last executing test programs: 2m34.949845517s ago: executing program 0 (id=1197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) (async) ioctl(r1, 0x40104d01, &(0x7f0000000a00)="0000020000000000000002") getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) (async) r4 = getgid() (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) (async) fchown(r1, r3, r4) listen(r0, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f00000000c0)='./proc/mtrr\x00', r3, r6) 2m34.021364882s ago: executing program 0 (id=1203): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @mcast1, 0xfffffffc, 0x3}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0), 0x8) syz_pidfd_open(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2m34.011852722s ago: executing program 0 (id=1204): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 2m34.011675455s ago: executing program 0 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 5) 2m33.829705453s ago: executing program 0 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r0, &(0x7f0000010400)="2b64756d6d7b307d06ba34608ac267b85f7b5a81580a", 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a0006"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100"], 0xf4}}, 0x804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)="9b544e4038568423d6a184b1605de6ade59680d1509c3453294ad7", 0x1b, r1}, 0x68) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12000002}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x800}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14}}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000200006"], 0x84}}, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000380)={0x2, 0x2, 0x5, 0x6f6, r5}) 2m33.738713528s ago: executing program 0 (id=1208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12b1a9fda5d3a53c6a5fffaddefda1e252bdfa858a25788978e89d8af722c2ee51b5beb204", 0x9f}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002a00)="c5cb", 0x2}], 0x1}}], 0x2, 0x40) (fail_nth: 4) 2m18.72729846s ago: executing program 32 (id=1208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12b1a9fda5d3a53c6a5fffaddefda1e252bdfa858a25788978e89d8af722c2ee51b5beb204", 0x9f}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002a00)="c5cb", 0x2}], 0x1}}], 0x2, 0x40) (fail_nth: 4) 1m4.430364479s ago: executing program 1 (id=2439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000009, 0x102000, 0x1cc5, 0x8001, 0x400c9, 0xb, 0x0, 0x0, 0x1, 0x759}}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000580)=0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="270086dd03000a00000014"], 0x340a) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='debugfs\x00', 0x208004, 0x0) 1m4.277740941s ago: executing program 1 (id=2440): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0xfffc, 0xfffffff9, 0x1, 0x200}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x3}, 0x8) r3 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x60) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r9, &(0x7f0000000800)='101:0:1\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e49371800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYRES8=r6, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300850000001e000000950000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.25007831s ago: executing program 1 (id=2459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1b, '\x00', @st={0x4, [{0x3, @uvalue=0xef4}, {0x0, @svalue=0x2}, {}, {0x2, @svalue=0x70dd}]}, 0xffff}]}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 1m3.190812994s ago: executing program 1 (id=2461): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8044, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32=r0]) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfdfffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x20241, 0x1ff) fsopen(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)="ef063439", 0x4, 0xffffffffffffffff) write(r6, &(0x7f0000000e40)='1', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x200000000000013a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4880) fcntl$getflags(r7, 0x408) ftruncate(r4, 0x4a8e) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="46f30018ef660000055b90787f000001ffffffff30580a73d4cb3f89031f00873722ea469394f57fbf50d80b2770a4f0ecb59f8c63fa3a89b3eb779c55e4f54c33bae063d46a7d3ed1163e3c9a688777156a60e8ce2cc0da19b21f4b8e47eb0e2d7e935bb8946eca633dc20f54910b05e1c1d0676062a684a228ba844eadf3cb4b55347d93fabd1d77c595fb98d27eacdb403e962f4a3a9293e48e32df90ebe85d3b79d1f8a1d30c5e851d95ca6871bb3adba502e916845ce1503ab99f3f1aedae684377b2f1d6ea6b9f0ccf256f277ee95becba89c1eaa8f8c173aa0b9b00"], 0x18) 1m3.102090195s ago: executing program 1 (id=2463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001"], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m2.280976029s ago: executing program 1 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8411000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) 1m2.234766442s ago: executing program 33 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8411000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) 2.90056831s ago: executing program 2 (id=3306): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdffb, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x8000400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 64) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') (rerun: 64) open_by_handle_at(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="20000000f100000002"], 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000000)={0xc00000, [[0x200, 0x7fffffff, 0x7fffffff, 0xb7de, 0x6, 0x101, 0x3f615d60, 0x7], [0xfffffff2, 0xffffffc0, 0x800, 0xeb7, 0x838, 0x8001, 0x4, 0xfffffffa], [0x3, 0x6, 0x1, 0x3, 0x6, 0x5, 0x7000, 0x16002]], '\x00', [{0x458, 0x7fff, 0x1}, {0x44c5, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xffffffff, 0x8000, 0x0, 0x1, 0x1}, {0x8, 0x6}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xdd, 0xff, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0x1000, 0x1, 0x1, 0x1}, {0xabe, 0xfffffffa, 0x1, 0x1, 0x1}, {0x4, 0x9, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x1}], '\x00', 0xf7d}) 2.803866189s ago: executing program 2 (id=3309): r0 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2.803380545s ago: executing program 2 (id=3310): ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r7 = dup2(r5, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000428bd7000fcf6ca76e300000005000400010000000900010073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r7) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r11 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r11, 0x40085400, 0x0) 2.747690003s ago: executing program 2 (id=3313): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003007379"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.67028713s ago: executing program 2 (id=3314): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.664848123s ago: executing program 2 (id=3315): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="3f0033008000e100ffffffffffff080211000000505050505050000000000000000000006400014001000301"], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="3f0033008000e100ffffffffffff080211000000505050505050000000000000000000006400014001000301"], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x170, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x104}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x651}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6727}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48041}, 0x801) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1aa702, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x302, 0x0, 0x100000, 0x1000, &(0x7f0000e4e000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x302, 0x0, 0x100000, 0x1000, &(0x7f0000e4e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x4d, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x10000) (async) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r13 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r13, 0x720, &(0x7f0000000180)={0x1, 0xaf, 0x2, &(0x7f0000000100)={0x22, "5a2f97fb4ab5a48ddbc3a0c3240199ba25d7f6c6a48f5bbf6e7428f342c14178fd"}}) (async) ioctl$I2C_SMBUS(r13, 0x720, &(0x7f0000000180)={0x1, 0xaf, 0x2, &(0x7f0000000100)={0x22, "5a2f97fb4ab5a48ddbc3a0c3240199ba25d7f6c6a48f5bbf6e7428f342c14178fd"}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000100)={0x3, 0x2, 0x1, "635f00b696ebb905e3eaf7f878d862b3d7ebb8bd49b36ae0920f3f437acf51b6", 0x47504a4d}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000100)={0x3, 0x2, 0x1, "635f00b696ebb905e3eaf7f878d862b3d7ebb8bd49b36ae0920f3f437acf51b6", 0x47504a4d}) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e22, 0x3, 'lc\x00', 0x3, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e22, 0x3, 'lc\x00', 0x3, 0x80005, 0x6f}, 0x2c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7, 0xc200, 0x1, 0x70, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000600)={r14}, 0x8) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.589210875s ago: executing program 4 (id=3336): open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.523164425s ago: executing program 4 (id=3337): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x0, @broadcast}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) 1.480033033s ago: executing program 4 (id=3338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000100000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01080000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 1.239012162s ago: executing program 4 (id=3340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003007379"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) 1.238747813s ago: executing program 4 (id=3341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b1400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.157999749s ago: executing program 4 (id=3342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x436, 0x8, 0x0, 0x67, 0x9, 0x6, 0x7, 0x10, 0xb0, 0x3, 0xbb, 0x7f, 0xd5a8}, {0x800, 0x5, 0x33, 0xf0, 0xa, 0xef, 0x0, 0x4, 0x3, 0x5, 0x6, 0x8, 0x8}, {0x7fff, 0x3, 0x9, 0x5, 0x7f, 0x4, 0x2, 0xd, 0x0, 0x7f, 0x8, 0x3, 0x7}], 0x1b86f74c}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40981, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x24000000) 1.157732574s ago: executing program 5 (id=3343): r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.08993287s ago: executing program 5 (id=3344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x27ac4c) 990.696068ms ago: executing program 5 (id=3345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x37, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x56, 0x5, 0x8, 0x52, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x10, 0x1, 0x200, 0x9}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd27, 0x25dfdbfd, {0x7, r2}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 990.491479ms ago: executing program 5 (id=3346): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0xffff8000, 0xa7, 0x7fffffff}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x20, 0x0, 0x1000}}]}]}}}]}, 0x78}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r9, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xf, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd709c01bb8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 780.074399ms ago: executing program 3 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000100000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01080000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 779.511212ms ago: executing program 3 (id=3350): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) chdir(&(0x7f0000000000)='./config\x00') mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) setns(0xc9, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r1) write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) (async) chdir(&(0x7f0000000000)='./config\x00') (async) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) setns(0xc9, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) close(r1) (async) write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc) (async) 698.495338ms ago: executing program 3 (id=3351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) prlimit64(r2, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000680)={0x28, 0x3c, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="75c62579d3be07", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x5}}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r5, 0x4}, 0xfffffe13) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xaf6, 0x4e23, 0x9, 0x2, 0x0, 0x20, 0x3b, r6}, {0xe0ab, 0xb0f, 0x5, 0x5, 0xffffffffffffffff, 0x100000000, 0x0, 0x2}, {0x6, 0x5, 0x2, 0xc15}, 0x8, 0x6e6bb0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d3, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x2, 0x0, 0x5, 0x2, 0x0, 0xe}}, 0xe8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x8000005}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x96, 0x3, 0x2, 0x6a, @mcast1, @private2, 0x40, 0x0, 0x0, 0x9}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="9500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018160000", @ANYRES32, @ANYBLOB="000000000000000018540001000000000000000000000000184a0000fbfff9ff0000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x1, '\x00', r8, 0x25, r9, 0x8, &(0x7f00000002c0)={0x3, 0x4000005}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x1, 0x3, 0x7, 0xb}, {0x3, 0x1, 0x6, 0x5}, {0x4, 0x1, 0xb, 0x4}, {0x5, 0x4, 0x10, 0x7}], 0x10, 0xa9}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)={0x30, r11, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6981404b282e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 698.204495ms ago: executing program 3 (id=3352): open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = accept(r1, &(0x7f0000000340)=@ieee802154, &(0x7f00000003c0)=0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x4000010, r2, 0xce308000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 619.513308ms ago: executing program 3 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003007379"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) 619.224451ms ago: executing program 3 (id=3354): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfff]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000640)) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='source', 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) 70.350422ms ago: executing program 5 (id=3355): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x0, @broadcast}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) 0s ago: executing program 5 (id=3356): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="666666666666a579db1f206666", 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='off', 0x3) write(r1, &(0x7f0000000180)='on', 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x2, "9d1532f62602a741033d5bc2cd1aef7de8e594783eaa434305dfb589b1a7fc39", 0x5, 0x120, 0x2, 0x5, 0x10, 0x1, 0x800, 0x8000}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000340)=0x4) kernel console output (not intermixed with test programs): uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 242.732813][T13680] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2627'. [ 242.733163][ T42] audit: type=1800 audit(1787569436.151:2940): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 242.806283][ T42] audit: type=1800 audit(1787569436.241:2941): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 242.818885][ T42] audit: type=1800 audit(1787569436.241:2942): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 242.837063][T13690] nvme_fabrics: no handler found for transport fc+traddr=nn-0x3333333333333333:pn-0x4444444444444444. [ 242.839155][ T42] audit: type=1400 audit(1787569436.271:2943): avc: denied { watch watch_reads } for pid=13687 comm="syz.2.2630" path="/45/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 242.852117][ T42] audit: type=1800 audit(1787569436.281:2944): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 242.878044][ T42] audit: type=1800 audit(1787569436.311:2945): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 242.920591][T13698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2633'. [ 243.042547][T13718] 9pnet_virtio: no channels available for device syz [ 243.120424][T13723] syzkaller0: entered promiscuous mode [ 243.123935][T13723] syzkaller0: entered allmulticast mode [ 243.138485][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2648'. [ 243.157246][T13733] (syz.4.2649,13733,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 243.523445][ T5877] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 243.674474][ T5877] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.677328][ T5877] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 243.680907][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.683956][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.687320][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.690301][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.693863][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.697797][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.701178][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.704562][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.708275][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.711420][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.714398][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.718300][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.722041][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.725641][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.729950][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.734055][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.737356][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.740908][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.744554][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.747879][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.752066][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.756434][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.760020][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.764109][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.768656][ T5877] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.772039][ T5877] usb 7-1: Product: syz [ 243.773767][ T5877] usb 7-1: Manufacturer: syz [ 243.775576][ T5877] usb 7-1: SerialNumber: syz [ 244.579740][T13738] syzkaller0: left promiscuous mode [ 244.581960][T13738] syzkaller0: left allmulticast mode [ 244.774419][T13753] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 244.780075][T13753] CPU: 2 UID: 0 PID: 13753 Comm: syz.4.2652 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.780120][T13753] Tainted: [L]=SOFTLOCKUP [ 244.780128][T13753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.780138][T13753] Call Trace: [ 244.780144][T13753] [ 244.780151][T13753] dump_stack_lvl+0x100/0x190 [ 244.780189][T13753] sysfs_warn_dup.cold+0x1c/0x28 [ 244.780216][T13753] sysfs_create_dir_ns+0x24b/0x2b0 [ 244.780247][T13753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.780272][T13753] ? find_held_lock+0x2b/0x80 [ 244.780290][T13753] ? kobject_add_internal+0x25f/0x930 [ 244.780318][T13753] ? kobject_add_internal+0x25f/0x930 [ 244.780344][T13753] ? class_dir_child_ns_type+0xd/0x60 [ 244.780366][T13753] kobject_add_internal+0x2c8/0x930 [ 244.780394][T13753] kobject_add+0x16a/0x1e0 [ 244.780415][T13753] ? __pfx_kobject_add+0x10/0x10 [ 244.780438][T13753] ? get_device_parent+0x1b3/0x4c0 [ 244.780456][T13753] ? kobject_put+0xb9/0x640 [ 244.780482][T13753] device_add+0x294/0x1970 [ 244.780503][T13753] ? lockdep_init_map_type+0x5c/0x250 [ 244.780528][T13753] ? __pfx_device_add+0x10/0x10 [ 244.780563][T13753] ? lockdep_init_map_type+0x5c/0x250 [ 244.780598][T13753] ? __init_waitqueue_head+0xca/0x150 [ 244.780622][T13753] tty_register_device_attr+0x388/0x7f0 [ 244.780649][T13753] ? lockdep_init_map_type+0x5c/0x250 [ 244.780674][T13753] ? __pfx_tty_register_device_attr+0x10/0x10 [ 244.780704][T13753] ? tty_port_init+0x156/0x1c0 [ 244.780724][T13753] gsm_activate_mux+0x155/0x2a0 [ 244.780742][T13753] gsmld_ioctl+0xbbc/0x15c0 [ 244.780765][T13753] ? kasan_quarantine_put+0x104/0x240 [ 244.780788][T13753] ? __pfx_gsmld_ioctl+0x10/0x10 [ 244.780823][T13753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.780847][T13753] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 244.780871][T13753] ? __pfx_gsmld_ioctl+0x10/0x10 [ 244.780889][T13753] tty_ioctl+0x11b4/0x1640 [ 244.780906][T13753] ? __pfx_tty_ioctl+0x10/0x10 [ 244.780920][T13753] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 244.780947][T13753] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 244.780986][T13753] ? selinux_file_ioctl+0x13b/0x290 [ 244.781008][T13753] ? selinux_file_ioctl+0xb6/0x290 [ 244.781032][T13753] ? __pfx_tty_ioctl+0x10/0x10 [ 244.781049][T13753] __x64_sys_ioctl+0x18e/0x210 [ 244.781070][T13753] do_syscall_64+0x123/0x790 [ 244.781090][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.781107][T13753] RIP: 0033:0x7fc6c339e0d9 [ 244.781122][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.781138][T13753] RSP: 002b:00007fc6c4278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.781156][T13753] RAX: ffffffffffffffda RBX: 00007fc6c3626090 RCX: 00007fc6c339e0d9 [ 244.781168][T13753] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 000000000000000d [ 244.781178][T13753] RBP: 00007fc6c3435024 R08: 0000000000000000 R09: 0000000000000000 [ 244.781188][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.781197][T13753] R13: 00007fc6c3626128 R14: 00007fc6c3626090 R15: 00007ffe27e781a8 [ 244.781219][T13753] [ 244.783262][T13753] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.137242][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2658'. [ 245.189771][T13766] netlink: 'syz.3.2659': attribute type 21 has an invalid length. [ 245.192933][T13766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2659'. [ 245.578436][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 245.623536][ T34] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 245.694680][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2667'. [ 245.754236][ T34] usb 8-1: device descriptor read/64, error -71 [ 245.789118][T13793] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2671'. [ 246.003394][ T34] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 246.153386][ T34] usb 8-1: device descriptor read/64, error -71 [ 246.273591][ T34] usb usb8-port1: attempt power cycle [ 246.297770][ T5877] usb 7-1: USB disconnect, device number 22 [ 246.643805][ T34] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 246.643836][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2677'. [ 246.663867][ T34] usb 8-1: device descriptor read/8, error -71 [ 246.923490][ T34] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 246.953827][ T34] usb 8-1: device descriptor read/8, error -71 [ 247.029482][T13820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=13820 comm=syz.5.2683 [ 247.033424][T13820] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2683'. [ 247.073578][ T34] usb usb8-port1: unable to enumerate USB device [ 247.828711][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 247.828728][ T42] audit: type=1400 audit(1787569441.261:3081): avc: denied { create } for pid=13828 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.840116][ T42] audit: type=1800 audit(1787569441.261:3082): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 247.847581][ T42] audit: type=1400 audit(1787569441.271:3083): avc: denied { ioctl } for pid=13828 comm="syz.5.2685" path="socket:[57441]" dev="sockfs" ino=57441 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.855543][ T42] audit: type=1400 audit(1787569441.271:3084): avc: denied { bind } for pid=13828 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.863034][ T42] audit: type=1400 audit(1787569441.271:3085): avc: denied { write } for pid=13828 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.871361][ T42] audit: type=1800 audit(1787569441.301:3086): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 247.904630][T13832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2686'. [ 247.907841][T13832] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 248.148194][ T42] audit: type=1800 audit(1787569441.581:3087): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 248.159244][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 248.182281][ T42] audit: type=1800 audit(1787569441.611:3088): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 248.214922][ T42] audit: type=1800 audit(1787569441.651:3089): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 248.244575][ T42] audit: type=1800 audit(1787569441.681:3090): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 248.389093][T13849] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 248.410427][T13849] netlink: Failed to add À helper -22 [ 248.412136][T13849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.428310][T13856] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2696'. [ 248.446090][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 248.527370][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 248.647445][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 248.973361][ T1478] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 249.123935][ T1478] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.127690][ T1478] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.130846][ T1478] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.133743][ T1478] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.139253][ T1478] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.141829][ T1478] usb 8-1: Product: syz [ 249.143175][ T1478] usb 8-1: Manufacturer: syz [ 249.144821][ T1478] usb 8-1: SerialNumber: syz [ 249.150014][T13845] [U] J"—E:ÀÆ" [ 249.246538][T13901] FAULT_INJECTION: forcing a failure. [ 249.246538][T13901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.249011][T13907] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2714'. [ 249.251675][T13901] CPU: 0 UID: 0 PID: 13901 Comm: syz.5.2713 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.251702][T13901] Tainted: [L]=SOFTLOCKUP [ 249.251708][T13901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.251718][T13901] Call Trace: [ 249.251724][T13901] [ 249.251731][T13901] dump_stack_lvl+0x100/0x190 [ 249.251771][T13901] should_fail_ex.cold+0x5/0xa [ 249.251794][T13901] _copy_from_iter+0x1f4/0x1690 [ 249.251818][T13901] ? __asan_memset+0x23/0x50 [ 249.251833][T13901] ? __pfx__copy_from_iter+0x10/0x10 [ 249.251843][T13901] ? __pfx___alloc_skb+0x10/0x10 [ 249.251869][T13901] netlink_sendmsg+0x808/0xda0 [ 249.251888][T13901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.251905][T13901] ? selinux_socket_sendmsg+0x198/0x2f0 [ 249.251923][T13901] ____sys_sendmsg+0xa4d/0xbe0 [ 249.251936][T13901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.251953][T13901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.251970][T13901] ? __pfx_trace_clock_local+0x10/0x10 [ 249.251983][T13901] ___sys_sendmsg+0x190/0x1e0 [ 249.251999][T13901] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.252019][T13901] ? find_held_lock+0x2b/0x80 [ 249.252040][T13901] __sys_sendmsg+0x160/0x210 [ 249.252051][T13901] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.252069][T13901] do_syscall_64+0x123/0x790 [ 249.252086][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.252101][T13901] RIP: 0033:0x7f8c89b9e0d9 [ 249.252111][T13901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.252122][T13901] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.252133][T13901] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 249.252140][T13901] RDX: 0000000000008080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 249.252146][T13901] RBP: 00007f8c87df6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.252153][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.252159][T13901] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 249.252173][T13901] [ 249.319254][T13912] binder: 13911:13912 ioctl c0306201 2000000004c0 returned -14 [ 249.400423][T13923] netlink: 'syz.2.2720': attribute type 8 has an invalid length. [ 249.460138][T13929] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 249.468980][T13929] CPU: 1 UID: 0 PID: 13929 Comm: syz.4.2721 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.469012][T13929] Tainted: [L]=SOFTLOCKUP [ 249.469019][T13929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.469032][T13929] Call Trace: [ 249.469039][T13929] [ 249.469047][T13929] dump_stack_lvl+0x100/0x190 [ 249.469079][T13929] sysfs_warn_dup.cold+0x1c/0x28 [ 249.469108][T13929] sysfs_create_dir_ns+0x24b/0x2b0 [ 249.469139][T13929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 249.469167][T13929] ? find_held_lock+0x2b/0x80 [ 249.469189][T13929] ? kobject_add_internal+0x25f/0x930 [ 249.469214][T13929] ? kobject_add_internal+0x25f/0x930 [ 249.469241][T13929] ? class_dir_child_ns_type+0xd/0x60 [ 249.469266][T13929] kobject_add_internal+0x2c8/0x930 [ 249.469295][T13929] kobject_add+0x16a/0x1e0 [ 249.469319][T13929] ? __pfx_kobject_add+0x10/0x10 [ 249.469346][T13929] ? get_device_parent+0x1b3/0x4c0 [ 249.469368][T13929] ? kobject_put+0xb9/0x640 [ 249.469420][T13929] device_add+0x294/0x1970 [ 249.469447][T13929] ? lockdep_init_map_type+0x5c/0x250 [ 249.469477][T13929] ? __pfx_device_add+0x10/0x10 [ 249.469496][T13929] ? lockdep_init_map_type+0x5c/0x250 [ 249.469527][T13929] ? __init_waitqueue_head+0xca/0x150 [ 249.469578][T13929] tty_register_device_attr+0x388/0x7f0 [ 249.469626][T13929] ? lockdep_init_map_type+0x5c/0x250 [ 249.469655][T13929] ? __pfx_tty_register_device_attr+0x10/0x10 [ 249.469693][T13929] ? tty_port_init+0x156/0x1c0 [ 249.469717][T13929] gsm_activate_mux+0x155/0x2a0 [ 249.469738][T13929] gsmld_ioctl+0xbbc/0x15c0 [ 249.469765][T13929] ? kasan_quarantine_put+0x104/0x240 [ 249.469792][T13929] ? __pfx_gsmld_ioctl+0x10/0x10 [ 249.469831][T13929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.469858][T13929] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 249.469886][T13929] ? __pfx_gsmld_ioctl+0x10/0x10 [ 249.469906][T13929] tty_ioctl+0x11b4/0x1640 [ 249.469925][T13929] ? __pfx_tty_ioctl+0x10/0x10 [ 249.469941][T13929] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 249.469971][T13929] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.470016][T13929] ? selinux_file_ioctl+0x13b/0x290 [ 249.470042][T13929] ? selinux_file_ioctl+0xb6/0x290 [ 249.470071][T13929] ? __pfx_tty_ioctl+0x10/0x10 [ 249.470090][T13929] __x64_sys_ioctl+0x18e/0x210 [ 249.470115][T13929] do_syscall_64+0x123/0x790 [ 249.470138][T13929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.470157][T13929] RIP: 0033:0x7fc6c339e0d9 [ 249.470175][T13929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.470193][T13929] RSP: 002b:00007fc6c4278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.470213][T13929] RAX: ffffffffffffffda RBX: 00007fc6c3626090 RCX: 00007fc6c339e0d9 [ 249.470225][T13929] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 249.470237][T13929] RBP: 00007fc6c3435024 R08: 0000000000000000 R09: 0000000000000000 [ 249.470249][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.470260][T13929] R13: 00007fc6c3626128 R14: 00007fc6c3626090 R15: 00007ffe27e781a8 [ 249.470286][T13929] [ 249.470421][T13929] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 249.521850][T13934] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2724'. [ 249.552319][T13936] qrtr: Invalid version 0 [ 249.612595][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2723'. [ 249.612668][T13936] netlink: 'syz.2.2725': attribute type 5 has an invalid length. [ 249.895314][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2734'. [ 249.976796][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 250.457829][T13985] kvm: kvm [13983]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000057) = 0xffffffffffffffff [ 251.141651][T14019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14019 comm=syz.2.2752 [ 251.144137][T13961] Set syz0 is full, maxelem 65536 reached [ 251.186711][T14023] FAULT_INJECTION: forcing a failure. [ 251.186711][T14023] name failslab, interval 1, probability 0, space 0, times 0 [ 251.190786][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.5.2753 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.190803][T14023] Tainted: [L]=SOFTLOCKUP [ 251.190807][T14023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.190814][T14023] Call Trace: [ 251.190818][T14023] [ 251.190823][T14023] dump_stack_lvl+0x100/0x190 [ 251.190842][T14023] should_fail_ex.cold+0x5/0xa [ 251.190858][T14023] should_failslab+0xc2/0x120 [ 251.190875][T14023] kmem_cache_alloc_noprof+0x91/0x6a0 [ 251.190891][T14023] ? __kernfs_new_node+0xd2/0xa10 [ 251.190905][T14023] __kernfs_new_node+0xd2/0xa10 [ 251.190920][T14023] ? __pfx___kernfs_new_node+0x10/0x10 [ 251.190935][T14023] ? find_held_lock+0x2b/0x80 [ 251.190948][T14023] ? kernfs_root+0xee/0x2a0 [ 251.190958][T14023] ? kernfs_root+0xee/0x2a0 [ 251.190971][T14023] kernfs_new_node+0x117/0x150 [ 251.190986][T14023] __kernfs_create_file+0x53/0x350 [ 251.191002][T14023] sysfs_add_file_mode_ns+0x207/0x3c0 [ 251.191023][T14023] internal_create_group+0x593/0xfb0 [ 251.191038][T14023] ? __pfx_internal_create_group+0x10/0x10 [ 251.191051][T14023] ? kernfs_create_link+0x1bd/0x240 [ 251.191068][T14023] internal_create_groups+0x9d/0x150 [ 251.191080][T14023] device_add+0xf60/0x1970 [ 251.191096][T14023] ? __pfx_device_add+0x10/0x10 [ 251.191110][T14023] ? lockdep_init_map_type+0x5c/0x250 [ 251.191127][T14023] ? __init_waitqueue_head+0xca/0x150 [ 251.191141][T14023] wakeup_source_device_create+0x243/0x2e0 [ 251.191157][T14023] wakeup_source_sysfs_add+0x1c/0x90 [ 251.191172][T14023] wakeup_source_register+0x154/0x3e0 [ 251.191184][T14023] ep_create_wakeup_source+0x1df/0x2e0 [ 251.191197][T14023] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 251.191210][T14023] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 251.191223][T14023] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 251.191238][T14023] do_epoll_ctl_file+0x1e26/0x36e0 [ 251.191255][T14023] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 251.191269][T14023] ? find_held_lock+0x2b/0x80 [ 251.191282][T14023] ? __fget_files+0x215/0x3d0 [ 251.191301][T14023] ? __fget_files+0x21f/0x3d0 [ 251.191320][T14023] ? do_epoll_ctl+0xfd/0x1a0 [ 251.191332][T14023] do_epoll_ctl+0xfd/0x1a0 [ 251.191344][T14023] ? __pfx_do_epoll_ctl+0x10/0x10 [ 251.191363][T14023] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 251.191377][T14023] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 251.191389][T14023] ? trace_syscall_enter+0xd6/0x100 [ 251.191403][T14023] do_syscall_64+0x123/0x790 [ 251.191418][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.191429][T14023] RIP: 0033:0x7f8c89b9e0d9 [ 251.191439][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.191450][T14023] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 251.191462][T14023] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 251.191469][T14023] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 251.191476][T14023] RBP: 00007f8c87df6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.191482][T14023] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 251.191489][T14023] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 251.191502][T14023] [ 251.532137][T14042] netlink: 'syz.5.2760': attribute type 2 has an invalid length. [ 251.573109][T14044] FAULT_INJECTION: forcing a failure. [ 251.573109][T14044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.578329][T14044] CPU: 2 UID: 0 PID: 14044 Comm: syz.5.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.578348][T14044] Tainted: [L]=SOFTLOCKUP [ 251.578352][T14044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.578358][T14044] Call Trace: [ 251.578362][T14044] [ 251.578367][T14044] dump_stack_lvl+0x100/0x190 [ 251.578391][T14044] should_fail_ex.cold+0x5/0xa [ 251.578406][T14044] _copy_from_iter+0x1f4/0x1690 [ 251.578419][T14044] ? _copy_from_iter+0x270/0x1690 [ 251.578429][T14044] ? __pfx__copy_from_iter+0x10/0x10 [ 251.578441][T14044] ? __pfx__copy_from_iter+0x10/0x10 [ 251.578451][T14044] ? _copy_from_iter+0x270/0x1690 [ 251.578464][T14044] copy_page_from_iter+0x238/0x300 [ 251.578481][T14044] skb_copy_datagram_from_iter+0x399/0x720 [ 251.578502][T14044] packet_sendmsg+0x2257/0x4f00 [ 251.578527][T14044] ? sock_has_perm+0x25a/0x2f0 [ 251.578541][T14044] ? __pfx_sock_has_perm+0x10/0x10 [ 251.578558][T14044] ? __pfx_packet_sendmsg+0x10/0x10 [ 251.578574][T14044] ? __might_fault+0xc5/0x140 [ 251.578590][T14044] ? selinux_socket_sendmsg+0x198/0x2f0 [ 251.578608][T14044] __sys_sendto+0x48b/0x4e0 [ 251.578624][T14044] ? __pfx_packet_sendmsg+0x10/0x10 [ 251.578642][T14044] ? __pfx___sys_sendto+0x10/0x10 [ 251.578664][T14044] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 251.578683][T14044] ? find_held_lock+0x2b/0x80 [ 251.578696][T14044] ? trace_syscall_enter+0xd6/0x100 [ 251.578706][T14044] ? trace_syscall_enter+0xd6/0x100 [ 251.578718][T14044] __x64_sys_sendto+0xe0/0x1c0 [ 251.578735][T14044] ? trace_syscall_enter+0xe0/0x100 [ 251.578746][T14044] do_syscall_64+0x123/0x790 [ 251.578760][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.578771][T14044] RIP: 0033:0x7f8c89b9e0d9 [ 251.578781][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.578792][T14044] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 251.578803][T14044] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 251.578810][T14044] RDX: 000000000000fd1e RSI: 00002000000002c0 RDI: 0000000000000004 [ 251.578817][T14044] RBP: 00007f8c87df6090 R08: 0000200000000140 R09: 0000000000000014 [ 251.578823][T14044] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 251.578830][T14044] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 251.578845][T14044] [ 251.662629][ T1478] usb 8-1: USB disconnect, device number 29 [ 251.942142][T14059] device-mapper: ioctl: Empty message received. [ 252.026616][T14065] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 252.047355][T14065] romfs: unable to set blocksize [ 252.047355][T14065] [ 252.106962][T14067] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 252.337874][T14079] team0: Cannot enslave team device to itself [ 252.443449][ T34] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 252.595163][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.600473][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.604419][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.607546][ T34] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.615082][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.618648][ T34] usb 10-1: Product: syz [ 252.620622][ T34] usb 10-1: Manufacturer: syz [ 252.622278][ T34] usb 10-1: SerialNumber: syz [ 252.735757][T14084] device-mapper: ioctl: Empty message received. [ 252.837327][ T42] kauditd_printk_skb: 211 callbacks suppressed [ 252.837344][ T42] audit: type=1800 audit(1787569446.271:3302): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 252.878297][ T42] audit: type=1800 audit(1787569446.311:3303): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 252.969813][ T42] audit: type=1800 audit(1787569446.401:3304): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 253.017565][ T42] audit: type=1800 audit(1787569446.451:3305): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 253.026953][T14098] syz_tun: entered allmulticast mode [ 253.033046][ T42] audit: type=1400 audit(1787569446.461:3306): avc: denied { write } for pid=14097 comm="syz.4.2781" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.034479][T14098] random: crng reseeded on system resumption [ 253.042885][ T42] audit: type=1400 audit(1787569446.461:3307): avc: denied { open } for pid=14097 comm="syz.4.2781" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.071812][ T42] audit: type=1400 audit(1787569446.501:3308): avc: denied { ioctl } for pid=14097 comm="syz.4.2781" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.090684][T14097] syz_tun: left allmulticast mode [ 253.118774][ T42] audit: type=1800 audit(1787569446.551:3309): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 253.175035][ T42] audit: type=1800 audit(1787569446.611:3310): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 253.206905][ T42] audit: type=1800 audit(1787569446.641:3311): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 253.249110][T14107] FAULT_INJECTION: forcing a failure. [ 253.249110][T14107] name failslab, interval 1, probability 0, space 0, times 0 [ 253.254327][T14107] CPU: 2 UID: 0 PID: 14107 Comm: syz.2.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.254358][T14107] Tainted: [L]=SOFTLOCKUP [ 253.254364][T14107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.254375][T14107] Call Trace: [ 253.254382][T14107] [ 253.254389][T14107] dump_stack_lvl+0x100/0x190 [ 253.254421][T14107] should_fail_ex.cold+0x5/0xa [ 253.254452][T14107] should_failslab+0xc2/0x120 [ 253.254481][T14107] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 253.254508][T14107] ? __alloc_skb+0x140/0x710 [ 253.254540][T14107] __alloc_skb+0x140/0x710 [ 253.254562][T14107] ? __alloc_skb+0x5b7/0x710 [ 253.254586][T14107] ? __pfx___alloc_skb+0x10/0x10 [ 253.254613][T14107] ? if_nlmsg_size+0x4b/0xdc0 [ 253.254638][T14107] rtmsg_ifinfo_build_skb+0x81/0x260 [ 253.254665][T14107] rtmsg_ifinfo+0xa4/0x1b0 [ 253.254692][T14107] netif_state_change+0x17f/0x380 [ 253.254714][T14107] ? __pfx_netif_state_change+0x10/0x10 [ 253.254741][T14107] ? netif_change_flags+0x10d/0x160 [ 253.254772][T14107] do_setlink.isra.0+0x31ce/0x3e60 [ 253.254794][T14107] ? stack_trace_save+0x8e/0xc0 [ 253.254820][T14107] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 253.254844][T14107] ? __lock_acquire+0x4c5/0x1ec0 [ 253.254880][T14107] ? lock_acquire+0x1b9/0x370 [ 253.254908][T14107] ? rcu_is_watching+0x13/0xc0 [ 253.254929][T14107] ? trace_contention_end+0x126/0x160 [ 253.254957][T14107] ? __mutex_lock+0x26c/0x1bc0 [ 253.254978][T14107] ? rtnl_newlink+0xac3/0x2620 [ 253.255002][T14107] ? __pfx___mutex_lock+0x10/0x10 [ 253.255021][T14107] ? rcu_is_watching+0x13/0xc0 [ 253.255040][T14107] ? cap_capable+0x107/0x430 [ 253.255077][T14107] rtnl_newlink+0x1dc4/0x2620 [ 253.255103][T14107] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.255124][T14107] ? find_held_lock+0x2b/0x80 [ 253.255144][T14107] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 253.255165][T14107] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 253.255198][T14107] ? __lock_acquire+0x4c5/0x1ec0 [ 253.255236][T14107] ? find_held_lock+0x2b/0x80 [ 253.255256][T14107] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.255275][T14107] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.255296][T14107] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.255317][T14107] rtnetlink_rcv_msg+0x95e/0xe90 [ 253.255339][T14107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.255366][T14107] ? ref_tracker_free+0x37e/0x6c0 [ 253.255391][T14107] netlink_rcv_skb+0x159/0x420 [ 253.255419][T14107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.255442][T14107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.255488][T14107] ? netlink_deliver_tap+0x1ae/0xcc0 [ 253.255519][T14107] netlink_unicast+0x585/0x850 [ 253.255549][T14107] ? __pfx_netlink_unicast+0x10/0x10 [ 253.255582][T14107] netlink_sendmsg+0x8b0/0xda0 [ 253.255613][T14107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.255642][T14107] ? selinux_socket_sendmsg+0x198/0x2f0 [ 253.255672][T14107] ____sys_sendmsg+0xa4d/0xbe0 [ 253.255694][T14107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.255721][T14107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.255750][T14107] ? __pfx_trace_clock_local+0x10/0x10 [ 253.255771][T14107] ___sys_sendmsg+0x190/0x1e0 [ 253.255798][T14107] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.255834][T14107] ? find_held_lock+0x2b/0x80 [ 253.255871][T14107] __sys_sendmsg+0x160/0x210 [ 253.255892][T14107] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.255921][T14107] do_syscall_64+0x123/0x790 [ 253.255942][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.255962][T14107] RIP: 0033:0x7f2451d9e0d9 [ 253.255978][T14107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.255995][T14107] RSP: 002b:00007f2452d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.256014][T14107] RAX: ffffffffffffffda RBX: 00007f2452025fa0 RCX: 00007f2451d9e0d9 [ 253.256026][T14107] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000003 [ 253.256036][T14107] RBP: 00007f2452d18090 R08: 0000000000000000 R09: 0000000000000000 [ 253.256047][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.256057][T14107] R13: 00007f2452026038 R14: 00007f2452025fa0 R15: 00007fff74fe1628 [ 253.256082][T14107] [ 253.262761][T14109] __nla_validate_parse: 14 callbacks suppressed [ 253.262772][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 253.336022][T14112] device-mapper: ioctl: Empty message received. [ 253.612054][T14117] syz.4.2789 (14117): drop_caches: 2 [ 253.625208][T14119] xt_recent: Unsupported userspace flags (000000b2) [ 253.657295][T14117] binder: 14116:14117 ioctl c05c5340 200000000440 returned -22 [ 253.700409][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 253.703513][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 253.707700][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 253.747618][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 253.873365][ T34] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 253.945171][T14140] bridge2: entered promiscuous mode [ 253.946998][T14140] bridge2: entered allmulticast mode [ 253.950071][T14140] team0: Port device bridge2 added [ 253.954873][T14140] bridge0: port 3(team0) entered blocking state [ 253.957459][T14140] bridge0: port 3(team0) entered disabled state [ 253.959971][T14140] team0: entered allmulticast mode [ 253.961959][T14140] team_slave_0: entered allmulticast mode [ 253.965139][T14140] team_slave_1: entered allmulticast mode [ 253.968438][T14140] team0: entered promiscuous mode [ 253.970481][T14140] team_slave_0: entered promiscuous mode [ 253.972727][T14140] team_slave_1: entered promiscuous mode [ 253.975779][T14140] bridge0: port 3(team0) entered blocking state [ 253.978312][T14140] bridge0: port 3(team0) entered forwarding state [ 254.013460][ T34] usb 8-1: device descriptor read/64, error -71 [ 254.283740][ T34] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 254.423395][ T34] usb 8-1: device descriptor read/64, error -71 [ 254.494776][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 254.545478][ T34] usb usb8-port1: attempt power cycle [ 254.600842][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 254.893400][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 254.924068][ T34] usb 8-1: device descriptor read/8, error -71 [ 254.999623][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2813'. [ 255.151404][T14188] FAULT_INJECTION: forcing a failure. [ 255.151404][T14188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.156845][T14188] CPU: 2 UID: 0 PID: 14188 Comm: syz.2.2817 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.156873][T14188] Tainted: [L]=SOFTLOCKUP [ 255.156880][T14188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.156891][T14188] Call Trace: [ 255.156908][T14188] [ 255.156921][T14188] dump_stack_lvl+0x100/0x190 [ 255.156950][T14188] should_fail_ex.cold+0x5/0xa [ 255.156974][T14188] _copy_from_user+0x2e/0xd0 [ 255.157002][T14188] copy_msghdr_from_user+0x9f/0x4c0 [ 255.157025][T14188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 255.157053][T14188] ? __pfx_trace_clock_local+0x10/0x10 [ 255.157075][T14188] ___sys_sendmsg+0x106/0x1e0 [ 255.157098][T14188] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.157130][T14188] ? find_held_lock+0x2b/0x80 [ 255.157166][T14188] __sys_sendmsg+0x160/0x210 [ 255.157185][T14188] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.157214][T14188] do_syscall_64+0x123/0x790 [ 255.157236][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.157254][T14188] RIP: 0033:0x7f2451d9e0d9 [ 255.157269][T14188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.157286][T14188] RSP: 002b:00007f2452d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.157304][T14188] RAX: ffffffffffffffda RBX: 00007f2452025fa0 RCX: 00007f2451d9e0d9 [ 255.157316][T14188] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000003 [ 255.157326][T14188] RBP: 00007f2452d18090 R08: 0000000000000000 R09: 0000000000000000 [ 255.157337][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.157348][T14188] R13: 00007f2452026038 R14: 00007f2452025fa0 R15: 00007fff74fe1628 [ 255.157394][T14188] [ 255.173468][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 255.209989][ T1478] usb 10-1: USB disconnect, device number 2 [ 255.224076][ T34] usb 8-1: device descriptor read/8, error -71 [ 255.334971][ T34] usb usb8-port1: unable to enumerate USB device [ 255.417657][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2822'. [ 255.435269][T14201] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 255.494953][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.497727][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.619633][T14208] netlink: 'syz.5.2825': attribute type 15 has an invalid length. [ 256.068530][T14211] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.364377][ T34] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 256.535494][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.541042][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.545053][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.547860][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.553225][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.555750][ T34] usb 7-1: Product: syz [ 256.557082][ T34] usb 7-1: Manufacturer: syz [ 256.558879][ T34] usb 7-1: SerialNumber: syz [ 256.631376][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2830'. [ 256.658445][T14223] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 256.832470][T14231] SELinux: failed to load policy [ 257.152875][T14247] kvm: kvm [14246]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 257.852829][ T42] kauditd_printk_skb: 145 callbacks suppressed [ 257.852848][ T42] audit: type=1800 audit(1787569451.281:3457): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 257.867878][ T42] audit: type=1800 audit(1787569451.291:3458): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 257.888484][ T42] audit: type=1800 audit(1787569451.321:3459): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 257.901316][T14262] netlink: 'syz.3.2845': attribute type 2 has an invalid length. [ 257.912853][ T42] audit: type=1800 audit(1787569451.341:3460): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 257.936746][T14262] : entered promiscuous mode [ 257.938498][ T42] audit: type=1800 audit(1787569451.371:3461): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 258.001245][ T42] audit: type=1800 audit(1787569451.431:3462): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 258.019485][ T42] audit: type=1400 audit(1787569451.451:3463): avc: denied { bind } for pid=14265 comm="syz.4.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 258.035032][ T42] audit: type=1800 audit(1787569451.471:3464): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 258.045479][ T42] audit: type=1400 audit(1787569451.481:3465): avc: denied { write } for pid=14274 comm="syz.3.2850" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 258.084983][ T42] audit: type=1800 audit(1787569451.521:3466): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 258.095437][T14278] syzkaller0: left promiscuous mode [ 258.097698][T14278] syzkaller0: left allmulticast mode [ 258.132721][T14266] netlink: 'syz.4.2847': attribute type 2 has an invalid length. [ 258.137151][T14266] netlink: 'syz.4.2847': attribute type 4 has an invalid length. [ 258.315906][T14286] bond2: option downdelay: invalid value (18446744073709551615) [ 258.324217][T14286] bond2: option downdelay: allowed values 0 - 2147483647 [ 258.335410][T14286] bond2 (unregistering): Released all slaves [ 258.402758][T14294] No control pipe specified [ 258.406226][T14294] netlink: 'syz.4.2858': attribute type 2 has an invalid length. [ 258.548169][T14303] FAULT_INJECTION: forcing a failure. [ 258.548169][T14303] name failslab, interval 1, probability 0, space 0, times 0 [ 258.552077][T14303] CPU: 2 UID: 0 PID: 14303 Comm: syz.3.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.552095][T14303] Tainted: [L]=SOFTLOCKUP [ 258.552099][T14303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.552106][T14303] Call Trace: [ 258.552111][T14303] [ 258.552116][T14303] dump_stack_lvl+0x100/0x190 [ 258.552135][T14303] should_fail_ex.cold+0x5/0xa [ 258.552150][T14303] should_failslab+0xc2/0x120 [ 258.552167][T14303] kmem_cache_alloc_noprof+0x91/0x6a0 [ 258.552183][T14303] ? __kernfs_new_node+0xd2/0xa10 [ 258.552197][T14303] __kernfs_new_node+0xd2/0xa10 [ 258.552211][T14303] ? __pfx___kernfs_new_node+0x10/0x10 [ 258.552226][T14303] ? find_held_lock+0x2b/0x80 [ 258.552240][T14303] ? kernfs_root+0xee/0x2a0 [ 258.552249][T14303] ? kernfs_root+0xee/0x2a0 [ 258.552262][T14303] kernfs_new_node+0x117/0x150 [ 258.552277][T14303] __kernfs_create_file+0x53/0x350 [ 258.552293][T14303] sysfs_add_file_mode_ns+0x207/0x3c0 [ 258.552313][T14303] internal_create_group+0x593/0xfb0 [ 258.552328][T14303] ? __pfx_internal_create_group+0x10/0x10 [ 258.552341][T14303] ? kernfs_create_link+0x1bd/0x240 [ 258.552358][T14303] internal_create_groups+0x9d/0x150 [ 258.552371][T14303] device_add+0xf60/0x1970 [ 258.552386][T14303] ? __pfx_device_add+0x10/0x10 [ 258.552399][T14303] ? lockdep_init_map_type+0x5c/0x250 [ 258.552416][T14303] ? __init_waitqueue_head+0xca/0x150 [ 258.552430][T14303] wakeup_source_device_create+0x243/0x2e0 [ 258.552446][T14303] wakeup_source_sysfs_add+0x1c/0x90 [ 258.552460][T14303] wakeup_source_register+0x154/0x3e0 [ 258.552472][T14303] ep_create_wakeup_source+0x1df/0x2e0 [ 258.552485][T14303] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 258.552498][T14303] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 258.552511][T14303] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 258.552526][T14303] do_epoll_ctl_file+0x1e26/0x36e0 [ 258.552543][T14303] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 258.552557][T14303] ? find_held_lock+0x2b/0x80 [ 258.552570][T14303] ? __fget_files+0x215/0x3d0 [ 258.552589][T14303] ? __fget_files+0x21f/0x3d0 [ 258.552609][T14303] ? do_epoll_ctl+0xfd/0x1a0 [ 258.552620][T14303] do_epoll_ctl+0xfd/0x1a0 [ 258.552633][T14303] ? __pfx_do_epoll_ctl+0x10/0x10 [ 258.552648][T14303] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 258.552662][T14303] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 258.552674][T14303] ? trace_syscall_enter+0xd6/0x100 [ 258.552688][T14303] do_syscall_64+0x123/0x790 [ 258.552702][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.552713][T14303] RIP: 0033:0x7f526459e0d9 [ 258.552724][T14303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.552734][T14303] RSP: 002b:00007f5265486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 258.552746][T14303] RAX: ffffffffffffffda RBX: 00007f5264825fa0 RCX: 00007f526459e0d9 [ 258.552753][T14303] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 258.552759][T14303] RBP: 00007f5265486090 R08: 0000000000000000 R09: 0000000000000000 [ 258.552766][T14303] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 258.552772][T14303] R13: 00007f5264826038 R14: 00007f5264825fa0 R15: 00007ffeaa4e6cb8 [ 258.552786][T14303] [ 258.825503][T14308] netlink: 'syz.5.2864': attribute type 6 has an invalid length. [ 258.841653][T14308] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 258.845331][ T1478] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 258.916578][T14312] syzkaller0: entered promiscuous mode [ 258.918230][T14312] syzkaller0: entered allmulticast mode [ 259.127558][ T24] usb 7-1: USB disconnect, device number 23 [ 259.235224][T14324] FAULT_INJECTION: forcing a failure. [ 259.235224][T14324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.240045][T14324] CPU: 1 UID: 0 PID: 14324 Comm: syz.5.2872 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.240064][T14324] Tainted: [L]=SOFTLOCKUP [ 259.240068][T14324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.240074][T14324] Call Trace: [ 259.240079][T14324] [ 259.240084][T14324] dump_stack_lvl+0x100/0x190 [ 259.240103][T14324] should_fail_ex.cold+0x5/0xa [ 259.240118][T14324] _copy_from_iter+0x1f4/0x1690 [ 259.240131][T14324] ? _copy_from_iter+0x270/0x1690 [ 259.240141][T14324] ? __pfx__copy_from_iter+0x10/0x10 [ 259.240154][T14324] ? __pfx__copy_from_iter+0x10/0x10 [ 259.240164][T14324] ? _copy_from_iter+0x270/0x1690 [ 259.240176][T14324] copy_page_from_iter+0x238/0x300 [ 259.240189][T14324] skb_copy_datagram_from_iter+0x399/0x720 [ 259.240225][T14324] packet_sendmsg+0x2257/0x4f00 [ 259.240249][T14324] ? sock_has_perm+0x25a/0x2f0 [ 259.240264][T14324] ? __pfx_sock_has_perm+0x10/0x10 [ 259.240282][T14324] ? __pfx_packet_sendmsg+0x10/0x10 [ 259.240298][T14324] ? __might_fault+0xc5/0x140 [ 259.240314][T14324] ? selinux_socket_sendmsg+0x198/0x2f0 [ 259.240331][T14324] __sys_sendto+0x48b/0x4e0 [ 259.240348][T14324] ? __pfx_packet_sendmsg+0x10/0x10 [ 259.240365][T14324] ? __pfx___sys_sendto+0x10/0x10 [ 259.240386][T14324] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 259.240404][T14324] ? find_held_lock+0x2b/0x80 [ 259.240419][T14324] ? trace_syscall_enter+0xd6/0x100 [ 259.240430][T14324] ? trace_syscall_enter+0xd6/0x100 [ 259.240442][T14324] __x64_sys_sendto+0xe0/0x1c0 [ 259.240458][T14324] ? trace_syscall_enter+0xe0/0x100 [ 259.240469][T14324] do_syscall_64+0x123/0x790 [ 259.240482][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.240494][T14324] RIP: 0033:0x7f8c89b9e0d9 [ 259.240504][T14324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.240515][T14324] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.240526][T14324] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 259.240533][T14324] RDX: 000000000000fd1e RSI: 00002000000002c0 RDI: 0000000000000004 [ 259.240539][T14324] RBP: 00007f8c87df6090 R08: 0000200000000140 R09: 0000000000000014 [ 259.240546][T14324] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 259.240553][T14324] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 259.240566][T14324] [ 259.503210][T14332] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 259.603939][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 259.763517][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 259.765656][ T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.769297][ T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 259.771752][ T24] usb 7-1: config 0 has no interface number 0 [ 259.773775][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.777052][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.781042][ T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.784289][ T24] usb 7-1: Product: syz [ 259.785581][ T24] usb 7-1: SerialNumber: syz [ 259.823424][ T62] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 259.983988][ T62] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.988484][ T62] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.991980][ T62] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.994721][ T62] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.000113][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.002602][ T62] usb 8-1: Product: syz [ 260.004080][ T62] usb 8-1: Manufacturer: syz [ 260.005582][ T62] usb 8-1: SerialNumber: syz [ 260.527972][T14347] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 260.530852][T14347] Unsupported digest algo: 106 [ 260.555982][T14347] __nla_validate_parse: 4 callbacks suppressed [ 260.555999][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2882'. [ 260.562351][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2882'. [ 260.594419][T14351] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 260.597454][T14351] Unsupported digest algo: 106 [ 260.676266][T14356] netlink: 'syz.5.2884': attribute type 58 has an invalid length. [ 260.881190][T14364] bond0: option slaves: invalid value (-veth0) [ 261.791476][T14377] warn_alloc: 1 callbacks suppressed [ 261.791490][T14377] syz.4.2891: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.799023][T14377] CPU: 0 UID: 0 PID: 14377 Comm: syz.4.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.799041][T14377] Tainted: [L]=SOFTLOCKUP [ 261.799045][T14377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.799052][T14377] Call Trace: [ 261.799056][T14377] [ 261.799061][T14377] dump_stack_lvl+0x100/0x190 [ 261.799081][T14377] warn_alloc.cold+0x9e/0xb2 [ 261.799093][T14377] ? __pfx_warn_alloc+0x10/0x10 [ 261.799107][T14377] ? policy_nodemask+0xed/0x4f0 [ 261.799126][T14377] ? alloc_pages_mpol+0x260/0x550 [ 261.799144][T14377] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 261.799161][T14377] ? find_held_lock+0x2b/0x80 [ 261.799175][T14377] ? rcu_read_unlock+0x17/0x60 [ 261.799190][T14377] __vmalloc_node_range_noprof+0x110f/0x1460 [ 261.799206][T14377] ? compute_subprog_args.constprop.0+0x49b/0x6e40 [ 261.799224][T14377] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 261.799242][T14377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.799255][T14377] ? rcu_is_watching+0x13/0xc0 [ 261.799270][T14377] __kvmalloc_node_noprof+0x3d5/0x970 [ 261.799286][T14377] ? compute_subprog_args.constprop.0+0x49b/0x6e40 [ 261.799302][T14377] ? rcu_is_cpu_rrupt_from_idle+0x1b1/0x280 [ 261.799315][T14377] ? compute_subprog_args.constprop.0+0x49b/0x6e40 [ 261.799334][T14377] compute_subprog_args.constprop.0+0x49b/0x6e40 [ 261.799351][T14377] ? __lock_acquire+0x4c5/0x1ec0 [ 261.799370][T14377] ? __lock_acquire+0x4c5/0x1ec0 [ 261.799393][T14377] ? __pfx_compute_subprog_args.constprop.0+0x10/0x10 [ 261.799409][T14377] ? is_bpf_text_address+0x8a/0x1a0 [ 261.799423][T14377] ? is_bpf_text_address+0x94/0x1a0 [ 261.799434][T14377] ? kernel_text_address+0x8d/0x100 [ 261.799450][T14377] ? __kernel_text_address+0xd/0x30 [ 261.799464][T14377] ? unwind_get_return_address+0x59/0xa0 [ 261.799477][T14377] ? arch_stack_walk+0xa6/0xf0 [ 261.799494][T14377] ? stack_trace_save+0x8e/0xc0 [ 261.799514][T14377] ? bpf_check+0x7b54/0xa7c0 [ 261.799525][T14377] ? bpf_prog_load+0x1ac3/0x2a80 [ 261.799535][T14377] ? __sys_bpf+0x1f46/0x4a30 [ 261.799549][T14377] ? analyze_subprog+0x3c6/0x31d0 [ 261.799564][T14377] ? rcu_is_watching+0x13/0xc0 [ 261.799575][T14377] ? analyze_subprog+0x3c6/0x31d0 [ 261.799590][T14377] ? kfree+0x1e5/0x6c0 [ 261.799603][T14377] analyze_subprog+0x406/0x31d0 [ 261.799625][T14377] ? __pfx_analyze_subprog+0x10/0x10 [ 261.799643][T14377] ? rcu_is_watching+0x13/0xc0 [ 261.799655][T14377] ? trace_kmalloc+0xeb/0x110 [ 261.799671][T14377] ? __kasan_kmalloc+0xaa/0xb0 [ 261.799687][T14377] ? __kvmalloc_node_noprof+0x36f/0x970 [ 261.799704][T14377] ? call_instance+0x1a8/0x510 [ 261.799721][T14377] ? call_instance+0x110/0x510 [ 261.799737][T14377] bpf_compute_subprog_arg_access+0x26f/0x14a0 [ 261.799761][T14377] ? rcu_is_watching+0x13/0xc0 [ 261.799773][T14377] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 261.799794][T14377] ? __kasan_kmalloc+0xaa/0xb0 [ 261.799819][T14377] ? bpf_compute_live_registers+0x159/0x1650 [ 261.799852][T14377] bpf_compute_live_registers+0x5f9/0x1650 [ 261.799882][T14377] ? bpf_compute_scc+0x940/0xad0 [ 261.799898][T14377] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 261.799918][T14377] bpf_check+0x7b54/0xa7c0 [ 261.799930][T14377] ? __lock_acquire+0x4c5/0x1ec0 [ 261.799946][T14377] ? __pfx___css_rstat_updated+0x10/0x10 [ 261.799965][T14377] ? __pfx_bpf_check+0x10/0x10 [ 261.799978][T14377] ? find_held_lock+0x2b/0x80 [ 261.799990][T14377] ? bpf_prog_load+0x1a09/0x2a80 [ 261.800003][T14377] ? __asan_memset+0x23/0x50 [ 261.800019][T14377] ? bpf_prog_load+0x1ac3/0x2a80 [ 261.800030][T14377] bpf_prog_load+0x1ac3/0x2a80 [ 261.800044][T14377] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.800066][T14377] __sys_bpf+0x1f46/0x4a30 [ 261.800084][T14377] ? __pfx___sys_bpf+0x10/0x10 [ 261.800099][T14377] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 261.800122][T14377] ? rb_commit+0x129/0x9d0 [ 261.800143][T14377] ? trace_event_buffer_commit+0x20a/0xa80 [ 261.800157][T14377] ? find_held_lock+0x2b/0x80 [ 261.800172][T14377] ? __x64_sys_bpf+0xce/0x140 [ 261.800186][T14377] __x64_sys_bpf+0xce/0x140 [ 261.800201][T14377] ? rcu_is_watching+0x13/0xc0 [ 261.800214][T14377] do_syscall_64+0x123/0x790 [ 261.800227][T14377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.800239][T14377] RIP: 0033:0x7fc6c339e0d9 [ 261.800249][T14377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.800259][T14377] RSP: 002b:00007fc6c15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.800271][T14377] RAX: ffffffffffffffda RBX: 00007fc6c3626180 RCX: 00007fc6c339e0d9 [ 261.800277][T14377] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 261.800284][T14377] RBP: 00007fc6c3435024 R08: 0000000000000000 R09: 0000000000000000 [ 261.800291][T14377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.800297][T14377] R13: 00007fc6c3626218 R14: 00007fc6c3626180 R15: 00007ffe27e781a8 [ 261.800311][T14377] [ 261.800315][T14377] Mem-Info: [ 261.943483][T14379] FAULT_INJECTION: forcing a failure. [ 261.943483][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.948289][T14377] active_anon:30247 inactive_anon:2 isolated_anon:0 [ 261.948289][T14377] active_file:6596 inactive_file:45325 isolated_file:0 [ 261.948289][T14377] unevictable:1000 dirty:383 writeback:0 [ 261.948289][T14377] slab_reclaimable:8306 slab_unreclaimable:87265 [ 261.948289][T14377] mapped:28105 shmem:18020 pagetables:3951 [ 261.948289][T14377] sec_pagetables:298 bounce:0 [ 261.948289][T14377] kernel_misc_reclaimable:0 [ 261.948289][T14377] free:408008 free_pcp:13653 free_cma:0 [ 261.951424][T14379] CPU: 2 UID: 0 PID: 14379 Comm: syz.5.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.951451][T14379] Tainted: [L]=SOFTLOCKUP [ 261.951457][T14379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.951468][T14379] Call Trace: [ 261.951475][T14379] [ 261.951483][T14379] dump_stack_lvl+0x100/0x190 [ 261.951513][T14379] should_fail_ex.cold+0x5/0xa [ 261.951539][T14379] _copy_from_user+0x2e/0xd0 [ 261.951569][T14379] kstrtouint_from_user+0xd6/0x1d0 [ 261.951592][T14379] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 261.951613][T14379] ? __lock_acquire+0x4c5/0x1ec0 [ 261.951647][T14379] ? lock_acquire+0x1b9/0x370 [ 261.951677][T14379] proc_fail_nth_write+0x83/0x220 [ 261.951704][T14379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.951738][T14379] vfs_write+0x2aa/0x1050 [ 261.951763][T14379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.951792][T14379] ? __pfx_vfs_write+0x10/0x10 [ 261.951812][T14379] ? find_held_lock+0x2b/0x80 [ 261.951833][T14379] ? __fget_files+0x215/0x3d0 [ 261.951864][T14379] ? __fget_files+0x21f/0x3d0 [ 261.951897][T14379] ksys_write+0x12a/0x250 [ 261.951919][T14379] ? __pfx_ksys_write+0x10/0x10 [ 261.951940][T14379] ? trace_syscall_enter+0xd6/0x100 [ 261.951965][T14379] do_syscall_64+0x123/0x790 [ 261.951987][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.952005][T14379] RIP: 0033:0x7f8c89b5e90e [ 261.952020][T14379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.952043][T14379] RSP: 002b:00007f8c87df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.952061][T14379] RAX: ffffffffffffffda RBX: 00007f8c87df66c0 RCX: 00007f8c89b5e90e [ 261.952073][T14379] RDX: 0000000000000001 RSI: 00007f8c87df60a0 RDI: 0000000000000005 [ 261.952085][T14379] RBP: 00007f8c87df6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.952096][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.952107][T14379] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 261.952132][T14379] [ 262.044412][T14377] Node 0 active_anon:120856kB inactive_anon:4kB active_file:26384kB inactive_file:180832kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:83748kB dirty:1528kB writeback:0kB shmem:70080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15136kB pagetables:6552kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.055257][T14377] Node 1 active_anon:8kB inactive_anon:4kB active_file:0kB inactive_file:468kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.065623][T14377] Node 0 DMA free:6808kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:160kB free_cma:0kB [ 262.073006][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2893'. [ 262.074757][T14377] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 262.079697][T14377] Node 0 DMA32 free:62336kB boost:0kB min:27772kB low:34712kB high:41652kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120856kB inactive_anon:4kB active_file:26384kB inactive_file:180832kB unevictable:2000kB writepending:1528kB zspages:0kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:36424kB local_pcp:6136kB free_cma:0kB [ 262.089594][T14377] lowmem_reserve[]: 0 0 0 0 0 [ 262.091059][T14377] Node 1 Normal free:1563136kB boost:0kB min:39468kB low:49332kB high:59196kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:4kB active_file:0kB inactive_file:468kB unevictable:2000kB writepending:4kB zspages:532kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:17788kB local_pcp:8756kB free_cma:0kB [ 262.101039][T14377] lowmem_reserve[]: 0 0 0 0 0 [ 262.102529][T14377] Node 0 DMA: 10*4kB (UM) 6*8kB (UM) 6*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (M) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 1*4096kB (U) = 6808kB [ 262.107157][T14377] Node 0 DMA32: 584*4kB (UME) 159*8kB (UME) 52*16kB (UME) 43*32kB (UME) 19*64kB (UME) 5*128kB (UME) 6*256kB (M) 6*512kB (M) 17*1024kB (UM) 4*2048kB (UM) 6*4096kB (UM) = 62456kB [ 262.113773][T14377] Node 1 Normal: 176*4kB (UME) 204*8kB (UME) 278*16kB (UME) 216*32kB (UME) 268*64kB (UM) 259*128kB (UM) 248*256kB (UM) 240*512kB (UME) 214*1024kB (UME) 4*2048kB (UE) 265*4096kB (UM) = 1563136kB [ 262.121540][T14377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.125468][T14377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.129196][T14377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.133161][T14377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.136145][T14377] 70249 total pagecache pages [ 262.137715][T14377] 2 pages in swap cache [ 262.139040][T14377] Free swap = 124812kB [ 262.140313][T14377] Total swap = 124996kB [ 262.141598][T14377] 1048443 pages RAM [ 262.142786][T14377] 0 pages HighMem/MovableOnly [ 262.144321][T14377] 285655 pages reserved [ 262.145613][T14377] 0 pages cma reserved [ 262.256349][ T1478] usb 7-1: USB disconnect, device number 24 [ 262.352106][T14392] syzkaller0: entered promiscuous mode [ 262.354570][T14392] syzkaller0: entered allmulticast mode [ 262.399917][T14396] base or size exceeds the MTRR width [ 262.586095][ T29] usb 8-1: USB disconnect, device number 34 [ 262.732455][T14414] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2906'. [ 262.752026][T14416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64990 sclass=netlink_route_socket pid=14416 comm=syz.5.2907 [ 262.770060][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 262.846857][T14423] bond0: entered promiscuous mode [ 262.848615][T14423] bond_slave_0: entered promiscuous mode [ 262.859188][T14423] bond_slave_1: entered promiscuous mode [ 262.860100][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 262.860110][ T42] audit: type=1800 audit(1787569456.291:3553): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 262.861526][T14423] veth0_to_bond: entered promiscuous mode [ 262.882837][ T42] audit: type=1800 audit(1787569456.311:3554): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 262.930249][T14432] fuse: Bad value for 'fd' [ 262.935396][ T42] audit: type=1800 audit(1787569456.371:3555): pid=14432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2914" name="file0" dev="tmpfs" ino=739 res=0 errno=0 [ 263.075973][ T42] audit: type=1800 audit(1787569456.511:3556): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 263.094531][T14435] netlink: 'syz.3.2915': attribute type 1 has an invalid length. [ 263.110783][T14435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.151736][ T42] audit: type=1800 audit(1787569456.581:3557): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 263.173205][T14438] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2916'. [ 263.197370][ T42] audit: type=1800 audit(1787569456.631:3558): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 263.217196][T14440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 263.228795][ T42] audit: type=1800 audit(1787569456.661:3559): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 263.250282][ T42] audit: type=1800 audit(1787569456.681:3560): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 263.275365][T14444] Bluetooth: MGMT ver 1.23 [ 263.280519][T14444] comedi comedi4: commands at RT priority not supported in this driver [ 263.305646][ T42] audit: type=1800 audit(1787569456.741:3561): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 263.319255][ T42] audit: type=1800 audit(1787569456.751:3562): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 263.388288][T14457] 9pnet_virtio: no channels available for device syz [ 263.706073][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 264.183608][ T1478] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 264.299486][T14493] device-mapper: ioctl: Empty message received. [ 264.346773][ T1478] usb 10-1: Using ep0 maxpacket: 32 [ 264.349563][ T1478] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 264.354672][ T1478] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 264.358404][ T1478] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 264.362062][ T1478] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.365959][ T1478] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 264.372165][ T1478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.375117][ T1478] usb 10-1: Product: syz [ 264.378043][ T1478] usb 10-1: Manufacturer: syz [ 264.380406][ T1478] usb 10-1: SerialNumber: syz [ 264.437566][T14497] netlink: 'syz.3.2940': attribute type 8 has an invalid length. [ 264.485826][T14499] qrtr: Invalid version 0 [ 264.491188][T14499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=14499 comm=syz.3.2941 [ 264.631120][T14506] bridge_slave_0: left promiscuous mode [ 264.633428][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.646811][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.654918][T14506] bond0: (slave bond_slave_0): Releasing backup interface [ 264.660874][T14506] bond0: (slave bond_slave_1): Releasing backup interface [ 264.671891][T14506] team0: Port device team_slave_0 removed [ 264.678395][T14506] team0: Port device team_slave_1 removed [ 264.681099][T14506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.684728][T14506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.689148][T14506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.691677][T14506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.697024][T14506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 266.160463][T14555] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 266.165563][T14555] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 266.169543][T14555] raw: 00fff00000000000 ffffea00013f8008 ffffea00013f8008 0000000000000000 [ 266.172841][T14555] raw: 0000000000000000 0000000000000000 0000000500000003 0000000000000000 [ 266.176476][T14555] page dumped because: unmovable page [ 266.178249][T14555] page_owner tracks the page as allocated [ 266.182366][T14555] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 12491, tgid 12491 (syz-executor), ts 214742509503 [ 266.191236][T14555] post_alloc_hook+0xfd/0x120 [ 266.192766][T14555] get_page_from_freelist+0x110d/0x35b0 [ 266.195586][T14555] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 266.197418][T14555] alloc_pages_mpol+0x201/0x550 [ 266.199114][T14555] alloc_pages_noprof+0x1a/0x160 [ 266.201315][T14555] __vmalloc_node_range_noprof+0xdcc/0x1460 [ 266.203248][T14555] vmalloc_user_noprof+0x9e/0xe0 [ 266.206881][T14555] kcov_ioctl+0x4d/0x760 [ 266.208227][T14555] __x64_sys_ioctl+0x18e/0x210 [ 266.209784][T14555] do_syscall_64+0x123/0x790 [ 266.211235][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.213021][T14555] page last free pid 9923 tgid 9923 ts 211117046722 stack trace: [ 266.215832][T14555] free_pages_prepare+0x586/0xe00 [ 266.217444][T14555] __free_contig_range_common+0x14f/0x250 [ 266.220372][T14555] free_pages_bulk+0x12a/0x200 [ 266.221854][T14555] vm_area_free_pages+0xad/0x2b0 [ 266.223668][T14555] vfree+0x108/0x730 [ 266.224926][T14555] kcov_close+0x34/0x60 [ 266.226254][T14555] __fput+0x3ff/0xb50 [ 266.227590][T14555] task_work_run+0x150/0x240 [ 266.229087][T14555] do_exit+0x951/0x2ae0 [ 266.230453][T14555] do_group_exit+0xd5/0x2a0 [ 266.231884][T14555] get_signal+0x1ec7/0x21e0 [ 266.233369][T14555] arch_do_signal_or_restart+0x91/0x7e0 [ 266.235035][T14555] exit_to_user_mode_loop+0x139/0x700 [ 266.236631][T14555] do_syscall_64+0x661/0x790 [ 266.238072][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.332710][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2964'. [ 266.338456][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2964'. [ 266.345148][T14569] overlayfs: failed to verify origin (409/file1, ino=2179, err=-116) [ 266.349865][T14569] overlayfs: failed to verify origin (409/file1, ino=2179, err=-116) [ 266.879149][ T1478] usb 10-1: USB disconnect, device number 3 [ 266.908108][T14577] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 267.166593][T14591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2977'. [ 267.180456][T14591] device-mapper: ioctl: Empty message received. [ 267.445551][T14607] batadv_slave_1: entered promiscuous mode [ 267.453093][T14606] batadv_slave_1: left promiscuous mode [ 267.466856][T14610] netlink: 'syz.4.2986': attribute type 10 has an invalid length. [ 267.568292][T14616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2988'. [ 267.677300][T14570] Set syz0 is full, maxelem 65536 reached [ 267.720075][ T229] IPVS: starting estimator thread 0... [ 267.813609][T14625] IPVS: using max 45 ests per chain, 108000 per kthread [ 267.841445][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 267.894612][ T42] kauditd_printk_skb: 230 callbacks suppressed [ 267.894629][ T42] audit: type=1800 audit(1787569461.331:3793): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 267.919095][ T42] audit: type=1800 audit(1787569461.351:3794): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 267.937302][ T42] audit: type=1800 audit(1787569461.371:3795): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 267.952714][ T42] audit: type=1800 audit(1787569461.381:3796): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 267.979333][ T42] audit: type=1800 audit(1787569461.411:3797): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 267.987016][ T42] audit: type=1800 audit(1787569461.411:3798): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201541 res=0 errno=0 [ 267.996379][ T42] audit: type=1800 audit(1787569461.411:3799): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201553 res=0 errno=0 [ 268.003279][ T42] audit: type=1800 audit(1787569461.411:3800): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201565 res=0 errno=0 [ 268.010267][ T42] audit: type=1800 audit(1787569461.411:3801): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201577 res=0 errno=0 [ 268.020481][ T42] audit: type=1804 audit(1787569461.421:3802): pid=14645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2998" name="/newroot/142/file1" dev="tmpfs" ino=756 res=1 errno=0 [ 268.082615][T14650] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3001'. [ 268.087236][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3001'. [ 268.122275][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3002'. [ 268.150526][T14652] device-mapper: ioctl: Empty message received. [ 268.457980][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 268.460669][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 269.024900][T14691] FAULT_INJECTION: forcing a failure. [ 269.024900][T14691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.030261][T14691] CPU: 0 UID: 0 PID: 14691 Comm: syz.3.3016 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.030287][T14691] Tainted: [L]=SOFTLOCKUP [ 269.030293][T14691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.030303][T14691] Call Trace: [ 269.030310][T14691] [ 269.030317][T14691] dump_stack_lvl+0x100/0x190 [ 269.030357][T14691] should_fail_ex.cold+0x5/0xa [ 269.030379][T14691] _copy_to_user+0x32/0xd0 [ 269.030412][T14691] simple_read_from_buffer+0xcb/0x170 [ 269.030439][T14691] proc_fail_nth_read+0x1af/0x230 [ 269.030463][T14691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.030488][T14691] ? rw_verify_area+0xce/0x6d0 [ 269.030512][T14691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.030536][T14691] vfs_read+0x1e4/0xb40 [ 269.030559][T14691] ? __pfx_vfs_read+0x10/0x10 [ 269.030577][T14691] ? find_held_lock+0x2b/0x80 [ 269.030597][T14691] ? __fget_files+0x215/0x3d0 [ 269.030625][T14691] ? __fget_files+0x21f/0x3d0 [ 269.030654][T14691] ksys_read+0x12a/0x250 [ 269.030674][T14691] ? __pfx_ksys_read+0x10/0x10 [ 269.030692][T14691] ? trace_syscall_enter+0xd6/0x100 [ 269.030715][T14691] do_syscall_64+0x123/0x790 [ 269.030741][T14691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.030758][T14691] RIP: 0033:0x7f526455e90e [ 269.030773][T14691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.030789][T14691] RSP: 002b:00007f5265485fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.030807][T14691] RAX: ffffffffffffffda RBX: 00007f52654866c0 RCX: 00007f526455e90e [ 269.030818][T14691] RDX: 000000000000000f RSI: 00007f52654860a0 RDI: 0000000000000008 [ 269.030829][T14691] RBP: 00007f5265486090 R08: 0000000000000000 R09: 0000000000000000 [ 269.030838][T14691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.030848][T14691] R13: 00007f5264826038 R14: 00007f5264825fa0 R15: 00007ffeaa4e6cb8 [ 269.030871][T14691] [ 269.151853][T14698] FAULT_INJECTION: forcing a failure. [ 269.151853][T14698] name failslab, interval 1, probability 0, space 0, times 0 [ 269.156986][T14698] CPU: 3 UID: 0 PID: 14698 Comm: syz.2.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.157005][T14698] Tainted: [L]=SOFTLOCKUP [ 269.157009][T14698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.157016][T14698] Call Trace: [ 269.157020][T14698] [ 269.157025][T14698] dump_stack_lvl+0x100/0x190 [ 269.157046][T14698] should_fail_ex.cold+0x5/0xa [ 269.157062][T14698] should_failslab+0xc2/0x120 [ 269.157081][T14698] __kmalloc_noprof+0xfc/0x820 [ 269.157096][T14698] ? rcu_is_watching+0x13/0xc0 [ 269.157110][T14698] ? tomoyo_encode2+0xfb/0x3c0 [ 269.157133][T14698] tomoyo_encode2+0xfb/0x3c0 [ 269.157161][T14698] tomoyo_encode+0x29/0x50 [ 269.157189][T14698] tomoyo_realpath_from_path+0x18c/0x690 [ 269.157224][T14698] tomoyo_check_open_permission+0x2af/0x3c0 [ 269.157252][T14698] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 269.157285][T14698] ? hook_file_open+0x24f/0x8f0 [ 269.157339][T14698] ? lock_acquire+0x1b9/0x370 [ 269.157375][T14698] tomoyo_file_open+0x6b/0x90 [ 269.157396][T14698] security_file_open+0xb5/0x1e0 [ 269.157416][T14698] do_dentry_open+0x588/0x14d0 [ 269.157443][T14698] vfs_open+0x82/0x3f0 [ 269.157462][T14698] path_openat+0x19fa/0x2440 [ 269.157501][T14698] ? __pfx_path_openat+0x10/0x10 [ 269.157527][T14698] do_file_open+0x20e/0x430 [ 269.157546][T14698] ? __pfx_do_file_open+0x10/0x10 [ 269.157573][T14698] ? _raw_spin_unlock+0x28/0x50 [ 269.157590][T14698] ? alloc_fd+0x471/0x7a0 [ 269.157612][T14698] do_sys_openat2+0x10f/0x1e0 [ 269.157624][T14698] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.157636][T14698] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 269.157653][T14698] __x64_sys_openat+0x12d/0x210 [ 269.157665][T14698] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.157676][T14698] ? find_held_lock+0x2b/0x80 [ 269.157690][T14698] ? trace_syscall_enter+0xd6/0x100 [ 269.157718][T14698] do_syscall_64+0x123/0x790 [ 269.157734][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.157747][T14698] RIP: 0033:0x7f2451d9e0d9 [ 269.157758][T14698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.157770][T14698] RSP: 002b:00007f2452d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.157781][T14698] RAX: ffffffffffffffda RBX: 00007f2452025fa0 RCX: 00007f2451d9e0d9 [ 269.157789][T14698] RDX: 0000000000000001 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 269.157796][T14698] RBP: 00007f2452d18090 R08: 0000000000000000 R09: 0000000000000000 [ 269.157803][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.157810][T14698] R13: 00007f2452026038 R14: 00007f2452025fa0 R15: 00007fff74fe1628 [ 269.157825][T14698] [ 269.158825][T14698] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.245620][T14702] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 269.420496][T14707] mac80211_hwsim hwsim17 »»»»»»e_0: renamed from wlan0 [ 269.489585][T14719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.500829][T14717] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(520093700.50.1440006349), cmd(3) [ 269.607588][T14729] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 269.696001][T14734] syzkaller0: entered promiscuous mode [ 269.698531][T14734] syzkaller0: entered allmulticast mode [ 269.732548][T14737] FAULT_INJECTION: forcing a failure. [ 269.732548][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.737325][T14737] CPU: 0 UID: 0 PID: 14737 Comm: syz.3.3036 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.737353][T14737] Tainted: [L]=SOFTLOCKUP [ 269.737361][T14737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.737377][T14737] Call Trace: [ 269.737383][T14737] [ 269.737390][T14737] dump_stack_lvl+0x100/0x190 [ 269.737412][T14737] should_fail_ex.cold+0x5/0xa [ 269.737427][T14737] _copy_from_user+0x2e/0xd0 [ 269.737446][T14737] copy_msghdr_from_user+0x9f/0x4c0 [ 269.737470][T14737] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 269.737488][T14737] ? __pfx_trace_clock_local+0x10/0x10 [ 269.737501][T14737] ___sys_sendmsg+0x106/0x1e0 [ 269.737517][T14737] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.737537][T14737] ? find_held_lock+0x2b/0x80 [ 269.737558][T14737] __sys_sendmsg+0x160/0x210 [ 269.737569][T14737] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.737587][T14737] do_syscall_64+0x123/0x790 [ 269.737600][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.737612][T14737] RIP: 0033:0x7f526459e0d9 [ 269.737621][T14737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.737633][T14737] RSP: 002b:00007f5265486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.737644][T14737] RAX: ffffffffffffffda RBX: 00007f5264825fa0 RCX: 00007f526459e0d9 [ 269.737651][T14737] RDX: 0000000024000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 269.737657][T14737] RBP: 00007f5265486090 R08: 0000000000000000 R09: 0000000000000000 [ 269.737664][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.737671][T14737] R13: 00007f5264826038 R14: 00007f5264825fa0 R15: 00007ffeaa4e6cb8 [ 269.737684][T14737] [ 269.873385][ T1478] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 270.009269][T14756] netlink: 'syz.3.3041': attribute type 3 has an invalid length. [ 270.024250][ T1478] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.028296][ T1478] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.031199][T14759] 9pnet_virtio: no channels available for device 127.0.0.1 [ 270.031666][ T1478] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.037894][ T1478] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.046604][ T1478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.049207][ T1478] usb 10-1: Product: syz [ 270.050598][ T1478] usb 10-1: Manufacturer: syz [ 270.052077][ T1478] usb 10-1: SerialNumber: syz [ 270.655377][T14774] bond0: option arp_interval: invalid value () [ 270.659017][T14774] bond0: option arp_interval: allowed values 0 - 2147483647 [ 270.775805][T14782] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 270.827318][T14780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14780 comm=syz.2.3050 [ 270.835341][T14786] lo speed is unknown, defaulting to 1000 [ 270.838933][T14786] lo speed is unknown, defaulting to 1000 [ 270.852733][T14786] lo speed is unknown, defaulting to 1000 [ 270.861007][T14786] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 270.867531][T14786] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 270.873192][T14786] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 270.879347][T14786] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.886552][T14786] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 270.918786][T14786] lo speed is unknown, defaulting to 1000 [ 270.922259][T14786] lo speed is unknown, defaulting to 1000 [ 270.932622][T14786] lo speed is unknown, defaulting to 1000 [ 270.936345][T14786] lo speed is unknown, defaulting to 1000 [ 270.940832][T14786] lo speed is unknown, defaulting to 1000 [ 270.952362][T14786] lo speed is unknown, defaulting to 1000 [ 271.012841][T14790] device-mapper: ioctl: Empty message received. [ 271.194323][T14806] tmpfs: Unknown parameter 'm' [ 271.205854][T14806] openvswitch: netlink: IP tunnel TTL not specified. [ 271.345555][T14825] FAULT_INJECTION: forcing a failure. [ 271.345555][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 271.349951][T14825] CPU: 2 UID: 0 PID: 14825 Comm: syz.3.3068 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.349969][T14825] Tainted: [L]=SOFTLOCKUP [ 271.349973][T14825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.349981][T14825] Call Trace: [ 271.349986][T14825] [ 271.349991][T14825] dump_stack_lvl+0x100/0x190 [ 271.350011][T14825] should_fail_ex.cold+0x5/0xa [ 271.350027][T14825] should_failslab+0xc2/0x120 [ 271.350050][T14825] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 271.350067][T14825] ? __alloc_skb+0x5b7/0x710 [ 271.350085][T14825] ? __alloc_skb+0x140/0x710 [ 271.350106][T14825] __alloc_skb+0x140/0x710 [ 271.350123][T14825] ? __alloc_skb+0x5b7/0x710 [ 271.350140][T14825] ? __pfx___alloc_skb+0x10/0x10 [ 271.350162][T14825] netlink_alloc_large_skb+0x69/0x150 [ 271.350182][T14825] netlink_sendmsg+0x680/0xda0 [ 271.350201][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.350220][T14825] ? selinux_socket_sendmsg+0x198/0x2f0 [ 271.350239][T14825] ____sys_sendmsg+0xa4d/0xbe0 [ 271.350254][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.350272][T14825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.350290][T14825] ? __pfx_trace_clock_local+0x10/0x10 [ 271.350303][T14825] ___sys_sendmsg+0x190/0x1e0 [ 271.350320][T14825] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.350342][T14825] ? find_held_lock+0x2b/0x80 [ 271.350363][T14825] __sys_sendmsg+0x160/0x210 [ 271.350375][T14825] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.350393][T14825] do_syscall_64+0x123/0x790 [ 271.350407][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.350420][T14825] RIP: 0033:0x7f526459e0d9 [ 271.350430][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.350441][T14825] RSP: 002b:00007f5265486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.350454][T14825] RAX: ffffffffffffffda RBX: 00007f5264825fa0 RCX: 00007f526459e0d9 [ 271.350461][T14825] RDX: 000000000000c800 RSI: 0000200000000280 RDI: 0000000000000003 [ 271.350468][T14825] RBP: 00007f5265486090 R08: 0000000000000000 R09: 0000000000000000 [ 271.350475][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.350482][T14825] R13: 00007f5264826038 R14: 00007f5264825fa0 R15: 00007ffeaa4e6cb8 [ 271.350496][T14825] [ 271.498515][T14831] __nla_validate_parse: 10 callbacks suppressed [ 271.498527][T14831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3070'. [ 271.823447][ T1478] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 271.973637][ T1478] usb 8-1: device descriptor read/64, error -71 [ 272.233391][ T1478] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 272.364072][ T1478] usb 8-1: device descriptor read/64, error -71 [ 272.450251][T14856] xfs: Unknown parameter 'usrquota"Àê' [ 272.473581][ T1478] usb usb8-port1: attempt power cycle [ 272.529413][ T29] usb 10-1: USB disconnect, device number 4 [ 272.613258][T14862] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 272.716308][T14867] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3082'. [ 272.813478][ T1478] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 272.835101][ T1478] usb 8-1: device descriptor read/8, error -71 [ 272.910227][T14877] FAULT_INJECTION: forcing a failure. [ 272.910227][T14877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.914417][T14877] CPU: 1 UID: 0 PID: 14877 Comm: syz.2.3086 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.914435][T14877] Tainted: [L]=SOFTLOCKUP [ 272.914439][T14877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.914446][T14877] Call Trace: [ 272.914450][T14877] [ 272.914454][T14877] dump_stack_lvl+0x100/0x190 [ 272.914472][T14877] should_fail_ex.cold+0x5/0xa [ 272.914488][T14877] _copy_from_user+0x2e/0xd0 [ 272.914506][T14877] copy_msghdr_from_user+0x9f/0x4c0 [ 272.914521][T14877] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 272.914539][T14877] ? __pfx_trace_clock_local+0x10/0x10 [ 272.914552][T14877] ___sys_sendmsg+0x106/0x1e0 [ 272.914567][T14877] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.914587][T14877] ? find_held_lock+0x2b/0x80 [ 272.914608][T14877] __sys_sendmsg+0x160/0x210 [ 272.914619][T14877] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.914637][T14877] do_syscall_64+0x123/0x790 [ 272.914650][T14877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.914662][T14877] RIP: 0033:0x7f2451d9e0d9 [ 272.914671][T14877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.914682][T14877] RSP: 002b:00007f2452d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.914694][T14877] RAX: ffffffffffffffda RBX: 00007f2452025fa0 RCX: 00007f2451d9e0d9 [ 272.914701][T14877] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.914708][T14877] RBP: 00007f2452d18090 R08: 0000000000000000 R09: 0000000000000000 [ 272.914714][T14877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.914720][T14877] R13: 00007f2452026038 R14: 00007f2452025fa0 R15: 00007fff74fe1628 [ 272.914734][T14877] [ 272.989130][ T42] kauditd_printk_skb: 359 callbacks suppressed [ 272.989142][ T42] audit: type=1800 audit(1787569466.421:4162): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 273.021749][ T42] audit: type=1800 audit(1787569466.451:4163): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 273.057486][ T42] audit: type=1800 audit(1787569466.491:4164): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 273.073410][ T1478] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 273.095988][ T1478] usb 8-1: device descriptor read/8, error -71 [ 273.100942][ T42] audit: type=1800 audit(1787569466.531:4165): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 273.213628][ T1478] usb usb8-port1: unable to enumerate USB device [ 273.242731][ T42] audit: type=1800 audit(1787569466.671:4166): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 273.533368][ T1478] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 273.684288][ T1478] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 273.688160][ T1478] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.694722][ T42] audit: type=1800 audit(1787569467.131:4167): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206124 res=0 errno=0 [ 273.700985][ T42] audit: type=1800 audit(1787569467.131:4168): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=206153 res=0 errno=0 [ 273.707810][ T42] audit: type=1800 audit(1787569467.131:4169): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206131 res=0 errno=0 [ 273.714300][ T42] audit: type=1800 audit(1787569467.131:4170): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206132 res=0 errno=0 [ 273.720580][ T42] audit: type=1800 audit(1787569467.131:4171): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206133 res=0 errno=0 [ 273.980765][T14892] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3092'. [ 274.590006][T14901] nvme_fabrics: unknown parameter or missing value 'ho%t_traddr=nn-0x1111111111111111:pn-0x2222222222222222' in ctrl creation request [ 274.785864][T14908] openvswitch: netlink: IP tunnel TTL not specified. [ 274.892748][T14915] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3101'. [ 274.928624][T14921] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.576113][T14933] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.3108'. [ 275.579850][T14933] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.3108'. [ 275.949773][T14954] overlayfs: conflicting lowerdir path [ 276.094816][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3120'. [ 276.098167][T14963] xt_l2tp: v2 doesn't support IP mode [ 276.100842][T14965] syzkaller0: entered promiscuous mode [ 276.103222][T14965] syzkaller0: entered allmulticast mode [ 276.107896][T14965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3120'. [ 276.275865][ T24] usb 10-1: USB disconnect, device number 5 [ 276.288220][T14983] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3127'. [ 276.293104][T14983] SELinux: policydb string length -1426063352 does not match expected length 8 [ 276.304368][T14983] SELinux: failed to load policy [ 276.308467][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3127'. [ 276.391074][T14990] smbdirect: ib_dev[syz0] renamed to [syz2] [ 276.405115][T14990] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 276.463688][ T1478] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 276.634075][ T1478] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.638798][ T1478] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.642425][ T1478] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.646110][ T1478] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.655294][ T1478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.658504][ T1478] usb 7-1: Product: syz [ 276.659947][ T1478] usb 7-1: Manufacturer: syz [ 276.661620][ T1478] usb 7-1: SerialNumber: syz [ 276.726445][T15018] __nla_validate_parse: 3 callbacks suppressed [ 276.726458][T15018] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3138'. [ 277.571750][T15039] FAULT_INJECTION: forcing a failure. [ 277.571750][T15039] name failslab, interval 1, probability 0, space 0, times 0 [ 277.576004][T15039] CPU: 2 UID: 0 PID: 15039 Comm: syz.3.3146 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.576022][T15039] Tainted: [L]=SOFTLOCKUP [ 277.576026][T15039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.576033][T15039] Call Trace: [ 277.576037][T15039] [ 277.576042][T15039] dump_stack_lvl+0x100/0x190 [ 277.576070][T15039] should_fail_ex.cold+0x5/0xa [ 277.576085][T15039] should_failslab+0xc2/0x120 [ 277.576107][T15039] __kmalloc_cache_noprof+0x91/0x6b0 [ 277.576121][T15039] ? __configfs_open_file+0xcb/0x9c0 [ 277.576135][T15039] __configfs_open_file+0xcb/0x9c0 [ 277.576150][T15039] do_dentry_open+0x6ab/0x14d0 [ 277.576165][T15039] ? __pfx_configfs_open_file+0x10/0x10 [ 277.576180][T15039] vfs_open+0x82/0x3f0 [ 277.576191][T15039] path_openat+0x19fa/0x2440 [ 277.576210][T15039] ? __pfx_path_openat+0x10/0x10 [ 277.576230][T15039] do_file_open+0x20e/0x430 [ 277.576247][T15039] ? __pfx_do_file_open+0x10/0x10 [ 277.576272][T15039] ? _raw_spin_unlock+0x28/0x50 [ 277.576293][T15039] ? alloc_fd+0x471/0x7a0 [ 277.576313][T15039] do_sys_openat2+0x10f/0x1e0 [ 277.576324][T15039] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.576335][T15039] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 277.576352][T15039] __x64_sys_openat+0x12d/0x210 [ 277.576363][T15039] ? __pfx___x64_sys_openat+0x10/0x10 [ 277.576375][T15039] ? find_held_lock+0x2b/0x80 [ 277.576394][T15039] ? trace_syscall_enter+0xd6/0x100 [ 277.576415][T15039] do_syscall_64+0x123/0x790 [ 277.576434][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.576452][T15039] RIP: 0033:0x7f526459e0d9 [ 277.576467][T15039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.576482][T15039] RSP: 002b:00007f5265486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.576499][T15039] RAX: ffffffffffffffda RBX: 00007f5264825fa0 RCX: 00007f526459e0d9 [ 277.576510][T15039] RDX: 0000000000000001 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 277.576520][T15039] RBP: 00007f5265486090 R08: 0000000000000000 R09: 0000000000000000 [ 277.576530][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.576540][T15039] R13: 00007f5264826038 R14: 00007f5264825fa0 R15: 00007ffeaa4e6cb8 [ 277.576563][T15039] [ 277.857198][T15056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.922656][T15058] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3152'. [ 278.007632][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 278.007647][ T42] audit: type=1800 audit(1787569471.441:4254): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.033041][ T42] audit: type=1800 audit(1787569471.461:4255): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.069088][ T42] audit: type=1800 audit(1787569471.501:4256): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 278.111137][ T42] audit: type=1800 audit(1787569471.541:4257): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.136485][ T42] audit: type=1800 audit(1787569471.571:4258): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.146504][ T42] audit: type=1800 audit(1787569471.581:4259): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 278.191533][ T42] audit: type=1800 audit(1787569471.621:4260): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.200244][ T42] audit: type=1800 audit(1787569471.631:4261): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3159" name="control" dev="sysfs" ino=5235 res=0 errno=0 [ 278.227140][ T42] audit: type=1800 audit(1787569471.661:4262): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 278.265961][T15077] smpboot: CPU 1 is now offline [ 278.313035][ T42] audit: type=1800 audit(1787569471.741:4263): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761 res=0 errno=0 [ 278.321744][T15083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 278.346607][T15077] smpboot: CPU 3 is now offline [ 279.236248][ T5877] usb 7-1: USB disconnect, device number 25 [ 279.387827][T15097] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 279.616415][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3170'. [ 279.680444][T15112] No source specified [ 279.691153][T15107] syzkaller0: entered promiscuous mode [ 279.710104][T15107] syzkaller0: entered allmulticast mode [ 279.731408][T15113] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3170'. [ 279.772833][T15116] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3173'. [ 280.125091][ T5877] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 280.273876][ T5877] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.282580][ T5877] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.291602][ T5877] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.306030][ T5877] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.314774][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.317823][ T5877] usb 8-1: Product: syz [ 280.319102][ T5877] usb 8-1: Manufacturer: syz [ 280.320616][ T5877] usb 8-1: SerialNumber: syz [ 282.055067][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3180'. [ 282.694911][T15167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3189'. [ 282.859910][ T1478] usb 8-1: USB disconnect, device number 39 [ 283.023156][ T42] kauditd_printk_skb: 227 callbacks suppressed [ 283.023188][ T42] audit: type=1400 audit(1787569476.451:4491): avc: denied { read write } for pid=15186 comm="syz.2.3198" name="video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 283.044356][ T42] audit: type=1400 audit(1787569476.471:4492): avc: denied { open } for pid=15186 comm="syz.2.3198" path="/dev/video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 283.058546][ T42] audit: type=1400 audit(1787569476.471:4493): avc: denied { ioctl } for pid=15186 comm="syz.2.3198" path="/dev/video7" dev="devtmpfs" ino=973 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 283.073166][ T42] audit: type=1800 audit(1787569476.481:4494): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 283.086429][ T42] audit: type=1800 audit(1787569476.511:4495): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 283.112420][ T42] audit: type=1800 audit(1787569476.541:4496): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 283.132982][ T42] audit: type=1800 audit(1787569476.561:4497): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 283.150802][ T42] audit: type=1800 audit(1787569476.581:4498): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 283.173149][T15193] nvme_fabrics: unknown parameter or missing value 'hodt_traddr=nn-0x1111111111111111:pn-0x2222222222222222' in ctrl creation request [ 283.178821][ T42] audit: type=1400 audit(1787569476.601:4499): avc: denied { write } for pid=15192 comm="syz.5.3201" name="nvme-fabrics" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.193373][ T42] audit: type=1400 audit(1787569476.621:4500): avc: denied { perfmon } for pid=15195 comm="syz.2.3202" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.352880][T15205] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 283.414304][T15205] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 283.510510][ T229] IPVS: starting estimator thread 0... [ 283.589801][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 283.599399][T15226] sctp: [Deprecated]: syz.5.3215 (pid 15226) Use of int in maxseg socket option. [ 283.599399][T15226] Use struct sctp_assoc_value instead [ 283.603450][T15218] IPVS: using max 23 ests per chain, 55200 per kthread [ 283.698732][T15232] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3217'. [ 283.993972][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 283.999972][T15254] fuse: Bad value for 'fd' [ 284.124531][ T34] usb 10-1: device descriptor read/64, error -71 [ 284.175680][T15263] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3230'. [ 284.223836][T15265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3231'. [ 284.383465][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 284.473986][T15271] usb 2-1: reset high-speed USB device number 2 using ehci-pci [ 284.513497][ T34] usb 10-1: device descriptor read/64, error -71 [ 284.625306][ T34] usb usb10-port1: attempt power cycle [ 284.701312][T15277] syzkaller0: left promiscuous mode [ 284.703044][T15277] syzkaller0: left allmulticast mode [ 284.767352][T15281] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 284.772048][T15282] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 284.868096][T15270] usb 2-1: reset high-speed USB device number 2 using ehci-pci [ 284.973772][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 284.988136][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'. [ 284.994973][ T34] usb 10-1: device descriptor read/8, error -71 [ 285.050522][T15291] random: crng reseeded on system resumption [ 285.180246][T15298] smpboot: CPU 1 is now offline [ 285.207469][T15298] smpboot: CPU 3 is now offline [ 285.224310][T15300] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 285.252444][T15300] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 285.263437][ T34] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 285.294055][ T34] usb 10-1: device descriptor read/8, error -71 [ 285.340710][T15302] smpboot: CPU 1 is now offline [ 285.364292][T15302] smpboot: CPU 3 is now offline [ 285.377995][T15305] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 285.402898][T15305] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 285.417345][ T34] usb usb10-port1: unable to enumerate USB device [ 285.465695][T15309] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 285.518031][T15307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.528236][T15307] x_tables: duplicate underflow at hook 3 [ 285.536893][T15307] tmpfs: Unknown parameter 'mpo{' [ 285.539503][T15307] fuse: Unknown parameter 'ˆd' [ 285.706082][T15328] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3252'. [ 285.751277][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3253'. [ 285.754832][T15330] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 285.937911][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3256'. [ 286.140730][T15344] smpboot: CPU 1 is now offline [ 286.158937][T15344] smpboot: CPU 3 is now offline [ 286.167980][T15344] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 286.193350][T15344] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 286.257500][T15351] qrtr: Invalid version 0 [ 286.259752][T15351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=15351 comm=syz.4.3261 [ 286.613211][T15370] FAULT_INJECTION: forcing a failure. [ 286.613211][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 286.617523][T15370] CPU: 2 UID: 0 PID: 15370 Comm: syz.2.3268 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.617541][T15370] Tainted: [L]=SOFTLOCKUP [ 286.617544][T15370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.617551][T15370] Call Trace: [ 286.617555][T15370] [ 286.617560][T15370] dump_stack_lvl+0x100/0x190 [ 286.617580][T15370] should_fail_ex.cold+0x5/0xa [ 286.617593][T15370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 286.617608][T15370] should_failslab+0xc2/0x120 [ 286.617625][T15370] kmem_cache_alloc_noprof+0x91/0x6a0 [ 286.617641][T15370] ? skb_clone+0x190/0x400 [ 286.617662][T15370] skb_clone+0x190/0x400 [ 286.617673][T15370] netlink_deliver_tap+0xaed/0xcc0 [ 286.617692][T15370] netlink_unicast+0x62b/0x850 [ 286.617710][T15370] ? __pfx_netlink_unicast+0x10/0x10 [ 286.617730][T15370] netlink_sendmsg+0x8b0/0xda0 [ 286.617749][T15370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.617769][T15370] ? selinux_socket_sendmsg+0x198/0x2f0 [ 286.617788][T15370] ____sys_sendmsg+0xa4d/0xbe0 [ 286.617801][T15370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.617818][T15370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.617835][T15370] ? __pfx_trace_clock_local+0x10/0x10 [ 286.617848][T15370] ___sys_sendmsg+0x190/0x1e0 [ 286.617864][T15370] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.617885][T15370] ? find_held_lock+0x2b/0x80 [ 286.617906][T15370] __sys_sendmsg+0x160/0x210 [ 286.617918][T15370] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.617936][T15370] do_syscall_64+0x123/0x790 [ 286.617949][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.617961][T15370] RIP: 0033:0x7f2451d9e0d9 [ 286.617970][T15370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.617981][T15370] RSP: 002b:00007f2452d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.617993][T15370] RAX: ffffffffffffffda RBX: 00007f2452025fa0 RCX: 00007f2451d9e0d9 [ 286.618000][T15370] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 286.618007][T15370] RBP: 00007f2452d18090 R08: 0000000000000000 R09: 0000000000000000 [ 286.618014][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.618020][T15370] R13: 00007f2452026038 R14: 00007f2452025fa0 R15: 00007fff74fe1628 [ 286.618034][T15370] [ 286.720692][T15373] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 286.869566][T15381] program syz.2.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.878822][T15384] kvm: emulating exchange as write [ 286.932448][T15395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15395 comm=syz.2.3274 [ 286.981766][T15398] fuse: fd is not a fuse device [ 287.137193][T15411] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 287.140530][T15411] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 287.216797][T15413] __nla_validate_parse: 3 callbacks suppressed [ 287.216809][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'. [ 287.293982][T15417] nvme_fabrics: unknown parameter or missing value 'hoot_traddr=nn-0x1111111111111111:pn-0x2222222222222222' in ctrl creation request [ 287.323402][ T41] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 287.494224][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.498638][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.501736][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.506201][ T41] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.512283][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.515737][ T41] usb 8-1: Product: syz [ 287.517055][ T41] usb 8-1: Manufacturer: syz [ 287.518553][ T41] usb 8-1: SerialNumber: syz [ 287.741934][T15439] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 287.746302][T15439] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 287.951868][T15455] ima: rule for LSM 'u' is undefined [ 287.957925][T15455] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 287.977374][T15454] ima: policy update completed [ 288.034968][ T42] kauditd_printk_skb: 287 callbacks suppressed [ 288.034980][ T42] audit: type=1800 audit(1787569481.471:4788): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 288.041821][T15463] netlink: 'syz.2.3303': attribute type 322 has an invalid length. [ 288.051555][ T42] audit: type=1400 audit(1787569481.481:4789): avc: denied { map } for pid=15464 comm="syz.5.3304" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.071267][ T42] audit: type=1800 audit(1787569481.501:4790): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 288.112105][ T42] audit: type=1800 audit(1787569481.541:4791): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 288.126081][ T42] audit: type=1800 audit(1787569481.561:4792): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 288.157504][ T42] audit: type=1800 audit(1787569481.591:4793): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 288.174519][ T42] audit: type=1800 audit(1787569481.611:4794): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 288.211472][ T42] audit: type=1800 audit(1787569481.641:4795): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 288.226093][ T42] audit: type=1800 audit(1787569481.661:4796): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 288.236725][ T42] audit: type=1400 audit(1787569481.671:4797): avc: denied { setopt } for pid=15478 comm="syz.2.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.266747][T15483] FAULT_INJECTION: forcing a failure. [ 288.266747][T15483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.270654][T15483] CPU: 1 UID: 0 PID: 15483 Comm: syz.5.3312 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.270672][T15483] Tainted: [L]=SOFTLOCKUP [ 288.270676][T15483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.270682][T15483] Call Trace: [ 288.270687][T15483] [ 288.270692][T15483] dump_stack_lvl+0x100/0x190 [ 288.270721][T15483] should_fail_ex.cold+0x5/0xa [ 288.270736][T15483] _copy_from_user+0x2e/0xd0 [ 288.270757][T15483] copy_msghdr_from_user+0x9f/0x4c0 [ 288.270776][T15483] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.270794][T15483] ? __pfx_trace_clock_local+0x10/0x10 [ 288.270807][T15483] ___sys_sendmsg+0x106/0x1e0 [ 288.270822][T15483] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.270843][T15483] ? find_held_lock+0x2b/0x80 [ 288.270863][T15483] __sys_sendmsg+0x160/0x210 [ 288.270878][T15483] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.270895][T15483] do_syscall_64+0x123/0x790 [ 288.270912][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.270924][T15483] RIP: 0033:0x7f8c89b9e0d9 [ 288.270934][T15483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.270945][T15483] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.270957][T15483] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 288.270965][T15483] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 288.270971][T15483] RBP: 00007f8c87df6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.270978][T15483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.270984][T15483] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 288.270998][T15483] [ 288.570657][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3317'. [ 288.623757][T15499] syz.5.3318: attempt to access beyond end of device [ 288.623757][T15499] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 288.628126][T15499] gfs2: error -5 reading superblock [ 288.685497][ T1478] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 288.844027][ T1478] usb 7-1: Using ep0 maxpacket: 32 [ 288.866713][ T1478] usb 7-1: unable to get BOS descriptor or descriptor too short [ 288.869835][ T1478] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 288.877730][ T1478] usb 7-1: string descriptor 0 read error: -22 [ 288.880407][ T1478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.989011][T15518] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3325'. [ 289.039356][T15521] /dev/sg0: Can't lookup blockdev [ 289.076797][T15523] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 289.230865][T15530] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3330'. [ 289.400505][T15542] FAULT_INJECTION: forcing a failure. [ 289.400505][T15542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.406679][T15542] CPU: 2 UID: 0 PID: 15542 Comm: syz.5.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.406698][T15542] Tainted: [L]=SOFTLOCKUP [ 289.406702][T15542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.406708][T15542] Call Trace: [ 289.406712][T15542] [ 289.406716][T15542] dump_stack_lvl+0x100/0x190 [ 289.406736][T15542] should_fail_ex.cold+0x5/0xa [ 289.406752][T15542] _copy_from_user+0x2e/0xd0 [ 289.406770][T15542] gsmld_ioctl+0x196/0x15c0 [ 289.406786][T15542] ? kasan_quarantine_put+0x104/0x240 [ 289.406801][T15542] ? __pfx_gsmld_ioctl+0x10/0x10 [ 289.406823][T15542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.406841][T15542] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 289.406858][T15542] ? __pfx_gsmld_ioctl+0x10/0x10 [ 289.406871][T15542] tty_ioctl+0x11b4/0x1640 [ 289.406897][T15542] ? __pfx_tty_ioctl+0x10/0x10 [ 289.406907][T15542] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 289.406926][T15542] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.406952][T15542] ? selinux_file_ioctl+0x13b/0x290 [ 289.406968][T15542] ? selinux_file_ioctl+0xb6/0x290 [ 289.406985][T15542] ? __pfx_tty_ioctl+0x10/0x10 [ 289.406996][T15542] __x64_sys_ioctl+0x18e/0x210 [ 289.407011][T15542] do_syscall_64+0x123/0x790 [ 289.407025][T15542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.407036][T15542] RIP: 0033:0x7f8c89b9e0d9 [ 289.407046][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.407056][T15542] RSP: 002b:00007f8c87df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.407068][T15542] RAX: ffffffffffffffda RBX: 00007f8c89e25fa0 RCX: 00007f8c89b9e0d9 [ 289.407076][T15542] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 289.407082][T15542] RBP: 00007f8c87df6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.407089][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.407095][T15542] R13: 00007f8c89e26038 R14: 00007f8c89e25fa0 R15: 00007ffd6a751908 [ 289.407109][T15542] [ 289.740979][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3340'. [ 289.780936][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 289.840448][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3343'. [ 289.990081][T15567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3345'. [ 290.076218][ T1159] Bluetooth: hci3: Frame reassembly failed (-84) [ 290.082607][ T34] usb 8-1: USB disconnect, device number 40 [ 290.139222][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3348'. [ 290.143547][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 290.276461][T15584] netlink: 'syz.3.3351': attribute type 4 has an invalid length. [ 290.589178][ T56] libceph: connect (1)[c::]:6789 error -101 [ 290.594413][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 290.596638][T15591] ceph: No mds server is up or the cluster is laggy [ 291.147150][T15598] smpboot: CPU 1 is now offline [ 291.192324][T15598] smpboot: CPU 3 is now offline [ 291.205999][T15599] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 291.219330][T15599] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 291.224714][T15589] ------------[ cut here ]------------ [ 291.226416][T15589] [ 291.226422][T15589] ====================================================== [ 291.226426][T15589] WARNING: possible circular locking dependency detected [ 291.226432][T15589] syzkaller #0 Tainted: G L [ 291.226438][T15589] ------------------------------------------------------ [ 291.226442][T15589] syz.3.3354/15589 is trying to acquire lock: [ 291.226448][T15589] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 291.226481][T15589] [ 291.226481][T15589] but task is already holding lock: [ 291.226485][T15589] ffff88806a63b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 291.226507][T15589] [ 291.226507][T15589] which lock already depends on the new lock. [ 291.226507][T15589] [ 291.226510][T15589] [ 291.226510][T15589] the existing dependency chain (in reverse order) is: [ 291.226514][T15589] [ 291.226514][T15589] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 291.226527][T15589] lock_acquire+0x1b9/0x370 [ 291.226542][T15589] _raw_spin_lock_nested+0x31/0x40 [ 291.226558][T15589] raw_spin_rq_lock_nested+0x2c/0x140 [ 291.226567][T15589] _task_rq_lock+0xcf/0x500 [ 291.226576][T15589] cgroup_move_task+0x81/0x320 [ 291.226589][T15589] css_set_move_task+0x285/0x600 [ 291.226598][T15589] cgroup_post_fork+0x1f9/0x9a0 [ 291.226613][T15589] copy_process+0x64da/0x8370 [ 291.226629][T15589] kernel_clone+0x176/0x9d0 [ 291.226637][T15589] rest_init+0xa3/0x2e0 [ 291.226649][T15589] start_kernel+0x48e/0x490 [ 291.226659][T15589] x86_64_start_reservations+0x24/0x30 [ 291.226672][T15589] x86_64_start_kernel+0x12b/0x130 [ 291.226683][T15589] common_startup_64+0x13e/0x158 [ 291.226694][T15589] [ 291.226694][T15589] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 291.226707][T15589] lock_acquire+0x1b9/0x370 [ 291.226721][T15589] _raw_spin_lock_irq_disable+0x5e/0x90 [ 291.226737][T15589] try_to_wake_up+0xc1/0x1c90 [ 291.226745][T15589] __queue_work+0x4a6/0x1370 [ 291.226757][T15589] queue_work_on+0x1a9/0x1e0 [ 291.226770][T15589] rpm_suspend+0xf6b/0x1220 [ 291.226781][T15589] rpm_idle+0x60c/0x790 [ 291.226791][T15589] __pm_runtime_idle+0xba/0x1a0 [ 291.226801][T15589] __device_attach+0x37e/0x4d0 [ 291.226811][T15589] device_initial_probe+0xaf/0xd0 [ 291.226821][T15589] bus_probe_device+0x64/0x160 [ 291.226835][T15589] device_add+0x121d/0x1970 [ 291.226847][T15589] serial_base_port_add+0x227/0x2b0 [ 291.226858][T15589] serial_core_register_port+0x13c/0x16f0 [ 291.226868][T15589] serial8250_register_8250_port+0x15af/0x2330 [ 291.226882][T15589] serial_pnp_probe+0x436/0x930 [ 291.226896][T15589] pnp_device_probe+0x2b3/0x4a0 [ 291.226906][T15589] really_probe+0x241/0xa60 [ 291.226915][T15589] __driver_probe_device+0x210/0x460 [ 291.226925][T15589] driver_probe_device+0x4a/0x140 [ 291.226934][T15589] __driver_attach+0x21f/0x5b0 [ 291.226944][T15589] bus_for_each_dev+0x13e/0x1d0 [ 291.226957][T15589] bus_add_driver+0x305/0x5b0 [ 291.226972][T15589] driver_register+0x1e2/0x360 [ 291.226983][T15589] serial8250_init+0xcc/0x1c0 [ 291.226992][T15589] do_one_initcall+0x11c/0x6f0 [ 291.227002][T15589] kernel_init_freeable+0x6ea/0x7b0 [ 291.227012][T15589] kernel_init+0x21/0x1e0 [ 291.227025][T15589] ret_from_fork+0x730/0xd60 [ 291.227040][T15589] ret_from_fork_asm+0x1a/0x30 [ 291.227049][T15589] [ 291.227049][T15589] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 291.227062][T15589] lock_acquire+0x1b9/0x370 [ 291.227076][T15589] _raw_spin_lock_irqsave+0x3a/0x60 [ 291.227091][T15589] __pm_runtime_resume+0xa9/0x170 [ 291.227102][T15589] __uart_start+0x1b0/0x510 [ 291.227115][T15589] uart_write+0x211/0xb20 [ 291.227123][T15589] n_tty_write+0x431/0x1160 [ 291.227135][T15589] file_tty_write.isra.0+0x4d2/0x890 [ 291.227144][T15589] redirected_tty_write+0xd4/0x120 [ 291.227153][T15589] vfs_write+0x6af/0x1050 [ 291.227164][T15589] ksys_write+0x12a/0x250 [ 291.227176][T15589] do_syscall_64+0x123/0x790 [ 291.227186][T15589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.227196][T15589] [ 291.227196][T15589] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 291.227209][T15589] lock_acquire+0x1b9/0x370 [ 291.227223][T15589] _raw_spin_lock_irqsave+0x3a/0x60 [ 291.227239][T15589] serial8250_console_write+0x177/0x1a50 [ 291.227251][T15589] console_flush_one_record+0x78e/0xf10 [ 291.227262][T15589] console_unlock+0x103/0x260 [ 291.227272][T15589] vprintk_emit+0x407/0x6b0 [ 291.227282][T15589] _printk+0xcf/0x110 [ 291.227291][T15589] register_console.cold+0xc0/0x248 [ 291.227301][T15589] univ8250_console_init+0x6f/0x80 [ 291.227310][T15589] console_init+0x3d5/0x5b0 [ 291.227323][T15589] start_kernel+0x314/0x490 [ 291.227333][T15589] x86_64_start_reservations+0x24/0x30 [ 291.227344][T15589] x86_64_start_kernel+0x12b/0x130 [ 291.227355][T15589] common_startup_64+0x13e/0x158 [ 291.227366][T15589] [ 291.227366][T15589] -> #0 (console_owner){-.-.}-{0:0}: [ 291.227379][T15589] check_prev_add+0xeb/0xe60 [ 291.227393][T15589] __lock_acquire+0x1492/0x1ec0 [ 291.227407][T15589] lock_acquire+0x1b9/0x370 [ 291.227422][T15589] console_lock_spinning_enable+0x72/0x80 [ 291.227432][T15589] console_flush_one_record+0x737/0xf10 [ 291.227443][T15589] console_unlock+0x103/0x260 [ 291.227453][T15589] vprintk_emit+0x407/0x6b0 [ 291.227468][T15589] _printk+0xcf/0x110 [ 291.227476][T15589] __report_bug.cold+0x34/0x141 [ 291.227489][T15589] report_bug+0xb3/0x220 [ 291.227498][T15589] handle_bug+0x16a/0x2a0 [ 291.227509][T15589] exc_invalid_op+0x17/0x50 [ 291.227521][T15589] asm_exc_invalid_op+0x1a/0x20 [ 291.227530][T15589] update_rq_clock+0x40a/0xd20 [ 291.227540][T15589] __schedule+0x1c69/0x6920 [ 291.227555][T15589] preempt_schedule_irq+0x4e/0x90 [ 291.227564][T15589] irqentry_exit+0x205/0xa10 [ 291.227574][T15589] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.227585][T15589] irqentry_exit+0x35c/0xa10 [ 291.227595][T15589] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.227605][T15589] [ 291.227605][T15589] other info that might help us debug this: [ 291.227605][T15589] [ 291.227609][T15589] Chain exists of: [ 291.227609][T15589] console_owner --> &p->pi_lock --> &rq->__lock [ 291.227609][T15589] [ 291.227624][T15589] Possible unsafe locking scenario: [ 291.227624][T15589] [ 291.227627][T15589] CPU0 CPU1 [ 291.227630][T15589] ---- ---- [ 291.227633][T15589] lock(&rq->__lock); [ 291.227639][T15589] lock(&p->pi_lock); [ 291.227646][T15589] lock(&rq->__lock); [ 291.227653][T15589] lock(console_owner); [ 291.227659][T15589] [ 291.227659][T15589] *** DEADLOCK *** [ 291.227659][T15589] [ 291.227662][T15589] locks held by syz.3.3354/15589: 3, last CPU#2: [ 291.227670][T15589] #0: ffff88806a63b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 291.227692][T15589] #1: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 291.227714][T15589] #2: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 291.227739][T15589] [ 291.227739][T15589] stack backtrace: [ 291.227746][T15589] CPU: 2 UID: 0 PID: 15589 Comm: syz.3.3354 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.227760][T15589] Tainted: [L]=SOFTLOCKUP [ 291.227764][T15589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.227771][T15589] Call Trace: [ 291.227775][T15589] [ 291.227779][T15589] dump_stack_lvl+0x100/0x190 [ 291.227793][T15589] print_circular_bug.cold+0x178/0x1be [ 291.227810][T15589] check_noncircular+0x146/0x160 [ 291.227826][T15589] check_prev_add+0xeb/0xe60 [ 291.227841][T15589] __lock_acquire+0x1492/0x1ec0 [ 291.227859][T15589] lock_acquire+0x1b9/0x370 [ 291.227874][T15589] ? console_lock_spinning_enable+0x61/0x80 [ 291.227885][T15589] ? console_lock_spinning_enable+0x4a/0x80 [ 291.227898][T15589] console_lock_spinning_enable+0x72/0x80 [ 291.227909][T15589] ? console_lock_spinning_enable+0x61/0x80 [ 291.227920][T15589] console_flush_one_record+0x737/0xf10 [ 291.227933][T15589] ? __pfx_console_flush_one_record+0x10/0x10 [ 291.227947][T15589] ? is_printk_cpu_sync_owner+0x32/0x40 [ 291.227962][T15589] console_unlock+0x103/0x260 [ 291.227973][T15589] ? __pfx_console_unlock+0x10/0x10 [ 291.227985][T15589] ? do_raw_spin_unlock+0x145/0x1e0 [ 291.227996][T15589] ? _printk+0xcf/0x110 [ 291.228006][T15589] vprintk_emit+0x407/0x6b0 [ 291.228018][T15589] ? __pfx_vprintk_emit+0x10/0x10 [ 291.228031][T15589] ? lock_acquire+0x1b9/0x370 [ 291.228046][T15589] _printk+0xcf/0x110 [ 291.228056][T15589] ? __pfx__printk+0x10/0x10 [ 291.228066][T15589] ? __lock_acquire+0x4c5/0x1ec0 [ 291.228082][T15589] ? __report_bug.cold+0x24/0x141 [ 291.228096][T15589] __report_bug.cold+0x34/0x141 [ 291.228108][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.228119][T15589] ? __pfx___report_bug+0x10/0x10 [ 291.228129][T15589] ? __might_fault+0xc5/0x140 [ 291.228141][T15589] ? __fpu_restore_sig+0x60b/0x13b0 [ 291.228155][T15589] ? __local_bh_enable_ip+0xa5/0x120 [ 291.228171][T15589] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.228182][T15589] ? __local_bh_enable_ip+0xa5/0x120 [ 291.228198][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.228209][T15589] report_bug+0xb3/0x220 [ 291.228219][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.228229][T15589] handle_bug+0x16a/0x2a0 [ 291.228241][T15589] exc_invalid_op+0x17/0x50 [ 291.228253][T15589] asm_exc_invalid_op+0x1a/0x20 [ 291.228263][T15589] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 291.228274][T15589] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 291.228285][T15589] RSP: 0000:ffffc9000364fc48 EFLAGS: 00010046 [ 291.228293][T15589] RAX: 0000000000000000 RBX: ffff88806a73b900 RCX: 0000000000000001 [ 291.228300][T15589] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 291.228307][T15589] RBP: ffffc9000364fde8 R08: 0000000000000001 R09: 0000000000000001 [ 291.228313][T15589] R10: ffff88806a63c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 291.228320][T15589] R13: ffff88806a73c7e0 R14: ffff88806a73b900 R15: 0000000000000003 [ 291.228329][T15589] ? update_rq_clock+0x9c/0xd20 [ 291.228340][T15589] __schedule+0x1c69/0x6920 [ 291.228359][T15589] ? __pfx___schedule+0x10/0x10 [ 291.228375][T15589] ? __lock_acquire+0x4c5/0x1ec0 [ 291.228391][T15589] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 291.228404][T15589] ? rcu_is_watching+0x13/0xc0 [ 291.228416][T15589] preempt_schedule_irq+0x4e/0x90 [ 291.228426][T15589] irqentry_exit+0x205/0xa10 [ 291.228437][T15589] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.228449][T15589] RIP: 0010:irqentry_exit+0x35c/0xa10 [ 291.228463][T15589] Code: 89 e8 25 30 10 00 00 48 3d 00 10 00 00 0f 84 19 02 00 00 41 f7 c5 37 03 00 00 0f 84 64 02 00 00 e8 e9 68 4c f6 fb 41 f6 c5 30 <74> 21 66 90 41 0f b7 84 24 68 16 00 00 41 22 84 24 52 16 00 00 66 [ 291.228473][T15589] RSP: 0000:ffffc9000364ff00 EFLAGS: 00000202 [ 291.228481][T15589] RAX: 0000000000020043 RBX: ffffc9000364ff48 RCX: 0000000000000000 [ 291.228487][T15589] RDX: 0000000000000000 RSI: ffffffff8e3d3fc0 RDI: ffffffff8c615f80 [ 291.228494][T15589] RBP: ffffc9000364ff38 R08: 0000000000000001 R09: 0000000000000000 [ 291.228500][T15589] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888036c88000 [ 291.228507][T15589] R13: 0000000000000010 R14: 0000000000000000 R15: 0000000000000000 [ 291.228517][T15589] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.228528][T15589] RIP: 0033:0x7f52644517a0 [ 291.228537][T15589] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b [ 291.228546][T15589] RSP: 002b:00007ffeaa4e6d48 EFLAGS: 00000246 [ 291.228554][T15589] RAX: ffffffff81cc2dc0 RBX: ffffffff81cc30dc RCX: ffffffff81cc2dc0 [ 291.228561][T15589] RDX: ffffffff81cc30dc RSI: ffffffff81cc30dc RDI: 000000000000000e [ 291.228567][T15589] RBP: 0000000000000000 R08: 00007f5264810000 R09: 00007f5264812000 [ 291.228574][T15589] R10: 0000000081cc2dc4 R11: 000000000000000e R12: 00007f5264826038 [ 291.228580][T15589] R13: 0000000000059722 R14: ffffffff81cc30dc R15: 00007f5265355720 [ 291.228587][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.228604][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.228620][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.228636][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.228652][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.228667][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.228684][T15589] [ 291.604958][T15589] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 291.604968][T15589] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#2: syz.3.3354/15589 [ 291.610175][T15589] Modules linked in: [ 291.611381][T15589] CPU: 2 UID: 0 PID: 15589 Comm: syz.3.3354 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.614636][T15589] Tainted: [L]=SOFTLOCKUP [ 291.615951][T15589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.618990][T15589] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 291.620675][T15589] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 291.626356][T15589] RSP: 0000:ffffc9000364fc48 EFLAGS: 00010046 [ 291.628085][T15589] RAX: 0000000000000000 RBX: ffff88806a73b900 RCX: 0000000000000001 [ 291.630411][T15589] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 291.632807][T15589] RBP: ffffc9000364fde8 R08: 0000000000000001 R09: 0000000000000001 [ 291.635203][T15589] R10: ffff88806a63c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 291.637615][T15589] R13: ffff88806a73c7e0 R14: ffff88806a73b900 R15: 0000000000000003 [ 291.640002][T15589] FS: 0000555558f01500(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000 [ 291.642693][T15589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.644699][T15589] CR2: 000000110c4480cd CR3: 00000000643c0000 CR4: 0000000000352ef0 [ 291.647023][T15589] Call Trace: [ 291.648070][T15589] [ 291.648995][T15589] __schedule+0x1c69/0x6920 [ 291.650422][T15589] ? __pfx___schedule+0x10/0x10 [ 291.651933][T15589] ? __lock_acquire+0x4c5/0x1ec0 [ 291.653468][T15589] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 291.655324][T15589] ? rcu_is_watching+0x13/0xc0 [ 291.656827][T15589] preempt_schedule_irq+0x4e/0x90 [ 291.658432][T15589] irqentry_exit+0x205/0xa10 [ 291.659828][T15589] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.661762][T15589] RIP: 0010:irqentry_exit+0x35c/0xa10 [ 291.663356][T15589] Code: 89 e8 25 30 10 00 00 48 3d 00 10 00 00 0f 84 19 02 00 00 41 f7 c5 37 03 00 00 0f 84 64 02 00 00 e8 e9 68 4c f6 fb 41 f6 c5 30 <74> 21 66 90 41 0f b7 84 24 68 16 00 00 41 22 84 24 52 16 00 00 66 [ 291.668924][T15589] RSP: 0000:ffffc9000364ff00 EFLAGS: 00000202 [ 291.670660][T15589] RAX: 0000000000020043 RBX: ffffc9000364ff48 RCX: 0000000000000000 [ 291.672959][T15589] RDX: 0000000000000000 RSI: ffffffff8e3d3fc0 RDI: ffffffff8c615f80 [ 291.675249][T15589] RBP: ffffc9000364ff38 R08: 0000000000000001 R09: 0000000000000000 [ 291.677539][T15589] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888036c88000 [ 291.679921][T15589] R13: 0000000000000010 R14: 0000000000000000 R15: 0000000000000000 [ 291.682332][T15589] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.683993][T15589] RIP: 0033:0x7f52644517a0 [ 291.685378][T15589] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b [ 291.691040][T15589] RSP: 002b:00007ffeaa4e6d48 EFLAGS: 00000246 [ 291.692888][T15589] RAX: ffffffff81cc2dc0 RBX: ffffffff81cc30dc RCX: ffffffff81cc2dc0 [ 291.695280][T15589] RDX: ffffffff81cc30dc RSI: ffffffff81cc30dc RDI: 000000000000000e [ 291.697652][T15589] RBP: 0000000000000000 R08: 00007f5264810000 R09: 00007f5264812000 [ 291.699890][T15589] R10: 0000000081cc2dc4 R11: 000000000000000e R12: 00007f5264826038 [ 291.702297][T15589] R13: 0000000000059722 R14: ffffffff81cc30dc R15: 00007f5265355720 [ 291.704700][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.706284][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.707886][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.709768][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.711664][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.713632][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.715419][T15589] [ 291.716475][T15589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.718643][T15589] CPU: 2 UID: 0 PID: 15589 Comm: syz.3.3354 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.721802][T15589] Tainted: [L]=SOFTLOCKUP [ 291.723134][T15589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.726836][T15589] Call Trace: [ 291.727937][T15589] [ 291.728791][T15589] dump_stack_lvl+0x100/0x190 [ 291.730246][T15589] vpanic+0x553/0x970 [ 291.731487][T15589] ? __pfx_vpanic+0x10/0x10 [ 291.732897][T15589] ? lock_release+0x24d/0x310 [ 291.734374][T15589] panic+0xd1/0xe0 [ 291.735556][T15589] ? __pfx_panic+0x10/0x10 [ 291.736945][T15589] check_panic_on_warn.cold+0x19/0x34 [ 291.738603][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.740133][T15589] __warn.cold+0x191/0x318 [ 291.741522][T15589] __report_bug+0x30f/0x440 [ 291.742923][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.744447][T15589] ? __pfx___report_bug+0x10/0x10 [ 291.745999][T15589] ? __might_fault+0xc5/0x140 [ 291.747469][T15589] ? __fpu_restore_sig+0x60b/0x13b0 [ 291.749064][T15589] ? __local_bh_enable_ip+0xa5/0x120 [ 291.750691][T15589] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.752282][T15589] ? __local_bh_enable_ip+0xa5/0x120 [ 291.753809][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.755282][T15589] report_bug+0xb3/0x220 [ 291.756547][T15589] ? update_rq_clock+0x40a/0xd20 [ 291.758033][T15589] handle_bug+0x16a/0x2a0 [ 291.759334][T15589] exc_invalid_op+0x17/0x50 [ 291.760703][T15589] asm_exc_invalid_op+0x1a/0x20 [ 291.762109][T15589] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 291.763670][T15589] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 291.769112][T15589] RSP: 0000:ffffc9000364fc48 EFLAGS: 00010046 [ 291.770837][T15589] RAX: 0000000000000000 RBX: ffff88806a73b900 RCX: 0000000000000001 [ 291.773074][T15589] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 291.775317][T15589] RBP: ffffc9000364fde8 R08: 0000000000000001 R09: 0000000000000001 [ 291.777583][T15589] R10: ffff88806a63c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 291.779873][T15589] R13: ffff88806a73c7e0 R14: ffff88806a73b900 R15: 0000000000000003 [ 291.782150][T15589] ? update_rq_clock+0x9c/0xd20 [ 291.783569][T15589] __schedule+0x1c69/0x6920 [ 291.784894][T15589] ? __pfx___schedule+0x10/0x10 [ 291.786294][T15589] ? __lock_acquire+0x4c5/0x1ec0 [ 291.787751][T15589] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 291.789513][T15589] ? rcu_is_watching+0x13/0xc0 [ 291.790887][T15589] preempt_schedule_irq+0x4e/0x90 [ 291.792350][T15589] irqentry_exit+0x205/0xa10 [ 291.793966][T15589] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.795769][T15589] RIP: 0010:irqentry_exit+0x35c/0xa10 [ 291.797348][T15589] Code: 89 e8 25 30 10 00 00 48 3d 00 10 00 00 0f 84 19 02 00 00 41 f7 c5 37 03 00 00 0f 84 64 02 00 00 e8 e9 68 4c f6 fb 41 f6 c5 30 <74> 21 66 90 41 0f b7 84 24 68 16 00 00 41 22 84 24 52 16 00 00 66 [ 291.802721][T15589] RSP: 0000:ffffc9000364ff00 EFLAGS: 00000202 [ 291.804498][T15589] RAX: 0000000000020043 RBX: ffffc9000364ff48 RCX: 0000000000000000 [ 291.806725][T15589] RDX: 0000000000000000 RSI: ffffffff8e3d3fc0 RDI: ffffffff8c615f80 [ 291.808987][T15589] RBP: ffffc9000364ff38 R08: 0000000000000001 R09: 0000000000000000 [ 291.811235][T15589] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888036c88000 [ 291.814052][T15589] R13: 0000000000000010 R14: 0000000000000000 R15: 0000000000000000 [ 291.816459][T15589] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.818343][T15589] RIP: 0033:0x7f52644517a0 [ 291.819697][T15589] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b [ 291.825418][T15589] RSP: 002b:00007ffeaa4e6d48 EFLAGS: 00000246 [ 291.827202][T15589] RAX: ffffffff81cc2dc0 RBX: ffffffff81cc30dc RCX: ffffffff81cc2dc0 [ 291.829467][T15589] RDX: ffffffff81cc30dc RSI: ffffffff81cc30dc RDI: 000000000000000e [ 291.831756][T15589] RBP: 0000000000000000 R08: 00007f5264810000 R09: 00007f5264812000 [ 291.834082][T15589] R10: 0000000081cc2dc4 R11: 000000000000000e R12: 00007f5264826038 [ 291.836405][T15589] R13: 0000000000059722 R14: ffffffff81cc30dc R15: 00007f5265355720 [ 291.838747][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.840262][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.841806][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.843340][T15589] ? signal_setup_done+0x180/0x5c0 [ 291.844886][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.846414][T15589] ? signal_setup_done+0x49c/0x5c0 [ 291.847959][T15589] [ 291.849485][T15589] Kernel Offset: disabled [ 291.850777][T15589] Rebooting in 86400 seconds..