last executing test programs: 7.737277327s ago: executing program 2 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8000000}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x40800) 7.736847562s ago: executing program 2 (id=1856): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) preadv(r1, 0x0, 0x0, 0x1, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x701801, 0x1b5) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) file_getattr(r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x18, 0x1000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffff9c, &(0x7f0000000440)='./file0\x00', 0x709300, 0x42) syz_usb_disconnect(r0) r6 = socket(0x11, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10008000}, 0x40000) 4.373645798s ago: executing program 2 (id=1867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 4.046368667s ago: executing program 2 (id=1870): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x8000, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12f901, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x28, 0x3, 0x0, {0x6, 0x7, 0x0, '@!:\xfe,]&'}}, 0x28) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) landlock_restrict_self(r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0xfdfc, &(0x7f0000000600)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) 3.567159614s ago: executing program 0 (id=1875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a53f5cd494df848) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004114}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x12000, 0x40) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) fdatasync(r1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20140) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x400c041) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000004c0)={0x91cb, 0x2, 0x1, 'queue1\x00', 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) pselect6(0x40, &(0x7f0000000340)={0xfffffffffffffffa, 0x0, 0x8, 0x5, 0xf8, 0x1, 0x8, 0x7}, &(0x7f0000000580)={0x5, 0x0, 0xfffffffffffffffe, 0x3ff, 0x200, 0x3, 0x6}, &(0x7f00000005c0)={0x40, 0x5, 0x5, 0xfffffffffffffff9, 0x400, 0x100000000, 0x1, 0xc6}, &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640)={[0x0, 0x81]}, 0x8}) 2.87800063s ago: executing program 1 (id=1876): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) preadv(r1, 0x0, 0x0, 0x1, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x701801, 0x1b5) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) file_getattr(r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x18, 0x1000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffff9c, &(0x7f0000000440)='./file0\x00', 0x709300, 0x42) syz_usb_disconnect(r0) r6 = socket(0x11, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10008000}, 0x40000) 2.752532416s ago: executing program 3 (id=1877): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) 2.536057573s ago: executing program 0 (id=1878): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[], 0xec}}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x51, 0x7fff, 0xf8000000, 0x617c, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c03, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) 2.406831796s ago: executing program 3 (id=1879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) getpeername(r0, &(0x7f00000000c0)=@phonet, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.437154773s ago: executing program 3 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x25, 0x1, 0x70bd25, 0xffffffbc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) 1.436521711s ago: executing program 1 (id=1881): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000c00)="d28e011031080aed8f4d31169f34", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000035c0)={0x18, 0x0, r6, {0x4}}, 0x18) 1.375470551s ago: executing program 0 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x25, 0x1, 0x70bd25, 0xffffffbc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) (fail_nth: 3) 1.374934881s ago: executing program 3 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.370043511s ago: executing program 0 (id=1884): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fanotify_init(0x40, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x8004, {'\x00', "57fab043e15fad27a639f105b5e9f977", "a7c9474b00e3fffd8785f975ff4a5ef3"}, 0x4000c, 0x4}) 1.366849496s ago: executing program 1 (id=1885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x6c0880, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fremovexattr(0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000004a40), 0x8, 0x4000) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000004a80)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22e00, 0x0) ioctl$COMEDI_SETWSUBD(r3, 0x6411) 1.286734451s ago: executing program 3 (id=1886): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffff8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1, 0xb512, 0x101, 0xe7}, &(0x7f0000000280)=0x14) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x8, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0x0, &(0x7f0000000400)) 1.217793053s ago: executing program 0 (id=1887): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fanotify_mark(r2, 0x1, 0x1000, r2, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r6, 0x0, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@verity_off, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) 1.057087265s ago: executing program 1 (id=1888): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x1, 0x2, [0x4a1, 0xa38, 0xf62, 0x4b]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x1538, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x17, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockname$packet(r5, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffff52, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100001080000000000000000002000ec", @ANYRES32=0x0, @ANYBLOB="00000000004000000c002b8008000100", @ANYRES32=r4, @ANYRES64], 0x34}}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) 124.554127ms ago: executing program 2 (id=1889): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000200)={'trans=virtio,', {[{@cache_mmap}, {@version_u}]}}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800006121f", 0x2e}], 0x1}, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)) 119.653768ms ago: executing program 3 (id=1890): openat$sndseq(0xffffffffffffff9c, 0x0, 0x28040) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x40000100, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0xffffff7f00000000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(r2, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f202d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db4981246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da079110701000000f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513c373db22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x47, 0xffffffffffffffda, 0x81, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x1, 0x4, {{0x1b, 0x4, 0x1, 0x31, 0x6c, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x1b, 0x0, [{0x0, 0xf, "9274a7231dda51f6b25d0abe25"}, {0xb, 0x6, "23197706"}]}, @ssrr={0x89, 0x13, 0xe, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x7, 0xd5, [@remote]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0xe, "0a92112baefea59b26e8f92a"}, {0x6, 0xe, "37fbf6f41551a6925bbbe574"}]}]}}}}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000600)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = syz_io_uring_setup(0x1c20, &(0x7f0000000180)={0x0, 0xb8b4, 0x40, 0x2, 0x1e8}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0x22}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x180, 0xffffffffffffffff, 0x10000}, 0x50) 26.741573ms ago: executing program 0 (id=1891): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_clone3(&(0x7f0000001e00)={0x200000, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40), {0x32}, &(0x7f0000000d80)=""/4096, 0x1000, &(0x7f0000001d80)=""/36, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r3}}, 0x58) statx(r4, &(0x7f0000002040)='./file0\x00', 0x6000, 0x400, &(0x7f0000002080)) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x18000000, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) 26.306213ms ago: executing program 1 (id=1892): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0xe, {{0xa, 0x4e21, 0x73, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0xa, {{0xa, 0x4e21, 0x7, @mcast1, 0x9}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700209c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 23.952153ms ago: executing program 1 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6818232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020c000000000158fff750cf482c1144016c418529f710a74821ef7994d4e73f2a81f807bce40bbf75ec8cfa53f621fc5a9072b43847dd45db91a415ddd239731373835cd7e3e52003bee1"], 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0001a1e6e4c82a7e7e1b40ee6f6f8beaa42e99e68ce0491dc8a0db613430d8e41ea5afd5da6e63315e62ca9a0f5c00"], 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = syz_open_dev$loop(&(0x7f0000001540), 0x15c1, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000001580)) (async) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000001580)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) accept4(r1, 0x0, 0x0, 0x0) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000081}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) (async) read$rfkill(r7, &(0x7f0000000040), 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r5, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x206, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x5}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x97, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0x5}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x48}}, 0x24004040) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x1e, 0x1, 0x70bd27, 0x4, {0xfe}, [@nested={0x8, 0x10f, 0x0, 0x1, [@typed={0x4, 0x15a}]}]}, 0x1c}}, 0x10) (async) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x1e, 0x1, 0x70bd27, 0x4, {0xfe}, [@nested={0x8, 0x10f, 0x0, 0x1, [@typed={0x4, 0x15a}]}]}, 0x1c}}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c001) 0s ago: executing program 2 (id=1894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) kernel console output (not intermixed with test programs): 327.537707][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.158950][T10973] bridge_slave_1: left allmulticast mode [ 328.170014][T10973] bridge_slave_1: left promiscuous mode [ 328.172039][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.202152][T10973] bond0: (slave bond_slave_0): Releasing backup interface [ 328.238525][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 328.258107][T10973] bond0: (slave bond_slave_1): Releasing backup interface [ 328.277396][T10973] team0: Port device team_slave_0 removed [ 328.287914][T10973] team0: Port device team_slave_1 removed [ 328.292319][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.297733][T10973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.303830][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.306910][T10973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.316687][T10973] bond2: (slave ip6gre1): Releasing backup interface [ 328.318954][T10973] ip6gre1: left promiscuous mode [ 328.378203][T10977] bond4: Unable to set down delay as MII monitoring is disabled [ 328.390676][T10977] bond4 (unregistering): Released all slaves [ 328.449680][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'. [ 328.733113][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 329.139017][T10992] bond2: Unable to set down delay as MII monitoring is disabled [ 329.219118][T10992] bond2 (unregistering): Released all slaves [ 329.549346][T11003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.555619][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 330.248873][T11008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.272229][T11008] block device autoloading is deprecated and will be removed. [ 330.485902][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.489693][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.493463][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.618940][T11027] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 330.793572][T11035] fuse: Unknown parameter '0x0000000000000003' [ 330.884044][ T5832] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 331.035380][ T5832] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 331.043755][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.052510][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.062671][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.070481][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.083748][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.089769][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.095962][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.101164][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.108648][ T5832] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 331.111757][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 331.114596][ T5832] usb 6-1: SerialNumber: syz [ 331.120240][ T5832] usb 6-1: config 0 descriptor?? [ 331.284694][T11041] can0: slcan on ttyS3. [ 331.361475][T11041] can0 (unregistered): slcan off ttyS3. [ 331.421880][T11027] input: syz1 as /devices/virtual/input/input18 [ 331.633447][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 331.689843][ T5136] bcm5974 6-1:0.0: could not read from device [ 331.710847][ T5832] usb 6-1: USB disconnect, device number 19 [ 331.717208][ T5136] bcm5974 6-1:0.0: could not read from device [ 331.875221][T11047] can0: slcan on ttyS3. [ 332.024812][T11048] can0 (unregistered): slcan off ttyS3. [ 332.334987][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 332.613230][T11077] lo speed is unknown, defaulting to 1000 [ 333.645662][T11097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.558353][T11119] fuse: Unknown parameter '0x0000000000000003' [ 334.645006][T11122] lo speed is unknown, defaulting to 1000 [ 334.704410][T11123] lo speed is unknown, defaulting to 1000 [ 334.842701][T11122] netlink: 'syz.2.1378': attribute type 4 has an invalid length. [ 335.006046][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 335.010588][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 335.015354][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 335.401634][T11144] can0: slcan on ttyS3. [ 335.596727][T11146] can0 (unregistered): slcan off ttyS3. [ 335.804304][T11139] deleting an unspecified loop device is not supported. [ 336.224730][T11166] lo speed is unknown, defaulting to 1000 [ 336.359644][T11177] can0: slcan on ttyS3. [ 336.418707][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 336.427659][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 336.431331][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 336.610978][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 336.866841][T11177] can0 (unregistered): slcan off ttyS3. [ 337.120617][T11206] FAULT_INJECTION: forcing a failure. [ 337.120617][T11206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.125133][T11206] CPU: 3 UID: 0 PID: 11206 Comm: syz.0.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.125153][T11206] Tainted: [L]=SOFTLOCKUP [ 337.125157][T11206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.125164][T11206] Call Trace: [ 337.125169][T11206] [ 337.125173][T11206] dump_stack_lvl+0x100/0x190 [ 337.125192][T11206] should_fail_ex.cold+0x5/0xa [ 337.125208][T11206] _copy_to_user+0x32/0xd0 [ 337.125221][T11206] simple_read_from_buffer+0xcb/0x170 [ 337.125236][T11206] proc_fail_nth_read+0x1af/0x230 [ 337.125254][T11206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.125274][T11206] ? rw_verify_area+0xce/0x6d0 [ 337.125285][T11206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.125308][T11206] vfs_read+0x1e4/0xb30 [ 337.125323][T11206] ? __pfx_vfs_read+0x10/0x10 [ 337.125334][T11206] ? find_held_lock+0x2b/0x80 [ 337.125350][T11206] ? __fget_files+0x215/0x3d0 [ 337.125366][T11206] ? __fget_files+0x21f/0x3d0 [ 337.125385][T11206] ksys_read+0x12a/0x250 [ 337.125398][T11206] ? __pfx_ksys_read+0x10/0x10 [ 337.125411][T11206] ? rcu_is_watching+0x12/0xc0 [ 337.125425][T11206] ? rcu_is_watching+0x12/0xc0 [ 337.125440][T11206] do_int80_emulation+0x141/0x700 [ 337.125454][T11206] asm_int80_emulation+0x1a/0x20 [ 337.125465][T11206] RIP: 0023:0xf71b61ab [ 337.125475][T11206] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 337.125486][T11206] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 337.125498][T11206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54765d0 [ 337.125505][T11206] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 337.125511][T11206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.125517][T11206] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.125523][T11206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.125537][T11206] [ 337.295947][T11190] bond4: Unable to set down delay as MII monitoring is disabled [ 337.299733][T11190] bond4 (unregistering): Released all slaves [ 337.391332][T11213] 9pnet_virtio: no channels available for device syz [ 337.399956][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 338.575800][ T40] audit: type=1326 audit(1779438523.749:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.584205][ T40] audit: type=1326 audit(1779438523.749:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.590617][ T40] audit: type=1326 audit(1779438523.749:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.598332][ T40] audit: type=1326 audit(1779438523.749:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.605053][ T40] audit: type=1326 audit(1779438523.749:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.612017][ T40] audit: type=1326 audit(1779438523.749:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.718644][ T40] audit: type=1326 audit(1779438523.749:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.751257][ T40] audit: type=1326 audit(1779438523.749:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.786968][ T40] audit: type=1326 audit(1779438523.749:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.809746][ T40] audit: type=1326 audit(1779438523.759:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.1402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7ffc0000 [ 338.841921][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 338.852159][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 340.336228][T11276] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 340.369724][T11276] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.373612][T11276] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 340.434466][T11278] bond3: (slave gretap1): making interface the new active one [ 340.449308][T11278] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 340.513202][T11276] macvlan2: entered promiscuous mode [ 340.515689][T11276] macvlan2: entered allmulticast mode [ 340.518291][T11276] bond3: entered promiscuous mode [ 340.520097][T11276] gretap1: entered promiscuous mode [ 340.527296][T11276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.604933][T11276] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 340.613233][T11276] bond3: left promiscuous mode [ 340.615677][T11276] gretap1: left promiscuous mode [ 342.077574][T11301] overlayfs: overlapping lowerdir path [ 343.038746][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 343.105269][T11309] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.177334][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 343.232113][T11315] 9p: Bad value for 'wfdno' [ 343.287382][T11309] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.307787][T11319] pim6reg: entered allmulticast mode [ 343.449895][T11309] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.598461][T11309] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.720226][ T9778] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.732196][ T1209] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.739887][ T1209] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.751595][ T9778] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.228729][T11339] fuse: Bad value for 'fd' [ 344.806141][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 344.806159][ T40] audit: type=1326 audit(1779438529.979:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.818350][ T40] audit: type=1326 audit(1779438529.979:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.831407][ T40] audit: type=1326 audit(1779438529.979:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.844091][ T40] audit: type=1326 audit(1779438529.979:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.863706][ T40] audit: type=1326 audit(1779438529.979:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.878588][T11357] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 344.889950][ T40] audit: type=1326 audit(1779438529.979:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.927982][ T40] audit: type=1326 audit(1779438529.979:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.952569][T11357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.963132][ T40] audit: type=1326 audit(1779438529.979:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 344.989210][ T40] audit: type=1326 audit(1779438529.979:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 345.009096][ T40] audit: type=1326 audit(1779438529.979:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.0.1433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f7c code=0x7fc00000 [ 345.053712][T11359] bond2: (slave veth3): Enslaving as an active interface with a down link [ 345.082434][T11357] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 345.098864][T11357] bond2: (slave batadv1): making interface the new active one [ 345.110194][T11357] batadv1: entered promiscuous mode [ 345.113849][T11357] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 345.460675][T11364] syzkaller1: entered promiscuous mode [ 345.463245][T11364] syzkaller1: entered allmulticast mode [ 345.747377][T11366] FAULT_INJECTION: forcing a failure. [ 345.747377][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.755700][T11366] CPU: 3 UID: 0 PID: 11366 Comm: syz.0.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.755732][T11366] Tainted: [L]=SOFTLOCKUP [ 345.755739][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.755750][T11366] Call Trace: [ 345.755756][T11366] [ 345.755764][T11366] dump_stack_lvl+0x100/0x190 [ 345.755790][T11366] should_fail_ex.cold+0x5/0xa [ 345.755814][T11366] _copy_to_user+0x32/0xd0 [ 345.755835][T11366] simple_read_from_buffer+0xcb/0x170 [ 345.755859][T11366] proc_fail_nth_read+0x1af/0x230 [ 345.755887][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.755915][T11366] ? rw_verify_area+0xce/0x6d0 [ 345.755933][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.755960][T11366] vfs_read+0x1e4/0xb30 [ 345.755983][T11366] ? __pfx_vfs_read+0x10/0x10 [ 345.756001][T11366] ? find_held_lock+0x2b/0x80 [ 345.756024][T11366] ? __fget_files+0x215/0x3d0 [ 345.756050][T11366] ? __fget_files+0x21f/0x3d0 [ 345.756077][T11366] ksys_read+0x12a/0x250 [ 345.756103][T11366] ? __pfx_ksys_read+0x10/0x10 [ 345.756123][T11366] ? rcu_is_watching+0x12/0xc0 [ 345.756145][T11366] ? rcu_is_watching+0x12/0xc0 [ 345.756169][T11366] do_int80_emulation+0x141/0x700 [ 345.756191][T11366] asm_int80_emulation+0x1a/0x20 [ 345.756208][T11366] RIP: 0023:0xf71b61ab [ 345.756223][T11366] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 345.756242][T11366] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 345.756260][T11366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 345.756272][T11366] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 345.756281][T11366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.756291][T11366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.756302][T11366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.756326][T11366] [ 345.855514][T11368] usb usb7: usbfs: process 11368 (syz.0.1444) did not claim interface 0 before use [ 345.905567][T11370] overlay: Unknown parameter 'fowner<00000000000000000000' [ 346.169825][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 346.335118][T11379] bond4: Unable to set down delay as MII monitoring is disabled [ 346.346210][T11379] bond4 (unregistering): Released all slaves [ 348.389548][T11398] tipc: Enabled bearer , priority 0 [ 348.511361][T11401] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.557515][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 348.563343][T11403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1454'. [ 348.567410][T11403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1454'. [ 348.618923][T11405] FAULT_INJECTION: forcing a failure. [ 348.618923][T11405] name failslab, interval 1, probability 0, space 0, times 0 [ 348.626456][T11405] CPU: 3 UID: 0 PID: 11405 Comm: syz.0.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.626486][T11405] Tainted: [L]=SOFTLOCKUP [ 348.626492][T11405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.626503][T11405] Call Trace: [ 348.626510][T11405] [ 348.626517][T11405] dump_stack_lvl+0x100/0x190 [ 348.626545][T11405] should_fail_ex.cold+0x5/0xa [ 348.626567][T11405] should_failslab+0xc2/0x120 [ 348.626585][T11405] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 348.626613][T11405] ? __alloc_skb+0x140/0x710 [ 348.626637][T11405] __alloc_skb+0x140/0x710 [ 348.626654][T11405] ? __alloc_skb+0x5b7/0x710 [ 348.626672][T11405] ? __pfx___alloc_skb+0x10/0x10 [ 348.626691][T11405] ? __igmp_group_dropped+0x26a/0xe80 [ 348.626716][T11405] inet_ifmcaddr_notify+0xc7/0x1b0 [ 348.626736][T11405] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 348.626766][T11405] __ip_mc_dec_group+0x41d/0x590 [ 348.626791][T11405] inetdev_event+0x142/0x17f0 [ 348.626820][T11405] ? ib_netdevice_event+0xfc/0x330 [ 348.626845][T11405] ? __pfx_inetdev_event+0x10/0x10 [ 348.626869][T11405] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 348.626895][T11405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.626923][T11405] notifier_call_chain+0x99/0x400 [ 348.626977][T11405] call_netdevice_notifiers_info+0xbe/0x110 [ 348.627004][T11405] __dev_notify_flags+0x1f7/0x2e0 [ 348.627021][T11405] ? __pfx___dev_notify_flags+0x10/0x10 [ 348.627040][T11405] ? __pfx___dev_change_flags+0x10/0x10 [ 348.627057][T11405] ? find_held_lock+0x2b/0x80 [ 348.627081][T11405] ? is_bpf_text_address+0x8a/0x1a0 [ 348.627109][T11405] netif_change_flags+0x108/0x160 [ 348.627130][T11405] do_setlink.isra.0+0x1ac4/0x3e60 [ 348.627157][T11405] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 348.627177][T11405] ? __lock_acquire+0x4a5/0x2630 [ 348.627195][T11405] ? stack_depot_save_flags+0x27/0x9d0 [ 348.627217][T11405] ? __refill_objects_node+0x7f5/0x8e0 [ 348.627247][T11405] ? lock_acquire+0x1b1/0x370 [ 348.627267][T11405] ? rcu_is_watching+0x12/0xc0 [ 348.627288][T11405] ? trace_contention_end+0x122/0x170 [ 348.627310][T11405] ? __mutex_lock+0x26d/0x1b10 [ 348.627326][T11405] ? rtnl_newlink+0x8bb/0x2380 [ 348.627346][T11405] ? __nla_validate_parse+0x1e7/0x28b0 [ 348.627374][T11405] ? __pfx___mutex_lock+0x10/0x10 [ 348.627390][T11405] ? rcu_is_watching+0x12/0xc0 [ 348.627410][T11405] ? apparmor_capable+0x1d7/0x4d0 [ 348.627440][T11405] rtnl_newlink+0x11c2/0x2380 [ 348.627464][T11405] ? __pfx_rtnl_newlink+0x10/0x10 [ 348.627481][T11405] ? rcu_is_watching+0x12/0xc0 [ 348.627501][T11405] ? kasan_quarantine_put+0x104/0x240 [ 348.627517][T11405] ? lockdep_hardirqs_on+0x78/0x100 [ 348.627545][T11405] ? kfree_skbmem+0x19a/0x210 [ 348.627569][T11405] ? kmem_cache_free+0x127/0x6c0 [ 348.627626][T11405] ? __lock_acquire+0x4a5/0x2630 [ 348.627643][T11405] ? __dev_queue_xmit+0x9ef/0x4950 [ 348.627675][T11405] ? find_held_lock+0x2b/0x80 [ 348.627696][T11405] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 348.627717][T11405] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 348.627740][T11405] ? __pfx_rtnl_newlink+0x10/0x10 [ 348.627760][T11405] rtnetlink_rcv_msg+0x95e/0xe90 [ 348.627779][T11405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.627805][T11405] ? ref_tracker_free+0x37e/0x6c0 [ 348.627829][T11405] netlink_rcv_skb+0x159/0x420 [ 348.627855][T11405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.627877][T11405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.627908][T11405] ? netlink_deliver_tap+0x1ae/0xcc0 [ 348.627933][T11405] netlink_unicast+0x585/0x850 [ 348.627960][T11405] ? __pfx_netlink_unicast+0x10/0x10 [ 348.627991][T11405] netlink_sendmsg+0x8b0/0xda0 [ 348.628019][T11405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.628046][T11405] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 348.628071][T11405] ____sys_sendmsg+0x9e1/0xb70 [ 348.628094][T11405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.628119][T11405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.628154][T11405] ___sys_sendmsg+0x190/0x1e0 [ 348.628181][T11405] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.628213][T11405] ? find_held_lock+0x2b/0x80 [ 348.628247][T11405] __sys_sendmsg+0x170/0x220 [ 348.628268][T11405] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.628286][T11405] ? __fget_files+0x21f/0x3d0 [ 348.628392][T11405] ? ksys_write+0x1ac/0x250 [ 348.628412][T11405] ? rcu_is_watching+0x12/0xc0 [ 348.628439][T11405] __do_fast_syscall_32+0xe7/0x950 [ 348.628458][T11405] ? lockdep_hardirqs_on+0x78/0x100 [ 348.628480][T11405] do_fast_syscall_32+0x32/0x70 [ 348.628495][T11405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.628517][T11405] RIP: 0023:0xf7fb3f7c [ 348.628535][T11405] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 348.628553][T11405] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 348.628572][T11405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 348.628583][T11405] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.628593][T11405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.628603][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.628612][T11405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.628633][T11405] [ 348.630443][T11405] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1456'. [ 349.018964][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 349.789168][T11420] can0: slcan on ttyS3. [ 349.994335][T11421] can0 (unregistered): slcan off ttyS3. [ 350.286068][T11432] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 350.289208][T11432] netlink: 'syz.1.1463': attribute type 2 has an invalid length. [ 350.409301][T11435] FAULT_INJECTION: forcing a failure. [ 350.409301][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 350.414663][T11435] CPU: 2 UID: 0 PID: 11435 Comm: syz.2.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.414695][T11435] Tainted: [L]=SOFTLOCKUP [ 350.414701][T11435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.414713][T11435] Call Trace: [ 350.414721][T11435] [ 350.414731][T11435] dump_stack_lvl+0x100/0x190 [ 350.414760][T11435] should_fail_ex.cold+0x5/0xa [ 350.414785][T11435] should_failslab+0xc2/0x120 [ 350.414809][T11435] __kmalloc_cache_noprof+0x7a/0x6f0 [ 350.414836][T11435] ? tipc_mon_create+0xf1/0x5d0 [ 350.414860][T11435] tipc_mon_create+0xf1/0x5d0 [ 350.414882][T11435] tipc_enable_bearer+0xaf8/0xe60 [ 350.414917][T11435] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 350.414946][T11435] ? lock_acquire+0x1b1/0x370 [ 350.414970][T11435] ? __nla_parse+0x40/0x60 [ 350.415002][T11435] __tipc_nl_bearer_enable+0x332/0x420 [ 350.415039][T11435] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 350.415074][T11435] ? tipc_nl_compat_bearer_enable+0x3b4/0x680 [ 350.415106][T11435] ? __nla_parse+0x40/0x60 [ 350.415147][T11435] __tipc_nl_compat_doit+0x330/0x3d0 [ 350.415170][T11435] ? kfree_skbmem+0x19a/0x210 [ 350.415197][T11435] ? consume_skb+0xd1/0x110 [ 350.415221][T11435] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 350.415243][T11435] ? netlink_deliver_tap+0xa4d/0xcc0 [ 350.415269][T11435] ? netlink_unicast+0x62b/0x850 [ 350.415293][T11435] ? netlink_sendmsg+0x8b0/0xda0 [ 350.415329][T11435] ? bpf_lsm_capable+0x9/0x10 [ 350.415351][T11435] ? security_capable+0x80/0x260 [ 350.415383][T11435] tipc_nl_compat_doit+0x11e/0x290 [ 350.415410][T11435] tipc_nl_compat_recv+0x908/0xc40 [ 350.415452][T11435] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 350.415476][T11435] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 350.415504][T11435] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 350.415540][T11435] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 350.415595][T11435] genl_family_rcv_msg_doit+0x214/0x300 [ 350.415618][T11435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 350.415637][T11435] ? genl_get_cmd+0x3e7/0x760 [ 350.415673][T11435] ? __dev_queue_xmit+0xa10/0x4950 [ 350.415703][T11435] ? __radix_tree_lookup+0x217/0x2b0 [ 350.415734][T11435] genl_rcv_msg+0x560/0x800 [ 350.415758][T11435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.415778][T11435] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 350.415811][T11435] netlink_rcv_skb+0x159/0x420 [ 350.415839][T11435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.415859][T11435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.415897][T11435] ? netlink_deliver_tap+0x1ae/0xcc0 [ 350.415927][T11435] genl_rcv+0x28/0x40 [ 350.415945][T11435] netlink_unicast+0x585/0x850 [ 350.415976][T11435] ? __pfx_netlink_unicast+0x10/0x10 [ 350.416009][T11435] netlink_sendmsg+0x8b0/0xda0 [ 350.416047][T11435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.416078][T11435] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 350.416113][T11435] ____sys_sendmsg+0x9e1/0xb70 [ 350.416139][T11435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.416169][T11435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.416208][T11435] ___sys_sendmsg+0x190/0x1e0 [ 350.416239][T11435] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.416290][T11435] ? find_held_lock+0x2b/0x80 [ 350.416327][T11435] __sys_sendmsg+0x170/0x220 [ 350.416349][T11435] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.416368][T11435] ? __fget_files+0x21f/0x3d0 [ 350.416400][T11435] ? ksys_write+0x1ac/0x250 [ 350.416424][T11435] ? rcu_is_watching+0x12/0xc0 [ 350.416451][T11435] __do_fast_syscall_32+0xe7/0x950 [ 350.416470][T11435] ? lockdep_hardirqs_on+0x78/0x100 [ 350.416500][T11435] do_fast_syscall_32+0x32/0x70 [ 350.416520][T11435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.416550][T11435] RIP: 0023:0xf70bef7c [ 350.416570][T11435] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 350.416588][T11435] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 350.416611][T11435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 350.416623][T11435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.416635][T11435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.416646][T11435] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.416658][T11435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.416687][T11435] [ 350.416970][T11435] tipc: Disabling bearer [ 351.813170][T11449] tipc: Enabling of bearer rejected, already enabled [ 352.124197][T11458] can0: slcan on ttyS3. [ 352.285782][T11458] can0 (unregistered): slcan off ttyS3. [ 353.228428][T11476] libceph: resolve ' [ 353.228428][T11476] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 353.228428][T11476] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 353.608366][T11482] sg_write: data in/out 251658204/10 bytes for SCSI command 0xff-- guessing data in; [ 353.608366][T11482] program syz.0.1478 not setting count and/or reply_len properly [ 353.821135][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 355.262232][T11504] netlink: 'syz.0.1485': attribute type 2 has an invalid length. [ 355.278277][T11504] ÃM¯”ÛÓó: entered promiscuous mode [ 355.417074][T11509] fuse: Unknown parameter '0xffffffffffffffff' [ 355.595254][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 355.645989][T11512] bond4: Unable to set down delay as MII monitoring is disabled [ 355.681575][T11512] bond4 (unregistering): Released all slaves [ 356.369204][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.372765][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.376443][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.379512][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.382606][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.388913][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.393364][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.397125][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 356.515855][T11528] FAULT_INJECTION: forcing a failure. [ 356.515855][T11528] name failslab, interval 1, probability 0, space 0, times 0 [ 356.520275][T11528] CPU: 1 UID: 0 PID: 11528 Comm: syz.1.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.520297][T11528] Tainted: [L]=SOFTLOCKUP [ 356.520302][T11528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.520310][T11528] Call Trace: [ 356.520317][T11528] [ 356.520324][T11528] dump_stack_lvl+0x100/0x190 [ 356.520344][T11528] should_fail_ex.cold+0x5/0xa [ 356.520361][T11528] should_failslab+0xc2/0x120 [ 356.520376][T11528] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 356.520396][T11528] ? security_inode_alloc+0x3b/0x2c0 [ 356.520409][T11528] ? lockdep_init_map_type+0x5c/0x250 [ 356.520424][T11528] security_inode_alloc+0x3b/0x2c0 [ 356.520438][T11528] inode_init_always_gfp+0xcc0/0x1000 [ 356.520458][T11528] alloc_inode+0x8e/0x250 [ 356.520478][T11528] new_inode+0x22/0x1c0 [ 356.520499][T11528] proc_pid_make_inode+0x22/0x160 [ 356.520515][T11528] proc_pident_instantiate+0x85/0x310 [ 356.520531][T11528] proc_pident_lookup+0x1e3/0x270 [ 356.520549][T11528] __lookup_slow+0x251/0x460 [ 356.520575][T11528] ? __pfx___lookup_slow+0x10/0x10 [ 356.520608][T11528] lookup_slow+0x50/0x70 [ 356.520627][T11528] link_path_walk+0x1377/0x1cc0 [ 356.520646][T11528] path_openat+0x1be/0x31a0 [ 356.520663][T11528] ? kasan_save_stack+0x3f/0x50 [ 356.520675][T11528] ? kasan_save_stack+0x30/0x50 [ 356.520687][T11528] ? __kasan_slab_alloc+0x89/0x90 [ 356.520701][T11528] ? asm_int80_emulation+0x1a/0x20 [ 356.520715][T11528] ? __pfx_path_openat+0x10/0x10 [ 356.520736][T11528] do_file_open+0x20e/0x430 [ 356.520754][T11528] ? __pfx_do_file_open+0x10/0x10 [ 356.520775][T11528] ? __pfx_kfree_link+0x10/0x10 [ 356.520792][T11528] ? _raw_spin_unlock+0x28/0x50 [ 356.520809][T11528] ? alloc_fd+0x476/0x790 [ 356.520829][T11528] do_sys_openat2+0x10d/0x1e0 [ 356.520849][T11528] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.520868][T11528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 356.520882][T11528] ? __fget_files+0x21f/0x3d0 [ 356.520899][T11528] __ia32_compat_sys_openat+0x12d/0x210 [ 356.520912][T11528] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 356.520935][T11528] ? ksys_write+0x1ac/0x250 [ 356.520960][T11528] ? rcu_is_watching+0x12/0xc0 [ 356.520986][T11528] do_int80_emulation+0x141/0x700 [ 356.521010][T11528] asm_int80_emulation+0x1a/0x20 [ 356.521031][T11528] RIP: 0023:0xf71d61ab [ 356.521051][T11528] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 356.521070][T11528] RSP: 002b:00000000f549642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 356.521085][T11528] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a06c5 [ 356.521092][T11528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.521100][T11528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.521106][T11528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.521113][T11528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.521129][T11528] [ 356.632764][T11530] fuse: Unknown parameter '0xffffffffffffffff' [ 356.841574][T11535] lo speed is unknown, defaulting to 1000 [ 357.377555][ T5748] block nbd3: Receive control failed (result -107) [ 357.434557][T11555] block nbd3: shutting down sockets [ 357.515203][ T102] batadv1: left promiscuous mode [ 357.564884][T11563] FAULT_INJECTION: forcing a failure. [ 357.564884][T11563] name failslab, interval 1, probability 0, space 0, times 0 [ 357.570007][T11563] CPU: 1 UID: 0 PID: 11563 Comm: syz.1.1501 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.570028][T11563] Tainted: [L]=SOFTLOCKUP [ 357.570032][T11563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.570040][T11563] Call Trace: [ 357.570045][T11563] [ 357.570051][T11563] dump_stack_lvl+0x100/0x190 [ 357.570068][T11563] should_fail_ex.cold+0x5/0xa [ 357.570111][T11563] should_failslab+0xc2/0x120 [ 357.570125][T11563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 357.570143][T11563] ? __kernfs_new_node+0xd2/0x9f0 [ 357.570158][T11563] __kernfs_new_node+0xd2/0x9f0 [ 357.570173][T11563] ? __pfx___kernfs_new_node+0x10/0x10 [ 357.570188][T11563] ? find_held_lock+0x2b/0x80 [ 357.570203][T11563] ? kernfs_root+0xee/0x2a0 [ 357.570215][T11563] ? kernfs_root+0xee/0x2a0 [ 357.570230][T11563] kernfs_new_node+0x11b/0x1a0 [ 357.570247][T11563] __kernfs_create_file+0x53/0x350 [ 357.570266][T11563] sysfs_add_file_mode_ns+0x207/0x3c0 [ 357.570281][T11563] sysfs_create_file_ns+0x145/0x1e0 [ 357.570293][T11563] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 357.570305][T11563] ? __pfx_set_disk_ro+0x10/0x10 [ 357.570324][T11563] device_create_file+0xf2/0x1d0 [ 357.570344][T11563] nbd_start_device+0x33d/0xbd0 [ 357.570360][T11563] ? security_capable+0x80/0x260 [ 357.570379][T11563] nbd_ioctl+0x4a6/0xd30 [ 357.570399][T11563] ? __pfx_nbd_ioctl+0x10/0x10 [ 357.570417][T11563] ? find_held_lock+0x2b/0x80 [ 357.570433][T11563] ? __pfx_nbd_ioctl+0x10/0x10 [ 357.570447][T11563] compat_blkdev_ioctl+0x682/0x7b0 [ 357.570462][T11563] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 357.570478][T11563] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 357.570493][T11563] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 357.570507][T11563] __do_fast_syscall_32+0xe7/0x950 [ 357.570518][T11563] ? lockdep_hardirqs_on+0x78/0x100 [ 357.570536][T11563] do_fast_syscall_32+0x32/0x70 [ 357.570547][T11563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.570563][T11563] RIP: 0023:0xf7fd2f7c [ 357.570575][T11563] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 357.570586][T11563] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 357.570597][T11563] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ab03 [ 357.570604][T11563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.570610][T11563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.570616][T11563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.570622][T11563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.570636][T11563] [ 357.570646][T11563] block nbd1: device_create_file failed for pid! [ 357.663202][T11572] block nbd1: shutting down sockets [ 358.691737][T11595] can0: slcan on ttyS3. [ 358.808606][T11616] lo speed is unknown, defaulting to 1000 [ 358.907144][T11595] can0 (unregistered): slcan off ttyS3. [ 359.864621][ T5531] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 360.094152][T11637] __nla_validate_parse: 62 callbacks suppressed [ 360.094168][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 360.375530][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 360.956163][T11641] bond4: Unable to set down delay as MII monitoring is disabled [ 360.973394][T11641] bond4 (unregistering): Released all slaves [ 361.366426][T11657] FAULT_INJECTION: forcing a failure. [ 361.366426][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.376335][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.2.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.376370][T11657] Tainted: [L]=SOFTLOCKUP [ 361.376377][T11657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.376388][T11657] Call Trace: [ 361.376395][T11657] [ 361.376403][T11657] dump_stack_lvl+0x100/0x190 [ 361.376432][T11657] should_fail_ex.cold+0x5/0xa [ 361.376455][T11657] _copy_from_user+0x2e/0xd0 [ 361.376481][T11657] bpf_test_init.isra.0+0xaf/0x100 [ 361.376510][T11657] bpf_prog_test_run_skb+0x497/0x3540 [ 361.376541][T11657] ? find_held_lock+0x2b/0x80 [ 361.376565][T11657] ? __fget_files+0x141/0x3d0 [ 361.376595][T11657] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 361.376626][T11657] ? fput+0x79/0x100 [ 361.376674][T11657] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 361.376703][T11657] __sys_bpf+0x1725/0x4b90 [ 361.376728][T11657] ? __pfx___sys_bpf+0x10/0x10 [ 361.376745][T11657] ? get_pid_task+0x106/0x250 [ 361.376775][T11657] ? proc_fail_nth_write+0x9f/0x220 [ 361.376806][T11657] ? find_held_lock+0x2b/0x80 [ 361.376834][T11657] ? find_held_lock+0x2b/0x80 [ 361.376859][T11657] ? ksys_write+0x190/0x250 [ 361.376885][T11657] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 361.376903][T11657] ? kernel_write+0x5e3/0x6c0 [ 361.376940][T11657] ? fput+0x79/0x100 [ 361.376967][T11657] ? ksys_write+0x1ac/0x250 [ 361.376994][T11657] __ia32_sys_bpf+0x79/0xf0 [ 361.377013][T11657] ? lockdep_hardirqs_on+0x78/0x100 [ 361.377041][T11657] __do_fast_syscall_32+0xe7/0x950 [ 361.377057][T11657] ? lockdep_hardirqs_on+0x78/0x100 [ 361.377084][T11657] do_fast_syscall_32+0x32/0x70 [ 361.377102][T11657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.377124][T11657] RIP: 0023:0xf70bef7c [ 361.377139][T11657] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 361.377157][T11657] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 361.377176][T11657] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000780 [ 361.377186][T11657] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.377197][T11657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.377206][T11657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 361.377216][T11657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.377242][T11657] [ 361.657405][ T5531] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 361.822001][T11669] Bluetooth: hci4: Frame reassembly failed (-84) [ 361.841698][ T1181] Bluetooth: hci4: Frame reassembly failed (-84) [ 361.847861][ T5531] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.855023][ T5531] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 361.861704][ T5531] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.865557][ T5531] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 361.870495][ T5531] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 361.894005][ T5531] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.898103][ T5531] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.901152][ T5531] usb 8-1: Product: syz [ 361.903431][ T5531] usb 8-1: Manufacturer: syz [ 362.024522][ T5531] cdc_wdm 8-1:1.0: skipping garbage [ 362.027081][ T5531] cdc_wdm 8-1:1.0: skipping garbage [ 362.029073][ T5531] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 363.153030][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 363.827059][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 364.413161][ T5746] usb 8-1: USB disconnect, device number 25 [ 364.489879][T11707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 364.492581][T11707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 364.514612][T11707] vhci_hcd vhci_hcd.0: Device attached [ 364.804067][ T5849] usb 42-1: SetAddress Request (3) to port 0 [ 364.806988][ T5849] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 365.885562][T11723] FAULT_INJECTION: forcing a failure. [ 365.885562][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 365.890992][T11723] CPU: 3 UID: 0 PID: 11723 Comm: syz.1.1543 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.891013][T11723] Tainted: [L]=SOFTLOCKUP [ 365.891017][T11723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.891024][T11723] Call Trace: [ 365.891031][T11723] [ 365.891038][T11723] dump_stack_lvl+0x100/0x190 [ 365.891057][T11723] should_fail_ex.cold+0x5/0xa [ 365.891072][T11723] should_failslab+0xc2/0x120 [ 365.891087][T11723] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 365.891106][T11723] ? skb_clone+0x190/0x400 [ 365.891123][T11723] skb_clone+0x190/0x400 [ 365.891138][T11723] netlink_deliver_tap+0xaed/0xcc0 [ 365.891159][T11723] netlink_unicast+0x6a5/0x850 [ 365.891179][T11723] ? __pfx_netlink_unicast+0x10/0x10 [ 365.891196][T11723] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 365.891212][T11723] netlink_ack+0x655/0xb80 [ 365.891234][T11723] netlink_rcv_skb+0x333/0x420 [ 365.891252][T11723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.891269][T11723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.891293][T11723] ? netlink_deliver_tap+0x1ae/0xcc0 [ 365.891313][T11723] netlink_unicast+0x585/0x850 [ 365.891368][T11723] ? __pfx_netlink_unicast+0x10/0x10 [ 365.891399][T11723] netlink_sendmsg+0x8b0/0xda0 [ 365.891419][T11723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.891439][T11723] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 365.891460][T11723] ____sys_sendmsg+0x9e1/0xb70 [ 365.891477][T11723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.891496][T11723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.891520][T11723] ___sys_sendmsg+0x190/0x1e0 [ 365.891540][T11723] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.891565][T11723] ? find_held_lock+0x2b/0x80 [ 365.891590][T11723] __sys_sendmsg+0x170/0x220 [ 365.891604][T11723] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.891617][T11723] ? __fget_files+0x21f/0x3d0 [ 365.891636][T11723] ? ksys_write+0x1ac/0x250 [ 365.891650][T11723] ? rcu_is_watching+0x12/0xc0 [ 365.891667][T11723] __do_fast_syscall_32+0xe7/0x950 [ 365.891679][T11723] ? lockdep_hardirqs_on+0x78/0x100 [ 365.891698][T11723] do_fast_syscall_32+0x32/0x70 [ 365.891710][T11723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.891725][T11723] RIP: 0023:0xf7fd2f7c [ 365.891736][T11723] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 365.891747][T11723] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 365.891759][T11723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 365.891766][T11723] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.891778][T11723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.891785][T11723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 365.891792][T11723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.891806][T11723] [ 366.238242][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1537'. [ 366.257122][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1537'. [ 366.819263][T11708] vhci_hcd: connection reset by peer [ 366.828001][ T1209] vhci_hcd vhci_hcd.2: stop threads [ 366.830210][ T1209] vhci_hcd vhci_hcd.2: release socket [ 366.839261][ T1209] vhci_hcd vhci_hcd.2: disconnect device [ 367.175700][T11736] binder: 11735:11736 unknown command 185 [ 367.178177][T11736] binder: 11735:11736 ioctl c0306201 800001c0 returned -22 [ 367.964089][ T6924] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 368.124136][ T6924] usb 8-1: Using ep0 maxpacket: 8 [ 368.131959][ T6924] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 368.135508][ T6924] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.138636][ T6924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.142403][ T6924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.147312][ T6924] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.161922][ T6924] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.171790][ T6924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.208584][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 368.211621][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 368.216029][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 369.013506][T11762] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 369.037066][ T5531] usb 8-1: USB disconnect, device number 26 [ 369.491161][T11765] binder: 11764:11765 ioctl c0306201 80000040 returned -14 [ 369.574865][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 369.582173][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 369.653797][T11773] FAULT_INJECTION: forcing a failure. [ 369.653797][T11773] name failslab, interval 1, probability 0, space 0, times 0 [ 369.658853][T11773] CPU: 3 UID: 0 PID: 11773 Comm: syz.3.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.658883][T11773] Tainted: [L]=SOFTLOCKUP [ 369.658888][T11773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.658898][T11773] Call Trace: [ 369.658905][T11773] [ 369.658913][T11773] dump_stack_lvl+0x100/0x190 [ 369.658940][T11773] should_fail_ex.cold+0x5/0xa [ 369.658962][T11773] should_failslab+0xc2/0x120 [ 369.658985][T11773] __kvmalloc_node_noprof+0xfa/0xa00 [ 369.659005][T11773] ? alloc_netdev_mqs+0xb4a/0x1560 [ 369.659028][T11773] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 369.659043][T11773] alloc_netdev_mqs+0xb4a/0x1560 [ 369.659059][T11773] rtnl_create_link+0xc13/0xf80 [ 369.659076][T11773] rtnl_newlink+0x13bd/0x2380 [ 369.659095][T11773] ? __pfx_rtnl_newlink+0x10/0x10 [ 369.659108][T11773] ? rcu_is_watching+0x12/0xc0 [ 369.659122][T11773] ? kasan_quarantine_put+0x104/0x240 [ 369.659133][T11773] ? lockdep_hardirqs_on+0x78/0x100 [ 369.659152][T11773] ? kfree_skbmem+0x19a/0x210 [ 369.659169][T11773] ? kmem_cache_free+0x127/0x6c0 [ 369.659203][T11773] ? __dev_queue_xmit+0x9ef/0x4950 [ 369.659235][T11773] ? find_held_lock+0x2b/0x80 [ 369.659255][T11773] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 369.659300][T11773] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 369.659323][T11773] ? __pfx_rtnl_newlink+0x10/0x10 [ 369.659345][T11773] rtnetlink_rcv_msg+0x95e/0xe90 [ 369.659369][T11773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.659397][T11773] ? ref_tracker_free+0x37e/0x6c0 [ 369.659423][T11773] netlink_rcv_skb+0x159/0x420 [ 369.659449][T11773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.659472][T11773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.659507][T11773] ? netlink_deliver_tap+0x1ae/0xcc0 [ 369.659536][T11773] netlink_unicast+0x585/0x850 [ 369.659566][T11773] ? __pfx_netlink_unicast+0x10/0x10 [ 369.659598][T11773] netlink_sendmsg+0x8b0/0xda0 [ 369.659628][T11773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.659657][T11773] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 369.659689][T11773] ____sys_sendmsg+0x9e1/0xb70 [ 369.659714][T11773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.659747][T11773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.659785][T11773] ___sys_sendmsg+0x190/0x1e0 [ 369.659812][T11773] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.659851][T11773] ? find_held_lock+0x2b/0x80 [ 369.659888][T11773] __sys_sendmsg+0x170/0x220 [ 369.659910][T11773] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.659929][T11773] ? __fget_files+0x21f/0x3d0 [ 369.659957][T11773] ? ksys_write+0x1ac/0x250 [ 369.659979][T11773] ? rcu_is_watching+0x12/0xc0 [ 369.660002][T11773] __do_fast_syscall_32+0xe7/0x950 [ 369.660020][T11773] ? lockdep_hardirqs_on+0x78/0x100 [ 369.660047][T11773] do_fast_syscall_32+0x32/0x70 [ 369.660066][T11773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.660088][T11773] RIP: 0023:0xf708ef7c [ 369.660105][T11773] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 369.660122][T11773] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 369.660140][T11773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000740 [ 369.660151][T11773] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.660160][T11773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.660169][T11773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 369.660180][T11773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.660204][T11773] [ 369.904244][ T5849] usb 42-1: device descriptor read/8, error -110 [ 370.345234][ T5849] usb usb42-port1: attempt power cycle [ 370.886570][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 370.889770][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 370.892822][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 370.956530][ T1041] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 371.144547][ T1041] usb 6-1: Using ep0 maxpacket: 32 [ 371.172024][ T1041] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 371.204131][ T1041] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 371.250171][ T1041] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 371.300031][ T1041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.353313][ T5849] usb usb42-port1: unable to enumerate USB device [ 371.362031][ T1041] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.371084][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 371.375536][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 371.419865][ T1041] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.483110][ T1041] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 371.547639][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.594915][T11801] can0: slcan on ttyS3. [ 371.724483][T11801] can0 (unregistered): slcan off ttyS3. [ 371.804020][T11802] binder: 11797:11802 ioctl c0306201 0 returned -14 [ 371.821119][ T1041] usb 6-1: config 0 descriptor?? [ 372.150319][ T1041] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 372.904047][ C2] usblp0: nonzero read bulk status received: -71 [ 372.920041][ T5531] usb 6-1: USB disconnect, device number 20 [ 374.743846][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 374.749266][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 374.756462][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 374.902320][T11830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1570'. [ 374.924857][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 375.399402][T11837] can0: slcan on ttyS3. [ 375.474678][T11839] can0 (unregistered): slcan off ttyS3. [ 375.632665][ T5748] block nbd0: Receive control failed (result -32) [ 375.633517][T11814] usblp0: removed [ 375.730141][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 375.730158][ T40] audit: type=1804 audit(1779438560.889:977): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1575" name="/newroot/349/bus/bus" dev="overlay" ino=1882 res=1 errno=0 [ 375.840518][T11847] netlink: 'syz.2.1575': attribute type 4 has an invalid length. [ 375.871076][T11848] FAULT_INJECTION: forcing a failure. [ 375.871076][T11848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.877825][T11848] CPU: 2 UID: 0 PID: 11848 Comm: syz.1.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.877855][T11848] Tainted: [L]=SOFTLOCKUP [ 375.877860][T11848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 375.877870][T11848] Call Trace: [ 375.877877][T11848] [ 375.877884][T11848] dump_stack_lvl+0x100/0x190 [ 375.877909][T11848] should_fail_ex.cold+0x5/0xa [ 375.877930][T11848] _copy_to_user+0x32/0xd0 [ 375.877948][T11848] vhost_net_ioctl+0x4b8/0x1910 [ 375.877972][T11848] ? do_vfs_ioctl+0x226/0x13e0 [ 375.877987][T11848] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 375.878004][T11848] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 375.878025][T11848] ? find_held_lock+0x2b/0x80 [ 375.878046][T11848] ? __fget_files+0x215/0x3d0 [ 375.878063][T11848] ? hook_file_ioctl_common+0x149/0x410 [ 375.878085][T11848] ? __fget_files+0x21f/0x3d0 [ 375.878105][T11848] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 375.878124][T11848] compat_ptr_ioctl+0x6e/0xa0 [ 375.878139][T11848] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 375.878154][T11848] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 375.878172][T11848] __do_fast_syscall_32+0xe7/0x950 [ 375.878188][T11848] ? lockdep_hardirqs_on+0x78/0x100 [ 375.878213][T11848] do_fast_syscall_32+0x32/0x70 [ 375.878229][T11848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.878249][T11848] RIP: 0023:0xf7fd2f7c [ 375.878263][T11848] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 375.878278][T11848] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 375.878294][T11848] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000008008af83 [ 375.878303][T11848] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.878312][T11848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.878321][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.878329][T11848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.878350][T11848] [ 377.401276][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 378.020559][T11863] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 378.023640][T11863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 378.046311][T11863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.140538][T11884] FAULT_INJECTION: forcing a failure. [ 378.140538][T11884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.147628][T11884] CPU: 3 UID: 0 PID: 11884 Comm: syz.3.1587 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.147650][T11884] Tainted: [L]=SOFTLOCKUP [ 378.147655][T11884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.147662][T11884] Call Trace: [ 378.147678][T11884] [ 378.147684][T11884] dump_stack_lvl+0x100/0x190 [ 378.147702][T11884] should_fail_ex.cold+0x5/0xa [ 378.147715][T11884] ? prepare_alloc_pages+0x16d/0x5f0 [ 378.147731][T11884] should_fail_alloc_page+0xeb/0x140 [ 378.147746][T11884] prepare_alloc_pages+0x1f0/0x5f0 [ 378.147762][T11884] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 378.147783][T11884] ? find_held_lock+0x2b/0x80 [ 378.147798][T11884] ? is_bpf_text_address+0x8a/0x1a0 [ 378.147819][T11884] ? is_bpf_text_address+0x8a/0x1a0 [ 378.147835][T11884] ? bpf_ksym_find+0x124/0x1c0 [ 378.147846][T11884] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.147867][T11884] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.147890][T11884] ? __lock_acquire+0x4a5/0x2630 [ 378.147906][T11884] ? __lock_acquire+0x4a5/0x2630 [ 378.147920][T11884] ? css_rstat_updated+0x1ce/0x5a0 [ 378.147956][T11884] ? lock_acquire+0x1b1/0x370 [ 378.147971][T11884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.147990][T11884] ? policy_nodemask+0xed/0x4f0 [ 378.148004][T11884] alloc_pages_mpol+0x1fb/0x540 [ 378.148019][T11884] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 378.148033][T11884] ? __lock_acquire+0x4a5/0x2630 [ 378.148045][T11884] folio_alloc_mpol_noprof+0x36/0x260 [ 378.148062][T11884] vma_alloc_folio_noprof+0xed/0x1d0 [ 378.148077][T11884] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 378.148097][T11884] do_anonymous_page+0xb46/0x2050 [ 378.148115][T11884] ? rcu_read_unlock+0x2d/0xb0 [ 378.148135][T11884] __handle_mm_fault+0x1d2c/0x2a00 [ 378.148154][T11884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 378.148169][T11884] ? __pfx___handle_mm_fault+0x10/0x10 [ 378.148186][T11884] ? pte_offset_map_lock+0x174/0x320 [ 378.148200][T11884] ? find_held_lock+0x2b/0x80 [ 378.148218][T11884] ? follow_page_pte+0x4d0/0x13f0 [ 378.148234][T11884] handle_mm_fault+0x36d/0xa20 [ 378.148254][T11884] __get_user_pages+0x1178/0x32a0 [ 378.148272][T11884] ? down_read_killable+0x307/0x4b0 [ 378.148286][T11884] ? __pfx___get_user_pages+0x10/0x10 [ 378.148299][T11884] ? __kernel_text_address+0xd/0x30 [ 378.148317][T11884] __gup_longterm_locked+0x87d/0x16f0 [ 378.148336][T11884] ? __pfx___gup_longterm_locked+0x10/0x10 [ 378.148350][T11884] ? lock_acquire+0x1b1/0x370 [ 378.148361][T11884] ? find_held_lock+0x2b/0x80 [ 378.148375][T11884] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 378.148392][T11884] gup_fast_fallback+0x16dc/0x2790 [ 378.148415][T11884] ? __pfx_gup_fast_fallback+0x10/0x10 [ 378.148436][T11884] pin_user_pages_fast+0xa7/0xf0 [ 378.148451][T11884] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 378.148465][T11884] ? __kmalloc_noprof+0x320/0x850 [ 378.148478][T11884] rds_info_getsockopt+0x196/0x4e0 [ 378.148494][T11884] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 378.148507][T11884] ? find_held_lock+0x2b/0x80 [ 378.148527][T11884] rds_getsockopt+0x177/0x2e0 [ 378.148544][T11884] ? __pfx_rds_getsockopt+0x10/0x10 [ 378.148561][T11884] do_sock_getsockopt+0x50a/0x6e0 [ 378.148577][T11884] ? __lock_acquire+0x4a5/0x2630 [ 378.148590][T11884] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 378.148611][T11884] ? find_held_lock+0x2b/0x80 [ 378.148628][T11884] ? __fget_files+0x21f/0x3d0 [ 378.148645][T11884] __sys_getsockopt+0x133/0x1d0 [ 378.148662][T11884] ? __ia32_sys_getsockopt+0xbc/0x160 [ 378.148675][T11884] __ia32_sys_getsockopt+0xbc/0x160 [ 378.148687][T11884] ? __do_fast_syscall_32+0x98/0x950 [ 378.148698][T11884] ? lockdep_hardirqs_on+0x78/0x100 [ 378.148731][T11884] __do_fast_syscall_32+0xe7/0x950 [ 378.148742][T11884] ? lockdep_hardirqs_on+0x78/0x100 [ 378.148761][T11884] do_fast_syscall_32+0x32/0x70 [ 378.148772][T11884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.148787][T11884] RIP: 0023:0xf708ef7c [ 378.148797][T11884] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 378.148813][T11884] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 378.148825][T11884] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000000114 [ 378.148832][T11884] RDX: 000000000000271e RSI: 0000000080000580 RDI: 0000000080000040 [ 378.148838][T11884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.148844][T11884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 378.148851][T11884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.148864][T11884] [ 378.172362][T11886] lo speed is unknown, defaulting to 1000 [ 378.517938][T11898] fuse: Unknown parameter '0x0000000000000003' [ 378.741922][T11904] FAULT_INJECTION: forcing a failure. [ 378.741922][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.747057][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.2.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.747087][T11904] Tainted: [L]=SOFTLOCKUP [ 378.747092][T11904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.747102][T11904] Call Trace: [ 378.747114][T11904] [ 378.747123][T11904] dump_stack_lvl+0x100/0x190 [ 378.747175][T11904] should_fail_ex.cold+0x5/0xa [ 378.747207][T11904] _copy_from_user+0x2e/0xd0 [ 378.747226][T11904] get_compat_msghdr+0xb3/0x4b0 [ 378.747248][T11904] ? __pfx_get_compat_msghdr+0x10/0x10 [ 378.747271][T11904] ? rcu_is_watching+0x12/0xc0 [ 378.747289][T11904] ? ___sys_recvmsg+0x177/0x1a0 [ 378.747313][T11904] ? kfree+0x1dd/0x6c0 [ 378.747339][T11904] ___sys_recvmsg+0x193/0x1a0 [ 378.747365][T11904] ? __pfx____sys_recvmsg+0x10/0x10 [ 378.747402][T11904] ? __pfx___might_resched+0x10/0x10 [ 378.747425][T11904] do_recvmmsg+0x563/0x760 [ 378.747453][T11904] ? __pfx_do_recvmmsg+0x10/0x10 [ 378.747479][T11904] ? ksys_write+0x190/0x250 [ 378.747496][T11904] ? ksys_write+0x190/0x250 [ 378.747520][T11904] ? __fget_files+0x215/0x3d0 [ 378.747540][T11904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.747562][T11904] __sys_recvmmsg+0x21f/0x270 [ 378.747584][T11904] ? __pfx___sys_recvmmsg+0x10/0x10 [ 378.747607][T11904] ? ksys_write+0x1ac/0x250 [ 378.747629][T11904] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 378.747654][T11904] ? __do_fast_syscall_32+0x98/0x950 [ 378.747671][T11904] ? lockdep_hardirqs_on+0x78/0x100 [ 378.747697][T11904] __do_fast_syscall_32+0xe7/0x950 [ 378.747714][T11904] ? lockdep_hardirqs_on+0x78/0x100 [ 378.747738][T11904] do_fast_syscall_32+0x32/0x70 [ 378.747754][T11904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.747775][T11904] RIP: 0023:0xf70bef7c [ 378.747795][T11904] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 378.747811][T11904] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 378.747829][T11904] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080003700 [ 378.747840][T11904] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.747850][T11904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.747860][T11904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 378.747868][T11904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.747891][T11904] [ 379.048382][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 379.075117][T11909] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1592'. [ 380.133210][T11923] FAULT_INJECTION: forcing a failure. [ 380.133210][T11923] name failslab, interval 1, probability 0, space 0, times 0 [ 380.138809][T11923] CPU: 3 UID: 0 PID: 11923 Comm: syz.2.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.138829][T11923] Tainted: [L]=SOFTLOCKUP [ 380.138834][T11923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.138842][T11923] Call Trace: [ 380.138848][T11923] [ 380.138854][T11923] dump_stack_lvl+0x100/0x190 [ 380.138871][T11923] should_fail_ex.cold+0x5/0xa [ 380.138888][T11923] should_failslab+0xc2/0x120 [ 380.138902][T11923] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 380.138922][T11923] ? __alloc_skb+0x140/0x710 [ 380.138937][T11923] __alloc_skb+0x140/0x710 [ 380.138950][T11923] ? __pfx___alloc_skb+0x10/0x10 [ 380.138963][T11923] ? tcp_send_mss+0x1ae/0x2a0 [ 380.138977][T11923] mptcp_sendmsg_frag+0x7e3/0x3030 [ 380.138996][T11923] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.139014][T11923] ? is_bpf_text_address+0x94/0x1a0 [ 380.139031][T11923] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 380.139049][T11923] __subflow_push_pending+0x34b/0xb70 [ 380.139071][T11923] __mptcp_push_pending+0x2cc/0x540 [ 380.139091][T11923] ? __pfx___mptcp_push_pending+0x10/0x10 [ 380.139146][T11923] mptcp_sendmsg+0xda9/0x2210 [ 380.139180][T11923] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 380.139206][T11923] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 380.139223][T11923] inet_sendmsg+0x11c/0x140 [ 380.139237][T11923] __sys_sendto+0x446/0x4b0 [ 380.139249][T11923] ? __pfx_inet_sendmsg+0x10/0x10 [ 380.139261][T11923] ? __pfx___sys_sendto+0x10/0x10 [ 380.139277][T11923] ? __fget_files+0x215/0x3d0 [ 380.139291][T11923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.139316][T11923] ? fput+0x79/0x100 [ 380.139337][T11923] ? ksys_write+0x1ac/0x250 [ 380.139355][T11923] __ia32_sys_sendto+0xdd/0x1b0 [ 380.139370][T11923] ? __do_fast_syscall_32+0x98/0x950 [ 380.139385][T11923] ? lockdep_hardirqs_on+0x78/0x100 [ 380.139411][T11923] __do_fast_syscall_32+0xe7/0x950 [ 380.139425][T11923] ? lockdep_hardirqs_on+0x78/0x100 [ 380.139452][T11923] do_fast_syscall_32+0x32/0x70 [ 380.139469][T11923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.139487][T11923] RIP: 0023:0xf70bef7c [ 380.139498][T11923] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 380.139509][T11923] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 380.139521][T11923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 380.139527][T11923] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.139534][T11923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.139540][T11923] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.139546][T11923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.139560][T11923] [ 380.754077][ T5746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 380.914057][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 380.918636][ T5746] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.923499][ T5746] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.928484][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.944273][ T5746] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.947313][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1602'. [ 380.948251][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.964354][ T5746] usb 5-1: config 0 descriptor?? [ 381.079260][T11940] fuse: Unknown parameter '0x0000000000000003' [ 381.138462][T11942] lo speed is unknown, defaulting to 1000 [ 381.271324][T11950] FAULT_INJECTION: forcing a failure. [ 381.271324][T11950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.276823][T11948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 381.276822][T11950] CPU: 2 UID: 0 PID: 11950 Comm: syz.2.1607 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.276847][T11950] Tainted: [L]=SOFTLOCKUP [ 381.276853][T11950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.276862][T11950] Call Trace: [ 381.276868][T11950] [ 381.276874][T11950] dump_stack_lvl+0x100/0x190 [ 381.276898][T11950] should_fail_ex.cold+0x5/0xa [ 381.276919][T11950] _copy_to_user+0x32/0xd0 [ 381.276938][T11950] simple_read_from_buffer+0xcb/0x170 [ 381.276959][T11950] proc_fail_nth_read+0x1af/0x230 [ 381.276984][T11950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.277009][T11950] ? rw_verify_area+0xce/0x6d0 [ 381.277025][T11950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.277049][T11950] vfs_read+0x1e4/0xb30 [ 381.277069][T11950] ? __pfx_vfs_read+0x10/0x10 [ 381.277086][T11950] ? find_held_lock+0x2b/0x80 [ 381.277106][T11950] ? __fget_files+0x215/0x3d0 [ 381.277136][T11950] ? __fget_files+0x21f/0x3d0 [ 381.277160][T11950] ksys_read+0x12a/0x250 [ 381.277178][T11950] ? __pfx_ksys_read+0x10/0x10 [ 381.277196][T11950] ? rcu_is_watching+0x12/0xc0 [ 381.277215][T11950] ? rcu_is_watching+0x12/0xc0 [ 381.277236][T11950] do_int80_emulation+0x141/0x700 [ 381.277255][T11950] asm_int80_emulation+0x1a/0x20 [ 381.277271][T11950] RIP: 0023:0xf71f61ab [ 381.277285][T11950] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 381.277300][T11950] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 381.277317][T11950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad5d0 [ 381.277327][T11950] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 381.277335][T11950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.277344][T11950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.277353][T11950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.277373][T11950] [ 381.358515][T11948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.386253][ T5746] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 381.394445][ T5746] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 381.403448][ T5746] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 381.421007][ T5746] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 381.426460][ T5746] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 381.436328][ T5746] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 381.578866][T11948] vhci_hcd vhci_hcd.0: Device attached [ 381.706386][ T5746] usb 5-1: USB disconnect, device number 22 [ 382.061991][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 382.225167][T11951] vhci_hcd: connection closed [ 382.226086][ T9778] vhci_hcd vhci_hcd.3: stop threads [ 382.240413][ T9778] vhci_hcd vhci_hcd.3: release socket [ 382.248543][ T9778] vhci_hcd vhci_hcd.3: disconnect device [ 382.254022][ T1342] usb 44-1: SetAddress Request (10) to port 0 [ 382.256030][ T1342] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 382.274039][ T1342] usb 44-1: enqueue for inactive port 0 [ 383.314753][ T1342] usb usb44-port1: attempt power cycle [ 383.425112][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.427230][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.875100][ T1342] usb usb44-port1: unable to enumerate USB device [ 384.194112][ T983] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 384.366814][ T983] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.373149][ T983] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.379542][ T983] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.382725][ T983] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.388999][ T983] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.395120][ T983] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.400610][ T983] usb 8-1: Product: syz [ 384.403379][ T983] usb 8-1: Manufacturer: syz [ 384.411998][ T983] cdc_wdm 8-1:1.0: skipping garbage [ 384.417882][ T983] cdc_wdm 8-1:1.0: skipping garbage [ 384.422393][ T983] cdc_wdm 8-1:1.0: skipping garbage [ 384.427215][ T983] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 384.645165][ T6609] usb 8-1: USB disconnect, device number 27 [ 384.651915][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.654957][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.665919][T12015] tipc: Resetting bearer [ 384.732160][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.749151][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.820633][T12015] vlan0: left promiscuous mode [ 384.873438][T12015] ipip0: left allmulticast mode [ 384.900339][ T1181] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.903247][ T1181] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.916134][ T1181] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.922435][ T5746] lo speed is unknown, defaulting to 1000 [ 384.929704][ T1181] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.932763][ T5746] syz2: Port: 1 Link DOWN [ 385.175744][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 385.235757][T12037] syzkaller0: entered promiscuous mode [ 385.237679][T12037] syzkaller0: entered allmulticast mode [ 386.394125][ T5746] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 386.556182][ T5746] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.559891][ T5746] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 386.565031][ T5746] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 386.568765][ T5746] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.573625][ T5746] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 386.579159][ T5746] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 386.587798][ T5746] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.591708][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.595135][ T5746] usb 5-1: Product: syz [ 386.596927][ T5746] usb 5-1: Manufacturer: syz [ 386.603728][T12051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.608490][ T5746] cdc_wdm 5-1:1.0: skipping garbage [ 386.610802][ T5746] cdc_wdm 5-1:1.0: skipping garbage [ 386.613989][ T5746] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 386.617098][ T5746] cdc_wdm 5-1:1.0: Unknown control protocol [ 386.807164][T12069] fuse: Unknown parameter '0x0000000000000003' [ 386.814497][ C3] wdm_int_callback: 690 callbacks suppressed [ 386.814519][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.819701][ C3] wdm_int_callback: 690 callbacks suppressed [ 386.819724][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.825138][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.828125][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.831069][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.833209][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.835347][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.837409][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.839618][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.841832][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.844607][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.846851][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.849016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.851108][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.853260][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.855354][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.857433][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.859609][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.861831][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 386.864215][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 386.943350][ T5746] usb 5-1: USB disconnect, device number 23 [ 386.945376][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 387.094914][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 387.209816][T12074] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1647'. [ 387.845318][T12084] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 387.856718][T12084] !: entered promiscuous mode [ 388.508074][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 388.590573][T12100] FAULT_INJECTION: forcing a failure. [ 388.590573][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 388.594792][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.3.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.594812][T12100] Tainted: [L]=SOFTLOCKUP [ 388.594816][T12100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.594823][T12100] Call Trace: [ 388.594827][T12100] [ 388.594832][T12100] dump_stack_lvl+0x100/0x190 [ 388.594849][T12100] should_fail_ex.cold+0x5/0xa [ 388.594864][T12100] should_failslab+0xc2/0x120 [ 388.594878][T12100] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 388.594896][T12100] ? __alloc_skb+0x140/0x710 [ 388.594908][T12100] ? __alloc_skb+0x5b7/0x710 [ 388.594921][T12100] __alloc_skb+0x140/0x710 [ 388.594932][T12100] ? __alloc_skb+0x5b7/0x710 [ 388.594944][T12100] ? __pfx___alloc_skb+0x10/0x10 [ 388.594956][T12100] ? __pfx___might_resched+0x10/0x10 [ 388.594972][T12100] netlink_alloc_large_skb+0x69/0x150 [ 388.595025][T12100] netlink_sendmsg+0x680/0xda0 [ 388.595045][T12100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.595064][T12100] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 388.595084][T12100] ____sys_sendmsg+0x9e1/0xb70 [ 388.595101][T12100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.595119][T12100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.595141][T12100] ___sys_sendmsg+0x190/0x1e0 [ 388.595159][T12100] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.595182][T12100] ? find_held_lock+0x2b/0x80 [ 388.595205][T12100] __sys_sendmsg+0x170/0x220 [ 388.595218][T12100] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.595231][T12100] ? __fget_files+0x21f/0x3d0 [ 388.595247][T12100] ? ksys_write+0x1ac/0x250 [ 388.595261][T12100] ? rcu_is_watching+0x12/0xc0 [ 388.595277][T12100] __do_fast_syscall_32+0xe7/0x950 [ 388.595288][T12100] ? lockdep_hardirqs_on+0x78/0x100 [ 388.595306][T12100] do_fast_syscall_32+0x32/0x70 [ 388.595317][T12100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.595332][T12100] RIP: 0023:0xf708ef7c [ 388.595342][T12100] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 388.595364][T12100] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 388.595377][T12100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 388.595384][T12100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.595390][T12100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.595396][T12100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 388.595403][T12100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.595417][T12100] [ 388.776884][T12108] fuse: Unknown parameter '0x0000000000000003' [ 388.798188][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 388.854091][ T1342] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 388.983977][ T1342] usb 6-1: device descriptor read/64, error -71 [ 389.224064][ T1342] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 389.364055][ T1342] usb 6-1: device descriptor read/64, error -71 [ 389.474442][ T1342] usb usb6-port1: attempt power cycle [ 389.814008][ T1342] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 389.834719][ T1342] usb 6-1: device descriptor read/8, error -71 [ 390.094197][ T1342] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 390.145722][ T1342] usb 6-1: device descriptor read/8, error -71 [ 390.254700][ T1342] usb usb6-port1: unable to enumerate USB device [ 390.256886][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 390.354845][T12134] kvm: pic: single mode not supported [ 390.361837][T12134] kvm: pic: level sensitive irq not supported [ 391.025004][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 391.341854][T12151] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 392.278193][T12166] FAULT_INJECTION: forcing a failure. [ 392.278193][T12166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.283628][T12166] CPU: 0 UID: 0 PID: 12166 Comm: syz.0.1679 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.283657][T12166] Tainted: [L]=SOFTLOCKUP [ 392.283663][T12166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.283671][T12166] Call Trace: [ 392.283680][T12166] [ 392.283688][T12166] dump_stack_lvl+0x100/0x190 [ 392.283713][T12166] should_fail_ex.cold+0x5/0xa [ 392.283736][T12166] _copy_from_user+0x2e/0xd0 [ 392.283757][T12166] get_compat_msghdr+0xb3/0x4b0 [ 392.283780][T12166] ? __pfx_get_compat_msghdr+0x10/0x10 [ 392.283809][T12166] ___sys_sendmsg+0x1b6/0x1e0 [ 392.283836][T12166] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.283887][T12166] ? find_held_lock+0x2b/0x80 [ 392.283925][T12166] __sys_sendmsg+0x170/0x220 [ 392.283944][T12166] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.283962][T12166] ? __fget_files+0x21f/0x3d0 [ 392.283988][T12166] ? ksys_write+0x1ac/0x250 [ 392.284008][T12166] ? rcu_is_watching+0x12/0xc0 [ 392.284032][T12166] __do_fast_syscall_32+0xe7/0x950 [ 392.284049][T12166] ? lockdep_hardirqs_on+0x78/0x100 [ 392.284074][T12166] do_fast_syscall_32+0x32/0x70 [ 392.284090][T12166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.284112][T12166] RIP: 0023:0xf7fb3f7c [ 392.284126][T12166] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 392.284143][T12166] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 392.284161][T12166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 392.284172][T12166] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.284181][T12166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.284191][T12166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 392.284200][T12166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.284220][T12166] [ 392.377397][T12167] syzkaller0: entered promiscuous mode [ 392.485800][T12167] syzkaller0: entered allmulticast mode [ 392.493329][T12173] pim6reg: entered allmulticast mode [ 392.835741][T12183] tmpfs: Unknown parameter 'usrquotaÿÿÿÿ' [ 392.915482][ T1041] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 393.118170][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 393.124861][ T1041] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 393.128227][ T1041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.144427][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.150307][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.154583][ T1041] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.159591][ T1041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.162755][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.975300][ T1041] usb 5-1: usb_control_msg returned -71 [ 393.981651][ T1041] usbtmc 5-1:16.0: can't read capabilities [ 394.024875][ T1041] usb 5-1: USB disconnect, device number 24 [ 394.387715][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 395.298400][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 395.737588][T12224] dvmrp16: entered allmulticast mode [ 396.425534][T12219] dvmrp16: left allmulticast mode [ 396.850466][T12238] tipc: Started in network mode [ 396.852403][T12238] tipc: Node identity , cluster identity 4711 [ 396.855193][T12238] tipc: Failed to set node id, please configure manually [ 396.857482][T12238] tipc: Enabling of bearer rejected, failed to enable media [ 396.874078][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 397.036568][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.040343][ T24] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 397.047139][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.052725][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.059796][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 397.065275][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.073714][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.077647][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.081115][ T24] usb 5-1: Product: syz [ 397.082942][ T24] usb 5-1: Manufacturer: syz [ 397.103637][T12246] FAULT_INJECTION: forcing a failure. [ 397.103637][T12246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.108707][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.3.1705 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.108726][T12246] Tainted: [L]=SOFTLOCKUP [ 397.108730][T12246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.108737][T12246] Call Trace: [ 397.108742][T12246] [ 397.108747][T12246] dump_stack_lvl+0x100/0x190 [ 397.108766][T12246] should_fail_ex.cold+0x5/0xa [ 397.108783][T12246] _copy_from_user+0x2e/0xd0 [ 397.108796][T12246] kstrtouint_from_user+0xd6/0x1d0 [ 397.108812][T12246] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 397.108827][T12246] ? __lock_acquire+0x4a5/0x2630 [ 397.108844][T12246] proc_fail_nth_write+0x83/0x220 [ 397.108863][T12246] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 397.108885][T12246] vfs_write+0x2aa/0x1070 [ 397.108898][T12246] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 397.108917][T12246] ? __pfx_vfs_write+0x10/0x10 [ 397.108929][T12246] ? find_held_lock+0x2b/0x80 [ 397.108944][T12246] ? __fget_files+0x215/0x3d0 [ 397.108959][T12246] ? __fget_files+0x21f/0x3d0 [ 397.108976][T12246] ksys_write+0x12a/0x250 [ 397.108989][T12246] ? __pfx_ksys_write+0x10/0x10 [ 397.109003][T12246] ? rcu_is_watching+0x12/0xc0 [ 397.109018][T12246] do_int80_emulation+0x141/0x700 [ 397.109031][T12246] asm_int80_emulation+0x1a/0x20 [ 397.109043][T12246] RIP: 0023:0xf71c61ab [ 397.109053][T12246] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 397.109065][T12246] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 397.109077][T12246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f547d5d0 [ 397.109084][T12246] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.109090][T12246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.109096][T12246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 397.109102][T12246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.109117][T12246] [ 397.128443][T12234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 397.200568][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 397.210240][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 397.237210][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 397.240050][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 397.404012][ C2] wdm_int_callback: 415 callbacks suppressed [ 397.404030][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.408196][ C2] wdm_int_callback: 415 callbacks suppressed [ 397.408209][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.412386][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.414576][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.416767][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.418875][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.421260][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.424074][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.427478][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.430672][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.434042][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.436133][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.438447][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.440599][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.443098][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.451356][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.453817][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.456210][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.458565][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 397.460794][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 397.465710][T12252] /dev/sr0: Can't open blockdev [ 397.539241][ T1041] usb 5-1: USB disconnect, device number 25 [ 397.539301][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 398.689504][T12275] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 398.895110][ T40] audit: type=1326 audit(1779438584.069:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 398.922027][ T40] audit: type=1326 audit(1779438584.069:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 398.941866][ T40] audit: type=1326 audit(1779438584.079:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 398.971586][ T40] audit: type=1326 audit(1779438584.079:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 398.991538][ T40] audit: type=1326 audit(1779438584.079:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.014765][T12285] random: crng reseeded on system resumption [ 399.021161][ T40] audit: type=1326 audit(1779438584.079:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.031009][ T40] audit: type=1326 audit(1779438584.079:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.040147][ T40] audit: type=1326 audit(1779438584.079:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.049951][ T40] audit: type=1326 audit(1779438584.079:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.060107][ T40] audit: type=1326 audit(1779438584.079:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f7c code=0x7ffc0000 [ 399.841523][T12305] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1721'. [ 400.834154][ T983] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 400.994001][ T983] usb 8-1: Using ep0 maxpacket: 16 [ 400.998024][ T983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.001729][ T983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 401.006643][ T983] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 401.009596][ T983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.012107][ T983] usb 8-1: Product: syz [ 401.013395][ T983] usb 8-1: Manufacturer: syz [ 401.015314][ T983] usb 8-1: SerialNumber: syz [ 401.019592][ T983] usb 8-1: config 0 descriptor?? [ 401.310682][ T983] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 401.314053][ T983] imon 8-1:0.0: unable to initialize intf0, err -19 [ 401.316649][ T983] imon:imon_probe: failed to initialize context! [ 401.318671][ T983] imon 8-1:0.0: unable to register, err -19 [ 402.217383][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.220276][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.968169][ T983] usb 8-1: USB disconnect, device number 28 [ 404.187609][T12347] fuse: Unknown parameter '0x0000000000000003' [ 405.025329][T12358] fuse: Unknown parameter '0x0000000000000003' [ 405.361396][T12381] lo: entered promiscuous mode [ 405.363215][T12381] lo: entered allmulticast mode [ 405.368577][T12381] tunl0: entered promiscuous mode [ 405.370408][T12381] tunl0: entered allmulticast mode [ 405.377394][T12381] tipc: Resetting bearer [ 405.379158][T12381] gre0: entered promiscuous mode [ 405.380865][T12381] gre0: entered allmulticast mode [ 405.382888][T12380] FAULT_INJECTION: forcing a failure. [ 405.382888][T12380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.387544][T12381] gretap0: entered promiscuous mode [ 405.387837][T12380] CPU: 2 UID: 0 PID: 12380 Comm: syz.1.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.387881][T12380] Tainted: [L]=SOFTLOCKUP [ 405.387886][T12380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.387893][T12380] Call Trace: [ 405.387898][T12380] [ 405.387902][T12380] dump_stack_lvl+0x100/0x190 [ 405.387920][T12380] should_fail_ex.cold+0x5/0xa [ 405.387938][T12380] __fpu_restore_sig+0x100/0x1340 [ 405.387966][T12380] ? __lock_acquire+0x4a5/0x2630 [ 405.387981][T12380] ? __pfx___fpu_restore_sig+0x10/0x10 [ 405.388007][T12380] ? clockevents_program_event+0x1bf/0x820 [ 405.388041][T12380] ? __might_fault+0xc5/0x140 [ 405.388089][T12380] fpu__restore_sig+0x151/0x190 [ 405.388116][T12380] ia32_restore_sigcontext+0x456/0x620 [ 405.388130][T12380] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 405.388146][T12380] ? _raw_spin_unlock_irq+0x23/0x50 [ 405.388163][T12380] ? lockdep_hardirqs_on+0x78/0x100 [ 405.388183][T12380] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 405.388210][T12380] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 405.388228][T12380] do_int80_emulation+0x141/0x700 [ 405.388240][T12380] asm_int80_emulation+0x1a/0x20 [ 405.388252][T12380] RIP: 0023:0xf7fd2f7a [ 405.388262][T12380] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 405.388274][T12380] RSP: 002b:00000000f545450c EFLAGS: 00000292 [ 405.388284][T12380] RAX: 000000000000008f RBX: 0000000000000009 RCX: 0000000000000002 [ 405.388290][T12380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.388297][T12380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.388303][T12380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.388309][T12380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.388322][T12380] [ 405.451300][T12381] gretap0: entered allmulticast mode [ 405.468817][T12381] erspan0: entered promiscuous mode [ 405.471352][T12381] erspan0: entered allmulticast mode [ 405.483165][T12381] ip_vti0: entered promiscuous mode [ 405.485686][T12381] ip_vti0: entered allmulticast mode [ 405.502416][T12381] ip6_vti0: entered promiscuous mode [ 405.504706][T12381] ip6_vti0: entered allmulticast mode [ 405.515206][T12381] sit0: entered promiscuous mode [ 405.517017][T12381] sit0: entered allmulticast mode [ 405.548033][T12381] ip6tnl0: entered promiscuous mode [ 405.549996][T12381] ip6tnl0: entered allmulticast mode [ 405.560634][T12381] ip6gre0: entered promiscuous mode [ 405.562805][T12381] ip6gre0: entered allmulticast mode [ 405.575968][T12381] syz_tun: entered promiscuous mode [ 405.578146][T12381] syz_tun: entered allmulticast mode [ 405.607393][T12381] ip6gretap0: entered promiscuous mode [ 405.610240][T12381] ip6gretap0: entered allmulticast mode [ 405.624277][T12381] bridge0: entered promiscuous mode [ 405.626042][T12381] bridge0: entered allmulticast mode [ 405.641488][T12381] bond0: entered promiscuous mode [ 405.645118][T12381] bond0: entered allmulticast mode [ 405.654921][T12381] tipc: Resetting bearer [ 405.657298][T12381] team0: entered promiscuous mode [ 405.660050][T12381] dummy0: entered promiscuous mode [ 405.665337][T12381] team0: entered allmulticast mode [ 405.669461][T12381] vlan0: entered allmulticast mode [ 405.671243][T12381] veth0_vlan: entered allmulticast mode [ 405.676135][T12381] dummy0: entered allmulticast mode [ 405.694533][T12381] nlmon0: entered promiscuous mode [ 405.696402][T12381] nlmon0: entered allmulticast mode [ 405.705212][T12381] batadv0: entered promiscuous mode [ 405.707300][T12381] batadv0: entered allmulticast mode [ 405.720606][T12381] vxcan0: entered promiscuous mode [ 405.722598][T12381] vxcan0: entered allmulticast mode [ 405.729212][T12381] vxcan1: entered promiscuous mode [ 405.731019][T12381] vxcan1: entered allmulticast mode [ 405.739683][T12381] veth0: entered promiscuous mode [ 405.741919][T12381] veth0: entered allmulticast mode [ 405.784574][T12381] veth1: entered promiscuous mode [ 405.786873][T12381] veth1: entered allmulticast mode [ 405.955845][T12381] wg0: entered promiscuous mode [ 405.977705][T12381] wg0: entered allmulticast mode [ 406.061317][T12381] wg1: entered promiscuous mode [ 406.064324][T12381] wg1: entered allmulticast mode [ 406.095047][T12381] wg2: entered promiscuous mode [ 406.097150][T12381] wg2: entered allmulticast mode [ 406.112544][T12381] veth0_to_bridge: entered promiscuous mode [ 406.115261][T12381] veth0_to_bridge: entered allmulticast mode [ 406.123131][T12381] bridge_slave_0: entered promiscuous mode [ 406.125948][T12381] bridge_slave_0: entered allmulticast mode [ 406.133569][T12381] veth1_to_bridge: entered promiscuous mode [ 406.135870][T12381] veth1_to_bridge: entered allmulticast mode [ 406.144535][T12381] bridge_slave_1: entered promiscuous mode [ 406.147089][T12381] bridge_slave_1: entered allmulticast mode [ 406.176466][T12381] veth0_to_bond: entered promiscuous mode [ 406.178396][T12381] veth0_to_bond: entered allmulticast mode [ 406.193419][T12381] bond_slave_0: entered promiscuous mode [ 406.196990][T12381] bond_slave_0: entered allmulticast mode [ 406.200011][T12381] veth1_to_bond: entered promiscuous mode [ 406.202064][T12381] veth1_to_bond: entered allmulticast mode [ 406.207673][T12381] bond_slave_1: entered promiscuous mode [ 406.209526][T12381] bond_slave_1: entered allmulticast mode [ 406.229167][T12381] veth0_to_team: entered promiscuous mode [ 406.231422][T12381] veth0_to_team: entered allmulticast mode [ 406.241930][T12381] team_slave_0: entered promiscuous mode [ 406.245406][T12381] team_slave_0: entered allmulticast mode [ 406.253782][T12381] veth1_to_team: entered promiscuous mode [ 406.258872][T12381] veth1_to_team: entered allmulticast mode [ 406.275487][T12381] team_slave_1: entered promiscuous mode [ 406.277495][T12381] team_slave_1: entered allmulticast mode [ 406.280387][T12381] veth0_to_batadv: entered promiscuous mode [ 406.282473][T12381] veth0_to_batadv: entered allmulticast mode [ 406.287051][T12381] batadv_slave_0: entered promiscuous mode [ 406.292938][T12381] batadv_slave_0: entered allmulticast mode [ 406.305259][T12381] veth1_to_batadv: entered promiscuous mode [ 406.307964][T12381] veth1_to_batadv: entered allmulticast mode [ 406.312288][T12381] batadv_slave_1: entered promiscuous mode [ 406.314952][T12381] batadv_slave_1: entered allmulticast mode [ 406.319456][T12381] xfrm0: entered promiscuous mode [ 406.321849][T12381] xfrm0: entered allmulticast mode [ 406.329786][T12381] veth0_to_hsr: entered promiscuous mode [ 406.331996][T12381] veth0_to_hsr: entered allmulticast mode [ 406.338086][T12381] hsr_slave_0: entered promiscuous mode [ 406.340041][T12381] hsr_slave_0: entered allmulticast mode [ 406.346180][T12381] veth1_virt_wifi: entered promiscuous mode [ 406.348503][T12381] veth1_virt_wifi: entered allmulticast mode [ 406.353804][T12381] veth0_virt_wifi: entered promiscuous mode [ 406.356277][T12381] veth0_virt_wifi: entered allmulticast mode [ 406.361560][T12381] virt_wifi0: entered promiscuous mode [ 406.363638][T12381] virt_wifi0: entered allmulticast mode [ 406.366929][T12381] veth1_vlan: entered allmulticast mode [ 406.383337][T12381] vlan1: entered promiscuous mode [ 406.385830][T12381] vlan1: entered allmulticast mode [ 406.388548][T12381] macvlan0: entered promiscuous mode [ 406.390746][T12381] macvlan0: entered allmulticast mode [ 406.395493][T12381] macvlan1: entered promiscuous mode [ 406.397719][T12381] macvlan1: entered allmulticast mode [ 406.401837][T12381] ipvlan0: entered promiscuous mode [ 406.404212][T12381] ipvlan0: entered allmulticast mode [ 406.410585][T12381] ipvlan1: entered promiscuous mode [ 406.413091][T12381] ipvlan1: entered allmulticast mode [ 406.419072][T12381] veth1_macvtap: entered allmulticast mode [ 406.427382][T12381] veth0_macvtap: entered allmulticast mode [ 406.434930][T12381] macvtap0: entered promiscuous mode [ 406.436952][T12381] macvtap0: entered allmulticast mode [ 406.441948][T12381] macsec0: entered promiscuous mode [ 406.443771][T12381] macsec0: entered allmulticast mode [ 406.449057][T12381] geneve0: entered promiscuous mode [ 406.450845][T12381] geneve0: entered allmulticast mode [ 406.457812][T12381] geneve1: entered promiscuous mode [ 406.460026][T12381] geneve1: entered allmulticast mode [ 406.474923][T12381] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 406.477221][T12381] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 406.491741][T12381] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 406.494685][T12381] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 406.498622][T12381] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 406.501118][T12381] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 406.509820][T12381] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 406.512394][T12381] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 406.517295][T12381] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 406.519724][T12381] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 406.522383][T12381] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 406.525321][T12381] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 406.527833][T12381] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode [ 406.530159][T12381] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode [ 406.532985][T12381] mac80211_hwsim hwsim11 wlan3: entered promiscuous mode [ 406.535811][T12381] mac80211_hwsim hwsim11 wlan3: entered allmulticast mode [ 406.539164][T12381] team1: entered promiscuous mode [ 406.540758][T12381] team1: entered allmulticast mode [ 406.544861][T12381] team2: entered promiscuous mode [ 406.546769][T12381] team2: entered allmulticast mode [ 406.549705][T12381] bond1: entered promiscuous mode [ 406.551815][T12381] ip6erspan0: entered promiscuous mode [ 406.553557][T12381] ip6erspan0: entered allmulticast mode [ 406.555894][T12381] mac80211_hwsim hwsim12 wlan4: entered promiscuous mode [ 406.558900][T12381] mac80211_hwsim hwsim12 wlan4: entered allmulticast mode [ 406.562069][T12381] team3: entered promiscuous mode [ 406.564763][T12381] team3: entered allmulticast mode [ 406.567373][T12381] gretap1: entered allmulticast mode [ 406.569713][T12381] syzkaller0: entered promiscuous mode [ 406.571918][T12381] syzkaller0: entered allmulticast mode [ 406.576049][T12381] bond2: entered promiscuous mode [ 406.578184][T12381] batadv1: entered promiscuous mode [ 406.580573][T12381] bond2: entered allmulticast mode [ 406.582897][T12381] batadv1: entered allmulticast mode [ 406.587021][T12381] veth2: entered promiscuous mode [ 406.588693][T12381] veth2: entered allmulticast mode [ 406.591039][T12381] veth3: entered promiscuous mode [ 406.592591][T12381] veth3: entered allmulticast mode [ 406.598556][T12381] ÃM¯”ÛÓó: entered allmulticast mode [ 406.601055][T12381] sit1: entered promiscuous mode [ 406.603212][T12381] sit1: entered allmulticast mode [ 406.605699][T12381] mac80211_hwsim hwsim16 wlan5: entered promiscuous mode [ 406.608627][T12381] mac80211_hwsim hwsim16 wlan5: entered allmulticast mode [ 406.612326][T12381] pim6reg: entered promiscuous mode [ 406.618192][T12381] gre1: entered promiscuous mode [ 406.620422][T12381] gre1: entered allmulticast mode [ 406.636151][ T102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.644018][ T102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.654185][ T215] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.658232][ T215] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.728026][T12400] openvswitch: netlink: Duplicate or invalid key (type 0). [ 406.732968][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.853010][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 406.853029][ T40] audit: type=1326 audit(1779438592.019:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.886842][ T40] audit: type=1326 audit(1779438592.019:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.892445][T12408] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1753'. [ 406.902015][ T40] audit: type=1326 audit(1779438592.039:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.917889][ T40] audit: type=1326 audit(1779438592.049:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.927426][ T40] audit: type=1326 audit(1779438592.049:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.936393][ T40] audit: type=1326 audit(1779438592.059:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.944410][ T40] audit: type=1326 audit(1779438592.059:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.951752][ T40] audit: type=1326 audit(1779438592.059:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.961826][ T40] audit: type=1326 audit(1779438592.059:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 406.969172][ T40] audit: type=1326 audit(1779438592.059:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.3.1753" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 407.132619][T12415] gretap2: entered promiscuous mode [ 407.358983][T12414] can0: slcan on ttyS3. [ 407.824986][T12427] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 407.929334][T12409] can0 (unregistered): slcan off ttyS3. [ 408.276350][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'. [ 408.282777][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'. [ 408.308162][T12458] comedi comedi3: dt2814: I/O base address or length out of range [ 408.444884][T12458] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 408.743993][T12481] can0: slcan on ttyS3. [ 408.835586][T12481] can0 (unregistered): slcan off ttyS3. [ 408.999673][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 409.005205][T12499] vlan0: Device is already in use. [ 409.053612][T12503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.577064][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 409.630297][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 409.876672][T12518] fuse: Unknown parameter '0x0000000000000003' [ 410.707886][T12524] tmpfs: Unknown parameter '18446744073709551615' [ 411.182582][T12537] can0: slcan on ttyS3. [ 411.324423][T12537] can0 (unregistered): slcan off ttyS3. [ 411.792094][T12565] fuse: Unknown parameter '0x0000000000000003' [ 412.475568][T12580] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 412.860340][T12587] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.333031][T12600] can0: slcan on ttyS3. [ 413.405688][T12600] can0 (unregistered): slcan off ttyS3. [ 413.474114][T12608] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 413.477011][T12608] netlink: 'syz.0.1803': attribute type 2 has an invalid length. [ 414.438009][T12615] IPVS: persistence engine module ip_vs_pe_sir not found [ 414.480591][T12622] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.922995][T12651] Invalid argument reading file caps for ./file0 [ 415.956837][T12653] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.042919][T12659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1820'. [ 416.151145][T12666] netlink: 10184 bytes leftover after parsing attributes in process `syz.2.1821'. [ 416.155749][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 418.578267][T12694] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.154872][T12711] program syz.1.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.158991][T12710] program syz.1.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.271699][T12715] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 419.275815][T12715] netlink: 'syz.1.1833': attribute type 2 has an invalid length. [ 420.272868][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 420.993702][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 421.526319][T12741] fuse: Unknown parameter '0x0000000000000003' [ 421.692529][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 421.736500][T12748] siw: device registration error -23 [ 421.824073][ T5746] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 421.984022][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 421.987466][ T5746] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.991001][ T5746] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.994306][ T5746] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.997387][ T5746] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.001305][ T5746] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.004514][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.213432][ T5746] usb 6-1: GET_CAPABILITIES returned 0 [ 422.216000][ T5746] usbtmc 6-1:16.0: can't read capabilities [ 422.424720][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.428384][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.431751][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.435134][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.439264][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.442844][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.446278][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.449648][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.458273][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.462032][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.465448][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.469026][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.480702][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.483688][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.486742][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.489590][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.501778][ T24] usb 6-1: USB disconnect, device number 25 [ 422.614096][ T1342] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 422.670101][T12761] can0: slcan on ttyS3. [ 422.754835][T12761] can0 (unregistered): slcan off ttyS3. [ 422.767057][ T1342] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.770415][ T1342] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 422.777732][ T1342] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.780988][ T1342] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.785676][ T1342] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 422.789542][ T1342] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 422.795079][ T1342] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.799331][ T1342] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.802128][ T1342] usb 8-1: Product: syz [ 422.804104][ T1342] usb 8-1: Manufacturer: syz [ 422.818981][T12751] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 422.826415][ T1342] cdc_wdm 8-1:1.0: skipping garbage [ 422.830166][ T1342] cdc_wdm 8-1:1.0: skipping garbage [ 422.838176][ T1342] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 422.840646][ T1342] cdc_wdm 8-1:1.0: Unknown control protocol [ 422.864254][T12762] can0: slcan on ttyS3. [ 422.937678][T12768] can0 (unregistered): slcan off ttyS3. [ 423.037049][ C1] wdm_int_callback: 239 callbacks suppressed [ 423.037073][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.042369][ C1] wdm_int_callback: 239 callbacks suppressed [ 423.042389][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.047745][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.050505][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.053307][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.056042][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.058817][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.061563][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.064386][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.067191][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.069936][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.072784][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.075124][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.077284][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.079588][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.081667][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.083949][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.086624][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.089501][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.092295][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.113556][ T24] usb 8-1: USB disconnect, device number 29 [ 423.113678][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 423.805694][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 423.934362][T12792] fuse: Unknown parameter '0x0000000000000003' [ 424.560687][T12800] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 424.563541][T12800] netlink: 'syz.3.1853': attribute type 2 has an invalid length. [ 426.202164][T12822] can0: slcan on ttyS3. [ 426.264933][T12822] can0 (unregistered): slcan off ttyS3. [ 426.703684][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 427.098908][T12842] fuse: Unknown parameter '0x0000000000000003' [ 427.628339][T12852] Set syz0 is full, maxelem 0 reached [ 428.697566][T12869] can0: slcan on ttyS3. [ 428.772511][T12873] netlink: 15678 bytes leftover after parsing attributes in process `syz.0.1872'. [ 428.831588][T12869] can0 (unregistered): slcan off ttyS3. [ 429.854096][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 430.037152][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.043182][ T24] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 430.047806][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.051500][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.056294][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 430.061024][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.070870][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.075270][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.078691][ T24] usb 6-1: Product: syz [ 430.080475][ T24] usb 6-1: Manufacturer: syz [ 430.085829][T12895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.090757][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 430.093109][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 430.097397][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 430.100249][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 430.320480][ C1] wdm_int_callback: 98 callbacks suppressed [ 430.320500][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.324710][ C1] wdm_int_callback: 98 callbacks suppressed [ 430.324726][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.328754][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.330808][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.332937][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.335514][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.337659][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.339784][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.341935][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.344121][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.346511][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.348577][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.350716][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.352755][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.354936][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.357620][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.360027][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.362162][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.364309][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 430.366424][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 430.585700][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 430.590708][ T1342] usb 6-1: USB disconnect, device number 26 [ 431.138896][T12909] overlay: filesystem on ./file0 is read-only [ 431.190432][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1884'. [ 431.200436][T12916] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 431.202979][T12916] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 431.476782][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 431.711483][T12929] overlay: Bad value for 'verity' [ 432.276693][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 432.448324][T12934] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 432.451106][T12934] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 432.455193][T12934] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 432.460315][T12934] team0: MTU too low for tipc bearer [ 432.462121][T12934] tipc: Disabling bearer [ 432.469081][T12934] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.480242][T12934] .`: (slave team0): Enslaving as an active interface with an up link [ 432.539671][T12945] fuse: Unknown parameter '0x0000000000000003' [ 432.540654][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 432.564141][T12944] ------------[ cut here ]------------ [ 432.570701][T12944] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 432.570721][T12944] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#0: syz.1.1893/12944 [ 432.579514][T12944] Modules linked in: [ 432.582723][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.1.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.587593][T12944] Tainted: [L]=SOFTLOCKUP [ 432.589626][T12944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.594140][T12944] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 432.596849][T12944] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 ff 39 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 f1 39 85 00 48 85 db 0f 84 e9 ed ff ff [ 432.605296][T12944] RSP: 0018:ffffc90026e270f0 EFLAGS: 00010293 [ 432.608006][T12944] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff8182b9c9 [ 432.611483][T12943] netlink: 'syz.1.1893': attribute type 8 has an invalid length. [ 432.613797][T12943] trusted_key: syz.1.1893 sent an empty control message without MSG_MORE. [ 432.618280][T12944] RDX: ffff888044bfa500 RSI: ffffffff8182d281 RDI: ffff888044bfa500 [ 432.618360][T12944] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 432.618374][T12944] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 432.618385][T12944] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90026e27308 [ 432.618398][T12944] FS: 0000000000000000(0000) GS:ffff888097174000(0063) knlGS:00000000f5475b40 [ 432.618428][T12944] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 432.618439][T12944] CR2: 000000000c3b295f CR3: 0000000055f64000 CR4: 0000000000352ef0 [ 432.618447][T12944] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 432.618455][T12944] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 432.618465][T12944] Call Trace: [ 432.618471][T12944] [ 432.618478][T12944] ? find_held_lock+0x2b/0x80 [ 432.618501][T12944] ? __pfx___mutex_lock+0x10/0x10 [ 432.618513][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.618525][T12944] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 432.618551][T12944] kvm_gpc_refresh+0xc9/0x170 [ 432.618573][T12944] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 432.618591][T12944] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 432.618643][T12944] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 432.618663][T12944] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 432.618690][T12944] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 432.618723][T12944] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 432.618751][T12944] ? __pfx_stack_trace_save+0x10/0x10 [ 432.620960][T12944] ? stack_depot_save_flags+0x27/0x9d0 [ 432.620996][T12944] ? xa_load+0x149/0x2c0 [ 432.621024][T12944] ? kasan_save_stack+0x3f/0x50 [ 432.621036][T12944] ? kasan_save_stack+0x30/0x50 [ 432.621047][T12944] ? kasan_save_track+0x14/0x30 [ 432.621058][T12944] ? __kasan_slab_alloc+0x89/0x90 [ 432.621070][T12944] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 432.621089][T12944] ? security_inode_alloc+0x3b/0x2c0 [ 432.621101][T12944] ? inode_init_always_gfp+0xcc0/0x1000 [ 432.621116][T12944] ? alloc_inode+0x8e/0x250 [ 432.621133][T12944] ? new_inode+0x22/0x1c0 [ 432.621154][T12944] ? __debugfs_create_file+0x105/0x4f0 [ 432.621179][T12944] ? debugfs_create_file_full+0x41/0x60 [ 432.621205][T12944] ? kvm_arch_create_vcpu_debugfs+0x55/0x170 [ 432.621230][T12944] ? kvm_vm_ioctl+0x2587/0x4050 [ 432.621252][T12944] ? kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 432.621273][T12944] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 432.621288][T12944] ? __do_fast_syscall_32+0xe7/0x950 [ 432.621299][T12944] ? do_fast_syscall_32+0x32/0x70 [ 432.621310][T12944] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.621332][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.621347][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.621366][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.621384][T12944] ? find_held_lock+0x2b/0x80 [ 432.621399][T12944] ? is_bpf_text_address+0x8a/0x1a0 [ 432.621415][T12944] ? is_bpf_text_address+0x8a/0x1a0 [ 432.621432][T12944] ? bpf_ksym_find+0x124/0x1c0 [ 432.621444][T12944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.621464][T12944] ? is_bpf_text_address+0x94/0x1a0 [ 432.621481][T12944] ? kernel_text_address+0x8d/0x100 [ 432.621496][T12944] ? __pfx_widen_string+0x10/0x10 [ 432.621511][T12944] ? __kernel_text_address+0xd/0x30 [ 432.621523][T12944] ? unwind_get_return_address+0x59/0xa0 [ 432.739614][T12944] ? arch_stack_walk+0xa6/0xf0 [ 432.741529][T12944] kvm_vm_ioctl+0x1564/0x4050 [ 432.743445][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 432.745753][T12944] ? stack_trace_save+0x8e/0xc0 [ 432.747659][T12944] ? __pfx_stack_trace_save+0x10/0x10 [ 432.749622][T12944] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 432.751625][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.753720][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 432.756119][T12944] ? kasan_save_stack+0x3f/0x50 [ 432.757976][T12944] ? kasan_save_stack+0x30/0x50 [ 432.759965][T12944] ? kasan_save_track+0x14/0x30 [ 432.762046][T12944] ? kasan_save_free_info+0x3b/0x70 [ 432.764230][T12944] ? __kasan_slab_free+0x5f/0x80 [ 432.766037][T12944] ? kfree+0x223/0x6c0 [ 432.767489][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 432.769397][T12944] ? security_file_ioctl_compat+0xd3/0x230 [ 432.771520][T12944] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 432.773990][T12944] ? __do_fast_syscall_32+0xe7/0x950 [ 432.775826][T12944] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 432.777797][T12944] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 432.780153][T12944] ? kasan_quarantine_put+0x104/0x240 [ 432.782218][T12944] ? lockdep_hardirqs_on+0x78/0x100 [ 432.784267][T12944] ? find_held_lock+0x2b/0x80 [ 432.785906][T12944] ? tomoyo_path_number_perm+0x28f/0x580 [ 432.787916][T12944] ? tomoyo_path_number_perm+0x28f/0x580 [ 432.789846][T12944] ? tomoyo_path_number_perm+0x188/0x580 [ 432.791725][T12944] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.793832][T12944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.796009][T12944] ? do_vfs_ioctl+0x226/0x13e0 [ 432.797607][T12944] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 432.799341][T12944] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 432.801320][T12944] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 432.803757][T12944] ? find_held_lock+0x2b/0x80 [ 432.805681][T12944] ? __fget_files+0x215/0x3d0 [ 432.807423][T12944] ? hook_file_ioctl_common+0x149/0x410 [ 432.809400][T12944] ? __fget_files+0x21f/0x3d0 [ 432.811163][T12944] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 432.813112][T12944] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 432.815068][T12944] __do_fast_syscall_32+0xe7/0x950 [ 432.816832][T12944] do_fast_syscall_32+0x32/0x70 [ 432.818488][T12944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.820860][T12944] RIP: 0023:0xf7fd2f7c [ 432.822576][T12944] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 432.829593][T12944] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 432.832512][T12944] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000400caed0 [ 432.835120][T12944] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.837772][T12944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.840482][T12944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 432.843271][T12944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.846265][T12944] [ 432.847431][T12944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.849829][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.1.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.853487][T12944] Tainted: [L]=SOFTLOCKUP [ 432.855261][T12944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.858735][T12944] Call Trace: [ 432.859930][T12944] [ 432.860918][T12944] dump_stack_lvl+0x100/0x190 [ 432.862471][T12944] vpanic+0x552/0x970 [ 432.863801][T12944] ? __pfx_vpanic+0x10/0x10 [ 432.865341][T12944] panic+0xd1/0xe0 [ 432.866611][T12944] ? __pfx_panic+0x10/0x10 [ 432.868007][T12944] ? check_panic_on_warn+0x1f/0x90 [ 432.869658][T12944] check_panic_on_warn.cold+0x19/0x34 [ 432.871434][T12944] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 432.873214][T12944] __warn.cold+0x191/0x328 [ 432.874715][T12944] __report_bug+0x296/0x3d0 [ 432.876315][T12944] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 432.878110][T12944] ? __pfx___report_bug+0x10/0x10 [ 432.879842][T12944] ? mark_held_locks+0x40/0x70 [ 432.881522][T12944] ? irqentry_exit+0x24d/0x7e0 [ 432.883115][T12944] ? lockdep_hardirqs_on+0x78/0x100 [ 432.884803][T12944] ? irqentry_exit+0x24d/0x7e0 [ 432.886489][T12944] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 432.888204][T12944] report_bug+0xb2/0x220 [ 432.889611][T12944] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 432.891342][T12944] handle_bug+0x16a/0x2a0 [ 432.892859][T12944] exc_invalid_op+0x17/0x50 [ 432.894417][T12944] asm_exc_invalid_op+0x1a/0x20 [ 432.896128][T12944] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 432.898107][T12944] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 ff 39 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 f1 39 85 00 48 85 db 0f 84 e9 ed ff ff [ 432.904403][T12944] RSP: 0018:ffffc90026e270f0 EFLAGS: 00010293 [ 432.906388][T12944] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff8182b9c9 [ 432.909142][T12944] RDX: ffff888044bfa500 RSI: ffffffff8182d281 RDI: ffff888044bfa500 [ 432.911774][T12944] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 432.914366][T12944] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 432.917152][T12944] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90026e27308 [ 432.919926][T12944] ? __kvm_gpc_refresh+0xd9/0x22c0 [ 432.921619][T12944] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 432.923353][T12944] ? find_held_lock+0x2b/0x80 [ 432.924915][T12944] ? __pfx___mutex_lock+0x10/0x10 [ 432.926544][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.928123][T12944] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 432.929895][T12944] kvm_gpc_refresh+0xc9/0x170 [ 432.931422][T12944] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 432.933264][T12944] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 432.935136][T12944] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 432.937229][T12944] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 432.939419][T12944] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 432.941081][T12944] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 432.942996][T12944] ? __pfx_stack_trace_save+0x10/0x10 [ 432.944667][T12944] ? stack_depot_save_flags+0x27/0x9d0 [ 432.946425][T12944] ? xa_load+0x149/0x2c0 [ 432.947827][T12944] ? kasan_save_stack+0x3f/0x50 [ 432.949655][T12944] ? kasan_save_stack+0x30/0x50 [ 432.951655][T12944] ? kasan_save_track+0x14/0x30 [ 432.953656][T12944] ? __kasan_slab_alloc+0x89/0x90 [ 432.955716][T12944] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 432.957805][T12944] ? security_inode_alloc+0x3b/0x2c0 [ 432.959513][T12944] ? inode_init_always_gfp+0xcc0/0x1000 [ 432.961334][T12944] ? alloc_inode+0x8e/0x250 [ 432.962883][T12944] ? new_inode+0x22/0x1c0 [ 432.964352][T12944] ? __debugfs_create_file+0x105/0x4f0 [ 432.966232][T12944] ? debugfs_create_file_full+0x41/0x60 [ 432.968107][T12944] ? kvm_arch_create_vcpu_debugfs+0x55/0x170 [ 432.970057][T12944] ? kvm_vm_ioctl+0x2587/0x4050 [ 432.971777][T12944] ? kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 432.973992][T12944] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 432.976036][T12944] ? __do_fast_syscall_32+0xe7/0x950 [ 432.977994][T12944] ? do_fast_syscall_32+0x32/0x70 [ 432.979977][T12944] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.982471][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.984267][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.986303][T12944] ? __lock_acquire+0x4a5/0x2630 [ 432.988367][T12944] ? find_held_lock+0x2b/0x80 [ 432.990459][T12944] ? is_bpf_text_address+0x8a/0x1a0 [ 432.992696][T12944] ? is_bpf_text_address+0x8a/0x1a0 [ 432.994932][T12944] ? bpf_ksym_find+0x124/0x1c0 [ 432.996914][T12944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.999505][T12944] ? is_bpf_text_address+0x94/0x1a0 [ 433.001695][T12944] ? kernel_text_address+0x8d/0x100 [ 433.003874][T12944] ? __pfx_widen_string+0x10/0x10 [ 433.005945][T12944] ? __kernel_text_address+0xd/0x30 [ 433.008112][T12944] ? unwind_get_return_address+0x59/0xa0 [ 433.010477][T12944] ? arch_stack_walk+0xa6/0xf0 [ 433.012513][T12944] kvm_vm_ioctl+0x1564/0x4050 [ 433.014510][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 433.016881][T12944] ? stack_trace_save+0x8e/0xc0 [ 433.019069][T12944] ? __pfx_stack_trace_save+0x10/0x10 [ 433.021347][T12944] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 433.023512][T12944] ? __lock_acquire+0x4a5/0x2630 [ 433.025577][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 433.028023][T12944] ? kasan_save_stack+0x3f/0x50 [ 433.029959][T12944] ? kasan_save_stack+0x30/0x50 [ 433.031914][T12944] ? kasan_save_track+0x14/0x30 [ 433.033867][T12944] ? kasan_save_free_info+0x3b/0x70 [ 433.035923][T12944] ? __kasan_slab_free+0x5f/0x80 [ 433.037870][T12944] ? kfree+0x223/0x6c0 [ 433.039516][T12944] ? tomoyo_path_number_perm+0x46d/0x580 [ 433.041736][T12944] ? security_file_ioctl_compat+0xd3/0x230 [ 433.044054][T12944] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 433.046202][T12944] ? __do_fast_syscall_32+0xe7/0x950 [ 433.048272][T12944] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 433.050526][T12944] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 433.052947][T12944] ? kasan_quarantine_put+0x104/0x240 [ 433.055047][T12944] ? lockdep_hardirqs_on+0x78/0x100 [ 433.057272][T12944] ? find_held_lock+0x2b/0x80 [ 433.059429][T12944] ? tomoyo_path_number_perm+0x28f/0x580 [ 433.061857][T12944] ? tomoyo_path_number_perm+0x28f/0x580 [ 433.064094][T12944] ? tomoyo_path_number_perm+0x188/0x580 [ 433.066307][T12944] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.068691][T12944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.071032][T12944] ? do_vfs_ioctl+0x226/0x13e0 [ 433.072930][T12944] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 433.074930][T12944] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 433.076965][T12944] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 433.079201][T12944] ? find_held_lock+0x2b/0x80 [ 433.081059][T12944] ? __fget_files+0x215/0x3d0 [ 433.082960][T12944] ? hook_file_ioctl_common+0x149/0x410 [ 433.085119][T12944] ? __fget_files+0x21f/0x3d0 [ 433.086984][T12944] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 433.089195][T12944] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 433.091327][T12944] __do_fast_syscall_32+0xe7/0x950 [ 433.093119][T12944] do_fast_syscall_32+0x32/0x70 [ 433.094696][T12944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.096709][T12944] RIP: 0023:0xf7fd2f7c [ 433.097990][T12944] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 433.103951][T12944] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 433.106530][T12944] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000400caed0 [ 433.109008][T12944] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.111541][T12944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.114013][T12944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 433.116527][T12944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.119043][T12944] [ 433.120897][T12944] Kernel Offset: disabled [ 433.122353][T12944] Rebooting in 86400 seconds..