526/0xbf0 [ 185.822550][ T9514] vidtv_start_feed+0x33e/0x4c0 [ 185.822569][ T9514] ? __pfx_vidtv_start_feed+0x10/0x10 [ 185.822589][ T9514] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 185.822621][ T9514] dmx_section_feed_start_filtering+0x3a8/0x660 [ 185.822652][ T9514] dvb_dmxdev_filter_start+0x767/0xdd0 [ 185.822678][ T9514] dvb_demux_do_ioctl+0xe64/0x1200 [ 185.822704][ T9514] dvb_usercopy+0x167/0x340 [ 185.822720][ T9514] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 185.822741][ T9514] ? __pfx_dvb_usercopy+0x10/0x10 [ 185.822767][ T9514] ? selinux_file_ioctl+0x139/0x290 [ 185.822793][ T9514] ? selinux_file_ioctl+0xb4/0x290 [ 185.822825][ T9514] dvb_demux_ioctl+0x29/0x40 [ 185.822840][ T9514] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 185.822857][ T9514] __x64_sys_ioctl+0x18e/0x210 [ 185.822884][ T9514] do_syscall_64+0x106/0xf80 [ 185.822901][ T9514] ? clear_bhb_loop+0x40/0x90 [ 185.822922][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.822939][ T9514] RIP: 0033:0x7f7ec839c819 [ 185.822955][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.822969][ T9514] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.822987][ T9514] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 185.822997][ T9514] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 185.823006][ T9514] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 185.823017][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.823026][ T9514] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 185.823049][ T9514] [ 185.952424][ T9513] vidtv vidtv.0: No streaming. Skipping. [ 186.011904][ T9522] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1193' resets device [ 186.071718][ T9535] fuse: Unknown parameter '0x0000000000000003' [ 186.163549][ T9539] FAULT_INJECTION: forcing a failure. [ 186.163549][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 186.167831][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.1.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.167851][ T9539] Tainted: [L]=SOFTLOCKUP [ 186.167855][ T9539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.167862][ T9539] Call Trace: [ 186.167868][ T9539] [ 186.167874][ T9539] dump_stack_lvl+0x100/0x190 [ 186.167900][ T9539] should_fail_ex.cold+0x5/0xa [ 186.167916][ T9539] should_failslab+0xc2/0x120 [ 186.167930][ T9539] __kmalloc_cache_noprof+0x7a/0x6f0 [ 186.167945][ T9539] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 186.167965][ T9539] vidtv_psi_service_list_desc_init+0x52/0x550 [ 186.167983][ T9539] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 186.167999][ T9539] ? kasan_save_track+0x14/0x30 [ 186.168017][ T9539] vidtv_channel_si_init+0xcd0/0x18d0 [ 186.168040][ T9539] vidtv_mux_init+0x526/0xbf0 [ 186.168058][ T9539] vidtv_start_feed+0x33e/0x4c0 [ 186.168072][ T9539] ? __pfx_vidtv_start_feed+0x10/0x10 [ 186.168085][ T9539] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 186.168110][ T9539] dmx_section_feed_start_filtering+0x3a8/0x660 [ 186.168128][ T9539] ? mark_held_locks+0x40/0x70 [ 186.168139][ T9539] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.168162][ T9539] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 186.168178][ T9539] dvb_dmxdev_filter_stop+0x18b/0x390 [ 186.168193][ T9539] dvb_demux_release+0x92/0x560 [ 186.168205][ T9539] ? evm_file_release+0x133/0x210 [ 186.168226][ T9539] ? __pfx_dvb_demux_release+0x10/0x10 [ 186.168243][ T9539] __fput+0x3ff/0xb40 [ 186.168282][ T9539] fput_close_sync+0x118/0x250 [ 186.168305][ T9539] ? __pfx_fput_close_sync+0x10/0x10 [ 186.168333][ T9539] __x64_sys_close+0x8b/0x120 [ 186.168355][ T9539] do_syscall_64+0x106/0xf80 [ 186.168370][ T9539] ? clear_bhb_loop+0x40/0x90 [ 186.168392][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.168410][ T9539] RIP: 0033:0x7f7ec839c819 [ 186.168425][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.168440][ T9539] RSP: 002b:00007f7ec9300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 186.168455][ T9539] RAX: ffffffffffffffda RBX: 00007f7ec8615fa0 RCX: 00007f7ec839c819 [ 186.168465][ T9539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 186.168473][ T9539] RBP: 00007f7ec9300090 R08: 0000000000000000 R09: 0000000000000000 [ 186.168481][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.168490][ T9539] R13: 00007f7ec8616038 R14: 00007f7ec8615fa0 R15: 00007ffe04537298 [ 186.168512][ T9539] [ 186.169440][ T9538] vidtv vidtv.0: No streaming. Skipping. [ 186.291888][ T9546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1203'. [ 186.297142][ T9546] syzkaller0: entered promiscuous mode [ 186.299070][ T9546] syzkaller0: entered allmulticast mode [ 186.305903][ T9546] tc action pedit offset must be on 32 bit boundaries [ 186.410328][ T9557] fuse: Unknown parameter '0x0000000000000003' [ 186.442467][ T5291] Bluetooth: hci4: command tx timeout [ 186.459888][ T9562] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 186.509767][ T9568] netlink: 'syz.1.1211': attribute type 10 has an invalid length. [ 186.665168][ T9582] FAULT_INJECTION: forcing a failure. [ 186.665168][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 186.669183][ T9582] CPU: 3 UID: 0 PID: 9582 Comm: syz.4.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.669201][ T9582] Tainted: [L]=SOFTLOCKUP [ 186.669205][ T9582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.669212][ T9582] Call Trace: [ 186.669217][ T9582] [ 186.669222][ T9582] dump_stack_lvl+0x100/0x190 [ 186.669247][ T9582] should_fail_ex.cold+0x5/0xa [ 186.669263][ T9582] should_failslab+0xc2/0x120 [ 186.669276][ T9582] __kvmalloc_node_noprof+0xfa/0xa00 [ 186.669293][ T9582] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 186.669311][ T9582] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 186.669331][ T9582] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 186.669352][ T9582] mmu_topup_memory_caches+0xbc/0x170 [ 186.669367][ T9582] kvm_mmu_load+0xd6/0x23e0 [ 186.669379][ T9582] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 186.669395][ T9582] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 186.669413][ T9582] ? __pfx_kvm_mmu_load+0x10/0x10 [ 186.669424][ T9582] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 186.669442][ T9582] ? kvm_check_and_inject_events+0x961/0x10c0 [ 186.669455][ T9582] ? record_steal_time+0x410/0xbe0 [ 186.669477][ T9582] vcpu_run+0x39f4/0x5ca0 [ 186.669496][ T9582] ? __pfx_vcpu_run+0x10/0x10 [ 186.669513][ T9582] ? rcu_is_watching+0x12/0xc0 [ 186.669531][ T9582] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 186.669544][ T9582] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 186.669561][ T9582] kvm_vcpu_ioctl+0x730/0x1730 [ 186.669578][ T9582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.669595][ T9582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.669613][ T9582] ? do_vfs_ioctl+0x226/0x13e0 [ 186.669630][ T9582] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.669647][ T9582] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 186.669670][ T9582] ? __fget_files+0x215/0x3d0 [ 186.669682][ T9582] ? hook_file_ioctl_common+0x146/0x410 [ 186.669698][ T9582] ? selinux_file_ioctl+0x139/0x290 [ 186.669714][ T9582] ? selinux_file_ioctl+0xb4/0x290 [ 186.669731][ T9582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.669748][ T9582] __x64_sys_ioctl+0x18e/0x210 [ 186.669767][ T9582] do_syscall_64+0x106/0xf80 [ 186.669780][ T9582] ? clear_bhb_loop+0x40/0x90 [ 186.669795][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.669807][ T9582] RIP: 0033:0x7f5d1a79c819 [ 186.669817][ T9582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.669828][ T9582] RSP: 002b:00007f5d1b638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.669839][ T9582] RAX: ffffffffffffffda RBX: 00007f5d1aa16090 RCX: 00007f5d1a79c819 [ 186.669846][ T9582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 186.669852][ T9582] RBP: 00007f5d1b638090 R08: 0000000000000000 R09: 0000000000000000 [ 186.669858][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.669864][ T9582] R13: 00007f5d1aa16128 R14: 00007f5d1aa16090 R15: 00007ffcd12ec4c8 [ 186.669878][ T9582] [ 186.834076][ T9586] fuse: Unknown parameter '0x0000000000000003' [ 186.882078][ T9588] hugetlbfs: syz.3.1218 (9588): Using mlock ulimits for SHM_HUGETLB is obsolete [ 186.920856][ T9592] FAULT_INJECTION: forcing a failure. [ 186.920856][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 186.925785][ T9592] CPU: 2 UID: 0 PID: 9592 Comm: syz.4.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.925811][ T9592] Tainted: [L]=SOFTLOCKUP [ 186.925815][ T9592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.925823][ T9592] Call Trace: [ 186.925829][ T9592] [ 186.925836][ T9592] dump_stack_lvl+0x100/0x190 [ 186.925871][ T9592] should_fail_ex.cold+0x5/0xa [ 186.925895][ T9592] should_failslab+0xc2/0x120 [ 186.925911][ T9592] __kmalloc_cache_noprof+0x7a/0x6f0 [ 186.925933][ T9592] ? vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 186.925957][ T9592] ? vidtv_psi_eit_event_init+0x352/0x400 [ 186.925982][ T9592] vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 186.925999][ T9592] vidtv_psi_desc_clone+0x33f/0x5d0 [ 186.926015][ T9592] vidtv_channel_si_init+0x764/0x18d0 [ 186.926036][ T9592] vidtv_mux_init+0x526/0xbf0 [ 186.926054][ T9592] vidtv_start_feed+0x33e/0x4c0 [ 186.926067][ T9592] ? __pfx_vidtv_start_feed+0x10/0x10 [ 186.926080][ T9592] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 186.926100][ T9592] dmx_section_feed_start_filtering+0x3a8/0x660 [ 186.926121][ T9592] dvb_dmxdev_filter_start+0x767/0xdd0 [ 186.926137][ T9592] dvb_demux_do_ioctl+0xe64/0x1200 [ 186.926180][ T9592] dvb_usercopy+0x167/0x340 [ 186.926192][ T9592] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 186.926205][ T9592] ? __pfx_dvb_usercopy+0x10/0x10 [ 186.926223][ T9592] ? selinux_file_ioctl+0x139/0x290 [ 186.926250][ T9592] ? selinux_file_ioctl+0xb4/0x290 [ 186.926268][ T9592] dvb_demux_ioctl+0x29/0x40 [ 186.926278][ T9592] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 186.926289][ T9592] __x64_sys_ioctl+0x18e/0x210 [ 186.926312][ T9592] do_syscall_64+0x106/0xf80 [ 186.926329][ T9592] ? clear_bhb_loop+0x40/0x90 [ 186.926348][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.926363][ T9592] RIP: 0033:0x7f5d1a79c819 [ 186.926378][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.926393][ T9592] RSP: 002b:00007f5d1b659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.926410][ T9592] RAX: ffffffffffffffda RBX: 00007f5d1aa15fa0 RCX: 00007f5d1a79c819 [ 186.926417][ T9592] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 186.926425][ T9592] RBP: 00007f5d1b659090 R08: 0000000000000000 R09: 0000000000000000 [ 186.926431][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.926440][ T9592] R13: 00007f5d1aa16038 R14: 00007f5d1aa15fa0 R15: 00007ffcd12ec4c8 [ 186.926465][ T9592] [ 187.048161][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 187.048218][ T40] audit: type=1400 audit(1775566482.061:1268): avc: denied { write } for pid=9604 comm="syz.3.1223" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.056406][ T9605] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1223' resets device [ 187.091550][ T40] audit: type=1400 audit(1775566482.101:1269): avc: denied { create } for pid=9606 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.098786][ T40] audit: type=1400 audit(1775566482.111:1270): avc: denied { write } for pid=9606 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.105678][ T40] audit: type=1400 audit(1775566482.111:1271): avc: denied { read } for pid=9606 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.112783][ T40] audit: type=1400 audit(1775566482.111:1272): avc: denied { ioctl } for pid=9606 comm="syz.4.1224" path="socket:[40295]" dev="sockfs" ino=40295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.332367][ T8429] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.470137][ T9614] fuse: Unknown parameter '0x0000000000000003' [ 187.482348][ T8429] usb 9-1: Using ep0 maxpacket: 8 [ 187.494656][ T8429] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 187.499249][ T8429] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.504733][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.509558][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.514738][ T9616] netlink: 'syz.0.1227': attribute type 39 has an invalid length. [ 187.518906][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.525155][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.529837][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 187.535861][ T8429] usb 9-1: config 168 interface 0 has no altsetting 0 [ 187.539723][ T8429] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 187.543236][ T8429] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.547744][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.552430][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.557176][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.561786][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.567319][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 187.572145][ T8429] usb 9-1: config 168 interface 0 has no altsetting 0 [ 187.576039][ T8429] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 187.578917][ T8429] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.584029][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.588724][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.593868][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.598530][ T8429] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.603378][ T8429] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 187.608815][ T8429] usb 9-1: config 168 interface 0 has no altsetting 0 [ 187.620145][ T8429] usb 9-1: string descriptor 0 read error: -22 [ 187.623268][ T8429] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.627045][ T8429] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.637566][ T8429] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 187.762314][ T40] audit: type=1400 audit(1775566482.771:1273): avc: denied { read write } for pid=9619 comm="syz.0.1229" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 187.772786][ T40] audit: type=1400 audit(1775566482.771:1274): avc: denied { open } for pid=9619 comm="syz.0.1229" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 187.792630][ T40] audit: type=1400 audit(1775566482.781:1275): avc: denied { mount } for pid=9619 comm="syz.0.1229" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 187.799695][ T40] audit: type=1400 audit(1775566482.801:1276): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 187.810284][ T40] audit: type=1400 audit(1775566482.821:1277): avc: denied { write } for pid=9621 comm="syz.0.1231" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.853421][ T9623] netlink: 'syz.1.1230': attribute type 9 has an invalid length. [ 187.856784][ T9623] netlink: 'syz.1.1230': attribute type 11 has an invalid length. [ 187.857948][ T9624] FAULT_INJECTION: forcing a failure. [ 187.857948][ T9624] name failslab, interval 1, probability 0, space 0, times 0 [ 187.860041][ T9623] netlink: 'syz.1.1230': attribute type 12 has an invalid length. [ 187.867622][ T9624] CPU: 2 UID: 0 PID: 9624 Comm: syz.0.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.867641][ T9624] Tainted: [L]=SOFTLOCKUP [ 187.867645][ T9624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.867652][ T9624] Call Trace: [ 187.867657][ T9624] [ 187.867661][ T9624] dump_stack_lvl+0x100/0x190 [ 187.867687][ T9624] should_fail_ex.cold+0x5/0xa [ 187.867704][ T9624] should_failslab+0xc2/0x120 [ 187.867732][ T9624] __kmalloc_cache_noprof+0x7a/0x6f0 [ 187.867748][ T9624] ? vidtv_psi_service_list_desc_init+0xf3/0x550 [ 187.867769][ T9624] vidtv_psi_service_list_desc_init+0xf3/0x550 [ 187.867787][ T9624] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 187.867805][ T9624] ? kasan_save_track+0x14/0x30 [ 187.867824][ T9624] vidtv_channel_si_init+0xcd0/0x18d0 [ 187.867846][ T9624] vidtv_mux_init+0x526/0xbf0 [ 187.867865][ T9624] vidtv_start_feed+0x33e/0x4c0 [ 187.867878][ T9624] ? __pfx_vidtv_start_feed+0x10/0x10 [ 187.867891][ T9624] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 187.867912][ T9624] dmx_section_feed_start_filtering+0x3a8/0x660 [ 187.867932][ T9624] ? mark_held_locks+0x40/0x70 [ 187.867949][ T9624] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.867978][ T9624] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 187.868000][ T9624] dvb_dmxdev_filter_stop+0x18b/0x390 [ 187.868023][ T9624] dvb_demux_release+0x92/0x560 [ 187.868041][ T9624] ? evm_file_release+0x133/0x210 [ 187.868070][ T9624] ? __pfx_dvb_demux_release+0x10/0x10 [ 187.868088][ T9624] __fput+0x3ff/0xb40 [ 187.868115][ T9624] fput_close_sync+0x118/0x250 [ 187.868139][ T9624] ? __pfx_fput_close_sync+0x10/0x10 [ 187.868169][ T9624] __x64_sys_close+0x8b/0x120 [ 187.868193][ T9624] do_syscall_64+0x106/0xf80 [ 187.868207][ T9624] ? clear_bhb_loop+0x40/0x90 [ 187.868229][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.868246][ T9624] RIP: 0033:0x7f8c6a19c819 [ 187.868262][ T9624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.868278][ T9624] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 187.868295][ T9624] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 187.868307][ T9624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.868317][ T9624] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 187.868328][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.868338][ T9624] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 187.868361][ T9624] [ 187.870018][ T9621] vidtv vidtv.0: No streaming. Skipping. [ 187.913585][ T9] usb 9-1: USB disconnect, device number 2 [ 187.997492][ T9630] syzkaller0: entered promiscuous mode [ 187.999697][ T9630] syzkaller0: entered allmulticast mode [ 188.007307][ T9630] tc action pedit offset must be on 32 bit boundaries [ 188.061640][ T9634] fuse: Unknown parameter '0x0000000000000003' [ 188.126831][ T9640] netlink: 'syz.3.1239': attribute type 10 has an invalid length. [ 188.197337][ T9643] 9pnet_fd: p9_fd_create_unix (9643): problem connecting socket: ./file0: -512 [ 188.331859][ T9653] netlink: 'syz.3.1243': attribute type 2 has an invalid length. [ 188.400569][ T9660] fuse: Unknown parameter 'fd0x0000000000000003' [ 188.486009][ T9663] FAULT_INJECTION: forcing a failure. [ 188.486009][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 188.490005][ T9663] CPU: 2 UID: 0 PID: 9663 Comm: syz.0.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.490022][ T9663] Tainted: [L]=SOFTLOCKUP [ 188.490026][ T9663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.490033][ T9663] Call Trace: [ 188.490040][ T9663] [ 188.490045][ T9663] dump_stack_lvl+0x100/0x190 [ 188.490069][ T9663] should_fail_ex.cold+0x5/0xa [ 188.490085][ T9663] should_failslab+0xc2/0x120 [ 188.490099][ T9663] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 188.490115][ T9663] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 188.490136][ T9663] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 188.490174][ T9663] mmu_topup_memory_caches+0x25/0x170 [ 188.490188][ T9663] kvm_mmu_load+0xd6/0x23e0 [ 188.490200][ T9663] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 188.490216][ T9663] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 188.490234][ T9663] ? __pfx_kvm_mmu_load+0x10/0x10 [ 188.490245][ T9663] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 188.490263][ T9663] ? kvm_check_and_inject_events+0x961/0x10c0 [ 188.490276][ T9663] ? record_steal_time+0x410/0xbe0 [ 188.490294][ T9663] vcpu_run+0x39f4/0x5ca0 [ 188.490312][ T9663] ? __pfx_vcpu_run+0x10/0x10 [ 188.490330][ T9663] ? rcu_is_watching+0x12/0xc0 [ 188.490347][ T9663] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.490360][ T9663] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.490377][ T9663] kvm_vcpu_ioctl+0x730/0x1730 [ 188.490395][ T9663] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.490412][ T9663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.490429][ T9663] ? do_vfs_ioctl+0x226/0x13e0 [ 188.490447][ T9663] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.490464][ T9663] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.490487][ T9663] ? __fget_files+0x215/0x3d0 [ 188.490499][ T9663] ? hook_file_ioctl_common+0x146/0x410 [ 188.490515][ T9663] ? selinux_file_ioctl+0x139/0x290 [ 188.490531][ T9663] ? selinux_file_ioctl+0xb4/0x290 [ 188.490548][ T9663] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.490565][ T9663] __x64_sys_ioctl+0x18e/0x210 [ 188.490583][ T9663] do_syscall_64+0x106/0xf80 [ 188.490595][ T9663] ? clear_bhb_loop+0x40/0x90 [ 188.490609][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.490620][ T9663] RIP: 0033:0x7f8c6a19c819 [ 188.490630][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.490640][ T9663] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.490652][ T9663] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 188.490659][ T9663] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 188.490665][ T9663] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 188.490671][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.490678][ T9663] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 188.490692][ T9663] [ 188.532384][ T5291] Bluetooth: hci4: command tx timeout [ 188.814054][ T9671] FAULT_INJECTION: forcing a failure. [ 188.814054][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 188.818583][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.4.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.818611][ T9671] Tainted: [L]=SOFTLOCKUP [ 188.818617][ T9671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.818627][ T9671] Call Trace: [ 188.818634][ T9671] [ 188.818640][ T9671] dump_stack_lvl+0x100/0x190 [ 188.818667][ T9671] should_fail_ex.cold+0x5/0xa [ 188.818683][ T9671] should_failslab+0xc2/0x120 [ 188.818702][ T9671] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 188.818720][ T9671] ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 188.818740][ T9671] kstrdup+0x51/0xe0 [ 188.818752][ T9671] vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 188.818771][ T9671] vidtv_psi_desc_clone+0x33f/0x5d0 [ 188.818786][ T9671] vidtv_channel_si_init+0x764/0x18d0 [ 188.818809][ T9671] vidtv_mux_init+0x526/0xbf0 [ 188.818828][ T9671] vidtv_start_feed+0x33e/0x4c0 [ 188.818841][ T9671] ? __pfx_vidtv_start_feed+0x10/0x10 [ 188.818854][ T9671] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 188.818874][ T9671] dmx_section_feed_start_filtering+0x3a8/0x660 [ 188.818895][ T9671] dvb_dmxdev_filter_start+0x767/0xdd0 [ 188.818912][ T9671] dvb_demux_do_ioctl+0xe64/0x1200 [ 188.818929][ T9671] dvb_usercopy+0x167/0x340 [ 188.818939][ T9671] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 188.818952][ T9671] ? __pfx_dvb_usercopy+0x10/0x10 [ 188.818969][ T9671] ? selinux_file_ioctl+0x139/0x290 [ 188.818987][ T9671] ? selinux_file_ioctl+0xb4/0x290 [ 188.819005][ T9671] dvb_demux_ioctl+0x29/0x40 [ 188.819016][ T9671] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 188.819027][ T9671] __x64_sys_ioctl+0x18e/0x210 [ 188.819046][ T9671] do_syscall_64+0x106/0xf80 [ 188.819057][ T9671] ? clear_bhb_loop+0x40/0x90 [ 188.819071][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.819083][ T9671] RIP: 0033:0x7f5d1a79c819 [ 188.819095][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.819106][ T9671] RSP: 002b:00007f5d1b659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.819118][ T9671] RAX: ffffffffffffffda RBX: 00007f5d1aa15fa0 RCX: 00007f5d1a79c819 [ 188.819125][ T9671] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 188.819132][ T9671] RBP: 00007f5d1b659090 R08: 0000000000000000 R09: 0000000000000000 [ 188.819139][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.819145][ T9671] R13: 00007f5d1aa16038 R14: 00007f5d1aa15fa0 R15: 00007ffcd12ec4c8 [ 188.819161][ T9671] [ 188.928142][ T9673] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 188.967859][ T9677] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1252' resets device [ 189.009914][ T9681] fuse: Unknown parameter 'fd0x0000000000000003' [ 189.153901][ T9692] FAULT_INJECTION: forcing a failure. [ 189.153901][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 189.158912][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.3.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.158931][ T9692] Tainted: [L]=SOFTLOCKUP [ 189.158935][ T9692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.158942][ T9692] Call Trace: [ 189.158947][ T9692] [ 189.158952][ T9692] dump_stack_lvl+0x100/0x190 [ 189.158978][ T9692] should_fail_ex.cold+0x5/0xa [ 189.158994][ T9692] should_failslab+0xc2/0x120 [ 189.159008][ T9692] __kmalloc_cache_noprof+0x7a/0x6f0 [ 189.159024][ T9692] ? vidtv_psi_eit_table_init+0x4c/0x320 [ 189.159043][ T9692] ? vidtv_psi_nit_table_update_sec_len+0x38c/0x4a0 [ 189.159057][ T9692] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 189.159072][ T9692] vidtv_psi_eit_table_init+0x4c/0x320 [ 189.159089][ T9692] vidtv_channel_si_init+0xdee/0x18d0 [ 189.159111][ T9692] vidtv_mux_init+0x526/0xbf0 [ 189.159129][ T9692] vidtv_start_feed+0x33e/0x4c0 [ 189.159142][ T9692] ? __pfx_vidtv_start_feed+0x10/0x10 [ 189.159155][ T9692] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 189.159175][ T9692] dmx_section_feed_start_filtering+0x3a8/0x660 [ 189.159193][ T9692] ? mark_held_locks+0x40/0x70 [ 189.159205][ T9692] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.159224][ T9692] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 189.159240][ T9692] dvb_dmxdev_filter_stop+0x18b/0x390 [ 189.159254][ T9692] dvb_demux_release+0x92/0x560 [ 189.159267][ T9692] ? evm_file_release+0x133/0x210 [ 189.159285][ T9692] ? __pfx_dvb_demux_release+0x10/0x10 [ 189.159298][ T9692] __fput+0x3ff/0xb40 [ 189.159316][ T9692] fput_close_sync+0x118/0x250 [ 189.159331][ T9692] ? __pfx_fput_close_sync+0x10/0x10 [ 189.159349][ T9692] __x64_sys_close+0x8b/0x120 [ 189.159365][ T9692] do_syscall_64+0x106/0xf80 [ 189.159375][ T9692] ? clear_bhb_loop+0x40/0x90 [ 189.159389][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.159400][ T9692] RIP: 0033:0x7f083619c819 [ 189.159412][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.159423][ T9692] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 189.159434][ T9692] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 189.159441][ T9692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 189.159448][ T9692] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 189.159454][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.159461][ T9692] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 189.159475][ T9692] [ 189.160207][ T9691] vidtv vidtv.0: No streaming. Skipping. [ 189.242665][ T9698] syzkaller0: entered promiscuous mode [ 189.251519][ T9698] syzkaller0: entered allmulticast mode [ 189.265572][ T9698] tc action pedit offset must be on 32 bit boundaries [ 189.310889][ T9704] fuse: Unknown parameter 'fd0x0000000000000003' [ 189.553897][ T9728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 189.579729][ T9730] FAULT_INJECTION: forcing a failure. [ 189.579729][ T9730] name failslab, interval 1, probability 0, space 0, times 0 [ 189.583894][ T9730] CPU: 3 UID: 0 PID: 9730 Comm: syz.3.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.583914][ T9730] Tainted: [L]=SOFTLOCKUP [ 189.583918][ T9730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.583925][ T9730] Call Trace: [ 189.583930][ T9730] [ 189.583936][ T9730] dump_stack_lvl+0x100/0x190 [ 189.583960][ T9730] should_fail_ex.cold+0x5/0xa [ 189.583976][ T9730] should_failslab+0xc2/0x120 [ 189.583990][ T9730] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 189.584007][ T9730] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 189.584028][ T9730] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 189.584049][ T9730] mmu_topup_memory_caches+0x25/0x170 [ 189.584063][ T9730] kvm_mmu_load+0xd6/0x23e0 [ 189.584076][ T9730] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 189.584091][ T9730] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 189.584109][ T9730] ? __pfx_kvm_mmu_load+0x10/0x10 [ 189.584120][ T9730] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 189.584138][ T9730] ? kvm_check_and_inject_events+0x961/0x10c0 [ 189.584151][ T9730] ? record_steal_time+0x410/0xbe0 [ 189.584169][ T9730] vcpu_run+0x39f4/0x5ca0 [ 189.584187][ T9730] ? __pfx_vcpu_run+0x10/0x10 [ 189.584205][ T9730] ? rcu_is_watching+0x12/0xc0 [ 189.584222][ T9730] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 189.584235][ T9730] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 189.584252][ T9730] kvm_vcpu_ioctl+0x730/0x1730 [ 189.584270][ T9730] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.584287][ T9730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.584304][ T9730] ? do_vfs_ioctl+0x226/0x13e0 [ 189.584322][ T9730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.584339][ T9730] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 189.584362][ T9730] ? __fget_files+0x215/0x3d0 [ 189.584374][ T9730] ? hook_file_ioctl_common+0x146/0x410 [ 189.584391][ T9730] ? selinux_file_ioctl+0x139/0x290 [ 189.584407][ T9730] ? selinux_file_ioctl+0xb4/0x290 [ 189.584424][ T9730] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.584441][ T9730] __x64_sys_ioctl+0x18e/0x210 [ 189.584459][ T9730] do_syscall_64+0x106/0xf80 [ 189.584470][ T9730] ? clear_bhb_loop+0x40/0x90 [ 189.584484][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.584500][ T9730] RIP: 0033:0x7f083619c819 [ 189.584511][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.584527][ T9730] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.584543][ T9730] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 189.584553][ T9730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 189.584562][ T9730] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 189.584571][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.584582][ T9730] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 189.584602][ T9730] [ 189.616272][ T9733] FAULT_INJECTION: forcing a failure. [ 189.616272][ T9733] name failslab, interval 1, probability 0, space 0, times 0 [ 189.703997][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.0.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.704022][ T9733] Tainted: [L]=SOFTLOCKUP [ 189.704028][ T9733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.704038][ T9733] Call Trace: [ 189.704046][ T9733] [ 189.704053][ T9733] dump_stack_lvl+0x100/0x190 [ 189.704087][ T9733] should_fail_ex.cold+0x5/0xa [ 189.704110][ T9733] should_failslab+0xc2/0x120 [ 189.704130][ T9733] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 189.704157][ T9733] ? vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 189.704185][ T9733] kstrdup+0x51/0xe0 [ 189.704203][ T9733] vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 189.704225][ T9733] vidtv_psi_desc_clone+0x33f/0x5d0 [ 189.704247][ T9733] vidtv_channel_si_init+0x764/0x18d0 [ 189.704280][ T9733] vidtv_mux_init+0x526/0xbf0 [ 189.704305][ T9733] vidtv_start_feed+0x33e/0x4c0 [ 189.704322][ T9733] ? __pfx_vidtv_start_feed+0x10/0x10 [ 189.704342][ T9733] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 189.704373][ T9733] dmx_section_feed_start_filtering+0x3a8/0x660 [ 189.704399][ T9733] dvb_dmxdev_filter_start+0x767/0xdd0 [ 189.704424][ T9733] dvb_demux_do_ioctl+0xe64/0x1200 [ 189.704450][ T9733] dvb_usercopy+0x167/0x340 [ 189.704466][ T9733] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 189.704485][ T9733] ? __pfx_dvb_usercopy+0x10/0x10 [ 189.704507][ T9733] ? selinux_file_ioctl+0x139/0x290 [ 189.704533][ T9733] ? selinux_file_ioctl+0xb4/0x290 [ 189.704564][ T9733] dvb_demux_ioctl+0x29/0x40 [ 189.704576][ T9733] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 189.704592][ T9733] __x64_sys_ioctl+0x18e/0x210 [ 189.704621][ T9733] do_syscall_64+0x106/0xf80 [ 189.704637][ T9733] ? clear_bhb_loop+0x40/0x90 [ 189.704658][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.704672][ T9733] RIP: 0033:0x7f8c6a19c819 [ 189.704687][ T9733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.704703][ T9733] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.704720][ T9733] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 189.704731][ T9733] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 189.704741][ T9733] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 189.704750][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.704756][ T9733] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 189.704779][ T9733] [ 189.922444][ T755] batadv1: left promiscuous mode [ 190.234764][ T9754] xt_bpf: check failed: parse error [ 190.246230][ T9754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.375444][ T9760] __nla_validate_parse: 13 callbacks suppressed [ 190.375456][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 190.386279][ T9758] FAULT_INJECTION: forcing a failure. [ 190.386279][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 190.391621][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.4.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.391651][ T9758] Tainted: [L]=SOFTLOCKUP [ 190.391658][ T9758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.391670][ T9758] Call Trace: [ 190.391679][ T9758] [ 190.391689][ T9758] dump_stack_lvl+0x100/0x190 [ 190.391727][ T9758] should_fail_ex.cold+0x5/0xa [ 190.391752][ T9758] ? vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670 [ 190.391782][ T9758] should_failslab+0xc2/0x120 [ 190.391803][ T9758] __kmalloc_noprof+0xe0/0x850 [ 190.391829][ T9758] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 190.391855][ T9758] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670 [ 190.391888][ T9758] vidtv_channel_si_init+0xf2a/0x18d0 [ 190.391921][ T9758] vidtv_mux_init+0x526/0xbf0 [ 190.391951][ T9758] vidtv_start_feed+0x33e/0x4c0 [ 190.391973][ T9758] ? __pfx_vidtv_start_feed+0x10/0x10 [ 190.391994][ T9758] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 190.392027][ T9758] dmx_section_feed_start_filtering+0x3a8/0x660 [ 190.392056][ T9758] ? mark_held_locks+0x40/0x70 [ 190.392075][ T9758] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.392105][ T9758] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 190.392129][ T9758] dvb_dmxdev_filter_stop+0x18b/0x390 [ 190.392154][ T9758] dvb_demux_release+0x92/0x560 [ 190.392174][ T9758] ? evm_file_release+0x133/0x210 [ 190.392203][ T9758] ? __pfx_dvb_demux_release+0x10/0x10 [ 190.392224][ T9758] __fput+0x3ff/0xb40 [ 190.392271][ T9758] fput_close_sync+0x118/0x250 [ 190.392299][ T9758] ? __pfx_fput_close_sync+0x10/0x10 [ 190.392328][ T9758] __x64_sys_close+0x8b/0x120 [ 190.392352][ T9758] do_syscall_64+0x106/0xf80 [ 190.392368][ T9758] ? clear_bhb_loop+0x40/0x90 [ 190.392397][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.392416][ T9758] RIP: 0033:0x7f5d1a79c819 [ 190.392433][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.392450][ T9758] RSP: 002b:00007f5d1b659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 190.392468][ T9758] RAX: ffffffffffffffda RBX: 00007f5d1aa15fa0 RCX: 00007f5d1a79c819 [ 190.392480][ T9758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 190.392491][ T9758] RBP: 00007f5d1b659090 R08: 0000000000000000 R09: 0000000000000000 [ 190.392506][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.392517][ T9758] R13: 00007f5d1aa16038 R14: 00007f5d1aa15fa0 R15: 00007ffcd12ec4c8 [ 190.392543][ T9758] [ 190.489722][ T9757] vidtv vidtv.0: No streaming. Skipping. [ 190.548576][ T9772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1294'. [ 190.553613][ T9772] syzkaller0: entered promiscuous mode [ 190.555483][ T9772] syzkaller0: entered allmulticast mode [ 190.560841][ T9772] tc action pedit offset must be on 32 bit boundaries [ 190.602489][ T5291] Bluetooth: hci4: command tx timeout [ 190.723803][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 190.948945][ T9800] program syz.0.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.004952][ T9802] FAULT_INJECTION: forcing a failure. [ 191.004952][ T9802] name failslab, interval 1, probability 0, space 0, times 0 [ 191.009509][ T9802] CPU: 0 UID: 0 PID: 9802 Comm: syz.4.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.009528][ T9802] Tainted: [L]=SOFTLOCKUP [ 191.009532][ T9802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.009540][ T9802] Call Trace: [ 191.009545][ T9802] [ 191.009550][ T9802] dump_stack_lvl+0x100/0x190 [ 191.009575][ T9802] should_fail_ex.cold+0x5/0xa [ 191.009591][ T9802] should_failslab+0xc2/0x120 [ 191.009604][ T9802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 191.009620][ T9802] ? vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 191.009637][ T9802] ? vidtv_psi_eit_event_init+0x352/0x400 [ 191.009655][ T9802] vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 191.009673][ T9802] vidtv_psi_desc_clone+0x33f/0x5d0 [ 191.009690][ T9802] vidtv_channel_si_init+0x764/0x18d0 [ 191.009720][ T9802] vidtv_mux_init+0x526/0xbf0 [ 191.009742][ T9802] vidtv_start_feed+0x33e/0x4c0 [ 191.009756][ T9802] ? __pfx_vidtv_start_feed+0x10/0x10 [ 191.009769][ T9802] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 191.009789][ T9802] dmx_section_feed_start_filtering+0x3a8/0x660 [ 191.009811][ T9802] dvb_dmxdev_filter_start+0x767/0xdd0 [ 191.009828][ T9802] dvb_demux_do_ioctl+0xe64/0x1200 [ 191.009845][ T9802] dvb_usercopy+0x167/0x340 [ 191.009855][ T9802] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 191.009868][ T9802] ? __pfx_dvb_usercopy+0x10/0x10 [ 191.009885][ T9802] ? selinux_file_ioctl+0x139/0x290 [ 191.009904][ T9802] ? selinux_file_ioctl+0xb4/0x290 [ 191.009935][ T9802] dvb_demux_ioctl+0x29/0x40 [ 191.009947][ T9802] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 191.009958][ T9802] __x64_sys_ioctl+0x18e/0x210 [ 191.009977][ T9802] do_syscall_64+0x106/0xf80 [ 191.009989][ T9802] ? clear_bhb_loop+0x40/0x90 [ 191.010004][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.010015][ T9802] RIP: 0033:0x7f5d1a79c819 [ 191.010027][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.010037][ T9802] RSP: 002b:00007f5d1b659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.010049][ T9802] RAX: ffffffffffffffda RBX: 00007f5d1aa15fa0 RCX: 00007f5d1a79c819 [ 191.010056][ T9802] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 191.010062][ T9802] RBP: 00007f5d1b659090 R08: 0000000000000000 R09: 0000000000000000 [ 191.010069][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.010075][ T9802] R13: 00007f5d1aa16038 R14: 00007f5d1aa15fa0 R15: 00007ffcd12ec4c8 [ 191.010089][ T9802] [ 191.147678][ T9808] FAULT_INJECTION: forcing a failure. [ 191.147678][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 191.153174][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.4.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.153201][ T9808] Tainted: [L]=SOFTLOCKUP [ 191.153207][ T9808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.153218][ T9808] Call Trace: [ 191.153227][ T9808] [ 191.153235][ T9808] dump_stack_lvl+0x100/0x190 [ 191.153269][ T9808] should_fail_ex.cold+0x5/0xa [ 191.153293][ T9808] should_failslab+0xc2/0x120 [ 191.153312][ T9808] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 191.153337][ T9808] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.153369][ T9808] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.153399][ T9808] mmu_topup_memory_caches+0x25/0x170 [ 191.153421][ T9808] kvm_mmu_load+0xd6/0x23e0 [ 191.153438][ T9808] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 191.153461][ T9808] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 191.153486][ T9808] ? __pfx_kvm_mmu_load+0x10/0x10 [ 191.153503][ T9808] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 191.153529][ T9808] ? kvm_check_and_inject_events+0x961/0x10c0 [ 191.153549][ T9808] ? record_steal_time+0x410/0xbe0 [ 191.153575][ T9808] vcpu_run+0x39f4/0x5ca0 [ 191.153604][ T9808] ? __pfx_vcpu_run+0x10/0x10 [ 191.153633][ T9808] ? rcu_is_watching+0x12/0xc0 [ 191.153657][ T9808] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.153677][ T9808] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.153703][ T9808] kvm_vcpu_ioctl+0x730/0x1730 [ 191.153735][ T9808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.153760][ T9808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.153786][ T9808] ? do_vfs_ioctl+0x226/0x13e0 [ 191.153811][ T9808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.153836][ T9808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.153870][ T9808] ? __fget_files+0x215/0x3d0 [ 191.153886][ T9808] ? hook_file_ioctl_common+0x146/0x410 [ 191.153912][ T9808] ? selinux_file_ioctl+0x139/0x290 [ 191.153935][ T9808] ? selinux_file_ioctl+0xb4/0x290 [ 191.153960][ T9808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.153985][ T9808] __x64_sys_ioctl+0x18e/0x210 [ 191.154011][ T9808] do_syscall_64+0x106/0xf80 [ 191.154028][ T9808] ? clear_bhb_loop+0x40/0x90 [ 191.154050][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.154067][ T9808] RIP: 0033:0x7f5d1a79c819 [ 191.154082][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.154097][ T9808] RSP: 002b:00007f5d1b659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.154115][ T9808] RAX: ffffffffffffffda RBX: 00007f5d1aa15fa0 RCX: 00007f5d1a79c819 [ 191.154125][ T9808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 191.154160][ T9808] RBP: 00007f5d1b659090 R08: 0000000000000000 R09: 0000000000000000 [ 191.154171][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.154181][ T9808] R13: 00007f5d1aa16038 R14: 00007f5d1aa15fa0 R15: 00007ffcd12ec4c8 [ 191.154204][ T9808] [ 191.753305][ T9822] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1312' resets device [ 191.973960][ T9831] Cannot find set identified by id 0 to match [ 192.041360][ T9829] mkiss: ax0: crc mode is auto. [ 192.148172][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 192.148187][ T40] audit: type=1400 audit(1775566487.161:1398): avc: denied { create } for pid=9828 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.157323][ T40] audit: type=1400 audit(1775566487.171:1399): avc: denied { bind } for pid=9828 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.164547][ T40] audit: type=1400 audit(1775566487.171:1400): avc: denied { accept } for pid=9828 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.171560][ T40] audit: type=1400 audit(1775566487.171:1401): avc: denied { write } for pid=9828 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.178956][ T40] audit: type=1400 audit(1775566487.171:1402): avc: denied { read } for pid=9828 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.187136][ T40] audit: type=1400 audit(1775566487.171:1403): avc: denied { ioctl } for pid=9828 comm="syz.4.1314" path="socket:[44057]" dev="sockfs" ino=44057 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.295813][ T40] audit: type=1400 audit(1775566487.311:1404): avc: denied { write } for pid=9835 comm="syz.3.1316" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.304612][ T40] audit: type=1400 audit(1775566487.311:1405): avc: denied { open } for pid=9835 comm="syz.3.1316" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.314285][ T40] audit: type=1400 audit(1775566487.321:1406): avc: denied { read } for pid=9835 comm="syz.3.1316" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.322771][ T40] audit: type=1400 audit(1775566487.321:1407): avc: denied { ioctl } for pid=9835 comm="syz.3.1316" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.347830][ T9836] FAULT_INJECTION: forcing a failure. [ 192.347830][ T9836] name failslab, interval 1, probability 0, space 0, times 0 [ 192.352021][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.3.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.352040][ T9836] Tainted: [L]=SOFTLOCKUP [ 192.352044][ T9836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.352050][ T9836] Call Trace: [ 192.352056][ T9836] [ 192.352061][ T9836] dump_stack_lvl+0x100/0x190 [ 192.352087][ T9836] should_fail_ex.cold+0x5/0xa [ 192.352103][ T9836] should_failslab+0xc2/0x120 [ 192.352116][ T9836] __kmalloc_cache_noprof+0x7a/0x6f0 [ 192.352131][ T9836] ? vidtv_psi_eit_table_init+0x4c/0x320 [ 192.352150][ T9836] ? vidtv_psi_nit_table_update_sec_len+0x38c/0x4a0 [ 192.352164][ T9836] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 192.352179][ T9836] vidtv_psi_eit_table_init+0x4c/0x320 [ 192.352196][ T9836] vidtv_channel_si_init+0xdee/0x18d0 [ 192.352218][ T9836] vidtv_mux_init+0x526/0xbf0 [ 192.352248][ T9836] vidtv_start_feed+0x33e/0x4c0 [ 192.352263][ T9836] ? __pfx_vidtv_start_feed+0x10/0x10 [ 192.352276][ T9836] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 192.352297][ T9836] dmx_section_feed_start_filtering+0x3a8/0x660 [ 192.352315][ T9836] ? mark_held_locks+0x40/0x70 [ 192.352327][ T9836] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.352347][ T9836] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 192.352362][ T9836] dvb_dmxdev_filter_stop+0x18b/0x390 [ 192.352377][ T9836] dvb_demux_release+0x92/0x560 [ 192.352389][ T9836] ? evm_file_release+0x133/0x210 [ 192.352408][ T9836] ? __pfx_dvb_demux_release+0x10/0x10 [ 192.352421][ T9836] __fput+0x3ff/0xb40 [ 192.352438][ T9836] fput_close_sync+0x118/0x250 [ 192.352454][ T9836] ? __pfx_fput_close_sync+0x10/0x10 [ 192.352472][ T9836] __x64_sys_close+0x8b/0x120 [ 192.352487][ T9836] do_syscall_64+0x106/0xf80 [ 192.352498][ T9836] ? clear_bhb_loop+0x40/0x90 [ 192.352512][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.352525][ T9836] RIP: 0033:0x7f083619c819 [ 192.352537][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.352548][ T9836] RSP: 002b:00007f0837137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 192.352559][ T9836] RAX: ffffffffffffffda RBX: 00007f0836415fa0 RCX: 00007f083619c819 [ 192.352566][ T9836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 192.352572][ T9836] RBP: 00007f0837137090 R08: 0000000000000000 R09: 0000000000000000 [ 192.352579][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.352585][ T9836] R13: 00007f0836416038 R14: 00007f0836415fa0 R15: 00007fffb205e9d8 [ 192.352599][ T9836] [ 192.439791][ T9835] vidtv vidtv.0: No streaming. Skipping. [ 192.948258][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 193.015320][ T9856] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1324'. [ 193.020202][ T9856] syzkaller0: entered promiscuous mode [ 193.021984][ T9856] syzkaller0: entered allmulticast mode [ 193.026412][ T9856] tc action pedit offset must be on 32 bit boundaries [ 193.177414][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 193.440170][ T9883] netlink: 'syz.4.1335': attribute type 2 has an invalid length. [ 193.447013][ T9881] FAULT_INJECTION: forcing a failure. [ 193.447013][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 193.451113][ T9881] CPU: 2 UID: 0 PID: 9881 Comm: syz.0.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.451133][ T9881] Tainted: [L]=SOFTLOCKUP [ 193.451137][ T9881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.451144][ T9881] Call Trace: [ 193.451184][ T9881] [ 193.451189][ T9881] dump_stack_lvl+0x100/0x190 [ 193.451439][ T9881] should_fail_ex.cold+0x5/0xa [ 193.451512][ T9881] should_failslab+0xc2/0x120 [ 193.451617][ T9881] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 193.451637][ T9881] ? vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 193.451819][ T9881] kstrdup+0x51/0xe0 [ 193.451832][ T9881] vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 193.451850][ T9881] vidtv_psi_desc_clone+0x33f/0x5d0 [ 193.451866][ T9881] vidtv_channel_si_init+0x764/0x18d0 [ 193.451888][ T9881] vidtv_mux_init+0x526/0xbf0 [ 193.451907][ T9881] vidtv_start_feed+0x33e/0x4c0 [ 193.451920][ T9881] ? __pfx_vidtv_start_feed+0x10/0x10 [ 193.451933][ T9881] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 193.451953][ T9881] dmx_section_feed_start_filtering+0x3a8/0x660 [ 193.452063][ T9881] dvb_dmxdev_filter_start+0x767/0xdd0 [ 193.452080][ T9881] dvb_demux_do_ioctl+0xe64/0x1200 [ 193.452097][ T9881] dvb_usercopy+0x167/0x340 [ 193.452107][ T9881] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 193.452120][ T9881] ? __pfx_dvb_usercopy+0x10/0x10 [ 193.452137][ T9881] ? selinux_file_ioctl+0x139/0x290 [ 193.452374][ T9881] ? selinux_file_ioctl+0xb4/0x290 [ 193.452392][ T9881] dvb_demux_ioctl+0x29/0x40 [ 193.452403][ T9881] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 193.452414][ T9881] __x64_sys_ioctl+0x18e/0x210 [ 193.452433][ T9881] do_syscall_64+0x106/0xf80 [ 193.452591][ T9881] ? clear_bhb_loop+0x40/0x90 [ 193.452607][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.452619][ T9881] RIP: 0033:0x7f8c6a19c819 [ 193.452631][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.452642][ T9881] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.452674][ T9881] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 193.452681][ T9881] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 193.452688][ T9881] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.452694][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.452700][ T9881] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 193.452715][ T9881] [ 193.459184][ T9883] !: entered promiscuous mode [ 193.541472][ T9885] netlink: 'syz.3.1336': attribute type 25 has an invalid length. [ 193.543121][ T9888] FAULT_INJECTION: forcing a failure. [ 193.543121][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 193.544164][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 193.548183][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.0.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.548200][ T9888] Tainted: [L]=SOFTLOCKUP [ 193.548204][ T9888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.548211][ T9888] Call Trace: [ 193.548217][ T9888] [ 193.548223][ T9888] dump_stack_lvl+0x100/0x190 [ 193.548248][ T9888] should_fail_ex.cold+0x5/0xa [ 193.548265][ T9888] should_failslab+0xc2/0x120 [ 193.548279][ T9888] __kvmalloc_node_noprof+0xfa/0xa00 [ 193.548296][ T9888] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 193.548314][ T9888] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 193.548333][ T9888] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 193.548362][ T9888] mmu_topup_memory_caches+0xbc/0x170 [ 193.548384][ T9888] kvm_mmu_load+0xd6/0x23e0 [ 193.548400][ T9888] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 193.548422][ T9888] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 193.548449][ T9888] ? __pfx_kvm_mmu_load+0x10/0x10 [ 193.548465][ T9888] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 193.548490][ T9888] ? kvm_check_and_inject_events+0x961/0x10c0 [ 193.548509][ T9888] ? record_steal_time+0x410/0xbe0 [ 193.548535][ T9888] vcpu_run+0x39f4/0x5ca0 [ 193.548564][ T9888] ? __pfx_vcpu_run+0x10/0x10 [ 193.548592][ T9888] ? rcu_is_watching+0x12/0xc0 [ 193.548661][ T9888] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 193.548681][ T9888] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 193.548708][ T9888] kvm_vcpu_ioctl+0x730/0x1730 [ 193.548735][ T9888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.548758][ T9888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.548776][ T9888] ? do_vfs_ioctl+0x226/0x13e0 [ 193.548794][ T9888] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 193.548810][ T9888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 193.548834][ T9888] ? __fget_files+0x215/0x3d0 [ 193.548846][ T9888] ? hook_file_ioctl_common+0x146/0x410 [ 193.548863][ T9888] ? selinux_file_ioctl+0x139/0x290 [ 193.548879][ T9888] ? selinux_file_ioctl+0xb4/0x290 [ 193.548896][ T9888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.548914][ T9888] __x64_sys_ioctl+0x18e/0x210 [ 193.548932][ T9888] do_syscall_64+0x106/0xf80 [ 193.548944][ T9888] ? clear_bhb_loop+0x40/0x90 [ 193.548958][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.548970][ T9888] RIP: 0033:0x7f8c6a19c819 [ 193.548981][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.548992][ T9888] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.549003][ T9888] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 193.549010][ T9888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 193.549016][ T9888] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.549023][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.549029][ T9888] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 193.549043][ T9888] [ 193.656565][ T755] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.656623][ T9885] netlink: 'syz.3.1336': attribute type 25 has an invalid length. [ 193.662092][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 193.662329][ T755] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.674162][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.677679][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.700036][ T9893] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 193.702759][ T9893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1339'. [ 193.717124][ T9893] team0: Port device geneve0 added [ 193.920404][ T9905] overlayfs: missing 'workdir' [ 193.984322][ T9909] FAULT_INJECTION: forcing a failure. [ 193.984322][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 193.989285][ T9909] CPU: 3 UID: 0 PID: 9909 Comm: syz.0.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.989305][ T9909] Tainted: [L]=SOFTLOCKUP [ 193.989309][ T9909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.989316][ T9909] Call Trace: [ 193.989321][ T9909] [ 193.989326][ T9909] dump_stack_lvl+0x100/0x190 [ 193.989353][ T9909] should_fail_ex.cold+0x5/0xa [ 193.989369][ T9909] should_failslab+0xc2/0x120 [ 193.989382][ T9909] __kmalloc_cache_noprof+0x7a/0x6f0 [ 193.989397][ T9909] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 193.989414][ T9909] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 193.989435][ T9909] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 193.989452][ T9909] vidtv_channel_si_init+0x1289/0x18d0 [ 193.989474][ T9909] vidtv_mux_init+0x526/0xbf0 [ 193.989492][ T9909] vidtv_start_feed+0x33e/0x4c0 [ 193.989505][ T9909] ? __pfx_vidtv_start_feed+0x10/0x10 [ 193.989519][ T9909] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 193.989539][ T9909] dmx_section_feed_start_filtering+0x3a8/0x660 [ 193.989557][ T9909] ? mark_held_locks+0x40/0x70 [ 193.989569][ T9909] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.989590][ T9909] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 193.989605][ T9909] dvb_dmxdev_filter_stop+0x18b/0x390 [ 193.989620][ T9909] dvb_demux_release+0x92/0x560 [ 193.989632][ T9909] ? evm_file_release+0x133/0x210 [ 193.989651][ T9909] ? __pfx_dvb_demux_release+0x10/0x10 [ 193.989663][ T9909] __fput+0x3ff/0xb40 [ 193.989683][ T9909] fput_close_sync+0x118/0x250 [ 193.989699][ T9909] ? __pfx_fput_close_sync+0x10/0x10 [ 193.989717][ T9909] __x64_sys_close+0x8b/0x120 [ 193.989733][ T9909] do_syscall_64+0x106/0xf80 [ 193.989743][ T9909] ? clear_bhb_loop+0x40/0x90 [ 193.989757][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.989769][ T9909] RIP: 0033:0x7f8c6a19c819 [ 193.989781][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.989791][ T9909] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 193.989803][ T9909] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 193.989810][ T9909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 193.989816][ T9909] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.989822][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.989829][ T9909] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 193.989843][ T9909] [ 193.990001][ T9909] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 194.093789][ T9909] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 194.097248][ T9909] CPU: 3 UID: 0 PID: 9909 Comm: syz.0.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.100894][ T9909] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.102379][ T9909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.105912][ T9909] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 194.107829][ T9909] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 0d 1e d9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 e9 1d d9 f9 4d 85 e4 [ 194.113880][ T9909] RSP: 0018:ffffc90003867aa0 EFLAGS: 00010247 [ 194.115818][ T9909] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 194.118450][ T9909] RDX: 0000000000000000 RSI: ffffffff882fd953 RDI: 0000000000000005 [ 194.120978][ T9909] RBP: ffff888036642a40 R08: 0000000000000001 R09: ffffed1006cc8549 [ 194.123502][ T9909] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 194.126015][ T9909] R13: ffff8880599fc500 R14: ffff888022d13d20 R15: ffff88803cd9b100 [ 194.128563][ T9909] FS: 00007f8c6afdf6c0(0000) GS:ffff8880d6639000(0000) knlGS:0000000000000000 [ 194.131543][ T9909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.133853][ T9909] CR2: 00007f8c6a185e40 CR3: 000000006297c000 CR4: 0000000000352ef0 [ 194.136600][ T9909] DR0: 0000000010400001 DR1: 0000000000000003 DR2: 0000000000000001 [ 194.139134][ T9909] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 194.141665][ T9909] Call Trace: [ 194.142780][ T9909] [ 194.143737][ T9909] vidtv_channel_si_init+0x12fc/0x18d0 [ 194.145493][ T9909] vidtv_mux_init+0x526/0xbf0 [ 194.147083][ T9909] vidtv_start_feed+0x33e/0x4c0 [ 194.148704][ T9909] ? __pfx_vidtv_start_feed+0x10/0x10 [ 194.150484][ T9909] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 194.152663][ T9909] dmx_section_feed_start_filtering+0x3a8/0x660 [ 194.154783][ T9909] ? mark_held_locks+0x40/0x70 [ 194.156379][ T9909] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.158064][ T9909] dvb_dmxdev_feed_restart.isra.0+0x469/0x540 [ 194.160025][ T9909] dvb_dmxdev_filter_stop+0x18b/0x390 [ 194.161735][ T9909] dvb_demux_release+0x92/0x560 [ 194.163311][ T9909] ? evm_file_release+0x133/0x210 [ 194.164930][ T9909] ? __pfx_dvb_demux_release+0x10/0x10 [ 194.166725][ T9909] __fput+0x3ff/0xb40 [ 194.168038][ T9909] fput_close_sync+0x118/0x250 [ 194.169576][ T9909] ? __pfx_fput_close_sync+0x10/0x10 [ 194.171274][ T9909] __x64_sys_close+0x8b/0x120 [ 194.172808][ T9909] do_syscall_64+0x106/0xf80 [ 194.174311][ T9909] ? clear_bhb_loop+0x40/0x90 [ 194.175829][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.177750][ T9909] RIP: 0033:0x7f8c6a19c819 [ 194.179219][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.185359][ T9909] RSP: 002b:00007f8c6afdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 194.188083][ T9909] RAX: ffffffffffffffda RBX: 00007f8c6a415fa0 RCX: 00007f8c6a19c819 [ 194.190619][ T9909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.193142][ T9909] RBP: 00007f8c6afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 194.195672][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.198213][ T9909] R13: 00007f8c6a416038 R14: 00007f8c6a415fa0 R15: 00007ffdb86a5bf8 [ 194.200745][ T9909] [ 194.201768][ T9909] Modules linked in: [ 194.203712][ T9909] ---[ end trace 0000000000000000 ]--- [ 194.206254][ T9909] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 194.208246][ T9909] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 0d 1e d9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 e9 1d d9 f9 4d 85 e4 [ 194.214844][ T9909] RSP: 0018:ffffc90003867aa0 EFLAGS: 00010247 [ 194.217026][ T9909] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 194.219683][ T9909] RDX: 0000000000000000 RSI: ffffffff882fd953 RDI: 0000000000000005 [ 194.222348][ T9909] RBP: ffff888036642a40 R08: 0000000000000001 R09: ffffed1006cc8549 [ 194.224952][ T9909] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 194.227577][ T9909] R13: ffff8880599fc500 R14: ffff888022d13d20 R15: ffff88803cd9b100 [ 194.230178][ T9909] FS: 00007f8c6afdf6c0(0000) GS:ffff8880d6639000(0000) knlGS:0000000000000000 [ 194.233241][ T9909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.235611][ T9909] CR2: 00007f8c6a1e9f00 CR3: 000000006297c000 CR4: 0000000000352ef0 [ 194.238277][ T9909] DR0: 0000000010400001 DR1: 0000000000000003 DR2: 0000000000000001 [ 194.240897][ T9909] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 194.243678][ T9909] Kernel panic - not syncing: Fatal exception [ 194.246535][ T9909] Kernel Offset: disabled [ 194.247974][ T9909] Rebooting in 86400 seconds..